$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: ioUDVny479aJ2uzYUKguj4+C6zNJ4YEOMsocSCo5PPw= Subject key identifier: F2:8E:87:40:D0:21:D1:9E:98:BF:43:D0:AD:7A:8F:CA:4B:D1:68:FE Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019673B04651F6EE5FAD34AFBD2C95F642AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 10E2 Signing time: Sat 26 Apr 2025 20:00:54 +0000 Manifest this update: Sat 26 Apr 2025 20:00:54 +0000 Manifest next update: Sun 27 Apr 2025 20:00:54 +0000 Files and hashes: 1: AjmtKVshFn4i5oudhf9_vWmAvsw.roa (hash: CuwkA+D3Ny2dECS4D0f8gIT8izPiI79T33+j6Gl48lk=) 2: NMjO7luh_VLlkiRN5_rJM9McdZU.roa (hash: F/s8ZrNFnB9cACRc/zfnUbwDpiBOuQs9t9+/CTXMuRk=) 3: NlvMkPZn5ykNcIArduldQ2gvLwk.roa (hash: 5PNzjoi0TVJoqN04xzDCOAwSudfA6d0BQM/WfLTAPFo=) 4: P9llCh8xQQOicOO52WLocuGy0qc.roa (hash: BJEexM7c83ayn0hEFmwl/zCVtTy13ZJE7DbhwPoki+4=) 5: QCWBDKlG8Io2BeH0NId31fpN2YE.roa (hash: 0NRY9EDUi1FWue8IN72u0GMUvyyjoroAoM3JlXroHao=) 6: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: TSZh7AnbNR51GgktfeujyspyQNnWrVGLsKDTzVC9X9o=) 7: XwHGUq38dDBNzTc_ge-yBwhhY1o.roa (hash: PgJwO//GwdLKnSg3NtaGlab1yN/ram5lj/PHtYxijoA=) 8: ewVsnSugCXk__789cz5d5ZAdZmc.roa (hash: o+8XbQDDA3JQsPJjR3Lfqf5ZVHX07bm5R0GYVGvsC9M=) 9: ibLzU6WOFgguTWaNZhfqPFD3yJo.roa (hash: GRnTI0UguvurZg0lBoyoqJCyaRrTY4Zz0Fz1Sh8Z0A8=) 10: nxWUk2NAoFEOBnPl0EiSfXPDs08.roa (hash: q3fdK1UzGuKqIDpgZc+BavU5BV78iYLHi960+oEFG6E=) 11: rjj0_HZqVxB9uTqBbhBOxIKPBgg.roa (hash: WNMZaUJdsacwY1k4HMEEPIuQbWIPSdxtl43riTk/HVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:73:b0:46:51:f6:ee:5f:ad:34:af:bd:2c:95:f6:42:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Apr 26 20:00:54 2025 GMT Not After : Apr 27 20:00:54 2025 GMT Subject: CN=f28e8740d021d19e98bf43d0ad7a8fca4bd168fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:52:40:40:77:71:83:8e:7c:7e:17:77:b1:bd: fc:61:13:1f:3d:72:07:38:d0:26:0c:65:61:15:1c: d7:ea:0a:af:7a:a5:87:1c:68:46:38:63:95:fc:ed: 7b:a1:da:49:7f:a2:b4:36:f1:75:39:64:ed:79:6d: 64:7f:f8:45:75:d4:54:8d:85:89:2d:d3:52:56:28: 66:af:37:58:e3:83:c4:09:5f:2b:37:4a:72:90:cf: 9a:18:dd:d1:1c:ea:88:16:24:60:ea:70:0e:d8:d8: 05:98:d9:4f:d2:cc:4b:90:81:4e:2e:95:de:6e:ce: 82:0d:15:5b:87:f7:33:78:6a:65:29:74:03:6e:9c: 93:fc:c9:3e:ff:4f:b0:67:0c:49:89:59:96:fd:b5: bb:aa:49:fe:e7:72:32:67:bf:3d:97:1f:50:00:d3: 33:79:7b:ca:39:9c:26:fa:27:d4:d1:50:23:22:42: