$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft File: jRrIPuOj-WjWatL99GFue7Hk0dc.mft (raw, json) Hash identifier: 0K2yw06CCW1GXPOadO2HNhjoLAtI2qiCHbHKMVOd3jE= Subject key identifier: D2:04:06:02:17:F3:52:81:FD:1A:93:7A:9F:8A:59:22:88:5A:9D:23 Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Certificate serial: 0196722F3ECC186F42EC9AEF7C84DE25158B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft Manifest number: 0A8C Signing time: Sat 26 Apr 2025 13:00:20 +0000 Manifest this update: Sat 26 Apr 2025 13:00:20 +0000 Manifest next update: Sun 27 Apr 2025 13:00:20 +0000 Files and hashes: 1: 0Hea7ZTNDwvMcAxNNLrKxuGzWtc.roa (hash: C5YNNm+ryeKb3S5ziLLMkaKUlee2ZsqPxsVb71cbMRY=) 2: 0hcYkFvLnPnX3tJPZIl-Uhot1i0.roa (hash: 6/eHz/J+k5SuDY5b5eslxHZpd3P/l7+bfENiu84Xo/Y=) 3: A3vCnLdcCAHsjG0TKS7PepEiSRQ.roa (hash: 8/8TxF0wXw7stYTcBeXGRpf0HZpKR5xHMrhdKNPhjb4=) 4: Eb3nQCsubyrRRwgtef25b2tcJbQ.roa (hash: sgX7PEOSSTdMVUw2kIAqvpDSoV+TN56cGW37Ykizvek=) 5: FQFiaH-Uhznyo9tuv-39hg1SgIc.roa (hash: AaAgvoQWwsBdEDlzs9JJLKseENMJxUCvDZ1+feCaadI=) 6: JtkTsuHPsoBKn0hRChOrC4JXTN4.roa (hash: M9uGhnRBSZAnmB8BCT/jdRx465I3Ctf37Vtgm+Jt4nc=) 7: LNIAH1MylX8WQQ-W8xfPHTlOsW0.roa (hash: GFXXpakvt3mJ4yGbBFawI3+WVF7sKNF14A1lgtziIek=) 8: Lxv8RdYN9P2vj1nZyAjFF9lNkU8.roa (hash: xMtpILHpW8icGyga3EnNkKUNmrRxGITTuJWIIZqDxDI=) 9: MudRzNeUk2R859eEP09GJeDExf0.roa (hash: 2o3NbfW7AkgEJtAc91HUgnIB/5KesUMTjVvuVU09fp4=) 10: RTZYU-7DG4fUoipBd0qSh8BirjI.roa (hash: 3eo6AFVTXAYcIIpYV9OFjF0R4DRTO3nfrXKCxpb3Q8c=) 11: jRrIPuOj-WjWatL99GFue7Hk0dc.crl (hash: zhnafQXggD+/6M+mdWwKHE4GEUnmstyMBPf1rhVuEPE=) 12: koWcD6_YJsplq6MpdAuoeyxurzM.roa (hash: 2bTDDvlz5M3JHeYmPpa6SlfroaAlw505uc1zw7/pXCU=) 13: l-VXPhXSd9oDrwdeFBV0TfekxRI.roa (hash: J5Ti7dTZ3X/5jS4aqunQYVcXN1Efh318fTK/MczMR4M=) 14: lO8z4PUnAAW_FQZ30LG2G_SaC34.roa (hash: TP4CK9avYURoeZBLUriM0sZhHgj7m8xB680P8/Q/778=) 15: nHSye6xLjTJdy1NFMQ9UNlBR1r0.roa (hash: x+w+bpNcYVfLYVFpFJoqaG3bmPwP5KeEN+TuOk91gTE=) 16: ptIzMM5pGR32qdt6NWym3eUNiak.roa (hash: bSsM8QyZGEjlRqx/UPAoekl3qkyD03EUapHU3WIbdX4=) 17: tesrxSIX8wDOD0usavdzlelTyC8.roa (hash: 2mw6qDJEVPvk2SB5Frfa2IZ+DHf6Rgtla+C91qwtmwA=) 18: w3XEj_DV9fIFRhmFROarQCdn6Ms.roa (hash: pKXXHhO9um6IJQVBaI4Bp8t0iIi+/wHe5zvkyl8qHy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:2f:3e:cc:18:6f:42:ec:9a:ef:7c:84:de:25:15:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Validity Not Before: Apr 26 13:00:20 2025 GMT Not After : Apr 27 13:00:20 2025 GMT Subject: CN=d204060217f35281fd1a937a9f8a5922885a9d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cd:ab:2d:6b:04:e1:c7:6a:b5:41:27:0e:00: fd:27:a0:80:df:6d:cd:d1:80:5e:ad:05:d0:86:ea: 1d:c5:72:8a:8d:85:2f:1e:8d:87:23:16:b6:9e:14: 8d:fd:13:3b:66:65:60:b0:c7:7e:30:77:79:5c:69: 05:88:a4:64:91:a5:a4:4f:0e:5f:50:9c:8d:fe:a1: cb:5a:3a:e9:88:93:c6:29:30:35:e0:7b:20:ee:04: 