$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft File: hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft (raw, json) Hash identifier: bF1BEzyh12K95gIMIS0zkU0Fd+zOAkValyCix1/7B/k= Subject key identifier: BE:1D:5E:C0:4D:20:9E:8E:F0:7E:FE:FE:4F:31:A3:CB:E9:71:5B:B0 Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd Certificate serial: 0196914C97DEBF8FFCEDA991CC4EE592AA75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft Manifest number: 113B Signing time: Fri 02 May 2025 14:00:37 +0000 Manifest this update: Fri 02 May 2025 14:00:37 +0000 Manifest next update: Sat 03 May 2025 14:00:37 +0000 Files and hashes: 1: 2Il6q-ZqOuI80bOhmO2ATk_4gjA.roa (hash: qZ2AvjwfuN5RofSpAulT+zvOokvk9hdo9R5gBG6wVV8=) 2: EqxVNlycylxq6ufI9ng2ltdK1KM.roa (hash: b+kpuQsONfGhMD7qgwxZkbzW/4IKkzNE5v/myC4W0qY=) 3: PSbAgR9oWL_1M-wwCnHY0Z_n_5s.roa (hash: UVsiOXoHlbBoR5HA9KIjZeyp4Ya5xZxEFqXfSX00QTE=) 4: QdYIwbhgXZFZDGrsD1bCfWnJfNM.roa (hash: GAa3KktDwm+TlBojUO7F6LnOQMJ0zxC/VLgeFCn23pI=) 5: V1rb0y6iu1TTOsIZQYPUPITNZdc.roa (hash: 4TLj9uQX2T55ymBodPD3FK/tTeE67Ngmw9g4awglSqU=) 6: Yjrt4HsK8wh6pJI81KOUWlnSEwg.roa (hash: XmuwPChIn1UvgMab/4oMWsQTN7bkJ51y5zUd1xVolH0=) 7: aaic0TQ08KDxqNotu0QjynGFp8k.roa (hash: y+rn4gyMmixGkyVVHgb8Zj+xOMFFm7BJm3FAMYf/M4M=) 8: cO2-NOuH2RV4sPciOdoA32su67Q.roa (hash: 9jc3V+7f0q1/c2NMI1faaA1MEEx9FCl4Vp7wxvOlyNU=) 9: euovkC8FzqkWizkBlJiIPuOidbU.roa (hash: NVQ3tcOFWDZctMMGjmKl2U9mGUa0NK9LjFLKrJC2iHM=) 10: gdNItxWNsM4KiGU05OylhksApCc.roa (hash: WiPvUqderzx9CicZMrqZIDKRBrczrFFx57GnwN1V0lI=) 11: hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl (hash: nFt5cDv54Mvgcr6dpeCxFJmjux5bV0nqsZSxoUC8XZo=) 12: oMpZucICfk-8ZesIjg26RzH9z8Q.roa (hash: avfjdtl0mm9+afn2EBtC58m5oIaLp8/rBFhWdaYQq6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 May 2025 14:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:91:4c:97:de:bf:8f:fc:ed:a9:91:cc:4e:e5:92:aa:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd Validity Not Before: May 2 14:00:37 2025 GMT Not After : May 3 14:00:37 2025 GMT Subject: CN=be1d5ec04d209e8ef07efefe4f31a3cbe9715bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8c:32:00:08:da:0e:6f:05:a8:86:6a:34:7f: e6:7c:3e:bd:88:6a:83:62:01:0f:30:f9:57:4d:16: 8a:84:20:b2:bf:6d:c7:03:c6:72:fb:c5:e6:fe:9e: 1c:82:e3:45:74:3f:1a:04:35:87:57:cf:48:ab:39: d4:22:df:2b:7b:db:64:0c:72:7b:75:0d:f2:f9:0e: d6:81:e3:f8:bd:c3:d6:e5:4e:4f:f7:9b:31:66:1b: f9:b8:70:56:f5:59:28:b7:b7:fb:8a:20:84:f1:75: ab:5e:89:be:8d:f2:02:4f:49:21:e3:fc:11:22:dc: 2f:43:0a:17:97:fe:d1:86:6b:f6:9e:1a:0e:1b:05: 37:a0:7c:50:ef:eb:9e:78:df:4a:3c:4f:ca:b0:b2: 17:8e:b6:95:b3:dc:13:c1:f0:55:62:5b:84:50:b0: 92:d0:b1:af:be:35:bb:e6:a5:be:c9:2a:7e:eb:d3: 