$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft File: SeFL929C2k8qwAOmxp1hwjIOLNg.mft (raw, json) Hash identifier: VoqvXMzJZz3rNdXLahFzJi+M2atSrzpFbiQHydntOtg= Subject key identifier: F6:D1:40:11:7E:CF:55:31:4C:BA:9B:69:94:32:47:CB:86:50:C5:32 Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Certificate serial: 01967AC4930C3E76F374C01157363601505B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft Manifest number: 0F80 Signing time: Mon 28 Apr 2025 05:00:25 +0000 Manifest this update: Mon 28 Apr 2025 05:00:25 +0000 Manifest next update: Tue 29 Apr 2025 05:00:25 +0000 Files and hashes: 1: 1JBbxjT9LW1M45TfUBltflWXjYo.roa (hash: +kWM+UT9oOWnxVo332YivS+2g4/PD34pohQWp5gFo5E=) 2: Ns_2WTykJXWBKeAZy8ZQQTGIZ4g.roa (hash: zHFP35lrOV5ykmqGRdLeDFScFpQtr+Xab1k7m30xSdw=) 3: OANXXNT4d7OJ6o497Ctf48xykTY.roa (hash: aZ2NtskCeNGxotOVm0/S/doAkEWhZqM1q8mtGb9yHS0=) 4: RI77ZK3aqTLPg2W-XBkxR7T7p4Q.roa (hash: nk2g70SgrOg1E7ZHO+z50BOPQEJsdzJ7hk5jt1A6+b0=) 5: SeFL929C2k8qwAOmxp1hwjIOLNg.crl (hash: q7qdW0xe8bqiFzq8mr+c0J3TLPbk1HxINW3/iHpLIOE=) 6: X6bDse8LmUftPmqQf4kw_btsOvE.roa (hash: j651kWeKBdPGwLMPF+EPghkkL3051eJwiT7QuhCps4o=) 7: _GcWVg1NloetvFlVnnsXCsqW9jA.roa (hash: 8fDT+HFMs22XfNV5rWe49DrDAkwxKtbv8tRmabSl16Q=) 8: h6nXxCojgmG6H44QUolSl46rG3Q.roa (hash: Jg0E3EWR0gqOThcjNWzxcD0juv44xUicy/wOavdwVH4=) 9: kLzXL1ZkV5i7SczjHie-nPdTakk.roa (hash: KSQB5UsbV0dtTyrjqQ8bJx4qGPsJFrVxBc1ZJaVStDg=) 10: zGWw5y3QtBedo3lJVh0hQTzv87w.roa (hash: LJqgZZZrONstDDkOQIUQr4bq2xXQX5fdOe5gdv77tuI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 23:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7a:c4:93:0c:3e:76:f3:74:c0:11:57:36:36:01:50:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Validity Not Before: Apr 28 05:00:25 2025 GMT Not After : Apr 29 05:00:25 2025 GMT Subject: CN=f6d140117ecf55314cba9b69943247cb8650c532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9b:ed:ab:e4:42:e3:19:9f:59:1b:4a:82:23: 46:c3:66:aa:ab:16:e7:ad:e9:9d:d2:32:37:14:63: cb:2f:85:16:82:89:80:dc:20:0c:87:4e:9d:26:cd: d9:e4:40:25:c1:3f:11:05:b5:9f:86:f6:09:07:eb: c8:5d:95:86:55:3f:8a:76:5b:05:ae:5e:b2:47:87: 33:f2:96:07:89:f5:e6:9e:86:e5:95:3e:f4:b7:2a: 7f:85:e0:7b:2c:11:c1:06:52:93:40:12:57:94:f1: 94:2f:bc:95:5c:df:47:e2:b1:78:27:63:f4:90:d7: ab:1a:90:52:c3:29:a3:e2:b6:97:4a:9c:bb:a8:98: ef:ac:0a:1a:44:0c:ab:ab:51:93:65:e6:ba:41:e6: 6d:b7:57:ad:59:c5:b1:d3:31:38:3b:d4:72:3e:3b: 7a:db:9b:c4:dc:c1:95:04:5d:7b:e3:b3:b4:d5:f2: 01:fe:71:3f:16:5c:01:6f:a6:d6:e3:ee:c1:0e:03: 3b:3e:63:41:de:f3:9a:1a:20:bd:71:98:21:07:29: e7:c7:37:c2:b9:e4:50:79:56:b5:30:5a:27:99:f7: 6b:39:be:e1:85:33:17:00:bc:10:fc:0e:f2:64:41: 28:9d:0a:49:ea:18:12:0d:52:44:e6:f5:a8:62:ef: fe:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D1:40:11:7E:CF:55:31:4C:BA:9B:69:94:32:47:CB:86:50:C5:32 X509v3 Authority Key Identifier: keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:e5:d7:3f:f6:c6:cb:4c:13:48:a3:95:80:9e:81:c5:5c:3a: 9d:d0:f5:d8:de:3f:da:b0:ed:67:64:62:ae:fa:cd:a1:e5:ed: a5:0e:c2:67:77:8d:c7:a2:21:dd:3c:af:f7:c2:49:73:32:8d: 36:f2:d6:b5:69:fe:e1:28:cd:ed:80:f7:46:95:56:3e:31:4d: b8:95:ea:92:75:ca:07:07:5f:53:be:22:b9:8a:d8:26:ba:6b: d5:c4:bc:c4:55:65:a2:ae:36:fd:c4:1a:65:e7:56:3e:34:c1: 93:d8:2b:44:91:f4:f0:4a:74:67:0f:ce:a9:9c:ab:a6:3c:c6: c6:e1:38:6b:84:71:40:dc:81:09:c7:8e:0c:2b:5a:28:ba:fa: b4:f8:cb:c7:fb:d4:56:cc:a3:f8:18:f7:24:81:9d:4c:20:77: 7f:52:7f:c2:2a:a6:24:c4:30:13:2c:18:92:43:8e:ec:57:df: 7f:95:8c:cc:d8:64:34:7f:1a:2d:c9:ed:cd:13:38:e2:36:49: 1d:18:a8:e1:5f:23:f9:3c:f3:02:04:d0:dd:34:a9:fe:7c:a8: 24:53:df:4d:09:ee:df:da:0a:0b:ae:ad:d4:fb:93:1a:6f:86: a8:4a:b3:77:94:aa:d5:40:5b:02:a3:70:f4:e2:f9:9a:0b:64: 99:f0:f4:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ6xJMMPnbzdMARVzY2AVBbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTE0YmY3NmY0MmRhNGYyYWMwMDNhNmM2OWQ2MWMyMzIw ZTJjZDgwHhcNMjUwNDI4MDUwMDI1WhcNMjUwNDI5MDUwMDI1WjAzMTEwLwYDVQQD EyhmNmQxNDAxMTdlY2Y1NTMxNGNiYTliNjk5NDMyNDdjYjg2NTBjNTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZvtq+RC4xmfWRtKgiNGw2aqqxbn remd0jI3FGPLL4UWgomA3CAMh06dJs3Z5EAlwT8RBbWfhvYJB+vIXZWGVT+KdlsF rl6yR4cz8pYHifXmnobllT70typ/heB7LBHBBlKTQBJXlPGUL7yVXN9H4rF4J2P0 kNerGpBSwymj4raXSpy7qJjvrAoaRAyrq1GTZea6QeZtt1etWcWx0zE4O9RyPjt6 25vE3MGVBF1747O01fIB/nE/FlwBb6bW4+7BDgM7PmNB3vOaGiC9cZghBynnxzfC ueRQeVa1MFonmfdrOb7hhTMXALwQ/A7yZEEonQpJ6hgSDVJE5vWoYu/+ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbRQBF+z1UxTLqbaZQyR8uGUMUyMB8GA1UdIwQY MBaAFEnhS/dvQtpPKsADpsadYcIyDizYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEt M2JlY2NhYWUzMzZkLzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEtM2JlY2NhYWUzMzZk LzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+XXP/bG y0wTSKOVgJ6BxVw6ndD12N4/2rDtZ2RirvrNoeXtpQ7CZ3eNx6Ih3Tyv98JJczKN NvLWtWn+4SjN7YD3RpVWPjFNuJXqknXKBwdfU74iuYrYJrpr1cS8xFVloq42/cQa ZedWPjTBk9grRJH08Ep0Zw/OqZyrpjzGxuE4a4RxQNyBCceODCtaKLr6tPjLx/vU Vsyj+Bj3JIGdTCB3f1J/wiqmJMQwEywYkkOO7Ffff5WMzNhkNH8aLcntzRM44jZJ HRio4V8j+TzzAgTQ3TSp/nyoJFPfTQnu39oKC66t1PuTGm+GqEqzd5Sq1UBbAqNw 9OL5mgtkmfD0dA== -----END CERTIFICATE-----Generated at Mon Apr 28 08:35:26 2025 by rpki-client