$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft File: rr85Ti8bJRyI2YiocWEIRYB4bvU.mft (raw, json) Hash identifier: VkFNiflIaUtqjMuiE70BJqfHJ0fL6OTWxjzwFOw8q/Q= Subject key identifier: A1:C4:B1:94:23:47:D6:0A:45:CF:60:2F:B6:F1:6D:42:C9:B9:06:E6 Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5 Certificate serial: 0196748C01F6E94A8446E16C6A5B7A8F25D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft Manifest number: 1523 Signing time: Sun 27 Apr 2025 00:00:54 +0000 Manifest this update: Sun 27 Apr 2025 00:00:54 +0000 Manifest next update: Mon 28 Apr 2025 00:00:54 +0000 Files and hashes: 1: 1-_mCNfP9_HNiBcEsvWHOFnGkC9I.roa (hash: JsQNy89vRBMXhfgHBZLMyPK1KVQmDn747eH7PkqTbv4=) 2: 499vYtwuw8upiAA2ubHtry-MPMw.roa (hash: Z3mdQWlNWDCy7MpQvjVwxOFHXRgVUsKCd9CYyZydkdQ=) 3: BV9MkYw-noIEhqphKumJe_rAYPw.roa (hash: cTycQR7uMvIZ+ka9U/Z707XPur1pq5RdGRaj9s/WBEk=) 4: BqTGXwEy0NGO0YDBi2enWJEpe9k.roa (hash: NYaAEL0V4uNdZmz3A2gD5aCaRjRzazsS2Zn8GlYp1k0=) 5: C9bq6HqiO8wvPt8Ohvw7Ya0CzfI.roa (hash: eBedAMyLvvyEc8yS2VDwWUUS44f1pIhLP9yn06vWvAA=) 6: L3ZGNHnhgVbtJA6v9_KfCLPdQu4.roa (hash: tRfv/CcITA5fhGSfuor8bEI1B/6QYSwrTAH88Vxz5+8=) 7: c_qSQSef9yQq7ko-zsOrz05POQI.roa (hash: FNYiHqlJ6193udyi9UzOaM0voKaXuvqgwAhp2rGz6i4=) 8: imE36QLRTMX_BQ-hGxHCq-HzUSs.roa (hash: 9oBmGg8MmifOi5UePbS9lDJePGL5vAfP7BimBla3w98=) 9: lmrSRQ5ihg55QvYqat1AjaV_GvQ.roa (hash: hnfw4d4vCZD3abd8/WtjTv2gdPGfcl5xx0Mpy2oIhPc=) 10: rr85Ti8bJRyI2YiocWEIRYB4bvU.crl (hash: fioa1WP805V46zs+p61BbBrIRdgAPnFgbTwfzLNMfU4=) 11: uFaCHWPgxrsotozK3-PvWIlEI14.roa (hash: E71w1Kj/9g7CI68LBGPMUUdmv1Dhxwi441Gs522xPmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:74:8c:01:f6:e9:4a:84:46:e1:6c:6a:5b:7a:8f:25:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5 Validity Not Before: Apr 27 00:00:54 2025 GMT Not After : Apr 28 00:00:54 2025 GMT Subject: CN=a1c4b1942347d60a45cf602fb6f16d42c9b906e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a5:15:6d:be:2f:ae:89:e9:33:9f:f7:97:92: 86:7b:47:5a:28:62:f8:a5:43:4f:39:e4:1e:b3:96: 60:72:80:a2:08:5c:28:8e:19:15:57:51:ad:08:ae: 43:eb:97:81:9f:2c:11:6d:39:ae:95:a0:da:7a:86: 17:89:c4:77:94:2c:30:e9:e5:fc:7f:e8:78:ab:84: e3:02:67:4f:c7:86:c6:30:fb:35:43:aa:7f:7d:b9: d5:2c:76:82:1d:a1:97:c8:f4:ed:b1:4a:f7:a0:cf: 0d:a4:8c:48:8e:7e:de:4c:89:13:d6:0e:d5:83:a4: a5:b9:1e:4b:e7:fa:a3:5e:14:bb:9e:53:aa:9b:97: db:b9:e3:e4:34:9b:aa:6f:76:0c:aa:45:e4:b7:02: a6:ba:cf:22:49:a9:59:dc:a9:23:7c:30:99:d6:0c: 0a:0a:26:4f:f4:6e:a7:95:b5:77:48:0e:8e:cd:81: 49:0a:43:60:09:dd:e3:15:b8:19:50:be:d8:f9:aa: ca:a0:60:b1:1e:63:23:30:01:1a:5e:d2:ce:66:ed: