$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft File: ueqJNvjlMGO0s73w87FbKuZn7xM.mft (raw, json) Hash identifier: VxSrmmqKIIFaHLyr72+DXaEvI62/gCZs9qYDsMClO1c= Subject key identifier: 5B:16:55:77:DD:A9:2E:AF:56:01:61:8B:C7:11:B6:E8:9C:92:5F:29 Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Certificate serial: 01967868313A38ACE44AA27BC0968366A860 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft Manifest number: 10BF Signing time: Sun 27 Apr 2025 18:00:16 +0000 Manifest this update: Sun 27 Apr 2025 18:00:16 +0000 Manifest next update: Mon 28 Apr 2025 18:00:16 +0000 Files and hashes: 1: 1-yC-3OHn3v-G1smlX40MjBLjtIk.roa (hash: a65aVWnVNxmwRG3dcoSw93hwzHCpqxRPcFAazQc55Uw=) 2: 1Z8mxBJ-5mF0e5QEPAGyZpCKFxU.roa (hash: 6P4lvJGk11v0OAwMwa6Dw3iNwzGZi6eZ4h8l5OgG/a4=) 3: 6YyTiJSPbv1UicGAUpUrIjUSl7s.roa (hash: ywn3zNCMDdDSXu4XFpg6gkYa11yzJumgJ7B2JgWvpHQ=) 4: 8RH3qUKE88xn5HbZw6qudmUS57M.roa (hash: 2XUgMZycB/m/voP6J2TdO00CC19oe6XDb8VlW5+rmh4=) 5: EL8NwIW4ynHKuDJKgSdS-YOLUw0.roa (hash: myxXdWA4+IfOZijb00R5q5cEaLQsxJLVjp4payzucnw=) 6: FnKylUr6R_VPycGaWtm0ZgdzgFs.roa (hash: anhVyOcar+oGd9A/1X9bq9qCt93XDdGRp5RsP7BWo9k=) 7: VCAwWZ9rCpOgRbWaR-Mt_XNvoAs.roa (hash: AOA1cevRwpbH9c1Y3qkh8PFtO7TKkCHa9V08cN+S9so=) 8: Vtno6vek4R1iYxrs_iTCKNXbvV4.roa (hash: yuyPRcKOieLl5HUe7kBKDY9ApeZ5pBE7VliV6ltXJ/I=) 9: c6eHaiXiRvnVAbCikD-QIkjcWys.roa (hash: tOo0YRqhlyq81kcBT/wqHTaOL3woOVGxvlxCwePoeKQ=) 10: ueqJNvjlMGO0s73w87FbKuZn7xM.crl (hash: aNfwzcyYmgKr2T6aAq+APy4XmoB1rEgNhsDTOM5fhPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 16:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:78:68:31:3a:38:ac:e4:4a:a2:7b:c0:96:83:66:a8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Validity Not Before: Apr 27 18:00:16 2025 GMT Not After : Apr 28 18:00:16 2025 GMT Subject: CN=5b165577dda92eaf5601618bc711b6e89c925f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:8f:51:88:3f:b6:ca:d4:ca:1b:31:da:2f:4d: 4a:98:2a:1d:a4:dc:eb:79:39:db:eb:27:5e:80:a0: 49:56:ed:9e:10:7c:60:41:0c:db:87:8f:40:f0:06: 2c:f5:d4:72:d1:02:84:28:0a:a0:18:7f:9a:26:ff: 35:91:9a:9b:7b:ec:ac:0c:c5:5c:7d:cc:6c:1f:6c: 9a:39:df:ca:d1:ce:57:7b:b1:a7:4e:06:e6:a5:35: 0e:d3:ce:ba:84:08:25:de:79:67:f6:e3:ed:83:34: d9:b5:24:19:67:dc:b6:7d:38:00:11:ea:ac:59:db: 6f:a5:07:1a:1a:b9:b6:74:08:b5:e9:70:48:5c:b4: 9a:a5:d3:fa:98:e3:36:b1:d9:7e:9d:9b:1b:8f:07: b4:fe:05:97:48:50:d4:14:28:60:28:15:86:31:a8: 02:a2:35:cc:fb:da:8b:2a:e6:dd:3a:37:94:0b:dd: 9c:6a:90:6c:99:29:70:9a:ef:95:ac:bf:b6:90:92: 57:16:14:6f:ff:9f:26:36:ae:92:14:ee:7b:05:4a: 