$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft File: CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft (raw, json) Hash identifier: elVq3TTsql/6cR20y60ZJ7KTqUvwn3P2sAC5cjMHQJI= Subject key identifier: 8A:43:51:CB:0F:0C:3A:0C:49:1D:8F:0C:3F:AE:4C:36:2C:F7:5A:1C Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 01967D8EF0EAA48B3A3A7BDDEBE40461E037 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft Manifest number: 1545 Signing time: Mon 28 Apr 2025 18:00:41 +0000 Manifest this update: Mon 28 Apr 2025 18:00:41 +0000 Manifest next update: Tue 29 Apr 2025 18:00:41 +0000 Files and hashes: 1: 0EWIFMkHOwPxXxJO-cVVnlFMV9M.roa (hash: H3HRfMwSGiaOC4hjRP3JPpolbe1iEtk1HgVt+tXcFJg=) 2: 1Q8S-F04ndhiDn0SGwOoAJvpcJE.roa (hash: C3Etga/0CnN14pA6mDGityRvYUsO547YlA3aweNBuiE=) 3: 2VG718T3W04-_y_DFYMb27FL8Xc.roa (hash: rc2TenqF9dc6/5xbGTLqr/wJccF1AG2cwa4tLlPDxNg=) 4: 4eUzX53KjKiFABS1AxLPvZ5r-bY.roa (hash: 7YG9ahRtvq/YQgGSsJQAoRx/DWLAGEIhFL7ghXNU9R4=) 5: 5HzzPzyXFWUltUFIxz7A1OHGi7o.roa (hash: KdXF+S8JaHRcZ3Ivt3Pqt/DXcq9oRCgLGhDICrSfT58=) 6: 9NRiEzWNWvOsqkkmj1H_nO4JtIA.roa (hash: M1EfpG0UAk+KXmH4YDb8gbqx8X4cMoL0D3M3L/57Gmk=) 7: CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl (hash: bivOXwJrCLIUrTz0sXU7sHByz5vpp18SRED4TZjr1Sw=) 8: CdZHXMtiuXIYHPmoJY2aErxG8Z8.roa (hash: zau8aloWL7mHqdY4KBJaLbm12+SMJIeq7unHMUAtkpg=) 9: ELaIItpNMzqHS9OpyWZxQCWwejQ.roa (hash: nTU80YWNnv8w85NSUIjn+8ThW6vosJXjx8iKS04GONQ=) 10: QDnTB1-gKLLvkYk5f0mHuXK293g.roa (hash: ITp7yMZbWE36QWni9uBDxLpY4F+C9+SnVAj3E7l62Ts=) 11: XDAdp99VnBF7cnnsQ12OybJrT8Y.roa (hash: RlZg9LpMx3Sn+N/ygBjqDdQQDqiZuazZKwQVgxx0FBg=) 12: rfdo-9tZjARHX4NveRw0hMtJZi0.roa (hash: 5ECReeTc1Tc4KP4YsINLVoWJBI6UqeiVxcrFrB9M65o=) 13: tjV22hyfL6sKASeEJo6Ke2cIRMg.roa (hash: j+NWMjI7+Df8SVOaL0Iyl9IZZ4H1LL2E359iqV63je4=) 14: zCJNwAHBT-OuD8JSwLlWmHeq2i0.roa (hash: xxcu2GFnZrIoRaIL254U2SP3O3E+qALgdaalLMmqYoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 15:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7d:8e:f0:ea:a4:8b:3a:3a:7b:dd:eb:e4:04:61:e0:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: Apr 28 18:00:41 2025 GMT Not After : Apr 29 18:00:41 2025 GMT Subject: CN=8a4351cb0f0c3a0c491d8f0c3fae4c362cf75a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:de:37:55:a4:39:73:59:6a:8d:bc:7a:20:bc: e8:fb:3a:3a:24:e9:32:c6:64:56:06:2f:7c:11:3b: 84:85:45:b3:cc:83:9d:bd:43:15:80:4a:a1:3d:4b: 6e:c2:8c:92:c7:c4:2e:65:49:46:f0:4f:5f:23:17: e2:58:bf:f1:e8:49:2c:72:1c:53:09:6e:25:91:6a: 48:b0:42:00:ba:6a:9e:19:cc:19:b4:42:a6:7e:26: cf:b6:6d:b2:e7:c6:97:a1:86:40:90:5d:72:75:60: 