$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft File: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft (raw, json) Hash identifier: yxtwc8xGvrK1orFrwKp3GIUW9ggVf03wMXxfZcziXO8= Subject key identifier: D5:95:90:12:4E:E5:B0:D9:43:F0:A7:D5:21:0C:37:8E:EC:AF:D3:FA Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Certificate serial: 01967C0E2E0BCB6C79750D31AA7B42800447 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft Manifest number: 1539 Signing time: Mon 28 Apr 2025 11:00:26 +0000 Manifest this update: Mon 28 Apr 2025 11:00:26 +0000 Manifest next update: Tue 29 Apr 2025 11:00:26 +0000 Files and hashes: 1: 7RXnmyyS3vqekKTRLkrMbY5ssG0.roa (hash: 5Q0A5wPbh7lrti5wuMW3vt3LYhzQCaz/8+ZNglrRt+4=) 2: AJM-6Zm39xTWDgtragWJQRfYqM8.roa (hash: VMj18TvJaA2yJmPMgPMt6hsb7JE59Ed9FEylWh2nn3U=) 3: CIMTUhMyX5nrRkW9-NJAEdf1yN0.roa (hash: 5crkiuXzCNa5bqRqNmR9eqwI0/iv0HxGyv4mp2t+4Gw=) 4: MJHzVsg_CJVSXfOOjCBQwayhwak.roa (hash: BJpYFXc3Im46ARciyN5r9fJDfEcBRee/lHnVgG/PmkA=) 5: VGurPfZCJh4Ot-RkzdcvT72DKFk.roa (hash: temQQa5zOMU5QeSl6T48Juzkww2/UheolOo0w0utG/I=) 6: Zm2JfyTeERhBzYDvk2afv74vdbg.roa (hash: DReIJihceDuNN6dZJ5Ov64xgQFbw1n7eH/LcP0/n+IA=) 7: a9cqclGBd-sGM1DVbQMIle_rrqQ.roa (hash: LplY8V5whPCnMZSvGvrepAJoVMqSl1G+Bnp+LI/C1eU=) 8: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl (hash: VNaRx4XgIrVsno5RoIupfvIpAUKH4cRup9HSqDJyPY8=) 9: ceaRqIb_9jwjOB9HUZXtk4XW0N8.roa (hash: eHVzXLml0UyyfUhLhyyY4cTxdGZl4YcMu0PqzYEvlZQ=) 10: tGl_oVEvMu4RFTKmUhxguGv0x7g.roa (hash: PRe0KxLn8TbTqjw2TmvSuGH/Q6PyqmSXeZcJLI07VdI=) 11: yjOVe9P9QCIOVlHjC2af6d5hY-c.roa (hash: nPJ2ri+28FWisJhJn6NbOyOwuKF7rYFdzWnbklaw+3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 08:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7c:0e:2e:0b:cb:6c:79:75:0d:31:aa:7b:42:80:04:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Validity Not Before: Apr 28 11:00:26 2025 GMT Not After : Apr 29 11:00:26 2025 GMT Subject: CN=d59590124ee5b0d943f0a7d5210c378eecafd3fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:14:43:ca:ac:01:e1:5c:b9:89:d3:c1:80:69: 67:83:04:f1:fe:6d:5d:71:e2:41:18:1e:09:1b:de: d3:09:37:23:c3:e2:0e:ed:68:cc:75:6d:3c:e4:80: 5b:d8:b2:10:db:0c:04:ed:e2:68:1d:01:38:35:ff: 92:1f:59:f3:85:9f:64:86:17:97:24:f1:d0:50:4f: 31:2d:68:81:09:82:7a:e0:67:e8:a6:63:11:c1:0e: 63:3f:23:0b:20:64:fe:e9:96:e3:6f:45:37:46:40: df:49:01:5c:ef:0c:30:97:25:b2:9b:0b:c6:fc:8b: 7d:35:57:a0:39:9f:5b:05:a8:ac:ab:25:30:7b:e6: 97:29:ff:ab:cb:48:e1:ba:69:4c:9a:77:b3:52:03: d6:b5:80:81:33:d3:8e:17:5c:df:55:c4:2d:51:c1: 2b:72:15:e7:0a:70:d9:9d:5f:99:52:ac:e0:17:49: 5f:4d:51:00:e7:5b:1b:b4:ae:21:a4:a9:79:e3:24: 