$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft File: oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft (raw, json) Hash identifier: iz2FdAH+u7fue8SNLElMBTPUIlvBYLK+jkVeCoBWuUw= Subject key identifier: 02:65:F8:76:6D:D2:9C:E5:A4:07:4D:F2:65:AC:47:8B:37:64:77:C8 Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Certificate serial: 0196895BF3ECBCD749796A6DB9DA505F1DF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft Manifest number: 15DA Signing time: Thu 01 May 2025 01:00:26 +0000 Manifest this update: Thu 01 May 2025 01:00:26 +0000 Manifest next update: Fri 02 May 2025 01:00:26 +0000 Files and hashes: 1: 0EOjf23f5uNRl8AKwLrSjcuzQ-M.roa (hash: TiKzyeJ1GrbpU3aFoto+cFftuRE3qJmGtPjLqVBjD3g=) 2: 1-l8IN9WmFAM_8sHp6ULKXINOpuo.roa (hash: OepTW0KIexB7Ma6Qq1vDY3wE1ZrCvSqnaxM/NAfOK20=) 3: 3a9lX76bQSJaqMppZTquI9xrjjE.roa (hash: VWrFd9vzYBvgjC7R4dgJGbGdtWDKe+wEQ3MjcA3hJGc=) 4: 5srUWfK2Cdi4wHjqlySTWyZ4Low.roa (hash: LNg07RRevBAHX1c+iNg80ZacJiC/7ZrA4U+xATH+Y0g=) 5: BkJLBllw1-ZWKgRHqGBiQqbyScY.roa (hash: 0YwDYhFvdzyYfI9IMpPvVCUOj6lVo6a8wPzczBvlz9k=) 6: CbhEbMn4AKVVqgWoX2_ZAyPcZvU.roa (hash: 20BJw7BzxjCOyEcdCPIydH+ZU0GghmGQyM/ZvZpvSVM=) 7: EDx9UJr_bR_MLAO7n7AlYPzVgHk.roa (hash: PJhAgFMtqQqa+J5NxHAYtorfHqm6JLgt9UdAzlPMssM=) 8: GIY6t8WXECqHBNB2XBzSrMQvdIc.roa (hash: ++2yNzUE5GKDvynAIsGfNfxbtdcmBjle2edzJpUiOrg=) 9: GPv7Cu3AAIV17OB2hoOeeln0z0U.roa (hash: n6wsikUe3lM4uYpVDKStgKJqtWUTWWFr66jlTc1qP8w=) 10: K_S25NvkOjpU_Bj9DbxQmJazd14.roa (hash: a1rxYtnZvodVSuCoVwHSmnvLNqe2f/aY8+zJP3kLU8Y=) 11: LIDGUWG6p3GJZZCu1Hpsr5bUXFc.roa (hash: PRox2/jLDeyB3TXExAWa7wQfqJBFS5HwT01/wjYfdq4=) 12: MI2MLphBpmPMjSMPt-CUURdJC0U.roa (hash: SxH7HYoFbVv194fh23JHJCaM+xcxOdCQONsLew0Wilo=) 13: OS_CktR-hc4-NmLRLJBYinV6euI.roa (hash: 9QN9UeCEXOiGtg3kQ+agPvu30JRzcGfSpwpa4N4C9hs=) 14: QT9Y49Ocn7S1NlWkR85dSIq7Y4E.roa (hash: yheorWCDT9lcE3+NqS0jtyjeSBpJ3B/OD/QoM3nqGc4=) 15: R0dlQD847tZZ6Sme0uHqVL1A8SE.roa (hash: aqwVbQ/5C0zR8yt+iaSmmHLJT4dD7bnIMHMb82qWbS4=) 16: U0UedjwFm98ns_lAKOOXn5f0A5o.roa (hash: UJnZuL0xV2NkJnE82ZqSllhysuKGYoP0ufoIJUA/SkI=) 17: UCe95u6GACs5-LEqrQoGtiD4Qyc.roa (hash: fWIhlO/tzw5gQd0aSlrmvFLetMTNXBRD0DWVGpqMdrE=) 18: XS6PxuLhSit4pPummN3D9rt_XyI.roa (hash: 947+sGtOkf9LWyXo/fSAaJ6OjjRfkyNgwZLg86SCJxI=) 19: YjHZVJXAnKr8xh5R9wmBVaYEgXg.roa (hash: kSLUkCF1fVqfg2Z9iMd8kS34Maa3MeKt4Z6zguLvO/o=) 20: YwyROsLXS46Sx4a7dO7BvxlhzcM.roa (hash: 0Aw01zQYIIojYrmRbQn7ALYRxmwBexME2a27WU1nXKc=) 