$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft File: SAXxfC1xM9La06jffjUxXjfvXa8.mft (raw, json) Hash identifier: ffeVL/g4rAXG6DBfTc3pdtj3ES1Fwtz5c08GZ3SIlSQ= Subject key identifier: E2:52:27:38:C3:D6:C5:4E:EF:C2:67:2B:7C:9A:CB:AD:92:6C:5E:62 Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Certificate serial: 019674C2DB8CDE2A038B847B461B015539DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft Manifest number: 15B4 Signing time: Sun 27 Apr 2025 01:00:49 +0000 Manifest this update: Sun 27 Apr 2025 01:00:49 +0000 Manifest next update: Mon 28 Apr 2025 01:00:49 +0000 Files and hashes: 1: 0Ku6hM-uBGPbIB_elC1-63mAMPQ.roa (hash: COta24brNXG7Hg0yqxT50IIeRD/EU1T0z8f77M/W0Yo=) 2: EkFoJFaGBhEamXzDueIrcP26LBc.roa (hash: PQO2ZDlIaJ7jCYwx8vtlK6hg74IbDpuCQQjGUuzjVhU=) 3: Lcu6ir7Tj9YBKclNd5yCQDyZYdA.roa (hash: Auoo76FRPPWoH0S0B9YJ3Yza2c1mTAhQ5423VpfHxOE=) 4: PLHlOEI8OTEsrWEb9gcEoJkppTI.roa (hash: HqryYXEFzx4Aim3Zpzxpc+c6ErO0nPq1Js+lyJLuXYs=) 5: R3xayF97XK3f6WN53ZX5sxR54jo.roa (hash: 3PZ+HViUokDQMZxJmaE1uzBy+pQRq/4nLFWrCe3sMjU=) 6: SAXxfC1xM9La06jffjUxXjfvXa8.crl (hash: ggNuAveKai/afuXmV29tON1sr9cpoB8xSVDIWgjcBS4=) 7: U9JKjRKHCxdIsPDNQPOR88OqmCg.roa (hash: lajLKbejzI40eVa7BHAS4fdbPpPskr27n+GpeXAUSBk=) 8: V5zbutGfbh5lgD5tOB55BSZL6mM.roa (hash: 8dfbuUOKEzC/ptg0//A1zNKfTmzKWKS3nTLCemG3GRo=) 9: VgwcNuoBbQF8vGnu87-98unWzYI.roa (hash: xzpL3I9r8p4R1FCkPrlQ5XYcS0wswEmNqu/eM1IOMwU=) 10: WclbZXzoRolOPnP1txTGa2N2wfw.roa (hash: bkUop8nfZL+I8FoNjqYPn2viT45YyNvKLtfeDigIXyI=) 11: Zj4JwFMN6H5YeHt4cvNXltyCdE4.roa (hash: CWOsIZG4hIEMhn5XzXUXZbhFt0Yejg6in7qKXYgJegA=) 12: b81Y2U7ou3gE7qnhOIrH6wzIwHE.roa (hash: evIbesfBnQDx6fK9X24u14Wb1m4RUjoEvZ0+mfP0N8E=) 13: bZniM2QlgkpTXR-OwANLXtwZtPE.roa (hash: 1uGphNb2cimTL54FLmsjWSi2OJxcMRM81uY8UPnrcpo=) 14: pzkAj4_zAVXkRe0C_QHjEgzBj0Y.roa (hash: 3G1cxIfKvcRktJjL1ylmN8MQ4xGHLKTVnlOoY7cNz5o=) 15: uE7Yr0mrdBcUX1IW6FuzHWklFWE.roa (hash: Txuv8knFAVKbDTm6XQpLWHHm/zIqEkh3sPLdu38MgYQ=) 16: ulYg4AG1ul90cUDOSHCVqM9kgX0.roa (hash: YyEEkcY+cM/W31h/eE29O/fYkGie+5JT9vHD80X8ftc=) 17: wwlt2hK8l53pvlwYMtoaW4Ty7wo.roa (hash: OS5MPuFmrI+TPRKuwjrDIui0RjzgE9QrGAKYQntJtcY=) 18: yF60MXomOPXicQ4dVy_gu3Jce0c.roa (hash: 5FKE6qFccFKdKUpBcGBwVGHo07CqDvWyXp8ktMwwG+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:74:c2:db:8c:de:2a:03:8b:84:7b:46:1b:01:55:39:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Validity Not Before: Apr 27 01:00:49 2025 GMT Not After : Apr 28 01:00:49 2025 GMT Subject: CN=e2522738c3d6c54eefc2672b7c9acbad926c5e62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ea:98:9a:0c:62:71:b0:5b:d8:d8:c3:c2:cc: 9a:e9:9c:06:88:71:a4:a9:61:ad:d1:5a:2c:b3:bc: 73:60:66:40:f0:00:5f:92:b7:32:af:48:2c:d5:8c: 02:5a:6f:39:94:f3:0f:e9:a0:c0:99:99:47:3f:77: 4d:eb:87:0e:99:ef:ee:6f:0d:30:13:af:d3:f2:85: 1f:48:9c:22:a3:1d:21:9b:bf:ed:ee:60:4a:88:d6: 