$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft File: a8XefXJVt9WCYMZaEgsWTvEO-QM.mft (raw, json) Hash identifier: oeFO/M5WhmynnPiUs8RlqfDTjE3eoDoCQbT4wbH6QK8= Subject key identifier: 9B:28:B7:56:19:A2:D1:9C:DA:5A:DB:51:0F:CF:26:9C:47:F0:19:53 Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Certificate serial: 019681349F90165F05DD582AFFE195A2C0EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft Manifest number: 14E9 Signing time: Tue 29 Apr 2025 11:00:31 +0000 Manifest this update: Tue 29 Apr 2025 11:00:31 +0000 Manifest next update: Wed 30 Apr 2025 11:00:31 +0000 Files and hashes: 1: 12ToQcSPt7mcdwlwu8cks0_4omc.roa (hash: Iyr2cE2tf2K+xaBK2dhfD2MWZhPJHAOvhdyF3JqR+/g=) 2: 5ZYhCNxqOm04hmY0BhngKxN9rig.roa (hash: 83J35QD4/t+gUfggZnoS3qCNRY62Cfjrx/Jm442KIdY=) 3: DNFKKqPzY2tTxyq4ZF-e6ESwWBk.roa (hash: ONyXaG/qy9WX6Bit7PbMeuasymNM8i3asJe1STaYw+o=) 4: EHiB4q1Vo4oqGAjQtZT7i18dBvs.roa (hash: abzX5lFNPVhGuyGSiOTcu5+TTen+fgBo8SzNpUg+bbw=) 5: HQby7lGCxVhcsYrFBxtLvu1Nq1s.roa (hash: OEoyOXMuUI9gzJHQlRaFw5QR3hyZ9zizJ0Zhg109soQ=) 6: KEB7URRNcLIkdHFl8_NaQFzoCUc.roa (hash: 8o0J9qbfKon/Y8q8sQm0uMymQ1kVnwb8u5ia9INGr/U=) 7: RVuh9Ovnia6HGIxuY5C4mqQkVzw.roa (hash: 7MdQXOdkGadK2Vo4n1LYddNyvg9R887clmJN5QnKDO0=) 8: _4iJCnTkrZTLi3Znw6No51nUp0U.roa (hash: q5ypixYuURsWaauidvKopOxQLyMvMh9Ff8agaEGE8Z8=) 9: a8XefXJVt9WCYMZaEgsWTvEO-QM.crl (hash: braH5xzL7JnB82uSeAOHyIPEayNWL4NybSG9TzNsVKM=) 10: egyYxAR3bwmsGgeknwOtvs63Vmw.roa (hash: XurIkmwZSfSrHBi1j2SOabRmxdimDBrxAVpSXYwSmK8=) 11: gCwZCj5y4eEHhiE3OdNG143EtPw.roa (hash: bJxdVgp0WUK1yUG+3MFHdMNTBJUCc3SJjDGJmr3bN5s=) 12: kWxL8-0FaQ5asnDLfivzWKH4-z8.roa (hash: aTbkIB4IPS1IGAIXN2uxEpuYorOcI3bZmMM6X6TsyjM=) 13: l8zjw_dQH-5IvDX9HiKIRUpeGKI.roa (hash: +s8gDZx10WhNyZs9vlnsxeBJZaCG2xbon0ENNsnrO4w=) 14: wM1Yw5nFuvuJTOAzQjCj5rN5Pm0.roa (hash: ent4AXHk/p6bQe6GuoAZTq2KLI9u7gMCUsO1EmVjq8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 11:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:81:34:9f:90:16:5f:05:dd:58:2a:ff:e1:95:a2:c0:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Validity Not Before: Apr 29 11:00:31 2025 GMT Not After : Apr 30 11:00:31 2025 GMT Subject: CN=9b28b75619a2d19cda5adb510fcf269c47f01953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:aa:ae:07:dc:d2:34:4a:0c:58:cc:eb:ba:c4: c1:e8:d8:92:1a:42:be:ce:9e:00:ef:ba:06:7c:e2: 9d:f5:d3:f3:da:61:79:d4:8a:e4:09:d6:49:5e:2a: da:47:e8:53:75:43:e5:70:dc:24:d5:09:ad:91:5b: f4:6c:f6:e4:31:fb:dd:7b:22:aa:eb:a4:bd:31:43: de:fd:67:4a:e1:8b:45:5b:03:38:98:d4:dd:81:db: d3:62:89:d4:79:a3:db:59:45:27:ea:ba:98:3b:fe: e4:d8:ac:55:e1:05:a5:a2:bf:bd:3e:ef:a3:b9:9e: 25:60:18:20:c8:b5:b8:e3:fe:f9:a8:41:4d:85:3a: f1:d3:ac:5f:94:ac:f8:77:ed:4a:19:92:7b:0b:cf: