$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: 4ciMUCygvNDf2jM4feoTY29VlxYDO7woJd71qVxEUA8= Subject key identifier: 1E:40:10:5D:A8:E2:53:FC:4C:91:8E:D5:E0:3F:5C:ED:9F:D1:43:C5 Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019671F8465A8DF3D1DAD049CA56D02AE8CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0B71 Signing time: Sat 26 Apr 2025 12:00:18 +0000 Manifest this update: Sat 26 Apr 2025 12:00:18 +0000 Manifest next update: Sun 27 Apr 2025 12:00:18 +0000 Files and hashes: 1: 249gTQMSJSpG-EMBCDNkFZo6KfY.roa (hash: FM2w6rRpmRNy4pkvq/ltjXR9cpyAy1qnATg+Or8+D7c=) 2: 6TauPTrrYu2XtkFKKlQ2u7VDDno.roa (hash: n6010YujWfquA7qOkV2BHT4bCszagBkp571M6qN6nZc=) 3: 790iVL4e4fee91oD970D0-w9Sb4.roa (hash: BsO1v80PoevYr29+BJ5jHFvk2e9qzzdheuF5aYuPG6s=) 4: 8iIYolCxGRxz8TNi8KfyB6eNhzo.roa (hash: qCapP64kycDhbf/1rZ0laRWKXpyjDof/0V3kjvsJoMk=) 5: Csnk3a3ep1Kuhq_uYIPFt9oEx54.roa (hash: pQI4ia2pZhXHZ1e6yhDMKY3ec6GDJA8BN0tKEQGAjHE=) 6: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: ECR01bkPkcrxv2YRN/PJ5SnqRCyqP70VoRJHSGOz8Cs=) 7: DqIwBz09GVkZK_gZ5I10qjJf_ys.roa (hash: c0iRzQrUBzV64ZvugD7r5Tge4OFGYDIQjIm+fC8puK4=) 8: ECqrLMrFfD90pszf7knR2cpQyh0.roa (hash: Q3DUlwJygjUeoWaRH5s8fB7GS7FOmUc/yzv3gDOfLYQ=) 9: GDKqvDV3tg8euG7iA-40pDu81dg.roa (hash: DIPUgYEMtsUW2SsY0gpVq2Amy3DeiC7nGWJEdov3OAc=) 10: Gv5HrL2f33_QVcVgXo5CsM0Vaho.roa (hash: LEWORZbggYg+nZNcCLA8VUA/7SebS6hs8+TL4nNmjcg=) 11: RLoPgVTrYdRU3oWDO0s6AgXZM9A.roa (hash: hnBHuH0Hj4nCZyNmxdve4qf+oTm6NeCY5N7ucYLxCQ8=) 12: Tfg3jqM-y4B9_0O830RjMgiNMwI.roa (hash: KhUTb4LC7xdbTloQRmriQdzEeWTgLwDx3/uTjpbvQFU=) 13: V2Ei32pldnvEfX7-MOV98CBbvqs.roa (hash: pkd2u2AiMIDj1vMjt09XptY7JsRn5R0rojUcZBXfHoY=) 14: a55ksyXQIpivD8Gjg-hOowj4guI.roa (hash: QSYDUfnNAcf2/9VpaYdVd8L7gvJcLWio5hJOW44x6Xs=) 15: aw9onhWyE0X_G2dqIAr21daa77Y.roa (hash: x+QX04yDVmZf+2LdMkeQARN3ELWJN+aDlPdYgim8Xno=) 16: bunFK9av8RfknnXIgouVNVSj7lg.roa (hash: oaHs1Qr4+X8d39BaWoE1d0HAMovpW6wQdYQeMQErL34=) 17: dYTB5uFARs2s4EvY2l6JyFsQr8s.roa (hash: GAn94IfRAoXkQ0mUCSIrD+5VLnBxIQTLNyCWkmlcU4o=) 18: e8JWpozjp2CQVeh0fKR2of1rmnU.roa (hash: cncyccKFGSSxuzQyK2QlQLGesHp6P7TKw/dYGMrOaLM=) 19: hmab6__F2XjPI4pz-S7ZDMsGfQ8.roa (hash: VKioes1rRTD3dBB9IXmj0I4YiJbzOl3bkffS8nKiVMw=) 20: kK9iFD86F2TbKF1-MK7LXjXrS2w.roa (hash: qP4mb8DT5u0ulqTppD9Fz+HOfaj4p6ZrC8wxXFNUrXI=) 21: lgBmfJ4pdpPhLUFGbohh0OwY1ME.roa (hash: x8hNwusXBAvn6wxypmaX2FEwzDRNl0nacxt9bBpq2Fc=) 22: nEtni_xbFe8uMKn7lNre_DGe-iI.roa (hash: H6QijqDmjL6blsOSOiprWmtN5FAUxeo34Tfbyral+Co=) 23: snhgZyKIl81SdGEMa8SNezN2B-8.roa (hash: q+Juob+GqX3pjwEyROSsOIkH/g4f1ysryJqAil4DeqU=) 24: t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa (hash: moTeQKGuQJjtOuH9bwQLJXR1uXdXDyAyV/k+LcsmXkU=) 25: uHW8s4So2LMq5MxaMXPpI-lhJfA.roa (hash: MnMGvcSAZicv0Yn3QAwx2n0+uUqytuFdlE7u+YN2W7s=) 26: yA8PAjI9ucZPl6gGi8mMeEVflp0.roa (hash: PYdCih3PZqBlyQGGa4OY8MxdNWJfhJ0B6C8JG/xq17Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:71:f8:46:5a:8d:f3:d1:da:d0:49:ca:56:d0:2a:e8:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Apr 26 12:00:18 2025 GMT Not After : Apr 27 