$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft File: d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft (raw, json) Hash identifier: IG0zmycefHCD+ryzcfD11bemo8ZbXaesbPtDwkGT3mc= Subject key identifier: EB:73:09:ED:18:CD:BC:B8:68:2F:2F:02:43:42:90:BD:9F:1A:52:C4 Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84 Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784 Certificate serial: 019671C2176ADA415623ADF9DA8ECA141BA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft Manifest number: 1590 Signing time: Sat 26 Apr 2025 11:01:07 +0000 Manifest this update: Sat 26 Apr 2025 11:01:07 +0000 Manifest next update: Sun 27 Apr 2025 11:01:07 +0000 Files and hashes: 1: 6OE9SiBXfj4CrhXl1IhIqgML0B4.roa (hash: I+4fgDm8h6Gl2QM6feCA3XQ/vqIKkpArxBydFon12po=) 2: BFOakhPnuL0L7mtZczMTb1C4Te4.roa (hash: IN5v1SH94sVq7W7KBSVjen81W9F0epiDV9txEvMGmR4=) 3: DhQS4vOYDF6H_8OWg4SHjhbpiRI.roa (hash: fNK2myED2q9q2doGfvQzo78kwtzYcmHRZJlkYm51Txg=) 4: G3n1fmpvxWOzjbB1db8Vj90w1z0.roa (hash: V2uHJgqy+vP8ErQ/TWqwyd3ruJ62gj12CXBlt1NsI04=) 5: GbLhCb7LtppG03iqg1JrQPxPGik.roa (hash: Nhpdg3evar8Wgs90fQIra7qhNWc+KSECGcaKhukai1s=) 6: H9YsoSVqujSzIl1jC8bNi8oWfWg.roa (hash: 0dy9ycp0QLf3d25OkGOB0YPWnPgDY1tgsWVu7Y1vx58=) 7: JEzxWWenT3GfTXkwl9vUyNpy6Ns.roa (hash: qgR7gOl4WgMIXNhv57wtr5r1gDfvvLSYLQY7icBJ4YU=) 8: KlkPll-2eT4OEc7JEVeBjKeKFvY.roa (hash: D5i0rk6m1yJPb6vmyolamvrhIx1gvzHDS5KpZlKyc8E=) 9: L5WtoV3BFHEh7ee302wn8vi_VdY.roa (hash: aeS2KxRTadI0bQvnm7vgoZxmnQFSj7clIU01Ondzlk0=) 10: Qd-7MuUT4GYh0J-MfEHgFFh8b4Q.roa (hash: c/5l1GiDiCB7mLH+5TWxHZaDa+CFb25O/VddyUT+Q4A=) 11: RodzSko_vmyzPqCKuCKq3cJkGq0.roa (hash: UPyFlyEqZNcFpcK848BEBEE7TBg3Ypn/rHLne1CII1k=) 12: VweKz9j23hz-Ksk5OZcJDAktVRY.roa (hash: ymNCGzRMIuCrkxBZjyiuwPjst5RrxUcCCAVY7LL5IWo=) 13: XQuJXpDkA9qYgxcQ38huwth57wA.roa (hash: DXlOkVbY/RHDCgHRhEXU+SDyImy4MVnIFTYuOjrcEzE=) 14: Xug-JWqIvU_cGZO2X23AwQGwo1E.roa (hash: yZB0hX1SHdmsQw8VPl7LdiQvKzJkBdYGo5TH1U0pXwc=) 15: a4N6uZ3zLxFcWudvf4q59eJt-Kk.roa (hash: A/Eckh4mmsJ3JlwelGysLbD+UYW4yWmGq8d/OLHRzNY=) 16: biEUqCkAyoPq-Mnm3P1_OvhDdi8.roa (hash: Gi+zixTezsMvQDObpXCaUkc6hzyFUma3jDwHSH/UkhU=) 17: bkuVFSmwR5rEQDdMTdBk_JXXGss.roa (hash: 27OhIF6o+zBfja35/NnhhZLHyv4jDAhBThs7wTkygh8=) 18: cmTeW-ofpNY8BjH8cXTtwhADRzA.roa (hash: SuBfMr197wymIhNTs9zfHdUIhpZWN/FfTHb7Y4F5q/Y=) 19: d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl (hash: HOehNxwME7LiDamZ5IdpIFFXwRFk8Rn/e1pi9EhGPtY=) 20: jVD0Cx22C6rtJhjEyMwl_d7ttOM.roa (hash: vrC9crcbkmlgTTSHswR4Ww7gI1l8vbnHNsq1l2jd/ok=) 21: kE7edc6RxVB8wHBrlQuyIVRBSOE.roa (hash: VgCrc55fFSMPGAF1+eEmgsiO+WwjxfM4Lli8mq5wNmg=) 22: ktYyB7Lo8mei1Js5I-I0yf-MCXU.roa (hash: Wuqa50eBmMkD+O8hs0aB4Jfbv6/LdAF4VRAO0szb7/E=) 23: nTYZ-KMsZnRAOylEgWxzRgkqcjE.roa (hash: G6392WelkXUUGAazTyZCXqq/F4O82Q1Be1qAJMLhnCI=) 24: o1ISKkD-Tnv8WDLjnHzvZxb8P6c.roa (hash: h+vO7xJkIP0Gi0X6/S1jhxnU4ZRO9Brsr/xSv7WCb00=) 25: phj8xSqpRWUthExdTnPQzXh3IiY.roa (hash: r7FDjUSXURVGsc44gHgkOSYVSnZ1xgiM8t2uj7Mcguo=) 26: tzNmVvB2-Kb7n7f7uGfrlaT_5N0.roa (hash: /5iZIN6C0RTqyaoEd2UqC7lQwSHOOr0DtjWIfNsZ0ig=) 27: y7gAm7kghjHHyhd8lNyuOvqL-gE.roa (hash: WTPaSKHOX9uHT0vFATOWJ6Sa/T+XEBB2nCNbOZzZ6VI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:71:c2:17:6a:da:41:56:23:ad:f9:da:8e:ca:14:1b:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784 Validity Not Before: Apr 26 11:01:07 2025 GMT Not After : Apr 27 11:01:07 2025 GMT Subject: CN=eb7309ed18cdbcb8682f2f02434290bd9f1a52c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5d:bc:18:ef:09:0c:1c:89:e4:1e:d2:c0:23: fc:4c:c2:f9:c7:7f:5b:03:88:60:7f:fd:65:a0:9a: 7e:03:17:26:27:68:91:12:f1:81:10:c9:52:29:1f: 7c:ab:d4:b0:91:3e:f7:f2:c5:c1:40:ad:0f:9b:b2: 66:7e:53:40:5e:22:a3:c7:49:4e:f3:bc:84:a8:ed: 29:69:5b:2c:ba:df:6d:12:cb:71:3f:71:6c:c4:49: ae:7f:24:f4:91:17:f9:5f:8d:cf:fd:9d:61:ea:a4: 98:d9:97:12:44:a3:4c:4b:6d:80:92:34:7e:17:fb: 8a:23:39:f9:13:f4:2d:69:ff:e2:f9:11:26:96:2f: 40:be:a8:33:90:72:2b:3c:f7:1d:ea:15:74:07:76: e0:c2:74:24:5b:83:f2:75:24:a3:d3:e7:d4:49:0d: e4:9c:84:4c:b4:6d:27:34:3f:5a:83:15:ad:90:51: 2a:d1:a0:d8:a1:84:4a:62:b9:e8:b7:42:6b:7b:12: b4:3e:1b:ea:d1:0f:17:b6:60:d0:8f:99:00:75:a8: 05:8d:62:fc:ce:32:28:5d:1a:70:2a:f2:88:bb:4d: 22:90:d4:d5:4f:55:cb:7b:56:71:fa:89:9b:58:72: 76:53:e4:d2:3b:a3:f3:25:e2:75:c0:73:00:58:97: b3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:73:09:ED:18:CD:BC:B8:68:2F:2F:02:43:42:90:BD:9F:1A:52:C4 X509v3 Authority Key Identifier: keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:09:18:69:74:ec:38:b7:d7:de:6f:e6:2f:e1:05:39:d4:5f: 