89:32:de:88:91:b1:41:59:9f:4b:61:a6:2a:f0:76: a0:d5:4f:bd:37:fc:be:51:1d:b8:bb:59:59:34:04: c5:8e:d8:cb:bf:25:8d:14:37:33:f4:e0:2a:32:74: 97:4c:80:ba:95:9a:1c:9f:a4:a7:f5:c7:f2:2b:0a: b5:d6:4d:6e:35:39:28:45:cc:93:78:98:08:97:91: 23:6c:b1:37:32:82:cf:47:5e:55:5f:1c:e2:fb:98: 1a:80:6d:01:f7:70:86:9a:34:e2:e9:b0:58:90:77: ef:da:72:db:db:ed:cc:63:ed:30:6d:a5:e7:7d:c8: f7:08:f4:c5:be:7e:82:2f:01:d4:c5:cc:78:d4:d9: 26:e5:39:05:09:1c:44:3f:07:fa:b0:c6:c0:a8:e8: 8d:f5:4c:f0:b6:28:46:d7:a1:28:f6:83:0c:58:8f: f0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:04:06:02:17:F3:52:81:FD:1A:93:7A:9F:8A:59:22:88:5A:9D:23 X509v3 Authority Key Identifier: keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:86:85:7a:3d:24:e8:d1:7c:f0:a1:7a:50:14:71:66:2c:03: 71:36:88:d4:17:a0:22:32:3b:09:a3:e2:0b:88:63:6a:7d:b5: c8:61:79:1a:75:6d:45:b8:7d:4a:fc:34:06:61:cb:7a:89:c7: 6a:d0:4e:20:e2:16:6f:25:b6:68:30:36:44:ec:0c:2f:b1:4f: 7d:de:80:f6:a4:c6:3a:97:e7:f9:80:d9:e1:3b:bd:69:46:b9: b7:2e:53:7e:31:6b:17:f7:e9:f5:8f:6d:1a:fa:b9:76:e4:57: 9e:6c:06:dd:d1:bd:36:ec:0b:18:12:df:86:ba:62:fa:bb:34: fe:2c:e9:ed:44:db:94:dd:45:8c:f7:bd:84:c7:73:77:6a:e4: 6c:82:a4:22:2c:ea:fe:f7:e6:16:61:61:05:71:2e:c5:18:4d: 0d:cc:3b:2b:7c:ec:64:51:96:f4:a0:4c:7c:6c:1a:a1:05:06: d7:77:d5:a1:02:41:ca:ee:c4:1a:c1:e5:21:27:24:3b:d3:38: 6c:29:63:dd:07:3d:f4:dd:f7:bf:78:07:48:b8:4a:49:54:d5: 20:f5:37:67:c3:86:0d:cf:ac:93:62:a8:74:fe:a5:a0:ed:cc: 7a:e2:7d:db:a1:06:1b:65:97:c6:aa:d2:c8:76:51:49:22:2b: d1:88:81:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZyLz7MGG9C7JrvfITeJRWLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl NGQxZDcwHhcNMjUwNDI2MTMwMDIwWhcNMjUwNDI3MTMwMDIwWjAzMTEwLwYDVQQD EyhkMjA0MDYwMjE3ZjM1MjgxZmQxYTkzN2E5ZjhhNTkyMjg4NWE5ZDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw82rLWsE4cdqtUEnDgD9J6CA323N 0YBerQXQhuodxXKKjYUvHo2HIxa2nhSN/RM7ZmVgsMd+MHd5XGkFiKRkkaWkTw5f UJyN/qHLWjrpiJPGKTA14Hsg7gSJMt6IkbFBWZ9LYaYq8Hag1U+9N/y+UR24u1lZ NATFjtjLvyWNFDcz9OAqMnSXTIC6lZocn6Sn9cfyKwq11k1uNTkoRcyTeJgIl5Ej bLE3MoLPR15VXxzi+5gagG0B93CGmjTi6bBYkHfv2nLb2+3MY+0wbaXnfcj3CPTF vn6CLwHUxcx41Nkm5TkFCRxEPwf6sMbAqOiN9UzwtihG16Eo9oMMWI/wxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNIEBgIX81KB/RqTep+KWSKIWp0jMB8GA1UdIwQY MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt ZGRmNTY3ZWRlZDAzLzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIaFej0k 6NF88KF6UBRxZiwDcTaI1BegIjI7CaPiC4hjan21yGF5GnVtRbh9Svw0BmHLeonH atBOIOIWbyW2aDA2ROwML7FPfd6A9qTGOpfn+YDZ4Tu9aUa5ty5TfjFrF/fp9Y9t Gvq5duRXnmwG3dG9NuwLGBLfhrpi+rs0/izp7UTblN1FjPe9hMdzd2rkbIKkIizq /vfmFmFhBXEuxRhNDcw7K3zsZFGW9KBMfGwaoQUG13fVoQJByu7EGsHlISckO9M4 bClj3Qc99N33v3gHSLhKSVTVIPU3Z8OGDc+sk2KodP6loO3MeuJ926EGG2WXxqrS yHZRSSIr0YiBJg== -----END CERTIFICATE-----Generated at Sat Apr 26 20:18:32 2025 by rpki-client