$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft File: u6Nc-KtvPqoq663Z4jc97AiTYl4.mft (raw, json) Hash identifier: zHkX4qzPZxWWHLHwPOv3RzQHVDj1qVC/xfVTUnidvd0= Subject key identifier: 39:C9:2A:97:09:FC:E3:28:99:7F:9E:78:29:68:0B:56:28:22:3A:9B Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Certificate serial: 019672D4A4E92641B5D438EF089E886FFF9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft Manifest number: 12DB Signing time: Sat 26 Apr 2025 16:01:00 +0000 Manifest this update: Sat 26 Apr 2025 16:01:00 +0000 Manifest next update: Sun 27 Apr 2025 16:01:00 +0000 Files and hashes: 1: GtppMOhe-qj4-qKPQwYM7Bndra0.roa (hash: DZ7bcQ1MagW/CKYzAoT3tgdmQpZud4AtQbSCkk/MCKU=) 2: IICQjXJW2EEkB1v0o8BM6izDgbM.roa (hash: 7Xb1rw7YXZ8yAd+5aXbmrrlzp2Uxli0xSynXq48MEYc=) 3: PZNxNz45jwhU2f2Vk-rUkU1xuZQ.roa (hash: F+PZJf4GxvF8kf0ckwm9Pxo9WyYXyL9ytkInNQ2bSTY=) 4: _8UTREX8Q0a63ua_dGhbhojBdUA.roa (hash: DL1eDSZaMbokl5Ydp9t7oF5cl2AwIO6gEepk09/TZDc=) 5: _kZUir8n1AqIU0qtCf0tRxbZpds.roa (hash: i0Gwqdkr5/j/wsvWbuGrhf4MKjNKMEm96rfhCoH477Y=) 6: c7nY0rggG6raEqDRkehzGz_VYtA.roa (hash: EhNdOxX4vcohdV7gKrHWK7+fsvt8pGFZe0311VfzJ1M=) 7: clWD5iSFcHwGMTWctP6MgbhffFI.roa (hash: XeY9jpVy1coomoksHYwsuAsFdSJEnTf0ShOjmRYUnB0=) 8: hEnYun4dBmY4NXRm3bASEYEJDP0.roa (hash: 9ED8ExgB7hEhZTw92vukURu1ltjtyM6wWC7Qc0GRBP4=) 9: tTkbfZxula834alUiiKULvFUhEY.roa (hash: 53gfHOJtFDupMS3Pl17R4clQixHqHEmtoBj+F2KX9dc=) 10: u6Nc-KtvPqoq663Z4jc97AiTYl4.crl (hash: i2IIKpvN5TzcFoC7QDA/AYgNPsS/8/+DtJSMUM1sOr8=) 11: uZ3gLoi-baUsKV1SOOe_6eXbk4A.roa (hash: DF0imGw170/tpFF5iP4nGcWrEFYm61EvjaRvJ/3jKZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:d4:a4:e9:26:41:b5:d4:38:ef:08:9e:88:6f:ff:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Validity Not Before: Apr 26 16:01:00 2025 GMT Not After : Apr 27 16:01:00 2025 GMT Subject: CN=39c92a9709fce328997f9e7829680b5628223a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3f:21:11:4a:9a:06:1d:c2:d7:29:28:36:11: 37:d7:c5:63:ba:ef:3f:0e:f1:1d:67:db:1b:4b:d1: 06:40:44:0b:8b:9d:fd:a8:d3:fd:0b:a5:22:4d:8e: 50:eb:6a:54:05:52:3c:43:be:d9:c5:6f:63:d2:75: 69:ee:f0:f0:05:16:f8:54:34:b7:7c:47:3d:9e:dd: 97:c8:b6:4e:d6:03:89:52:29:f5:2e:4f:1f:97:f2: 05:95:33:15:46:70:e4:a1:46:e6:ef:c5:dd:e2:e0: 7a:7a:48:a8:a9:d6:df:e8:58:14:e0:38:52:d1:36: 55:66:4e:c1:01:e8:f5:3b:ea:49:0e:96:d9:ba:f6: a2:bd:1e:aa:5d:03:82:95:fe:70:c5:75:5b:e9:c4: 73:62:aa:2a:67:bd:8a:5a:de:8d:0b:63:b2:6f:d5: f4:ff:0f:18:9c:82:8c:97:d8:d7:a2:ce:d0:ff:c5: aa:9d:1a:d4:01:9f:b5:87:99:36:5f:03:cc:8e:d8: 8a:49:b8:f8:bf:51:32:16:f2:0e:9e:9e:09:39:97: a8:9d:32:dd:66:75:ed:78:58:46:ad:6e:6c:3f:51: d6:6e:a6:d4:d9:36:99:f7:d1:2b:3c:e8:16:47:4b: 33:b6:bd:82:d1:de:1f:c7:13:5d:1e:9a:e2:af:53: 6d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C9:2A:97:09:FC:E3:28:99:7F:9E:78:29:68:0B:56:28:22:3A:9B X509v3 Authority Key Identifier: keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:c9:69:b6:6a:4d:3b:f7:c1:08:90:1d:b5:ad:3f:2e:6b:11: 6e:db:4a:e0:6b:5d:a3:c2:e5:0a:9a:6e:bb:07:8c:45:d1:1f: 60:be:b0:a3:96:b4:04:c8:65:c8:ec:b5:c1:94:e4:05:8c:17: 8c:d8:d1:4f:1a:3a:20:5f:a2:fe:ec:c7:2b:a2:38:b3:4d:72: 2f:8f:3e:cc:d5:db:29:32:3a:66:83:08:64:45:49:c7:22:52: 1f:35:a6:9e:68:6c:2b:03:c3:92:fc:9c:db:31:2e:fe:fb:17: a7:9a:fa:88:cb:80:16:60:8f:20:d5:8f:1f:28:c6:21:64:5c: 58:2d:9e:2a:7f:2c:5c:c9:c6:b2:3f:dd:5e:d7:eb:d7:0d:6f: 9f:f2:4c:58:7b:13:35:dc:57:50:a7:e0:50:64:6d:f7:55:0f: 51:7c:11:80:de:8d:a0:f9:3a:27:95:13:c1:4a:ce:6b:27:e2: 7c:be:60:7a:bd:6d:6b:8d:37:c8:e3:57:eb:d1:66:ed:b9:a3: 5d:ed:52:89:f7:d2:01:0c:6f:b4:30:7a:66:03:b6:22:11:51: 0e:e1:51:6f:ff:9e:57:5d:53:89:62:78:42:ef:3e:2f:ac:df: 88:66:60:84:34:06:e0:64:3e:06:f2:f8:e6:0a:c9:74:1f:cb: ce:30:86:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZy1KTpJkG11DjvCJ6Ib/+dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYTM1Y2Y4YWI2ZjNlYWEyYWViYWRkOWUyMzczZGVjMDg5 MzYyNWUwHhcNMjUwNDI2MTYwMTAwWhcNMjUwNDI3MTYwMTAwWjAzMTEwLwYDVQQD EygzOWM5MmE5NzA5ZmNlMzI4OTk3ZjllNzgyOTY4MGI1NjI4MjIzYTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD8hEUqaBh3C1ykoNhE318Vjuu8/ DvEdZ9sbS9EGQEQLi539qNP9C6UiTY5Q62pUBVI8Q77ZxW9j0nVp7vDwBRb4VDS3 fEc9nt2XyLZO1gOJUin1Lk8fl/IFlTMVRnDkoUbm78Xd4uB6ekioqdbf6FgU4DhS 0TZVZk7BAej1O+pJDpbZuvaivR6qXQOClf5wxXVb6cRzYqoqZ72KWt6NC2Oyb9X0 /w8YnIKMl9jXos7Q/8WqnRrUAZ+1h5k2XwPMjtiKSbj4v1EyFvIOnp4JOZeonTLd ZnXteFhGrW5sP1HWbqbU2TaZ99ErPOgWR0sztr2C0d4fxxNdHprir1NtKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDnJKpcJ/OMomX+eeCloC1YoIjqbMB8GA1UdIwQY MBaAFLujXPirbz6qKuut2eI3PewIk2JeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMt NTk3YjZlMjQ5MmFiLzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMtNTk3YjZlMjQ5MmFi LzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMlptmpN O/fBCJAdta0/LmsRbttK4Gtdo8LlCppuuweMRdEfYL6wo5a0BMhlyOy1wZTkBYwX jNjRTxo6IF+i/uzHK6I4s01yL48+zNXbKTI6ZoMIZEVJxyJSHzWmnmhsKwPDkvyc 2zEu/vsXp5r6iMuAFmCPINWPHyjGIWRcWC2eKn8sXMnGsj/dXtfr1w1vn/JMWHsT NdxXUKfgUGRt91UPUXwRgN6NoPk6J5UTwUrOayfifL5ger1ta403yONX69Fm7bmj Xe1SiffSAQxvtDB6ZgO2IhFRDuFRb/+eV11TiWJ4Qu8+L6zfiGZghDQG4GQ+BvL4 5grJdB/LzjCG6g== -----END CERTIFICATE-----Generated at Sat Apr 26 21:08:30 2025 by rpki-client