$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: b8LTMLbrhYMkhay8mYac04pHW2bO2tWnPffWBfmFh9I= Subject key identifier: 38:9C:31:09:8B:14:BB:C0:60:FC:3F:C8:D5:39:E7:2C:DD:DE:D4:25 Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 0196729D37606BDC0C2F0AEDEA88A1BB9197 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 1566 Signing time: Sat 26 Apr 2025 15:00:28 +0000 Manifest this update: Sat 26 Apr 2025 15:00:28 +0000 Manifest next update: Sun 27 Apr 2025 15:00:28 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: q15F8IRBSM1dHt9hG/NF8MB6QLF+zczGSUPnBQmjjZM=) 2: 0httGqgqnBD-cyBZkV5zP0LpIO4.roa (hash: e5sFUpuEkPspxdtpRMty2JvPNTXvUGFt57BwVt8wTQk=) 3: 20w83vHPyYnLSWr2qqWCmD2gZNY.roa (hash: ClK+X58yEmA5ygXK0mo1ANs6qUTT/V8TWnwZD7Tusy4=) 4: 2s4ghGsMJ4UjziczDpj7_nBo6GE.roa (hash: jn5a6RlzlWn5orrS4JyYzumT++ei7+4zrAsQWhkhOUE=) 5: BBOySe2ApZYQpT0wPGJ7zV8XzsA.roa (hash: N6DdRHz14Xr18smaWB+L/0EFbg9FmP8IrnnkdfkP5sA=) 6: BjUAlonCB1CjmbTY52apZdHRGFk.roa (hash: vBVzlWqlUuZ7F5qeBjljk7LIKAFRXIaJSFWC4T698rw=) 7: DRLbJL7meHAnOmMNiiVi2VhOOMc.roa (hash: Lp9UgdizeLrJK6Zry0u6HD2WAPxw4E+r1wzuyfdMmtU=) 8: EXfTHtw-3BJt59JkT36dPstORFo.roa (hash: MhW4Yoiges2mvr+KewFgpAREQV0Mu5obgGNxi9eeOQc=) 9: G8jjrx8EZbysXI_Z13e_0NqYZdU.roa (hash: GPSkTNwl/L8vVjia7LOR9ahqlqqIZvGFNcWIGIi/vHw=) 10: Ib_gkG0OXaC9YGgBGzmQj28oy6Y.roa (hash: Dfa7w0wU+Mwe8FRxusOe5J5w207sEqOGP3MEUAezXaw=) 11: Jp0UMtlRd8ZwvCOhqfD_ADrBKLI.roa (hash: mR/skrtMXmYrNl0WIwSjaGFdp8tWtvYO7SMbQmVqf6A=) 12: KMU9gp2Pze6tK6RqnG6WkdxMvhI.roa (hash: s7jbrR/tYQZH56SCp6DZfaO9EeWTAe129IHD4mNW6qQ=) 13: Ldz2Fcxy2lIR0D-Lc9uIVwn1sVg.roa (hash: 7Jrxd3qwLriiBdyBMLT8U/Q6YrwgSz/r4ZzkDOjpxzQ=) 14: MguR744HGmOoEMdrlIzPUQQNYfs.roa (hash: Ve4h+6FdNbKYu9bYvRE5Dbmxn7BK8VvZ01cl79qxeJc=) 15: OJRKFrAGazOzJ40gSGoefwXYAYk.roa (hash: PYjRffHLN9ZeR3WG+z3kihL+ssNvEEg9dtGsRN0k3fI=) 16: PcsvqoFss2sjt8KP5dE_s9b5R94.roa (hash: 2VnZlh9WN/gvQzrunwflGg0cw7Ym2P+YsV38lpVH0Gs=) 17: RySOnwd5yNUvkpOdlWzbq8gD58I.roa (hash: pMm1Q5jN9tu+9MZBtGXjdw1riel86JfdVWVMRs8pgEY=) 18: UNh6P6o5iukKyngJ923OKln6euE.roa (hash: N5ex54TauXC69hfaRmQEjxuyvZMfnOJEFnqZWvxkb8A=) 19: XXSSAkKxHIvFb1XDuVgAK48p7oI.roa (hash: p4mx1wVBI5jfCHEyW7RDH/AavCZwfWlBpFNbLCutJY0=) 20: Y5c3qkFCpv03-ICNcuAXdHgS3cY.roa (hash: XJDCD20D/hEgr09ZL/gnt/32UJp0okrjk8WR5CoxVyQ=) 