$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft File: q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft (raw, json) Hash identifier: T/2FoDv5Klk8QTOpiWMtzAkS6YCVT9k8rbwqlQ5ckSo= Subject key identifier: C2:E1:BC:6F:CA:54:60:09:0F:C1:64:91:87:74:2C:ED:C8:83:63:DD Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Certificate serial: 01967E6A31827998C7F214C24180EB3B1A9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft Manifest number: 1221 Signing time: Mon 28 Apr 2025 22:00:10 +0000 Manifest this update: Mon 28 Apr 2025 22:00:10 +0000 Manifest next update: Tue 29 Apr 2025 22:00:10 +0000 Files and hashes: 1: Ay4048oOGOLd8W5gLDDEAyTF8CE.roa (hash: NXsQAFwkRa/GC3TqDmqhOZeN3qNn6FtRxq658PxTeSo=) 2: EbvXq4EM8hAgSkGiFLRqaY-G0EU.roa (hash: zajtrIP7Ewp9NW7IyVXFEVPjCtiQ0d/m581bkbpxnPI=) 3: FDdC23f-QMX8x6wvwKf2MaftED4.roa (hash: h9m2qsiGkrW+4l59GNkStG6h59aEcnuwE/KLJqr7Cgk=) 4: FHjjaCL7QaSxR7Yf_uDdz3cQhuA.roa (hash: Brv6WLVF3QRBSayqPg/J2H5JWwF8VVYLp0UA1sg3bSA=) 5: GanbvvtqSZENbmIdtfbYun4fuOo.roa (hash: a9IMBYKg4BFPWfGPrEQ1nIFRtJtRWqf5txg0Sr68Odk=) 6: HeWtxOQwTN1uf0xfcq_bZw71XkA.roa (hash: Q3cAdwW00NmkMkDNixCTZhHEBzWnPkDYpvdoFVzzSP4=) 7: LPXBlOJ83SUZetduCUkP3lDmZb8.roa (hash: Xahh/YPbtY5jZR0nw8MkUj4SXBdb+qHLE/N+aHg/zLg=) 8: MBaWylrBVCifHO75NhqX3hwA3gI.roa (hash: rBGbEwve3PVfVzEgeSB6FNde2V4Ej5oriQNU2JdSej4=) 9: TNZjVfkoPHNGWuPROUhTApW2tS4.roa (hash: HeS2ECV8xSlPFS6ZfzpvaJlw7gUvm2q+HDJoDgc0tag=) 10: VEkecCYWX-3eJbHzfXRPqIguSrU.roa (hash: y+HxKa51lXccWcF8YAwZEEpBtkvi4YQc9qp84HUBYjU=) 11: bJOubptyDCUoksZUBTEQqGVmM9c.roa (hash: 5AtXcXlAprhgr08DWqOvaQo1UWB8kRpiaZt7z80DD44=) 12: gY7ZGvPzoH-CX9GeUSTzaqQXovY.roa (hash: 2Y8QhFV1RfXgwz+9zPSSImXIf02O6QwrVpawBy0GOpo=) 13: j5_CqMmkt1DG3j-liA9ojTF-2zk.roa (hash: 9/Skv7dfWWCpzLOyfdQVA/mAMx0mIp9bCVvdrEzkMLY=) 14: ktsWW1aNW0Ka2r1y8DatRgdAjnQ.roa (hash: B9kQb2mez0Ho2ienkmxwkosyQ4vYDt/9bZEi638La00=) 15: pWYX2715Q-5BkbFDg0Sh9v9WvPs.roa (hash: TgnvC3W5sZgU6RXpmwyf5MNyrmOzs/Lefze2pwDj6yc=) 16: pdqJCRLiJ7NUW64tDbwue3bHfpU.roa (hash: ljeRCKKswXVLuB5MoRwzN0UCpzG2Fbx/CHdpqjKSohM=) 17: q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl (hash: jy280GYJUIPGifhIF173LxOSUFCN5s3HUEqWrTtbVPE=) 18: tuLu-KxTyWECQsa7jsPHvbBC7-c.roa (hash: sICitbN0hdJLsCXmDSmpQhmRlzSQyxGdXNXHPCYmLv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 22:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7e:6a:31:82:79:98:c7:f2:14:c2:41:80:eb:3b:1a:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Validity Not Before: Apr 28 22:00:10 2025 GMT Not After : Apr 29 22:00:10 2025 GMT Subject: CN=c2e1bc6fca5460090fc1649187742cedc88363dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e3:0b:81:5d:88:e7:51:cc:8b:a9:07:16:ca: 6b:8a:bb:3c:8d:43:b1:85:84:c8:97:ab:26:d3:93: da:69:5c:4c:cb:0c:23:66:e1:55:a0:ff:0d:e2:0e: 94:2c:6f:6b:f6:c0:ab:b1:6f:cd:46:e7:e1:b9:e0: 18:c9:94:9c:17:0b:bb:a4:84:c4:31:42:fd:86:a4: a1:ca:70:ae:02:47:0c:fa:15:c1:fd:90:d1:6f:52: 