$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft File: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft (raw, json) Hash identifier: pbrL4FQ+nPJI4pQsAYOuJXP5AXJowWSduLWnWVL04ew= Subject key identifier: 96:D9:2F:40:2E:F9:CC:95:66:79:B3:BF:A0:23:01:69:2B:A7:BD:BE Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Certificate serial: 019672667F60A7EDA8CE3475D7491FB6F916 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft Manifest number: 1557 Signing time: Sat 26 Apr 2025 14:00:41 +0000 Manifest this update: Sat 26 Apr 2025 14:00:41 +0000 Manifest next update: Sun 27 Apr 2025 14:00:41 +0000 Files and hashes: 1: IsxMtNlQJ4J5OkWPRRyBdod8aQg.roa (hash: G37zdezcJTNVKE89wqIfwLZT3BTcN0qsQ2l0rpiM6Xo=) 2: OBU8vlVFbNJaELvdSh6f-vm8Wi8.roa (hash: Dlm8O3K+/DDrDwWaVhCzSl+5X2EyncHNpdnVYLNwB+A=) 3: XfuXo6o_rAvS3auaRDpRyYbh-Ho.roa (hash: UXkgT+p8/Vdf5Yzbn+kQFWB0bdLGQBqp49YReLFZmdw=) 4: Yn15-lSTYzCSP9GpLWZu207hyyQ.roa (hash: ZRDear1XR2zxFa1Zzdm3ZmOBKV2EW2XYwQOhJXSb+c4=) 5: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl (hash: Af10xBrY5Dnnrva+DAl1jBUaZKVwnyO3uDw+HwQ+dek=) 6: ZzzCKQYXEyyoRJqn08ir4qRnYoY.roa (hash: v3CMJYaM4YjhgyRlCZi9VHNC9/ejVg1WlIGKxQSHOFU=) 7: cOvdIJRz_NYAOefMUDf5iKuF1Aw.roa (hash: JkRxsdjY7+lZf5UIgBndJQlLU5QH74sbP9jgqmE3I8s=) 8: cmFziYev2vZctSPYHCuJUahmrts.roa (hash: q804av0BwiqkRQu8gnJltLcVXPVfUIsNBKBCcl2mC3o=) 9: d9T8_jMA5OOlUFBzolig6e4lFl4.roa (hash: 1O/cLZtIVt/wqkV2Y55eMzx0OCuyozd0/DXaB7TJnEc=) 10: dME3uKuz9qhKb6fYAv1PRSHYQPc.roa (hash: uScRfDQwv2RoHdAU0NPUzUenqom6BB3gL/e217qP5bU=) 11: hNVJZaf1Q742ZOf5V7GGPg6DwoQ.roa (hash: qJB5V0i6XcC0nn5IoRQOg8JgvG9umWvqWjmz3fhyEgU=) 12: hywnu8WYT2nlwz43odSJDrRW-kI.roa (hash: fmRjbmK2i86QP0T+gwCHNnfXkIciPJ7caNHOaYsr8bQ=) 13: nW-VI6IYWUyxTPN5fUvx9ToESUM.roa (hash: W6Eutg2L38NW+fx+Oh7St+PRc+4apbrppDeqMeQevZY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 14:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:66:7f:60:a7:ed:a8:ce:34:75:d7:49:1f:b6:f9:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Validity Not Before: Apr 26 14:00:41 2025 GMT Not After : Apr 27 14:00:41 2025 GMT Subject: CN=96d92f402ef9cc956679b3bfa02301692ba7bdbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f0:16:63:84:ea:5b:47:2c:99:4f:46:35:43: 75:5c:f5:b9:07:de:e7:8e:80:02:a7:a7:fd:c2:c1: 27:b8:06:42:55:c0:f6:68:8c:8e:d7:09:de:a5:e8: 85:5c:18:29:66:a7:53:2b:71:7a:a5:1b:5f:a6:4e: 1e:76:fa:86:ba:8f:99:d4:fa:9e:36:bf:f7:76:67: 51:2e:72:2d:b3:05:df:5a:22:6d:50:4d:af:0a:4b: ab:82:6f:18:79:c4:2a:b5:6e:48:df:ae:a5:44:15: 77:4f:bf:1a:89:ab:12:f8:5f:e6:a9:fb:2a:a3:dc: a8:ef:47:c2:a6:d5:90:b5:0d:83:46:94:26:67:a1: 