23:ec:cd:f3:4b:d5:c6:76:a3:70:8a:2f:e5:d0:e6: 5a:6a:b6:5b:86:ee:ad:d7:b6:f9:c1:71:1e:9b:d3: 11:07:d3:19:43:ea:25:61:73:3b:28:52:0b:3f:b8: ef:4a:b9:5f:71:af:31:54:17:cd:b2:d1:ea:24:e1: b6:1c:7b:58:fb:72:ea:42:3a:20:c5:1f:f6:9e:21: 57:33:f7:5c:0f:f2:41:76:94:2d:5c:e1:78:90:59: 06:e4:04:48:e5:52:6d:35:86:d1:b2:89:8f:c2:b7: 68:66:ad:7b:f4:2c:62:21:2d:0d:42:76:dd:c5:db: 9d:b3:01:9b:b0:25:a6:b6:94:1c:4d:3a:8d:83:fe: b6:fa:f0:bd:5c:7f:9e:16:75:92:0a:75:f9:a2:d3: a2:86:51:71:10:98:7c:69:45:f2:bf:ff:cf:ca:2f: e8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:52:27:38:C3:D6:C5:4E:EF:C2:67:2B:7C:9A:CB:AD:92:6C:5E:62 X509v3 Authority Key Identifier: keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:7a:34:d7:1b:f9:3b:f1:a4:d7:01:49:ec:63:f6:0d:b0:84: 0b:f1:21:a1:7d:82:50:d2:49:6b:67:35:76:4c:4d:28:ad:8e: 83:0d:cc:79:68:b8:18:a2:11:4d:e9:ea:60:a6:65:12:2c:5c: 43:3c:15:d4:6d:b7:70:3c:62:d0:a1:c7:a9:4d:6a:c5:e6:70: 7e:51:a1:ab:95:50:f4:2a:8e:67:53:a1:0b:5b:66:a6:1f:65: 77:36:5d:ad:2d:8b:a7:bb:51:91:8b:79:30:7d:98:94:e9:81: 55:17:fd:77:e4:54:74:d8:3d:9a:53:b1:af:cd:5a:ac:a0:b5: c5:d2:e2:15:71:25:f2:67:6b:36:14:71:53:ab:e6:4b:6a:fd: 9e:b9:1e:a0:5a:2e:74:88:18:28:6b:23:82:b3:72:9a:15:c7: d0:18:e4:a1:43:67:49:7b:c1:15:6d:05:ce:62:fa:20:18:79: ff:9e:da:e9:48:03:1e:70:16:7c:1c:08:5a:b0:1a:31:cd:3f: e1:f5:4d:9e:33:4e:c9:34:a1:10:b9:31:c0:fa:b5:5f:ce:ed: ea:59:4e:d4:87:d2:68:87:84:bd:ac:1e:26:04:52:0a:e3:06: 9f:e4:16:d3:6b:86:dd:a8:52:20:9e:a1:21:3e:ab:66:0b:a7: ed:92:98:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ0wtuM3ioDi4R7RhsBVTndMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl ZjVkYWYwHhcNMjUwNDI3MDEwMDQ5WhcNMjUwNDI4MDEwMDQ5WjAzMTEwLwYDVQQD EyhlMjUyMjczOGMzZDZjNTRlZWZjMjY3MmI3YzlhY2JhZDkyNmM1ZTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeqYmgxicbBb2NjDwsya6ZwGiHGk qWGt0Voss7xzYGZA8ABfkrcyr0gs1YwCWm85lPMP6aDAmZlHP3dN64cOme/ubw0w E6/T8oUfSJwiox0hm7/t7mBKiNYj7M3zS9XGdqNwii/l0OZaarZbhu6t17b5wXEe m9MRB9MZQ+olYXM7KFILP7jvSrlfca8xVBfNstHqJOG2HHtY+3LqQjogxR/2niFX M/dcD/JBdpQtXOF4kFkG5ARI5VJtNYbRsomPwrdoZq179CxiIS0NQnbdxdudswGb sCWmtpQcTTqNg/62+vC9XH+eFnWSCnX5otOihlFxEJh8aUXyv//Pyi/oAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJSJzjD1sVO78JnK3yay62SbF5iMB8GA1UdIwQY MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt NWRkNmUyMmViYWIwLzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASno01xv5 O/Gk1wFJ7GP2DbCEC/EhoX2CUNJJa2c1dkxNKK2Ogw3MeWi4GKIRTenqYKZlEixc QzwV1G23cDxi0KHHqU1qxeZwflGhq5VQ9CqOZ1OhC1tmph9ldzZdrS2Lp7tRkYt5 MH2YlOmBVRf9d+RUdNg9mlOxr81arKC1xdLiFXEl8mdrNhRxU6vmS2r9nrkeoFou dIgYKGsjgrNymhXH0BjkoUNnSXvBFW0FzmL6IBh5/57a6UgDHnAWfBwIWrAaMc0/ 4fVNnjNOyTShELkxwPq1X87t6llO1IfSaIeEvaweJgRSCuMGn+QW02uG3ahSIJ6h IT6rZgun7ZKYcg== -----END CERTIFICATE-----Generated at Sun Apr 27 10:44:45 2025 by rpki-client