26:47:3a:a2:d6:99:b9:a6:8a:ef:35:7a:1e:d9:67:c5:c8:cc: b8:0e:4d:db:80:4a:d7:f2:93:e5:56:18:24:a0:31:27:0b:6f: 50:8f:e2:4c:ba:29:02:13:ee:bf:af:d0:de:b6:71:c3:71:ac: 26:3d:1a:a0:09:31:20:74:5d:93:f9:61:20:ae:fa:5f:a9:c9: 88:73:01:c5:a1:3b:61:b8:cd:35:51:a4:89:32:bd:39:3c:7a: 72:d9:f1:36:2d:fe:13:fa:3c:14:6a:96:3b:48:d5:20:73:08: 08:7a:8e:ca:a6:ec:cf:43:71:f9:31:be:de:fa:44:75:d5:9c: 73:b8:fa:6d:3a:90:87:05:3b:cc:31:d2:65:6c:c0:b0:c3:9a: e2:a4:6d:22:a6:35:b8:b0:70:59:cb:93:2f:47:dc:33:f8:a0: fc:72:7e:f2:2d:3c:62:08:24:c9:ef:6b:cd:43:73:80:1e:fe: c2:43:80:93:90:de:be:4f:d9:d1:7a:09:c1:46:af:71:41:01: aa:c1:ab:ab:0c:97:32:9b:b4:2b:41:b2:06:01:d1:12:7a:b3: 67:43:b5:79:99:53:0b:67:90:12:63:ce:8b:c7:e5:26:aa:5b: 1d:ba:ea:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZxwhdq2kFWI6352o7KFBumMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZjYxZmM3YzBhYjQxY2UxNTRlN2JjYjA4ZWY5NjIzNTFh NDY3ODQwHhcNMjUwNDI2MTEwMTA3WhcNMjUwNDI3MTEwMTA3WjAzMTEwLwYDVQQD EyhlYjczMDllZDE4Y2RiY2I4NjgyZjJmMDI0MzQyOTBiZDlmMWE1MmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql28GO8JDByJ5B7SwCP8TML5x39b A4hgf/1loJp+AxcmJ2iREvGBEMlSKR98q9SwkT738sXBQK0Pm7JmflNAXiKjx0lO 87yEqO0paVssut9tEstxP3FsxEmufyT0kRf5X43P/Z1h6qSY2ZcSRKNMS22AkjR+ F/uKIzn5E/Qtaf/i+REmli9AvqgzkHIrPPcd6hV0B3bgwnQkW4PydSSj0+fUSQ3k nIRMtG0nND9agxWtkFEq0aDYoYRKYrnot0JrexK0Phvq0Q8XtmDQj5kAdagFjWL8 zjIoXRpwKvKIu00ikNTVT1XLe1Zx+ombWHJ2U+TSO6PzJeJ1wHMAWJezbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtzCe0Yzby4aC8vAkNCkL2fGlLEMB8GA1UdIwQY MBaAFHf2H8fAq0HOFU57ywjvliNRpGeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjkt ZWRjOWQwMmZhZjU0LzEvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjktZWRjOWQwMmZhZjU0 LzEvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQkYaXTs OLfX3m/mL+EFOdRfJkc6otaZuaaK7zV6HtlnxcjMuA5N24BK1/KT5VYYJKAxJwtv UI/iTLopAhPuv6/Q3rZxw3GsJj0aoAkxIHRdk/lhIK76X6nJiHMBxaE7YbjNNVGk iTK9OTx6ctnxNi3+E/o8FGqWO0jVIHMICHqOyqbsz0Nx+TG+3vpEddWcc7j6bTqQ hwU7zDHSZWzAsMOa4qRtIqY1uLBwWcuTL0fcM/ig/HJ+8i08Yggkye9rzUNzgB7+ wkOAk5Devk/Z0XoJwUavcUEBqsGrqwyXMpu0K0GyBgHREnqzZ0O1eZlTC2eQEmPO i8flJqpbHbrqJw== -----END CERTIFICATE-----Generated at Sat Apr 26 18:07:52 2025 by rpki-client