$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft File: um7Q-3syCDKsFYBTTHsmPzBOmBs.mft (raw, json) Hash identifier: GGTkAKMPkWDMSd7MruLae0gq2yaxmOug2v4P2hIB4eE= Subject key identifier: 62:CC:B3:7A:DC:32:15:91:39:18:43:24:61:3E:50:EF:7D:44:F4:BC Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 0196729DA5B1A7B439829242421B044A637F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft Manifest number: 1544 Signing time: Sat 26 Apr 2025 15:00:55 +0000 Manifest this update: Sat 26 Apr 2025 15:00:55 +0000 Manifest next update: Sun 27 Apr 2025 15:00:55 +0000 Files and hashes: 1: 06NSghyd-RfQfllOJ5ERAf7RZag.roa (hash: K/9Jk2p9txXgz2W0pBQzSeA+A3NB1VwxmrWVLGhwpqg=) 2: 2dPAufbhO8MYI_aYaSiQ223S-P4.roa (hash: h6W+EiR+fmRKkbzlRBzCKubEDQFry0Uk/nrdbeZ7uFY=) 3: 3ozxe3eCXT9JC_ZIJyhtuinyln4.roa (hash: gufLQO5o7Tk7ZZaE8OE4ZmY4rKilts70/MIEHSYdQtw=) 4: 4f_2xWjzr5fFrbiUmyj7b2GAR2c.roa (hash: 40fajzcms2HhTqbHykP7HgDBjZNVjd1JCZs/OBDeB3w=) 5: 51mfa4prfZ4aIFenwdh1tef3BD4.roa (hash: zRXMU/tcdvXFqHBSwYnaJo/sT01T39ww5SlzgBzMq4I=) 6: 9_2WrSSAKlN1EIPH4IL0OW56MrQ.roa (hash: o1bcqiGaGo6W2QG94hVI//R0YPuvhqmGXfJX8Qgac9w=) 7: 9hn6tYB1hGp5VS0kBTSMOtD8ABc.roa (hash: 2fucCKnDWpTEmrPqMmQsnrBxYHtoufXItgIN243OJxs=) 8: C5Bd8VWsABcOSIK7iAaVbeAto74.roa (hash: UFtvFbnPksU3f32VZVDCvar4F34zLCv2m0EpLitoWn4=) 9: ChAwhBWdFbK8H8OgjXlyx4EvkcA.roa (hash: S4V5zsfBw8Krxjs2yY7Dwj9hG1haukhzyaUt11satjo=) 10: DN3qiMWAkbxTvOYg-j1385pvluU.roa (hash: GuR7uK9EOmGeuRld6O+HBlrD3yhsw8UtG+WB0ocy/eA=) 11: ESoOanOemWaXIdUpJ0dGHUrH_eI.roa (hash: pABCCSi7bNCSXQc+TE7ByPE2ezfRsuJY9Lw7DPvUcX4=) 12: Eix1bwtpkh3DfRz10HNMwF0QezY.roa (hash: /tPs0X74Nztuoqdzxvgc+Rkd5OVF4g6dXydqRNkNKmU=) 13: GgWpcVuQcB3Rqpu4xIatLiANk7w.roa (hash: J4tkkEw9G4tBLPpuFam4guXUEl+6lIMfeuNV12F6G2g=) 14: I58Hs_8f85FK_FT8uW8jm1NBQEA.roa (hash: 1eLQQiRHfXYkm5iwzdRHxMNlhUtofu1CHp+dcbWo0/s=) 15: Ik6O3B7FjrBrAwWdNQilmgWzcwg.roa (hash: bOgvurD5h8ijhMvZNu0tCAvTWDZmQWqVikghJRX1T1U=) 16: JuHOqqyp6gPUNYRm3uhGk9D1za0.roa (hash: llqlHk2/9ecn2824xu4i9L0Xvy7NI+3x0axhhCRK9kQ=) 17: LZJCOwn77DXpbJDvlAzekT5apRA.roa (hash: +t4lT4iOzMOF8krgl8HnKOnttpxuNQB9BJNqFL0yj/0=) 18: M3ChRRCC95VWNUgT2kzwMTdPSS4.roa (hash: E6eER/DfbXmaLYyM9UUARrZCyqn2G0qstMCDWv5urp8=) 19: MvkXtMliSNZ4t0doOeJCt7yseKU.roa (hash: ywUFrH7OBGZw7qJ85x9kF2rMILkLc6SVWP6XkiZTaAM=) 20: Qak--g4cNpU6CoUjtQGbcVvopDE.roa (hash: N+RmhDxULogEXWrVUH8MMjtB+zv1gLSm5Ek5YZneh/g=) 21: SyFn9gXv-LiQEpx623FW7zp76Vs.roa (hash: TJf87iNCfO1Ewq8QElsjey5+veJYI8oBKv+M65Z4Cco=) 22: TkGlpc5Tn70aJVwhv7pNACfX1jA.roa (hash: btdfTVJmMqYsieIn46CF/cLd49A9Xyl8eSZFuUISFt8=) 23: YWatj6dDYX-fiuw6ePziaU4C0TQ.roa (hash: V8Z8+AX+rzz9xpEvpWsJlL9jJ/P0smo2rICd10IyVqc=) 24: _B1wZHtnKd18HaoeOE7IMpvthTE.roa (hash: GM2wXplOCIgkJTK+wMIqO8JhJE765YS5HF23fM9LJNM=) 25: _S6k1c_YZyTXV-QbiGNh2eJ9qek.roa (hash: DkdBRSksCprQfNdAaTY6NVmXsg3Z/hZACN3MJ2MSYoc=) 26: aXKFWmr05ujOACE-0dUG_c35U2Q.roa (hash: V2GbIAKcxdCncnWyBDIRBH2ulZIFWnPu4CLpIswEB3c=) 27: bJ5_3QBASsgKrYb1fEOP2pTRl-A.roa (hash: BdFbpQWd3ti+vlRHPZPpiX/PWbDrJqd23YLxBl37+F8=) 28: g2DFl2N-WdFrs9z950ghIm6CXgg.roa (hash: g4VcoYAo+P4AnCakQIRF1npt/PFP6SzCAGb+cSIm25Q=) 29: j1OR6cLV4AFRQ_Q8AYCC4jsEAYw.roa (hash: YpaIoCZ2JtRmpPYrq47DGeATMu5FRM2qhEbni9PeHgk=) 30: jv5AjQiEgUQOR9Bdu3vuXbWrMFM.roa (hash: 2DV2bTMok5nhASbXYW9C3vvtRvCp2zGEhY3zcbpmB4c=) 31: k3SD7Mo8S-wkCGjWHqkku78vk4o.roa (hash: nJKeC1C9D5VB3P7HR1VXT79mmOfAP2khl4fAaXBF83M=) 32: lMNVACJ-h1nsjjrfMh03NkCllrM.roa (hash: ivpqbHCSo3OaWnV7LbXMClcyXI+IHXLVT6OjKDwZgak=) 33: m9WFxaaoUJopCijrezK6Gq5Y4x0.roa (hash: IYAL/aevINvn/lzHc7XS8T3g/wDLEF6taIL5uE1kWoE=) 34: m_4FbtjHWVHft-KPpwBsunRcnfM.roa (hash: FOjLBFoO279KgrQxswrLZVJY7oVfxBkaRwq78/5efpE=) 35: oTPGJVYlb7GDuOecchScOtyVmK4.roa (hash: HxM+IsllX/8+gKO8ZDG7/ou6XQ0BBMHZq9SzkhezbL8=) 36: ooemiNKGVRy5RLKGSewCoVXtxhA.roa (hash: 50iBNWI3DGamOGaWNIoN0o4Mrbk721gvtsPT5f1uk78=) 37: um7Q-3syCDKsFYBTTHsmPzBOmBs.crl (hash: zIu06/DxJ/ZpIBXyVoemFz9JkcXhSEy7w241xQuDm3E=) 38: wfV6g8bCyfjY-q8qOCb42jB3SVw.roa (hash: tdt9myrSVnnipTeZQJjpnWIHSj35hhKuPkiJkdRuRdI=) 39: xby6qjt0unPBaXjG7WI-Peg-jiE.roa (hash: KRd9ht/CIRbyrT8PG2G+CvkZ2u+/FF8umJVk4dxNy9U=) 40: zGfC91qQV1Kiw9lJXOxhhLdA8YM.roa (hash: Dw2IdvFg4+SBQDwswZOmKdsoBW8A8qVDYpgf92qGA+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:9d:a5:b1:a7:b4:39:82:92:42:42:1b:04:4a:63:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: Apr 26 15:00:55 2025 GMT Not After : Apr 27 15:00:55 2025 GMT Subject: CN=62ccb37adc32159139184324613e50ef7d44f4bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d6:43:3d:2f:49:f7:ba:69:a7:9f:41:da:5a: df:11:f2:a5:e2:e6:9b:aa:75:90:2c:40:b1:3d:b7: 14:7b:df:92:99:fa:d0:d0:ec:77:39:78:85:80:28: 8b:ae:19:93:58:ac:b7:7f:68:55:7b:91:0b:6d:bd: 2b:79:a9:39:90:12:f2:d7:58:e2:f4:c0:9c:b7:04: b5:12:92:35:86:78:fb:27:ec:5a:8f:69:1d:3b:52: 0f:fc:a4:64:cd:35:c0:c6:65:64:e7:4a:d0:de:42: f8:8d:1b:5f:f7:17:10:49:c2:c6:0e:dd:ee:9b:83: 9f:a0:13:bd:4a:78:32:bd:c3:06:f8:d3:81:61:29: dd:cb:9a:d2:28:1a:63:60:db:24:d7:a1:46:ae:d9: 