12:00:18 2025 GMT Subject: CN=1e40105da8e253fc4c918ed5e03f5ced9fd143c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:66:d5:0c:e6:54:44:b7:de:c2:eb:3c:19:81: 46:38:bf:ff:2c:47:a9:74:b1:49:bf:8b:fc:3e:75: 34:ef:64:53:81:4b:ee:33:09:91:6c:99:08:f8:2e: de:32:c3:60:14:2b:ca:14:aa:44:81:a2:d7:fd:1d: 14:c8:34:e1:71:26:40:7c:07:13:9f:fb:7f:bd:bd: fc:24:c5:09:dd:ef:c8:b8:93:21:03:96:39:c6:54: 5d:fe:68:80:b6:90:f4:9e:82:44:c1:ff:1a:b3:8d: cb:52:59:73:09:15:e8:c1:6d:38:de:2d:40:ff:cd: 66:31:50:db:f9:1d:d2:2d:13:a0:b8:ed:0c:80:0b: 8d:bf:5a:34:e4:fd:0c:f5:3c:36:e0:80:a6:e2:28: 63:f8:b7:82:4a:fb:68:7b:14:65:4d:5d:70:17:6b: 0d:a6:52:d8:12:28:4c:46:80:d5:cb:88:5b:3a:d8: df:0f:72:df:7b:61:9d:a9:75:65:c2:89:89:50:a4: 62:54:c1:14:1c:62:ee:a3:b6:3d:83:3e:55:e5:c6: 6a:30:ad:05:ff:06:88:d2:3c:e3:54:d2:d3:35:83: 1e:3a:4a:cd:d2:3f:30:31:70:49:4c:2e:34:40:41: 5d:0d:95:08:04:2f:7a:53:57:03:f1:e9:0b:6f:49: 9a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:40:10:5D:A8:E2:53:FC:4C:91:8E:D5:E0:3F:5C:ED:9F:D1:43:C5 X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:4c:21:b5:e7:de:b9:2d:00:0d:f3:58:a8:b7:78:3a:01:39: fe:0d:df:93:b6:57:de:9b:30:b6:2f:a0:a2:30:dc:7d:f7:2e: 09:d1:7f:f6:d0:6b:61:6c:3b:cc:7b:ac:af:4b:0d:c4:9e:29: 03:7b:c3:01:9c:82:c4:6c:ed:82:d7:7b:5e:0a:5c:0e:a8:72: 08:5f:72:d9:55:f1:73:c7:75:ef:d7:a7:64:48:db:3e:09:71: 23:7c:1a:e3:40:38:23:97:61:f4:db:bf:11:81:e3:86:27:2a: ce:87:ff:3f:73:24:d9:81:7c:1e:1c:39:ff:d6:ba:59:e2:6f: 22:3d:c4:6b:36:6b:4f:72:70:a5:4e:36:31:55:71:fd:44:90: ed:2b:b5:12:d2:9e:a1:9c:4e:5d:2c:71:42:c6:00:78:b5:70: c1:1e:4f:d0:ed:9e:de:3e:bd:16:6b:b7:a0:54:d4:ff:e2:86: 32:90:b4:e7:6d:4b:05:01:4d:4f:ec:49:98:0b:ce:53:24:15: 2b:2c:ca:ae:7e:35:c9:70:2b:66:77:f8:65:5c:c6:f9:ee:5d: 02:74:57:95:95:8b:49:f0:92:50:7c:da:93:3b:40:c8:6f:8d: 1e:77:81:22:ed:3e:b0:56:46:21:f4:8d:f4:34:95:2e:04:91: 2d:21:e0:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZx+EZajfPR2tBJylbQKujKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjUwNDI2MTIwMDE4WhcNMjUwNDI3MTIwMDE4WjAzMTEwLwYDVQQD EygxZTQwMTA1ZGE4ZTI1M2ZjNGM5MThlZDVlMDNmNWNlZDlmZDE0M2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGbVDOZURLfewus8GYFGOL//LEep dLFJv4v8PnU072RTgUvuMwmRbJkI+C7eMsNgFCvKFKpEgaLX/R0UyDThcSZAfAcT n/t/vb38JMUJ3e/IuJMhA5Y5xlRd/miAtpD0noJEwf8as43LUllzCRXowW043i1A /81mMVDb+R3SLROguO0MgAuNv1o05P0M9Tw24ICm4ihj+LeCSvtoexRlTV1wF2sN plLYEihMRoDVy4hbOtjfD3Lfe2GdqXVlwomJUKRiVMEUHGLuo7Y9gz5V5cZqMK0F /waI0jzjVNLTNYMeOkrN0j8wMXBJTC40QEFdDZUIBC96U1cD8ekLb0maDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5AEF2o4lP8TJGO1eA/XO2f0UPFMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVkwhtefe uS0ADfNYqLd4OgE5/g3fk7ZX3pswti+gojDcffcuCdF/9tBrYWw7zHusr0sNxJ4p A3vDAZyCxGztgtd7XgpcDqhyCF9y2VXxc8d179enZEjbPglxI3wa40A4I5dh9Nu/ EYHjhicqzof/P3Mk2YF8Hhw5/9a6WeJvIj3EazZrT3JwpU42MVVx/USQ7Su1EtKe oZxOXSxxQsYAeLVwwR5P0O2e3j69Fmu3oFTU/+KGMpC0521LBQFNT+xJmAvOUyQV KyzKrn41yXArZnf4ZVzG+e5dAnRXlZWLSfCSUHzakztAyG+NHneBIu0+sFZGIfSN 9DSVLgSRLSHgVg== -----END CERTIFICATE-----Generated at Sat Apr 26 18:00:27 2025 by rpki-client