$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft File: JXdsd_jr5wlMoAes4anAv9wrOuw.mft (raw, json) Hash identifier: xVVH6b/3sW/mcyHS81z7yjlxqod97unBFUWzwtYFTnc= Subject key identifier: 04:AB:51:51:77:93:5C:CA:DE:3B:7A:62:2B:2D:BB:07:3C:FC:D4:30 Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Certificate serial: 0196729DC8F6C07824EF5D51FE0049A07B86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft Manifest number: 1253 Signing time: Sat 26 Apr 2025 15:01:05 +0000 Manifest this update: Sat 26 Apr 2025 15:01:05 +0000 Manifest next update: Sun 27 Apr 2025 15:01:05 +0000 Files and hashes: 1: 3vNWcma8J3Yvm292bxcQMk9IMAg.roa (hash: 9vjWGwLIurMfDLhl3LmcOyaHZd6c7cfwMEUeIRekeL8=) 2: AIXPYVOLD4vG7-idW3xSmEYba3M.roa (hash: 0OO+kwQPJqN6G5I1BOBQWzk/kW2juMQTjTkhmJKwZ20=) 3: JXdsd_jr5wlMoAes4anAv9wrOuw.crl (hash: L3lnbSkgdqzueFiUWG6tVCuzICDE6nMJuBjP+oAHzfA=) 4: Um1PZhGXZ7KzU5zkJ2mBWgRYing.roa (hash: r8yw/kx6PR2QiDWv/zH9T6r2Gmbp9EAyZ7zdCGmWEQY=) 5: YhneglxU-YMRltelD3FSRlJ3Zwc.roa (hash: Ncwlfcg8RLjA+nxHVjFBtQFwEe7HoERaw1MC4MeS+rw=) 6: hkaTE_7fhGUYELRP9AaJ9bAo5bk.roa (hash: KOzsqvok3H5PfVWyF9U8nn9XFXetQgaoM4WrEbmzfjU=) 7: iDjdph5PLZc9UolFIQRqVji6vII.roa (hash: iBRRjrv+DLQQpa8QabPAetjWPrtLGlWJ6l98+13EMEw=) 8: mUfMEaQY8q1gZSjzSxi9XIGiseQ.roa (hash: gaddKtYUZyG4gzalDVZzomDqdepgC8Jfd8AVgvRc31g=) 9: sF1coaLwpjJ9ERbX0K6NN9sGsfY.roa (hash: yKfJfqMuiWBIftmEax6OGMuhlaUME2Z3bSqwXVLFaTk=) 10: vk6LGZMNcC3KaiIa5C3dnYSKUhg.roa (hash: 7Gr8EYP5E5UsMRFGLJUElOUxKJpCvyrgvk2k+QyN1AE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:9d:c8:f6:c0:78:24:ef:5d:51:fe:00:49:a0:7b:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Validity Not Before: Apr 26 15:01:05 2025 GMT Not After : Apr 27 15:01:05 2025 GMT Subject: CN=04ab515177935ccade3b7a622b2dbb073cfcd430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7e:36:9d:3e:fb:8f:30:ac:fc:3f:68:ce:f7: f9:39:f3:28:e2:ba:fd:45:ca:bf:32:5d:cb:07:72: 4b:04:ef:ec:e8:f0:d9:87:12:8e:54:79:cb:f3:f3: f3:87:5a:b5:c6:d2:a4:cf:5e:5a:aa:0e:4a:73:20: 9e:cb:6f:9e:68:3a:8c:9f:50:24:5f:10:df:ab:ac: 58:40:ab:3f:15:b2:0d:15:bc:0a:46:29:b8:40:58: ac:9b:45:1c:2a:c5:83:5d:5e:07:5d:24:0a:38:18: 59:61:d4:0a:fc:09:5a:8a:ab:07:2b:f7:6f:5f:35: 55:79:7a:fb:34:58:06:4d:a0:d8:51:be:de:01:f6: 30:8e:04:ee:3f:25:8a:c7:9d:45:15:bc:e0:d3:86: 11:92:10:0d:ca:da:22:68:56:2e:33:d7:66:3a:10: a4:c2:4a:e0:4a:bd:c7:f5:69:eb:a0:45:1a:9d:85: 95:ae:ea:76:c3:75:87:e8:6d:2a:3d:ad:92:89:19: c0:02:1a:db:a0:df:dc:9c:5e:ed:16:b7:e4:83:30: e9:53:99:8e:bf:0f:ce:2e:a3:50:46:d0:de:da:09: c9:1f:76:fd:a8:28:02:6e:fd:90:a6:29:30:1d:ad: 21:69:aa:f3:23:bf:a2:e1:39:60:f0:0a:73:b7:51: 01:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:AB:51:51:77:93:5C:CA:DE:3B:7A:62:2B:2D:BB:07:3C:FC:D4:30 X509v3 Authority Key Identifier: keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:c2:67:36:b3:26:67:90:d3:ec:4f:1d:b0:8e:d5:5f:91:38: 90:90:52:4a:56:9a:ca:47:4e:f3:72:17:55:d3:1f:95:ac:af: 60:dd:55:dc:bc:cf:53:1a:e2:7a:5a:7b:ee:20:89:31:6b:7a: cc:4a:ad:36:7a:7c:57:0d:2f:91:d1:59:1f:71:d1:10:5c:2d: c3:3c:3e:b1:ed:02:a7:fb:5d:59:53:e4:bc:7c:1d:3a:05:10: ce:d1:50:56:64:3a:f4:03:4e:22:a2:04:8b:65:d4:c0:58:63: 44:de:31:73:09:c4:be:b2:69:4b:1f:46:ab:01:94:81:2a:32: 66:2c:89:c9:29:de:33:9e:d9:10:56:89:f6:87:05:08:66:ec: 13:65:5e:14:2a:0e:bd:6e:d5:d7:ec:29:71:e7:1e:a1:db:74: 7a:b7:33:97:e7:90:20:35:30:71:af:a7:2b:7b:10:e7:32:86: d2:05:0e:e8:2f:d9:ba:66:e8:c6:d2:30:94:be:a4:cf:91:44: 98:54:24:2a:25:fe:d0:fe:3f:09:3d:63:af:12:c7:0c:38:30: 01:0f:72:2a:71:90:45:b0:e1:7f:47:2a:6c:c1:61:d7:76:a0: df:cc:03:b4:dd:f8:9e:66:8c:56:07:d2:b4:ee:55:9a:9f:5e: b1:95:04:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZyncj2wHgk711R/gBJoHuGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy YjNhZWMwHhcNMjUwNDI2MTUwMTA1WhcNMjUwNDI3MTUwMTA1WjAzMTEwLwYDVQQD EygwNGFiNTE1MTc3OTM1Y2NhZGUzYjdhNjIyYjJkYmIwNzNjZmNkNDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX42nT77jzCs/D9ozvf5OfMo4rr9 Rcq/Ml3LB3JLBO/s6PDZhxKOVHnL8/Pzh1q1xtKkz15aqg5KcyCey2+eaDqMn1Ak XxDfq6xYQKs/FbINFbwKRim4QFism0UcKsWDXV4HXSQKOBhZYdQK/AlaiqsHK/dv XzVVeXr7NFgGTaDYUb7eAfYwjgTuPyWKx51FFbzg04YRkhANytoiaFYuM9dmOhCk wkrgSr3H9WnroEUanYWVrup2w3WH6G0qPa2SiRnAAhrboN/cnF7tFrfkgzDpU5mO vw/OLqNQRtDe2gnJH3b9qCgCbv2QpikwHa0haarzI7+i4Tlg8Apzt1EBgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASrUVF3k1zK3jt6Yistuwc8/NQwMB8GA1UdIwQY MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt ZTdkYWVjMTk0YTY5LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5 LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8JnNrMm Z5DT7E8dsI7VX5E4kJBSSlaaykdO83IXVdMflayvYN1V3LzPUxrielp77iCJMWt6 zEqtNnp8Vw0vkdFZH3HREFwtwzw+se0Cp/tdWVPkvHwdOgUQztFQVmQ69ANOIqIE i2XUwFhjRN4xcwnEvrJpSx9GqwGUgSoyZiyJySneM57ZEFaJ9ocFCGbsE2VeFCoO vW7V1+wpceceodt0erczl+eQIDUwca+nK3sQ5zKG0gUO6C/ZumboxtIwlL6kz5FE mFQkKiX+0P4/CT1jrxLHDDgwAQ9yKnGQRbDhf0cqbMFh13ag38wDtN34nmaMVgfS tO5Vmp9esZUE1Q== -----END CERTIFICATE-----Generated at Sat Apr 26 21:06:26 2025 by rpki-client