94:da:8f:f6:ec:15:d8:d7:fd:04:31:a4:e0:97:f7: dc:bb:41:ec:96:0e:a5:e2:ce:94:85:61:99:8b:d2: 1d:38:93:76:91:78:bc:a9:77:2e:e0:eb:dd:14:da: 06:5f:d8:db:f7:ab:22:2e:ce:29:19:02:b9:27:d9: ae:e1:14:7e:1a:07:8b:13:d2:0a:50:1c:d1:31:fc: 1f:1c:cc:19:ee:8d:4a:f2:1a:2a:b9:3d:3e:6a:65: 24:84:06:ec:14:4a:7c:83:71:3f:f1:d1:ee:60:60: 7c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:CC:B3:7A:DC:32:15:91:39:18:43:24:61:3E:50:EF:7D:44:F4:BC X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9b:97:4f:e5:de:4f:2f:c6:d8:52:0c:2d:39:40:79:2e:d7: b6:8f:d0:78:29:4e:f4:a0:53:0e:c8:d1:3b:42:18:30:fd:e9: 30:a5:e5:6f:aa:4d:3e:cc:ce:0a:19:f0:a7:3b:a9:fc:8b:72: 6b:08:07:0b:73:c4:fc:df:a4:8e:c7:fe:34:37:34:07:84:af: 5d:98:c8:10:fc:9f:7b:91:b0:e2:16:f9:d5:98:d0:2a:f4:9f: c6:ff:98:23:0c:5d:ea:0a:71:0e:38:fd:58:cf:a6:22:d7:0d: 91:16:53:50:4b:b1:74:89:d5:d3:65:6a:52:4d:dc:03:70:ec: 66:cb:48:02:60:a7:75:12:f9:2c:5b:8c:9d:87:b8:ad:ff:43: ca:f3:d3:25:11:fd:cc:18:76:8f:fd:39:3d:7a:c6:c0:d3:87: 68:5d:bb:f2:ea:e4:00:67:ca:93:8f:ed:90:1b:f6:ff:d0:54: e9:3e:6a:2d:d4:fa:c5:7a:19:68:70:98:6c:8b:e6:67:50:62: 71:00:f7:cc:ef:3f:4f:ed:6a:5e:fc:30:b4:28:73:3f:23:74: a4:eb:4a:72:7c:c7:e2:6c:15:ce:b5:c6:58:42:21:09:85:2f: 95:36:27:ac:e9:a7:9b:94:d4:ab:98:08:df:79:c7:2b:2d:1b: cc:2f:f1:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZynaWxp7Q5gpJCQhsESmN/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjUwNDI2MTUwMDU1WhcNMjUwNDI3MTUwMDU1WjAzMTEwLwYDVQQD Eyg2MmNjYjM3YWRjMzIxNTkxMzkxODQzMjQ2MTNlNTBlZjdkNDRmNGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotZDPS9J97ppp59B2lrfEfKl4uab qnWQLECxPbcUe9+SmfrQ0Ox3OXiFgCiLrhmTWKy3f2hVe5ELbb0reak5kBLy11ji 9MCctwS1EpI1hnj7J+xaj2kdO1IP/KRkzTXAxmVk50rQ3kL4jRtf9xcQScLGDt3u m4OfoBO9SngyvcMG+NOBYSndy5rSKBpjYNsk16FGrtmU2o/27BXY1/0EMaTgl/fc u0Hslg6l4s6UhWGZi9IdOJN2kXi8qXcu4OvdFNoGX9jb96siLs4pGQK5J9mu4RR+ GgeLE9IKUBzRMfwfHMwZ7o1K8hoquT0+amUkhAbsFEp8g3E/8dHuYGB8qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGLMs3rcMhWRORhDJGE+UO99RPS8MB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXpuXT+Xe Ty/G2FIMLTlAeS7Xto/QeClO9KBTDsjRO0IYMP3pMKXlb6pNPszOChnwpzup/Ity awgHC3PE/N+kjsf+NDc0B4SvXZjIEPyfe5Gw4hb51ZjQKvSfxv+YIwxd6gpxDjj9 WM+mItcNkRZTUEuxdInV02VqUk3cA3DsZstIAmCndRL5LFuMnYe4rf9DyvPTJRH9 zBh2j/05PXrGwNOHaF278urkAGfKk4/tkBv2/9BU6T5qLdT6xXoZaHCYbIvmZ1Bi cQD3zO8/T+1qXvwwtChzPyN0pOtKcnzH4mwVzrXGWEIhCYUvlTYnrOmnm5TUq5gI 33nHKy0bzC/xyg== -----END CERTIFICATE-----Generated at Sat Apr 26 20:03:41 2025 by rpki-client