$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft File: RotZLzEQvGw1JJqCcaDawamssM4.mft (raw, json) Hash identifier: zWl+x26IW2tOyWU9SjocN0ehimJm++ldl3KQUoU//ms= Subject key identifier: AD:84:16:6C:E2:CD:93:F2:C3:09:BF:EB:91:58:07:F4:C4:B5:00:D6 Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Certificate serial: 019673B00A474469B9AD66AC329BB6D6E311 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft Manifest number: 0519 Signing time: Sat 26 Apr 2025 20:00:38 +0000 Manifest this update: Sat 26 Apr 2025 20:00:38 +0000 Manifest next update: Sun 27 Apr 2025 20:00:38 +0000 Files and hashes: 1: 4PdFFqbPgnyAF8OAZU59EP79EQE.roa (hash: 0N0pRYIfSwp4rQqEao9ImOBW5Z4au+nqt0SGDhOprnI=) 2: 8u1Ww9yNVHCXoKy959EsUaU71zs.roa (hash: MCjwWNvinwMVi61YdY3QarB5BMMcy4gUuYfqYD2T3PI=) 3: B5kdDxNFhlA9AT3PyqFkTX6RY6M.roa (hash: Xin+IDogu4+kKllgKutdfXdJm2piOKuXIHOph9bE8Zw=) 4: RotZLzEQvGw1JJqCcaDawamssM4.crl (hash: sLUQZYa1oVp4QUs6bRPHW7oyDA/xZe47HVLvcizZC9A=) 5: _vYyrixRE-yXYNd95EagmmedMZs.roa (hash: Nq9E9fzlDdc1TerNy7pW2Y+cp+tsEL9ANsKsoDQ0Pwo=) 6: bvgsPr3D5PPxL6J89BfI0hjp6nU.roa (hash: gQ8pHX8IE1KeaNe50ukz0WLLfO6NzXHlCO7loLPh0Ow=) 7: elD2CPARB_SCiElYBqX86L528iA.roa (hash: 4GpojDoTFDR9/As1unQ2wQcCWk8x0pykSLzc87gKTZw=) 8: i1oSM0zm6FdsD8GW2rr18ZJYU9c.roa (hash: vhtU0Gjcgqwk2dDqzgcdqq71xJAqWywoPwJaRLlLExA=) 9: moar5P9-vHm1h7dW1fwgc72NFhw.roa (hash: JbVrT9GvQCxgYaVUxgeC2lZytQA7NzFvIW4W5mDjY3A=) 10: wpO2gWHd7fIiJY2UmwBghuKU8Pk.roa (hash: eNcYuQe4vVrI0lLxGnwWNPY5OwCaWdtNSK5bPAl0Ug8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 17:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:73:b0:0a:47:44:69:b9:ad:66:ac:32:9b:b6:d6:e3:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Validity Not Before: Apr 26 20:00:38 2025 GMT Not After : Apr 27 20:00:38 2025 GMT Subject: CN=ad84166ce2cd93f2c309bfeb915807f4c4b500d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0d:95:db:85:e9:48:64:f3:a5:3c:61:a7:1e: 16:53:f4:a2:4c:62:00:7a:8b:bf:31:8a:9a:d0:f9: f0:8f:58:e1:28:44:12:df:16:a4:22:ff:46:85:66: 2a:b5:0c:36:da:c3:13:ee:59:a2:16:76:1f:c2:8e: 8e:c0:98:5e:ca:43:c3:7e:31:bc:af:d1:5f:69:3c: cd:26:7e:ec:90:22:21:0e:cf:ae:01:62:7c:3c:c2: 9a:87:72:6d:5f:b1:f2:83:33:a7:7d:6d:0b:af:4f: 85:2e:5e:ff:57:31:1c:e0:0a:3d:a4:2a:5d:ee:bc: a9:f1:68:eb:6c:d9:6b:cb:70:aa:d0:28:47:86:fb: 4d:11:47:24:04:95:57:b3:0e:99:ea:43:ad:c9:63: a4:d0:3b:18:a0:9a:46:54:20:51:b5:4e:80:02:dc: 4a:47:f3:f1:41:0a:13:55:05:49:c0:f2:38:c6:0d: bd:77:93:99:70:21:2d:d6:aa:ca:39:c8:7c:7d:63: e3:10:ed:74:0d:c1:90:99:e5:78:db:86:25:3a:7b: ee:44:11:d8:2f:64:3e:29:ee:24:b1:3f:1a:b1:b7: c9:fd:c8:b0:8b:14:82:96:57:9a:ce:e4:7f:37:5d: 69:63:85:a0:af:87:6b:45:3d:43:08:10:27:eb:a9: 7e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:84:16:6C:E2:CD:93:F2:C3:09:BF:EB:91:58:07:F4:C4:B5:00:D6 X509v3 Authority Key Identifier: keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:40:52:46:2f:a9:d4:7b:cb:5b:83:e1:df:3e:59:df:29:09: 43:b3:74:97:37:b5:93:3d:b4:e2:50:30:6b:8e:a3:47:14:30: 47:49:7d:2c:23:2a:02:0d:b2:bf:ef:57:e6:79:94:19:09:b1: 41:4f:9a:07:b6:01:fb:84:46:87:ca:0b:b6:9a:67:c8:9c:f9: 61:23:26:0c:6e:87:a3:2c:7d:e7:96:58:ca:3a:24:24:62:b9: d5:77:5f:4b:7d:27:51:a6:0c:56:e1:d7:b3:e1:58:65:7a:fd: 63:6e:2b:20:e8:39:ba:a6:20:18:26:02:eb:18:01:86:ef:4f: 50:41:d1:93:88:34:bb:e7:53:5b:8c:50:d1:08:20:29:34:17: 75:f7:0b:b7:db:50:07:4c:6b:f9:6f:52:74:4f:35:b9:af:17: d0:bc:91:ec:98:bf:95:11:5f:fe:56:96:0f:4d:10:2c:57:74: 7c:4e:38:4c:b8:5e:0f:81:66:b7:fe:5e:cc:a9:e5:1e:8f:f9: c4:53:84:db:75:d1:ef:11:fe:12:5d:47:c2:0b:30:e7:ef:08: 6d:5a:91:b2:6a:af:39:fd:72:ab:3c:89:ee:a5:16:08:9d:5a: 52:df:72:4f:59:91:5b:cd:e2:b3:58:ab:15:4e:ff:60:5f:ac: a0:c0:1e:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZzsApHRGm5rWasMpu21uMRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGI1OTJmMzExMGJjNmMzNTI0OWE4MjcxYTBkYWMxYTlh Y2IwY2UwHhcNMjUwNDI2MjAwMDM4WhcNMjUwNDI3MjAwMDM4WjAzMTEwLwYDVQQD EyhhZDg0MTY2Y2UyY2Q5M2YyYzMwOWJmZWI5MTU4MDdmNGM0YjUwMGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg2V24XpSGTzpTxhpx4WU/SiTGIA eou/MYqa0Pnwj1jhKEQS3xakIv9GhWYqtQw22sMT7lmiFnYfwo6OwJheykPDfjG8 r9FfaTzNJn7skCIhDs+uAWJ8PMKah3JtX7HygzOnfW0Lr0+FLl7/VzEc4Ao9pCpd 7ryp8WjrbNlry3Cq0ChHhvtNEUckBJVXsw6Z6kOtyWOk0DsYoJpGVCBRtU6AAtxK R/PxQQoTVQVJwPI4xg29d5OZcCEt1qrKOch8fWPjEO10DcGQmeV424YlOnvuRBHY L2Q+Ke4ksT8asbfJ/ciwixSClleazuR/N11pY4Wgr4drRT1DCBAn66l+IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK2EFmzizZPywwm/65FYB/TEtQDWMB8GA1UdIwQY MBaAFEaLWS8xELxsNSSagnGg2sGprLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTct MDUwMzc0OWFkZWEwLzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTctMDUwMzc0OWFkZWEw LzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlkBSRi+p 1HvLW4Ph3z5Z3ykJQ7N0lze1kz204lAwa46jRxQwR0l9LCMqAg2yv+9X5nmUGQmx QU+aB7YB+4RGh8oLtppnyJz5YSMmDG6Hoyx955ZYyjokJGK51XdfS30nUaYMVuHX s+FYZXr9Y24rIOg5uqYgGCYC6xgBhu9PUEHRk4g0u+dTW4xQ0QggKTQXdfcLt9tQ B0xr+W9SdE81ua8X0LyR7Ji/lRFf/laWD00QLFd0fE44TLheD4Fmt/5ezKnlHo/5 xFOE23XR7xH+El1Hwgsw5+8IbVqRsmqvOf1yqzyJ7qUWCJ1aUt9yT1mRW83is1ir FU7/YF+soMAeRw== -----END CERTIFICATE-----Generated at Sun Apr 27 00:21:37 2025 by rpki-client