$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft File: F7UEL8INm6sWduCa9_8bpb-trnU.mft (raw, json) Hash identifier: m+e0ksMVz3Xhlx1q5ws9KAlQNlaiujGOd2PRHbQkXPc= Subject key identifier: EB:60:88:E8:A3:82:6C:A9:95:9B:0D:57:47:83:D1:78:7B:F6:A6:BE Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Certificate serial: 019677FB74A6419424E072428BB4FF1AFCE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft Manifest number: 0E7B Signing time: Sun 27 Apr 2025 16:01:30 +0000 Manifest this update: Sun 27 Apr 2025 16:01:30 +0000 Manifest next update: Mon 28 Apr 2025 16:01:30 +0000 Files and hashes: 1: 5bIFsErhPSlmM37nhrp-eU9l5Y4.roa (hash: W0LEviwE6sQ3/HTSMFGMNopeuLD+ieboT1WS/XkZF1E=) 2: 7rGZ7Kn81ZZ9VKoeH0eLU-kXt9M.roa (hash: wbrR267hltnIltfZnIqap+bK1X+30aRn2vIaMwlZYl0=) 3: 8B9wa-TamsFPX-b9Sjwq2JWmpu0.roa (hash: mYWGy6vPQqUonSl/lzSA7r99GqgJfzuS4OhPL383spw=) 4: A39EZrrDrXLk3J8BZLUN7wQ6C50.roa (hash: Ark/uTgt37FRO8Utnxml8XHzzu9fwVEDGjmOjqbxT4E=) 5: Chb74JL8JJmMbGzdCWsV1I9XTHM.roa (hash: uqlIkNtybKQGK6oYFgs8Gcl/3LifaWUOWXgUOaIWjq4=) 6: F7UEL8INm6sWduCa9_8bpb-trnU.crl (hash: seRnLZh0j254hZy4AyVFM3cu+xaYhPfFmoYK2cHyOYY=) 7: H-wI8WViyvhQ58migChLNEMEYb4.roa (hash: 55jO9FPLyHdmA0ZhDHMAOcwTS+Ma+ZmiF+DkbWOEkzk=) 8: JY2Qbmj2mgX3KDG39J6yIxJr0tc.roa (hash: 1KGhpD1HwCPZtP8VkVF45re3cg2JKrviwS59Vb+WzQ4=) 9: N2B1iU0YSzB2x_40oFW-BcBZpSE.roa (hash: 3Bt9biLCnw654O83mAV6T9k7ZnWMTrPShbMbJlnWNIs=) 10: QnOCtXAVmX13ibu9GQu1nSs9w-k.roa (hash: 2ja4/uzYhdT+ao7xdjqgdrp8HFOJkvXcfpdXCeeEDmY=) 11: YRRXPoENpmdtt6jCnuMjG8rrikY.roa (hash: DbDzgUZdi2jed/+3x8UofBswoXpqS+WPTmkA9M7K92c=) 12: bA2-1nnLbrWRGqFV2afM2bzGsYs.roa (hash: FCcUA1F21qdmoEMQzczm0l/NGWKzFMZ3eCmf0F/+Cd0=) 13: blSvVBOfQQX8HPgRw9s7J2WaT7U.roa (hash: vl3RTDfDlA0AmENRkgmM8JLJlNA1WYfzNQBSFmihkQU=) 14: xZC_xBRdyqTElb8rKCSQViw1QQk.roa (hash: Am0BFTFCqKQ+R9vTI46rJ2D1DFX8Hh5BkVmp7WNJvlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:77:fb:74:a6:41:94:24:e0:72:42:8b:b4:ff:1a:fc:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Validity Not Before: Apr 27 16:01:30 2025 GMT Not After : Apr 28 16:01:30 2025 GMT Subject: CN=eb6088e8a3826ca9959b0d574783d1787bf6a6be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b7:cb:28:37:62:34:37:d3:5d:fe:b9:43:6c: e0:5d:d9:99:6c:a5:ef:90:1a:bb:b4:4e:d4:f6:ed: da:2c:e0:e9:6a:a6:db:fd:e7:7b:0a:07:da:33:f5: b8:97:97:6f:02:6a:bf:24:3a:2e:56:30:68:34:a7: 65:33:33:6d:d6:d2:9b:21:bb:d6:df:5b:33:ff:8e: 5b:82:f7:87:c3:90:3d:01:29:c6:c0:9f:e0:7b:b0: d6:fb:93:dd:44:dd:a4:1a:b0:b3:25:56:3d:c0:b3: 75:d2:06:5c:dc:bd:02:8c:9b:8a:c2:40:4e:e9:61: 62:87:65:23:b4:bf:05:c3:1f:cc:be:d7:80:91:d6: 40:83:e6:4c:3a:71:62:0f:be:71:18:b7:36:56:2d: 