21: cPYOKrKiYT89IO9upkxHw5ZbR8A.roa (hash: J92jBclwmj0vXUCJUdBwqUYTP+Ud22YvPF211aGRosQ=) 22: eLugRLDui958XmylSjkxP3wnTMY.roa (hash: PBCwpuzp3sL6oE89Qyaa4YR3Aa/1ZZavbG6JwYcrhzA=) 23: em928uE801tncexTsiwdYgbCyFs.roa (hash: 1Ae8DHrnQc4neMkHdKNSjlxKrv6jUbvWVefMenI+FSo=) 24: iXuidHo1QSBSsFaoOTf1QHBof7o.roa (hash: SwI6517kDyPUXy1d894x4OYleQzHpw1lcJfr2I15BNA=) 25: knLIpaWN6wJ3RxuEkxRAHKiWFPY.roa (hash: dim/8umOJ6epBF/Pi+TF62ZYesagnxCU/L0WDdWu3/o=) 26: oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl (hash: amNkIRnEut3yb6a+oTsur7jYNOS7PEp2oHG4AI9lDWM=) 27: q-kzFzWdHxYVd9BrFrKLJ4d0RIQ.roa (hash: GMAkDMrzsWCnVos+xh1WbimGMP/CqMUvIS+tRaFTcOw=) 28: rTXg68wsMIftLmpexV7EYbNGuq0.roa (hash: oUuz6Mh1F7BCjTAodcbrClwpt+TS4kM1ywRGR/A1/uk=) 29: rYugMFgVZ8X-I2-jsX4dF3aTxvQ.roa (hash: k+GFKByMw5K8SoNqNuEda0gdRBQB4x51TeQEsjZVh6w=) 30: rtz3qC9idXx0_hTVcLvfRzUUQ90.roa (hash: 7y0gqO8gR/cVJ2yXfPcNMo6vDwpg4ULFhgIIv/G88ls=) 31: sRonNrCs6y33jenHcvZ1sZP9aLU.roa (hash: vkQgecNTjHtzPpTMomOaK4zGpy6Af90jhrtqRzVbsA0=) 32: t4_sItGLetnCYeXERod5-ebrm9I.roa (hash: AiOBn1us05R9pPuObBSz8aWjDmfVrdiLt6SCizxK1Rw=) 33: ubTG6wM5WMjPJjVlRxDKUEK_Sr4.roa (hash: hK1TX6u9txAOjU3mw0jZQz1mYIY2Z4Fk7zlDvmJpl3A=) 34: vQvAhs3X9SIrwTiZLcGRbLHAse8.roa (hash: NgpNHRkuHeYtV5T9QGV0qWm2Ew38Qqs1VxG+Tb300CI=) 35: wwk7jEvd5L4YZES1E9puWxeNbgI.roa (hash: lBMJB934mzmC5MKmNtcjd0YdBXtrbY3Uex1I8nAQBqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 May 2025 22:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:89:5b:f3:ec:bc:d7:49:79:6a:6d:b9:da:50:5f:1d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Validity Not Before: May 1 01:00:26 2025 GMT Not After : May 2 01:00:26 2025 GMT Subject: CN=0265f8766dd29ce5a4074df265ac478b376477c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:69:38:13:2d:d6:9c:2f:3b:0c:24:b8:49:65: 6c:af:e9:75:0b:46:99:9d:7b:93:91:d6:f6:74:e4: 3b:58:da:6c:46:25:b7:a4:ff:78:20:57:5e:e5:fe: 20:41:6d:8e:9f:6c:c4:17:cf:a7:20:cb:0a:5f:6e: d0:c6:87:55:11:d9:5d:4a:c0:14:b0:0f:cd:d5:d5: d3:90:f5:7c:5f:5d:52:a5:69:09:9f:c7:75:19:f8: 88:e1:42:9d:1d:4b:15:df:0d:18:63:3a:ce:31:64: 0f:87:6e:46:cc:45:81:7a:07:4f:ba:86:ae:4a:91: 83:4a:5b:b7:d7:00:44:cd:86:f1:49:eb:28:c1:82: 47:d9:05:58:48:4c:32:4a:09:53:2c:d7:86:45:4a: 3b:55:f8:cf:61:e8:a4:8a:98:14:7e:bd:37:4a:0b: 07:69:26:e3:45:4a:5e:d1:8b:09:60:bf:f9:14:ea: 1d:69:cd:06:96:ea:0d:f9:7c:52:4c:14:75:b0:fc: 55:22:f2:c8:de:ae:46:cc:cc:6b:77:e6:dc:16:91: 