$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft File: kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json) Hash identifier: q7i6tmZMb7Wt6Yqh8ksWISaYmaFJuLGse74p/j7BAw4= Subject key identifier: 74:E1:CA:A5:DC:79:20:6A:50:31:07:34:B2:F4:D5:6C:82:87:A7:C8 Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Certificate serial: 0196748C3223360C4CED9D4DA7D4647C1428 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft Manifest number: 152F Signing time: Sun 27 Apr 2025 00:01:07 +0000 Manifest this update: Sun 27 Apr 2025 00:01:07 +0000 Manifest next update: Mon 28 Apr 2025 00:01:07 +0000 Files and hashes: 1: 1Is4Dx2b4hAEbNi2pJoiESDUUOg.roa (hash: Iq8BDLkXu6DWvDv/qAdFA5wJ/wndBJHGHruYEfWId0I=) 2: 5SbiNIlOSo5rSNp1qoSW-dXTShg.roa (hash: uVc4NzR1mD0S0EgbWMAzbFbtAKv13hqUCRgnRLw7Bjw=) 3: Jds9VOdsrBFbfq4zn6-y356BGP4.roa (hash: HezTqg7qCIYcC14zyjNtznQH/Br2gzRPiHXceTw8UGg=) 4: Nc2fha0lLWlvc6xMAIxXT07_q2w.roa (hash: mO6BTT3XjIVWSygzqP8zo/wWNxMwAbGXuPNN6vNEhUE=) 5: VHnEdWOU21TmJWTQH9-doQXQ0yk.roa (hash: pFCoqQmJJvFJk4sf3//959OhDhdVi2aYYgZGYzF037A=) 6: ZR5HRzEqKWtKpqmMzL4r6DgJHWw.roa (hash: VJyDWQzVLgkrKXE4tqLoSvO15wkiKpkLd3L7U2g60hg=) 7: cnLqz6Kh83iV906wpgWkxQuX_-s.roa (hash: KwRJARsixxsJl6qp3pBwEDPF/6TBUWBOFwYl9jwvdb0=) 8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: NyHV2UPIOo9Zpb9bsPQmVENCoUbM/81j6NYKMoOMK5c=) 9: qpIHRqhd7Nb3PZWHKXegTOoXNV4.roa (hash: Zo5QxFaHcYek6dzqi+zquJFUfLpMRdJYYo05MF+VngU=) 10: swmwnpHGQQ_MAJYmDfyapkyOrco.roa (hash: tPimhTpohNCgbw9pSvdpk8DZxmGSBfS96JkOf5fTibk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:74:8c:32:23:36:0c:4c:ed:9d:4d:a7:d4:64:7c:14:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Validity Not Before: Apr 27 00:01:07 2025 GMT Not After : Apr 28 00:01:07 2025 GMT Subject: CN=74e1caa5dc79206a50310734b2f4d56c8287a7c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:52:ae:20:8e:48:e2:d0:96:32:63:f3:81:da: 45:c0:6e:78:fd:e9:00:34:77:3f:4d:64:97:e2:01: 16:3a:fd:8b:df:d8:b0:f4:f1:81:d2:7a:f8:09:fe: ea:47:05:e0:09:50:04:23:d7:84:ab:d5:0e:c4:bd: cb:1f:30:19:6e:50:a6:43:05:6a:4a:66:62:e3:ea: 63:a3:92:f5:ed:3a:ec:3d:ab:61:c5:f4:d3:71:40: 0e:ec:ed:51:e0:95:c7:2c:61:1d:49:49:05:aa:14: 21:4d:f1:37:3f:bd:fa:63:ce:93:e5:1e:3d:8e:54: c0:42:16:43:5a:14:41:00:20:df:eb:67:55:e7:55: 60:d9:39:a2:ee:ae:4a:70:d9:77:d5:2b:27:92:67: 4f:07:7e:12:f7:8b:ae:66:b2:da:78:71:86:f9:fb: c9:08:26:76:a6:78:32:df:4e:ae:56:b4:2c:ea:64: 14:9f:3f:2d:de:47:7a:5b:f5:a6:88:5f:8e:8c:31: 