$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft File: ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json) Hash identifier: wBPYScSF11HophSKd4SoKUxNL2CfVpOfHl3cVeA8mvc= Subject key identifier: B0:14:16:14:76:63:5A:E5:9F:EB:AF:59:E7:58:81:00:67:F5:F4:0B Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05 Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205 Certificate serial: 01967D20F810382CA4A8E7396C9157254E0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft Manifest number: 152A Signing time: Mon 28 Apr 2025 16:00:34 +0000 Manifest this update: Mon 28 Apr 2025 16:00:34 +0000 Manifest next update: Tue 29 Apr 2025 16:00:34 +0000 Files and hashes: 1: 1-FVNiQvWEXUQsyhSP2mXL7ZeFhI.roa (hash: h2VWp4VUz/KwikufobsIYuUTWP+PbubtA5kM1+IYNJ4=) 2: 1-cC_8sf2Sjlcbm7-DZh4XuYIArQ.roa (hash: 0N5yH6BWqUs7tPNNDSMGPx2mfE/ZRDiPQfeLQl52Wgo=) 3: GTiO-SupitdTmKiZ_HKcU4MJuTk.roa (hash: +PZAxnriWNXJlrxxhGkuM8aqghAi9SsDw/xLwTjAVR8=) 4: Oe4b0YKTYWpvik3U2IZ6qMIqY0Q.roa (hash: UL3WTeHzd5FXSU3d7socZAKRgjBZ+Jri4TxH4t/75EI=) 5: XF9ImwV6WWJIs0xQcjK4t7jAy60.roa (hash: cqd2xtXIiuriNNQV4wixCocQ/6vU5JsRpBkdhH+9z5k=) 6: f6ghH_7B3PzM3ktCIJpbMer11MQ.roa (hash: gQOe3jDJjm6Z8U0Sg1BUTciGU/YhoqXEIyyDOVhhKCY=) 7: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: +9IJ+BlgKxu1ct3rmG4KIGqitYrL5fXo6FlaQb0+NrU=) 8: i30xTo-UR4_VbHo8fjprUc4AF6g.roa (hash: a1dsNKX1kvmUfXHRJMRlL3dZirJz9clcR1rF2jPzapU=) 9: uhgMFZw8rs0tJvJzvMK6WeU68F0.roa (hash: qV6k2QQIZBdjD0SstNGQRZVonpUjQ86it1wpOl33iLI=) 10: xb_V8FoCziLwhsNf2nDbMavL4CE.roa (hash: FYXyUhIT7c2rjGPzDYmHZI9gN0Jm7MertTGE0IiU5ck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 15:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7d:20:f8:10:38:2c:a4:a8:e7:39:6c:91:57:25:4e:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205 Validity Not Before: Apr 28 16:00:34 2025 GMT Not After : Apr 29 16:00:34 2025 GMT Subject: CN=b014161476635ae59febaf59e758810067f5f40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:b4:18:7d:f2:db:d6:c6:a3:97:24:fe:5d:2b: 07:9f:21:73:96:44:d0:43:72:40:51:5d:d1:1a:81: 89:a0:ba:ee:3f:9a:66:83:ec:00:fc:07:03:23:b2: 2a:ad:4e:ce:69:9c:0c:55:83:88:98:5b:55:99:0f: a4:72:14:3c:de:b3:23:a4:c7:80:7f:04:29:09:c1: 9b:78:36:52:72:d9:1a:e9:22:6e:cc:1b:f2:19:15: 09:6c:f9:68:0d:c8:5a:15:9c:0f:71:c1:c9:fc:0e: 4e:13:10:ca:9e:d3:5b:9f:3a:2a:35:2b:1d:59:01: 9f:f3:b7:04:ec:ab:14:e1:59:62:88:0e:39:da:59: 89:eb:fb:44:f4:ad:58:cc:e5:2d:a5:79:0c:c1:91: 2d:49:74:7e:ba:73:79:19:e7:55:97:b4:b4:94:74: bf:81:2b:fa:c3:80:a7:bd:e0:e4:69:d2:8c:e0:f7: 2e:3b:d2:b4:47:2c:8a:27:50:3a:5d:a3:93:94:74: 