$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft File: 0H11c6rK6CHIfW02Qxz-SygBq0E.mft (raw, json) Hash identifier: OgAgHnDuaKQhJugjLVHERBurhkEYnDtgCs3IUPC4exA= Subject key identifier: A1:7A:07:1D:DA:3F:12:88:08:9E:19:EC:87:5E:B9:74:F9:A0:40:10 Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41 Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41 Certificate serial: 019686FFC2CB81435CB524DABC9DA40F6FEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft Manifest number: 1268 Signing time: Wed 30 Apr 2025 14:00:30 +0000 Manifest this update: Wed 30 Apr 2025 14:00:30 +0000 Manifest next update: Thu 01 May 2025 14:00:30 +0000 Files and hashes: 1: 0DF0N6re6QyjGkcELrZ2PayQLRE.roa (hash: +fZxWB3IhMVYTIeiKHbk18oRReT+PUmn1zDi+OPG/lg=) 2: 0H11c6rK6CHIfW02Qxz-SygBq0E.crl (hash: 763/nSyeiz6IbKOw8PYr9T0XmxVJnJkmHA0xYdqZoQ8=) 3: 3CbIb4TEaRdsUuSnzyfjsAcJ8C0.roa (hash: FMM+Gvcvh1vM/fuebG47q1lgLXjSvweT88zfbPoCGg0=) 4: 9MuueRmthntuKlKTwnVM9LicLuc.roa (hash: Qhwg9BIR9qrwafAgYX5pDSZ8fHBJKbNXSHBKS3TOnUU=) 5: DIgxiDivQ3J12DTsz16bG9BGpKM.roa (hash: ipoR7K+Qag5vPNI/tEX1tA3BB9jHVP98Tf9P91MGtOo=) 6: DmJAcHNL5tv0DXlXvpBQPSj5sQo.roa (hash: qPorS5oIpI2apfp+WoMqcxuGrwSF4BiUmmhlYMQw5nA=) 7: GzD59DhVZl4_JB2c2p4bRwKVQNQ.roa (hash: 1OX4fQvpvyMmGHi3iHoSqU11msJNSVwpVls7uukVpCA=) 8: IjdCoPnpProHieFWFH4g3HsCPwQ.roa (hash: +qa0/bhFwN16S6m5JsKHh8Vu/jzfjw/IRYtVBQ1/3r8=) 9: KVofMQ5Iytj3taZ4zNX-3NiQ9A0.roa (hash: SkunsiqfbTLPDmA+1dTSXrSg8HMaos1bWjK4FJzMt/g=) 10: KvI_WlSyaYCbk3_UABhTDePguQI.roa (hash: rPhhKIHPKKRCk53KHCmBvd4JNG8dyNFleXKMwbsZEzU=) 11: LWzTa12ceS3uKfqTTkpFAx1rmBY.roa (hash: oZTmu9Ix2td6L1C/5xioSK5eHWyXVBQsY0hPLgTw194=) 12: QLIx02DBkJ8BTa1KHeMGeh-YdMk.roa (hash: as3RaXvY0zPD+Du6iZO6HneereP8PKXWFDoTrnCHtlI=) 13: _nPdD9NUXNyi6od6mzg3CTRXnXE.roa (hash: 5bWlSHwxWuQbZxvEnoPTlMwKBtuBAjLxH0RjCokO3O4=) 14: bnb74LoHijb6ReFXDA8dOSN40TY.roa (hash: pwFJIAxYs5XXfIXS9iTFUvVpEjtoEP1h/fTl5ckAITo=) 15: dRXssJ13yx35ENXgGitRyldcyQ0.roa (hash: GNYSRDBbtFSH98fHHAWFkKkpqHnJB5tc2K3fGmfA9Xk=) 16: flhmne3OCJjm1qjNcOG0Z5Lii9s.roa (hash: lQBWv0VaHVIzNxJpgK2TdUDo5audQQ5kwE3Uz5fgISE=) 17: lPhFxRT8GyHXdHQ9vuVVLBajUJ4.roa (hash: WLQY2DGtBY5JdQqEp0/I2cNJpPQIJM0e6a534AHtEdU=) 