$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft File: 6AHyPOghwmTWdydTbsGDU3WUxfI.mft (raw, json) Hash identifier: UNAGb0UPBvAdTzCZd28NwwuziIDTFTGywO+v0hBFfaQ= Subject key identifier: 80:45:5A:76:99:53:E5:73:7E:B1:CF:AC:C7:7E:D8:57:00:81:3B:37 Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2 Certificate serial: 01967341E320EE1006C314240D0CC0B11F50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft Manifest number: 1517 Signing time: Sat 26 Apr 2025 18:00:19 +0000 Manifest this update: Sat 26 Apr 2025 18:00:19 +0000 Manifest next update: Sun 27 Apr 2025 18:00:19 +0000 Files and hashes: 1: 1AY-3wX89pHsKMEMJWGHTHsJ8gI.roa (hash: isIoAb0bdzc9Cbbslo3RKCKles0GJe6/bSmHAxkyj+A=) 2: 21W9uhOLCfGBSLMK8xlCrH8tOg4.roa (hash: AjEuF2+0cRLXo4E2JHpp6w+dtVFDkzA5bZ7j4AtGGgA=) 3: 2nB34LVBbtl74aGRyrgO8R7Ndlc.roa (hash: vcU/vsmwMZU339dKKRVuUgWsl3f587fyzQ0cKDXFwYs=) 4: 36o_asZrpJckrJYtCQ_3cyS6VxI.roa (hash: n+NrjdHAcQK/VqsswfVMbQbVU4jqmrrdhbmTvGV91ts=) 5: 4YclLAlicy2DcCNHws_6seOTF_o.roa (hash: MDIYzRbkjVFgI1Ats/352Yqa0tN/SB9gbJGmZv6PQg0=) 6: 6AHyPOghwmTWdydTbsGDU3WUxfI.crl (hash: Z4dgH8bGfx5R0Umm6Gum1D3furHH2h/RfAk4Pn7SPoY=) 7: 7QqVIV8LUR5c1jRBC94m2154ry8.roa (hash: TrmmIYdBlXXb3FxJhiLUTMljo4lEhT6KOCibHbFmEAg=) 8: 9K0UiUtwMeDGLO07jN4cphQ0NhA.roa (hash: iD28nbSB8h3AMCMtfL1dVEifxVKaj30VOiCxNvUpdlc=) 9: FQAhyrS0gBW9SqtuZi6NPEvhgvs.roa (hash: b2xzO3i1ZOAXGwMPX7/Wy40sppb1tn8N9pURrf2iaI0=) 10: GIbN6bPur810JuGuHTYh5u7F5NM.roa (hash: Oikl7sXMAHs0Y+UGW9FTy+uNhN71zF966LLlZ+ZYmZI=) 11: Gyz6a3KXlcszmeD4XP7JYSSJB98.roa (hash: AzG7hu1mJnSnaE2NJTDYkswyaDmFnEmOHi9jFFpjg7U=) 12: I5CoNuYa1QHmdQ9Kc75dGAMDAcM.roa (hash: k45LeIb2ZuFIg9nv2VIXeMwWDcrg/6igPHCTVBEmt7c=) 13: KDbreFm6qa86qVWPbMSXjiRJb_s.roa (hash: 1MEUcBOj0QBk1+QfUlYD7XLcRWpZwRWbbrAL7ZihjGM=) 14: ZT5okXQpCE1L_UFUxKGgKpmWveI.roa (hash: ApTwm5XOwO8lK1KOUvV88VBx+9bwwdRBzVYLDFE5Eqo=) 15: dlTZMeVOmH-sGjLKfnpWqcWWk2s.roa (hash: DB9sfDl87OFpyZ/nDL1JNomcxUe0WBEVSpKL3sB9cVU=) 16: dxiJRbb0rG53Lq98f0i5g1Diw3E.roa (hash: 9/nhvqiEnr8fAWmfTM/kuetnXqSQzx8yP5QO3uiQqGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:73:41:e3:20:ee:10:06:c3:14:24:0d:0c:c0:b1:1f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2 Validity Not Before: Apr 26 18:00:19 2025 GMT Not After : Apr 27 18:00:19 2025 GMT Subject: CN=80455a769953e5737eb1cfacc77ed85700813b37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7d:2a:92:1c:aa:cb:25:2b:da:46:05:f2:89: 7a:1f:cb:62:93:50:5e:54:f3:fd:24:4c:59:ca:e2: 15:8d:9c:09:49:14:2c:fe:d1:8b:ba:69:4a:c5:60: ab:62:35:18:a8:45:af:fd:d0:27:84:fb:a4:d1:8e: 56:64:a1:a1:6e:fb:b4:af:17:53:bc:3f:01:29:b0: aa:0c:0b:fa:68:0a:c5:68:73:0d:59:91:36:89:ff: 84:79:a4:dd:b5:35:cc:e9:39:c9:b1:45:4c:39:a9: 3c:55:8d:88:16:6e:f0:ce:7d:ab:97:22:00:4f:3f: 3b:a9:39:5c:5f:21:6f:00:06:14:dd:0e:b1:2e:7a: