$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft File: THhEq-9xHCMshPg8gHpCCvOARyg.mft (raw, json) Hash identifier: DY5CjmW2jl2/n9y8StfAXxA3c3sRbSrMVe90aPhxATQ= Subject key identifier: C2:B1:9E:98:19:55:A0:DB:2B:0C:39:63:91:00:C7:72:4A:2B:FF:7F Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728 Certificate serial: 01976C98CA2A2F8AFD6D8AA07F1E3AE7AE8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft Manifest number: 1598 Signing time: Sat 14 Jun 2025 04:00:41 +0000 Manifest this update: Sat 14 Jun 2025 04:00:41 +0000 Manifest next update: Sun 15 Jun 2025 04:00:41 +0000 Files and hashes: 1: 159ekJmBdzbPKpbON9hMEymGJuU.roa (hash: QP5wYUCm1hSjghfra2oVcPBPcr/BrQ1M69D/IBh13Ek=) 2: 788_6eQ_xFNLe9_wIK-pQKXpCzE.roa (hash: LF8TeWNVGROo8mUa/fN3lL86dQZtL7W6m2p1cv4RWDU=) 3: 7VL3TCVUHIkzVI-u_BV2H3VUTW0.roa (hash: 5DAqYiaH4HvpC1IHfjR7Nmgzznm6FMPuOC84EeBazuE=) 4: 8MxR-Tev1o1VL0t9VRgCRAf7vnI.roa (hash: acrlUTRAmmeUc2aIFqU4RxZwx6fjf2929QZq18A30Bo=) 5: DHF4t5PSRpk6qWKPy2mALhrDjIE.roa (hash: suENCv+FxMCoCroXS4u7UEipCrKhSFMxZ7eSrCqloAg=) 6: DP14eQdBJZ0IZ5xEuLsmxQbl9EY.roa (hash: I1RANQtOMkvey7c50zVN0sFWZ6sc3/FFShaZqQlcjW8=) 7: FetsHfbdUifY1TU89hnwoFpg5QI.roa (hash: ZHBz8QvXKu/jKruoZfTsft4ugiggH0hcJsS7NZeRumw=) 8: Kt5AY6bZ1gA0AyxYwkZX9eyBtTA.roa (hash: vEFM1Xuk52lqHbsTCEtx4tTiPZIq8w5DR7ss3hbOLsE=) 9: MfLf638cBMkfH5M2VRdb5zkozps.roa (hash: 2fcAYwjckXPjFWKMKBGwmwkGYgpmXwgfJsrW0TpRDWg=) 10: NOqs7ZQrrn3ai8o8Sfr5QgX_zoY.roa (hash: ewnWA3/QGkEv1H2zslDa2f3WNqSiX0NCN6++76C2dyc=) 11: RTDW_9ir78QV7tSH_VhKQZV9o9E.roa (hash: d4l0MWyE7MGz6KUyIY2o+vwNtkeh3WQEvCQ4JDRIKNw=) 12: SkDqJYtasnJYM-biaYFDlw-lbLI.roa (hash: SIZnkeDSwwVblW7CmwDd2pAiA3RYFWayoud1xIYiOZE=) 13: THhEq-9xHCMshPg8gHpCCvOARyg.crl (hash: meACPgl9nL2s5dFqacknd10eItreabt4KLkNc/gT+1Q=) 14: Ufg6XzRgoNG-SJwB5vLfRpSdKwM.roa (hash: JG7/C3Qu/BlDNJo3Xbaaiz8UsqXv4SIf7aVJX/4oLC8=) 15: Ux9zLJtd4_p9NV0Me_W8PVyz43I.roa (hash: GS5Alel3iVAtxVyr3H/1KmbzeB55m9O8mdahO6mwu3I=) 16: V4n_ERvR3r7FSnduE0noOKeefts.roa (hash: LPIfQu7peWz7IwtM6LejZS6t2OBvUe9ksCubWX40zoU=) 17: ak_XLj7BZSfR9vOAnnvTOmDEr6A.roa (hash: ikKkuXaDQk5CUy5oU8HwbfJMv8LLvWp+LKDjQ5BFERQ=) 