$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.mft File: C1-MlEfWFLhhgnY9kzMlDi2UEuI.mft (raw, json) Hash identifier: fEc9bE0zW5mrdIs4doHDoFZ9RERJW7wmJz3fu5GCkIA= Subject key identifier: 29:BC:45:2D:F0:BC:29:04:DB:2B:20:6C:7B:D2:14:85:0C:CB:37:40 Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2 Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2 Certificate serial: 01968992B8D29309EB32A9E62EC04A7D57E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.mft Manifest number: 090D Signing time: Thu 01 May 2025 02:00:16 +0000 Manifest this update: Thu 01 May 2025 02:00:16 +0000 Manifest next update: Fri 02 May 2025 02:00:16 +0000 Files and hashes: 1: 0R7qlpggNu0m26niM6erbXxYeHM.roa (hash: OxiLF9x0YYjLKJb8tbqbd3VHeJ/ObZslL98x/IEw1IY=) 2: 5JWwWMcuyVYOaM5wTK2AKc996ao.roa (hash: xjor4B9xYep/0UbImKPt4c2KMWlwoQQAJ1unLV0n+dY=) 3: C0wRBYga_jG_hmUiifB5Me1OlKg.roa (hash: M+eiMy5WDOJQi3nDXBcZuI9+8iSg7ZwjsrSkXclLDb8=) 4: C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl (hash: WYNN5GwyhxFVCCjvozG3yA5IAMjYLBRSbCD0PyfcNew=) 5: M4Jv3Sh9kH6glCggHSZejNULYjA.roa (hash: 8/qGBQWt2IjwfplKSmXmJ0SqW8+ks7O0TJauJ5vtOmM=) 6: TjYZVXxKOa8EVyxrnZD7NzmCZdo.roa (hash: /JIVtM3Gao9wCw2j1cR6n7NvExz/Ot1NMbQjW5Wq054=) 7: bJi42FnwJqN8jH7mbmez6hDvWQ8.roa (hash: KnnxICDY297RUvYPLgL+Dvnh1Bw8KXlSVenTgK4F4O4=) 8: j9-kjL9aqCEGEPsMmVJtf8aJKX8.roa (hash: A4oPwTnbquV31GYynJHNNbrNFHHisTQaY0GAqGYb3gE=) 9: kBsGsKPDw5KOW7ekZNCFpFwFVYw.roa (hash: /R0T/0RMAuzqIkqwYYYz/q3ulggvCfwcd6sMsiuxOI0=) 10: sJYMwo200kc_JOEUu8LgshH8u4E.roa (hash: ZSBFSQniA3kGtcm+Z+BZhg6dXJBYL9d1swTV3ijAXis=) 11: u-9y-LM7GouEYwc1w_OBFzaWlkU.roa (hash: TFxIXc3wdG9by6im/gP7SNpYZHKPr5Ng6frLoi+SwRo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.mft rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 May 2025 22:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:89:92:b8:d2:93:09:eb:32:a9:e6:2e:c0:4a:7d:57:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2 Validity Not Before: May 1 02:00:16 2025 GMT Not After : May 2 02:00:16 2025 GMT Subject: CN=29bc452df0bc2904db2b206c7bd214850ccb3740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b5:b4:c0:77:70:df:f7:de:8a:a4:cb:ab:49: ba:51:e0:cc:28:8d:15:05:85:16:11:e8:36:08:55: 06:f9:8c:b4:5d:6b:9f:35:5f:04:08:99:73:dd:a5: 0b:20:ed:de:8e:10:fc:5e:ea:b3:60:df:08:eb:35: 61:95:e3:52:41:11:2c:9f:1b:3b:e3:8f:05:ea:99: aa:23:3e:06:af:9c:63:c0:60:55:be:92:ee:20:c0: 60:a4:f1:4b:b8:f8:ae:e5:df:84:f7:a1:f8:f5:f4: d3:c5:48:f4:ff:07:09:40:28:a3:9b:2b:b2:cc:d0: 72:4a:84:8f:7e:4e:be:ee:65:9b:97:2e:2b:92:0e: 9b:7b:66:be:02:cb:ba:0f:6c:cc:38:ed:61:ac:f8: dd:5e:88:ac:0c:bf:fc:fa:a4:98:e4:4d:6c:a7:d4: b0:5a:be:ec:d2:d8:0f:1a:9d:8d:37:f7:c7:92:46: 14:e9:21:e1:4f:22:5b:6f:15:ad:84:b1:2e:59:27: b7:67:fd:40:7a:e2:18:d5:da:35:fb:78:c7:56:60: 