$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft File: XYjk96MCQSwxaju1mc3SBCtf9IU.mft (raw, json) Hash identifier: OIDOdtL/VIz991sAo2enMH4RSPtOfWKzm0z7Z22ffLk= Subject key identifier: E1:19:2C:F0:D4:02:F5:DE:3F:AD:BE:7C:70:E9:0B:4C:EC:F8:24:BA Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Certificate serial: 0196789FA36BD7BA0CF9DECA9E8EB1CFE5EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft Manifest number: 0DCC Signing time: Sun 27 Apr 2025 19:00:49 +0000 Manifest this update: Sun 27 Apr 2025 19:00:49 +0000 Manifest next update: Mon 28 Apr 2025 19:00:49 +0000 Files and hashes: 1: 1-bwt-sVuHj2c1KUgvFOOTFr_wP0.roa (hash: vaM0UnsCz+iyN9isVQ5NHTCh+M3bWKEqtb4oXckwJCg=) 2: 1-cEBstEK4SU0dua7ZoPT6Lv2YCY.roa (hash: IJ/Q1Cnzvg38mR9RVgpBCQ8ziEW3LxTFXnOf5Hk9jS4=) 3: 35_wk3xgcs96k-nSZF7vJ9OFMQE.roa (hash: fzV24Wa6XQ7Bi2mdQYwJF2pjhDEfLxDL4hS1TghwCCM=) 4: 78xxgqrUmWNYqyTBai4EBjEu91c.roa (hash: uaxnNjtNBpTRzoh32nK5xrY4z5VdPqEqJ8DG/HTyvMk=) 5: CIS9gFmVTktTHr6RUhk8XZahN1E.roa (hash: O3ctsGAkdQ3hrR3CxmP2jT/+C60dYA4RexLZILCPJRA=) 6: DnZm09VQVuRIuwqOkm3k2ueIEWA.roa (hash: RBldM8MYlGHFUzy97ye7OklsqwtzmV1ubQhhWo9O87A=) 7: VrYsvXiCDPnj40E2Yaxc1ZuyCs4.roa (hash: bW2MMX9UsQfvfk+kfYlnSI5Q8jrUxC2hBN7648mrq4E=) 8: XYjk96MCQSwxaju1mc3SBCtf9IU.crl (hash: 9/XoFqSCFlnDKP1NdyUyCWqkR99iggq63ExCmg9HDH4=) 9: aZqtIonciFbuAVeQ2dXFcdSrl4g.roa (hash: LOznQAw3X1WlgdY+GocAYdknvW8uQDaOqbi4GNngdfI=) 10: cJe1S1V6AJPi9cAb4NzNx8lYwsM.roa (hash: GvfkxRZe0U5ol3ibfBiprjfKJMC7pwJKVVJRhQvSq/g=) 11: ekIp6fDV1LgphH3Gi1AHo6rI6Cs.roa (hash: cb15BXttM7ZNQB0xO/TZjjNsA01W0R9hxNFRQ8FNS94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 16:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:78:9f:a3:6b:d7:ba:0c:f9:de:ca:9e:8e:b1:cf:e5:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Validity Not Before: Apr 27 19:00:49 2025 GMT Not After : Apr 28 19:00:49 2025 GMT Subject: CN=e1192cf0d402f5de3fadbe7c70e90b4cecf824ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:bd:0f:94:cd:c8:5e:2d:c1:96:e0:e0:15:18: 16:4a:c5:58:4d:78:0b:c9:71:b5:b2:4b:48:df:ff: d4:7b:d8:2f:a2:c4:9b:90:d9:f5:7b:bf:d4:b1:82: db:16:9f:d7:2e:07:bd:79:4f:da:a1:5d:94:fb:a5: 01:62:e5:c3:62:46:5f:be:05:b7:75:ce:69:fb:c0: fe:c9:ac:d7:4d:6d:99:f9:9e:b9:22:c6:9a:7f:2a: 43:e0:84:94:cd:5a:60:bf:82:92:d6:bd:63:ee:1c: 28:50:9e:b9:4f:7e:d9:f2:27:4b:87:a9:67:e5:a3: db:85:8e:db:57:66:a0:78:fd:2c:a8:9b:88:84:b4: 6b:07:20:d8:0b:8e:5c:b4:a1:53:2d:47:0f:44:ff: 3d:14:ac:78:97:fd:2c:a0:1a:3d:d8:5c:b2:1a:d0: 0f:b3:a5:70:5d:e0:6e:00:8f:30:92:36:2c:56:a2: 