a0:7c:c9:0c:e8:65:5f:53:f5:04:40:42:b0:32:e7: 65:0e:23:ab:9a:ab:b4:34:0d:77:f4:c7:f8:1c:2b: b5:b4:4a:89:8f:e8:7b:52:45:75:4a:2a:14:25:bc: 7f:f2:51:22:de:f6:c7:f0:4f:34:2c:d3:e4:48:29: c0:ce:a7:5e:74:a5:97:4d:1d:22:62:08:5e:3c:c5: d5:a3:9f:41:75:e2:69:ef:5b:8c:45:7b:df:1b:9a: 00:64:45:55:71:6d:4c:41:54:3b:6e:c8:ae:1a:9f: 7e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:28:B7:56:19:A2:D1:9C:DA:5A:DB:51:0F:CF:26:9C:47:F0:19:53 X509v3 Authority Key Identifier: keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:fe:68:2d:88:84:9d:ee:3b:49:d0:bb:29:6a:fb:f5:d8:fd: 58:59:45:65:c4:b1:6d:3f:09:a4:3c:27:66:ef:fd:82:5d:39: 2a:5a:ca:c0:da:86:c7:bf:ca:00:5f:87:04:e1:c2:2b:c0:ef: b0:5a:9c:d3:5f:89:13:a0:17:7d:6b:82:70:0d:d5:0c:46:cf: 5f:44:d9:70:6b:6b:7f:eb:88:07:33:34:e3:44:a8:b1:28:e9: e5:51:e9:51:c5:f6:61:f0:8d:18:e0:af:ad:3f:37:30:d9:fe: 67:e4:05:aa:b1:96:5f:0e:11:00:f2:dd:03:ac:14:a2:2f:aa: 25:0b:8a:76:e1:2c:08:ee:5d:2b:74:dc:e2:f0:6b:d6:e6:ca: e9:17:5c:14:f4:e1:ac:1b:5c:9b:ff:19:3a:7b:c0:5f:fb:d1: 88:bc:c2:a0:36:24:af:5e:08:a6:60:9e:a5:9f:45:2b:02:0b: f2:cb:6d:71:ed:f7:a2:60:86:ca:1d:f4:55:17:31:7e:5c:0d: 6d:32:f9:ad:ba:f2:cb:eb:a6:f2:6b:18:d1:6d:a7:f8:a8:2c: 03:c8:88:d7:ea:bd:f7:cb:c0:a5:bb:3d:db:c5:77:14:99:23: ab:15:bd:eb:7d:77:17:65:72:c3:f9:af:5e:fe:39:3b:c9:5b: fd:58:34:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaBNJ+QFl8F3Vgq/+GVosDvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw ZWY5MDMwHhcNMjUwNDI5MTEwMDMxWhcNMjUwNDMwMTEwMDMxWjAzMTEwLwYDVQQD Eyg5YjI4Yjc1NjE5YTJkMTljZGE1YWRiNTEwZmNmMjY5YzQ3ZjAxOTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9aquB9zSNEoMWMzrusTB6NiSGkK+ zp4A77oGfOKd9dPz2mF51IrkCdZJXiraR+hTdUPlcNwk1QmtkVv0bPbkMfvdeyKq 66S9MUPe/WdK4YtFWwM4mNTdgdvTYonUeaPbWUUn6rqYO/7k2KxV4QWlor+9Pu+j uZ4lYBggyLW44/75qEFNhTrx06xflKz4d+1KGZJ7C8+gfMkM6GVfU/UEQEKwMudl DiOrmqu0NA139Mf4HCu1tEqJj+h7UkV1SioUJbx/8lEi3vbH8E80LNPkSCnAzqde dKWXTR0iYghePMXVo59BdeJp71uMRXvfG5oAZEVVcW1MQVQ7bsiuGp9+kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsot1YZotGc2lrbUQ/PJpxH8BlTMB8GA1UdIwQY MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt ZmRmNjYzOGQyYzA0LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0 LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqP5oLYiE ne47SdC7KWr79dj9WFlFZcSxbT8JpDwnZu/9gl05KlrKwNqGx7/KAF+HBOHCK8Dv sFqc01+JE6AXfWuCcA3VDEbPX0TZcGtrf+uIBzM040SosSjp5VHpUcX2YfCNGOCv rT83MNn+Z+QFqrGWXw4RAPLdA6wUoi+qJQuKduEsCO5dK3Tc4vBr1ubK6RdcFPTh rBtcm/8ZOnvAX/vRiLzCoDYkr14IpmCepZ9FKwIL8sttce33omCGyh30VRcxflwN bTL5rbryy+um8msY0W2n+KgsA8iI1+q998vApbs928V3FJkjqxW96313F2Vyw/mv Xv45O8lb/Vg0tA== -----END CERTIFICATE-----Generated at Tue Apr 29 16:20:06 2025 by rpki-client