$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft File: 8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft (raw, json) Hash identifier: ekkJ4welokbohkIbDHdR2ZqK+SjXeSSvcADDEvauVOI= Subject key identifier: FE:14:6B:80:92:CD:E1:7C:30:82:11:92:68:EE:E7:31:65:CA:AE:1E Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d Certificate serial: 0196760BFE012724492C6A6F1A2973A542C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft Manifest number: 15ED Signing time: Sun 27 Apr 2025 07:00:19 +0000 Manifest this update: Sun 27 Apr 2025 07:00:19 +0000 Manifest next update: Mon 28 Apr 2025 07:00:19 +0000 Files and hashes: 1: 1-pkoPKMCZ9qOJcUpbg4SD3YM82I.roa (hash: fr0BGqmmgkymb/Io2tWlqm6/TRfrQYD5zH4bv2liAY4=) 2: 8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl (hash: X54qNCYdXGH0ZpkPxwMElfcF2vPJBYyYNKiBKVXjT7I=) 3: AMAwp6VcPHRw-QKe79lcrFcU19Y.roa (hash: 7tQw2Qq7bBZ1uCaMQ14QDglKar+luUjoIxeh5RB2w1o=) 4: AkeW0dNO6HwoGorE-RVkvkd5lYI.roa (hash: cFEnsrh1nsOvG/GU22O2yZ4HJtAwycOwC2PtRPjLqBI=) 5: B1142MZmoWC79cU7wc6SpTqGiyI.roa (hash: ho8/5G5V6c0C9LD1lAUutQeKnpgOVsvxXS6BHwKivQY=) 6: H8YJLWnpWipMvgIr9ji5smf4Tfk.roa (hash: M3PeYVw02zCqgGsGWVEqY9NDqtJ4pOhlFV2aXiG2+JY=) 7: KbXum3tGxYpXO3QIbsz4v0Gc9YE.roa (hash: Xdbf5vp7RPXfCgiOaz1rHhCCOGhSA6vAYCYI/x90YU0=) 8: Nx6plveuESXQK8zHN0saWCNgZtg.roa (hash: QL/uKZ/nr+28xsvZGhgIMqZgRaxPkWfGMmZV7z027VM=) 9: PXz0xECU6TjhYqxiIXtEO5Wt6wc.roa (hash: IQ6HG99adaSd4g8dYN9Tq5G654BtgGfHZKvbtQePiBg=) 10: QUqReStf6TEFnsU1tSixUGPYTuI.roa (hash: K60fCDp86LLBo6obO2VN9uWaTquDob132b4Q/cH5WYU=) 11: RRXv77ic8-YnL2L0BrEWnnilces.roa (hash: oObWYvqL50IXeyb91XFkxYV2GVpxyr296NJwG9LKFJk=) 12: TW2quqEtMmBMtjFETxrg2LVk9Oo.roa (hash: 63aKh4PjYXwflLNSYPKfmuOdFvd6LVwJFipNOxlRjJI=) 13: U3eAzBYqlS5ny3loqC6d-X4pjFc.roa (hash: EJBjhB6YSDKCWSO1xn35SUiNwifHM1pCOrpPoOsV3vc=) 14: WZKLhLcb_14f65w-Gxi0P7Y4PGI.roa (hash: rd8mwsH5vvMfna/I2W08kC0v/oG9b9ll9tJk/Yl4I2o=) 15: XIL4KgKm0A4SvgCDqXS0umj0IHs.roa (hash: dU5jOvpnr6zhMIB71IuVm99Y99FhDfkWY/tGsCNXEh0=) 16: XLs5m7yFpYbQixlyQEPtxV_7mOs.roa (hash: Fghw0ZM8qJSM1Rk38Og5x502OtV7xRwTHNOwSJX4CJo=) 17: XYbT6yP37MVQytRjz04BPPzPYOw.roa (hash: WCX0oeshrNGios6moKGDBW4fxHN+erXZ54ZsoxBsG1c=) 18: YJCi9AWh99xuK45xoYGOeQ7CnmE.roa (hash: Ti9BtXIsKFet++HwcTL4uva9A9w4W22YtG5seAitsY8=) 19: ZasgQLj553uShFx9qygvcO1idVY.roa (hash: xV4yVjOGaxnmU8uKE6oE/eSTkUdEZQ/Ub4WuQWWJos0=) 20: _DWZCZ1si8aBzqMNIm8Ef7GE9Eo.roa (hash: s4OAbwWH4R0XydqNCXaiEZGXYXtwOtGgb6PW+nNqG2U=) 21: _NcltatYeskVsJ2GmWYQEOtBuzU.roa (hash: EFUSsiFNwzbPc+B6nty0bVOEIqERfMB5igPoEOdQ1Ow=) 22: _QCxwAq-k7LQw-EmdOYTMT_eliA.roa (hash: xW9tEMrch7FL9cOEEkUAJ5gQQWQOkRdx57dNWkZzRGs=) 23: arMtKMIP71-vKvUAgp4clBsMWok.roa (hash: tYZYrtz6Qwf6eAJhxSX8JcByWBMLnLzyGmAuVNAgGeU=) 24: cmkgGNwAjlwl-nXBDnQsuZkaQjk.roa (hash: GH4mAasSrVefCL06doAPOCgwr9kOuVQg7pmr2jmaWv0=) 25: pAaBglS_ph_lomtz_pi-YWsNz74.roa (hash: +DNf/G42yq93h12+GOLlNd9IxjCcQ12CMJ+kjCCl/Cw=) 26: qq4fM1ObQGyaLMmavbeC_4huAhs.roa (hash: uj3kwNGwI3ye+3/FlFrfR0c/PIhlj04gSoV4ikzeXw8=) 27: sJ8MWzOJrRSDCEy5539zFEW54Fg.roa (hash: SrkAclwJ6pGZe3QnLXmTkQWct0fK9CqayvHKB5l708k=) 28: tIoiJqn_Zw4bkifEyWUceFVpDXE.roa (hash: +3bSV4N3AQ7/Wh4s2xd9vZBKmvEVCXYmroX/aifAP+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 05:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:76:0b:fe:01:27:24:49:2c:6a:6f:1a:29:73:a5:42:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d Validity Not Before: Apr 27 07:00:19 2025 GMT Not After : Apr 28 07:00:19 2025 GMT Subject: CN=fe146b8092cde17c3082119268eee73165caae1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d2:15:92:e8:23:24:8c:b0:b1:fa:14:cf:0b: b4:0a:d8:e4:aa:df:92:c1:b6:8d:d8:af:a1:c8:53: 9e:02:4a:28:a2:6f:40:51:c8:de:71:c0:8b:3d:c5: 36:fa:69:56:ad:8b:f8:f4:c3:50:65:ca:7e:51:99: 39:ca:c5:81:89:80:35:6e:b3:3d:dd:88:69:a2:3d: 23:b8:02:35:62:60:1b:60:ae:1e:2c:5d:05:06:ae: 5a:9d:a8:d6:ef:93:e0:41:a0:73:2e:9d:e4:f6:c0: ec:3f:f0:1f:43:3d:f4:c1:2b:28:4b:25:8a:d5:c9: 91:56:f9:12:b1:09:65:c4:2f:b6:94:3d:7b:80:1c: 16:36:78:64:38:96:03:d9:c2:0f:d2:a6:26:24:b3: 50:4b:34:50:93:6a:90:f0:9d:b4:1f:1f:f3:65:c0: 7d:86:2c:a1:c9:fc:34:f2:b4:a5:fa:b8:1e:db:7c: 43:c1:1a:94:bc:aa:1d:a4:35:4e:e1:f3:75:1e:83: a6:8c:61:69:16:70:da:ea:fd:21:c9:08:0f:bd:b4: 7d:c6:c0:3f:7e:b7:52:b2:0f:13:9e:fe:f7:2b:01: 15:05:92:7d:bf:26:d1:2a:ea:d4:50:06:7f:e5:97: 38:fe:54:de:94:5f:ee:8c:f4:2d:76:9f:e8:59:17: a0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:14:6B:80:92:CD:E1:7C:30:82:11:92:68:EE:E7:31:65:CA:AE:1E