$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft File: pa6KPYvaq_R2X9p51V7KjGnIvyw.mft (raw, json) Hash identifier: IjlGgdDgcBv2IezKjneadws7Yjv+ZmfFrrZfRyaV0zY= Subject key identifier: 5A:60:79:A0:A5:8E:54:FA:A1:5B:C8:79:A8:87:6E:AB:A2:73:20:41 Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 0196718AE138FE67DF29C3B4572B36964E0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft Manifest number: 0D8F Signing time: Sat 26 Apr 2025 10:00:49 +0000 Manifest this update: Sat 26 Apr 2025 10:00:49 +0000 Manifest next update: Sun 27 Apr 2025 10:00:49 +0000 Files and hashes: 1: 0dU4nqEloVTcpEFXy475oUdUoRM.roa (hash: +4pYEKPa/Azd7C288MxT6V8nhRo2gQ9C9f/LKpJ2E7E=) 2: 1-b1uUe7cDgUrt3O4cESXQzwLGQ.roa (hash: 9R4woCA7+AwuSB5OUnv/Zt0yVaohvWvZyAFjNEcFpfE=) 3: 3xG70OjpGDqTBtiV7J7ymcYWBFA.roa (hash: NM1Xt/iOH+RmW3xgH3e/zgM6erx/P3+UNPyWgezEG04=) 4: 52gqmyCs4CgJ8hxO4adVAhEf4YY.roa (hash: XpLF/BJt6KR+R9bnvQWMbSq818F5Y+BHu0O++mZbSiE=) 5: 6X2qxBTvsCu1KGgFjFHR9uizprw.roa (hash: THkA0uqanR753o/JOdPq3eCkVb6ZWxt+PiJvED7/Lgs=) 6: 8HW0T0gkjxuqP-_rFWA6XvZFszI.roa (hash: yvdGjJhxvncAn0kSWkYpvMzmOc86v5+R2cMLIZsxEfo=) 7: AqFQoZ5tMcenZVTjwiA7wb5NyGQ.roa (hash: mIDD2KzFcnMgCK/1kzPsCL33au7Vs9+ruXIfYWsMf4I=) 8: CuWsHbgT_C2B1MpCzl3Tcnh7qDA.roa (hash: FydU5iTLeGKnPVKpFCTWxei80LuqHywDP80pxMyuq9w=) 9: EV8C5U1nh3UWRVZyZWy4C7aXG3s.roa (hash: Q9qCtjkY6ZONgmktoZ06EQ20f3d6KCx1NRtILOVyIkI=) 10: IDk9MhfQceeWf9Aau-Lq0fZ-_CA.roa (hash: xOkvkF2fhOLphDe62JH2DeSLHq9CCUD041TbmVLDc04=) 11: I_zTEANA5HgNFK3xcWmr5JQSd4w.roa (hash: 8kt6pXomqbmYP20u6DRlj+fZL0R8g/8XjkQCzdnUfBs=) 12: K5PwPytOI_jcP9He1nt3G317eYI.roa (hash: cTDvsg09oLpiFvnjwcs0kSKetfHr8fv3r7qeLPsUP5A=) 13: LCvaB4WSKzttpqTMBERAKzTPkc0.roa (hash: efuSbUVkMb1LRDxLfq3t1vkJUtMph/K3Ly/MOMCQIYc=) 14: LvCg6ODOvz7fOcsn6wU3ngQnNXI.roa (hash: 2DJ8XZWQOJtfhwxPU+bThNRmPW5rZXIuxQU0nHhPZHo=) 15: M0UFmj8utuihy8ywzKYVtKAlOpA.roa (hash: GB4oTrIEAnIhwubWgjQhf6VSBwPU6R7tbEiE074YX9M=) 16: PtspP9NAMUf1vNrA5veAQs8D3JA.roa (hash: ulePbYZBa8BBx8Rf9110z7Z7LwUX7PcrfS6/GMQQI50=) 17: QnKLXYadCEK7EFhDz6MF7GYNjvI.roa (hash: rOJkJ3eVk06xoaQ0gvNi9t1WIsPI6NQJ4lEou7caFDk=) 18: T48pBsuhvbZxzuQikn6LHKfOwhk.roa (hash: riJSrEr8eklbL0fdBY3f1J6u/fO/qv2OeNqqUNUL/bI=) 19: XOx0VQXemWnE1_T_CbW1BF1yKGs.roa (hash: AVLDrE5Y2ydpWZbzqq6OGq4i3RC3l/nkGJBMXJVQobo=) 20: Yl2M3tHD9BpxXAF-8RCTakseDqA.roa (hash: SffwXpK1Th2HbQCicN1UUfkjL/i1kZCt1vfJ2FKzFtA=) 