$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft File: sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json) Hash identifier: YVCBC0QFeEThuuUhcCNk0jugK+g2/FO6FqYGnWPuS0U= Subject key identifier: 29:D5:0A:C8:DC:DD:72:9E:2F:12:C2:75:F2:03:FB:AA:E6:2F:46:91 Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 0196729D1988D66FA1D5EF47AB1FC90BA5A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft Manifest number: 110E Signing time: Sat 26 Apr 2025 15:00:20 +0000 Manifest this update: Sat 26 Apr 2025 15:00:20 +0000 Manifest next update: Sun 27 Apr 2025 15:00:20 +0000 Files and hashes: 1: 0Masll6bbXJowlWVdStYbs2tx6E.roa (hash: Rro7robf4OQi2SafD/+wvUIv6rGO8rIKSIcGQQxuDhQ=) 2: GbtphNgjK0vdnL4zh4ndNFpMq98.roa (hash: u7HLBqxJEFs0R6rzUwZQDioPq2mneZLMKiZ7WWFYBQg=) 3: HIdYT19grrvIrsLvbv9c-RyNoYM.roa (hash: gMWRLPsAhHALB5C0CyTnC2YpfuJ8OqfVcPAvIC+/69E=) 4: OUt5ZB5ErN_qim9RPT1gdy6_fsA.roa (hash: jUTt0o3pm+pyLvb6Ukj+eNNJ2nE69gsAdM4+2ox59R8=) 5: R_OlpiLM8AchN0LvgG-brNSPeok.roa (hash: Ha2jaeCRdAo3cD1S+TwOcwXV50R2/YikiY9fj+5QfSk=) 6: T-i1HnnAiZlugAgaa37LNPgeYyA.roa (hash: JZrI/oiF2iHcbj3PFgspIgoRlLncbc7mtmuIlUx+R6U=) 7: Ud1-qg4EKtzsyzWQNEDC3VcBphk.roa (hash: tG3V/2PvCU18KU7wZhF4EU3GKrtt9KLBzuF/XDqtx0A=) 8: euxOi9Xp3n7AyiSfCEP-xOv9hDo.roa (hash: hqClLQ+yTS1bqIE58Fj5bi8zXosgwwjJT2D8au7VfQ0=) 9: oTdRqWCGB_YZL-zzysNmCsUI8OU.roa (hash: Z3CxIW13t+FC0u78Ynw/b8NpKjP4IiiiZzM5isLuBQ4=) 10: opjBwsfQwaZJKVugJJ6MF-vgLQw.roa (hash: MNlxdTCVbR2yhgEH9HVAaomJahjdfDcmr5j99PJZjnc=) 11: piqnuODF7lhN690__V-7lYt7O9g.roa (hash: bJ0by5gF5+d/INxTw0HKrWzPPNlfAOi7lGQ6bR/NpSU=) 12: qjtTNxOEgSr0b6Weeb9JJHyFnhM.roa (hash: Eb0gxKs3qeMLVvYaIgIGm1oY4DsjaHktiucw1gfNHns=) 13: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: Tprtf6hPWfsceKlUOEIJERMB84XLzVYnJCihYHYiVAw=) 14: saFbFhTUuPzFfFtMaOygiXjsdjQ.roa (hash: TDWnbYHUGSQ6GnqoY3kIyLDGpSZVRvMCUWL7dARQ87Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:9d:19:88:d6:6f:a1:d5:ef:47:ab:1f:c9:0b:a5:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Apr 26 15:00:20 2025 GMT Not After : Apr 27 15:00:20 2025 GMT Subject: CN=29d50ac8dcdd729e2f12c275f203fbaae62f4691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c6:6b:f6:1e:1d:5a:ea:48:91:70:60:0d:be: eb:d2:cf:ba:07:ed:28:59:6e:ca:6f:3b:25:d1:cd: 15:7e:49:ba:07:d9:22:5c:a0:5f:c9:e4:bf:33:bd: 4a:63:e3:15:b6:c0:d3:ec:a1:ca:08:03:b3:43:4f: df:f6:50:c1:1f:cd:68:98:25:d8:8d:1b:51:83:8d: 82:40:e6:78:74:74:de:fc:ae:58:39:33:fa:3e:fe: f1:e9:9f:df:67:af:0c:79:4b:94:14:c0:4a:d9:ae: 80:64:a9:f1:b5:f8:a3:00:e7:a8:c7:6f:1f:db:38: 