$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft File: snJh1xU0i_1zzp27ckiGVpk7ovE.mft (raw, json) Hash identifier: iYTpK2K6Yn1b5JISz/RAB65pFGCT1taZ15IJN7MmYlw= Subject key identifier: 91:DD:BC:38:06:42:18:BA:CA:FD:34:9E:21:9A:51:5C:55:34:E2:DD Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Certificate serial: 0196745497B5FAC2A39C8EA89A13A2642F58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft Manifest number: 103B Signing time: Sat 26 Apr 2025 23:00:22 +0000 Manifest this update: Sat 26 Apr 2025 23:00:22 +0000 Manifest next update: Sun 27 Apr 2025 23:00:22 +0000 Files and hashes: 1: 54iLRsUEYQSLlV8kHVTer9P4keA.roa (hash: Oib7LJlXh4bUMGiTPxF+59IQOdwF+fvCUOmQ1Sv5YqM=) 2: 83ZfI9Fyoy0-0Ed7XViCJUVWAUk.roa (hash: x5Erfp0LUGN9evcbs1ECyXblatyvnAhrnm8OrbCDB8k=) 3: DtWqKYrRCyGx6dsd9f2L7CKfIRc.roa (hash: O7NemdIlDZpd4quz6YecLMnjW1CyD/u06cKhcBOTRro=) 4: GrZCo-Pl-pKds5zmwg7ubalVFTA.roa (hash: XSM4rBpjvcsUyAb/r/u55Oo3ZCJqxZNIGwjYsJQ68bw=) 5: M80ufUXhkNHfa9K4zU6X6k_ofZQ.roa (hash: 4dQl+qST57nUFs67WwcEmlUV01oY2iEO29630JMqbwE=) 6: OcXOGlX2Gc26JEdm5iWVWnBYg58.roa (hash: /vGDKbgE4iZUS4BzIvVP16inipE2apdXrS0M45rcngw=) 7: QpucqboD9L8Uv9-I8wC2eqyytjM.roa (hash: QJ36JcAEae+tPmwoLHxsrKQ/qHkNlapv2iTQudy3nXg=) 8: VLrSYlONO7JZUvaeI6OzgjRksA0.roa (hash: LTkUIoLhvOTPKcASxWAtrGL8orynFjazuB3yg7c0ZYo=) 9: W95VCieFrYA-UWvQbNSL7N3Y2Cg.roa (hash: YvWvtJ9d+roXNfi60DzUNUYY7G9jfkQp1ZTCPAwbx+g=) 10: Yw4yz2qvg4rQujrK-dIx_KPixQM.roa (hash: rPOdhOXTd0LJkvjvgXHjpfcSX15w4WKfBaBl0s4PykM=) 11: mMdAkncXd62KSLEMH5-GZ2xifmI.roa (hash: BsiKxHj0OcEVg20ZYqrvGiqQgj+ynivI6054d313+QE=) 12: snJh1xU0i_1zzp27ckiGVpk7ovE.crl (hash: 0TbGCSRtPvZGPFYYynMbrIS2vhNUMn5l9VGqNDh4d6M=) 13: tXmj_lk4J_cxjq5mg9Y-DnR4g68.roa (hash: FkJnyg1Nbp4kUP6A2c71ys6CgKIoTjWwYiDec6OD1BY=) 14: x93oIxwN7f9CnY5MK-gEMFA9RCs.roa (hash: iUrM+UkqfotbOBAOD6sNrVDAFzEQJnu2I0F39zCKGjM=) 15: x_9TAtatN7OaJxTBmrfHpUlXZDA.roa (hash: 2gG4s/omQ5P0Lbi33p1Th/x4L/bao6YkNKtuc6UmamA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:74:54:97:b5:fa:c2:a3:9c:8e:a8:9a:13:a2:64:2f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Validity Not Before: Apr 26 23:00:22 2025 GMT Not After : Apr 27 23:00:22 2025 GMT Subject: CN=91ddbc38064218bacafd349e219a515c5534e2dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fb:3b:8f:93:59:c9:62:c4:b0:92:8a:b2:ba: f5:ab:ad:72:94:e2:a3:ee:08:3a:06:21:37:b5:82: 7e:84:e2:10:b7:40:41:9e:d7:70:59:f6:c8:fb:6d: b3:14:9f:56:1c:70:2b:37:71:9b:f5:8e:4f:42:c7: 0a:8c:52:ea:fe:4d:1d:52:ff:5d:bc:72:56:14:95: 84:46:0e:a9:b2:57:80:19:b0:9e:5b:2b:7c:8e:fb: 13:13:0b:8b:05:e9:cc:ce:90:7b:24:7d:55:b2:03: 37:f0:19:14:3a:80:07:3d:5f:84:ec:85:d7:d2:8c: ac:74:a4:33:ca:4e:0a:2d:d6:52:e1:6c:96:d0:c8: 89:2c:87:db:76:73:26:63:79:56:52:71:59:1e:98: 