21: Y6R9BZ4jbo-SeP4MKzTkUzdRmEs.roa (hash: T03e4fff7Y/zXUb0yVVk+lWsYWaY+JCxTDBS+p8Hygw=) 22: _Ja5VSGfVwaP_RssqzUEn4YMRnM.roa (hash: IopLtmpqrddq1TLUa3ph8Vkd8Gg6tUuEa1Mf8B120SY=) 23: dSIvoRbcXmjEhaD-HdyHYcdmt90.roa (hash: JqFQVPXSWhIrd/AlZzo80JSKjqGLV5nybtYrZ/HoQns=) 24: fW0mZX2qVdA0eoUEboZhAE59bUE.roa (hash: stVjqf6xlyz/MOhoo6Rt330zmsp7vd4IC5S2fUEJ5WM=) 25: kqDz7smZzEggwnOtTZ91wrlBE4c.roa (hash: OteTjZY0hrzoBDeoZG9laIbeOhFIt32mklvyy1YBT38=) 26: m9Q0QpkVO1rZKT8wIA-lB6ceYcg.roa (hash: yW9VuP+7IZqfB9uY1adWMtzwRUiSlhz/2UYbCN1BQSU=) 27: oqSgizr5ODUUGjBb8_Wzxokx-xk.roa (hash: Kl53NJDKPjecKCh1ZqXsoFCQIzYfPyjvOORgLlse+gY=) 28: ps4Flj1BkuW7sLiIgaxaOcmRga0.roa (hash: z/miJktON8vN7qBgG9XGiJDAvY3R13S1nLYmw94yLfM=) 29: qlt-CjR0Oi0L3lo2PS7A4jbvIUg.roa (hash: iydTkBpS1P6s3+CKe74qws4olK3ajXbhwYqoUw/uhBk=) 30: tdzsaKxsamCWBVwoUkqT8RggY6A.roa (hash: Fv0PNntXjBHiuO1Z367HBdmxJtFfh7CR44dwT354/lw=) 31: vFNkivgTExOsjU64HiM4VzsQFiw.roa (hash: DXIqZ5v2rgtSNx+D9s1xP6RBmK/3bmgJ3j5QKRP0qEA=) 32: wMbP2rODQDC-jcOXAyW7ktyAwFs.roa (hash: 9dxgb9cFX2rvzK0yUiEPPHMObwlTuLCycMbvyIulqKU=) 33: yNK_se_8Y1MH-IyQZOfpZj_aArA.roa (hash: Y/8odYpFkGDQCB6ybQitBRTCfwLFaWn7M7svPHhRrhA=) 34: z4dbT2rdI1MPHPzn2a4SSpvkt3E.roa (hash: pftbqIKgzEeVO9sl0LAVO5XHYPxIgJ6YwaN9JqNCTzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:9d:37:60:6b:dc:0c:2f:0a:ed:ea:88:a1:bb:91:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Apr 26 15:00:28 2025 GMT Not After : Apr 27 15:00:28 2025 GMT Subject: CN=389c31098b14bbc060fc3fc8d539e72cddded425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:55:ae:15:92:bf:ca:0e:fd:9b:38:fb:01:27: b4:b9:9a:95:87:ac:6b:5d:af:4d:df:0c:64:72:5e: 7e:bd:c8:0e:80:d9:6e:ea:1d:0b:34:10:eb:35:60: 07:23:07:a6:f1:7f:fc:0b:da:7b:87:41:16:cd:68: f1:46:76:1e:ee:48:9a:38:55:2c:84:fe:44:ac:63: 9a:98:0e:2e:fd:ea:46:47:ed:7c:70:97:22:d9:4c: b7:4e:1b:73:8c:75:fa:1a:28:3c:ff:5f:6f:12:d9: 4d:3a:d5:4d:20:0f:86:0a:36:3b:9b:99:4b:0a:39: 7d:89:d6:9b:68:80:6a:15:63:ab:44:fd:2f:0b:1d: 40:e1:89:42:c1:ca:a0:7a:70:5d:8e:d8:8a:b5:d0: 87:cd:f6:64:16:f5:85:3d:09:82:23:91:e5:38:49: 89:42:e4:56:99:b1:79:64:4d:16:28:35:b6:8e:4d: 29:c0:3b:0a:d9:80:67:79:68:4f:15:cb:2b:c8:8f: c9:ce:b9:c3:6b:61:44:29:2a:23:b5:26:3d:78:92: 78:8e:87:45:bb:94:6d:1b:7b:3d:39:b2:96:ae:77: