$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft File: kiIItHtqhk2dH_M-BqqB0TgZp04.mft (raw, json) Hash identifier: V/AKYEZWOInzQNIUhlPiPKbZBTZoY8pWAuM5aZzwixA= Subject key identifier: 15:B3:62:93:BE:56:AD:7E:E6:59:E9:68:C5:FF:30:41:00:8A:B7:2F Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Certificate serial: 019673E6AC598A8C1EC053052889B216A3CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft Manifest number: 1550 Signing time: Sat 26 Apr 2025 21:00:19 +0000 Manifest this update: Sat 26 Apr 2025 21:00:19 +0000 Manifest next update: Sun 27 Apr 2025 21:00:19 +0000 Files and hashes: 1: 1-rtI9dIBDPGpB7XLgp5LO6PPhNw.roa (hash: ZOyoK37XAa4AMrftPMDpS57217i8QyMPPSqOrLIuDh0=) 2: 1MqnWOr2XX863k_xrrBNGhpSTM8.roa (hash: ZAHJz2QsnnKlOkhGF4MOgyBVqnyxAgqsRswDwRAbn1Q=) 3: ETJiLj_FPEXG5No5WrAoxGg_y_w.roa (hash: 662t7NLUufLVnPvlW5VowqyxEXMWNP4WIugo2zvrIGE=) 4: MjxchySxHLPX0oxp6Z6SYoucUMg.roa (hash: fpyAWA+pqwty+fi9kxovWSmXLh8K9Vk7+9DV1WXQdTY=) 5: QX1PzB0slLNh42gV_9Uq9W7-NNU.roa (hash: 42Me4JYy4dGGMwi/uXUY8iDNdYDcztDyEjfKcP1cPGo=) 6: XPCmvArgHR13v_k02Z1LW1lWJx8.roa (hash: 9yrs8EgUGCgumASichQb2a43gXVQMGz8ZJNkpOkb3cg=) 7: XWYIJ6UuSY9_AQiT-hJINBObDQE.roa (hash: PdxLhxNEU7vSAkCuLaQWVId/t5OMWmj8bekrOqUDrSs=) 8: cOLPd5Lu_3ww7o-cdhWB7-TfdNY.roa (hash: S/36KJdTMQ8aIP0tPHIBx2zWJTQd/RRNG/oJA1iTyvo=) 9: iCgmGpyhGXjIvVkyeLmT7N8_y-4.roa (hash: jOahkOswhpSU7ry2oaBtzcTaxYOf5EimbWn3HXDfD9I=) 10: j-60Smkd34pUp65Reim9QN1pXBY.roa (hash: M2tsmNC79ATfwuHh7j2unUzS2isZxvxmhlA+F7YtpNY=) 11: kOf_R9Qy1GVQ1glrjJm4uNqNh1g.roa (hash: aNoVCmKQ4VNgL/AQ07xn/ExPi8moeVmlmmFfwgj7rOw=) 12: kiIItHtqhk2dH_M-BqqB0TgZp04.crl (hash: zruFA6atsGeFXQX+yYaqg/le12v+t4N5dBenl64W7tM=) 13: knSytMRDBBEnCJmSSPDhHWtHg0c.roa (hash: xgKSyUyWK6rR5NEa7nVIywiPdyu/cPSGzuk49MX8f0A=) 14: vBAure0FxWxWdTfj2W3O6_7De24.roa (hash: yikPG1Koq3q/WuhD/GCuT4mpPwhtQgx1jshmNW1jKHY=) 15: yyPUAj_dCWAktPW0jmBjCiRvIJg.roa (hash: H8oCA9x6vnmIvl4HatB3uvnypYSjgIN9/CrfMgatutI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:73:e6:ac:59:8a:8c:1e:c0:53:05:28:89:b2:16:a3:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Validity Not Before: Apr 26 21:00:19 2025 GMT Not After : Apr 27 21:00:19 2025 GMT Subject: CN=15b36293be56ad7ee659e968c5ff3041008ab72f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5b:a0:f1:a9:ec:a2:dc:fb:85:d6:8f:b7:72: b9:aa:36:25:43:7b:ac:c7:1f:fa:c0:08:6c:a8:52: 7b:2b:7f:b2:ce:b9:85:0c:ed:15:2c:c9:ba:af:ab: a6:c0:6a:bc:b9:52:03:4d:8c:2a:65:53:7e:dd:8d: 6e:d8:31:35:e8:8c:71:13:2d:85:ff:52:be:ce:24: 76:67:a5:69:3b:ac:de:14:91:ca:26:76:22:3c:49: 75:ee:46:60:1e:3c:6f:3f:bc:01:83:87:5f:61:0a: c7:f3:34:39:39:96:84:6a:ad:c5:5e:ca:c5:52:fa: 9e:f8:b5:eb:c9:2f:0b:cf:d4:a7:d8:ed:e1:07:9d: 