79:a8:3c:65:e2:48:9c:08:3d:3f:2f:2b:bc:7b:33: af:3f:fe:9c:22:3e:e8:50:45:f2:0b:23:07:4f:fd: 4b:9d:ba:45:52:a4:4f:23:b3:85:b2:77:03:f3:77: 4f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BC:45:2D:F0:BC:29:04:DB:2B:20:6C:7B:D2:14:85:0C:CB:37:40 X509v3 Authority Key Identifier: keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:13:7d:58:29:1f:da:fb:10:f2:6f:cf:d0:70:d7:ac:e3:b7: 80:21:8e:76:8e:54:50:ac:e8:7a:3e:14:7f:96:ea:1f:43:7d: e7:af:71:40:1b:99:5a:30:30:0c:97:57:a4:32:39:c3:32:da: 26:59:e0:e6:6a:10:3a:32:ec:97:1b:6b:44:fa:37:78:a7:e4: c7:cb:57:e6:64:79:8b:69:08:bf:5d:4f:de:87:36:bd:24:db: 62:77:79:66:56:20:56:b6:91:de:11:67:3d:d4:3c:dc:2d:7f: db:94:5a:13:ed:11:09:78:34:cf:8e:20:8c:e6:6f:48:1e:ee: 46:cc:34:f9:05:62:da:52:b1:b9:34:43:44:ad:13:cd:a2:06: f8:c0:10:07:51:66:3d:70:d2:b5:aa:9e:53:69:d6:87:9c:6b: 58:a3:8a:eb:b0:68:63:ed:47:a7:58:ac:00:33:a6:f0:58:5c: 4d:7a:a1:3d:4a:5f:fa:6d:47:46:7c:d4:4a:04:4f:f3:44:f3: d0:56:4f:10:4d:27:d2:00:ab:43:6c:ce:6c:6f:7c:97:dc:c7: d7:a4:28:2c:e1:6e:e6:2b:f8:96:08:8e:a2:c4:33:f4:da:41: 84:e9:1e:35:dc:63:73:04:7e:38:aa:72:79:52:00:be:1c:4f: d6:c1:30:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaJkrjSkwnrMqnmLsBKfVflMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNWY4Yzk0NDdkNjE0Yjg2MTgyNzYzZDkzMzMyNTBlMmQ5 NDEyZTIwHhcNMjUwNTAxMDIwMDE2WhcNMjUwNTAyMDIwMDE2WjAzMTEwLwYDVQQD EygyOWJjNDUyZGYwYmMyOTA0ZGIyYjIwNmM3YmQyMTQ4NTBjY2IzNzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7W0wHdw3/feiqTLq0m6UeDMKI0V BYUWEeg2CFUG+Yy0XWufNV8ECJlz3aULIO3ejhD8XuqzYN8I6zVhleNSQREsnxs7 448F6pmqIz4Gr5xjwGBVvpLuIMBgpPFLuPiu5d+E96H49fTTxUj0/wcJQCijmyuy zNBySoSPfk6+7mWbly4rkg6be2a+Asu6D2zMOO1hrPjdXoisDL/8+qSY5E1sp9Sw Wr7s0tgPGp2NN/fHkkYU6SHhTyJbbxWthLEuWSe3Z/1AeuIY1do1+3jHVmB5qDxl 4kicCD0/Lyu8ezOvP/6cIj7oUEXyCyMHT/1LnbpFUqRPI7OFsncD83dPtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCm8RS3wvCkE2ysgbHvSFIUMyzdAMB8GA1UdIwQY MBaAFAtfjJRH1hS4YYJ2PZMzJQ4tlBLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzEtTWxFZldGTGhoZ25ZOWt6TWxEaTJVRXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mN2Y2YzAtMDlkMC00OTJjLTkyZTYt OGE5NWU2Mzc3MzMyLzEvQzEtTWxFZldGTGhoZ25ZOWt6TWxEaTJVRXVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mN2Y2YzAtMDlkMC00OTJjLTkyZTYtOGE5NWU2Mzc3MzMy LzEvQzEtTWxFZldGTGhoZ25ZOWt6TWxEaTJVRXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcRN9WCkf 2vsQ8m/P0HDXrOO3gCGOdo5UUKzoej4Uf5bqH0N9569xQBuZWjAwDJdXpDI5wzLa Jlng5moQOjLslxtrRPo3eKfkx8tX5mR5i2kIv11P3oc2vSTbYnd5ZlYgVraR3hFn PdQ83C1/25RaE+0RCXg0z44gjOZvSB7uRsw0+QVi2lKxuTRDRK0TzaIG+MAQB1Fm PXDStaqeU2nWh5xrWKOK67BoY+1Hp1isADOm8FhcTXqhPUpf+m1HRnzUSgRP80Tz 0FZPEE0n0gCrQ2zObG98l9zH16QoLOFu5iv4lgiOosQz9NpBhOkeNdxjcwR+OKpy eVIAvhxP1sEwqw== -----END CERTIFICATE-----Generated at Thu May 1 07:55:18 2025 by rpki-client