$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft File: XaOUHCfP5cI0xL8iHssqV5st6qs.mft (raw, json) Hash identifier: 27zNdz7b+48Tf9DvVQO2S8ro46Egdp9qxM/zs8qg20o= Subject key identifier: AB:3D:F2:34:C1:28:9E:C4:6E:E0:54:E7:13:EC:95:5A:65:CE:C8:AF Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab Certificate serial: 019673797E0ACAB2E698F0E61C7643506754 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft Manifest number: 1262 Signing time: Sat 26 Apr 2025 19:01:03 +0000 Manifest this update: Sat 26 Apr 2025 19:01:03 +0000 Manifest next update: Sun 27 Apr 2025 19:01:03 +0000 Files and hashes: 1: 0NDg7PSFqCtlOZYcAWca7yUfVmo.roa (hash: vxdlDismxivb7YjpnzIGBIMoDZ842tr8eSQHVdPZSK0=) 2: 44V-jFpveDwCvRSgY1bGyBKxKMg.roa (hash: SBBRS+535H/ER4FEKoyxl+HX5+uiiatZ4OyNmO8omfM=) 3: 6xMWEeYr9awMZ7yx3GEOzN5dhPY.roa (hash: i3EKCietWlgVwKiSYdpzAk0qUO8A42y+4Xa5mI7nNOE=) 4: 7uT6U1lLurQEaJor-cFGlwsDu_k.roa (hash: Ui1tug0NBabKJLVWvbF+wZA/W7tLCJHrULtI5KVfo4U=) 5: CJWoMIuHhVD-Efxrbw0jAFhbe-w.roa (hash: Kgwm9eLnChXzut1Wvo58jSxKdzv5IWvQsGfIpc5SNrY=) 6: GaPhNmCLCg6FDzOqGOsmTwzEr2s.roa (hash: s8h3O6KnSTgtqyfNfNsxD91VQjj/kAw0losU0p/2szw=) 7: SnJnvCbTNrEMF1kRlYnaQpP1-CM.roa (hash: M/883UPP+y+ETclB7OhwNjCUVOl1P7x38ODsI02JpL0=) 8: VwscqchdEAmsVSyV2eD8RGldRmQ.roa (hash: VdjKB9pG2pwAZNShYBPvCakHnXSVowEhPi3XTbCbuyI=) 9: XaOUHCfP5cI0xL8iHssqV5st6qs.crl (hash: /rbNIsO1RUJKCUZ/jTvG0VsMT7gkg9jeFekYzz+EU1w=) 10: YPXYjBAH_6CTa2PRzt8FUXSv0uc.roa (hash: 6zYw4RGhgL5oXoJxuJXImN5CehSpcJqIUUxqFJsp5EQ=) 11: bYPfKSp3uay7u1IBGQCfz9PB7s8.roa (hash: cQdCPGlvEZyuveyWWb2XndmUwLnId4QzQGpaXozykOM=) 12: fX9UYKZO6xd52hU0CG_6QfKAnlI.roa (hash: PeN61zex2Sw5DInmZiyUVF6K0j8DWMly0+OvVLBpOMI=) 13: hSWUv1huf0ZgdEoupOzoYiR-xRY.roa (hash: fUUm9WVh4RT1Bif3s0lLxfArOXO1kV1fWL5woYLGALo=) 14: kFVkpx97TB72EKQ4ruzAfgCkmLQ.roa (hash: 1FA9Vl6Gc5MRJ5uyClcUL5q5Uvzb9XvC2S9BIvyjxzc=) 15: u1fx_e153PBDwPgyvx0qhpf_7-c.roa (hash: rIfGEdBSwuolAjKZu/D3tV9dA5ieH7tsIwRBMyCCMhA=) 16: uAEY8yf0-OduNKClmzmQfAo_KIE.roa (hash: qEIbThjEj3GBtZEd/ntxaTMGkdBP7P2YKculyoqC1h8=) 17: vQBa0DHzLolz37NUtVTr3McGXdM.roa (hash: jEeBKTmQJb632hn3aeDSG3q3Hax58EZ7ZkfrXZDB5r0=) 18: zLLnY-dQIRtqYuPaqhFMWu0P24Q.roa (hash: NAwFEB8VGQ8kHJYhy4abt4dV8wltJt8R0PlTbgI+GD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 17:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:73:79:7e:0a:ca:b2:e6:98:f0:e6:1c:76:43:50:67:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab Validity Not Before: Apr 26 19:01:03 2025 GMT Not After : Apr 27 19:01:03 2025 GMT Subject: CN=ab3df234c1289ec46ee054e713ec955a65cec8af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3c:e5:4c:8b:e1:a1:23:de:76:38:6e:29:4b: a7:9a:6a:bc:bc:3d:c2:6b:7a:ae:b4:3f:08:fd:83: b5:12:7e:d7:3e:74:d3:76:3f:04:94:c2:93:46:b2: 93:42:7b:d0:75:39:f9:f6:59:e2:e3:ac:64:4d:5a: 4c:64:30:8e:e1:84:a5:ba:64:4e:a2:a2:95:78:de: 86:65:fc:95:20:be:e7:33:32:b5:4d:b7:ce:50:76: a4:6e:dd:40:81:30:2d:aa:7e:95:31:4d:30:83:ce: 