$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft File: dqdYJumRIlpCn_ih5__cgEZkIN8.mft (raw, json) Hash identifier: miPWOmxiOTFzSERu/hTsD6CGMhIUZyJSo3gnhy/5/lw= Subject key identifier: D6:3D:2A:D6:AB:AC:3E:7E:A4:32:6E:75:C0:C0:C4:C9:F9:D7:52:39 Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df Certificate serial: 019671C2099CBF0A5F578A895175F9EC65D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft Manifest number: 1521 Signing time: Sat 26 Apr 2025 11:01:03 +0000 Manifest this update: Sat 26 Apr 2025 11:01:03 +0000 Manifest next update: Sun 27 Apr 2025 11:01:03 +0000 Files and hashes: 1: 0GRCDt4fJ388QfTkHCpESDtsT30.roa (hash: k9OOgOfGm6/D5FgP/oCwjZmCMN3rSoxJmPb/amgvunU=) 2: 1-yKYajfg5LY4mvNwPfafD3WCloA.roa (hash: WHC+36zJ+PfduDAkHrQdjdBbj6qnsfp62GV4AEEhmh8=) 3: 16QrQeCpwuqAfGGNMUzWS0WBV8Y.roa (hash: bmMldajlx/sTBR7HO2a2fTU2N475J5MRbFTSSzzaMIE=) 4: 4EfNGR4wiWbi_y1y433ICACWCZ0.roa (hash: W3KUBln3jDDd0cmmpR54v75Ll2wQ3RHqXSQ0s5O+eAU=) 5: 6yOls-b1_zSEPoNekFa6o4CZVU8.roa (hash: 4upnvyLgri06Nt5KSgO8Uwq/0K4QFNyV2w+ngXB4/18=) 6: 8np9ht0G3b67t2N9j69khCA5swc.roa (hash: s5WWOQNVlSSecjPvMShY+13EouocPqyy6TUkRGLT9Sw=) 7: DYMRxMEMoWV3Z5tMWRgW1jHqK9s.roa (hash: 6wMdwoy8UyJzHKKarNEHW2Cdeen4yoziiPrTe9YFHSg=) 8: Dpy95jXaeVWXPozFztldShHCRU4.roa (hash: /YGR1d8dV4jSlropxf6JRB0rYbUE70tJU0k00P3NxfE=) 9: FguRz0zA5etvzxWwMxGIJgd6k9Q.roa (hash: bUHFCLBTCucLtw2+JrZ57cEqNMKllYDmKc3mR95hRPw=) 10: L2UCeVHHcg9euQRtLcEzhApV2UE.roa (hash: awT5trUmAy4FPSzNkgCSgldj93M9lPrOlgd5pOswERE=) 11: M66I0UzjQBS9vnsa6hJXUcQSBYc.roa (hash: V+buEBexkfH/z8IfHQHVN3d+jviM7gfofPkFusouHl4=) 12: Orn9mMECvNnMxcocGzjxOdoRHk0.roa (hash: aAMLejN67KDw/WEq6MTlllANPts4owmBi6ah/2ILaOs=) 13: WEP8t9A44--cEjL5pRqrcK4NrA0.roa (hash: elcme8pyEkMhDdeVhgtzdCn+oqpKZYwu+OBHtYqbN08=) 14: WH2mqCoP_fWwSJcPuGUkRGobwNc.roa (hash: 7ARLGzAANjQVfOe30KclN1L6S5EbZnzPNgQQS4I4lwo=) 15: X8C31I22e7AIAIjXdr_l8xIku6c.roa (hash: 7Qhdi1NeFgvJPaxWBB0us3PX5KoyYrtl9JfPmMsmHRs=) 16: aKC4Ve_rwXPA5F4UwLOqVSzUoxQ.roa (hash: C2m1c3bcRtr4/LzoB1kvIKIl5IupGv3jDqJQPFpHE+Y=) 17: dqdYJumRIlpCn_ih5__cgEZkIN8.crl (hash: fnswqx43ogKR2wW3sNqLBGMygyO4Co/8PL9uFpgFSh8=) 18: itJrIiDbZUHX0hMzNvHagOk0kkQ.roa (hash: 93vrSgc7l73uP0vt9qb0d56TAGfuxzEHnQxV4M3Vt/w=) 19: nA8ldX9v5Ip91riXYh1Is3JlGWU.roa (hash: LGoPjUjc03K0F3TRSud6cQW/fDxbqmiVQ8elBoGls6M=) 20: nheDIdc7Ex5DQQ3yUWyXEO40Wag.roa (hash: QW76PsmZ19rGr3AHGvysCP+0ICfRHV3icfaUxRkR4IA=) 21: tjgASAOzma6f2Z7RoOryTeTZY9s.roa (hash: DpWY737dSZuYYOG9ZIqDhXCNF5lWUkY9/w4EmAF3fpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:71:c2:09:9c:bf:0a:5f:57:8a:89:51:75:f9:ec:65:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df Validity Not Before: Apr 26 11:01:03 2025 GMT Not After : Apr 27 11:01:03 2025 GMT Subject: CN=d63d2ad6abac3e7ea4326e75c0c0c4c9f9d75239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d1:d2:b5:57:23:24:fa:74:80:e5:37:d7:a9: a5:b9:58:f2:7e:73:07:17:6c:12:67:30:08:c2:de: 7f:cb:48:93:10:fe:47:33:0e:aa:b5:0b:0d:4a:c9: 96:bf:cb:98:11:88:aa:49:c5:db:a6:43:41:e3:a9: 34:7b:be:ac:6d:8c:11:65:65:f7:cd:35:7e:a4:d7: 