$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft File: dGNlNVtmVWSiEMNYxooBF7f765o.mft (raw, json) Hash identifier: OqHw6YHo/5MnMKz5MELZwV5hn4AqjYwJKS9kTAnpymk= Subject key identifier: 44:38:5C:78:E7:25:94:61:A2:C8:58:EF:A8:62:1F:15:1D:41:97:78 Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a Certificate serial: 0196737947DC92BF7C237575D928046C6D76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft Manifest number: 1573 Signing time: Sat 26 Apr 2025 19:00:50 +0000 Manifest this update: Sat 26 Apr 2025 19:00:50 +0000 Manifest next update: Sun 27 Apr 2025 19:00:50 +0000 Files and hashes: 1: 0Z8yTYlKjkqvKh6kY-kM6OXYfz8.roa (hash: fwm0Gtt1RFKV50/Ms+CgVe/rwlPJ9Q3VLzTFIW1v2aw=) 2: 1i1h10HKuKMLFRXN4cBGZ2mRyJM.roa (hash: 7JEI6UNI/BK6+fsUZu0VQIRD6uiIejb022WVzNTlPqI=) 3: 4AhKQoLmAk1YQIBQspZfyfaiu0s.roa (hash: 1kEaOXNNkPEAuTvrZqrQmCGg/Uu08f1ofkHwiva1rBk=) 4: 8xmePB-pGcDcrQ-prX4UP_SBy78.roa (hash: OO9rzem914ccJuV3c6Pdstzz47bnogLMsoJtrFTJhQo=) 5: 9nwJkf06ywYV97ycnHX8xephiLw.roa (hash: E/N+tJSxegWf0b+66cYXz6Gw0s8y/7JfEZqjs9iWYvA=) 6: DyQ9EAiN0eniPyiox4aO244F9E4.roa (hash: bvLcpK55XH5/x9SBXkmzsY2x244oXbWNkS01fsXCohs=) 7: G1nDGEYcV0zuKzKuOXzDx75r3GI.roa (hash: 41u/KL+MWJdDf84HJGznj8QmpQB0mJMrGBzkwlxjtIc=) 8: HtGtnD1WG-uR4lNZ5h-A8-pjUrU.roa (hash: JiGHlI4PQlUWbSzc2TBFb2wXm1bs25OSgaV13SVkmqE=) 9: JRiOk_2TKu5CUeBn01ifQfYvtpU.roa (hash: 52AVuY7yVBdnGxwlkDBVy4L+oi28x69yEyj+PS6Tyh0=) 10: PQouGTOckW4W12cc4d-xjaematA.roa (hash: Kckr0tsSpm5YRyOoyFHZZMP1JYibeLXzK7UoR9DsQbM=) 11: PVKwdeX3NyiQmgk2A2820t7cOqs.roa (hash: 26tO2fkoICp4JASDnIMTpkdHS90b8zIixKpW6hSIQzc=) 12: TQNP6hoAf66GZWfHy5k78DAiiCU.roa (hash: uABddS+djXpmQc7iz2KFGbyJ5oeYnTC/ey9Ec918mow=) 13: UMHCyN1PhpnvoYUbs1CT_48YLGk.roa (hash: i765qk64qL4Uog5FTQxpy5y2jivRwNCYq0ub5NcQaLk=) 14: V51fQsmdOucWQLFJANFvs_Ma2i0.roa (hash: mhzDbXcVW4r5ZjsZqcqDKjjyLnY5MIVjnfy6m1yWpyc=) 15: V5HLYQX7OEpLFK_MH5_sUYR0JBQ.roa (hash: 6cm5gNEppEG5XD2KabFv9dmbCHQEnB7rCQFwcW30ZWM=) 16: WWDr2Um8NXXwWukbK6cj1BF3t7Q.roa (hash: KB4bFVPkGqmvCaRGbBdpA1si7s9CexKnU66M/mHt/0s=) 17: XZET7dFa5OoJqf73WGd1UHo9Trs.roa (hash: FbxqvpbDfsQRYaW0n//PgGX2T+UQY1wiBpKlSWUYJQg=) 18: dGNlNVtmVWSiEMNYxooBF7f765o.crl (hash: HSfWBCK+jv2gJ/ZZTRJP6zlaBElegmybQ7M8ypfumU4=) 19: dc2g-kIH50S7LA2o26AVsv4LItA.roa (hash: anV8AfiZnJM+uW7z2xYGvooxLoCl6L/cGFCY34WgBTU=) 20: g3gXDyn1r3CKRtOkIamh9XiFNXQ.roa (hash: bsh/frVfpWjiiUA/IVdx5lj5UBB7HEuHeERH5RVXbJU=) 21: hbkDGu-27NQwuA34KKvsthuBpoc.roa (hash: gs4QclFDIW6OH3AQHoXwFFecYQ+OpwQ25vhb21IUnck=) 22: iHslhtFiuKaugZuIjgDSTM4F6Sk.roa (hash: 43DehRvyD4BSrfqUpPUdy+zsjmfPk1hQcSdYylB1zpo=) 23: jmqPtt5Ns_W-iBFLphm9TOPqcBk.roa (hash: Q0XLFkj7/QEzPnBRybOs7B/q1S4uk4+SdVBsy+OCL8U=) 24: m095Z-7KR0K5gXucbWhKiz12Uqg.roa (hash: pKKUCvxcyqiDYUVY3jhLgvu4uMJ7RTYnDW2HPLpWkkY=) 25: nMVuUhhQLd_p2MmIFg0uk6oN0DA.roa (hash: VPC3QfM3Xk9o/TFr02RnouDa7yDlwB8VvuZ6tJbURMA=) 26: na93BrU5ShpCOO3gSaEqJY-3lT4.roa (hash: jsEtQ0ZWxD7UTjfus61ic0m3WTlswJgMUxwjfxzFL4E=) 27: oEbBV7xx5_jwLtoklKva4-Dg2v8.roa (hash: i+aaCmiUXCVg0OPcM0SwO92pJsKLDZGoxx/fXdMrMgQ=) 28: oQY8Ggs-WHGozgLdlzn62PGvTmo.roa (hash: Rm3b27WZnppZmsClSvXbSesr4c+ogRwCEVrSLNbiwvA=) 29: pxlKKbY5iFrGDh2EplDOpH6i83c.roa (hash: NzuvlzBZxwuFwdNVVQbFAXj9HW/JV+FHbP6jYRM1epA=) 30: r-97pPvj-RimUl1469wxiEjOXHw.roa (hash: BJihjsrYYxzSHh3xQ0PZJNW0AKvTbj8ZG/b/oUaGZaU=) 31: sTAcEeIlslVpuXMYkyeJBskGwEo.roa (hash: sDqLs0eEA0fKuxXHljiO7Zt9np/B1YWaKWKNaP6grbA=) 32: si-h3EMZPum7ZeFVKrM-JgEvS5s.roa (hash: e6RNF3nCZ80GPAqffnrYJBWzKtbs1gbwLTkQ6jY31gw=) 33: t2bPxtc37O7_UaSx43VqFjBQeQ8.roa (hash: TQAVmYhnwd2Kv49WbSb4VDqVmwGOcSo0dPabg2IvysA=) 34: yQrQFduK0DtQ87ggKb7Q-woZC_g.roa (hash: JZkejbipvDPpwEzOuopgf48bMCeYE8xwPOaWUFT0b6w=) 35: yTFqO5xiaIDSCJNJ_ZUqbKSypdQ.roa (hash: zRFFAOZDcEueQQ2liuDNq8EtejJKoUyry9Flbp6zROU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 17:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:73:79:47:dc:92:bf:7c:23:75:75:d9:28:04:6c:6d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a Validity Not Before: Apr 26 19:00:50 2025 GMT Not After : Apr 27 19:00:50 2025 GMT Subject: CN=44385c78e7259461a2c858efa8621f151d419778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fd:fd:a5:42:43:79:f3:dc:37:07:dd:80:d0: 01:bf:38:77:8c:39:95:ec:a4:88:8e:2a:39:4a:b7: 49:13:02:b2:50:90:f5:e9:7c:86:b6:b7:39:54:71: 96:29:3d:82:87:32:99:0d:c1:a3:70:e0:c7:3b:d3: b1:bf:4b:ec:36:2f:1f:8b:a9:04:d8:00:79:f4:a6: b3:3f:25:2b:82:ae:29:d6:69:f8:8a:17:b0:4b:b4: ed:3f:b1:37:ab:29:ad:17:9e:42:4f:f0:de:f1:3e: c8:03:c3:0d:8d:39:05:18:36:0a:44:e7:92:98:be: de:e3:b8:94:ae:58:9c:70:b2:22:e2:24:6c:6e:e0: 56:23:8f:bc:2d:13:f7:09:8a:90:56:a1:51:38:b7: a3:f0:81:d9:c4:04:7c:b4:cc:4c:ea:35:2a:af:00: a8:6b:ab:4a:ae:ed:41:23:b8:b1:1b:f1:c7:35:d8: 36:ec:20:44:17:83:1b:19:2f:79:91:98:3f:40:84: 85:33:14:8b:5f:22:ab:9a:d6:cf:f0:ec:60:48:5d: 14:de:a9:d1:52:83:e6:67:a3:a3:df:c7:92:f1:9d: a7:c0:e3:91:9f:1d:bc:9e:25:87:26:46:98:ce:b5: 0d:d1:48:e6:66:42:b3:a1:c1:b9:c8:d4:b7:cd:9f: 06:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:38:5C:78:E7:25:94:61:A2:C8:58:EF:A8:62:1F:15:1D:41:97:78 X509v3 Authority Key Identifier: keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:fd:dd:18:c8:51:0f:ec:73:9d:c0:40:ca:f9:41:32:15:97: 12:15:e7:ac:0f:2c:93:1b:be:8e:65:9a:8d:89:23:90:03:66: 5b:1f:80:fa:ee:59:bd:19:a5:38:0c:02:5c:24:10:c8:10:a5: 3f:a6:25:1b:9a:fe:cb:e2:ce:cd:72:28:43:16:22:b8:fa:f9: 51:65:38:47:7f:79:b9:1b:37:5f:30:48:cb:e9:d8:22:c7:d1: d5:0c:60:95:d1:c4:10:15:a5:39:ff:c4:c6:cb:0c:2e:8f:24: 9f:43:63:d4:01:9e:c1:ea:28:be:c7:e2:c0:fc:9e:bb:63:01: 95:53:15:6b:aa:c2:c2:e8:67:9c:74:bb:89:17:db:e3:12:f0: b3:90:53:da:5c:14:df:5c:45:b7:da:a9:05:3f:70:86:50:c1: e6:ea:46:e5:8f:f4:cc:44:2e:59:1d:fc:79:17:35:f6:2b:17: 5d:7e:9d:b1:05:16:21:1a:76:b4:56:1a:c8:6e:ea:9f:06:3b: a3:67:46:9b:43:e6:9a:dd:29:e4:0f:5f:7c:c4:bb:ee:c2:db: fc:62:de:8d:c4:5a:f8:ee:5b:1f:6f:1c:20:db:df:ec:c4:c8: 4f:ab:03:f4:e1:7b:aa:25:81:c5:25:f5:e1:fa:72:36:cb:49: d9:e5:8e:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZzeUfckr98I3V12SgEbG12MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm YmViOWEwHhcNMjUwNDI2MTkwMDUwWhcNMjUwNDI3MTkwMDUwWjAzMTEwLwYDVQQD Eyg0NDM4NWM3OGU3MjU5NDYxYTJjODU4ZWZhODYyMWYxNTFkNDE5Nzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/39pUJDefPcNwfdgNABvzh3jDmV 7KSIjio5SrdJEwKyUJD16XyGtrc5VHGWKT2ChzKZDcGjcODHO9Oxv0vsNi8fi6kE 2AB59KazPyUrgq4p1mn4ihewS7TtP7E3qymtF55CT/De8T7IA8MNjTkFGDYKROeS mL7e47iUrliccLIi4iRsbuBWI4+8LRP3CYqQVqFROLej8IHZxAR8tMxM6jUqrwCo a6tKru1BI7ixG/HHNdg27CBEF4MbGS95kZg/QISFMxSLXyKrmtbP8OxgSF0U3qnR UoPmZ6Oj38eS8Z2nwOORnx28niWHJkaYzrUN0UjmZkKzocG5yNS3zZ8GIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQ4XHjnJZRhoshY76hiHxUdQZd4MB8GA1UdIwQY MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt NmE0ZWNhZjhiM2IxLzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMP3dGMhR D+xzncBAyvlBMhWXEhXnrA8skxu+jmWajYkjkANmWx+A+u5ZvRmlOAwCXCQQyBCl P6YlG5r+y+LOzXIoQxYiuPr5UWU4R395uRs3XzBIy+nYIsfR1QxgldHEEBWlOf/E xssMLo8kn0Nj1AGeweoovsfiwPyeu2MBlVMVa6rCwuhnnHS7iRfb4xLws5BT2lwU 31xFt9qpBT9whlDB5upG5Y/0zEQuWR38eRc19isXXX6dsQUWIRp2tFYayG7qnwY7 o2dGm0Pmmt0p5A9ffMS77sLb/GLejcRa+O5bH28cINvf7MTIT6sD9OF7qiWBxSX1 4fpyNstJ2eWOow== -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:10 2025 by rpki-client