$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft File: 8uKBD0mzb91kHDJr0d5OQtEosEY.mft (raw, json) Hash identifier: WH6Dju1ea2gnuXd33fLp2TjQuQezqhQ0UUW9crVbLXU= Subject key identifier: E4:2B:8D:8C:0B:0E:23:E1:EA:40:4C:6D:72:B3:E5:E6:61:DB:27:EE Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46 Certificate issuer: /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046 Certificate serial: 01968548597B3A6666E85DA8818D109818A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft Manifest number: 1522 Signing time: Wed 30 Apr 2025 06:00:33 +0000 Manifest this update: Wed 30 Apr 2025 06:00:33 +0000 Manifest next update: Thu 01 May 2025 06:00:33 +0000 Files and hashes: 1: 1nLm5M5xfJ_suNGM5E1Zv1P9buc.roa (hash: 8x4G+E8iExmOXonfPhkgFAssRVwUmXgRDU/QwrPhfTc=) 2: 8uKBD0mzb91kHDJr0d5OQtEosEY.crl (hash: tfvxldl3hQnBXqsv4zDYdcSKOmW/f1NrX/67B8lSWiw=) 3: Lfi2kFGwKCjTFh-UgGwG9fE3y28.roa (hash: vsaKPg/3Dci9H1drLTZRN5KQySI72yp3XcQ7k6Dlcjo=) 4: _nUioJBQYiP_fVr8BJqtm1b4PRs.roa (hash: 8TwcjLFByQyQOwz+CZFr+OHfzp46TUFKqsAmkEkj8SM=) 5: aTc8S3bYqZoD9jiepL9oUB_LXc8.roa (hash: ZM0nvVCM2yUnFFGdw51jOTnM2p1Qj9SS/GteRoRmdLI=) 6: cSIsSraiS7nIkZaNHDPeLhmfWzw.roa (hash: 6RDnXeZI7Aggjdy420rt58R6tW8oEB+ao9gxbA9zhLY=) 7: cT2NBd6CzvlyjEEfvaGsHGPxIbc.roa (hash: 5qkGkFqB6MaSnnKFQR4ILKQDwkrOhYsEol0WfvvJ+hs=) 8: mgsVdxyrFBjubnGQwn9ZD0Aa8KQ.roa (hash: WUYiTP5VTCdXuJgIU+Sgp6znUUnvoPyUsuU1tYAduHA=) 9: qhtmZa0GBJu-LNeg5d5k1hem6bE.roa (hash: Uh/IbFG52qMt7jSUYgnpbLvKrotH1qlqQb6PDTI4TP4=) 10: wodM1-EUQJUVgPu2FeLNzhcjNAQ.roa (hash: oqpoLkjU7X7RENp32UMSCTEvk2YhpXGRDxHAfJ9Hiks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 May 2025 06:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:85:48:59:7b:3a:66:66:e8:5d:a8:81:8d:10:98:18:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046 Validity Not Before: Apr 30 06:00:33 2025 GMT Not After : May 1 06:00:33 2025 GMT Subject: CN=e42b8d8c0b0e23e1ea404c6d72b3e5e661db27ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4c:87:44:79:9f:3b:20:57:23:30:3b:cf:c3: 2d:95:71:17:f6:b8:c5:84:ef:5a:ca:9c:82:0e:3f: 7c:61:8a:1a:93:9d:39:3b:50:5d:bf:d8:bc:c1:dc: e3:30:36:f6:f6:47:9e:66:3f:8b:60:56:60:ec:7d: c7:81:e1:53:09:f8:44:68:c1:62:35:6d:b0:20:20: dd:a7:dc:78:ab:9f:89:45:db:c6:fc:e5:e7:f6:98: fb:00:a6:a8:b7:7a:e6:58:a4:00:b7:b9:5e:84:b7: 49:3c:86:73:f9:d3:59:d3:0c:76:f1:18:44:45:f0: 37:6c:5e:1d:aa:3e:54:a3:ce:cb:f7:42:f8:ba:25: c4:68:7f:27:77:d9:83:e1:32:4c:71:21:13:7c:52: 8a:7f:0c:d6:e7:fc:7b:e9:de:83:3b:f5:f6:63:7d: 67:00:3d:ad:44:08:ff:a3:2a:3b:68:64:20:db:fd: fd:2f:f6:5e:80:58:7c:f8:5c:db:14:d6:46:8d:94: 