$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft File: HHsGv0EwDcTTDz0OGAybldK83f8.mft (raw, json) Hash identifier: v7BfuZyetOINETmMIsKqheiR7Pgulpi0jjI+i+19EbA= Subject key identifier: 86:7C:32:0D:8E:CC:7B:19:61:34:A3:88:EB:41:56:87:4B:DC:DB:2D Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 019673E6F98AD8261CC2F16DD0A9FBF26E1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft Manifest number: 1526 Signing time: Sat 26 Apr 2025 21:00:39 +0000 Manifest this update: Sat 26 Apr 2025 21:00:39 +0000 Manifest next update: Sun 27 Apr 2025 21:00:39 +0000 Files and hashes: 1: 1-cqQGhXn60MgU2VUeNpjveMW2qk.roa (hash: feFbGoFtjwOyIRFeQAOSoVibJ96/Lb0iYRt2u/rBKMg=) 2: 38_Nyvzqxd0PvNucOR1iwmjTQ_o.roa (hash: tMPubQJjYp/dcRFcviDk7lh4PnDXnz7NxUZ6aWZWDyw=) 3: 61vRkExsI62jJ48irmkSDqW7AqQ.roa (hash: JvZBuIGS2vn+dO3Q9/C07cjmDLxdJUfuxzakaBvC2Ms=) 4: B-leWKyHyUWQaTSAIdQFN-Zp9rw.roa (hash: zSJCyrn6RempGySvfu/Xbm5Mpb6WnVGqpUroJHwaWew=) 5: Fxmcu1Qi0nhsZOIxVkNPueqhUl4.roa (hash: 5Bu1yMZZneENHRnbSmQP3RKWM4Ya4gnEDHmeUdig1bo=) 6: HHsGv0EwDcTTDz0OGAybldK83f8.crl (hash: wMyG11WJBq8eTjLWkuTptFndNgoRmpkcaQ+PtGrggaw=) 7: Ie2e1wt_FuvjPhvPZmJ8YbfF_Tw.roa (hash: 0jvW11Eh+nanPzwmW1R+ZUtO2i7ehli0d4txf/mUkQE=) 8: KT_XRl68MXL3ukVnoMjZI1SdZ_Q.roa (hash: ug8+swCsKmFRIJydlY68K1ox72m3uNsfqqtSels/7I8=) 9: PLFnFsip4j-sETB8PPQgrmVAohU.roa (hash: h6NOUcP49OYU6YMMiK3QVB4r4u8oK/zQN8Ei+4fsxfc=) 10: UAEVVZJh_F--n89kLYAR_ZrMiAA.roa (hash: KwDeeF7UfAzk4CN3kaftHTo6xiyKPchWU5oi2GhJgUA=) 11: XgPwQOKsd9uJBigbEk6gk3WV4gw.roa (hash: MfMJHXV5sXbrxV0YBc5joH+vkuSR+zLfQaFUaN552Bw=) 12: Z9kOlfq-w01D8Ml4l6fqbORR_5E.roa (hash: gxikB87WE0XHMDAk0eS1AdtF8pmhQbJr0n4lM1hO40I=) 13: cUfpv5-AAffzxD9fcxzlAlyBCJ4.roa (hash: xpWzwpf+CMwbZhPneV1IeCxiayddwXs6mMP85+eMFG8=) 14: f7jihsbQZQOjudWmankbYdgvSd0.roa (hash: Kmr8nTMHln2GoQ9z1uNdCIRV8UiFMuI6zP59QLBGAfA=) 15: m8selLLRbKezlnaS1FUfG6Kw0Ns.roa (hash: gDn7HNTqTqOigQSPvIZJVIcZmeh/IZoOdyWyJdwiR84=) 16: oANVOGpGqSZNzfjjdghTPit9_38.roa (hash: VSfuOwX73gMez7dFTyLtUenlMRci41842EschwuvUEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:73:e6:f9:8a:d8:26:1c:c2:f1:6d:d0:a9:fb:f2:6e:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: Apr 26 21:00:39 2025 GMT Not After : Apr 27 21:00:39 2025 GMT Subject: CN=867c320d8ecc7b196134a388eb4156874bdcdb2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:24:2b:b0:c3:47:b2:6c:69:d8:5c:4c:2f:5a: e2:59:7c:24:cb:2a:e6:bf:14:f6:ad:23:c4:61:30: 02:ec:03:c4:8c:32:61:98:bc:77:05:a5:03:51:9c: fc:52:38:d0:d7:ee:85:87:1e:88:d6:29:08:ae:0e: 82:a1:f3:db:a2:5b:f3:c5:0b:a4:8e:61:80:35:d5: ce:43:3c:29:59:6d:86:ac:c0:68:2f:d0:75:c8:6b: 46:99:cc:85:a9:2d:76:f5:9f:e0:26:7e:29:1b:c2: b9:94:76:6f:f1:f3:c0:c5:ab:7e:01:3a:b6:23:1e: c6:6d:7a:2c:05:bc:61:df:cf:38:bd:96:97:ee:77: 7b:4f:b7:4b:63:4e:ca:12:b2:af:d1:25:c9:a7:8e: c9:cd:81:8c:b1:2e:33:59:5e:23:b9:da:41:8a:83: 35:83:b3:5c:7c:74:11:0d:ea:cd:48:38:be:74:3a: e5:90:1e:ce:40:3a:1e:bc:0a:5f:f6:3c:75:de:91: 25:54:5e:f3:09:58:32:d2:32:90:6f:6d:69:4b:5c: 97:9f:f1:a7:8c:fc:56:86:3c:1c:82:13:26:10:24: e6:21:7b:a4:e1:1c:c3:91:6a:90:10:b9:21:e4:71: 0e:4f:43:94:d1:b2:ed:3e:09:18:d4:3d:9b:85:38: b7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:7C:32:0D:8E:CC:7B:19:61:34:A3:88:EB:41:56:87:4B:DC:DB:2D X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:60:e3:e5:d3:f9:b2:bc:b0:65:d6:ea:fc:26:70:4d:1f:79: c0:8d:d7:a3:75:49:83:88:ad:8e:ce:37:81:15:41:71:8f:61: 63:c2:05:27:e2:a3:fb:94:1a:dd:2a:3c:07:07:c7:44:eb:2a: 0d:c4:f9:77:06:f4:38:21:69:5e:05:6d:30:b9:bb:2a:47:f0: 6b:f3:31:c0:30:d9:a7:16:7e:18:7b:22:dc:ae:ae:9b:d8:98: 1b:34:fc:02:ed:9f:41:38:da:48:37:e9:ac:3b:e5:c6:94:35: e7:19:ba:11:a3:2a:ff:f7:3f:59:17:db:75:18:67:3c:47:36: 7c:ae:58:d9:09:f5:50:df:d3:80:1c:ea:54:63:8f:6f:f0:18: e7:c5:03:34:ef:2b:4b:03:f4:70:99:20:a5:52:08:3d:24:6e: c8:c2:7a:82:64:f7:e0:20:f6:34:6f:da:77:e5:6d:9a:a2:eb: c2:6d:71:7b:28:85:5a:d5:b7:ae:bf:ad:19:f0:97:92:ce:99: 57:d2:dd:96:6e:cd:73:e7:d7:20:08:77:80:dc:a5:18:56:78: a7:28:db:0a:a5:20:22:40:28:5a:36:e2:a0:da:9f:56:19:c8: 8f:e8:fc:8f:df:f9:88:1f:94:37:c5:f8:9d:85:0d:2d:a1:0a: dc:21:cd:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZz5vmK2CYcwvFt0Kn78m4eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjUwNDI2MjEwMDM5WhcNMjUwNDI3MjEwMDM5WjAzMTEwLwYDVQQD Eyg4NjdjMzIwZDhlY2M3YjE5NjEzNGEzODhlYjQxNTY4NzRiZGNkYjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSQrsMNHsmxp2FxML1riWXwkyyrm vxT2rSPEYTAC7APEjDJhmLx3BaUDUZz8UjjQ1+6Fhx6I1ikIrg6CofPbolvzxQuk jmGANdXOQzwpWW2GrMBoL9B1yGtGmcyFqS129Z/gJn4pG8K5lHZv8fPAxat+ATq2 Ix7GbXosBbxh3884vZaX7nd7T7dLY07KErKv0SXJp47JzYGMsS4zWV4judpBioM1 g7NcfHQRDerNSDi+dDrlkB7OQDoevApf9jx13pElVF7zCVgy0jKQb21pS1yXn/Gn jPxWhjwcghMmECTmIXuk4RzDkWqQELkh5HEOT0OU0bLtPgkY1D2bhTi3ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZ8Mg2OzHsZYTSjiOtBVodL3NstMB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmDj5dP5 srywZdbq/CZwTR95wI3Xo3VJg4itjs43gRVBcY9hY8IFJ+Kj+5Qa3So8BwfHROsq DcT5dwb0OCFpXgVtMLm7Kkfwa/MxwDDZpxZ+GHsi3K6um9iYGzT8Au2fQTjaSDfp rDvlxpQ15xm6EaMq//c/WRfbdRhnPEc2fK5Y2Qn1UN/TgBzqVGOPb/AY58UDNO8r SwP0cJkgpVIIPSRuyMJ6gmT34CD2NG/ad+VtmqLrwm1xeyiFWtW3rr+tGfCXks6Z V9Ldlm7Nc+fXIAh3gNylGFZ4pyjbCqUgIkAoWjbioNqfVhnIj+j8j9/5iB+UN8X4 nYUNLaEK3CHNtw== -----END CERTIFICATE-----Generated at Sun Apr 27 05:48:53 2025 by rpki-client