$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft File: ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft (raw, json) Hash identifier: OqzUMEDXEqo+k6ttIVQMowzxYveioDpv/z1NOn6ZJGY= Subject key identifier: AE:08:10:E1:59:16:5E:C5:65:57:DF:0F:FA:AD:CB:ED:AF:1E:63:52 Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b Certificate serial: 0196748BDAEE1A451937E92ADC8E6593CBF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft Manifest number: 1603 Signing time: Sun 27 Apr 2025 00:00:44 +0000 Manifest this update: Sun 27 Apr 2025 00:00:44 +0000 Manifest next update: Mon 28 Apr 2025 00:00:44 +0000 Files and hashes: 1: 0SPY3ehqSJEunmmMtILqWyyAEMs.roa (hash: cgmnKIR+3Qr00X4S8IcJLsQ9ZXGxUN8YiwVkY/6EiLQ=) 2: 1-6N5hPx0xq2c7q29UWdbn6yCLaw.roa (hash: 8u7Yg4bXQe+cUd86jQFUFDSWmRwndqREwz4S8+zhCLg=) 3: 1-WBvajt9a9vMz3Gf-bxrEIk5KFI.roa (hash: ixOZ900fztMk7OjhYh4vnjfATcXP54nswes8la4aLuA=) 4: 4ukJa7HMkT7DBb2bYcfynHYUCtI.roa (hash: 50MwC4CJiyXyLJrN7qbX2kdlux7tIAVe2IdkMEIjYog=) 5: 56ynW-tMrHzaNsG7sH1wdFERI2s.roa (hash: IKfB0xjiL+k3DgvsHtHSeQu4uN+X+KGo7/petrFvOV0=) 6: 6gbYECNEsSZ7q4JdusnawAW762k.roa (hash: mnrnhi6Fsht+ntxveCOn/XM8T/ttUxP0oCf5rM/Eilo=) 7: Asr7ZOWfpkDBSjuEfEx9OsDKyrQ.roa (hash: p+62UDWtfe7dh4HDC1QfZ3od4Dagyf7n7BasHemhJIA=) 8: B-Ebcv-J_N7-DKp5EFrzjmiYRw0.roa (hash: 0LrUFyOJZXBRyQDcmvsLMHIZlAZinGZnG68VlQ7rxjU=) 9: BBKqIumEvQjL8b0aHvJsG7_dv_w.roa (hash: sS+JRPTTyxHDwSasc/B/8kRhyr0hzWqPDr1h36aZ+vc=) 10: ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl (hash: UYsjewhZ78daj9pEypGmGbFs91gAAw6XA0Zcj7+z7tY=) 11: Gp66wYREOc1h9eDQ4Jl1zol0dGY.roa (hash: cbxRjqYTk6aDdWomh1V0dsmExBRlWyKb4b8IjMaBUTM=) 12: J5roBlA5puw3qKKb1FvCi0jVSzo.roa (hash: kfWG0LXc7ZWCpz1fFslOhZB1KDuyEVdFS239GndkOhM=) 13: LTyECeNCqqjLKolS1FQDHB0szi0.roa (hash: NMqquUf8k9Vi9iSmBBgAYLF5elpajsX2duO3ac5f7EA=) 14: NKKNKwKeM7BlTiZnda9Yz8Cz51k.roa (hash: eOYKSrPX4eKXl8WLWzwJl6t743IA9dMacABMn1dWxLc=) 15: Ojlwg9x75cm9yCRg1uRbtV9JzOQ.roa (hash: ogbfSoUm1OyL1fGJJ+4TLmGx+iphSaqafx5096ZmO90=) 16: PDCQ_tcZw8HWtOvB4qdfFfnGv2w.roa (hash: rOsSzp/2Qn7zzipRULSHdV5Ez72cOtvODtaM0ekkqKs=) 17: QtkpYFVkfpGCc6muBgcymFsYmcw.roa (hash: cTasgEqCWORockiyCZ3h8oJtqhnmA7saGpgSFUUMyRw=) 18: RvSq0f1_KH3WbOL8Dmljmap3ZVo.roa (hash: 5WZhQboymyKPaLswcG/VmWNce1ChWZNZjnINMA2NbP4=) 19: SJHvhaCpGVpEu19gR74F4_s00OM.roa (hash: QYvmEj267N2mBcF32kZnO8aAG/fQkwII3VAx268JC6k=) 20: TOO1C7Nfoo8I9jGT7tEPWovt-Dk.roa (hash: