$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft File: uk0Oaat2n2W7KxVb36g6cYburEQ.mft (raw, json) Hash identifier: x/ALStUUHFpmIir+nBpGCrfWW9olvZiNdtMOqCG5tLI= Subject key identifier: EF:2C:F1:27:D6:98:65:90:CE:3E:E4:69:8A:9D:53:9F:AC:B8:E7:72 Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Certificate serial: 01967153BBFAC7842A2B3794AE363AD5244F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft Manifest number: 13AE Signing time: Sat 26 Apr 2025 09:00:35 +0000 Manifest this update: Sat 26 Apr 2025 09:00:35 +0000 Manifest next update: Sun 27 Apr 2025 09:00:35 +0000 Files and hashes: 1: 1-3bDj9neCbaQWw4yQtHya4rokp4.roa (hash: wHpii48/V8AwQkYAqHFtfgQFrRyn7WTmLrq5OaQhFQI=) 2: 1FRdiyb2IlZHXUod0EZtqjIuV48.roa (hash: yKc3udCTzpcxZg08Iku4TuTVL01TeqCQ6AGsUIubbLc=) 3: 7s-kRW15wfOY4-sOfxDBcecv-8g.roa (hash: 4P0C1BGP3QHpEQVAqgQur0JFPU07CPZaJXvyjV3BZyw=) 4: B7kkBiV21842X9l7dcEqEfT9Zhw.roa (hash: eQpICIgwqm0QLmyTmdzGlrlE/hIWTLpGGaUuy7LQL4c=) 5: B84STFeKoQGNNPVu7qjqse7G6tE.roa (hash: MtuuUttjdEHBfw9pQ6wLwNYRQchbll7oYwTHz6pA12k=) 6: EN1Levip2YxWtU05lzM8Oxq_nLI.roa (hash: puDE3/UvpEy/plTRQ66R42swdASFEazK0Kj21wbGDG0=) 7: FsUxuSAEJxcJvbQQbnEmdzyGBMM.roa (hash: JUy66RzJLN9pwvog5+NOwd/k0EE8faYmzaGcXwEZppg=) 8: MZ4QGIPEiPuDSyr_3gXeFWBvPXo.roa (hash: fdgnEtst2k3DjzBCjD9kY1X5vik8xfLx76ArRZpas2g=) 9: ffHd2Ruair9ltxVERYk4w2zsaNM.roa (hash: VnPUAyYKwhFfhmNOrOW74LPAJWypgZpyGJcY3RIeMSM=) 10: ncWW-PHiyTcD5myQc3_j5MkvxYM.roa (hash: yq//c+NUg8a+fjUiszm4DltA+xgrNNfhnKp5UTxqPzs=) 11: tcAOvX2JVQ4PKm-lNI8KuapK7Kk.roa (hash: zEUlrMdSx1XEO6nITfckAddCeacPaNoy7iHflkwOAW8=) 12: uk0Oaat2n2W7KxVb36g6cYburEQ.crl (hash: WyeEHBaH27lUa5XXhCRk58WdR8+N86Qs8coYF9JIbcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 09:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:71:53:bb:fa:c7:84:2a:2b:37:94:ae:36:3a:d5:24:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Validity Not Before: Apr 26 09:00:35 2025 GMT Not After : Apr 27 09:00:35 2025 GMT Subject: CN=ef2cf127d6986590ce3ee4698a9d539facb8e772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e0:0f:4c:9e:3c:ce:9c:9a:e7:a6:51:40:02: de:b2:5f:77:2e:10:49:cc:74:ce:77:8b:18:3d:83: a2:c3:d6:28:67:50:c1:3f:9e:fe:cf:53:b7:ea:1b: 95:d2:ad:73:7c:cb:76:8b:cf:f7:f0:f0:74:ed:47: e8:d0:24:5c:97:ac:e3:53:49:d1:59:b3:c0:09:4e: f4:09:a9:70:31:43:a1:aa:c4:22:46:33:24:70:1e: 22:f6:43:97:11:6c:3a:1f:39:75:6a:60:2f:ac:a7: c7:35:bd:19:05:49:89:f6:75:b4:12:3f:b9:40:00: eb:ac:81:c4:c9:83:2c:04:e1:2d:75:0d:ee:c3:0d: 5e:09:b4:77:06:c7:f4:a2:43:3a:4e:62:57:44:e4: c2:77:19:5e:dd:a9:69:bf:f1:c0:18:02:d3:29:be: 