6b:e5:be:45:f5:6b:98:5f:07:26:5c:15:df:99:98: b9:d9:8a:7d:d2:7d:93:a5:11:95:ea:26:a7:ef:7e: ef:eb:3d:5b:e3:fb:e0:07:0d:5f:9f:ab:14:c2:04: 38:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:65:F8:76:6D:D2:9C:E5:A4:07:4D:F2:65:AC:47:8B:37:64:77:C8 X509v3 Authority Key Identifier: keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:d2:b9:0c:55:98:e9:c0:70:93:c2:8e:41:1c:55:4c:7e:5b: d3:9a:7b:e8:57:30:da:bc:9a:16:5e:17:15:09:66:27:eb:5f: a2:fb:61:4f:a3:21:03:fd:f3:9c:46:2c:7b:35:f3:8c:93:c8: 2a:9e:aa:da:01:a0:86:50:d0:53:63:91:ab:90:18:bd:52:c1: c7:ec:b9:ce:6b:56:87:0a:36:2e:12:cf:31:3d:58:1f:a8:f7: 28:66:87:e1:0b:c5:99:03:8b:d8:2f:12:53:89:6c:c4:02:40: 74:bf:6d:2c:93:83:91:4f:37:ed:8c:30:e9:8f:ee:e3:dc:55: e5:a1:ee:cb:a8:1b:26:99:64:43:86:90:aa:03:9e:cc:46:db: 94:86:1b:a5:63:72:63:ca:2a:9e:08:0b:03:73:6f:a0:83:92: 6a:e6:0a:c6:9c:d7:79:90:56:56:59:dd:36:52:db:ff:e9:3e: db:13:0e:49:a9:46:c8:2f:c6:b5:9d:d7:d8:a9:5d:4f:58:60: 62:14:fa:c8:ae:30:bf:71:41:d7:9a:92:0c:17:27:7f:55:6d: 6a:62:95:b7:c0:d6:be:34:49:be:28:33:d6:e5:08:3e:7d:01: 7f:29:19:ee:ed:2b:3c:66:ae:54:f3:ef:15:3c:6f:fd:58:c6: 3e:b5:40:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaJW/PsvNdJeWptudpQXx3wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz YzQwM2UwHhcNMjUwNTAxMDEwMDI2WhcNMjUwNTAyMDEwMDI2WjAzMTEwLwYDVQQD EygwMjY1Zjg3NjZkZDI5Y2U1YTQwNzRkZjI2NWFjNDc4YjM3NjQ3N2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmk4Ey3WnC87DCS4SWVsr+l1C0aZ nXuTkdb2dOQ7WNpsRiW3pP94IFde5f4gQW2On2zEF8+nIMsKX27QxodVEdldSsAU sA/N1dXTkPV8X11SpWkJn8d1GfiI4UKdHUsV3w0YYzrOMWQPh25GzEWBegdPuoau SpGDSlu31wBEzYbxSesowYJH2QVYSEwySglTLNeGRUo7VfjPYeikipgUfr03SgsH aSbjRUpe0YsJYL/5FOodac0GluoN+XxSTBR1sPxVIvLI3q5GzMxrd+bcFpFr5b5F 9WuYXwcmXBXfmZi52Yp90n2TpRGV6ian737v6z1b4/vgBw1fn6sUwgQ4TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJl+HZt0pzlpAdN8mWsR4s3ZHfIMB8GA1UdIwQY MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt MDI5MmIwMjAxNTBhLzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArdK5DFWY 6cBwk8KOQRxVTH5b05p76Fcw2ryaFl4XFQlmJ+tfovthT6MhA/3znEYsezXzjJPI Kp6q2gGghlDQU2ORq5AYvVLBx+y5zmtWhwo2LhLPMT1YH6j3KGaH4QvFmQOL2C8S U4lsxAJAdL9tLJODkU837Yww6Y/u49xV5aHuy6gbJplkQ4aQqgOezEbblIYbpWNy Y8oqnggLA3NvoIOSauYKxpzXeZBWVlndNlLb/+k+2xMOSalGyC/GtZ3X2KldT1hg YhT6yK4wv3FB15qSDBcnf1VtamKVt8DWvjRJvigz1uUIPn0BfykZ7u0rPGauVPPv FTxv/VjGPrVAhg== -----END CERTIFICATE-----Generated at Thu May 1 08:26:41 2025 by rpki-client