$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft File: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json) Hash identifier: rH4BG7m0yJFt9OLuv28VEcdux9tzcF/t7lVgymIS9T4= Subject key identifier: 31:0B:45:AA:93:C1:FF:5E:19:7C:69:19:16:A3:F7:61:EB:DD:D4:93 Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 01968359F85EBEFC8FFC8ACAB0C38E3C5454 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft Manifest number: 0D74 Signing time: Tue 29 Apr 2025 21:00:33 +0000 Manifest this update: Tue 29 Apr 2025 21:00:33 +0000 Manifest next update: Wed 30 Apr 2025 21:00:33 +0000 Files and hashes: 1: 5B4j8yKBhhDvEBdgU40qsGaWwrs.roa (hash: 5SNJTgM1hkc04DigOXVBPbCaLDFxKR5EdZH2q32FFl0=) 2: 5cshQDWiETJPEPkneLCI83DOyB8.roa (hash: LIJ1tw2uisCtRY2n9m+RNwJ+29+O3wio1q6NVdwtWkg=) 3: 8bhH-obTN3_XZdA3ZY4qEnKs6C0.roa (hash: 9hCqmB2340c+JsCnzCqxOHtXSX9acHBMNsYdRmzUUeg=) 4: A8RTU3pbGtIgr6vqM6RgMhjB6S4.roa (hash: CblthdeWJ0lL4bSVOXyipIfCv+fQM/AOSVpBlIGAJ0A=) 5: BIlQDTjBunsd7fPXD6TudWu_EEU.roa (hash: sGVBCV/UPx9VtvJuhPB1KSdcfg28Ma7r663EM0juNak=) 6: DGYTbW9Ir9KMBgCraqJM7GTIy4A.roa (hash: Mirl8dOytZmD+kKVHs6j2ofk7bwQ7qZrvcazoL5oyCw=) 7: HvYUm5LP2S0LXXYX-humbutnuI8.roa (hash: 4/iqtYVYllKBFPX1CqHXtWzhqM/KxGDaEeavinI0Y1o=) 8: NeeW1a3OUAE3Ua5ADXdv_S3lRQE.roa (hash: 33Cf2uaphAIB6YphxBLYGntEtiim3urfAS0w6mYeqhc=) 9: OoiR-n17kDohxKF4sG9PntPgQTs.roa (hash: Iy2iaD3knFRFm0z6lgIQYM+wnzj2MJQzp2rtlFberlM=) 10: SlYMmAICb8HbyGHP_Vnxv-4Fj6w.roa (hash: HgRW+R9snP3UMWLesDAzp78gH6EZAYQYPah0SUB/b8E=) 11: WTb_e2ZbT1RhFs5jURahaZTbmG0.roa (hash: RbcCcF3mnkJdbE+uWey3rc4Y6DxWA7ai6ZTi1IMVv6k=) 12: X5-V0n6yN80zazhfKC-inEW3Q-g.roa (hash: ltmVmMUB0Wliy/gqDGqir6t9HKhl/Si7s3Wu5L76zuU=) 13: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: vkFDnWG+GNf3+ciknDo7/AOGIrUuCs5XRZJrmVGSuHo=) 14: ZtIwmuJqF0ZJ2jJC2j2S68PxD6g.roa (hash: J37V1vpVdCUFrybWRqqYzjxV2+eOckvx6e6zW0T0izc=) 15: j3n-07vfKdngr7KWusBdYHtWkLA.roa (hash: I8Nyhvl9JRJ5QuyqTJAc18Z1FU3Ux5OLZnkQZ2v4dfQ=) 16: tfIx9ZETkxJKA8srjzC-PZ_rkuQ.roa (hash: 00UIyNz3q56oJ8XG2YOwH7avd0q0R31I6WrHQTaqyGI=) 17: v3oEPR4WomMgLDVCPkxLfJ5Enhg.roa (hash: u3MuUfvclTAjmi8s1goH67RIHnHHg6KiQbDjeAC9CsU=) 18: yO_LKS3YNsNgJRvGl0cMzupJ0w4.roa (hash: EWK0TzEQAkMC45IBHaxXqenmmaQ9qqJ8lOmSyj9LXKw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 15:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:83:59:f8:5e:be:fc:8f:fc:8a:ca:b0:c3:8e:3c:54:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Apr 29 21:00:33 2025 GMT Not After : Apr 30 21:00:33 2025 GMT Subject: CN=310b45aa93c1ff5e197c691916a3f761ebddd493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b4:3b:02:0c:b5:be:1c:18:5a:c9:5d:89:94: 11:5a:96:2f:74:85:39:26:85:3f:7e:74:69:da:1c: fe:01:50:f7:3f:87:db:14:b6:5e:87:91:39:45:96: 5b:2b:e3:62:9a:53:0c:cb:7b:61:f4:20:76:f6:2b: 