b8:3c:81:a0:74:cd:ee:73:00:b0:02:e5:79:a0:16: 4a:2b:b3:8e:e0:6a:01:e1:31:da:28:2d:42:52:b8: da:30:21:3d:e3:62:de:af:c8:1e:07:3a:a2:97:b2: f5:dc:47:83:cc:9d:2d:86:e5:0e:84:d3:bb:85:c0: 13:e0:79:ec:0e:f6:28:7a:9e:e7:a9:57:bd:c1:63: 87:ce:10:a8:86:9c:3c:03:57:52:15:e4:44:1f:c0: b5:6b:51:17:14:2a:a9:17:fe:ae:06:43:b7:77:76: d1:65:7f:a3:ca:5e:bb:07:d8:bf:a4:2c:e6:e3:cc: 88:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:45:5A:76:99:53:E5:73:7E:B1:CF:AC:C7:7E:D8:57:00:81:3B:37 X509v3 Authority Key Identifier: keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:da:51:11:e2:48:aa:ba:55:94:d5:d4:30:4b:44:13:7b:ba: 41:d2:29:19:96:c7:97:54:ad:ad:0b:b2:61:bd:f7:9f:01:4d: db:d0:78:54:5e:43:75:6f:77:88:df:ca:98:a6:62:cd:77:37: bc:36:8c:2f:84:e9:78:4b:a0:fc:88:59:0d:b9:cb:94:2d:e9: a9:e8:00:2e:50:44:25:41:28:d1:c7:87:64:de:5c:3d:64:00: ad:9f:c1:b0:60:b1:95:55:96:81:42:c9:eb:1b:d9:21:e8:0a: d9:2c:29:62:b2:27:44:b8:b2:18:b7:ab:fc:bd:9f:9e:44:f0: 32:96:66:32:67:4e:0d:c0:88:f3:72:17:1a:52:c5:58:79:25: d2:f7:c0:1d:cf:15:00:9a:f0:a4:16:85:3f:17:8a:63:14:fa: 75:b6:5a:fd:0e:30:77:4e:a0:4b:8b:df:91:f2:dd:1d:b3:c4: 39:4b:88:8d:d5:62:6c:c8:0c:04:dc:a2:a1:64:d5:1d:2a:35: 70:d7:16:e6:2d:b1:a3:31:4e:cf:a3:dd:68:fb:a5:d4:d4:e8: 28:0c:cc:7d:79:36:14:61:af:d3:89:52:3d:62:82:14:9d:20: 34:a9:22:9f:fb:97:c9:cd:9e:7a:ca:01:6a:a9:2c:2d:0f:5c: de:66:7e:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZzQeMg7hAGwxQkDQzAsR9QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MDFmMjNjZTgyMWMyNjRkNjc3Mjc1MzZlYzE4MzUzNzU5 NGM1ZjIwHhcNMjUwNDI2MTgwMDE5WhcNMjUwNDI3MTgwMDE5WjAzMTEwLwYDVQQD Eyg4MDQ1NWE3Njk5NTNlNTczN2ViMWNmYWNjNzdlZDg1NzAwODEzYjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn0qkhyqyyUr2kYF8ol6H8tik1Be VPP9JExZyuIVjZwJSRQs/tGLumlKxWCrYjUYqEWv/dAnhPuk0Y5WZKGhbvu0rxdT vD8BKbCqDAv6aArFaHMNWZE2if+EeaTdtTXM6TnJsUVMOak8VY2IFm7wzn2rlyIA Tz87qTlcXyFvAAYU3Q6xLnq4PIGgdM3ucwCwAuV5oBZKK7OO4GoB4THaKC1CUrja MCE942Ler8geBzqil7L13EeDzJ0thuUOhNO7hcAT4HnsDvYoep7nqVe9wWOHzhCo hpw8A1dSFeREH8C1a1EXFCqpF/6uBkO3d3bRZX+jyl67B9i/pCzm48yIUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBFWnaZU+VzfrHPrMd+2FcAgTs3MB8GA1UdIwQY MBaAFOgB8jzoIcJk1ncnU27Bg1N1lMXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAt NDY0ZWIxODNiNTY4LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAtNDY0ZWIxODNiNTY4 LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu9pREeJI qrpVlNXUMEtEE3u6QdIpGZbHl1StrQuyYb33nwFN29B4VF5DdW93iN/KmKZizXc3 vDaML4TpeEug/IhZDbnLlC3pqegALlBEJUEo0ceHZN5cPWQArZ/BsGCxlVWWgULJ 6xvZIegK2SwpYrInRLiyGLer/L2fnkTwMpZmMmdODcCI83IXGlLFWHkl0vfAHc8V AJrwpBaFPxeKYxT6dbZa/Q4wd06gS4vfkfLdHbPEOUuIjdVibMgMBNyioWTVHSo1 cNcW5i2xozFOz6PdaPul1NToKAzMfXk2FGGv04lSPWKCFJ0gNKkin/uXyc2eesoB aqksLQ9c3mZ+pw== -----END CERTIFICATE-----Generated at Sun Apr 27 04:10:26 2025 by rpki-client