$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft File: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft (raw, json) Hash identifier: KlI6CvVcHFOYkmLK+51MWbWKOURy1hB54LTrVhsgqgQ= Subject key identifier: 79:96:F3:2C:DC:B9:C8:8E:73:66:82:2C:EE:7E:CA:3F:AC:05:9D:E8 Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea Certificate serial: 0196808FCC6D1EE19B20E1807AE029B5D5EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft Manifest number: 1521 Signing time: Tue 29 Apr 2025 08:00:29 +0000 Manifest this update: Tue 29 Apr 2025 08:00:29 +0000 Manifest next update: Wed 30 Apr 2025 08:00:29 +0000 Files and hashes: 1: 0GQGYjFgeoe90j-QzubD6mrcJkk.roa (hash: cASoDwOCqQQo3HckgWr9Fm6RrFpE5g5vgsJJsPTF9PI=) 2: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl (hash: riqMWOXxMXArCXNt4sqYDXAgD0SMxup0r7NPthPa0aA=) 3: 5YsWNoJ_eVXnLQUmvRfRv35-ITo.roa (hash: +Wt4CaG2KBebUdy7DTYqNM4+qA+qSGjkIL8Uj7jYbKY=) 4: LkZMbp2aUa0yXxOxLWaqN5AS52o.roa (hash: o8vH7FtM5V/qTZoiT6aAxSseM4Yg902eHtLadTVcAzY=) 5: N5NvCVL9qwjYZWiGAgoiE3kpDsM.roa (hash: /XNE593x81Nv5d88KdthJ5cf11PusTGT9f+nPTiwsmQ=) 6: O2VeVpIY0NqqJs4saKQoTuFoA6I.roa (hash: eCU07QC/oP0X/AS+uAyqKGOShTlcgaS/MZcj5EXt1FQ=) 7: PmeI5MIhQ4wxSrPUPOIOQ9Ubvnk.roa (hash: W6jZRl9BSEjjkm486LLqed9ed+xxHLYMlqc3sRgCALQ=) 8: QJVbOLfuQimwnt2csTkB91gXkec.roa (hash: GkGvp1WsMKLXrnxKgO0ikQrOP7Rki9hxYkm+S7LbAS8=) 9: RTN7ctApkTYd2Og2JaBeJOrSDKw.roa (hash: PECp9vVhGIOoiVTK3bRnzPU+NWZIUXb57SnIExeKGko=) 10: ZFUmkI5Si20CHGaDBK-ZoNXIfEk.roa (hash: 4y56G8cf16t1jWavTqKOCy9B29Mw+jTHj1dGwOZOhA0=) 11: _28X1lMsvBxqScVY5HiVqqNdE4o.roa (hash: 1zLcZ1CwGAvvzQsYCPPfZSZE3xWE9xsMdQ0aDUZbc8g=) 12: cdmQ2_ODlCp8h7SlTaorYnidAuk.roa (hash: +IC730dtvUCM5X3ceJwMJA3N6qWFyePDz8c3aKLMcqE=) 13: gWN0YMhA97UPOTqYvOMM9zaPWRs.roa (hash: Hm5lPWw7bUXDdTOs1pfp1fHbk/bNa8PnxIySi1lfXPs=) 14: iY_9p9rfYCrq76s6mH8iLmqZ8G4.roa (hash: WZh8CFIJ4XBLsbT8NvOnixg7Xgopb12vdZ21KTVanqQ=) 15: jTMPeohgGOxcMFZVU8z0ehshce0.roa (hash: SyL8iMLhykQz8ANtvdKfK1EugykUZcu24olhfWQesXo=) 16: n7V7OXaDS-XvJc4UQc5MPqTFYmY.roa (hash: 0QBDYhcEfGTqjEJgSs+TOY3XMDZsBCVa117v4v2Y4iI=) 17: uEsfVd8NIzUxBoG774jECjWdTsY.roa (hash: lAehouSKcnB2amZVq4TUPtcrTxH5jfwC6dVK0vZrRgI=) 18: vlDfC43FHcefunPJngYR1WAZ7rA.roa (hash: az+OZ3tRKu13gj7aBFAWboRwowS41+dYdps7euT4uWg=) 19: w_D8ebnb3eRC6CWTSI4QXg7yIcA.roa (hash: cKSU2IKqf8A5+vV8g8UVVjc9ie4gyRlLREV+QT0zjV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:80:8f:cc:6d:1e:e1:9b:20:e1:80:7a:e0:29:b5:d5:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea Validity Not Before: Apr 29 08:00:29 2025 GMT Not After : Apr 30 08:00:29 2025 GMT Subject: CN=7996f32cdcb9c88e7366822cee7eca3fac059de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b0:4a:67:23:de:ca:aa:40:eb:43:35:24:24: dd:7f:00:63:9a:74:ef:99:a5:d2:4e:90:e5:2b:64: a6:9f:00:43:53:13:19:38:ee:b7:a8:a8:74:46:5b: d1:3c:b0:b6:f7:23:3f:a8:bc:d0:36:df:26:84:db: 4b:80:32:e3:a5:bb:3c:16:3c:86:9b:10:b5:45:f4: 5c:d0:7c:12:41:d5:5b:be:65:ff:e5:76:8f:b0:d3: 65:94:44:9b:f8:07:57:44:6d:95:d8:15:63:06:49: b4:2e:3a:ab:ae:8b:ab:fb:01:01:07:85:33:57:c2: 