6a:a6:c7:66:bd:af:6c:18:a3:27:6c:fe:da:02:75: c9:10:65:19:b6:b8:30:b3:fb:0f:75:d8:93:d8:ba: 15:d1:cd:42:e7:f7:f4:f8:1c:c7:4f:68:10:3f:e0: 6e:54:cc:f0:76:49:33:da:46:5a:7c:09:fe:a5:43: 69:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E1:CA:A5:DC:79:20:6A:50:31:07:34:B2:F4:D5:6C:82:87:A7:C8 X509v3 Authority Key Identifier: keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:85:fa:5b:8a:c3:d1:da:ac:5f:95:0a:df:b2:08:d1:ac:e4: 7c:3d:94:bf:77:1a:dc:13:e1:11:b7:7c:4f:d8:b6:4f:2e:41: 4f:28:7b:a1:85:32:be:3c:29:9a:a0:56:c3:00:1e:4c:b4:7e: 0e:d0:25:89:ea:92:2a:af:d3:59:01:ef:04:1c:cb:fd:60:6f: f2:47:26:6a:a3:06:13:dc:84:a7:66:d7:57:27:ee:6a:51:ff: e6:3b:ec:1f:cb:e0:ce:ad:b4:98:6c:f8:00:2e:72:f7:ef:9c: 0a:54:a4:2f:a3:73:c9:c8:12:89:a1:4f:94:c8:65:1c:ff:80: 8a:ec:93:d9:23:2d:08:66:fd:7d:cc:bf:8b:fa:6f:64:6f:94: 80:34:a6:20:78:08:80:2d:97:9c:a5:7b:b4:56:65:51:1f:25: 47:bf:80:ee:ce:52:92:81:8f:9e:13:ff:b3:71:50:f9:7d:ea: 9c:e8:eb:b6:aa:3c:61:2c:29:e1:21:91:90:9a:e0:fc:01:8c: 47:1f:8f:fe:ba:58:eb:3e:a3:8d:92:e7:06:c3:26:30:9a:ea: 06:71:2b:bd:37:a7:19:30:49:38:20:fc:cb:67:ef:c6:6c:b4: a4:96:64:38:9d:cf:c1:d5:42:58:e6:88:01:7d:82:b4:e2:89: d5:f0:02:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ0jDIjNgxM7Z1Np9RkfBQoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5 ZTUwNTUwHhcNMjUwNDI3MDAwMTA3WhcNMjUwNDI4MDAwMTA3WjAzMTEwLwYDVQQD Eyg3NGUxY2FhNWRjNzkyMDZhNTAzMTA3MzRiMmY0ZDU2YzgyODdhN2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVKuII5I4tCWMmPzgdpFwG54/ekA NHc/TWSX4gEWOv2L39iw9PGB0nr4Cf7qRwXgCVAEI9eEq9UOxL3LHzAZblCmQwVq SmZi4+pjo5L17TrsPathxfTTcUAO7O1R4JXHLGEdSUkFqhQhTfE3P736Y86T5R49 jlTAQhZDWhRBACDf62dV51Vg2Tmi7q5KcNl31SsnkmdPB34S94uuZrLaeHGG+fvJ CCZ2pngy306uVrQs6mQUnz8t3kd6W/WmiF+OjDFqpsdmva9sGKMnbP7aAnXJEGUZ trgws/sPddiT2LoV0c1C5/f0+BzHT2gQP+BuVMzwdkkz2kZafAn+pUNpQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHThyqXceSBqUDEHNLL01WyCh6fIMB8GA1UdIwQY MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt OTA5NmUxNjc0ZTIyLzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr4X6W4rD 0dqsX5UK37II0azkfD2Uv3ca3BPhEbd8T9i2Ty5BTyh7oYUyvjwpmqBWwwAeTLR+ DtAlieqSKq/TWQHvBBzL/WBv8kcmaqMGE9yEp2bXVyfualH/5jvsH8vgzq20mGz4 AC5y9++cClSkL6NzycgSiaFPlMhlHP+AiuyT2SMtCGb9fcy/i/pvZG+UgDSmIHgI gC2XnKV7tFZlUR8lR7+A7s5SkoGPnhP/s3FQ+X3qnOjrtqo8YSwp4SGRkJrg/AGM Rx+P/rpY6z6jjZLnBsMmMJrqBnErvTenGTBJOCD8y2fvxmy0pJZkOJ3PwdVCWOaI AX2CtOKJ1fACLA== -----END CERTIFICATE-----Generated at Sun Apr 27 05:49:56 2025 by rpki-client