$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft File: v7CXo2wjJdEDH_QJG6AKhkWdQog.mft (raw, json) Hash identifier: MmwHAPLWDGxxdB9CZ0sX04WxQuKRCTvFyMY+QgqVnac= Subject key identifier: D7:EE:7E:6A:0D:F3:EB:B9:C7:51:E9:CF:FC:DA:C5:E4:5D:A3:58:95 Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Certificate serial: 0196729DCCB7302A100E3BDACE89076DF158 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft Manifest number: 1524 Signing time: Sat 26 Apr 2025 15:01:06 +0000 Manifest this update: Sat 26 Apr 2025 15:01:06 +0000 Manifest next update: Sun 27 Apr 2025 15:01:06 +0000 Files and hashes: 1: 0Oc2gUlOBhHggQCKLFtd_Q9SZu8.roa (hash: lO8VRv7zTZ1lZGexXwpCSSefCLh4/ylUfznYotZ/r9I=) 2: 1-SnnIDOhH63HQ_N0BxypNJP3QjU.roa (hash: fAjpmK6Zca137o7vGKPycBeoqRjl3sX6zuEiOW/w6J8=) 3: 1-tVuMhvJHoeYNSWvwIs4Uj-ZhRk.roa (hash: ZcAfnmmPqdN3AkoVqXCV/iL8CT5WscJ/XlK/uMPt5lg=) 4: 1yKKrsNupGDzzD03jZOpe8iPhUA.roa (hash: HrCCQdsLhhK0Dd1/JhgsMNYCYEDcKrntK3e2NJtO0xE=) 5: 7l7s34fjkn1jL3Cf38Am0uWsDxc.roa (hash: RQXv8xonP+6ByiA9mMkcu2T5Ofx+p+iBRXco1axJ+is=) 6: 8fRQ2gaaSUyxlPfMmZU6YlBuF9s.roa (hash: J9iYhZ57NpzmVPmwg60w1m9TXW93kheuWUSOq5fqcNo=) 7: CYNZ0RAHrT9vV8_0mrfX5LM1kug.roa (hash: O/PKWyYrv2+2Dwkphq4C7HezWG7bAEi2rS0D+m+yIdU=) 8: MhqcPUVWdGpPrfIWk_ee5vpXfV4.roa (hash: VZyy53zNRKBJnQR8hOjgwk1ZMB+3U3h7IQWl1MMyJAE=) 9: OnRHsiqDeR9lPOPphyyOmOlqHJI.roa (hash: sc+Pmya8TqVV8sQvDFxWsBcLjxza8djqPlBaIMjD3rA=) 10: TbvHnfpEwil0k-m-bT5qxin7QgU.roa (hash: eMD2C00X6snjPjRp1k8vdynVDBwXZs3jHeKCcB71/uI=) 11: U7IGGV-QzeZyFI43ALHSLR0fRT4.roa (hash: YV6O4jGhX6w23lUDlEnTBaeFdLwSgpK6hJDxevkHnB8=) 12: WXYX5xAiYzJj-J1cJJRJMrPl1lc.roa (hash: eRbcD2eGlg7uugMn/bCwDLTg5dFFAb5lQYD2uRhlGzs=) 13: a-yIKeqgoYQNBR0ZqftsK2VKwtA.roa (hash: rYqhW3CVRIKIDuB7VC8t0ykZxEcqYyXyUHcCODKusRw=) 14: aEX6iGvtmMCBLbcN3D9lR9wWfYs.roa (hash: ck3g/sMwdLbMyNkBAAhpjxk0gLfl6oyVxwY3SE1wY/I=) 15: clP1LLso4z020v4QpmTmPRbZSto.roa (hash: lQLaEJcBPi63juWNagsHVyBgAJjdQuoynWou1IAm/GM=) 16: cvexNa_0mj6FW8KZpLGAFQIE4OA.roa (hash: iCleYEjTV16uifIQzD0T3cEabw9bGQHX0EZMLPEVxN4=) 17: e6KXF5wF0vO-qqTzdKeyh2Ean8Y.roa (hash: KHUWWv5iYnIrkVVVgtcwtIxqcrf8XOGEsuNQcxfs8gw=) 18: iX51NeJFLA8hZbYydiWCSJNdBac.roa (hash: feK/rKksTFQbgNdFYUDfTjFuIeyOIK8QXCIqWjoXBaI=) 19: l5nptPnNKKQFhoiS91lJWqnWlyE.roa (hash: e570cnA3CxKqJo/gWfnmYUg3TNwae9HIQvRpHl8vuuY=) 20: ljnA30NR9xOfROLBgYNtk3JZLTo.roa (hash: j0TBP2+nuBSwHuaX2USrAFWl7QAm3LV+oRIFPpLHIgA=) 21: m2LdD5mJb9uSRMZpWCDvnGsS-1Q.roa (hash: J5WFUDon+cM2DTrsQDK1CHd33XsZFilcmheGufzHxHA=) 22: mclNf4bSFt9zruWTpd4m4MEyVzM.roa (hash: XlAEFr1TWS3BT/lafylN5Pl3NVyaBtZCZ/ZvLEzRc/k=) 23: ocfuXCVMkG1iC3B_UfKU4_eAETA.roa (hash: sqzdBjIbz2nHdeb6vTsoG89AvTmuvfRmTuCYXqV0hik=) 24: piCyct0NVy-piTUDW9-m-zFaGCY.roa (hash: vC+LbNogTxwCzmTJZpmElrpfct/lmLrelfVwT361cKc=) 25: v7CXo2wjJdEDH_QJG6AKhkWdQog.crl (hash: Y5Wk3iXGi2Q+6jRX2dr/fu4Bfve6mI4pNkyhFxxTS0g=) 26: zIqL-e-xuHByBuNpYQeVAN56dIk.roa (hash: DfRfhMBFYRjS89naokHSrKzYfuZi0JN2/uXaKrvL2KE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:9d:cc:b7:30:2a:10:0e:3b:da:ce:89:07:6d:f1:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Validity Not Before: Apr 26 15:01:06 2025 GMT Not After : Apr 27 15:01:06 2025 GMT Subject: CN=d7ee7e6a0df3ebb9c751e9cffcdac5e45da35895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:79:5a:75:a3:0e:9e:32:bb:76:ff:40:27:34: be:88:15:17:85:4a:47:94:86:d1:bd:ec:af:75:e6: cd:e2:11:7b:d7:f4:66:47:f4:b6:5f:fd:2d:47:9e: 7c:0a:04:7a:00:21:99:f8:5a:3a:dd:7d:d3:6c:d0: db:f8:97:bc:31:b4:a3:8c:6c:90:72:9e:5a:8c:44: f0:11:d6:cb:c7:d3:d7:c8:d2:9c:06:3a:ae:9b:8a: 38:a8:13:4b:fd:d7:3f:09:a0:c7:63:67:ca:c1:c6: 83:82:d3:82:36:b1:90:0b:43:ec:6a:63:3f:c2:5c: 1f:90:5d:b7:8a:2b:36:5c:9a:2b:98:df:43:0b:2c: e6:27:3c:37:61:7b:89:fa:83:ac:24:98:ff:60:20: 73:04:0f:3c:59:7f:f8:f0:26:a6:07:26:2f:e5:33: 9d:25:ff:32:50:aa:26:86:3d:ef:32:6e:e2:5a:33: c3:96:76:bb:54:7b:ae:3b:02:9e:a6:3e:2d:0d:ab: 66:f7:b1:38:ad:36:ff:ae:d2:86:4f:a8:1c:31:c0: 14:a0:6d:68:cf:61:78:f2:ff:6d:07:2c:5b:96:8f: dc:c6:49:ca:0c:0a:ad:7c:e0:87:f1:1f:c6:5f:c7: bb:33:e1:c3:62:cf:d9:95:f4:df:a9:73:8e:09:b5: 8d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:EE:7E:6A:0D:F3:EB:B9:C7:51:E9:CF:FC:DA:C5:E4:5D:A3:58:95 X509v3 Authority Key Identifier: keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:e7:7c:f8:78:c0:75:e2:94:33:78:06:48:de:9b:96:74:af: 