$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft File: up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json) Hash identifier: YdLM5I4e5KMwqoacU6Zk9JQMViq9JqfD1UKyYi2tp+o= Subject key identifier: EA:9E:98:CA:61:CD:8A:9A:98:FF:64:B9:CD:63:D9:74:01:CB:96:FD Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 0196790CED7DB4CDB9FA411580BE389BFDBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft Manifest number: 151F Signing time: Sun 27 Apr 2025 21:00:12 +0000 Manifest this update: Sun 27 Apr 2025 21:00:12 +0000 Manifest next update: Mon 28 Apr 2025 21:00:12 +0000 Files and hashes: 1: 400_RzqZ2Zkj4RgRtQM0ieiw_70.roa (hash: cWGkkjGCyiI5yIlZYg8oK4kWIOo/BCALf4PQ/6MHr2Y=) 2: 4Wfz_EQvo6SYko68k4TSfAN47sU.roa (hash: ox9v/ftMGhy9fG8TSa40dOcstxMI1IJ6bYGEOLCjJzU=) 3: 6_4Hwc6tzBdm4l-R8mlGWEV4N9s.roa (hash: UHiP2cXYQ7lCrtkLIonRIJ0zFlvgCt2dpLZRN8ietd0=) 4: AJ6fmQiDz0GXs7lMqGohkie4ct4.roa (hash: r9hxOjQfXyLSDYE4VLoR0q1v13yTVS1W/Vgz5ZPmFVM=) 5: ATThoTvJNJF4N5lVg-wyxhidePQ.roa (hash: 8ezRICXjiYRUY5WiWzKJgIUwL+aryWeybUmLAWnMagE=) 6: FFOy7JzcrItrCcqIMOBP12gCuvA.roa (hash: 4feRGc55ccbj4QRPLSWi7NCE31nGpgj09ILORHtqr7E=) 7: IJorGzUf120CRI-mpVXAgOI_TJQ.roa (hash: DW42FlDi+SRpZXtqB1CINfiZYcz4yxFQLUYN4vDCN7c=) 8: OoklI3kvpUu2QON6vzr_znMlb4o.roa (hash: RZHqfGmBHtCF9GP4Ad5GiS/4m5qbDE50y9ANbpznwhg=) 9: QEvUN67KDbFaOfZj9g3vC9rUQm8.roa (hash: zUZsUbWINgqv3RegkdqlIa9Hhl7pusc0/yFVE36iNwo=) 10: QKPU8lHD1Ls8ijbvjjabsAgLzUg.roa (hash: /fSYXi8WIkq4YrB09WT2QnZLo4NqtBeyd9xE217JYvw=) 11: R2PawQq0aEUNn_27xWpTtnBVRIM.roa (hash: wgajC5DOyIsq57Qvm++dcs3T7mB2PJ+qFxFBFbbVsAw=) 12: RDOul7gyH90sNWuWnbwP87u8wBY.roa (hash: o6ZEueWl1RLQaWWUlM9zZ0WWrPg/eDS24KItGKwAdKc=) 13: SGqQT2BA7nvZeypVaggMahgg5Ag.roa (hash: rpRHSpS91VJQoigSTO7lxay+A/xm/jPFJyoswIPhH6c=) 14: UHKWf0IFUDq4891IQbRTHXY2rfo.roa (hash: khzJ2vmoGD7A0nhnzsOiCPmcx8Ixl6GoeAYAbQaOA34=) 15: VrGGCYFwhGi4BPeG9vQveoaFfLM.roa (hash: edTPl3MGZDPIQA5qIWNLHzc/W7A7u7n891N+syJZyK8=) 16: XOgRPDn4EAwuDOtKWrXwVLKxYbQ.roa (hash: 49AORPQzSmZAZLgFWXR4a6bM5aE+rKu1rS5QrLIREg4=) 17: f22Rg9MgZynKKLpI74qpWeFqUQg.roa (hash: nzoA/aYd6ivHr6t+Z/FKBabLT0D3aCpU8WEfvxU6+0Q=) 18: fYISzZWRzG7_wtxIDhjyXHPM4P4.roa (hash: G+ywPlLAl4RvDHTdYmvn2UIgfVxBZaWwGMa191aRbWk=) 19: gR6HPRWa_I93ATF_6lEGpZdtVD0.roa (hash: akW6B3OCvdeceBU9Nhi1NU2MjvgHwNjLQ7OLUdvvzL4=) 20: mAo26VPj0zSn83SBRVoaCRdhIg4.roa (hash: C7ffNHQiA5Pk5uSBOSpDLGUyZWz38AAFh4I1f40dGgU=) 21: oWrtd0aFvC95N4Z6gxyZZ1SWrJs.roa (hash: AlvH9oYmiwAzp0Z4dOdOt5RLv8lOGK9l5kvoT65TGlA=) 22: qvRavzCJNzlbWaxfB4-Csl1ipM8.roa (hash: TD2WbwBpamsZuvWzJKbhtgXUy7eDy6Fj193ZH7DB3bY=) 23: s8dlGwwG7APZ3e9v5u6lvgLO1LA.roa (hash: 8xnfXfiigbDRlP2kATr1I4JuafJveXZL4+MTG5Nb4O0=) 24: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: YU/c6P4s2rQpyP7cvqAeJ2/j7bT1TvSQJ3f0VXTZDvI=) 25: xGjAXSy-rPa7gZ2kCW6E-VgMqD8.roa (hash: AKtFMHlOVM+NFVSI2WpJP3l3MsXbWpJgiU4DhcCI8gQ=) 26: xqd3xWJCW96sJcN2e73CvA4BAEA.roa (hash: laL7IIKjO1uC6O19XqLmeRI4pdgH1HSkOUvvYu+TK5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 21:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:79:0c:ed:7d:b4:cd:b9:fa:41:15:80:be:38:9b:fd:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Apr 27 21:00:12 2025 GMT Not After : Apr 28 21:00:12 2025 GMT Subject: CN=ea9e98ca61cd8a9a98ff64b9cd63d97401cb96fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4d:d8:59:1f:0a:0c:d4:8e:e3:e5:da:93:01: 0b:3b:85:75:3a:dc:fb:aa:ee:3b:b5:06:88:5a:e5: 2e:9f:66:59:7e:23:c8:90:b5:50:a8:00:51:06:dc: 85:a4:e9:51:35:0f:a7:4f:72:67:3a:91:39:aa:be: 13:f3:91:d3:5e:9b:30:e6:19:ea:4a:f8:35:08:7b: 3b:ba:e3:e0:0e:7d:d5:ac:d6:48:d6:b8:00:d7:c9: b8:1a:e4:bc:ec:98:12:96:3c:11:0a:d4:3f:22:c6: 47:4b:b0:ec:4c:f6:b6:09:69:30:ab:5b:62:7e:43: 06:e7:e2:7b:9d:3c:ba:75:ae:98:0e:d5:e4:2a:4c: 5b:8b:07:d2:39:69:32:0a:83:ee:44:87:c3:ff:8e: b4:ea:81:28:f2:8a:a6:64:db:47:22:84:d0:56:84: 30:c2:57:91:3a:57:d2:8c:33:57:b5:a4:25:ec:ad: 0d:dd:39:59:56:53:08:a4:3d:65:9c:af:55:d8:32: 31:dd:34:fb:98:1b:a1:d9:7d:0b:0a:11:65:6d:9a: 82:d6:df:d9:3d:6a:8a:e3:1a:c9:f5:65:ed:62:0d: e2:17:22:60:39:18:c5:a3:fb:20:34:ba:eb:36:a5: 39:69:9e:b8:4c:ff:f7:46:4d:e2:c4:da:52:66:54: 04:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9E:98:CA:61:CD:8A:9A:98:FF:64:B9:CD:63:D9:74:01:CB:96:FD