$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft File: o20K5eL7_8zgh3Drwgwha5-_lIU.mft (raw, json) Hash identifier: /r73jTkT2eGOpRUwHPdJd92JJ1FAVDNzydpVTBkvA68= Subject key identifier: D9:82:28:51:79:5B:28:8F:81:B2:05:19:D0:30:6F:EF:21:C7:C5:BE Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Certificate serial: 019676E86006BF61BD679FBB7DD41E3F3FF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft Manifest number: 153D Signing time: Sun 27 Apr 2025 11:01:02 +0000 Manifest this update: Sun 27 Apr 2025 11:01:02 +0000 Manifest next update: Mon 28 Apr 2025 11:01:02 +0000 Files and hashes: 1: 1XbIXlsc12j6nm66ObHlANu1FxM.roa (hash: lxZWGjYaWrGULnJUqbEWkt5IyYC/5a04fccF0g2Mp+o=) 2: 3RFddkozoZGvDJWQRcnS3tQnN6k.roa (hash: KSM4qOmDj4X6PN9gZp6oxzJSTfcXsGzAsnDPsOPcYvo=) 3: 5Ni6TTomkpPGcPlO3kSvRsrQu-U.roa (hash: 1JbN0aQZgu8I5lbFUp1QWBBO58Y4WN7qnz2P+FqHbJQ=) 4: 7S8CxuCZgwEuPwPQrodHEuixK_c.roa (hash: Qpde78GgRiZiGUxC0MztnIMZR2EI3yqwC8R5K89O7xs=) 5: BUbLcDK2mlbMmQrWrXK_KkB_Z8I.roa (hash: 5p58mg305UQz5j2iOVYn7ENJmD3sfGRtf406Z23M5Fg=) 6: RdqjtJDLFWOt3Phx5mE_iQ2n2ac.roa (hash: lxo1VRjxzcOyUQlNG+1uXakzpre9ZL0uw2/WRhwVovc=) 7: fz5OQX3YNuZKli23fQPsHJMHAjg.roa (hash: 2W1jdhiJm6VJW0yfAkLiyNtl6yjC+Bfx3j0Hv8QWt58=) 8: o20K5eL7_8zgh3Drwgwha5-_lIU.crl (hash: zuIiYNe3kNq1YDadQD1GFaQdxc3fCZ1cMUywmZrV46c=) 9: tn7ZdWo9WQgYlB0Z6sOK2If7PKQ.roa (hash: 8aBGWuWam9C6QXOPco15OTid7ItEiEbxf2K863xiGIk=) 10: uxPuBCLIiL0vvpcp5iG57n6Nxl8.roa (hash: 9FJQPnJf1+iHQwAWGEeso0fULqarFlyxqNgrRoa6pYY=) 11: v8yHhVnQZ24d3Hqq-_MmljsyF-o.roa (hash: ldyVLPmDRLippOD+hn4EjHJmd9dcu8cUfl/mwJelT5M=) 12: vOg7pIai3eYlqI8nGfkYR-448qE.roa (hash: k2twTqEvKHP86X8yabE26RQnv5iqhvXZjH+b4EIuDog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 11:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:76:e8:60:06:bf:61:bd:67:9f:bb:7d:d4:1e:3f:3f:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Validity Not Before: Apr 27 11:01:02 2025 GMT Not After : Apr 28 11:01:02 2025 GMT Subject: CN=d9822851795b288f81b20519d0306fef21c7c5be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:22:c1:8d:1f:ab:bd:dd:b7:69:75:53:2b:0f: 76:e0:9d:2e:2e:ad:70:49:96:4d:a7:8d:85:cf:52: a8:5d:7c:14:89:db:21:83:f2:40:26:b8:b0:30:9a: 83:37:b0:36:c2:ad:07:4b:79:e9:f9:49:cf:e9:fa: da:6d:f0:b9:dd:4b:80:6c:83:10:e0:fa:0b:f7:15: 48:07:dc:67:79:4b:b7:5c:e1:18:22:f4:2a:9e:5c: fe:e1:c3:fc:70:47:d8:d5:08:d4:9d:38:79:40:95: a4:0d:ff:66:45:ac:49:a0:5d:c0:e7:e9:ee:f5:d8: ee:3d:f5:4a:33:32:30:f8:8b:28:b6:58:ee:ea:87: 6d:69:1c:70:7a:6f:45:d0:ad:35:97:92:d7:69:ab: cc:7c:51:d3:49:7a:4a:eb:8e:76:62:a6:ae:f5:17: ba:69:2e:ce:d3:70:40:fa:11:bf:af:3f:2d:a0:cf: b4:06:1a:72:20:12:87:da:63:d7:82:b6:69:55:c9: 0a:fa:e1:90:cd:93:f3:e7:00:4c:51:0e:0f:84:d7: 7e:ab:04:5f:69:65:ee:28:5a:4c:c7:5d:45:27:32: a7:a6:1d:45:2a:c4:36:92:b6:25:e6:ce:1c:55:a3: 75:31:1d:94:c5:d6:6a:9a:0a:e4:05:77:15:9c:10: 03:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:82:28:51:79:5B:28:8F:81:B2:05:19:D0:30:6F:EF:21:C7:C5:BE X509v3 Authority Key Identifier: keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:7a:e7:67:35:61:45:02:db:a5:85:aa:bd:e1:cb:d2:b8:38: 8c:53:47:4d:fc:bc:1b:4a:a4:63:5e:2d:41:a4:ef:d4:d5:55: 67:24:c6:a4:81:dd:4a:5e:8b:87:7d:a2:08:a6:9f:c7:7e:c0: 2d:58:13:ad:b6:1d:c5:2e:d9:8e:2d:8a:e8:4a:98:5c:af:46: 75:88:17:94:b9:dc:44:90:2c:14:a6:b9:ee:92:0f:88:db:31: 09:c1:92:0d:a8:a0:ed:5f:75:fa:4a:a5:97:35:80:ef:56:d3: 44:ec:25:ae:7b:81:b4:a5:ff:b0:f8:b2:0c:7c:ca:68:cf:40: 71:3d:44:dc:50:85:64:7c:67:a3:a4:49:b4:32:90:3f:65:80: 39:54:84:65:a2:40:db:6d:a1:0a:ef:08:16:21:10:9c:f9:9e: 84:60:d5:08:ce:39:f4:15:50:54:7c:5f:b8:57:51:6e:d0:40: 37:3a:ce:8d:89:61:60:58:e6:2d:e6:64:64:00:9e:38:e3:bf: 23:8c:0e:f6:6b:27:83:92:1c:ff:03:68:85:d9:bb:b9:08:b7: e1:38:c2:4f:7d:c6:74:2c:61:0f:d7:ff:98:83:53:37:3e:bf: e6:46:6c:a2:a8:e7:ce:7d:54:0d:2e:ef:b8:b0:15:45:09:ab: 0e:9d:3d:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ26GAGv2G9Z5+7fdQePz/3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNmQwYWU1ZTJmYmZmY2NlMDg3NzBlYmMyMGMyMTZiOWZi Zjk0ODUwHhcNMjUwNDI3MTEwMTAyWhcNMjUwNDI4MTEwMTAyWjAzMTEwLwYDVQQD EyhkOTgyMjg1MTc5NWIyODhmODFiMjA1MTlkMDMwNmZlZjIxYzdjNWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviLBjR+rvd23aXVTKw924J0uLq1w SZZNp42Fz1KoXXwUidshg/JAJriwMJqDN7A2wq0HS3np+UnP6frabfC53UuAbIMQ 4PoL9xVIB9xneUu3XOEYIvQqnlz+4cP8cEfY1QjUnTh5QJWkDf9mRaxJoF3A5+nu 9djuPfVKMzIw+Isotlju6odtaRxwem9F0K01l5LXaavMfFHTSXpK6452Yqau9Re6 aS7O03BA+hG/rz8toM+0BhpyIBKH2mPXgrZpVckK+uGQzZPz5wBMUQ4PhNd+qwRf aWXuKFpMx11FJzKnph1FKsQ2krYl5s4cVaN1MR2UxdZqmgrkBXcVnBAD7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNmCKFF5WyiPgbIFGdAwb+8hx8W+MB8GA1UdIwQY MBaAFKNtCuXi+//M4Idw68IMIWufv5SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt Y2JiOTUxODNiMjdhLzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh LzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlXrnZzVh RQLbpYWqveHL0rg4jFNHTfy8G0qkY14tQaTv1NVVZyTGpIHdSl6Lh32iCKafx37A LVgTrbYdxS7Zji2K6EqYXK9GdYgXlLncRJAsFKa57pIPiNsxCcGSDaig7V91+kql lzWA71bTROwlrnuBtKX/sPiyDHzKaM9AcT1E3FCFZHxno6RJtDKQP2WAOVSEZaJA 222hCu8IFiEQnPmehGDVCM459BVQVHxfuFdRbtBANzrOjYlhYFjmLeZkZACeOOO/ I4wO9msng5Ic/wNohdm7uQi34TjCT33GdCxhD9f/mINTNz6/5kZsoqjnzn1UDS7v uLAVRQmrDp09PQ== -----END CERTIFICATE-----Generated at Sun Apr 27 19:24:02 2025 by rpki-client