23:8e:c5:c3:a5:0c:17:d7:ba:42:d6:e4:34:b7:f7: e0:2e:4d:d5:ce:d5:48:50:8a:9a:e9:38:26:69:15: dd:83:61:c1:80:00:70:60:7e:8f:6b:66:bd:60:4c: ff:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:16:55:77:DD:A9:2E:AF:56:01:61:8B:C7:11:B6:E8:9C:92:5F:29 X509v3 Authority Key Identifier: keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:98:9e:ea:d4:27:8d:ce:11:4b:2e:de:39:70:e7:c0:d4:3f: 31:28:0f:ec:d4:02:10:af:50:64:dd:0e:75:7e:8b:a9:6f:7a: 7e:c2:03:7a:3e:bd:f9:4d:2f:54:62:0e:18:32:c2:c2:f8:90: ae:fd:f0:f8:48:ef:7f:5f:4f:09:42:dd:34:5a:1f:3e:ae:8d: ac:64:b2:07:a2:18:1c:4e:10:ec:dc:01:d7:f0:32:c6:1a:db: 8b:29:90:9f:fd:07:db:41:a5:0c:60:ea:05:72:c0:72:ac:a8: 8c:78:ce:82:07:9e:4d:55:6a:62:67:ee:1a:cf:bb:1b:42:2c: c6:93:5d:c7:26:6d:a5:3b:ac:25:87:71:34:67:30:51:6f:4a: 03:08:d9:9f:3f:6d:08:f2:24:5c:af:91:d2:10:8b:c2:53:8c: b0:28:b7:ab:ab:1f:ad:27:fd:fd:0e:ad:15:14:97:8e:0c:7d: 35:37:54:55:fb:92:55:d3:97:42:99:61:da:b3:0d:41:94:33: 1c:4d:6d:32:15:be:e7:bc:18:86:70:6a:c5:bf:f6:5f:f7:96: 6c:4a:c2:0c:e8:f2:b6:21:52:a9:58:cc:8f:68:f9:42:9c:82: 9c:c1:ca:1a:55:ba:3a:4d:b1:d1:47:69:9f:49:f0:4d:ee:94: 6a:6c:32:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ4aDE6OKzkSqJ7wJaDZqhgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZWE4OTM2ZjhlNTMwNjNiNGIzYmRmMGYzYjE1YjJhZTY2 N2VmMTMwHhcNMjUwNDI3MTgwMDE2WhcNMjUwNDI4MTgwMDE2WjAzMTEwLwYDVQQD Eyg1YjE2NTU3N2RkYTkyZWFmNTYwMTYxOGJjNzExYjZlODljOTI1ZjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+o9RiD+2ytTKGzHaL01KmCodpNzr eTnb6ydegKBJVu2eEHxgQQzbh49A8AYs9dRy0QKEKAqgGH+aJv81kZqbe+ysDMVc fcxsH2yaOd/K0c5Xe7GnTgbmpTUO0866hAgl3nln9uPtgzTZtSQZZ9y2fTgAEeqs WdtvpQcaGrm2dAi16XBIXLSapdP6mOM2sdl+nZsbjwe0/gWXSFDUFChgKBWGMagC ojXM+9qLKubdOjeUC92capBsmSlwmu+VrL+2kJJXFhRv/58mNq6SFO57BUojjsXD pQwX17pC1uQ0t/fgLk3VztVIUIqa6TgmaRXdg2HBgABwYH6Pa2a9YEz/rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsWVXfdqS6vVgFhi8cRtuickl8pMB8GA1UdIwQY MBaAFLnqiTb45TBjtLO98POxWyrmZ+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEt YjI1MDk5N2ZjNzVkLzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEtYjI1MDk5N2ZjNzVk LzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5ie6tQn jc4RSy7eOXDnwNQ/MSgP7NQCEK9QZN0OdX6LqW96fsIDej69+U0vVGIOGDLCwviQ rv3w+Ejvf19PCULdNFofPq6NrGSyB6IYHE4Q7NwB1/AyxhrbiymQn/0H20GlDGDq BXLAcqyojHjOggeeTVVqYmfuGs+7G0IsxpNdxyZtpTusJYdxNGcwUW9KAwjZnz9t CPIkXK+R0hCLwlOMsCi3q6sfrSf9/Q6tFRSXjgx9NTdUVfuSVdOXQplh2rMNQZQz HE1tMhW+57wYhnBqxb/2X/eWbErCDOjytiFSqVjMj2j5QpyCnMHKGlW6Ok2x0Udp n0nwTe6UamwyVQ== -----END CERTIFICATE-----Generated at Mon Apr 28 01:14:57 2025 by rpki-client