X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:a2:40:84:c7:33:b7:f7:83:2c:88:cf:91:cf:b8:40:e8:9c: 22:5b:26:f5:af:0a:75:64:d1:e3:0e:41:ee:a2:ab:e8:44:9c: e6:57:c0:a8:59:2d:f9:1d:90:66:e5:0f:52:04:ea:e5:aa:15: ec:4b:9f:d7:01:01:ed:61:c6:08:10:6f:ae:d9:97:36:8a:31: 93:37:2f:cd:5b:54:6b:cf:84:e8:66:80:6c:f6:a0:19:94:70: 22:a6:a1:d7:b8:af:f0:ba:9f:a1:48:ec:83:7f:85:76:ef:b9: d3:5c:2f:97:fd:12:b7:b9:b6:45:e7:de:f5:9a:d0:e6:91:a0: 3f:d7:33:cd:da:f8:b2:06:2d:58:e3:89:f8:c3:59:da:a7:04: cf:8a:59:a0:26:66:60:b5:26:69:48:a0:d7:16:e0:ab:d6:00: df:ad:12:de:7e:8b:19:70:88:07:d4:94:01:e2:d2:8a:20:46: 16:58:52:0b:78:d9:21:fc:1f:b2:fa:b6:ad:34:20:2c:ca:72: ff:fc:09:0a:00:74:28:72:30:97:fb:29:60:1b:0c:ca:b4:81: 0c:5f:26:bb:c9:55:17:5a:cd:9a:1d:39:68:87:af:4f:97:f8: aa:d8:5a:0d:e0:50:15:77:1b:92:c9:e0:fa:fb:e5:65:2f:20: 2f:52:a5:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ5DO19tM25+kEVgL44m/28MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjUwNDI3MjEwMDEyWhcNMjUwNDI4MjEwMDEyWjAzMTEwLwYDVQQD EyhlYTllOThjYTYxY2Q4YTlhOThmZjY0YjljZDYzZDk3NDAxY2I5NmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU3YWR8KDNSO4+XakwELO4V1Otz7 qu47tQaIWuUun2ZZfiPIkLVQqABRBtyFpOlRNQ+nT3JnOpE5qr4T85HTXpsw5hnq Svg1CHs7uuPgDn3VrNZI1rgA18m4GuS87JgSljwRCtQ/IsZHS7DsTPa2CWkwq1ti fkMG5+J7nTy6da6YDtXkKkxbiwfSOWkyCoPuRIfD/4606oEo8oqmZNtHIoTQVoQw wleROlfSjDNXtaQl7K0N3TlZVlMIpD1lnK9V2DIx3TT7mBuh2X0LChFlbZqC1t/Z PWqK4xrJ9WXtYg3iFyJgORjFo/sgNLrrNqU5aZ64TP/3Rk3ixNpSZlQEkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqemMphzYqamP9kuc1j2XQBy5b9MB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKJAhMcz t/eDLIjPkc+4QOicIlsm9a8KdWTR4w5B7qKr6ESc5lfAqFkt+R2QZuUPUgTq5aoV 7Euf1wEB7WHGCBBvrtmXNooxkzcvzVtUa8+E6GaAbPagGZRwIqah17iv8LqfoUjs g3+Fdu+501wvl/0St7m2Refe9ZrQ5pGgP9czzdr4sgYtWOOJ+MNZ2qcEz4pZoCZm YLUmaUig1xbgq9YA360S3n6LGXCIB9SUAeLSiiBGFlhSC3jZIfwfsvq2rTQgLMpy //wJCgB0KHIwl/spYBsMyrSBDF8mu8lVF1rNmh05aIevT5f4qthaDeBQFXcbksng +vvlZS8gL1KlhA== -----END CERTIFICATE-----Generated at Mon Apr 28 07:36:23 2025 by rpki-client