16:d4:25:c9:75:cf:a0:7d:90:eb:a8:60:0e:80:59: c0:98:0a:fb:63:fc:68:69:ef:6b:3f:46:48:57:32: 53:35:9a:6a:18:c0:01:bc:ba:cd:4a:b2:da:2a:0e: 57:fb:29:26:5d:05:03:97:ba:a8:5f:f7:84:60:d8: ea:e7:de:74:04:72:c2:35:b6:99:43:d0:51:ff:a8: 75:66:4b:e9:c8:90:ef:a0:a1:45:f7:fc:58:25:b0: c6:48:17:84:b5:f3:b1:82:04:79:b6:98:17:5a:81: a4:5b:46:d2:38:97:98:b2:bf:c3:4d:15:f5:9b:fc: ee:e1:e1:4b:5a:86:13:ac:5d:4d:97:76:af:34:75: b7:5a:60:d0:06:c3:a3:1d:15:55:e5:8c:e6:65:d9: 33:ac:11:d8:cd:99:17:ad:0e:b9:02:ca:ff:30:d5: 95:d0:de:98:7c:74:52:98:5e:5b:e6:ea:ee:f1:0c: 9c:00:e5:18:e0:56:d7:c2:80:25:cc:cb:f9:de:99: 41:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:0B:45:AA:93:C1:FF:5E:19:7C:69:19:16:A3:F7:61:EB:DD:D4:93 X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:97:46:e2:c8:40:5e:69:ec:47:f8:ad:14:85:cc:20:c5:54: 27:02:93:09:e7:49:32:c2:f8:08:52:48:6f:b0:73:1d:b5:8c: 6f:c7:49:07:c5:68:ed:85:7f:47:a9:a0:2d:62:ab:34:f1:f1: ca:a5:92:13:6f:8e:6e:52:83:28:bf:26:e1:5f:35:9b:2b:92: cb:1d:63:4d:07:56:5a:d8:6c:8f:e0:e6:26:82:e1:d7:7d:2a: 3c:c4:96:08:51:05:60:1d:2b:98:36:48:2a:ad:cf:4b:55:59: 94:96:9a:20:2c:37:4f:2b:d1:a7:83:af:82:04:f1:d7:8e:0b: 8f:85:e4:1a:02:d5:2a:1a:6b:05:cb:9d:ed:63:9b:c9:be:5c: 4a:15:8a:6a:b3:90:67:ea:87:08:30:18:ef:56:3e:95:86:6e: a0:a1:24:f1:a8:6d:55:f0:f3:ec:74:63:97:b3:53:a2:65:5d: c7:dd:15:a7:76:70:4a:b0:6c:01:66:e1:f3:ab:9f:a0:6d:78: b3:bf:6e:2d:fd:6b:1c:52:ac:8a:3b:de:da:6a:b8:05:5e:30: 75:a6:6d:2f:d8:00:52:cf:6c:0e:bc:61:cb:30:a4:c4:25:32: 78:e0:d8:41:51:9f:dd:11:6d:38:53:82:88:02:9b:e2:3b:fa: 58:c8:d1:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaDWfhevvyP/IrKsMOOPFRUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjUwNDI5MjEwMDMzWhcNMjUwNDMwMjEwMDMzWjAzMTEwLwYDVQQD EygzMTBiNDVhYTkzYzFmZjVlMTk3YzY5MTkxNmEzZjc2MWViZGRkNDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LQ7Agy1vhwYWsldiZQRWpYvdIU5 JoU/fnRp2hz+AVD3P4fbFLZeh5E5RZZbK+NimlMMy3th9CB29isW1CXJdc+gfZDr qGAOgFnAmAr7Y/xoae9rP0ZIVzJTNZpqGMABvLrNSrLaKg5X+ykmXQUDl7qoX/eE YNjq5950BHLCNbaZQ9BR/6h1ZkvpyJDvoKFF9/xYJbDGSBeEtfOxggR5tpgXWoGk W0bSOJeYsr/DTRX1m/zu4eFLWoYTrF1Nl3avNHW3WmDQBsOjHRVV5YzmZdkzrBHY zZkXrQ65Asr/MNWV0N6YfHRSmF5b5uru8QycAOUY4FbXwoAlzMv53plBIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDELRaqTwf9eGXxpGRaj92Hr3dSTMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZdG4shA XmnsR/itFIXMIMVUJwKTCedJMsL4CFJIb7BzHbWMb8dJB8Vo7YV/R6mgLWKrNPHx yqWSE2+OblKDKL8m4V81myuSyx1jTQdWWthsj+DmJoLh130qPMSWCFEFYB0rmDZI Kq3PS1VZlJaaICw3TyvRp4OvggTx144Lj4XkGgLVKhprBcud7WObyb5cShWKarOQ Z+qHCDAY71Y+lYZuoKEk8ahtVfDz7HRjl7NTomVdx90Vp3ZwSrBsAWbh86ufoG14 s79uLf1rHFKsijve2mq4BV4wdaZtL9gAUs9sDrxhyzCkxCUyeODYQVGf3RFtOFOC iAKb4jv6WMjRAQ== -----END CERTIFICATE-----Generated at Tue Apr 29 22:54:31 2025 by rpki-client