8b:56:66:77:ca:42:8e:f1:96:2b:93:36:70:db:c7: 9e:7d:c6:aa:ac:a8:f6:8f:4f:2f:d5:0d:17:45:d2: 2d:1b:e4:5b:57:bf:e5:b7:a7:e2:06:2a:8f:9d:dd: 45:15:8b:04:fd:1d:37:c1:20:6f:03:6a:b2:1a:bb: ed:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:14:16:14:76:63:5A:E5:9F:EB:AF:59:E7:58:81:00:67:F5:F4:0B X509v3 Authority Key Identifier: keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:77:5c:8f:90:7e:10:53:88:33:a6:c5:f2:7d:ce:c1:fe:4f: 00:84:f9:20:15:95:48:2c:33:3d:9e:db:31:1a:76:d2:08:68: 53:97:9d:24:fe:ed:c4:fd:a5:31:8a:0b:f1:6c:66:d9:f3:da: c4:7d:5f:ce:6f:d3:79:2e:f7:30:d3:c7:12:cb:99:35:76:46: cd:0d:a2:b4:3c:71:4b:38:82:19:44:ed:a5:68:54:22:ae:0d: 31:c2:32:63:6d:ac:33:fe:77:88:64:fc:15:5f:e7:6d:bd:0b: 07:c8:98:4b:f4:62:1e:f7:d5:c9:49:c9:2d:22:f9:6b:1b:92: 9d:93:df:9f:2d:b6:d0:c0:29:c9:93:e0:d3:33:bd:d1:74:ff: 7f:72:4e:be:ca:96:a4:34:17:fd:67:ce:1b:df:48:59:0f:17: 8d:fa:22:11:42:d8:0e:d6:f4:16:52:3b:18:2a:ae:24:3e:06: 47:06:28:c7:fe:7b:78:f7:21:48:1c:70:e7:6e:5b:e5:8c:ca: ef:86:35:8c:aa:f4:f3:1d:62:25:ee:39:dd:69:2e:e4:33:b7: 72:4c:b7:30:fb:be:aa:81:6d:43:b1:e1:41:e0:1d:8c:ac:99: e9:e3:e3:5c:b5:b6:05:a5:37:d3:48:cb:b6:46:66:1e:12:18: b8:05:e9:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ9IPgQOCykqOc5bJFXJU4LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZWVkNDA5MTM4M2Q5ZWQ0MDU2ZDlmNGVmZjdkMjYyMmRk Y2UyMDUwHhcNMjUwNDI4MTYwMDM0WhcNMjUwNDI5MTYwMDM0WjAzMTEwLwYDVQQD EyhiMDE0MTYxNDc2NjM1YWU1OWZlYmFmNTllNzU4ODEwMDY3ZjVmNDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9rQYffLb1sajlyT+XSsHnyFzlkTQ Q3JAUV3RGoGJoLruP5pmg+wA/AcDI7IqrU7OaZwMVYOImFtVmQ+kchQ83rMjpMeA fwQpCcGbeDZSctka6SJuzBvyGRUJbPloDchaFZwPccHJ/A5OExDKntNbnzoqNSsd WQGf87cE7KsU4VliiA452lmJ6/tE9K1YzOUtpXkMwZEtSXR+unN5GedVl7S0lHS/ gSv6w4CnveDkadKM4PcuO9K0RyyKJ1A6XaOTlHSLVmZ3ykKO8ZYrkzZw28eefcaq rKj2j08v1Q0XRdItG+RbV7/lt6fiBiqPnd1FFYsE/R03wSBvA2qyGrvtVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAUFhR2Y1rln+uvWedYgQBn9fQLMB8GA1UdIwQY MBaAFIHu1AkTg9ntQFbZ9O/30mIt3OIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2Et ODcyYjM3MTBjMmExLzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2EtODcyYjM3MTBjMmEx LzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeXdcj5B+ EFOIM6bF8n3Owf5PAIT5IBWVSCwzPZ7bMRp20ghoU5edJP7txP2lMYoL8Wxm2fPa xH1fzm/TeS73MNPHEsuZNXZGzQ2itDxxSziCGUTtpWhUIq4NMcIyY22sM/53iGT8 FV/nbb0LB8iYS/RiHvfVyUnJLSL5axuSnZPfny220MApyZPg0zO90XT/f3JOvsqW pDQX/WfOG99IWQ8XjfoiEULYDtb0FlI7GCquJD4GRwYox/57ePchSBxw525b5YzK 74Y1jKr08x1iJe453Wku5DO3cky3MPu+qoFtQ7HhQeAdjKyZ6ePjXLW2BaU300jL tkZmHhIYuAXppA== -----END CERTIFICATE-----Generated at Mon Apr 28 22:49:24 2025 by rpki-client