62:69:e0:88:58:cd:24:c6:ea:ba:a3:c7:a9:06:9e: cf:f1:b0:2c:57:8e:24:2f:56:e7:11:74:ae:5c:72: 6b:50:78:d4:a8:f7:c9:ab:91:9e:b9:dd:00:a3:d4: ae:0c:f6:60:00:a4:e6:1b:c9:ca:29:bc:56:25:08: 70:e0:d6:0e:fc:50:ce:39:4f:d7:4e:62:2e:c4:03: 6b:61:45:f8:f3:62:2f:3c:ac:dc:30:d9:9a:7e:f9: 83:51:27:9e:a0:39:50:cf:5b:6d:de:d4:7f:7c:90: cc:37:53:a4:f6:99:f8:cc:65:23:fa:ba:03:df:40: 77:bb:7b:f0:20:e7:0e:e4:ce:d2:d5:33:d0:10:b9: c4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:96:F3:2C:DC:B9:C8:8E:73:66:82:2C:EE:7E:CA:3F:AC:05:9D:E8 X509v3 Authority Key Identifier: keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:bb:b8:ce:ca:49:47:30:53:b4:64:76:fa:d4:49:b2:08:9f: 0a:e3:79:ad:10:b2:50:19:1a:10:05:9b:8f:c0:17:77:3b:a9: 6e:58:12:0f:2b:95:d0:87:3f:b3:ad:1e:a0:7b:5a:01:17:f3: 96:bc:7d:46:55:84:7a:08:26:fa:a3:d6:8e:c4:82:d1:22:46: 38:09:18:52:31:5d:a7:ac:2a:2d:a4:84:ee:5b:9d:eb:0e:e5: 21:b1:41:29:58:ac:f2:c5:38:4a:22:c2:63:08:be:42:a5:12: 64:48:a8:f5:34:5b:5f:7c:bc:84:e3:80:57:5d:f1:fc:84:ce: 87:4f:db:d6:47:52:8a:e7:c9:49:00:e3:91:3d:ea:e5:58:44: f9:d7:54:5a:c1:92:98:bb:a3:59:04:01:91:4e:da:95:a6:bd: 32:8c:ef:42:f6:d7:5e:05:b0:bd:4e:8f:57:83:51:90:ba:98: 40:b0:14:87:7d:4a:9c:41:20:08:2c:0f:36:bb:4f:d3:2b:58: 55:02:8a:97:a3:6b:f6:5c:57:10:5c:32:da:b4:ee:8b:a1:0e: fd:26:dc:70:7c:64:92:d1:72:bf:fd:45:32:cd:d1:c1:5f:92: 17:75:dc:d0:b0:1e:8a:de:aa:bd:f2:1d:b6:77:3a:95:57:2b: 6a:e8:53:82 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZaAj8xtHuGbIOGAeuAptdXsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiOTg3MjQ0NjExYjUyMzA1MzY3NDRiNmE4OWYwNDRmMzJm NDYyZWEwHhcNMjUwNDI5MDgwMDI5WhcNMjUwNDMwMDgwMDI5WjAzMTEwLwYDVQQD Eyg3OTk2ZjMyY2RjYjljODhlNzM2NjgyMmNlZTdlY2EzZmFjMDU5ZGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7BKZyPeyqpA60M1JCTdfwBjmnTv maXSTpDlK2SmnwBDUxMZOO63qKh0RlvRPLC29yM/qLzQNt8mhNtLgDLjpbs8FjyG mxC1RfRc0HwSQdVbvmX/5XaPsNNllESb+AdXRG2V2BVjBkm0Ljqrrour+wEBB4Uz V8JiaeCIWM0kxuq6o8epBp7P8bAsV44kL1bnEXSuXHJrUHjUqPfJq5Geud0Ao9Su DPZgAKTmG8nKKbxWJQhw4NYO/FDOOU/XTmIuxANrYUX482IvPKzcMNmafvmDUSee oDlQz1tt3tR/fJDMN1Ok9pn4zGUj+roD30B3u3vwIOcO5M7S1TPQELnErQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHmW8yzcuciOc2aCLO5+yj+sBZ3oMB8GA1UdIwQY MBaAFPuYckRhG1IwU2dEtqifBE8y9GLqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS01aHlSR0ViVWpCVFowUzJxSjhFVHpMMFl1by5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAw LWJlNTgzMmQ1ZjdhYS8xLzEtNWh5UkdFYlVqQlRaMFMycUo4RVR6TDBZdW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ0LzMxOWQ3Yy03ZTc2LTQzMDgtYmMwMC1iZTU4MzJkNWY3 YWEvMS8xLTVoeVJHRWJVakJUWjBTMnFKOEVUekwwWXVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7u4 zspJRzBTtGR2+tRJsgifCuN5rRCyUBkaEAWbj8AXdzupblgSDyuV0Ic/s60eoHta ARfzlrx9RlWEeggm+qPWjsSC0SJGOAkYUjFdp6wqLaSE7lud6w7lIbFBKVis8sU4 SiLCYwi+QqUSZEio9TRbX3y8hOOAV13x/ITOh0/b1kdSiufJSQDjkT3q5VhE+ddU WsGSmLujWQQBkU7alaa9MozvQvbXXgWwvU6PV4NRkLqYQLAUh31KnEEgCCwPNrtP 0ytYVQKKl6Nr9lxXEFwy2rTui6EO/SbccHxkktFyv/1FMs3RwV+SF3Xc0LAeit6q vfIdtnc6lVcrauhTgg== -----END CERTIFICATE-----Generated at Tue Apr 29 13:41:21 2025 by rpki-client