52:49:3e:6f:18:9f:0e:72:03:9b:1b:80:b7:ea:60: 01:2c:3c:5d:3b:a0:bf:46:75:1d:c6:1a:df:79:d6: 0b:9c:13:80:b3:00:d7:5b:a4:66:71:43:5c:c0:59: 94:df:8a:61:1d:ce:2f:5c:0d:ca:0f:fa:2b:d4:f1: dd:5e:e8:37:e3:bb:09:30:35:a2:43:f7:bb:63:a0: 2b:20:a8:a7:5e:02:4f:54:a4:0a:1b:e0:de:01:75: ed:e7:82:66:f4:f6:94:a9:5b:8c:4c:dd:ff:d9:87: 26:6f:36:56:db:71:60:07:24:f9:a5:92:93:07:ff: 1a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B3:62:93:BE:56:AD:7E:E6:59:E9:68:C5:FF:30:41:00:8A:B7:2F X509v3 Authority Key Identifier: keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:16:9a:00:01:62:86:c3:c2:d9:44:35:d0:78:1d:1d:10:6b: 5e:24:a9:3f:e9:23:3a:e3:1c:3f:42:e0:db:70:14:22:ea:2a: 89:45:f0:45:d2:b6:8a:2a:6e:ee:fd:20:22:dd:8c:7a:b9:d4: 3e:ea:0b:77:73:89:27:78:b0:84:d4:0c:b8:1a:45:b8:b4:88: 9c:17:1d:16:37:60:ee:5f:24:99:06:55:10:23:f8:b8:22:ac: 89:da:f5:f5:bd:88:bc:f2:69:55:ef:ed:76:09:59:cf:30:06: 1e:10:40:95:ce:6e:e8:4f:ce:8a:4b:ea:56:57:83:d8:96:80: b9:68:d0:bc:8a:67:f7:7d:eb:cd:dc:7e:d6:98:ef:16:4f:5e: f4:ae:03:e5:eb:3a:e0:d8:50:fd:3b:14:1b:26:92:d1:10:33: f0:3d:f3:e3:a2:c5:60:a7:2a:b2:de:f7:78:99:8b:d3:c4:9a: aa:db:1c:1d:14:11:1c:4c:b4:75:83:bc:15:5d:e0:6d:47:fa: ca:33:bd:a6:c1:51:1d:1c:31:04:f3:4d:6f:c7:86:ac:cd:6d: 69:c0:07:e7:f5:55:f3:90:f6:4d:5b:72:25:22:87:55:10:4f: 7d:ee:0b:48:05:68:5f:a8:b6:e8:fa:23:16:fb:e3:02:16:bd: a4:97:ad:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZz5qxZiowewFMFKImyFqPKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx OWE3NGUwHhcNMjUwNDI2MjEwMDE5WhcNMjUwNDI3MjEwMDE5WjAzMTEwLwYDVQQD EygxNWIzNjI5M2JlNTZhZDdlZTY1OWU5NjhjNWZmMzA0MTAwOGFiNzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21ug8ansotz7hdaPt3K5qjYlQ3us xx/6wAhsqFJ7K3+yzrmFDO0VLMm6r6umwGq8uVIDTYwqZVN+3Y1u2DE16IxxEy2F /1K+ziR2Z6VpO6zeFJHKJnYiPEl17kZgHjxvP7wBg4dfYQrH8zQ5OZaEaq3FXsrF Uvqe+LXryS8Lz9Sn2O3hB51SST5vGJ8OcgObG4C36mABLDxdO6C/RnUdxhrfedYL nBOAswDXW6RmcUNcwFmU34phHc4vXA3KD/or1PHdXug347sJMDWiQ/e7Y6ArIKin XgJPVKQKG+DeAXXt54Jm9PaUqVuMTN3/2YcmbzZW23FgByT5pZKTB/8aKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWzYpO+Vq1+5lnpaMX/MEEAircvMB8GA1UdIwQY MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct OTViMDhlMzY2MGNmLzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhaaAAFi hsPC2UQ10HgdHRBrXiSpP+kjOuMcP0Lg23AUIuoqiUXwRdK2iipu7v0gIt2MernU PuoLd3OJJ3iwhNQMuBpFuLSInBcdFjdg7l8kmQZVECP4uCKsidr19b2IvPJpVe/t dglZzzAGHhBAlc5u6E/OikvqVleD2JaAuWjQvIpn933rzdx+1pjvFk9e9K4D5es6 4NhQ/TsUGyaS0RAz8D3z46LFYKcqst73eJmL08SaqtscHRQRHEy0dYO8FV3gbUf6 yjO9psFRHRwxBPNNb8eGrM1tacAH5/VV85D2TVtyJSKHVRBPfe4LSAVoX6i26Poj FvvjAha9pJetfw== -----END CERTIFICATE-----Generated at Sun Apr 27 04:01:24 2025 by rpki-client