3c:85:b0:70:a3:75:0c:61:85:b9:ca:9f:b7:e7:09: 2f:d5:d3:2c:96:74:9d:73:05:c8:93:f5:b9:05:8f: 78:c0:06:da:3f:9f:ee:4c:be:48:28:32:69:ac:e4: 76:5d:e8:98:51:66:1e:51:9e:25:1d:98:62:bd:2c: 54:0f:61:6e:04:a9:a9:09:4e:25:d5:69:ce:33:25: a5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:1D:5E:C0:4D:20:9E:8E:F0:7E:FE:FE:4F:31:A3:CB:E9:71:5B:B0 X509v3 Authority Key Identifier: keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:7c:3d:97:51:5d:ce:2a:bd:92:91:89:d3:29:9e:0d:bd:87: 8e:8f:0c:34:33:30:71:7d:21:3e:20:f3:1d:e0:4b:53:5d:d3: 67:bb:70:ce:7e:f7:fb:04:fa:46:27:e2:fc:51:25:0e:4e:93: 6a:cd:59:82:ff:4b:ab:08:bf:ba:f5:d7:60:75:79:16:bd:cc: 32:5a:b9:5d:a2:ec:04:75:06:eb:8f:79:53:6f:a0:d9:cc:7d: be:29:4d:4a:eb:ff:7f:d4:6c:c9:bf:ca:b8:fa:41:82:74:c9: 8d:29:bd:84:07:11:94:52:37:19:ba:b2:0c:44:03:b2:23:56: 21:e6:fb:b7:1b:d1:dc:f2:af:76:88:19:b9:3b:b0:88:8d:c7: 1c:07:34:48:65:01:34:95:68:37:4a:62:8e:3e:52:21:13:3c: 76:ea:f1:a7:1d:3b:25:13:49:cc:b1:a3:ca:5e:a6:2d:de:f8: 5f:6d:39:5a:cb:87:59:86:74:90:c4:17:f8:71:3b:35:73:4f: dd:03:2e:00:4c:46:84:ce:79:9e:3d:fe:68:ca:49:f2:40:48: 80:12:45:74:7c:52:2a:79:94:7a:18:55:58:d2:15:8b:1a:56: ee:83:22:29:03:6f:cd:03:40:ef:32:77:75:03:d8:34:e8:ec: 6a:6c:b6:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaRTJfev4/87amRzE7lkqp1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZDBlNzYzZjkzNWMxNzE2OTRmMTcyMDU2ZWI0NDIwOWRi MmUyY2QwHhcNMjUwNTAyMTQwMDM3WhcNMjUwNTAzMTQwMDM3WjAzMTEwLwYDVQQD EyhiZTFkNWVjMDRkMjA5ZThlZjA3ZWZlZmU0ZjMxYTNjYmU5NzE1YmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwowyAAjaDm8FqIZqNH/mfD69iGqD YgEPMPlXTRaKhCCyv23HA8Zy+8Xm/p4cguNFdD8aBDWHV89IqznUIt8re9tkDHJ7 dQ3y+Q7WgeP4vcPW5U5P95sxZhv5uHBW9Vkot7f7iiCE8XWrXom+jfICT0kh4/wR ItwvQwoXl/7Rhmv2nhoOGwU3oHxQ7+ueeN9KPE/KsLIXjraVs9wTwfBVYluEULCS 0LGvvjW75qW+ySp+69M8hbBwo3UMYYW5yp+35wkv1dMslnSdcwXIk/W5BY94wAba P5/uTL5IKDJprOR2XeiYUWYeUZ4lHZhivSxUD2FuBKmpCU4l1WnOMyWlswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4dXsBNIJ6O8H7+/k8xo8vpcVuwMB8GA1UdIwQY MBaAFIXQ52P5NcFxaU8XIFbrRCCdsuLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2Qt ZjEyODM1ZjAyNDdiLzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2QtZjEyODM1ZjAyNDdi LzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApXw9l1Fd ziq9kpGJ0ymeDb2Hjo8MNDMwcX0hPiDzHeBLU13TZ7twzn73+wT6Rifi/FElDk6T as1Zgv9Lqwi/uvXXYHV5Fr3MMlq5XaLsBHUG6495U2+g2cx9vilNSuv/f9Rsyb/K uPpBgnTJjSm9hAcRlFI3GbqyDEQDsiNWIeb7txvR3PKvdogZuTuwiI3HHAc0SGUB NJVoN0pijj5SIRM8durxpx07JRNJzLGjyl6mLd74X205WsuHWYZ0kMQX+HE7NXNP 3QMuAExGhM55nj3+aMpJ8kBIgBJFdHxSKnmUehhVWNIVixpW7oMiKQNvzQNA7zJ3 dQPYNOjsamy2FQ== -----END CERTIFICATE-----Generated at Fri May 2 22:50:47 2025 by rpki-client