$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft File: THhEq-9xHCMshPg8gHpCCvOARyg.mft (raw, json) Hash identifier: KJOwPga4/z73cX6+SPOUn8US4RKNNMficx1/js02txw= Subject key identifier: 4D:63:48:F3:F3:16:03:D6:E4:29:DA:18:1E:F6:0C:08:A6:67:87:0A Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728 Certificate serial: 019677562535D323807188D8E15BC77FCE4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft Manifest number: 1519 Signing time: Sun 27 Apr 2025 13:00:56 +0000 Manifest this update: Sun 27 Apr 2025 13:00:56 +0000 Manifest next update: Mon 28 Apr 2025 13:00:56 +0000 Files and hashes: 1: 159ekJmBdzbPKpbON9hMEymGJuU.roa (hash: QP5wYUCm1hSjghfra2oVcPBPcr/BrQ1M69D/IBh13Ek=) 2: 788_6eQ_xFNLe9_wIK-pQKXpCzE.roa (hash: LF8TeWNVGROo8mUa/fN3lL86dQZtL7W6m2p1cv4RWDU=) 3: 7VL3TCVUHIkzVI-u_BV2H3VUTW0.roa (hash: 5DAqYiaH4HvpC1IHfjR7Nmgzznm6FMPuOC84EeBazuE=) 4: 8MxR-Tev1o1VL0t9VRgCRAf7vnI.roa (hash: acrlUTRAmmeUc2aIFqU4RxZwx6fjf2929QZq18A30Bo=) 5: DHF4t5PSRpk6qWKPy2mALhrDjIE.roa (hash: suENCv+FxMCoCroXS4u7UEipCrKhSFMxZ7eSrCqloAg=) 6: DP14eQdBJZ0IZ5xEuLsmxQbl9EY.roa (hash: I1RANQtOMkvey7c50zVN0sFWZ6sc3/FFShaZqQlcjW8=) 7: FetsHfbdUifY1TU89hnwoFpg5QI.roa (hash: ZHBz8QvXKu/jKruoZfTsft4ugiggH0hcJsS7NZeRumw=) 8: Kt5AY6bZ1gA0AyxYwkZX9eyBtTA.roa (hash: vEFM1Xuk52lqHbsTCEtx4tTiPZIq8w5DR7ss3hbOLsE=) 9: MfLf638cBMkfH5M2VRdb5zkozps.roa (hash: 2fcAYwjckXPjFWKMKBGwmwkGYgpmXwgfJsrW0TpRDWg=) 10: NOqs7ZQrrn3ai8o8Sfr5QgX_zoY.roa (hash: ewnWA3/QGkEv1H2zslDa2f3WNqSiX0NCN6++76C2dyc=) 11: RTDW_9ir78QV7tSH_VhKQZV9o9E.roa (hash: d4l0MWyE7MGz6KUyIY2o+vwNtkeh3WQEvCQ4JDRIKNw=) 12: SkDqJYtasnJYM-biaYFDlw-lbLI.roa (hash: SIZnkeDSwwVblW7CmwDd2pAiA3RYFWayoud1xIYiOZE=) 13: THhEq-9xHCMshPg8gHpCCvOARyg.crl (hash: f2fiqpfLmni2iWjXxtSL71qT9rtQuu5bVclQaHm3FMM=) 14: Ufg6XzRgoNG-SJwB5vLfRpSdKwM.roa (hash: JG7/C3Qu/BlDNJo3Xbaaiz8UsqXv4SIf7aVJX/4oLC8=) 15: Ux9zLJtd4_p9NV0Me_W8PVyz43I.roa (hash: GS5Alel3iVAtxVyr3H/1KmbzeB55m9O8mdahO6mwu3I=) 16: V4n_ERvR3r7FSnduE0noOKeefts.roa (hash: LPIfQu7peWz7IwtM6LejZS6t2OBvUe9ksCubWX40zoU=) 17: ak_XLj7BZSfR9vOAnnvTOmDEr6A.roa (hash: ikKkuXaDQk5CUy5oU8HwbfJMv8LLvWp+LKDjQ5BFERQ=) 18: eV7DHZCofiB8XK6t9zdEW8QBmNE.roa (hash: ziPPnswaXIfrS3ugoGocK/TB+/DsS0Y8eyLBNQhW8CA=) 19: ehl3MzoakHMyAhI6D9Y3Cy-GPCQ.roa (hash: c/pdm8QJPrUaNWBntBuCKT5L6EGDpSv8U+KeXzAhvgM=) 20: etz2hZixJbP5i4gWcSwK7LRFSm0.roa (hash: He+gUSNkDpgM/YmAlWou/f7IBd7ClRDJZpOAAsQM4Gc=) 21: j4rh0ZB1TNetuBYRDobHojuhdfk.roa (hash: gG/GxtjjKSA1/GWHAwQGCjfaoi/2Fsi2k0vRIown77I=) 22: nRd2QQHJvxWvYt2MaDtdcdyAXq0.roa (hash: yZqn0BYFHogcQ5mr/kG0CSKrE+RjbicfkkCTMtc6QdE=) 23: pgzL98bXwq-9exs7N1Aw8lwmeJ8.roa (hash: xy+0YdokIF7xVDG+fNdt0bMI+vPVGsiM9WuUOpAJvfE=) 24: tl2CuMI8daX_Uy_0-dhV_jYIjok.roa (hash: fhgp+n0E4Y3FzjH1buSmXdmrrGnvYKzvAV0R9W80bHI=) 25: vTuj5nkiC_3i4jeecr0ZYlh6QFQ.roa (hash: hGNi9opDGQg4RKjrBzVyQfTDJbC2WxKz4FBHifedxJI=) 26: yJHEdUxsuxE5hka9evM6UogprJA.roa (hash: ISigKBqS2g0TxwqY9vjjEMwica/8G6mT5W+e6wBxj6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 07:29:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:77:56:25:35:d3:23:80:71:88:d8:e1:5b:c7:7f:ce:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7844abef711c232c84f83c807a420af3804728 Validity Not Before: Apr 27 13:00:56 2025 GMT Not After : Apr 28 13:00:56 2025 GMT Subject: CN=4d6348f3f31603d6e429da181ef60c08a667870a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e2:36:77:a9:ea:fc:4d:da:8d:83:f8:37:6b: d6:66:f4:44:94:3b:2a:eb:25:66:73:d6:aa:43:d1: 73:94:57:59:50:2b:48:a8:5a:eb:a0:27:a4:b9:2b: 89:90:a7:a9:6c:bb:eb:f2:0a:26:3a:ff:86:ac:11: 76:f6:e2:d1:79:cd:46:04:30:e9:00:c0:d3:f9:27: f8:0e:e2:1b:39:d0:3b:f5:1a:56:73:fb:61:a4:ad: 4d:d3:11:a3:88:e3:89:d4:96:ad:30:7f:78:4e:f8: 5e:15:5e:47:73:6f:72:83:7b:eb:46:bf:40:e6:af: cd:17:90:70:4c:9e:7a:f8:27:40:ec:68:ce:d4:2b: 43:e6:69:f7:40:a9:52:39:e8:b3:40:88:02:e5:4e: ac:bb:80:17:77:fd:46:c4:2a:de:72:f2:95:27:fe: 39:08:8f:88:3f:2e:c5:63:34:61:19:60:e1:4a:b0: 26:18:8e:bd:b3:57:02:cd:89:37:61:07:ec:26:6b: da:e6:17:bb:c2:f2:03:ca:70:9a:8b:56:eb:ca:5c: 35:ab:43:a0:2c:16:f9:a0:b8:25:38:d4:3f:e2:54: e0:ab:23:5b:30:d0:d4:f5:a2:aa:6c:94:39:1d:cd: 6d:93:56:57:1c:b6:fb:50:90:90:72:a3:f8:bd:b9: 85:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:63:48:F3:F3:16:03:D6:E4:29:DA:18:1E:F6:0C:08:A6:67:87:0A X509v3 Authority Key