yJoNXkc40BQiMjXHd4+xV9gjbcua6Ni6TVwfda9wbCE=) 21: VQNQwkBf4DKiAyptu1NuzZNk1DE.roa (hash: KvtJJO5ZGQ49qNKAGMorGsOIb3EaRZS5YhJcNfPGvO4=) 22: VoolzUwqWdjT_6ym6OldKRkJu08.roa (hash: P83IslquU55GgGeVulsKAXE7c1EVmhXTqnamoFvTaus=) 23: WAhJZAlTDUaB6vmjVLZqksIGzmk.roa (hash: Ik7C6qmxni3KBC9zQeT1wej9gtYUxK6ifPjNRKdWczs=) 24: X0jlPh6e-kZkAllO0YRLXGSgDns.roa (hash: fOzjwl+fWwzss4YSzsRBfE9rTuqVHxBRysYK0qEx+RE=) 25: f8HNGqYZ56HDzKMkA97HvxLpDaY.roa (hash: UaI0iT5qEh6DsVjN4hoPGEtmvVSAkZnS69Ts1ZSzz7Y=) 26: g35tTn32QbT-bAwoUi98fNimhp8.roa (hash: 1Z+8GgnLMcbNoyJqOCvdplvh0vT0gEGnRnHP4B7CkZ0=) 27: g8HopqbG0ETACMkk_zXl3liDZDA.roa (hash: IlJyMCJEwJhYKwqsXmSH9IsBc+u/zpqyYvsIqkn0FEo=) 28: lce29TxMLeElQDDpQ8Ij3c0X0Tk.roa (hash: 78Yo5skViqQdWGup+psFTOfViVx1RTBcrcCMhgyvzbM=) 29: o5ChnZN8Fh2UfQkol6pllSa8vlg.roa (hash: aGdO4WpQUBPqENnqKDVSzkgV5hoyIVh/xhrIeTDF4cA=) 30: rRKhiSrbatFvYmuo6ymeVxGwrXE.roa (hash: FCC1G1laSHKy+MJRui/+QVk4PwxHWgeFN/8JBKnvpeQ=) 31: s0Lr7YuNvhvXYPcKrrFVoUy-LO8.roa (hash: a5e7ib7Q/DgMeBDM9u9FOonj1h8M13aRP36qAw7iBFY=) 32: tjYwqQeBxSVgFYzX84lkDNu9j30.roa (hash: gJ1kbe8SJbUDjR4HicbmD9bqr8NrbADsMiLRzf2DJUs=) 33: v7J0SuAlQFdaHot7td83uoznPPo.roa (hash: Ag0K9C9c2TlJAt8MNSulsrKBKAnHlI2lTalhgszhcOc=) 34: v8O-hmYnMSY31ejAOPQBw6PvlZo.roa (hash: n0/Am/fuQ0Bzlhu28NMtBIbpVUfZ8WWaeSJsXMS/dp8=) 35: ybt1ga0_vsN4KgTOqCIx6p76TyI.roa (hash: +Au68nUXgRDHemgu2ODT+EBUxbABQU2c90g5EDmI6o4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:74:8b:da:ee:1a:45:19:37:e9:2a:dc:8e:65:93:cb:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b Validity Not Before: Apr 27 00:00:44 2025 GMT Not After : Apr 28 00:00:44 2025 GMT Subject: CN=ae0810e159165ec56557df0ffaadcbedaf1e6352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4f:5f:19:55:83:2d:02:08:ef:67:dc:44:b5: b4:73:94:fa:95:5a:ac:0f:fd:1b:0c:a0:57:f7:35: 19:07:c5:69:cb:92:cd:2f:39:82:05:aa:38:9d:c6: d1:85:98:a7:ef:50:07:ad:30:73:1e:c5:ff:fe:2e: b7:ec:7f:28:8b:90:d8:38:d4:e8:ba:87:45:42:a8: b6:c2:9b:78:06:26:fa:c8:cf:78:d2:be:95:17:ee: 65:db:e7:1e:32:5e:29:e8:72:76:32:7e:0e:d6:26: 6f:1b:a6:a5:37:4f:fa:c1:7b:2e:18:64:27:d0:08: 1d:07:08:a4:8b:c8:ac:c4:cc:b6:5e:ca:f4:8f:64: a0:10:84:42:be:80:a8:26:c9:5b:88:f1:ac:47:8d: f3:92:cb:1a:c9:05:c8:28:1b:77:92:a1:c7:13:3c: a8:f7:52:b4:2b:05:b8:da:b6:1c:a0:56:3a:3a:c9: 74:5b:f2:da:61:95:8c:2a:54:42:a1:ee:23:f6:eb: 1d:08:a6:c1:3a:f3:0c:a0:45:00:f3:21:98:09:ba: 9b:c6:44:a0:c3:55:d2:54:92:e0:43:69:f2:d6:3d: 