$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft File: VbryaWdRCzxS5G0dxZOWfN8p-ck.mft (raw, json) Hash identifier: fXVvGpMlEl/ljniJoBNXpjUFoX1sFSQ8hU/52uNn6eU= Subject key identifier: A6:8B:7C:BD:65:E9:C3:06:21:F4:D1:FB:84:ED:D9:DF:F1:9E:60:47 Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 019673E7098CDF5D1E03E705E53BBAC62663 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft Manifest number: F4 Signing time: Sat 26 Apr 2025 21:00:43 +0000 Manifest this update: Sat 26 Apr 2025 21:00:43 +0000 Manifest next update: Sun 27 Apr 2025 21:00:43 +0000 Files and hashes: 1: 4XDgKO79XmXOb4-G5xTONVrvgW0.roa (hash: tGjUxZ/kXi8ihM39nHigT0xXtfrY2RyKK9rqdogl5Ys=) 2: 5f-dp7zmm1xpqS35G4SxPyQsKzU.roa (hash: /VV17LXXYckmyZ3LkMVCcWjEWZ1t6Ui72lZHti3idJI=) 3: 6Kmf8SLIDhtvY0o72b-e_ez1gvA.roa (hash: j3CAl37tBzlpnx387FdZVM64alBCKbR8QlCCeFxtnL8=) 4: AhuxnBjbqBUXwIP5b21tGbis2HQ.roa (hash: tJKtPN8U0xHa3FJB8TQyW4B4Oecnb0IEKnN/jQHiCqc=) 5: BP6xc-GRow7em9LhzOxLgjKVYus.roa (hash: Hcth0RRyL3wBd/0xMlJH2ABMLkNBsFaEBwo7Oa2dz60=) 6: BmRc3vRXaWW56t-nNSSPweNCiMs.roa (hash: 2GH6+StvR4rGLXfNXO4fC1fEOLCOQlhsSaL6sBf6AhI=) 7: E_5JhM-xpqv89i8OslGQvDkCWqw.roa (hash: HFIiQD19t++eqD0i+eSTfWrtLIMDnOjLs8bKyGFVyww=) 8: FM5BR3fy8jLa_aS_duxaLPD1zS0.roa (hash: E3RNJGjOtbojon2Sppjcze5zlMUeT+F/SdNiHT4AD/A=) 9: N1nl601Hr6wJILJL_hgwD9Q0g2I.roa (hash: pIuSTy4n0CatQtYZ3CMUWwjxxWlZD8T/OaYfEUfURDo=) 10: UpdorckKAviPtXnc3P5_vHsstcQ.roa (hash: ooJMnGz+B+dPJaGV/iALnmX71ASJ7bqGcQilmTah56E=) 11: VbryaWdRCzxS5G0dxZOWfN8p-ck.crl (hash: q0zt35DsGlJyuuXjaVCRPdQxqb8EIFh2R/E/ghilwXA=) 12: adfSrjz8zMQzfk6RQgh0psxTHR0.roa (hash: m6kWVuP71bRqpA1w6ImUyPJpL3NVhQk9W2DY/Q8Wxoc=) 13: doYvufKMi4jm03VH6RLq3eZewAA.roa (hash: EhJBbYf1isS2uAf8HQUnHDQB/+isJncCcXILIMluQQ4=) 14: eJAfN54IVDM9zxmQ8ilO1hvAK9Y.roa (hash: vXrGP/zoPi072poUBvOCivcX7v6J3n6jY3oSSpibSQ0=) 15: jrgMSskhT0megkHs6B0DtWXkMyw.roa (hash: KC6QUuGpGxoExz21SCbzEH1LAyNK0e/ekmIFKAWbsMk=) 16: l7z9gRq1cnQs_wN6y_k94oBYE1w.roa (hash: cA4fD7YFoUALJX+r2CwONaKqktMmrC06jt+qqYXcbRM=) 17: ofbszTn0i-YSIBGbdtRQO-HAngw.roa (hash: +Yij66+the4UDsOblrHzuVkVOxLhBPgs2jttAsdE6SE=) 18: pHZpiMb5Vq0up-6CeO0nMIW4Mwo.roa (hash: ErsQAE7yFJ1utzq5R5esTRBd9mERh0Hyf1eb2KuKw/U=) 19: zw-kUDcbEKKAoEKFIvfrhCjyI8I.roa (hash: P5pYbU9sXA2DQAtR7bal+wc0XMJxzotl3qbzVMc73xU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 17:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:73:e7:09:8c:df:5d:1e:03:e7:05:e5:3b:ba:c6:26:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: Apr 26 21:00:43 2025 GMT Not After : Apr 27 21:00:43 2025 GMT Subject: CN=a68b7cbd65e9c30621f4d1fb84edd9dff19e6047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8c:4c:8e:69:33:62:04:95:e5:58:36:8c:8d: 34:ad:37:f4:89:b3:03:0e:d6:74:b7:44:73:6e:3e: 8e:72:5e:90:7e:46:e0:c8:34:b0:85:4a:8a:5f:f9: 