fd:d6:0d:8c:e2:26:d6:ea:98:ff:47:5b:24:97:f7: 98:50:cd:47:38:ef:8f:51:f6:a0:d2:0d:39:71:3a: c9:23:78:52:5c:62:f7:73:2f:62:0f:6f:0c:a9:bc: d7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C4:B1:94:23:47:D6:0A:45:CF:60:2F:B6:F1:6D:42:C9:B9:06:E6 X509v3 Authority Key Identifier: keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:24:1d:b4:78:f5:02:9f:16:68:2f:2c:1d:41:83:3a:5c:3c: 43:2b:27:35:da:18:4a:78:aa:cb:8e:c8:3b:66:e6:40:dd:b2: bd:a9:1d:24:91:6b:95:f0:37:9a:fb:bf:6c:93:f7:93:2d:d2: 23:bf:1c:18:dc:dc:97:1a:26:35:ac:28:ac:d4:0d:fb:07:62: 0d:b1:c2:ef:46:77:c6:a2:dd:d5:50:6e:8d:4e:f5:98:05:a9: ce:85:f0:67:fb:f0:32:de:f7:6c:d9:3c:52:5d:b1:0c:b3:3e: fa:28:eb:9a:52:64:ac:e5:52:9e:58:cf:b1:a7:ed:ab:d5:b5: 26:98:07:03:68:ef:9e:7c:17:b6:23:87:0f:52:9a:5d:bf:30: 5c:8c:1e:69:ed:25:ad:88:dd:69:92:da:de:0c:e5:10:6a:5e: 39:08:5e:a3:35:e1:ca:d7:64:7a:0a:e9:a7:79:89:70:97:9d: 55:40:04:02:1b:b7:65:62:67:a8:9c:2e:0d:d5:02:72:d1:c6: 08:c2:c5:67:9c:a1:94:18:a4:7c:03:72:2d:1e:02:0a:3a:c8: 8f:1d:27:f9:f3:73:c3:c2:02:ca:e4:56:e8:53:42:40:95:85: ba:20:e5:dc:4f:e1:08:bd:a1:0b:5c:3b:43:50:5d:f2:cb:b9: 95:12:d9:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ0jAH26UqERuFsalt6jyXZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmYzOTRlMmYxYjI1MWM4OGQ5ODhhODcxNjEwODQ1ODA3 ODZlZjUwHhcNMjUwNDI3MDAwMDU0WhcNMjUwNDI4MDAwMDU0WjAzMTEwLwYDVQQD EyhhMWM0YjE5NDIzNDdkNjBhNDVjZjYwMmZiNmYxNmQ0MmM5YjkwNmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaUVbb4vronpM5/3l5KGe0daKGL4 pUNPOeQes5ZgcoCiCFwojhkVV1GtCK5D65eBnywRbTmulaDaeoYXicR3lCww6eX8 f+h4q4TjAmdPx4bGMPs1Q6p/fbnVLHaCHaGXyPTtsUr3oM8NpIxIjn7eTIkT1g7V g6SluR5L5/qjXhS7nlOqm5fbuePkNJuqb3YMqkXktwKmus8iSalZ3KkjfDCZ1gwK CiZP9G6nlbV3SA6OzYFJCkNgCd3jFbgZUL7Y+arKoGCxHmMjMAEaXtLOZu391g2M 4ibW6pj/R1skl/eYUM1HOO+PUfag0g05cTrJI3hSXGL3cy9iD28MqbzXdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHEsZQjR9YKRc9gL7bxbULJuQbmMB8GA1UdIwQY MBaAFK6/OU4vGyUciNmIqHFhCEWAeG71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2It NjFlN2Y0MGQ1ZGQ2LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2ItNjFlN2Y0MGQ1ZGQ2 LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXyQdtHj1 Ap8WaC8sHUGDOlw8QysnNdoYSniqy47IO2bmQN2yvakdJJFrlfA3mvu/bJP3ky3S I78cGNzclxomNaworNQN+wdiDbHC70Z3xqLd1VBujU71mAWpzoXwZ/vwMt73bNk8 Ul2xDLM++ijrmlJkrOVSnljPsaftq9W1JpgHA2jvnnwXtiOHD1KaXb8wXIweae0l rYjdaZLa3gzlEGpeOQheozXhytdkegrpp3mJcJedVUAEAhu3ZWJnqJwuDdUCctHG CMLFZ5yhlBikfANyLR4CCjrIjx0n+fNzw8ICyuRW6FNCQJWFuiDl3E/hCL2hC1w7 Q1Bd8su5lRLZ8Q== -----END CERTIFICATE-----Generated at Sun Apr 27 09:15:01 2025 by rpki-client