6e:47:67:18:de:4c:14:12:ea:35:b4:5e:88:f7:17: ad:df:4b:7c:87:37:e2:9c:0f:b3:27:08:a0:55:3e: 40:a5:ce:bc:67:a0:61:36:9b:83:70:09:fd:5f:37: a8:e4:c3:89:eb:c6:82:42:02:86:91:ad:14:5d:a7: bc:8c:ea:1d:a6:0d:da:9e:8d:24:40:a0:46:99:21: 35:81:88:f7:86:b8:ab:3f:57:ab:f1:6b:c6:ac:a8: 93:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:2C:F1:27:D6:98:65:90:CE:3E:E4:69:8A:9D:53:9F:AC:B8:E7:72 X509v3 Authority Key Identifier: keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:53:b4:bc:1c:f2:fb:f6:63:7e:c3:45:10:45:cf:a7:fb:4b: 6a:65:3a:1f:89:10:41:40:e0:a2:c4:ac:9c:fa:25:c6:6a:b9: 65:c0:83:68:01:22:95:94:3b:fd:75:a0:ca:7a:6d:79:31:0a: 81:51:cf:6e:43:bf:eb:91:a4:0b:2c:85:54:7a:e8:97:bc:01: b5:76:bf:8c:61:2c:43:1a:fd:80:52:87:5e:24:f3:d9:f5:34: 5c:12:c9:a6:f7:95:d6:55:cb:8a:13:8b:e5:09:ed:15:33:31: 7b:e5:99:6c:57:81:b4:92:48:fd:00:c8:f5:34:40:bc:45:be: 62:80:0f:3b:75:e8:9f:0c:a1:1c:8b:2b:dd:67:d9:77:db:31: d3:0b:b0:3b:3c:f2:82:36:ec:c9:49:db:2c:97:5a:74:9e:53: 3b:86:51:c4:a7:4d:97:c8:dd:4c:9b:c4:e8:db:4f:6e:67:60: c6:81:0c:c5:2c:59:7c:1a:06:0f:63:77:0c:e0:6e:85:8c:f7: c6:4f:f7:25:c4:3e:bd:80:bf:a0:07:8a:71:85:63:5e:a9:2c: ab:92:20:6f:c6:d2:a4:58:48:89:7e:c0:4e:cf:b3:f8:d4:6d: f3:1e:4e:ef:66:aa:e9:2e:c7:8a:39:e1:b1:55:a0:20:f5:c5: 4e:87:5b:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZxU7v6x4QqKzeUrjY61SRPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl ZWFjNDQwHhcNMjUwNDI2MDkwMDM1WhcNMjUwNDI3MDkwMDM1WjAzMTEwLwYDVQQD EyhlZjJjZjEyN2Q2OTg2NTkwY2UzZWU0Njk4YTlkNTM5ZmFjYjhlNzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOAPTJ48zpya56ZRQALesl93LhBJ zHTOd4sYPYOiw9YoZ1DBP57+z1O36huV0q1zfMt2i8/38PB07Ufo0CRcl6zjU0nR WbPACU70CalwMUOhqsQiRjMkcB4i9kOXEWw6Hzl1amAvrKfHNb0ZBUmJ9nW0Ej+5 QADrrIHEyYMsBOEtdQ3uww1eCbR3Bsf0okM6TmJXROTCdxle3alpv/HAGALTKb5u R2cY3kwUEuo1tF6I9xet30t8hzfinA+zJwigVT5Apc68Z6BhNpuDcAn9Xzeo5MOJ 68aCQgKGka0UXae8jOodpg3ano0kQKBGmSE1gYj3hrirP1er8WvGrKiT0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8s8SfWmGWQzj7kaYqdU5+suOdyMB8GA1UdIwQY MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt OGVmZjNmZDNjNDhhLzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoVO0vBzy +/ZjfsNFEEXPp/tLamU6H4kQQUDgosSsnPolxmq5ZcCDaAEilZQ7/XWgynpteTEK gVHPbkO/65GkCyyFVHrol7wBtXa/jGEsQxr9gFKHXiTz2fU0XBLJpveV1lXLihOL 5QntFTMxe+WZbFeBtJJI/QDI9TRAvEW+YoAPO3XonwyhHIsr3WfZd9sx0wuwOzzy gjbsyUnbLJdadJ5TO4ZRxKdNl8jdTJvE6NtPbmdgxoEMxSxZfBoGD2N3DOBuhYz3 xk/3JcQ+vYC/oAeKcYVjXqksq5Igb8bSpFhIiX7ATs+z+NRt8x5O72aq6S7Hijnh sVWgIPXFTodbkQ== -----END CERTIFICATE-----Generated at Sat Apr 26 16:24:16 2025 by rpki-client