69:cd:06:30:ae:ac:b8:da:32:4e:ca:01:75:41:29:91:bf:6f: ac:de:bb:e5:3a:28:6e:1b:8a:36:64:57:85:59:e6:a3:1f:f1: 63:ea:cd:d1:1b:8f:76:8f:35:bb:7e:72:b7:15:9c:46:b4:58: 68:7f:27:5c:d7:da:86:b3:51:26:7c:df:a0:69:35:1e:4d:7c: 28:98:12:e9:01:de:25:78:37:c1:58:fc:21:f4:3a:a1:ec:a4: b6:41:a6:74:ec:26:17:f1:be:cd:f8:f3:d2:0d:ab:55:2a:77: e7:9a:39:54:aa:47:0d:75:d7:6a:4e:4c:2c:59:e7:fd:c7:50: 7e:a5:04:eb:89:e9:c8:83:12:fd:e0:95:0e:ab:f2:79:d6:41: 31:38:7d:1e:74:a1:c9:9e:ef:ed:94:a4:41:ad:6c:9f:75:94: e7:02:f6:b4:9c:dc:82:5a:3d:32:2e:69:cb:ee:a5:d5:de:06: 61:b3:d1:d4:ad:5a:a2:6b:c2:a5:aa:80:03:4d:6f:ab:31:3b: f2:f6:6d:b9:18:4b:b4:c3:78:59:86:ca:b2:36:74:73:8c:c8: ea:25:62:41:cc:50:b1:c1:33:cd:63:34:40:7d:a0:94:b2:3c: 1b:1a:8b:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZyncy3MCoQDjvazokHbfFYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5 ZDQyODgwHhcNMjUwNDI2MTUwMTA2WhcNMjUwNDI3MTUwMTA2WjAzMTEwLwYDVQQD EyhkN2VlN2U2YTBkZjNlYmI5Yzc1MWU5Y2ZmY2RhYzVlNDVkYTM1ODk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3ladaMOnjK7dv9AJzS+iBUXhUpH lIbRveyvdebN4hF71/RmR/S2X/0tR558CgR6ACGZ+Fo63X3TbNDb+Je8MbSjjGyQ cp5ajETwEdbLx9PXyNKcBjqum4o4qBNL/dc/CaDHY2fKwcaDgtOCNrGQC0PsamM/ wlwfkF23iis2XJormN9DCyzmJzw3YXuJ+oOsJJj/YCBzBA88WX/48CamByYv5TOd Jf8yUKomhj3vMm7iWjPDlna7VHuuOwKepj4tDatm97E4rTb/rtKGT6gcMcAUoG1o z2F48v9tByxblo/cxknKDAqtfOCH8R/GX8e7M+HDYs/ZlfTfqXOOCbWNOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfufmoN8+u5x1Hpz/zaxeRdo1iVMB8GA1UdIwQY MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It ZWNjNDliZGMyYWQ4LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4 LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOd8+HjA deKUM3gGSN6blnSvac0GMK6suNoyTsoBdUEpkb9vrN675ToobhuKNmRXhVnmox/x Y+rN0RuPdo81u35ytxWcRrRYaH8nXNfahrNRJnzfoGk1Hk18KJgS6QHeJXg3wVj8 IfQ6oeyktkGmdOwmF/G+zfjz0g2rVSp355o5VKpHDXXXak5MLFnn/cdQfqUE64np yIMS/eCVDqvyedZBMTh9HnShyZ7v7ZSkQa1sn3WU5wL2tJzcglo9Mi5py+6l1d4G YbPR1K1aomvCpaqAA01vqzE78vZtuRhLtMN4WYbKsjZ0c4zI6iViQcxQscEzzWM0 QH2glLI8GxqLFw== -----END CERTIFICATE-----Generated at Sat Apr 26 19:04:32 2025 by rpki-client