76:43:a8:d8:69:70:92:4e:7d:45:74:7f:65:a5:25: db:4a:69:47:4e:39:0f:53:e0:2f:8e:79:18:40:35: e9:91:eb:29:47:08:72:01:f7:27:7a:91:f4:61:16: 4f:c7:99:74:9b:5c:35:86:37:08:74:55:9d:99:83: 97:d1:2d:30:7f:80:2c:9a:ca:bd:2f:22:46:93:4d: 4f:63:12:1a:7b:41:f3:91:c0:85:42:14:66:99:15: 95:d9:83:c5:93:f9:58:d5:5d:cc:db:29:10:2c:22: ca:91:cc:ad:af:84:18:71:a8:0a:16:3a:73:cc:ab: 16:84:a2:9f:da:2f:57:8f:36:b8:6b:a7:b5:7e:5d: 8b:f6:fa:a7:50:02:bb:13:9c:11:32:35:15:65:45: 9c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:3D:F2:34:C1:28:9E:C4:6E:E0:54:E7:13:EC:95:5A:65:CE:C8:AF X509v3 Authority Key Identifier: keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:af:4d:7e:e7:a7:11:75:d7:4a:8d:a1:6d:21:19:35:c7:b3: 02:ac:0f:e4:b9:9b:3e:f6:57:73:28:ce:db:3d:63:b5:a5:df: db:78:95:f7:06:18:ca:41:79:79:8b:8a:39:ac:bc:b0:b9:86: ac:6c:31:ec:83:19:f9:e9:5d:a9:e9:94:ba:73:b7:74:dc:39: 73:af:b9:aa:83:0d:05:3c:02:ce:bc:6c:f1:06:f2:50:74:10: d7:ed:25:a6:18:6c:e4:d0:64:d5:55:40:3d:1a:78:72:55:70: 4d:91:b7:7c:aa:59:da:c6:5b:b9:65:85:a2:9e:12:bc:00:94: b0:a8:64:18:ab:8e:56:82:48:31:e2:31:b1:95:1c:30:93:48: 0c:c4:7d:ec:c4:ff:90:d1:0b:e5:27:cf:1e:80:ca:b6:bc:11: c0:49:74:5e:b8:c3:68:37:4f:93:19:69:97:18:0a:72:0e:40: 41:7a:f6:e7:5f:37:6d:6f:d2:0c:3d:ac:ef:a7:5a:ef:93:51: a8:b0:10:c8:80:b8:4d:9b:0a:ef:d7:c0:d4:8b:8b:e5:ef:ab: 99:d8:c8:9c:74:95:f6:f4:63:0e:22:25:b0:b8:74:11:bb:f6: 11:fb:a1:f5:2c:7f:5a:ec:a3:44:3b:86:53:de:18:be:d0:af: bb:90:64:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZzeX4KyrLmmPDmHHZDUGdUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYTM5NDFjMjdjZmU1YzIzNGM0YmYyMjFlY2IyYTU3OWIy ZGVhYWIwHhcNMjUwNDI2MTkwMTAzWhcNMjUwNDI3MTkwMTAzWjAzMTEwLwYDVQQD EyhhYjNkZjIzNGMxMjg5ZWM0NmVlMDU0ZTcxM2VjOTU1YTY1Y2VjOGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzzlTIvhoSPedjhuKUunmmq8vD3C a3qutD8I/YO1En7XPnTTdj8ElMKTRrKTQnvQdTn59lni46xkTVpMZDCO4YSlumRO oqKVeN6GZfyVIL7nMzK1TbfOUHakbt1AgTAtqn6VMU0wg852Q6jYaXCSTn1FdH9l pSXbSmlHTjkPU+AvjnkYQDXpkespRwhyAfcnepH0YRZPx5l0m1w1hjcIdFWdmYOX 0S0wf4Asmsq9LyJGk01PYxIae0HzkcCFQhRmmRWV2YPFk/lY1V3M2ykQLCLKkcyt r4QYcagKFjpzzKsWhKKf2i9Xjza4a6e1fl2L9vqnUAK7E5wRMjUVZUWctwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKs98jTBKJ7EbuBU5xPslVplzsivMB8GA1UdIwQY MBaAFF2jlBwnz+XCNMS/Ih7LKlebLeqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEt ZjExYTM5ZjI2YzNiLzEvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEtZjExYTM5ZjI2YzNi LzEvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANa9Nfuen EXXXSo2hbSEZNcezAqwP5LmbPvZXcyjO2z1jtaXf23iV9wYYykF5eYuKOay8sLmG rGwx7IMZ+eldqemUunO3dNw5c6+5qoMNBTwCzrxs8QbyUHQQ1+0lphhs5NBk1VVA PRp4clVwTZG3fKpZ2sZbuWWFop4SvACUsKhkGKuOVoJIMeIxsZUcMJNIDMR97MT/ kNEL5SfPHoDKtrwRwEl0XrjDaDdPkxlplxgKcg5AQXr25183bW/SDD2s76da75NR qLAQyIC4TZsK79fA1IuL5e+rmdjInHSV9vRjDiIlsLh0Ebv2Efuh9Sx/WuyjRDuG U94YvtCvu5BkfQ== -----END CERTIFICATE-----Generated at Sat Apr 26 23:40:49 2025 by rpki-client