54:3a:3b:85:ce:65:7d:6d:93:44:0e:6a:b0:c4:5e: 4a:06:59:4b:8d:09:38:ce:82:9a:14:3f:15:86:be: da:64:f6:26:06:87:d6:13:32:ab:0a:c4:9a:e8:88: 5e:58:6a:d1:ff:9f:6e:26:1e:3e:d6:75:75:df:fc: 44:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:95:90:12:4E:E5:B0:D9:43:F0:A7:D5:21:0C:37:8E:EC:AF:D3:FA X509v3 Authority Key Identifier: keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:26:93:11:98:f3:1a:f8:00:65:fe:f1:96:3a:2a:3a:ca:bb: 5f:2d:0c:e0:27:1d:12:5e:28:fa:c4:96:71:09:0c:cc:35:24: c2:29:99:ee:2c:5f:b1:e7:6b:e3:23:07:ec:46:b7:c4:ae:71: 86:47:e0:a0:0d:03:9a:b8:fd:e0:a7:ca:55:6c:7b:fb:fd:79: 06:f5:96:80:26:ee:1e:2f:e0:64:fd:8a:99:db:a8:eb:0e:de: 61:e9:8a:11:73:b3:d7:cb:af:6c:99:c1:37:fb:64:19:14:69: 88:be:5e:f9:4e:0a:ab:67:27:43:fb:e3:f9:1f:15:87:7a:5b: e3:ad:a6:7b:96:70:81:5a:72:26:6f:c9:22:b6:83:63:5a:9f: 7f:f0:db:c8:22:64:37:9d:9c:2a:69:97:3f:99:1c:c3:a4:fa: 02:af:18:3e:81:24:9c:e8:0d:c5:30:57:5a:ea:4c:00:b4:49: b5:99:71:35:69:7b:51:2b:e2:38:90:c2:8a:7c:ff:8d:c6:fc: 1f:52:0a:af:50:c2:17:e8:da:c4:eb:c9:af:01:1f:c4:c9:38: 22:b8:58:1d:67:1b:25:22:07:e7:2d:bf:43:67:a5:1f:83:12: 68:34:88:f1:e9:27:d7:65:9c:95:27:c4:54:d5:86:42:d4:4d: 7c:79:c4:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ8Di4Ly2x5dQ0xqntCgARHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjlkYTQ0YWUwNjdmYzFhOThhNWY2ZjA1ZjEyZTU0NWQw ZmM2MmEwHhcNMjUwNDI4MTEwMDI2WhcNMjUwNDI5MTEwMDI2WjAzMTEwLwYDVQQD EyhkNTk1OTAxMjRlZTViMGQ5NDNmMGE3ZDUyMTBjMzc4ZWVjYWZkM2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhRDyqwB4Vy5idPBgGlngwTx/m1d ceJBGB4JG97TCTcjw+IO7WjMdW085IBb2LIQ2wwE7eJoHQE4Nf+SH1nzhZ9khheX JPHQUE8xLWiBCYJ64GfopmMRwQ5jPyMLIGT+6Zbjb0U3RkDfSQFc7wwwlyWymwvG /It9NVegOZ9bBaisqyUwe+aXKf+ry0jhumlMmnezUgPWtYCBM9OOF1zfVcQtUcEr chXnCnDZnV+ZUqzgF0lfTVEA51sbtK4hpKl54yRUOjuFzmV9bZNEDmqwxF5KBllL jQk4zoKaFD8Vhr7aZPYmBofWEzKrCsSa6IheWGrR/59uJh4+1nV13/xEXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWVkBJO5bDZQ/Cn1SEMN47sr9P6MB8GA1UdIwQY MBaAFG1p2kSuBn/BqYpfbwXxLlRdD8YqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUt MjYxNzBkYTRhMGIxLzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUtMjYxNzBkYTRhMGIx LzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFiaTEZjz GvgAZf7xljoqOsq7Xy0M4CcdEl4o+sSWcQkMzDUkwimZ7ixfsedr4yMH7Ea3xK5x hkfgoA0Dmrj94KfKVWx7+/15BvWWgCbuHi/gZP2Kmduo6w7eYemKEXOz18uvbJnB N/tkGRRpiL5e+U4Kq2cnQ/vj+R8Vh3pb462me5ZwgVpyJm/JIraDY1qff/DbyCJk N52cKmmXP5kcw6T6Aq8YPoEknOgNxTBXWupMALRJtZlxNWl7USviOJDCinz/jcb8 H1IKr1DCF+jaxOvJrwEfxMk4IrhYHWcbJSIH5y2/Q2elH4MSaDSI8ekn12WclSfE VNWGQtRNfHnEJw== -----END CERTIFICATE-----Generated at Mon Apr 28 15:21:56 2025 by rpki-client