6a:5e:bf:4c:06:ac:87:03:51:7a:7f:c7:d8:22:a2: b3:4e:fe:c2:4a:d3:c0:e9:81:b1:7f:04:5e:60:43: 54:cc:dd:61:26:c7:5e:96:ce:52:3c:dd:c7:56:a5: 91:fe:d7:79:c0:7b:e6:ba:32:6e:3d:99:65:2e:8f: 4a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2B:8D:8C:0B:0E:23:E1:EA:40:4C:6D:72:B3:E5:E6:61:DB:27:EE X509v3 Authority Key Identifier: keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:af:e2:23:27:02:d9:71:09:43:52:77:98:24:99:71:fc:4c: d5:c8:69:69:66:9d:eb:20:3e:75:ed:8c:5b:80:5f:19:f7:2b: 87:3d:9e:ad:3d:13:be:a0:d9:3e:f3:62:63:b9:38:49:f5:19: 34:94:36:df:44:cf:b6:38:1c:5c:16:6c:d1:b7:ff:13:89:73: 25:eb:1a:11:37:8a:bb:29:01:91:45:bb:0f:36:95:5f:be:a0: ba:12:cf:81:b7:e0:a8:64:5d:24:d2:0d:eb:af:41:b8:10:a4: eb:61:d4:4d:46:ac:eb:13:60:73:3c:98:8a:b3:6e:d3:e5:a7: 10:c9:8d:c1:bc:1a:22:05:63:ac:b7:31:ca:84:9d:2e:a9:06: cc:1b:c4:26:a9:54:ca:ac:4d:c9:8b:2e:13:6b:bc:61:c7:5b: 23:47:6d:c5:9e:52:56:d9:42:f7:46:c8:56:fe:42:6b:9e:59: 5b:2b:42:02:3d:7f:d8:e3:f2:85:dd:7e:36:34:cd:53:2e:f0: 49:84:1b:e3:88:a7:9d:fb:a4:bd:8b:bf:a0:aa:d7:9d:1f:07: c7:8a:fc:a3:29:d2:6e:a1:42:06:db:d5:c2:28:32:43:60:ce: b7:4e:ea:96:2b:bc:2e:7b:82:2b:8c:d5:8e:83:19:ae:6b:b3: c3:86:a3:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaFSFl7OmZm6F2ogY0QmBinMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZTI4MTBmNDliMzZmZGQ2NDFjMzI2YmQxZGU0ZTQyZDEy OGIwNDYwHhcNMjUwNDMwMDYwMDMzWhcNMjUwNTAxMDYwMDMzWjAzMTEwLwYDVQQD EyhlNDJiOGQ4YzBiMGUyM2UxZWE0MDRjNmQ3MmIzZTVlNjYxZGIyN2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0yHRHmfOyBXIzA7z8MtlXEX9rjF hO9aypyCDj98YYoak505O1Bdv9i8wdzjMDb29keeZj+LYFZg7H3HgeFTCfhEaMFi NW2wICDdp9x4q5+JRdvG/OXn9pj7AKaot3rmWKQAt7lehLdJPIZz+dNZ0wx28RhE RfA3bF4dqj5Uo87L90L4uiXEaH8nd9mD4TJMcSETfFKKfwzW5/x76d6DO/X2Y31n AD2tRAj/oyo7aGQg2/39L/ZegFh8+FzbFNZGjZRqXr9MBqyHA1F6f8fYIqKzTv7C StPA6YGxfwReYENUzN1hJsdels5SPN3HVqWR/td5wHvmujJuPZllLo9KpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQrjYwLDiPh6kBMbXKz5eZh2yfuMB8GA1UdIwQY MBaAFPLigQ9Js2/dZBwya9HeTkLRKLBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAt NTBkMmI3MGJjZjMxLzEvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAtNTBkMmI3MGJjZjMx LzEvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHq/iIycC 2XEJQ1J3mCSZcfxM1chpaWad6yA+de2MW4BfGfcrhz2erT0TvqDZPvNiY7k4SfUZ NJQ230TPtjgcXBZs0bf/E4lzJesaETeKuykBkUW7DzaVX76guhLPgbfgqGRdJNIN 669BuBCk62HUTUas6xNgczyYirNu0+WnEMmNwbwaIgVjrLcxyoSdLqkGzBvEJqlU yqxNyYsuE2u8YcdbI0dtxZ5SVtlC90bIVv5Ca55ZWytCAj1/2OPyhd1+NjTNUy7w SYQb44innfukvYu/oKrXnR8Hx4r8oynSbqFCBtvVwigyQ2DOt07qliu8LnuCK4zV joMZrmuzw4ajWQ== -----END CERTIFICATE-----Generated at Wed Apr 30 13:39:51 2025 by rpki-client