5e:30:c1:80:c6:d0:ee:ae:dc:9a:b8:e5:92:5e:19: af:49:0e:07:17:68:91:a8:f7:10:6b:53:a6:a8:05: e2:c1:1c:34:08:bb:e8:05:58:10:7f:aa:e7:de:75: a2:13:b2:bc:81:f4:1a:a7:a1:5c:d2:c9:17:4b:cf: c6:a5:e2:03:d5:a1:02:61:8e:05:8e:e1:85:eb:98: a5:84:37:9d:f2:df:ce:bb:c7:c3:82:6f:2f:59:86: dd:c8:f2:6e:6b:95:ce:de:23:b0:d3:26:ce:0d:df: cf:26:28:4f:20:a7:77:57:32:02:b7:96:47:d9:31: 07:40:48:c9:b6:a7:b1:0b:ef:a2:15:b0:cd:9b:62: cb:b9:22:76:7b:95:cb:ca:05:1f:5b:ff:9e:f7:94: 77:1b:67:ab:af:b1:2f:19:ce:4a:08:a2:d5:26:69: 07:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E1:BC:6F:CA:54:60:09:0F:C1:64:91:87:74:2C:ED:C8:83:63:DD X509v3 Authority Key Identifier: keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:18:68:18:32:89:bc:ac:a7:69:72:a6:23:d9:d3:a8:26:ef: 30:f9:30:c7:9c:3e:71:98:65:b7:ef:d6:7c:5e:22:f9:ca:19: dc:2f:21:e8:9f:3b:59:ca:18:f7:70:8a:7d:05:45:b9:72:15: 64:e6:9f:df:18:b0:cc:11:83:94:3a:18:0e:69:c7:b1:28:c9: 94:a7:f8:11:77:2e:66:c9:dc:38:95:41:df:1e:bb:60:f1:c0: b7:f9:35:55:e2:83:69:1c:3f:e9:e5:87:1c:32:cc:9c:1d:ab: 1d:98:35:3a:02:73:52:7b:7f:c9:17:74:9a:64:2e:9f:c3:72: fb:3f:1d:52:29:28:16:61:9f:81:49:46:45:d5:76:72:2c:6e: 1f:ef:03:84:9d:3e:59:cc:a9:50:67:b3:82:3c:0c:28:a4:4e: e5:23:4f:d2:bb:28:e3:6f:93:18:93:0a:7c:5e:3c:d7:ac:08: 4e:8c:71:c5:5e:d9:c2:63:32:bd:6b:03:01:23:5b:e6:96:8a: 78:12:14:c5:d4:8e:d3:1f:67:bd:4e:66:7e:f5:0a:3c:34:5b: 4b:3a:b3:94:11:25:b4:a7:79:29:d1:61:e1:3c:74:a7:17:69: 7b:46:65:21:df:3c:76:5a:51:bb:9e:6e:06:84:18:6e:2a:71: af:db:85:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ+ajGCeZjH8hTCQYDrOxqfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOGM2YzU4YjYwN2ZmMjNhZTcxNzVhNjE2ODJjNzU0ODBm MWUyMTQwHhcNMjUwNDI4MjIwMDEwWhcNMjUwNDI5MjIwMDEwWjAzMTEwLwYDVQQD EyhjMmUxYmM2ZmNhNTQ2MDA5MGZjMTY0OTE4Nzc0MmNlZGM4ODM2M2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseMLgV2I51HMi6kHFsprirs8jUOx hYTIl6sm05PaaVxMywwjZuFVoP8N4g6ULG9r9sCrsW/NRufhueAYyZScFwu7pITE MUL9hqShynCuAkcM+hXB/ZDRb1JeMMGAxtDurtyauOWSXhmvSQ4HF2iRqPcQa1Om qAXiwRw0CLvoBVgQf6rn3nWiE7K8gfQap6Fc0skXS8/GpeID1aECYY4FjuGF65il hDed8t/Ou8fDgm8vWYbdyPJua5XO3iOw0ybODd/PJihPIKd3VzICt5ZH2TEHQEjJ tqexC++iFbDNm2LLuSJ2e5XLygUfW/+e95R3G2err7EvGc5KCKLVJmkHeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLhvG/KVGAJD8FkkYd0LO3Ig2PdMB8GA1UdIwQY MBaAFKuMbFi2B/8jrnF1phaCx1SA8eIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2Mt ODhhM2M0MWZhZWUyLzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2MtODhhM2M0MWZhZWUy LzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRhoGDKJ vKynaXKmI9nTqCbvMPkwx5w+cZhlt+/WfF4i+coZ3C8h6J87WcoY93CKfQVFuXIV ZOaf3xiwzBGDlDoYDmnHsSjJlKf4EXcuZsncOJVB3x67YPHAt/k1VeKDaRw/6eWH HDLMnB2rHZg1OgJzUnt/yRd0mmQun8Ny+z8dUikoFmGfgUlGRdV2cixuH+8DhJ0+ WcypUGezgjwMKKRO5SNP0rso42+TGJMKfF4816wIToxxxV7ZwmMyvWsDASNb5paK eBIUxdSO0x9nvU5mfvUKPDRbSzqzlBEltKd5KdFh4Tx0pxdpe0ZlId88dlpRu55u BoQYbipxr9uF2A== -----END CERTIFICATE-----Generated at Tue Apr 29 07:12:39 2025 by rpki-client