79:d5:e4:b3:ac:22:2a:09:20:7c:21:81:c3:a1:65: e8:78:2a:97:c6:77:9a:3a:27:ea:63:f6:9b:e7:85: c2:12:5b:28:bb:3f:1f:fa:5d:dc:57:6d:19:77:d1: db:fb:bf:b7:d6:65:73:66:65:89:89:5c:60:dd:c1: 14:d2:de:db:4f:da:0b:bf:0a:62:21:29:65:b4:b2: 25:79:6a:67:f3:5e:24:f2:cb:4e:22:7a:30:3c:e9: 8a:b0:b3:63:f6:af:47:3f:2d:63:1a:74:f8:18:5a: 9f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DD:BC:38:06:42:18:BA:CA:FD:34:9E:21:9A:51:5C:55:34:E2:DD X509v3 Authority Key Identifier: keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:9b:5c:d4:30:4f:c0:fe:9a:d7:39:fd:f7:b9:7a:7b:53:22: 7c:1b:a4:40:0f:92:5d:0c:26:7b:42:db:5b:10:c0:03:80:e6: 11:2c:dd:c8:f2:b2:be:9d:0e:da:72:06:63:0f:cb:15:51:48: 6a:17:22:fb:c7:35:14:70:02:c8:fc:43:4e:2f:8a:53:4e:dd: 26:ba:99:18:6c:52:3d:62:95:ac:ef:fc:5f:a9:14:c3:79:a2: 2e:e4:46:01:26:44:47:bd:d2:c9:86:12:de:7b:28:a5:e6:f9: 5c:a0:21:07:43:66:b8:67:b2:54:7f:42:4f:db:0c:4d:bf:e7: fd:2f:be:73:ca:95:2d:20:80:9e:8c:e8:c0:8a:8d:2b:3c:c8: aa:86:ea:1e:cb:71:71:be:60:a6:c8:5e:2f:9b:df:bd:d0:d6: fc:00:d3:15:c6:87:da:9e:53:a4:cd:a3:ee:ed:82:b3:65:64: 56:57:f8:90:75:a3:f0:ac:fd:96:91:95:fa:ff:e3:09:65:9d: 43:9b:94:a9:f6:e6:e1:d7:bf:c8:5a:01:2a:9b:cf:1d:12:8f: 33:14:cd:25:31:42:f5:77:80:cd:ce:bb:3a:3e:2c:d1:86:c0: 79:a0:5b:32:ad:0a:ba:76:c5:03:58:33:bb:49:44:a9:5f:cf: 01:60:4e:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ0VJe1+sKjnI6omhOiZC9YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNzI2MWQ3MTUzNDhiZmQ3M2NlOWRiYjcyNDg4NjU2OTkz YmEyZjEwHhcNMjUwNDI2MjMwMDIyWhcNMjUwNDI3MjMwMDIyWjAzMTEwLwYDVQQD Eyg5MWRkYmMzODA2NDIxOGJhY2FmZDM0OWUyMTlhNTE1YzU1MzRlMmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/s7j5NZyWLEsJKKsrr1q61ylOKj 7gg6BiE3tYJ+hOIQt0BBntdwWfbI+22zFJ9WHHArN3Gb9Y5PQscKjFLq/k0dUv9d vHJWFJWERg6psleAGbCeWyt8jvsTEwuLBenMzpB7JH1VsgM38BkUOoAHPV+E7IXX 0oysdKQzyk4KLdZS4WyW0MiJLIfbdnMmY3lWUnFZHph51eSzrCIqCSB8IYHDoWXo eCqXxneaOifqY/ab54XCElsouz8f+l3cV20Zd9Hb+7+31mVzZmWJiVxg3cEU0t7b T9oLvwpiISlltLIleWpn814k8stOInowPOmKsLNj9q9HPy1jGnT4GFqfeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHdvDgGQhi6yv00niGaUVxVNOLdMB8GA1UdIwQY MBaAFLJyYdcVNIv9c86du3JIhlaZO6LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2Yt NTA0ZjI3NjY3NjBmLzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2YtNTA0ZjI3NjY3NjBm LzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGptc1DBP wP6a1zn997l6e1MifBukQA+SXQwme0LbWxDAA4DmESzdyPKyvp0O2nIGYw/LFVFI ahci+8c1FHACyPxDTi+KU07dJrqZGGxSPWKVrO/8X6kUw3miLuRGASZER73SyYYS 3nsopeb5XKAhB0NmuGeyVH9CT9sMTb/n/S++c8qVLSCAnozowIqNKzzIqobqHstx cb5gpsheL5vfvdDW/ADTFcaH2p5TpM2j7u2Cs2VkVlf4kHWj8Kz9lpGV+v/jCWWd Q5uUqfbm4de/yFoBKpvPHRKPMxTNJTFC9XeAzc67Oj4s0YbAeaBbMq0KunbFA1gz u0lEqV/PAWBOiw== -----END CERTIFICATE-----Generated at Sun Apr 27 05:07:21 2025 by rpki-client