Identifier: keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:61:0c:04:b4:7e:fb:ef:e0:1d:03:df:b5:3a:7e:52:72:34: e6:05:fc:87:1f:1c:56:7c:c4:3d:88:aa:1c:66:9f:ac:b0:78: 0e:da:ef:cd:48:37:d7:69:51:b1:8d:5d:3b:2b:a5:c9:3c:1a: 32:c4:34:82:03:d9:64:7f:b8:73:4a:f1:ba:4f:77:cf:40:62: f3:91:06:b6:2c:f2:a3:66:69:5a:c6:cb:64:b2:13:5b:9c:1b: 66:59:5e:42:ca:f8:0a:7a:5c:dc:2b:18:11:7c:f1:3a:c0:98: a4:0b:39:35:25:d9:57:28:82:3e:4d:3d:e8:f8:ea:c4:9e:1e: 74:b6:73:e1:83:bb:a7:2e:b3:f1:b2:61:1c:cc:08:b6:51:41: 7e:50:03:c3:49:db:ca:4d:09:49:0d:da:ad:af:4e:56:ca:8b: 37:53:cc:59:60:89:29:ec:8d:82:07:fe:b9:ca:08:79:7c:12: 58:1c:5d:50:8a:8a:52:8a:1f:e4:90:e5:8d:bd:c7:71:55:8d: 0d:48:d4:2d:8a:17:74:06:4d:c2:33:bd:ba:99:f9:09:dc:12: 68:20:47:83:3f:2b:2e:0e:03:71:45:c3:6e:7e:26:af:aa:68: ab:23:a6:25:6b:9a:22:23:db:91:3c:e8:e7:54:6e:cb:de:56: 5b:9e:ef:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ3ViU10yOAcYjY4VvHf85OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4 MDQ3MjgwHhcNMjUwNDI3MTMwMDU2WhcNMjUwNDI4MTMwMDU2WjAzMTEwLwYDVQQD Eyg0ZDYzNDhmM2YzMTYwM2Q2ZTQyOWRhMTgxZWY2MGMwOGE2Njc4NzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseI2d6nq/E3ajYP4N2vWZvRElDsq 6yVmc9aqQ9FzlFdZUCtIqFrroCekuSuJkKepbLvr8gomOv+GrBF29uLRec1GBDDp AMDT+Sf4DuIbOdA79RpWc/thpK1N0xGjiOOJ1JatMH94TvheFV5Hc29yg3vrRr9A 5q/NF5BwTJ56+CdA7GjO1CtD5mn3QKlSOeizQIgC5U6su4AXd/1GxCrecvKVJ/45 CI+IPy7FYzRhGWDhSrAmGI69s1cCzYk3YQfsJmva5he7wvIDynCai1brylw1q0Og LBb5oLglONQ/4lTgqyNbMNDU9aKqbJQ5Hc1tk1ZXHLb7UJCQcqP4vbmFZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1jSPPzFgPW5CnaGB72DAimZ4cKMB8GA1UdIwQY MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt ZGFiNmI4M2NmN2VjLzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHGEMBLR+ ++/gHQPftTp+UnI05gX8hx8cVnzEPYiqHGafrLB4DtrvzUg312lRsY1dOyulyTwa MsQ0ggPZZH+4c0rxuk93z0Bi85EGtizyo2ZpWsbLZLITW5wbZlleQsr4Cnpc3CsY EXzxOsCYpAs5NSXZVyiCPk096PjqxJ4edLZz4YO7py6z8bJhHMwItlFBflADw0nb yk0JSQ3ara9OVsqLN1PMWWCJKeyNggf+ucoIeXwSWBxdUIqKUoof5JDljb3HcVWN DUjULYoXdAZNwjO9upn5CdwSaCBHgz8rLg4DcUXDbn4mr6poqyOmJWuaIiPbkTzo 51Ruy95WW57v8g== -----END CERTIFICATE-----Generated at Sun Apr 27 17:48:15 2025 by rpki-client