X509v3 Authority Key Identifier: keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d5:0c:a2:55:4c:35:bb:7d:b0:d6:12:11:66:69:ae:ce:0e: 14:53:11:92:0f:62:59:aa:92:30:36:12:0c:ec:2f:9a:84:2a: 98:8f:a7:db:27:80:0f:4b:44:1f:8b:dc:01:4e:9b:f3:c5:fe: b0:41:7d:28:2c:56:33:db:64:0c:54:30:a4:77:76:1e:83:f7: 1f:75:0d:95:8b:2e:0a:4e:1f:93:09:0e:8a:0f:cc:47:b5:a1: ad:6f:33:22:65:cb:71:ff:e1:82:74:ff:8a:f5:27:fe:d6:13: 49:53:d7:3b:2a:cf:ba:b2:09:94:07:6c:9e:dd:dc:ee:9c:41: 93:a9:3e:9f:96:ea:0e:b1:05:2f:e9:a0:27:f5:e4:99:9a:7e: 8f:dd:65:04:e2:7e:32:bb:89:84:11:c1:20:84:10:fc:ba:26: 82:8b:21:f4:d0:e3:71:38:4e:5f:d4:08:c0:b2:48:b2:87:6c: b4:b4:c8:7f:96:49:05:1d:47:b5:95:12:73:88:67:93:a2:29: 37:14:b9:4f:67:37:50:bb:36:7d:f3:8d:3c:8e:68:45:4a:e0: 49:e4:f9:b4:a4:92:ae:6c:cf:cb:55:8b:31:35:fa:eb:a8:62: a7:8d:f0:62:1e:aa:49:29:17:d2:81:c8:1c:9b:2c:d5:c1:51: e4:e7:49:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ2C/4BJyRJLGpvGilzpULGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3 MTE4MGQwHhcNMjUwNDI3MDcwMDE5WhcNMjUwNDI4MDcwMDE5WjAzMTEwLwYDVQQD EyhmZTE0NmI4MDkyY2RlMTdjMzA4MjExOTI2OGVlZTczMTY1Y2FhZTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNIVkugjJIywsfoUzwu0Ctjkqt+S wbaN2K+hyFOeAkooom9AUcjeccCLPcU2+mlWrYv49MNQZcp+UZk5ysWBiYA1brM9 3Yhpoj0juAI1YmAbYK4eLF0FBq5anajW75PgQaBzLp3k9sDsP/AfQz30wSsoSyWK 1cmRVvkSsQllxC+2lD17gBwWNnhkOJYD2cIP0qYmJLNQSzRQk2qQ8J20Hx/zZcB9 hiyhyfw08rSl+rge23xDwRqUvKodpDVO4fN1HoOmjGFpFnDa6v0hyQgPvbR9xsA/ frdSsg8Tnv73KwEVBZJ9vybRKurUUAZ/5Zc4/lTelF/ujPQtdp/oWRegIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4Ua4CSzeF8MIIRkmju5zFlyq4eMB8GA1UdIwQY MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt MDQ2ODA0MjQ4NmRjLzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9UMolVM Nbt9sNYSEWZprs4OFFMRkg9iWaqSMDYSDOwvmoQqmI+n2yeAD0tEH4vcAU6b88X+ sEF9KCxWM9tkDFQwpHd2HoP3H3UNlYsuCk4fkwkOig/MR7WhrW8zImXLcf/hgnT/ ivUn/tYTSVPXOyrPurIJlAdsnt3c7pxBk6k+n5bqDrEFL+mgJ/XkmZp+j91lBOJ+ MruJhBHBIIQQ/Lomgosh9NDjcThOX9QIwLJIsodstLTIf5ZJBR1HtZUSc4hnk6Ip NxS5T2c3ULs2ffONPI5oRUrgSeT5tKSSrmzPy1WLMTX666hip43wYh6qSSkX0oHI HJss1cFR5OdJJQ== -----END CERTIFICATE-----Generated at Sun Apr 27 09:17:45 2025 by rpki-client