$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft File: zNdhWb_Z4zdSPukw898RHWuucwY.mft (raw, json) Hash identifier: /ZHK3bjaMujytMMZweYV5Gv7AArNjVNB5YBk25P7nMc= Subject key identifier: 00:CE:EF:92:CC:91:62:70:D9:8D:E9:86:55:07:57:C4:67:68:12:8E Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06 Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306 Certificate serial: 019677562897EF2F46828F31EF5F1FE5CF2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft Manifest number: 1511 Signing time: Sun 27 Apr 2025 13:00:56 +0000 Manifest this update: Sun 27 Apr 2025 13:00:56 +0000 Manifest next update: Mon 28 Apr 2025 13:00:56 +0000 Files and hashes: 1: 1--eafx9NP-kEA5ohaXUtt-Yk1Ck.roa (hash: yPvV8tZDeTzipS9nbm/myDY2hHI1uGeW+fkO/Ib9714=) 2: EHa5LRqYKQEP9dDWzSSuUw_ODMI.roa (hash: X93kxWz8I79L/YC44aaFE4KBmj3MgYuQCQWdh5JJRlU=) 3: GgcXjbFf8mlEuNVIAcHRErlG0DE.roa (hash: aU3/cIt29ulG37q/HnxD7KuB42acmRwvl4Q/yo0oLB4=) 4: HZHU7uNC18H1AiCx35Xk22FpOrU.roa (hash: uDPXdRRSpniPWDBDJpriTbwY3qugBu3+G959rzyvi4A=) 5: Ii99VBFRvfe6FkJM3eEVNVCel3Y.roa (hash: FSVc/S0WQeqtLnqBGn/Yt92ELKwsfGtg1h8aCQ4iu0g=) 6: JlVChhx5w07YmWd1S055Y6qWUPI.roa (hash: AAEqAdelZUxTW9gz6RGKSDhVYPfX12C8xhzyaBP5OQ8=) 7: Pp7lyfLi6Lq2OtSc1xsQ23XWPpY.roa (hash: 4Af36PXDN9h4nVNJg+AUmHgAlVjrGGi1+YXnj9QtxAk=) 8: QLs4MIyOkAWFAecUJKLtuPT3DAQ.roa (hash: 6RF7rF1or+rlfQcWUqqV0OVt2UQC1livPsP+kAkJD8U=) 9: QNMZFgzc1IGuipObCo1W0F0a3KI.roa (hash: wspjeJtpxVccGs7TUYeaDurUBNURQ6SaxH86WDgsNpw=) 10: R7bu8qG1cHrF1V4napoZJ_0ac8k.roa (hash: 8pYmbeMeyeatySY+kjjQRXHpXEhr/sxXhbrbgg45kZA=) 11: RK_-KObVrFqMwWpz_LD5ef7FHWs.roa (hash: bmPHbTt3nDXj4QFRJ1Kncj6MxmTt6z/dMwbg+mB+vFw=) 12: TiK2reN3wYrWPNFksJXDXKnEE6w.roa (hash: 7BbC3Cl1PCraVUL36uJLoyKVmcRHTcyEGjIeCZGKjZo=) 13: VLHCV6lr7BNgR2Fd1tKMBJvuTRQ.roa (hash: 0Btvt5ZHp2+JecRDRpyauwV1daoZIgA2l6uCdIeBx0Q=) 14: WDj-WX2TFdm1vGzea5zwWAKnmXg.roa (hash: +iMwOn3eQVj68GFHeC3/38BqQPjbYorhASbLudYfkZc=) 15: YyBxeqrqZnbMVWvNPGuJEhSJ6tc.roa (hash: +a+wpfnGbFw1MMOx7iCPa6kL+tOt/k8ymgsbVMZjRJg=) 16: ZYGYeQceaN7I_pfDtcAk40ZEq0M.roa (hash: OHgyaUYp8BdjJtUniornpY5cjOGkXbitG3jQOG7El8U=) 17: _8sr8aIwUZsEMoCeASgsdp-XKkc.roa (hash: 8xLJinv75Qe3kL2qr+hxBWBJs6ycaLqXPgI4od1LSpE=) 18: aJC0yUkxlvM9RnP05jgyhL6Pd7s.roa (hash: +rnytwg9k8j3AteroTZGDkhSKj19xjyvaJoQbFN7G3M=) 19: il0Z-xW9MuWupg3xKoK8OOqM6vI.roa (hash: 568t2pWFvFlGkw3q0WeJ/X/pOg7idoqMsb9QqHlNyYU=) 20: jq7JjC5JOKczgNh0-VDgERIfMVc.roa (hash: qHhxF7rpHzpOHRvc61R6xhbjw9YekBuMSQGNdCoV4aI=) 21: jvEikcZJM5qpaNsK8tPGUjFP2do.roa (hash: iJUEXgdreyLiFDQJWmjKx7mfinwOmXASzQYJ3m5UoJg=) 22: zNdhWb_Z4zdSPukw898RHWuucwY.crl (hash: YpbhVGjBWoLCopOH8AN7C0QCYP6Oog6qOQh2Kl+WBQ8=) 23: zQ3J3SswfafdRGQOuAZuGfrXzlA.roa (hash: y9aWaj3laOTggPgltzWq1nDdG/wljodW6OXlN6AXxY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 07:29:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:77:56:28:97:ef:2f:46:82:8f:31:ef:5f:1f:e5:cf:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306 Validity Not Before: Apr 27 13:00:56 2025 GMT Not After : Apr 28 13:00:56 2025 GMT Subject: CN=00ceef92cc916270d98de986550757c46768128e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:87:9f:01:80:15:bb:8a:60:97:fa:52:bd:16: e0:f1:33:3e:ec:3a:31:7e:ba:9d:20:6f:e9:fd:5a: a4:e8:a8:24:79:33:71:b5:a5:2d:00:b9:11:e7:8e: b3:b9:4c:c5:a4:52:38:69:c9:ca:b8:79:13:a4:6b: 3f:10:a4:53:da:b5:84:71:df:1a:c0:fe:63:79:68: 1d:7e:0c:94:c2:c0:47:db:11:46:86:83:1d:99:80: e4:b6:28:87:83:95:45:fe:26:6d:5e:16:bb:d5:fc: 14:97:a7:54:e2:91:56:7e:b1:2d:8f:ee:74:e5:1a: 2d:8d:c0:e9:a0:99:94:89:0a:2f:4e:a0:fb:2d:d7: a1:89:da:96:90:db:e5:58:cd:b9:1d:4e:cb:05:1b: d9:f1:67:6b:ba:43:91:7f:30:fe:fb:af:cc:e4:e5: c6:c8:55:50:ca:d8:ce:4e:78:90:ef:e2:c4:ea:7a: c2:9d:a2:50:da:e6:0f:6c:58:ee:91:3c:c7:bc:3f: 48:58:de:f3:ee:bc:25:98:e2:d2:d4:31:25:a2:54: 6e:fe:f9:bc:d0:a3:52:23:1f:e0:7f:f7:13:6e:f5: fb:db:c5:12:c2:a8:76:c7:d7:dd:77:59:e0:99:55: 3f:06:ab:ac:70:06:07:95:d4:ee:18:73:a3:b3:f8: 48:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CE:EF:92:CC:91:62:70:D9:8D:E9:86:55:07:57:C4:67:68:12:8E X509v3 Authority Key Identifier: keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b9:7a:06:17:eb:3d:f5:9b:f3:9d:eb:79:1b:fe:50:a2:46: ee:bb:94:de:0e:e5:1a:fb:9b:cb:fb:cf:30:8a:8c:77:fd:dc: 