13:1b:7d:77:e6:6f:56:44:b6:25:15:6e:35:e5:3c: 70:65:69:5a:d8:a3:bc:e2:e7:16:d4:d1:12:01:c6: 07:7a:3c:5d:0b:55:c2:fd:0c:d6:87:8d:0d:b4:87: 71:46:a0:46:9f:46:97:7c:79:d7:a9:81:12:54:c6: f0:5c:65:19:ea:e0:c9:ff:7f:fb:3b:bc:90:3f:81: 22:34:ca:fd:54:0c:4a:ef:ee:47:43:02:c8:f3:c0: 66:6b:e9:d6:9b:04:fb:ec:f1:8c:99:59:5b:43:b3: c3:4c:6a:31:f3:9c:9e:9e:a7:72:2a:b3:9e:a8:73: 15:69:84:50:e1:76:ca:fb:7c:7e:39:00:6a:e6:39: 99:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D5:0A:C8:DC:DD:72:9E:2F:12:C2:75:F2:03:FB:AA:E6:2F:46:91 X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:3a:e5:7d:74:98:86:f3:92:af:ad:35:df:14:80:70:10:c0: 79:3d:10:68:85:da:6e:17:f1:87:f1:55:0c:29:78:e5:26:bc: 61:52:e2:c3:a8:f2:90:8c:47:bb:63:8f:a9:14:4b:da:f8:85: 06:2f:5d:22:b8:3d:9e:05:24:de:db:c1:d6:0c:99:2d:83:14: 6d:31:a5:0d:a5:23:e8:99:b3:e3:64:ce:43:59:5d:7b:73:ce: f3:2d:9c:eb:14:a2:a0:93:29:9c:a8:1d:74:17:7a:ef:ca:ae: 6a:f6:aa:ec:4f:9a:c1:5e:0d:76:c2:c2:82:70:bb:bd:62:3a: c2:b5:62:6b:46:97:c7:e4:eb:b1:49:32:04:d1:59:88:bb:92: 70:50:5b:e9:b7:76:0d:cc:0a:b0:f0:b9:30:ad:1a:b8:d7:cb: e8:f6:cb:2c:27:47:08:54:ba:b0:f2:07:dd:95:65:dd:00:50: 1a:a1:44:a4:57:ed:33:02:2d:cc:7a:d7:86:d4:e8:02:0b:0e: 07:33:ae:5f:75:f9:10:cc:23:81:8c:58:46:0e:f3:19:14:68: cc:52:ee:ce:ec:f1:37:f1:b6:8f:96:1e:11:81:e9:91:43:7f: 63:c6:20:e9:2f:12:70:d7:6d:aa:97:c8:58:c7:6e:08:dc:a0: 58:82:85:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZynRmI1m+h1e9Hqx/JC6WiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjUwNDI2MTUwMDIwWhcNMjUwNDI3MTUwMDIwWjAzMTEwLwYDVQQD EygyOWQ1MGFjOGRjZGQ3MjllMmYxMmMyNzVmMjAzZmJhYWU2MmY0NjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsZr9h4dWupIkXBgDb7r0s+6B+0o WW7Kbzsl0c0Vfkm6B9kiXKBfyeS/M71KY+MVtsDT7KHKCAOzQ0/f9lDBH81omCXY jRtRg42CQOZ4dHTe/K5YOTP6Pv7x6Z/fZ68MeUuUFMBK2a6AZKnxtfijAOeox28f 2zgTG3135m9WRLYlFW415TxwZWla2KO84ucW1NESAcYHejxdC1XC/QzWh40NtIdx RqBGn0aXfHnXqYESVMbwXGUZ6uDJ/3/7O7yQP4EiNMr9VAxK7+5HQwLI88Bma+nW mwT77PGMmVlbQ7PDTGox85yenqdyKrOeqHMVaYRQ4XbK+3x+OQBq5jmZNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCnVCsjc3XKeLxLCdfID+6rmL0aRMB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZjrlfXSY hvOSr6013xSAcBDAeT0QaIXabhfxh/FVDCl45Sa8YVLiw6jykIxHu2OPqRRL2viF Bi9dIrg9ngUk3tvB1gyZLYMUbTGlDaUj6Jmz42TOQ1lde3PO8y2c6xSioJMpnKgd dBd678quavaq7E+awV4NdsLCgnC7vWI6wrVia0aXx+TrsUkyBNFZiLuScFBb6bd2 DcwKsPC5MK0auNfL6PbLLCdHCFS6sPIH3ZVl3QBQGqFEpFftMwItzHrXhtToAgsO BzOuX3X5EMwjgYxYRg7zGRRozFLuzuzxN/G2j5YeEYHpkUN/Y8Yg6S8ScNdtqpfI WMduCNygWIKFiQ== -----END CERTIFICATE-----Generated at Sat Apr 26 20:33:04 2025 by rpki-client