$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft File: iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json) Hash identifier: dtLI/BkXkM5vz0KmfVDRniA/Se0fvBKQPczjQUURPQg= Subject key identifier: 4D:18:D9:56:DF:0A:2D:25:DD:FC:59:BC:10:25:42:51:D3:0E:36:31 Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 0196718AA16D2943EC41E22515613D5E618B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft Manifest number: 151F Signing time: Sat 26 Apr 2025 10:00:32 +0000 Manifest this update: Sat 26 Apr 2025 10:00:32 +0000 Manifest next update: Sun 27 Apr 2025 10:00:32 +0000 Files and hashes: 1: 0EefvGTe-CgGPi3LClLG8zkw2Bs.roa (hash: pQ8xUeInwth0hYwUoerBSXG2avCvXMU1nbOP1RalcsE=) 2: 1CEIIYZi1BNa3oTJqmH_tyPw6vM.roa (hash: F6BLpQ1sJ4914gt6UycenluwMGJ0KK1fHxsO2ar2skg=) 3: 5VtvZUZnOiWWHOq4Bzt3fR-Uvtk.roa (hash: 0aZFtVAEpAa0F5d0HclFHuicWqZJwsnLbj2r28DzGwE=) 4: BR0WpUqyVlLFgCU-al1zzwTeWvY.roa (hash: YHXk/Q5pzaU5vFP/0ClS3O8XoVVM2YYOGsR9O85YzI4=) 5: CSCVpnD9UZcOY9dh51GQDiQtUDY.roa (hash: HjUHDCqkZKlp4khp1k6PV1nRwKGQqNvxyYIzG+YWGAo=) 6: FUSDgc58t7U4fuucmEPuEjO5Yhg.roa (hash: aS1RV6Hjz0mszrBpJALZA+zpAxzsSz5luvIAMzBTdPk=) 7: SVFExGqmN2rWr0pdHn2EBcXlt5k.roa (hash: YNeTDKYu1kVI5UITAgJVP4E8+UH/BHxBF+QWa3NBqu4=) 8: T3dYaQ_itGY8sg6N2piIETo4lNY.roa (hash: jr3iaS2h5oKJUS7JXvE4JXbV33q5i4nh8t/0oFzKNAE=) 9: UkcXR5GY1oJE8ql6EfUayHGo-5c.roa (hash: 7ieqNXiHBu4w3yGmh/1MmL46uIjoL27ZQaAgb0zIvtE=) 10: Ur9khRK7hCXitL3VAcUAYAEvce8.roa (hash: 9hx/PwnKPtBM0vXR/kqUYRApb3bCcTtpcvT1ZKRuh8g=) 11: UxCcWDIpfcmIxF4GEQqbNBWBqbU.roa (hash: d6xT2AVAtqIrXTNYslVlnC6liJTON2/El6rs3gVpHJw=) 12: ZNEy3K2T14RzRnaZT87Xby8zPg0.roa (hash: Z6txybaZLKHynJqOdkdyJnlPVvcmYHBvv/qyQ5MOK7Y=) 13: ZZ_S8bbdhWqNksgGcq7TK0C_O6o.roa (hash: cZSS45yPpwSAtlNorKOcZLYVgsI7c5iH/VGntyl+CPQ=) 14: gPum4DXKDMJ6BVlCRX41E_z1RtE.roa (hash: m+nmj8yFxwPSU4MC7F9QT+i5Cc+XxFDvykCgFkarI9g=) 15: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: 0VazRW7eY6naQCBJKet5461dvJjYBweCkafaNU742Co=) 16: mY1ufwtGCljFF7lZ6CWRsYHr8SQ.roa (hash: g60/pAqTVBNRMpLoOtOl1CqOXpp6KEeIdA1Y9Rm5TG8=) 17: q0qjnVdpTQz5V4Wx6jtbrFMXBPM.roa (hash: ngAOffGRyvYQRrwPTGAOl5xDF8KPN9jghcxNAguGiMA=) 18: rTie_7PEv6-re-3-oCL-n4T2Vz8.roa (hash: k418fDoA6+KZQZvl5i4/4Kf1761FasBs1TWPOk46NN0=) 19: r_i4vXEqCp88npQLo5wupbGQvCU.roa (hash: 681bIL2hvemk9KcZlvxDEY+6W4gGDzfccxK3H8tBwKk=) 20: rupNQnzVXpHhZGo4k4orZsL9fsI.roa (hash: Sef19YxuD467IYWmHT5hBmXK8CI1St5Uce/fkYmJFrI=) 21: sjMZT67l8DT5c2OCQ0eZwsJvZOs.roa (hash: eE5iDtLrCkQogodNmuQSyO46uKWAFjSRZ5se0Gx5RvI=) 22: uMzAGcYGyFfYg0xRGgxEE1Lf-Og.roa (hash: RhGx8DQbnjV6ldE2V5DKIbOmTIylu6VhP3FkhLKG4ms=) 23: vpnzE36sGjGpThv2cGB-8JWt7A4.roa (hash: QD7ZgcH/2KUBCt+7GKIhMXGxia9FaAN7lUMkf7xzXUQ=) 24: wpVyG2veNXXiqvd9qbb56p6RhMY.roa (hash: A6UqxkMUpX9ZIGVbEYAfKZvH4lu0ByMng2y+/s3lvEU=) 25: yeb6qJrxDHxENE-5-YT0Ja7NZ40.roa (hash: oK8BFD89TrExTlZbJ/In7+i40KH2MurB9MBJtryRnzo=) 26: yjNjQum49zE8oaEbbGwNjU1csGk.roa (hash: a+ZHTvcXLlXULObWqZE5DGx1Uba0NvfCvm7QVFQB2fM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 10:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:71:8a:a1:6d:29:43:ec:41:e2:25:15:61:3d:5e:61:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Apr 26 10:00:32 2025 GMT Not After : Apr 27 10:00:32 2025 GMT Subject: CN=4d18d956df0a2d25ddfc59bc10254251d30e3631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c0:0a:dc:7f:d5:02:dd:54:95:58:f3:07:43: fd:5f:2b:af:bf:a2:0a:ff:ad:c8:1e:a3:22:5b:79: d2:12:3c:28:46:e6:57:94:39:e9:47:0a:61:b9:28: fe:77:c9:8a:58:f1:a9:5c:12:73:08:4b:6a:66:12: 11:1f:75:90:78:77:dd:14:5d:c9:fb:9e:a6:d8:35: 69:52:8a:ac:a0:c9:86:6d:62:4a:7a:29:e4:19:56: 97:e1:69:1a:9a:21:93:09:5b:73:d2:3e:34:c1:c1: 5d:8e:fd:fd:87:1f:02:cc:6f:c9:89:82:b8:4a:e4: 19:7b:9e:3a:ea:99:f4:28:6c:aa:87:2e:30:74:de: a4:9e:ea:e2:38:2e:d1:d1:a7:d5:97:36:3e:05:18: 85:6d:8b:48:8b:ed:15:9f:f0:6d:1b:6f:a4:d5:80: f9:b0:1c:a0:57:8f:c8:b9:8b:73:4a:16:05:79:9b: bc:58:45:4a:24:94:a4:2f:91:17:74:35:f2:0d:65: 83:9b:49:8d:3b:38:b5:34:ac:f9:c3:6f:40:26:62: 6d:61:86:85:1c:2c:b6:b1:22:f1:67:4a:e8:5f:8e: 50:64:61:f1:c1:86:36:2e:d4:8d:7e:4f:f2:87:83: 4f:62:0a:20:b2:d5:bf:79:98:1b:73:89:2a:df:24: 21:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:18:D9:56:DF:0A:2D:25:DD:FC:59:BC:10:25:42:51:D3:0E:36:31 