$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft File: I0Rtp6cLznc-wrwWVarjDDwYQSw.mft (raw, json) Hash identifier: qqZhd2FlAQOyCumJAN+OexatQ+5iqxPCa8jzHjydptw= Subject key identifier: 50:A0:01:10:7A:FC:5C:F2:81:F2:87:FD:11:75:80:3C:90:BE:5D:41 Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c Certificate serial: 01967A568D96BF2ED1B537727F49F135DD95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft Manifest number: 12D1 Signing time: Mon 28 Apr 2025 03:00:14 +0000 Manifest this update: Mon 28 Apr 2025 03:00:14 +0000 Manifest next update: Tue 29 Apr 2025 03:00:14 +0000 Files and hashes: 1: 1-DmgZ4SOp-NyMxLpBYaEtj39Pdc.roa (hash: moNVW0pEVWJfvkZEJ959J7HVzxYxrRxeZe7wePoILkM=) 2: 1-YvBQ0BXrsF-NI7ubQxbzvPVuzg.roa (hash: eYRmazTnlT6QkpTc8BcLL4cZu0o6zfLVuHBleuRca74=) 3: FwySP1jVKL7DmmlRNwZnvOJofjw.roa (hash: F8V8HLYupPXjwfMEbx0g1ieMP6WPPz1HmoVO8jTtRCg=) 4: I0Rtp6cLznc-wrwWVarjDDwYQSw.crl (hash: 1JBXQxXjRkVQHpnWkeIr9THGOD/yYUqMpWghx+mz9uc=) 5: Xu2K8fW-gQnYV7VE3ISwB8N68f8.roa (hash: NKQq6ePbr62hGHn3QtTkpNNxc85cdItsXJmI3/Mzf2w=) 6: bXcsNUMfdZBR3tv1r8dI-NGTxGI.roa (hash: nSyMcXVhj3Lt4TUfuUh042NUrc5IpwBc7m8EmxqlbJw=) 7: d_P2C7-8KzXEXKrYSD9DOI8LiWE.roa (hash: Yd4prnJa4gstJKWN3oZHIXfbfrVyLQkl2GQSNyCI7uQ=) 8: k5bIb9MZd-l_B-bxXKNoMlRDovA.roa (hash: bpuvw96upd8j55DJW2izTXwq0PIjcaMc/13PHw88j0I=) 9: leUb75eQIxyb-VxN49MBjH1YF7k.roa (hash: kyA2+f/9l+pKqkl9Or57N7CwCtWEqE5/Far2bCfSZ4I=) 10: pqM1u8SkS4zcFQvrBhQWpXPMYCA.roa (hash: ZvRrYdTYDz9FJEg1Ikh5qg9AfwzK1a1b92vZCCUcbys=) 11: qV9uaYW0EJ9RfJ2uJjNKqD5z7XA.roa (hash: 8zBVfYPjKnKjKryP+fVFU4l51KGHl1B5bpWFMv1A9Mk=) 12: sDrv6ds57QYfp4Z_4o5IpblURKI.roa (hash: Y8MxO27e+WV4vIqzW7fZxZuurHymmQUKVTNCec7B22g=) 13: wFX7xPpJ7yA033Ye7jyB7b5hfrY.roa (hash: cWLM1VzdX6e7FN9H2A5u+k5ZkEsPKCYG7CFbFvNUR/k=) 14: xxa6C-pa80quO5ROYbjP391EF1Y.roa (hash: kO5NzNIL7QO5wmPmlUrjQ/tzsh5UuDfcIRoRWEvLEF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 23:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7a:56:8d:96:bf:2e:d1:b5:37:72:7f:49:f1:35:dd:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c Validity Not Before: Apr 28 03:00:14 2025 GMT Not After : Apr 29 03:00:14 2025 GMT Subject: CN=50a001107afc5cf281f287fd1175803c90be5d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5c:88:8d:ab:45:f5:55:37:aa:44:6b:ee:71: 83:f7:2b:4e:ec:74:92:1f:3b:3f:a2:2f:38:93:d7: c5:e9:b3:08:b4:cc:57:2a:b7:f8:4c:7d:6a:2f:71: 12:ea:7e:4c:b2:31:6d:22:79:38:4d:fe:1e:ad:f5: 8b:6f:8c:eb:6c:4b:1a:3e:e6:df:61:48:84:6b:b7: 82:91:d2:2e:83:26:88:f3:66:dc:4a:d8:56:dd:2b: 9c:84:ef:26:e6:80:c2:6b:02:d9:c1:cd:89:b6:53: bf:90:f6:e0:4a:3b:0c:de:f9:57:24:b8:f1:50:96: e3:be:9d:38:24:b4:83:19:5e:c7:27:12:1e:47:2f: 07:8d:4d:b5:18:cc:21:93:1b:5a:54:88:26:9f:e1: ed:b4:d9:12:a8:ba:5b:7b:4e:fd:33:e1:52:f0:1f: 71:39:fb:dc:32:a9:b8:a3:ec:b2:7c:58:d8:4a:39: 9f:e1:9f:a6:1d:cd:2e:59:da:cd:93:78:8b:fc:ed: fc:63:60:db:80:ec:fb:78:c8:b8:ea:40:cd:b7:15: b1:66:52:c5:ef:ae:d2:ed:59:66:35:d0:99:48:8d: 81:13:46:ae:e0:4d:0e:bf:34:10:f7:58:04:7d:fb: b2:0c:29:4a:26:32:91:5a:5b:66:00:15:0f:fe:3f: 79:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A0:01:10:7A:FC:5C:F2:81:F2:87:FD:11:75:80:3C:90:BE:5D:41 X509v3 Authority Key Identifier: keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:5b:b2:e9:ca:93:91:91:6f:cd:4c:9b:dd:14:e9:35:f0:80: bd:ec:b4:13:e4:31:06:02:21:a3:44:6e:06:b2:ba:5a:2d:dc: eb:27:d4:f6:24:9d:f8:d8:76:41:6c:36:6e:46:9e:12:c6:09: 19:56:03:5c:6a:ad:59:19:11:60:21:92:f6:0a:14:f0:ec:3c: 04:f3:d0:6f:5d:15:31:9b:56:b5:2d:25:c4:9e:97:3b:e3:d5: ca:ef:7a:32:2e:e5:d1:c0:14:b6:84:36:0c:b2:28:40:72:47: 8a:2d:02:14:53:4d:59:2d:ae:51:df:4d:cc:d1:79:ef:a4:2b: 75:c0:e4:19:ff:d1:67:eb:48:4c:cd:c5:dd:37:ee:5f:e7:74: d3:b2:3c:cd:7c:ef:91:4e:d9:a1:27:97:e9:93:d1:62:8d:13: 84:ca:4a:40:14:f8:a7:47:a3:44:75:75:e3:91:2d:ad:30:c6: ff:aa:d0:75:81:54:5c:9e:d9:3a:f3:d7:2c:ac:c6:ef:cb:2a: b5:76:31:f7:ef:94:64:18:81:86:47:9d:45:d4:1e:e1:87:a9: c5:de:e2:bf:d4:dd:9f:79:7b:ec:57:b6:9a:2b:fb:f0:73:d8: 09:51:82:3e:7f:68:54:aa:ab:37:cf:9d:49:75:ad:82:2e:31: 1e:80:72:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ6Vo2Wvy7RtTdyf0nxNd2VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNDQ2ZGE3YTcwYmNlNzczZWMyYmMxNjU1YWFlMzBjM2Mx ODQxMmMwHhcNMjUwNDI4MDMwMDE0WhcNMjUwNDI5MDMwMDE0WjAzMTEwLwYDVQQD Eyg1MGEwMDExMDdhZmM1Y2YyODFmMjg3ZmQxMTc1ODAzYzkwYmU1ZDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1yIjatF9VU3qkRr7nGD9ytO7HSS Hzs/oi84k9fF6bMItMxXKrf4TH1qL3ES6n5MsjFtInk4Tf4erfWLb4zrbEsaPubf YUiEa7eCkdIugyaI82bcSthW3SuchO8m5oDCawLZwc2JtlO/kPbgSjsM3vlXJLjx UJbjvp04JLSDGV7HJxIeRy8HjU21GMwhkxtaVIgmn+HttNkSqLpbe079M+FS8B9x OfvcMqm4o+yyfFjYSjmf4Z+mHc0uWdrNk3iL/O38Y2DbgOz7eMi46kDNtxWxZlLF 767S7VlmNdCZSI2BE0au4E0OvzQQ91gEffuyDClKJjKRWltmABUP/j95iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCgARB6/FzygfKH/RF1gDyQvl1BMB8GA1UdIwQY MBaAFCNEbaenC853PsK8FlWq4ww8GEEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQt MjVjYzlkNmNmYmI5LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQtMjVjYzlkNmNmYmI5 LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABFuy6cqT kZFvzUyb3RTpNfCAvey0E+QxBgIho0RuBrK6Wi3c6yfU9iSd+Nh2QWw2bkaeEsYJ GVYDXGqtWRkRYCGS9goU8Ow8BPPQb10VMZtWtS0lxJ6XO+PVyu96Mi7l0cAUtoQ2 DLIoQHJHii0CFFNNWS2uUd9NzNF576QrdcDkGf/RZ+tITM3F3TfuX+d007I8zXzv kU7ZoSeX6ZPRYo0ThMpKQBT4p0ejRHV145EtrTDG/6rQdYFUXJ7ZOvPXLKzG78sq tXYx9++UZBiBhkedRdQe4Yepxd7iv9Tdn3l77Fe2miv78HPYCVGCPn9oVKqrN8+d SXWtgi4xHoByug== -----END CERTIFICATE-----Generated at Mon Apr 28 07:41:47 2025 by rpki-client