18: eV7DHZCofiB8XK6t9zdEW8QBmNE.roa (hash: ziPPnswaXIfrS3ugoGocK/TB+/DsS0Y8eyLBNQhW8CA=) 19: ehl3MzoakHMyAhI6D9Y3Cy-GPCQ.roa (hash: c/pdm8QJPrUaNWBntBuCKT5L6EGDpSv8U+KeXzAhvgM=) 20: etz2hZixJbP5i4gWcSwK7LRFSm0.roa (hash: He+gUSNkDpgM/YmAlWou/f7IBd7ClRDJZpOAAsQM4Gc=) 21: j4rh0ZB1TNetuBYRDobHojuhdfk.roa (hash: gG/GxtjjKSA1/GWHAwQGCjfaoi/2Fsi2k0vRIown77I=) 22: nRd2QQHJvxWvYt2MaDtdcdyAXq0.roa (hash: yZqn0BYFHogcQ5mr/kG0CSKrE+RjbicfkkCTMtc6QdE=) 23: pgzL98bXwq-9exs7N1Aw8lwmeJ8.roa (hash: xy+0YdokIF7xVDG+fNdt0bMI+vPVGsiM9WuUOpAJvfE=) 24: tl2CuMI8daX_Uy_0-dhV_jYIjok.roa (hash: fhgp+n0E4Y3FzjH1buSmXdmrrGnvYKzvAV0R9W80bHI=) 25: vTuj5nkiC_3i4jeecr0ZYlh6QFQ.roa (hash: hGNi9opDGQg4RKjrBzVyQfTDJbC2WxKz4FBHifedxJI=) 26: yJHEdUxsuxE5hka9evM6UogprJA.roa (hash: ISigKBqS2g0TxwqY9vjjEMwica/8G6mT5W+e6wBxj6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6c:98:ca:2a:2f:8a:fd:6d:8a:a0:7f:1e:3a:e7:ae:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7844abef711c232c84f83c807a420af3804728 Validity Not Before: Jun 14 04:00:41 2025 GMT Not After : Jun 15 04:00:41 2025 GMT Subject: CN=c2b19e981955a0db2b0c39639100c7724a2bff7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7f:1e:e6:56:2a:40:a7:d5:f4:48:df:0e:3f: 97:ae:2b:d0:cf:ac:84:9c:f5:ed:e3:d0:97:61:93: 22:9b:99:8d:5e:5e:6e:3d:16:38:30:0b:89:2c:4f: 0b:18:e3:56:df:27:87:67:f7:bd:fd:8e:6e:b9:25: af:c1:a0:4f:ff:d7:4f:97:97:5e:5d:e6:a7:08:d8: 51:e7:3b:fa:8e:c3:b5:e8:c0:4e:0f:8e:58:71:34: a3:9d:de:1c:07:6b:94:b9:a7:5b:bc:d5:3a:cb:0b: da:41:ec:14:8d:1a:4e:03:9c:bc:27:c6:d7:f3:9f: 05:40:73:69:90:f1:ec:88:b3:80:96:c9:90:21:64: 24:6a:fc:9a:d7:dd:d0:4d:20:c4:c4:7b:cc:c6:f2: ff:7c:b1:84:56:98:9d:66:33:ed:bd:06:d7:f4:aa: 1a:06:a6:ab:83:65:68:b1:2c:4a:46:2a:72:48:02: a5:06:42:7d:bd:a0:ec:da:84:2f:64:fe:64:e8:77: 8d:51:ac:46:6c:a1:dd:70:6d:4d:33:16:aa:ac:a0: 58:45:82:1f:66:d0:b2:bc:a5:75:89:b6:97:ce:99: 29:98:8f:17:19:6f:a1:7e:4c:59:c1:91:bf:94:03: 4e:4b:e5:e2:ea:91:91:db:f6:99:84:c2:08:dd:5e: 69:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B1:9E:98:19:55:A0:DB:2B:0C:39:63:91:00:C7:72:4A:2B:FF:7F X509v3 Authority Key Identifier: keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:2d:e6:ef:1e:12:6e:4b:f3:ea:a7:9a:67:de:68:c5:64:48: 62:2a:30:56:39:56:16:1a:22:fa:24:d9:78:7b:6c:1c:33:26: 12:fa:79:fc:5e:ad:ba:bf:c8:7c:ed:96:45:e5:7c:32:3a:e9: f9:5d:3f:d7:11:17:53:36:65:82:39:d1:45:87:1d:3f:c8:6e: d8:74:c3:6e:80:0f:b4:37:49:e1:ef:11:73:b4:f5:3e:9d:66: c6:42:3c:b0:50:80:02:77:5d:f5:23:01:d0:b3:93:59:67:f4: 9d:ed:c7:67:2d:94:8f:1e:9f:f2:4b:cc:e5:5b:ef:f4:50:c9: 55:e9:17:c6:ce:79:06:cc:9f:2f:b8:28:9e:66:f1:12:86:c5: b4:49:19:a1:ff:6c:64:f9:6b:bb:eb:7d:14:8a:7e:dc:31:f6: 4a:e8:25:9b:6b:40:b8:ba:cb:38:1f:85:fb:8f:dd:b5:3a:0d: e4:ed:b7:75:e7:da:3c:41:26:34:37:c3:76:28:32:a3:03:cb: 84:d2:d4:31:f8:66:0e:96:8a:16:70:31:b0:79:d0:37:6b:48: 0d:bf:19:9c:89:aa:f5:72:a0:97:84:a6:6d:d1:cd:5a:be:a7: 91:8a:08:32:45:86:2d:57:42:93:d4:66:6b:fa:b7:a0:ac:bf: 02:48:d8:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdsmMoqL4r9bYqgfx46566NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4 MDQ3MjgwHhcNMjUwNjE0MDQwMDQxWhcNMjUwNjE1MDQwMDQxWjAzMTEwLwYDVQQD EyhjMmIxOWU5ODE5NTVhMGRiMmIwYzM5NjM5MTAwYzc3MjRhMmJmZjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2H8e5lYqQKfV9EjfDj+XrivQz6yE nPXt49CXYZMim5mNXl5uPRY4MAuJLE8LGONW3yeHZ/e9/Y5uuSWvwaBP/9dPl5de XeanCNhR5zv6jsO16MBOD45YcTSjnd4cB2uUuadbvNU6ywvaQewUjRpOA5y8J8bX 858FQHNpkPHsiLOAlsmQIWQkavya193QTSDExHvMxvL/fLGEVpidZjPtvQbX9Koa Bqarg2VosSxKRipySAKlBkJ9vaDs2oQvZP5k6HeNUaxGbKHdcG1NMxaqrKBYRYIf ZtCyvKV1ibaXzpkpmI8XGW+hfkxZwZG/lANOS+Xi6pGR2/aZhMII3V5pVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKxnpgZVaDbKww5Y5EAx3JKK/9/MB8GA1UdIwQY MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt ZGFiNmI4M2NmN2VjLzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyC3m7x4S bkvz6qeaZ95oxWRIYiowVjlWFhoi+iTZeHtsHDMmEvp5/F6tur/IfO2WReV8Mjrp +V0/1xEXUzZlgjnRRYcdP8hu2HTDboAPtDdJ4e8Rc7T1Pp1mxkI8sFCAAndd9SMB 0LOTWWf0ne3HZy2Ujx6f8kvM5Vvv9FDJVekXxs55BsyfL7gonmbxEobFtEkZof9s ZPlru+t9FIp+3DH2Suglm2tAuLrLOB+F+4/dtToN5O23defaPEEmNDfDdigyowPL hNLUMfhmDpaKFnAxsHnQN2tIDb8ZnImq9XKgl4SmbdHNWr6nkYoIMkWGLVdCk9Rm a/q3oKy/AkjYvw== -----END CERTIFICATE-----Generated at Sat Jun 14 12:00:49 2025 by rpki-client