38:3b:33:20:14:ff:76:9e:c8:61:3d:c6:25:d2:98:1b:5a:f5: 00:ba:fa:8a:19:66:f4:6e:5a:d7:a7:4c:2f:9a:dc:54:1a:df: 26:4b:2f:9d:4f:30:9c:8e:ec:16:53:05:d2:ec:1c:b9:89:47: 4f:4b:cb:6d:1e:be:4e:56:7d:05:15:62:04:f9:66:54:96:76: 30:58:23:e3:f3:bf:d6:9d:80:aa:a9:e8:f8:2e:de:48:ec:bf: 98:1d:b5:3f:f2:00:69:3f:c5:65:e1:b8:7d:89:e1:b6:50:1d: 26:c9:77:7e:ca:8f:80:8d:8f:b5:25:c7:77:32:d5:1c:23:a0: 1d:52:f6:f6:d4:cc:ea:2c:96:67:f4:95:6f:3b:7a:09:99:7b: 5e:07:0f:bb:76:3a:eb:b0:7c:b0:e3:b4:7a:a1:f9:a7:9a:71: b8:cc:85:09:39:f1:8e:1d:ac:fa:54:32:c9:dc:56:6e:2f:0e: d5:6a:45:6b:28:b3:b9:b1:7f:59:02:1b:54:3a:f8:f9:7d:83: 86:fb:fa:1e:f1:ea:55:ae:df:ca:ab:f2:fb:c6:a3:f7:40:86: 3a:68:1e:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ3ViiX7y9Ggo8x718f5c8vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZDc2MTU5YmZkOWUzMzc1MjNlZTkzMGYzZGYxMTFkNmJh ZTczMDYwHhcNMjUwNDI3MTMwMDU2WhcNMjUwNDI4MTMwMDU2WjAzMTEwLwYDVQQD EygwMGNlZWY5MmNjOTE2MjcwZDk4ZGU5ODY1NTA3NTdjNDY3NjgxMjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYefAYAVu4pgl/pSvRbg8TM+7Dox frqdIG/p/Vqk6KgkeTNxtaUtALkR546zuUzFpFI4acnKuHkTpGs/EKRT2rWEcd8a wP5jeWgdfgyUwsBH2xFGhoMdmYDktiiHg5VF/iZtXha71fwUl6dU4pFWfrEtj+50 5RotjcDpoJmUiQovTqD7LdehidqWkNvlWM25HU7LBRvZ8WdrukORfzD++6/M5OXG yFVQytjOTniQ7+LE6nrCnaJQ2uYPbFjukTzHvD9IWN7z7rwlmOLS1DElolRu/vm8 0KNSIx/gf/cTbvX728USwqh2x9fdd1ngmVU/BquscAYHldTuGHOjs/hI6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADO75LMkWJw2Y3phlUHV8RnaBKOMB8GA1UdIwQY MBaAFMzXYVm/2eM3Uj7pMPPfER1rrnMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgt Zjg1ODlmNjgyNjkxLzEvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgtZjg1ODlmNjgyNjkx LzEvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7l6Bhfr PfWb853reRv+UKJG7ruU3g7lGvuby/vPMIqMd/3cODszIBT/dp7IYT3GJdKYG1r1 ALr6ihlm9G5a16dML5rcVBrfJksvnU8wnI7sFlMF0uwcuYlHT0vLbR6+TlZ9BRVi BPlmVJZ2MFgj4/O/1p2Aqqno+C7eSOy/mB21P/IAaT/FZeG4fYnhtlAdJsl3fsqP gI2PtSXHdzLVHCOgHVL29tTM6iyWZ/SVbzt6CZl7XgcPu3Y667B8sOO0eqH5p5px uMyFCTnxjh2s+lQyydxWbi8O1WpFayizubF/WQIbVDr4+X2Dhvv6HvHqVa7fyqvy +8aj90CGOmge0g== -----END CERTIFICATE-----Generated at Sun Apr 27 17:11:24 2025 by rpki-client