18: liShckzg-y_pGqAmNFUsqPtV5XQ.roa (hash: CRdqFfzJj5q7aSo/eK5J7uVd+II8YpWMcc93sOlwTJc=) 19: owZB8ZzNInvz4qCAZczHr5i6TGQ.roa (hash: OFzte6Bxug1J1ywVmmkhfG0SiDFNDSFv051ZgTkzliw=) 20: p5Mg10zCIfRA7UUdSdLMSBXFn7Y.roa (hash: BUS0bw1TX/ZhcEDLxDt7zaEn0n8CiilgUb2ODoWryJc=) 21: pwGmEYbuZcQZsOR6KNT3jM32lkY.roa (hash: 5UfKqqEXju1N6ARaCHouu2g7PjryinRZ9Cc7bxq100I=) 22: t0oYcll8PI4dP_5gDrpVqJ6D9bo.roa (hash: ZFjxOlyDciCJjlrX2W0RSeB3N5wBNwxTEiHBjcHtR6s=) 23: w3B_b_hTCziVeuO8PCcq3YSHu2s.roa (hash: EH81W2RkfUjm0/Q5QNi5AYaveemQwHLB03yQgBEX+AM=) 24: wbzeMwPRyxIqE7rdL232Kbv3lo0.roa (hash: 0MwHWZD4yNGfOW35B+nQ/M0uW3knCev0pCMd/qtwBR0=) 25: wcgFMyvWhqJvffO8wVrnzqPEWeA.roa (hash: 9GrvaL4luNKVJdLGRZ5R+2Y+tPlz5Om1wQcUI9dS5Ck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 May 2025 13:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:86:ff:c2:cb:81:43:5c:b5:24:da:bc:9d:a4:0f:6f:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41 Validity Not Before: Apr 30 14:00:30 2025 GMT Not After : May 1 14:00:30 2025 GMT Subject: CN=a17a071dda3f1288089e19ec875eb974f9a04010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c3:8a:78:e0:16:a9:f5:5d:ea:63:19:30:ac: d8:e6:0e:d4:e2:08:e2:14:31:b2:d2:14:71:cb:b5: b7:6a:96:aa:56:d0:48:34:f0:c8:1e:15:29:e4:a4: 47:66:28:c3:ab:c5:44:99:24:c2:ba:66:01:29:e6: cc:f4:19:58:f1:48:a6:60:70:b2:4f:c4:b8:c3:ef: 05:bf:6c:77:c2:2b:b5:84:9c:f3:ce:a2:17:3a:6a: 14:f2:fe:5b:d9:06:c3:27:6e:83:34:2c:a5:48:92: e5:a7:af:6b:57:e8:2c:4e:4d:ef:be:9f:2d:57:ed: c3:95:0f:8b:9b:88:21:42:bd:7e:cd:ec:4d:a4:1a: d9:58:fb:2f:4f:e4:6d:b1:3e:6a:e2:b4:42:5c:5d: 89:23:56:57:f9:51:19:f2:99:48:a8:6c:b0:bf:51: ea:d0:1b:61:69:2d:c9:f7:57:8e:70:a8:05:29:c4: 0f:34:70:f6:75:ac:15:9f:2b:72:bd:f6:0d:d4:70: e2:19:22:71:80:9a:61:97:0c:9d:72:96:44:04:ba: fa:ae:b5:eb:ff:97:52:8d:7b:db:05:9e:8a:f9:23: 73:f0:3c:6e:5e:9d:26:16:a6:b2:be:d9:fb:95:cd: ab:d9:76:9c:34:cc:d5:33:b8:12:8f:34:98:7d:54: 91:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7A:07:1D:DA:3F:12:88:08:9E:19:EC:87:5E:B9:74:F9:A0:40:10 X509v3 Authority Key Identifier: keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:60:69:52:cb:d9:2d:23:d0:1a:bc:55:44:83:19:58:d6:18: 