7f:46:1d:4a:37:de:9f:cb:23:be:aa:10:e1:8a:ca: a8:74:f6:57:a9:71:3b:7a:6c:09:38:cc:ee:ca:95: bf:a8:59:cc:02:a1:56:4e:28:bd:1e:cb:aa:0a:13: 0e:68:a6:8d:88:61:78:e0:e0:13:8c:78:8d:24:26: 1e:35:ad:a7:e4:78:23:f6:d7:d5:a1:b4:e6:d5:4a: c5:db:6b:59:48:42:c1:fb:45:d6:02:b2:33:29:06: 3e:23:e9:cc:4e:48:f4:fb:4c:53:a5:fd:e0:28:4a: c1:c4:dc:e6:25:d4:bb:f2:f4:1d:c8:0c:60:cc:ee: 56:a3:89:f8:98:91:78:da:cb:85:7e:16:cf:08:1b: 6a:a8:87:9c:b7:3e:4e:25:0a:61:63:58:7c:c7:39: be:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:43:51:CB:0F:0C:3A:0C:49:1D:8F:0C:3F:AE:4C:36:2C:F7:5A:1C X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:1a:74:f3:d7:76:ad:47:22:f9:6a:dd:e3:11:22:90:06:2b: f5:f6:06:0c:51:b7:d3:81:e8:a1:4d:97:37:e8:9b:83:41:14: 77:18:35:e6:73:68:f5:82:d3:af:de:fd:d4:03:8f:7a:38:bd: 83:b0:c3:cf:be:ff:2c:92:61:07:35:15:76:17:6b:3c:d1:6b: 87:3b:e1:ce:2e:7b:2d:f8:98:50:bb:4a:ff:71:2e:da:6b:d3: 86:8e:0d:58:4c:c9:2d:80:2f:54:82:38:e2:7a:48:06:cf:96: 07:8c:f1:0f:b3:62:2a:1c:22:dd:e5:8a:ed:00:09:71:75:f3: 2f:3f:d6:dc:20:35:44:95:d7:2e:f9:c4:a2:55:aa:6d:55:76: 8d:59:ee:fb:71:91:e9:24:57:f4:1c:a1:96:95:4e:8c:0a:32: ba:bf:1a:89:7f:fd:5b:e7:48:0e:9c:05:43:6d:b2:ef:f1:dc: 4c:61:ab:a2:11:c6:6d:a3:52:df:02:25:a4:5a:0f:89:dc:b1: 80:4a:12:01:4f:02:29:72:21:16:0e:b9:82:06:a5:3d:99:d2: f8:4c:e6:55:c4:93:9b:c1:56:23:9d:01:cf:dc:d3:06:1e:a7: 55:f1:04:e4:26:c7:5f:bb:31:92:85:76:07:3a:cf:d5:ed:7b: a4:1b:10:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ9jvDqpIs6Onvd6+QEYeA3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjUwNDI4MTgwMDQxWhcNMjUwNDI5MTgwMDQxWjAzMTEwLwYDVQQD Eyg4YTQzNTFjYjBmMGMzYTBjNDkxZDhmMGMzZmFlNGMzNjJjZjc1YTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0d43VaQ5c1lqjbx6ILzo+zo6JOky xmRWBi98ETuEhUWzzIOdvUMVgEqhPUtuwoySx8QuZUlG8E9fIxfiWL/x6EkschxT CW4lkWpIsEIAumqeGcwZtEKmfibPtm2y58aXoYZAkF1ydWB/Rh1KN96fyyO+qhDh isqodPZXqXE7emwJOMzuypW/qFnMAqFWTii9HsuqChMOaKaNiGF44OATjHiNJCYe Na2n5Hgj9tfVobTm1UrF22tZSELB+0XWArIzKQY+I+nMTkj0+0xTpf3gKErBxNzm JdS78vQdyAxgzO5Wo4n4mJF42suFfhbPCBtqqIectz5OJQphY1h8xzm+qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpDUcsPDDoMSR2PDD+uTDYs91ocMB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIRp089d2 rUci+Wrd4xEikAYr9fYGDFG304HooU2XN+ibg0EUdxg15nNo9YLTr9791AOPeji9 g7DDz77/LJJhBzUVdhdrPNFrhzvhzi57LfiYULtK/3Eu2mvTho4NWEzJLYAvVII4 4npIBs+WB4zxD7NiKhwi3eWK7QAJcXXzLz/W3CA1RJXXLvnEolWqbVV2jVnu+3GR 6SRX9ByhlpVOjAoyur8aiX/9W+dIDpwFQ22y7/HcTGGrohHGbaNS3wIlpFoPidyx gEoSAU8CKXIhFg65ggalPZnS+EzmVcSTm8FWI50Bz9zTBh6nVfEE5CbHX7sxkoV2 BzrP1e17pBsQUA== -----END CERTIFICATE-----Generated at Tue Apr 29 00:16:05 2025 by rpki-client