X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:86:3c:e5:86:88:70:97:0b:ba:41:91:8b:7d:5e:69:b2:8e: 90:4f:47:e5:59:3a:54:51:22:54:25:e9:70:3f:7f:cb:ae:9e: a3:ca:b2:73:4b:00:eb:44:a0:25:cf:c7:0c:c5:dd:92:53:e2: 8e:f2:a5:42:b7:5c:1a:e1:bd:be:ad:47:07:06:d4:d0:27:71: ba:51:68:b4:32:d0:b8:07:2b:82:00:ac:98:25:42:4a:59:47: 7f:de:05:d3:63:c8:a0:09:f5:65:9d:78:dd:2e:95:4f:5e:05: 65:f6:af:78:6d:36:83:02:4c:27:fc:bf:97:b8:7f:a4:43:6f: a2:c7:e2:bf:32:3f:3b:40:bd:f4:5f:be:46:df:8f:4a:eb:8f: 39:8f:8c:0c:77:e8:11:5b:29:5b:63:0e:99:58:e2:af:6b:2b: e0:0f:b9:61:e5:f4:d7:09:f7:87:ef:8d:2b:fa:1d:0b:cf:04: 9c:72:7d:d9:c3:29:01:d6:14:cd:84:29:ad:90:b9:14:e6:ff: 2d:6b:38:dc:a9:b3:fb:1c:66:d4:49:62:a2:e0:bf:b5:29:1b: 94:b5:8c:91:50:de:8c:fc:dc:64:5d:dc:61:26:3c:4a:34:7a: 9d:5c:ad:81:96:dc:3c:41:8b:b8:ac:9c:a5:66:71:2e:1b:b0: f9:25:e2:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZxiqFtKUPsQeIlFWE9XmGLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjUwNDI2MTAwMDMyWhcNMjUwNDI3MTAwMDMyWjAzMTEwLwYDVQQD Eyg0ZDE4ZDk1NmRmMGEyZDI1ZGRmYzU5YmMxMDI1NDI1MWQzMGUzNjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8AK3H/VAt1UlVjzB0P9Xyuvv6IK /63IHqMiW3nSEjwoRuZXlDnpRwphuSj+d8mKWPGpXBJzCEtqZhIRH3WQeHfdFF3J +56m2DVpUoqsoMmGbWJKeinkGVaX4WkamiGTCVtz0j40wcFdjv39hx8CzG/JiYK4 SuQZe5466pn0KGyqhy4wdN6knuriOC7R0afVlzY+BRiFbYtIi+0Vn/BtG2+k1YD5 sBygV4/IuYtzShYFeZu8WEVKJJSkL5EXdDXyDWWDm0mNOzi1NKz5w29AJmJtYYaF HCy2sSLxZ0roX45QZGHxwYY2LtSNfk/yh4NPYgogstW/eZgbc4kq3yQhqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0Y2VbfCi0l3fxZvBAlQlHTDjYxMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmIY85YaI cJcLukGRi31eabKOkE9H5Vk6VFEiVCXpcD9/y66eo8qyc0sA60SgJc/HDMXdklPi jvKlQrdcGuG9vq1HBwbU0CdxulFotDLQuAcrggCsmCVCSllHf94F02PIoAn1ZZ14 3S6VT14FZfaveG02gwJMJ/y/l7h/pENvosfivzI/O0C99F++Rt+PSuuPOY+MDHfo EVspW2MOmVjir2sr4A+5YeX01wn3h++NK/odC88EnHJ92cMpAdYUzYQprZC5FOb/ LWs43Kmz+xxm1EliouC/tSkblLWMkVDejPzcZF3cYSY8SjR6nVytgZbcPEGLuKyc pWZxLhuw+SXimg== -----END CERTIFICATE-----Generated at Sat Apr 26 20:18:37 2025 by rpki-client