21: gaylLdxDyQb8sels7s5ku7UtfkU.roa (hash: U1UfdjYQAukjcg29y8zD3MFVpeQLO0fB9T/k1AE2BIc=) 22: hPYLx_9mBj_Ye24Y1_2lQPvsrq4.roa (hash: vQ4lqUvsFgblBgv4IH3pH1VZWDEVfeUus2uMPqiXEdM=) 23: i-XH3WsMULykHW1y-BG3UdFVuxk.roa (hash: VJILQeKFY+tCpv/VALS6QQ/A8bjqBJ9CpKPAXcs36qg=) 24: lxacDbK0eMnuXnpxPVHxYt8h8A4.roa (hash: rsXevB7T0iAAuzzWpzZrb3jX78EQxi4+Xjb6q3I67TY=) 25: o0unYtOvK0ypo95RgHxsLRbSEI0.roa (hash: /Kszii2RBvuT+vSDoTo/zRmMb8Q32yFP1SEkPKjGPyg=) 26: oBhyptF6QE4JF_exwsXWUGhFPFA.roa (hash: 3hvM7M438cadgQ4g9HhgILZgXMpg0ZtzDaSbf/K5RFE=) 27: oxqqJb6s3Y9_xl6qI2Z76gczjAE.roa (hash: 3Mi3svCpiZUvbXpx9Bao9teVj53BNUZ6cGIpnDn9NXg=) 28: oyokzIn026-PrXoWkL2twkIzg5c.roa (hash: vnYvn1vfv3V6OKUsd9n/C+ZJyouWqYiCJWFXAmzYfwA=) 29: pa6KPYvaq_R2X9p51V7KjGnIvyw.crl (hash: BPsM4ul3f/Uv2GwX2DWyM1QrGa4hSsIwFYt4N7q7K7Q=) 30: pakgoJm1JHH02EFn_cluKwwBgfw.roa (hash: 9psJh/g+q6UomADY1AKlNBezhzkIM0njclurAr2L1G8=) 31: qyVuEE_iZxUcQNKHUqVvNbUSd5Q.roa (hash: yJBmopjTpiGvBLTxepISwc4Bu7mb8teVZwXirlkcbTI=) 32: rMButntV5GnO7W7_TuF_ZPA6g1Q.roa (hash: QKYvOeC5NwDMQzqYncxkm8rqO0746QVz/H7okZ5iBmI=) 33: ti0W6fjaL6Z8NJz1MH9rdtxIt7Q.roa (hash: eexhvPXToWxtG+Ffy16JfuC8/yelu2NCnq6+i2y5ma4=) 34: uV6pu-rvAp4G68o2AgVK7vbBPX8.roa (hash: ykD9UesXzEoyDyDfGqtntVW1hYElb551gS1dPJQBUlo=) 35: wifLocMxfpz5rpj13UULY6xFWiA.roa (hash: zSAQgyK21VbhaQRoZfBOovQi13W5eH/UHapg2UUnRmI=) 36: wv61e77oscUDJBn9VYlTu_3AbRM.roa (hash: WF74l5Tv59hxzHDkv3UDIsUfaTD5KoMxhkr5geA0BW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 10:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:71:8a:e1:38:fe:67:df:29:c3:b4:57:2b:36:96:4e:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: Apr 26 10:00:49 2025 GMT Not After : Apr 27 10:00:49 2025 GMT Subject: CN=5a6079a0a58e54faa15bc879a8876eaba2732041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:16:f5:69:62:eb:ef:4d:80:ef:f0:b0:d1:c6: 1a:cc:1e:22:3d:17:fc:b5:5d:de:d3:25:56:9d:51: 71:4a:94:23:c9:22:b7:fa:2a:1c:18:c8:fc:89:3f: 3c:b5:11:75:d6:5a:27:35:58:8e:49:1c:ce:a5:ff: 0a:00:53:19:f1:38:da:18:36:77:b7:20:7a:c9:7d: 0e:ec:45:fd:c7:c5:e4:25:64:bb:ba:d9:bd:5d:cc: bc:03:8c:92:d8:82:dd:c2:7f:a9:51:40:27:bc:e5: 0f:75:01:37:eb:8a:e0:38:3b:c4:c9:a5:a2:c1:08: 8b:42:fa:4e:8c:aa:56:13:ba:c8:80:e1:ba:2b:1b: 08:ab:ec:47:20:99:80:0d:74:43:0d:11:4d:f8:c7: b9:78:a6:07:00:db:98:f1:69:7a:79:11:b8:9d:23: 97:c2:de:09:d2:7e:f9:78:dd:cb:62:d8:c7:98:51: fd:5b:9b:ba:1f:06:99:5f:58:0c:73:79:cc:05:aa: c3:9f:46:92:af:63:4d:84:39:df:9e:e9:32:03:61: 99:82:73:0f:70:29:c4:87:09:c8:6c:38:7f:14:2a: dd:e1:ad:29:03:04:77:b0:f4:88:2e:aa:3a:68:15: 76:75:38:db:68:b9:06:4f:d2:f5:dd:f7:45:a5:3e: 1c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:60:79:A0:A5:8E:54:FA:A1:5B:C8:79:A8:87:6E:AB:A2:73:20:41 X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:1e:c1:fa:3f:e2:22:e6:e5:c6:33:16:7a:fa:3e:c1:71:df: 41:5f:62:2c:1e:73:6e:b4:16:22:da:96:b5:6f:38:4f:d2:07: 17:59:58:36:6e:51:cf:2d:ea:09:ae:1e:3d:ad:0e:26:8f:dd: ff:5d:ae:80:e1:ad:ad:d2:71:01:06:66:06:c5:09:92:a3:e0: c0:59:bd:1e:1c:6c:85:ed:28:52:da:8c:f7:d0:57:dc:f6:94: ec:ce:9b:9d:5a:b8:36:94:9d:62:40:4d:81:06:20:93:b4:9b: 9f:02:d9:f6:fe:8b:d5:2f:9e:95:c0:f9:2c:cd:86:b9:9a:f0: f5:3d:91:cf:f2:37:89:c6:03:4f:a7:ac:8c:00:e1:40:9a:fb: a4:c0:74:58:ec:28:c6:8d:79:1d:6a:e6:da:b9:9a:b8:b7:1b: 29:fb:04:76:05:6c:e9:31:1f:4a:57:64:7d:7c:e4:2d:ee:d7: 22:e5:85:bc:3f:1f:ee:8f:33:c0:fc:78:02:fb:5b:3e:fe:c4: 49:79:e5:05:1f:78:49:2a:1a:57:39:bc:24:8d:f9:e1:ce:52: 3f:10:dd:9d:b9:13:c4:12:1d:ce:87:51:d2:a5:a4:b5:8a:36: 1f:54:0b:81:6f:39:5c:07:fe:d2:8d:d7:e6:85:d8:7f:63:6b: bf:c6:46:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZxiuE4/mffKcO0Vys2lk4MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjUwNDI2MTAwMDQ5WhcNMjUwNDI3MTAwMDQ5WjAzMTEwLwYDVQQD Eyg1YTYwNzlhMGE1OGU1NGZhYTE1YmM4NzlhODg3NmVhYmEyNzMyMDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRb1aWLr702A7/Cw0cYazB4iPRf8 tV3e0yVWnVFxSpQjySK3+iocGMj8iT88tRF11lonNViOSRzOpf8KAFMZ8TjaGDZ3 tyB6yX0O7EX9x8XkJWS7utm9Xcy8A4yS2ILdwn+pUUAnvOUPdQE364rgODvEyaWi wQiLQvpOjKpWE7rIgOG6KxsIq+xHIJmADXRDDRFN+Me5eKYHANuY8Wl6eRG4nSOX wt4J0n75eN3LYtjHmFH9W5u6HwaZX1gMc3nMBarDn0aSr2NNhDnfnukyA2GZgnMP cCnEhwnIbDh/FCrd4a0pAwR3sPSILqo6aBV2dTjbaLkGT9L13fdFpT4cSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpgeaCljlT6oVvIeaiHbquicyBBMB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcR7B+j/i IublxjMWevo+wXHfQV9iLB5zbrQWItqWtW84T9IHF1lYNm5Rzy3qCa4ePa0OJo/d /12ugOGtrdJxAQZmBsUJkqPgwFm9Hhxshe0oUtqM99BX3PaU7M6bnVq4NpSdYkBN gQYgk7SbnwLZ9v6L1S+elcD5LM2GuZrw9T2Rz/I3icYDT6esjADhQJr7pMB0WOwo xo15HWrm2rmauLcbKfsEdgVs6TEfSldkfXzkLe7XIuWFvD8f7o8zwPx4AvtbPv7E SXnlBR94SSoaVzm8JI354c5SPxDdnbkTxBIdzodR0qWktYo2H1QLgW85XAf+0o3X 5oXYf2Nrv8ZGyw== -----END CERTIFICATE-----Generated at Sat Apr 26 16:21:06 2025 by rpki-client