6e:ef:06:1c:c6:ae:12:1a:3e:64:e0:3b:09:fa:e0: f4:98:af:a5:6f:89:df:1e:54:b0:42:d2:8b:a8:aa: 8f:03:ee:fd:a8:9b:a9:55:81:9a:30:a5:0c:19:64: 2f:7e:a1:60:3d:4f:ca:f5:89:b7:ed:2a:42:32:3f: 0d:92:f8:58:00:76:c8:3e:62:c9:b2:c3:6d:64:78: 86:e4:21:4b:a1:9f:eb:34:fb:83:f8:32:24:16:05: c1:b1:a8:41:a6:23:db:7e:0f:2c:62:4a:bc:e9:3a: f1:6e:45:7b:01:84:91:cf:83:22:0c:49:29:07:f3: ec:51:a5:00:3b:b3:76:9d:69:67:8e:70:60:2a:9f: 69:48:4f:be:c4:15:45:43:a5:71:33:ff:8f:3d:21: 77:0e:34:cc:7b:32:c3:79:81:e1:a0:9d:cb:52:14: ba:04:66:4e:33:37:b1:21:1c:0f:31:ae:34:bb:c9: 92:07:23:69:45:b9:d9:aa:94:2b:36:db:08:12:f6: 20:7e:ce:ce:84:3a:6c:48:e8:72:2a:fe:9e:4a:02: 52:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:8B:7C:BD:65:E9:C3:06:21:F4:D1:FB:84:ED:D9:DF:F1:9E:60:47 X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:7f:b0:d5:63:c9:60:1e:99:c6:ab:50:fe:78:95:0e:7d:9e: 11:b5:31:98:bf:38:0f:a0:3d:12:0a:6a:40:20:45:7a:18:69: fd:40:b4:fd:e7:66:88:4a:9a:d4:9f:46:84:32:12:e3:6a:01: f2:fc:7b:e3:65:d9:fe:db:52:cd:f4:79:e5:15:a7:9c:52:69: a1:f6:4e:11:05:27:12:ae:11:bc:90:cd:e9:d0:f0:0d:b2:63: af:76:2e:d8:b1:7a:38:17:c3:23:6a:0d:66:cc:bb:d4:36:e6: a7:e7:3e:da:a7:2b:18:ed:ba:b7:fb:70:82:19:fd:df:20:76: 62:4e:dd:4c:4e:40:95:57:af:40:c1:27:13:53:7f:0d:ae:d4: 3f:83:f3:59:0e:ce:ad:f1:d8:cd:ea:e1:63:bd:4e:f7:81:27: 57:f8:a2:c9:f0:1d:eb:fa:fb:93:2a:3f:ec:9e:c3:bb:e0:30: 1c:14:6b:c5:b6:a7:2d:e7:18:1a:c5:fd:04:78:70:ae:15:d0: 44:d7:08:bb:62:3a:cc:62:aa:1a:af:58:bc:ea:95:f1:71:cd: e4:d9:85:f0:62:a5:f3:c1:47:5f:de:b9:a2:a9:9f:8c:a1:8d: 1a:0f:a2:98:4b:40:f1:1e:ce:18:c6:e3:05:f7:3d:d1:8e:2f: ba:66:ab:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZz5wmM310eA+cF5Tu6xiZjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjUwNDI2MjEwMDQzWhcNMjUwNDI3MjEwMDQzWjAzMTEwLwYDVQQD EyhhNjhiN2NiZDY1ZTljMzA2MjFmNGQxZmI4NGVkZDlkZmYxOWU2MDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoxMjmkzYgSV5Vg2jI00rTf0ibMD DtZ0t0Rzbj6Ocl6QfkbgyDSwhUqKX/lu7wYcxq4SGj5k4DsJ+uD0mK+lb4nfHlSw QtKLqKqPA+79qJupVYGaMKUMGWQvfqFgPU/K9Ym37SpCMj8NkvhYAHbIPmLJssNt ZHiG5CFLoZ/rNPuD+DIkFgXBsahBpiPbfg8sYkq86TrxbkV7AYSRz4MiDEkpB/Ps UaUAO7N2nWlnjnBgKp9pSE++xBVFQ6VxM/+PPSF3DjTMezLDeYHhoJ3LUhS6BGZO MzexIRwPMa40u8mSByNpRbnZqpQrNtsIEvYgfs7OhDpsSOhyKv6eSgJShQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKaLfL1l6cMGIfTR+4Tt2d/xnmBHMB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANH+w1WPJ YB6ZxqtQ/niVDn2eEbUxmL84D6A9EgpqQCBFehhp/UC0/edmiEqa1J9GhDIS42oB 8vx742XZ/ttSzfR55RWnnFJpofZOEQUnEq4RvJDN6dDwDbJjr3Yu2LF6OBfDI2oN Zsy71Dbmp+c+2qcrGO26t/twghn93yB2Yk7dTE5AlVevQMEnE1N/Da7UP4PzWQ7O rfHYzerhY71O94EnV/iiyfAd6/r7kyo/7J7Du+AwHBRrxbanLecYGsX9BHhwrhXQ RNcIu2I6zGKqGq9YvOqV8XHN5NmF8GKl88FHX965oqmfjKGNGg+imEtA8R7OGMbj Bfc90Y4vumarcQ== -----END CERTIFICATE-----Generated at Sun Apr 27 03:12:19 2025 by rpki-client