2d:f3:3a:cd:5b:89:8b:ef:2b:94:06:83:2e:be:1a: ca:bf:05:e3:23:96:71:18:ba:98:7b:fc:5f:94:8e: 80:c9:ee:85:26:ac:6a:5d:ea:89:21:88:cf:26:97: 83:a7:d9:5c:f9:9f:cb:4d:af:9f:bb:9e:df:e6:1a: ce:3a:9d:e3:2c:95:35:cc:c8:24:a3:42:d2:d9:c1: 40:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:19:2C:F0:D4:02:F5:DE:3F:AD:BE:7C:70:E9:0B:4C:EC:F8:24:BA X509v3 Authority Key Identifier: keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:28:78:da:22:4d:5e:ac:4b:4a:17:10:55:ea:ce:80:e1:f8: de:64:a1:51:c8:6b:cc:13:6a:3f:d3:af:56:f1:f5:b2:23:e2: cb:42:71:fe:c5:76:ef:2a:28:fc:72:ba:79:d1:02:70:0d:9c: 51:1d:94:e7:b1:35:84:92:a7:d5:c4:6b:63:a9:3a:ea:a0:39: 3f:d9:b9:e3:d5:ef:ed:b2:a0:05:00:0e:f0:15:38:ce:64:3a: 67:47:74:c8:87:8d:18:25:72:bf:ea:e2:b1:6d:fa:f3:f0:0a: 77:0a:f6:ca:29:41:4f:d0:fc:2e:f0:95:6c:89:4c:5c:25:8b: 57:aa:b9:0c:b0:8e:7e:58:4a:61:82:89:ec:9b:45:d1:a3:45: 4a:2a:23:d1:a3:7b:d8:eb:ba:a2:f7:16:5c:d3:f0:c5:6a:4c: 2f:08:ea:cd:55:45:76:ca:8a:68:a4:66:54:2c:3e:a4:3d:71: e4:51:7c:b7:99:35:d3:22:6c:05:7c:98:1d:b9:be:f6:f0:b1: 9b:12:3c:73:ff:60:b7:59:9c:e1:21:7c:10:c7:4f:de:fd:b0: 9a:4f:5e:71:48:2b:02:9a:0e:d2:49:17:0a:81:aa:45:07:fa: 96:53:e2:16:92:c6:c0:66:bd:58:4d:20:fe:56:21:55:b5:40: 41:e7:a8:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ4n6Nr17oM+d7Kno6xz+XqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1 ZmY0ODUwHhcNMjUwNDI3MTkwMDQ5WhcNMjUwNDI4MTkwMDQ5WjAzMTEwLwYDVQQD EyhlMTE5MmNmMGQ0MDJmNWRlM2ZhZGJlN2M3MGU5MGI0Y2VjZjgyNGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA670PlM3IXi3BluDgFRgWSsVYTXgL yXG1sktI3//Ue9gvosSbkNn1e7/UsYLbFp/XLge9eU/aoV2U+6UBYuXDYkZfvgW3 dc5p+8D+yazXTW2Z+Z65IsaafypD4ISUzVpgv4KS1r1j7hwoUJ65T37Z8idLh6ln 5aPbhY7bV2ageP0sqJuIhLRrByDYC45ctKFTLUcPRP89FKx4l/0soBo92FyyGtAP s6VwXeBuAI8wkjYsVqIt8zrNW4mL7yuUBoMuvhrKvwXjI5ZxGLqYe/xflI6Aye6F JqxqXeqJIYjPJpeDp9lc+Z/LTa+fu57f5hrOOp3jLJU1zMgko0LS2cFAHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOEZLPDUAvXeP62+fHDpC0zs+CS6MB8GA1UdIwQY MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt NTdlMWQ1YjcyYjJkLzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQyh42iJN XqxLShcQVerOgOH43mShUchrzBNqP9OvVvH1siPiy0Jx/sV27yoo/HK6edECcA2c UR2U57E1hJKn1cRrY6k66qA5P9m549Xv7bKgBQAO8BU4zmQ6Z0d0yIeNGCVyv+ri sW368/AKdwr2yilBT9D8LvCVbIlMXCWLV6q5DLCOflhKYYKJ7JtF0aNFSioj0aN7 2Ou6ovcWXNPwxWpMLwjqzVVFdsqKaKRmVCw+pD1x5FF8t5k10yJsBXyYHbm+9vCx mxI8c/9gt1mc4SF8EMdP3v2wmk9ecUgrApoO0kkXCoGqRQf6llPiFpLGwGa9WE0g /lYhVbVAQeeoUQ== -----END CERTIFICATE-----Generated at Mon Apr 28 02:15:39 2025 by rpki-client