06:4e:5a:5b:cc:7e:51:83:a4:2c:84:53:d0:85:8b: eb:3a:57:83:76:6a:86:db:02:ce:8f:85:b8:7b:5d: 73:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:08:10:E1:59:16:5E:C5:65:57:DF:0F:FA:AD:CB:ED:AF:1E:63:52 X509v3 Authority Key Identifier: keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:81:11:33:5d:2f:a6:e9:f3:ad:a8:6e:84:e2:7b:ff:89:18: 41:3e:29:e3:4d:69:e1:5c:2c:5c:9b:52:ff:e7:7f:45:f2:f4: 8f:f5:2e:a5:ef:08:c6:3b:b8:70:64:c8:30:54:3b:16:79:c0: 60:b9:8f:a5:82:87:ac:27:f8:e9:5d:23:5a:cd:ec:3c:85:7a: 92:c4:ed:58:67:78:51:df:1e:fc:25:fb:4e:15:f4:35:c9:45: 68:82:7d:6d:1f:b3:4b:9e:9c:67:fa:ce:50:36:46:47:de:4e: 0f:d4:06:08:77:f0:17:48:7f:b3:d2:a9:50:60:b2:9b:fc:d7: 8f:d4:e3:43:0a:12:bf:cb:23:a4:81:4d:06:54:3c:df:18:86: 97:28:25:4d:d1:19:fd:20:52:98:5b:8a:24:1d:f9:24:29:13: ce:ef:8a:05:66:7a:cd:1c:e2:9c:71:3b:e5:55:ec:67:61:5d: 1a:52:43:26:6c:63:4e:78:88:c2:eb:8d:9e:10:f0:7f:3d:f9: 1d:81:2d:e9:ee:72:e3:77:3f:01:fc:34:35:bc:50:1f:08:af: 5d:2e:60:bd:98:46:fb:8a:af:80:06:18:3d:36:76:bc:9d:81: 3f:b2:d3:54:20:93:62:86:ea:23:3f:a7:e8:8d:22:b0:c0:82: 23:cc:3e:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ0i9ruGkUZN+kq3I5lk8v3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5 M2U0NmIwHhcNMjUwNDI3MDAwMDQ0WhcNMjUwNDI4MDAwMDQ0WjAzMTEwLwYDVQQD EyhhZTA4MTBlMTU5MTY1ZWM1NjU1N2RmMGZmYWFkY2JlZGFmMWU2MzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok9fGVWDLQII72fcRLW0c5T6lVqs D/0bDKBX9zUZB8Vpy5LNLzmCBao4ncbRhZin71AHrTBzHsX//i637H8oi5DYONTo uodFQqi2wpt4Bib6yM940r6VF+5l2+ceMl4p6HJ2Mn4O1iZvG6alN0/6wXsuGGQn 0AgdBwiki8isxMy2Xsr0j2SgEIRCvoCoJslbiPGsR43zkssayQXIKBt3kqHHEzyo 91K0KwW42rYcoFY6Osl0W/LaYZWMKlRCoe4j9usdCKbBOvMMoEUA8yGYCbqbxkSg w1XSVJLgQ2ny1j0GTlpbzH5Rg6QshFPQhYvrOleDdmqG2wLOj4W4e11zmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4IEOFZFl7FZVffD/qty+2vHmNSMB8GA1UdIwQY MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt Y2Q2MTUyMjYxYzZmLzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdoERM10v punzrahuhOJ7/4kYQT4p401p4VwsXJtS/+d/RfL0j/Uupe8Ixju4cGTIMFQ7FnnA YLmPpYKHrCf46V0jWs3sPIV6ksTtWGd4Ud8e/CX7ThX0NclFaIJ9bR+zS56cZ/rO UDZGR95OD9QGCHfwF0h/s9KpUGCym/zXj9TjQwoSv8sjpIFNBlQ83xiGlyglTdEZ /SBSmFuKJB35JCkTzu+KBWZ6zRzinHE75VXsZ2FdGlJDJmxjTniIwuuNnhDwfz35 HYEt6e5y43c/Afw0NbxQHwivXS5gvZhG+4qvgAYYPTZ2vJ2BP7LTVCCTYobqIz+n 6I0isMCCI8w+BA== -----END CERTIFICATE-----Generated at Sun Apr 27 08:17:16 2025 by rpki-client