3b:f1:47:28:b1:8c:d4:a2:3b:36:d4:99:72:19:a4:47:c7:9e: d2:2c:19:2c:b2:d1:74:45:59:ef:99:3f:c9:9e:38:22:87:05: 00:3b:4c:4e:dc:b4:5a:a1:41:93:c2:b3:df:24:b5:35:5d:f1: b5:5e:cb:b6:41:d7:67:8d:a3:2c:6f:a6:37:ec:f0:ed:ba:11: ce:84:88:38:37:87:f6:fa:c7:5f:9d:17:40:e7:8f:99:05:12: 33:53:72:9d:6c:68:1d:b3:e2:e4:00:78:07:3a:6d:a6:8e:8a: 4d:e1:d1:9b:8d:f7:c8:48:49:1e:97:50:5c:1c:5c:9f:b4:07: 15:d2:7f:aa:35:f9:15:75:df:35:da:ef:3e:13:76:84:47:bf: 42:b5:94:83:99:d1:55:2c:83:ce:92:01:a0:05:6a:06:ad:fa: 24:79:32:e3:1e:02:0f:cb:55:03:7e:1e:87:6d:87:ae:b6:df: d0:45:35:45:bd:1e:bd:e2:4a:a6:31:1a:dd:cc:4d:fb:c6:4c: 23:0f:ed:49:e2:11:cb:4e:0c:2b:40:64:9b:9c:ef:12:e9:99: 5a:41:f1:65:00:3d:61:7a:3b:39:16:e7:21:d8:0e:ee:6d:2e: a3:36:6c:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaG/8LLgUNctSTavJ2kD2/sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwN2Q3NTczYWFjYWU4MjFjODdkNmQzNjQzMWNmZTRiMjgw MWFiNDEwHhcNMjUwNDMwMTQwMDMwWhcNMjUwNTAxMTQwMDMwWjAzMTEwLwYDVQQD EyhhMTdhMDcxZGRhM2YxMjg4MDg5ZTE5ZWM4NzVlYjk3NGY5YTA0MDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sOKeOAWqfVd6mMZMKzY5g7U4gji FDGy0hRxy7W3apaqVtBINPDIHhUp5KRHZijDq8VEmSTCumYBKebM9BlY8UimYHCy T8S4w+8Fv2x3wiu1hJzzzqIXOmoU8v5b2QbDJ26DNCylSJLlp69rV+gsTk3vvp8t V+3DlQ+Lm4ghQr1+zexNpBrZWPsvT+RtsT5q4rRCXF2JI1ZX+VEZ8plIqGywv1Hq 0BthaS3J91eOcKgFKcQPNHD2dawVnytyvfYN1HDiGSJxgJphlwydcpZEBLr6rrXr /5dSjXvbBZ6K+SNz8DxuXp0mFqayvtn7lc2r2XacNMzVM7gSjzSYfVSRdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKF6Bx3aPxKICJ4Z7IdeuXT5oEAQMB8GA1UdIwQY MBaAFNB9dXOqyughyH1tNkMc/ksoAatBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjIt Y2Y5ZGM1YmFhYTc5LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjItY2Y5ZGM1YmFhYTc5 LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANWBpUsvZ LSPQGrxVRIMZWNYYO/FHKLGM1KI7NtSZchmkR8ee0iwZLLLRdEVZ75k/yZ44IocF ADtMTty0WqFBk8Kz3yS1NV3xtV7LtkHXZ42jLG+mN+zw7boRzoSIODeH9vrHX50X QOePmQUSM1NynWxoHbPi5AB4Bzptpo6KTeHRm433yEhJHpdQXBxcn7QHFdJ/qjX5 FXXfNdrvPhN2hEe/QrWUg5nRVSyDzpIBoAVqBq36JHky4x4CD8tVA34eh22Hrrbf 0EU1Rb0eveJKpjEa3cxN+8ZMIw/tSeIRy04MK0Bkm5zvEumZWkHxZQA9YXo7ORbn IdgO7m0uozZsWQ== -----END CERTIFICATE-----Generated at Wed Apr 30 20:29:32 2025 by rpki-client