08:5f:20:85:9c:06:66:be:f4:1d:cc:3d:60:e3:0c: 9e:e3:de:a2:34:be:7c:14:57:1d:cf:66:f6:5c:5a: e9:ea:82:da:01:29:59:ae:16:e7:cf:c5:4b:3c:66: 67:0f:71:d0:b7:7c:70:2f:97:44:19:8f:e4:48:ad: 4b:44:1f:b1:29:e5:0c:c6:c1:2f:a1:4d:e7:e0:8d: 00:7f:d3:48:6a:a6:c6:fe:41:8d:32:e9:5b:ac:33: fd:36:48:04:29:68:5a:e6:5f:a5:22:cb:e1:4d:04: 0b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:60:88:E8:A3:82:6C:A9:95:9B:0D:57:47:83:D1:78:7B:F6:A6:BE X509v3 Authority Key Identifier: keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:2e:54:6f:07:1a:2b:5d:c2:d2:9e:62:6b:50:8b:85:57:ef: 64:e2:e7:aa:a5:a5:1d:43:80:ec:4e:99:bc:9d:31:9d:5f:ee: be:c4:65:74:4a:1d:77:f3:95:07:14:d4:40:64:af:b5:32:2f: 5c:de:59:03:e7:a7:dd:79:79:c7:76:5c:37:a6:b9:f0:fd:18: 00:d0:96:ec:73:57:44:52:6b:fd:75:4c:3a:6b:23:b2:51:c8: 40:00:35:74:a2:b1:e7:97:e7:30:9e:2c:af:33:89:e8:03:91: f2:84:5f:60:8d:05:53:5a:f3:2f:e9:65:33:1b:48:92:32:7e: b0:b1:85:f4:f5:de:bb:aa:6d:73:5d:bb:7b:47:5b:36:24:40: 36:14:2f:30:1a:c8:7b:26:dd:05:0a:a5:d2:ad:01:48:54:c7: 2f:c4:ff:3c:de:79:16:d7:ba:44:6e:d8:1a:ed:5b:da:27:a2: 06:4a:37:81:71:1e:df:dc:66:50:a7:25:6b:97:b3:af:d1:3d: 09:e7:ca:eb:b0:a0:d4:f4:f1:b7:f3:4d:e5:fd:89:40:10:93: 43:0c:7a:bb:4e:e3:ca:a4:46:4c:16:52:63:01:b4:23:c3:6e: 60:3e:09:f5:7a:1c:9c:96:1e:d8:c2:b5:d1:09:ae:12:0d:23: 6e:a9:f0:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ3+3SmQZQk4HJCi7T/GvzjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh ZGFlNzUwHhcNMjUwNDI3MTYwMTMwWhcNMjUwNDI4MTYwMTMwWjAzMTEwLwYDVQQD EyhlYjYwODhlOGEzODI2Y2E5OTU5YjBkNTc0NzgzZDE3ODdiZjZhNmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLfLKDdiNDfTXf65Q2zgXdmZbKXv kBq7tE7U9u3aLODpaqbb/ed7CgfaM/W4l5dvAmq/JDouVjBoNKdlMzNt1tKbIbvW 31sz/45bgveHw5A9ASnGwJ/ge7DW+5PdRN2kGrCzJVY9wLN10gZc3L0CjJuKwkBO 6WFih2UjtL8Fwx/MvteAkdZAg+ZMOnFiD75xGLc2Vi0IXyCFnAZmvvQdzD1g4wye 496iNL58FFcdz2b2XFrp6oLaASlZrhbnz8VLPGZnD3HQt3xwL5dEGY/kSK1LRB+x KeUMxsEvoU3n4I0Af9NIaqbG/kGNMulbrDP9NkgEKWha5l+lIsvhTQQLoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtgiOijgmyplZsNV0eD0Xh79qa+MB8GA1UdIwQY MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt YmM2Nzk0ZTk1ZTVhLzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALS5Ubwca K13C0p5ia1CLhVfvZOLnqqWlHUOA7E6ZvJ0xnV/uvsRldEodd/OVBxTUQGSvtTIv XN5ZA+en3Xl5x3ZcN6a58P0YANCW7HNXRFJr/XVMOmsjslHIQAA1dKKx55fnMJ4s rzOJ6AOR8oRfYI0FU1rzL+llMxtIkjJ+sLGF9PXeu6ptc127e0dbNiRANhQvMBrI eybdBQql0q0BSFTHL8T/PN55Fte6RG7YGu1b2ieiBko3gXEe39xmUKcla5ezr9E9 CefK67Cg1PTxt/NN5f2JQBCTQwx6u07jyqRGTBZSYwG0I8NuYD4J9XocnJYe2MK1 0QmuEg0jbqnwNw== -----END CERTIFICATE-----Generated at Sun Apr 27 23:49:33 2025 by rpki-client