e8:c8:94:e7:70:36:bd:32:67:b0:00:99:c2:e0:84: 83:5d:7c:d2:4a:71:28:a5:2f:61:30:96:4d:bc:22: 1a:2f:e4:12:e2:6e:9c:b9:0a:57:24:6b:95:eb:cd: 12:64:3b:3c:d6:82:4c:97:d8:2e:30:51:1e:20:c5: af:7f:68:54:5c:9e:0a:1e:b8:d3:08:01:ed:96:3b: 07:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:8E:87:40:D0:21:D1:9E:98:BF:43:D0:AD:7A:8F:CA:4B:D1:68:FE X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:72:ae:1a:69:a1:38:a9:2b:29:27:3f:8e:24:e6:cc:11:a0: 00:b4:ae:06:d9:35:ed:bf:08:38:41:1c:10:b3:f4:0d:db:1a: 12:85:ed:f3:e1:21:09:89:2f:ac:e8:4e:34:ca:a1:f4:ad:a2: 4a:74:36:e4:42:2e:8a:e5:39:ef:39:cf:60:5a:d5:01:5e:60: ef:dd:c4:22:ab:41:c6:4a:d3:bd:99:dc:ef:14:9c:67:d4:82: b1:1c:4b:fa:32:fa:a7:89:91:57:36:3b:d2:e9:d5:15:7d:1c: e0:51:4c:87:a3:85:1e:c3:54:96:14:ca:39:a5:bd:39:62:d3: 68:48:10:c1:68:30:fe:e2:50:69:47:89:09:b8:8c:45:fe:55: 28:fb:ca:bf:9b:e2:66:64:25:38:16:ba:08:8a:40:91:fb:65: 73:9e:e4:dc:15:e3:f0:db:37:01:87:3e:dd:35:95:01:ab:a0: 76:3f:28:7a:e5:da:73:f6:1a:59:5a:2b:6a:b9:87:4c:b3:6e: c3:ed:6a:02:e7:1b:3f:58:cd:03:69:2b:fa:32:26:98:3c:a0: 49:56:79:08:5d:23:dc:8e:21:68:3d:21:db:18:f8:ce:d6:0c: 0a:10:69:7e:41:ed:f7:74:08:28:c9:0d:d7:62:d0:b2:30:e3: 62:16:01:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZzsEZR9u5frTSvvSyV9kKsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjUwNDI2MjAwMDU0WhcNMjUwNDI3MjAwMDU0WjAzMTEwLwYDVQQD EyhmMjhlODc0MGQwMjFkMTllOThiZjQzZDBhZDdhOGZjYTRiZDE2OGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFJAQHdxg458fhd3sb38YRMfPXIH ONAmDGVhFRzX6gqveqWHHGhGOGOV/O17odpJf6K0NvF1OWTteW1kf/hFddRUjYWJ LdNSVihmrzdY44PECV8rN0pykM+aGN3RHOqIFiRg6nAO2NgFmNlP0sxLkIFOLpXe bs6CDRVbh/czeGplKXQDbpyT/Mk+/0+wZwxJiVmW/bW7qkn+53IyZ789lx9QANMz eXvKOZwm+ifU0VAjIkLoyJTncDa9MmewAJnC4ISDXXzSSnEopS9hMJZNvCIaL+QS 4m6cuQpXJGuV680SZDs81oJMl9guMFEeIMWvf2hUXJ4KHrjTCAHtljsHiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKOh0DQIdGemL9D0K16j8pL0Wj+MB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3KuGmmh OKkrKSc/jiTmzBGgALSuBtk17b8IOEEcELP0DdsaEoXt8+EhCYkvrOhONMqh9K2i SnQ25EIuiuU57znPYFrVAV5g793EIqtBxkrTvZnc7xScZ9SCsRxL+jL6p4mRVzY7 0unVFX0c4FFMh6OFHsNUlhTKOaW9OWLTaEgQwWgw/uJQaUeJCbiMRf5VKPvKv5vi ZmQlOBa6CIpAkftlc57k3BXj8Ns3AYc+3TWVAaugdj8oeuXac/YaWVorarmHTLNu w+1qAucbP1jNA2kr+jImmDygSVZ5CF0j3I4haD0h2xj4ztYMChBpfkHt93QIKMkN 12LQsjDjYhYBYg== -----END CERTIFICATE-----Generated at Sun Apr 27 03:57:34 2025 by rpki-client