f7:d6:11:ca:08:1e:73:c6:61:b6:86:d0:72:02:0e: e0:79:23:59:50:62:0f:6c:45:75:f0:47:6b:3f:90: 38:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:9C:31:09:8B:14:BB:C0:60:FC:3F:C8:D5:39:E7:2C:DD:DE:D4:25 X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:82:6a:c3:4e:8a:a5:de:59:dd:14:d2:b8:2f:0c:f7:7e:9d: 0e:15:e3:98:c6:59:5e:a0:6f:92:62:08:33:76:86:d0:17:0d: b4:2d:e8:c4:47:b9:7b:66:c1:46:71:9b:40:a0:be:72:3c:f7: 6d:4d:c0:22:a9:90:d8:86:9d:b5:a3:95:68:b6:70:10:b9:9d: 66:44:00:09:1a:1f:16:7c:a2:d8:db:96:f5:fb:b9:a1:80:26: b7:94:e4:4f:85:9e:c8:09:26:b7:b2:cb:69:fc:98:56:dc:ab: bd:4f:0d:f0:69:6e:e0:71:32:c4:ee:45:25:56:18:7d:dd:bb: 27:e4:92:a6:ef:e2:71:c5:0e:1b:49:e0:ab:20:0a:40:0e:17: 23:25:31:f7:15:04:ad:ec:c8:a6:ce:3e:4f:d0:0b:0c:9b:9a: 3a:2a:02:c7:41:8a:be:b4:ad:8f:f3:12:59:e2:16:84:07:84: dd:53:4e:f6:27:d0:96:1b:5d:ea:b3:7c:61:4f:95:a0:43:1d: c8:a5:28:a0:7e:81:fd:f0:5a:7a:9a:f2:ed:9d:3d:2a:a2:3e: 94:19:c8:5c:f5:d0:ec:5d:05:99:b8:f3:b2:72:dc:00:f3:a3: 49:ba:3e:70:50:5e:ef:18:ea:9a:ca:4b:0b:47:69:22:64:64: 36:90:61:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZynTdga9wMLwrt6oihu5GXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjUwNDI2MTUwMDI4WhcNMjUwNDI3MTUwMDI4WjAzMTEwLwYDVQQD EygzODljMzEwOThiMTRiYmMwNjBmYzNmYzhkNTM5ZTcyY2RkZGVkNDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolWuFZK/yg79mzj7ASe0uZqVh6xr Xa9N3wxkcl5+vcgOgNlu6h0LNBDrNWAHIwem8X/8C9p7h0EWzWjxRnYe7kiaOFUs hP5ErGOamA4u/epGR+18cJci2Uy3ThtzjHX6Gig8/19vEtlNOtVNIA+GCjY7m5lL Cjl9idabaIBqFWOrRP0vCx1A4YlCwcqgenBdjtiKtdCHzfZkFvWFPQmCI5HlOEmJ QuRWmbF5ZE0WKDW2jk0pwDsK2YBneWhPFcsryI/JzrnDa2FEKSojtSY9eJJ4jodF u5RtG3s9ObKWrnf31hHKCB5zxmG2htByAg7geSNZUGIPbEV18EdrP5A4bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDicMQmLFLvAYPw/yNU55yzd3tQlMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl4Jqw06K pd5Z3RTSuC8M936dDhXjmMZZXqBvkmIIM3aG0BcNtC3oxEe5e2bBRnGbQKC+cjz3 bU3AIqmQ2IadtaOVaLZwELmdZkQACRofFnyi2NuW9fu5oYAmt5TkT4WeyAkmt7LL afyYVtyrvU8N8Glu4HEyxO5FJVYYfd27J+SSpu/iccUOG0ngqyAKQA4XIyUx9xUE rezIps4+T9ALDJuaOioCx0GKvrStj/MSWeIWhAeE3VNO9ifQlhtd6rN8YU+VoEMd yKUooH6B/fBaepry7Z09KqI+lBnIXPXQ7F0FmbjzsnLcAPOjSbo+cFBe7xjqmspL C0dpImRkNpBhCw== -----END CERTIFICATE-----Generated at Sun Apr 27 01:43:38 2025 by rpki-client