53:3c:72:54:0c:91:11:a0:6b:88:44:53:03:b2:05: bd:a0:79:7e:dd:fa:a1:dc:e7:a8:53:6d:4c:66:1f: 50:02:45:fd:60:08:d9:51:c2:bb:c0:d1:a4:a6:fa: a4:2a:50:e6:e4:fa:1f:90:9e:d6:34:76:54:18:3e: bc:ed:ff:77:82:4d:06:24:64:d3:d4:17:9a:5a:1c: 8f:f0:5e:24:52:c8:5f:15:68:db:22:72:98:ef:ad: 2b:3a:83:b7:37:ff:69:46:ef:6b:61:e9:68:6e:9d: 70:f0:de:be:be:9a:b8:24:a5:b9:43:f9:86:4b:db: b9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D9:2F:40:2E:F9:CC:95:66:79:B3:BF:A0:23:01:69:2B:A7:BD:BE X509v3 Authority Key Identifier: keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:db:38:06:10:5f:b6:cb:eb:c6:eb:07:fd:6a:a8:c8:f2:d4: 17:6e:32:0a:4c:e2:f8:db:db:19:a6:c7:1c:9c:0c:16:b0:90: de:73:ec:3f:bc:3c:bd:97:7d:ea:51:0c:e9:69:e0:70:72:4a: 51:33:05:a1:fa:1b:9d:90:d2:ab:89:17:26:f7:40:90:3d:df: a9:f6:96:bc:16:f9:be:26:5e:61:d0:12:98:36:28:73:d4:51: 29:a7:0a:74:25:a6:36:ae:12:61:b6:4b:7e:d3:42:95:17:76: 2a:a9:61:6d:f5:89:43:d8:91:cd:6f:1a:20:f5:a0:49:f7:15: 6f:ec:6e:11:41:a5:e4:a0:dd:7e:67:ba:5f:34:3f:40:4d:78: fe:77:62:4b:b0:99:cf:17:27:f5:96:c5:43:02:9f:7b:4e:5a: 97:14:d7:c4:31:6b:68:8b:5c:6e:d3:b9:2f:f6:41:b3:d0:1b: e9:b6:2c:73:39:8e:a9:eb:b0:d2:ba:5d:73:25:3d:39:3f:ea: f7:f0:5d:d9:d8:a2:c6:21:90:61:3b:99:93:ce:29:96:95:6e: b8:df:12:46:2e:98:97:15:d1:c2:74:5a:c0:82:1e:a9:7c:18: c5:7c:c4:af:d1:b8:09:20:42:d9:d8:cb:7a:24:21:11:da:f2: 68:0a:2c:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZyZn9gp+2ozjR110kftvkWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2 Njk0NmYwHhcNMjUwNDI2MTQwMDQxWhcNMjUwNDI3MTQwMDQxWjAzMTEwLwYDVQQD Eyg5NmQ5MmY0MDJlZjljYzk1NjY3OWIzYmZhMDIzMDE2OTJiYTdiZGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufAWY4TqW0csmU9GNUN1XPW5B97n joACp6f9wsEnuAZCVcD2aIyO1wnepeiFXBgpZqdTK3F6pRtfpk4edvqGuo+Z1Pqe Nr/3dmdRLnItswXfWiJtUE2vCkurgm8YecQqtW5I366lRBV3T78aiasS+F/mqfsq o9yo70fCptWQtQ2DRpQmZ6FTPHJUDJERoGuIRFMDsgW9oHl+3fqh3OeoU21MZh9Q AkX9YAjZUcK7wNGkpvqkKlDm5PofkJ7WNHZUGD687f93gk0GJGTT1BeaWhyP8F4k UshfFWjbInKY760rOoO3N/9pRu9rYelobp1w8N6+vpq4JKW5Q/mGS9u5IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbZL0Au+cyVZnmzv6AjAWkrp72+MB8GA1UdIwQY MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct MDhhZDk0MTAxZDdlLzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOds4BhBf tsvrxusH/WqoyPLUF24yCkzi+NvbGabHHJwMFrCQ3nPsP7w8vZd96lEM6WngcHJK UTMFofobnZDSq4kXJvdAkD3fqfaWvBb5viZeYdASmDYoc9RRKacKdCWmNq4SYbZL ftNClRd2KqlhbfWJQ9iRzW8aIPWgSfcVb+xuEUGl5KDdfme6XzQ/QE14/ndiS7CZ zxcn9ZbFQwKfe05alxTXxDFraItcbtO5L/ZBs9Ab6bYsczmOqeuw0rpdcyU9OT/q 9/Bd2diixiGQYTuZk84plpVuuN8SRi6YlxXRwnRawIIeqXwYxXzEr9G4CSBC2djL eiQhEdryaAosVw== -----END CERTIFICATE-----Generated at Sat Apr 26 21:47:26 2025 by rpki-client