22:a0:96:90:c1:df:a1:67:30:3a:e9:ad:bb:aa:56: 4f:fc:da:1e:c5:5d:56:29:bd:47:2f:d5:92:44:dc: 00:54:41:4c:d0:cf:62:6a:72:4d:84:07:f5:12:b7: c8:c6:e1:5e:65:b8:f9:16:16:2f:bd:ab:d3:31:3c: b4:c8:4c:ec:de:19:42:44:48:8b:46:6e:34:b3:db: 61:b3:ab:5a:69:be:21:4a:6c:a8:5b:3e:1a:07:8b: 38:0a:08:86:2d:6e:b1:98:4c:4d:74:ee:a9:b0:11: 5c:4d:a9:79:ee:07:95:13:d3:cc:98:74:fa:66:22: 27:eb:85:99:4c:a8:53:6b:2d:af:a9:f6:36:98:b9: 9b:ba:48:fe:1a:8b:c5:41:6f:be:17:02:e1:0b:b6: e5:67:26:31:77:5a:23:5a:16:c3:f0:e6:03:79:ce: bd:4e:ce:b9:c2:74:a5:b1:a5:2e:9d:db:a3:3b:6a: be:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:3D:2A:D6:AB:AC:3E:7E:A4:32:6E:75:C0:C0:C4:C9:F9:D7:52:39 X509v3 Authority Key Identifier: keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:69:86:40:4f:99:ef:7c:f9:be:01:24:dd:20:83:a7:be:1c: b2:55:d1:a1:2e:27:34:0e:ba:68:8a:ac:61:fc:d5:0f:fa:50: af:4d:19:6c:a5:64:48:50:88:64:82:e0:18:0c:f1:43:f3:06: 38:83:84:8a:54:84:17:54:3e:b7:27:85:28:a3:4d:d1:4c:63: b8:41:bb:ab:9a:aa:76:c0:96:96:35:03:a1:32:51:03:45:a9: 98:cc:91:aa:d3:ef:63:cf:f6:16:26:9b:c7:d0:b2:dd:05:bd: 7f:d4:60:d3:65:27:92:4a:26:49:9b:31:7c:1b:72:6b:e9:7f: 18:16:47:24:21:8a:7f:b8:7b:e7:c7:d7:27:7f:1d:e5:b5:80: a9:b5:05:bf:5f:a3:9f:6a:2f:07:01:54:03:98:fa:4a:42:f3: 90:8a:b2:43:bb:69:fd:9e:d9:3d:1c:76:2a:f8:e6:f4:7d:86: af:e7:ab:9c:4e:0d:38:db:76:23:98:c8:c3:bd:f5:64:47:50: 4a:92:5b:ee:97:81:c1:60:f9:89:0b:47:5b:b0:74:1d:e8:de: d5:94:fd:fe:0a:25:0a:04:21:de:cf:6f:25:fe:22:8c:d9:e3: 68:3a:3a:d2:ee:b1:ae:09:9c:93:22:12:99:0e:15:99:7c:f3: b3:82:b0:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZxwgmcvwpfV4qJUXX57GXVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YTc1ODI2ZTk5MTIyNWE0MjlmZjhhMWU3ZmZkYzgwNDY2 NDIwZGYwHhcNMjUwNDI2MTEwMTAzWhcNMjUwNDI3MTEwMTAzWjAzMTEwLwYDVQQD EyhkNjNkMmFkNmFiYWMzZTdlYTQzMjZlNzVjMGMwYzRjOWY5ZDc1MjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidHStVcjJPp0gOU316mluVjyfnMH F2wSZzAIwt5/y0iTEP5HMw6qtQsNSsmWv8uYEYiqScXbpkNB46k0e76sbYwRZWX3 zTV+pNcioJaQwd+hZzA66a27qlZP/NoexV1WKb1HL9WSRNwAVEFM0M9ianJNhAf1 ErfIxuFeZbj5FhYvvavTMTy0yEzs3hlCREiLRm40s9ths6taab4hSmyoWz4aB4s4 CgiGLW6xmExNdO6psBFcTal57geVE9PMmHT6ZiIn64WZTKhTay2vqfY2mLmbukj+ GovFQW++FwLhC7blZyYxd1ojWhbD8OYDec69Ts65wnSlsaUundujO2q+qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNY9KtarrD5+pDJudcDAxMn511I5MB8GA1UdIwQY MBaAFHanWCbpkSJaQp/4oef/3IBGZCDfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xZDMzY2EtOGQxYy00OWMwLWJlOTct YWQ4ZmJlYWE4ZGQ5LzEvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8xZDMzY2EtOGQxYy00OWMwLWJlOTctYWQ4ZmJlYWE4ZGQ5 LzEvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmGmGQE+Z 73z5vgEk3SCDp74cslXRoS4nNA66aIqsYfzVD/pQr00ZbKVkSFCIZILgGAzxQ/MG OIOEilSEF1Q+tyeFKKNN0UxjuEG7q5qqdsCWljUDoTJRA0WpmMyRqtPvY8/2Fiab x9Cy3QW9f9Rg02UnkkomSZsxfBtya+l/GBZHJCGKf7h758fXJ38d5bWAqbUFv1+j n2ovBwFUA5j6SkLzkIqyQ7tp/Z7ZPRx2Kvjm9H2Gr+ernE4NONt2I5jIw731ZEdQ SpJb7peBwWD5iQtHW7B0Heje1ZT9/golCgQh3s9vJf4ijNnjaDo60u6xrgmckyIS mQ4VmXzzs4KwrQ== -----END CERTIFICATE-----Generated at Sat Apr 26 21:06:24 2025 by rpki-client