$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft File: hszgbnDflw2Qq_48vn-ogvRnseQ.mft (raw, json) Hash identifier: Fd/YPG4gZwaafhEnm7k8BBOPjydc7HOZWE0lVvb6XLg= Subject key identifier: 2F:54:DE:E1:5A:A2:8B:3C:58:E2:23:D9:62:79:07:42:30:01:21:07 Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Certificate serial: 019672301FF0527281B2BDE490038ACF7E5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft Manifest number: 0D5A Signing time: Sat 26 Apr 2025 13:01:18 +0000 Manifest this update: Sat 26 Apr 2025 13:01:18 +0000 Manifest next update: Sun 27 Apr 2025 13:01:18 +0000 Files and hashes: 1: 1KrHnSgllq_k9B2wst0bYaC6fyo.roa (hash: lStApswe2/6Ekqa6XmoUoNcd7HO52b9jBs5I4vOK1gc=) 2: 2r2GG3Z2qTTT4g4Y8XqO_XMC7Eo.roa (hash: 3OHcEZapfFHtZllJ50Vm5hOAGU/4QJA5k3QT//j1G5g=) 3: 4ONine07eIhpJhI9ECOeUP9WFQg.roa (hash: MmJtgZmAq2o+Sq5m0y3r9fQ0BH94PpmL5fYIQg/FZYc=) 4: 5T2bu1MZznUR1RN9nzIhUN9ndjo.roa (hash: 0dmLTT5O4LwcX1oD39PZYRT1M5ADWkC9hV3kx2Ypkhk=) 5: 7m4fpAGLnYeYzw_LpbbgUyrtkQ4.roa (hash: QCn0wSKzzt7ZbsRCL3R6XrUlE4vfiZ5prjFMeQ+ZRnk=) 6: 8es5WUjCpzbWEQdLdvRmhiI4IP8.roa (hash: wfsLBNN2brN6rPEMEn93CKElPjRpjXrU86X4tDSQcxs=) 7: Bu5OSyuwBUvGyz_EW5xEisOkNPE.roa (hash: floFuiP5W+ix524d77mDjkmOxeUI0BamBhf6MRMbiKo=) 8: ERVdycpY4bKVWQxSzavqyLO77UA.roa (hash: KjnUBMfnbY2dTYCqn8dXExC2kP5qWbontZX2wFEns5A=) 9: FRwc3NIwLMg85xs9oKQE8y-aSsE.roa (hash: 4ntKtlA4N2n8X73E8ZF+yd2Me5uBBOuZ+BWHkgFL6/M=) 10: IPukP71PC08yP8GmcEEZAQV-N6c.roa (hash: NHeDXoBvplz6YvYpP3kHSplZzqsFWxBjrIGtxetVnNA=) 11: ITVTbhXITtbbCNEqCEfxFbgqvU8.roa (hash: kInBZjCzyjFvEkmWMFFIjkVHO0pi6G0oNQxZMoLPtU4=) 12: KA4LwOR0SFFzggv9RjQOIamBBDw.roa (hash: o1AhNBlTNTdw9m6UEzikO/p4j6hDFJ/Wvyqei8f5SQY=) 13: KNg_TScubKiJ2WSk1PndDHXafcs.roa (hash: OLVAzv3WRT7v8ayDj8gM91zwzw+fJVhu8S1Dv4NJlCY=) 14: LyVym4UPK98Ng-1a9OLHRZHLRmw.roa (hash: /EWVi2VWVGQ7yEZI1vDOB6bTXscAFP3frjxwug5o7DE=) 15: MTfhoMhVaa2jvLpWsCmafYAY7JA.roa (hash: 3m+kRkEl2wmWqDNlaY4ekeMfluU4hnJDaRCFsllksbo=) 16: Nu6zijQv-DL_hfJdU699EWekTRg.roa (hash: 771rwm16NJYUQ87KCX/qmM+TkgZCBwyWJcoh2RVWoMM=) 17: PKHsjOvOcdlc_y5mG_drpwxHdbc.roa (hash: hbdJYigmCoIQhg2/iQ5VMHWL3khykxXVYtz+M1XpOF0=) 18: WDKIHrVYkHEP-_jHo4nENWRIc38.roa (hash: eRiMu2gAszaQ29h+cDiGSbBxDr/jEEiSq3+mBGq95KQ=) 19: WcNfc2ebH1nabssdIAaljgMAMvI.roa (hash: gIeR1+oo2boP6Zw5hratvRw93AbF/Ul3dA94pgz+zkM=) 20: XAkX5rregKOAZ6goJ5wx9HQsoXA.roa (hash: 2tvW+4GQcYwWdY3d9omkAom+BcKhq65s61hMNNvk19g=) 21: YK43wUlx-m3H_C6o-5_fkIZ3XlU.roa (hash: lZmput/l72Qqm+vzyffdMdSg9aLUuGTEYh4bDbHWmNw=) 22: YkSDoKYOtMCdRX_GWKoH7bN9Qog.roa (hash: i72ku+f2KHytCtL8AK60yC0CuhLhud/m7lirtjbMIIQ=) 23: aqMlRyXFF3MZq_HuCgUUi65uKJg.roa (hash: LyUxXMbv9DIW0MA/p9uc9iCcmc5wGZs1xeaJCZat7fw=) 24: hszgbnDflw2Qq_48vn-ogvRnseQ.crl (hash: MW4kCj2sB+2RM7CopDlK7MTW2/mERxT9bP80qkPaVK4=) 25: jZYs0dzIvS25J4lteuVc561ZAY4.roa (hash: rfSaNujzpLss3LyIOfVGL5ba21k4OmOMHbD7Qk5vT8Y=) 26: jqtV_uax1l_jcMRVSpaIyiZ162M.roa (hash: Y4HN1NVU+4Ighjr+8NWHfgFsJcgMLxBPTCdLXtE0n+Q=) 27: nJtWVAK4rVZ-QksjyqcUPdq2E-0.roa (hash: fPIupekHjPTLOUuEW0SI4UjXbZKLCETnBj5TxkygoP8=) 28: nnu54qaAmQ6pvabzFz6Up-pPH0I.roa (hash: kBmeew+tYf4WAQZ+Fc361sy82Oa/VLosP5CcZUUWBvc=) 29: riibS-9jCOUuRel1tsYcRpIOKLU.roa (hash: EeskdcNck3dqR0K/qsMzHAoOdtdVX+0gjJ2l/1tSnr4=) 30: t_NEg6wAORA2z6iY5tzozpqnVeQ.roa (hash: t2U+jSzM9nfj8HCTrMEEUxEUZzl9OlK4KTd8PiWngec=) 31: x1qi7vT6XlkpDqHOF8EBAKymy_8.roa (hash: wBFn1pbZFU8rbNr/Rh62ylE2f+RYhtW7iwkEa54rtdg=) 32: xbB2W_NjgLWlbeNMcYSxlHjDmXE.roa (hash: BDb3t8owAR6ftClX/O++Jozk/RAQpNrFQeIkw/Bo4Vg=) 33: xh90gjkdUREP6u7CqXiyIEvYxEA.roa (hash: iJRqmCsgsCfQh0p+dtT91CErS4lAajKkC3AlO0Q/BlI=) 34: y-q4QvIjOXXAb6phQmiwxEr2T44.roa (hash: Fy91hg1vS4tIXtpEC6wT1knLe6VIcGMT2+6MAUeo8ig=) 35: zUEFatqyx1IZKzX2t06sZD8CpVU.roa (hash: QXwL/UriFGOH6USTOmoWPAfbRYkVx/Bvm5SJbZHfQXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:30:1f:f0:52:72:81:b2:bd:e4:90:03:8a:cf:7e:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Validity Not Before: Apr 26 13:01:18 2025 GMT Not After : Apr 27 13:01:18 2025 GMT Subject: CN=2f54dee15aa28b3c58e223d96279074230012107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e9:e7:e5:29:85:41:56:2f:dd:e5:b4:a6:ac: dd:c6:1d:03:fd:89:10:77:b1:8f:e7:5f:a2:28:5a: 2d:7a:ec:50:6f:78:12:8f:8b:7a:29:5b:d9:fc:14: 40:70:3e:41:1e:3a:3c:2a:36:2a:b4:b0:31:7f:a5: 84:ff:32:52:7a:de:49:1d:7e:1c:99:08:84:36:92: 89:04:a8:52:4c:07:24:32:d7:b7:a4:c8:d4:20:8a: cd:b4:c0:da:78:44:25:a8:18:31:24:f1:ea:8d:1d: 20:30:27:c2:94:84:ac:b8:73:02:fe:d1:35:58:e6: d9:40:83:48:92:d0:9d:72:dd:39:ca:8c:58:40:93: 1b:17:82:fb:03:9f:c6:f4:20:b6:94:eb:b5:e7:0e: 32:ee:db:bf:ab:c0:94:ef:81:45:68:4c:96:a9:f8: 95:b0:21:68:d7:ce:67:fb:d7:8e:90:7b:71:79:7a: e5:25:1a:65:51:22:ff:6e:44:07:14:f7:e7:94:01: 5f:6d:82:49:b1:e3:3d:4e:66:54:b4:b9:6e:24:65: b1:5d:62:93:bf:8a:28:3c:16:5a:4f:04:cf:58:d4: 19:09:e6:56:c4:95:57:1d:e0:48:7d:91:3d:f4:60: 63:b0:09:8f:dc:b4:b1:73:b6:63:cc:0f:1a:21:8d: c9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:54:DE:E1:5A:A2:8B:3C:58:E2:23:D9:62:79:07:42:30:01:21:07 X509v3 Authority Key Identifier: keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:03:0c:1c:46:b2:3e:11:7c:af:3a:05:5e:32:48:f9:2e:6d: 4f:43:cc:ae:0b:70:8c:3b:ee:8a:60:dd:e1:31:9a:4b:7c:2d: b7:44:c2:f8:45:8f:4e:5a:b4:33:28:2a:9b:81:aa:a8:d4:b8: ad:23:0d:e0:90:24:b3:b5:78:b1:5d:d2:16:02:3d:25:67:d0: 23:17:fc:5a:b1:ae:6f:de:5e:90:12:2c:4b:f9:4b:a0:d5:d0: c2:08:60:ba:b2:7d:0f:dd:76:8c:b9:d7:1e:77:43:d0:97:a4: b8:bc:9c:82:21:7b:1f:dd:d2:73:f0:c7:ca:6d:8b:29:0a:1d: 60:ad:13:32:9c:bc:cd:f5:02:d5:31:3e:53:65:3c:59:08:d0: cc:7c:48:5f:96:9d:64:50:61:61:dc:e6:7a:2f:ac:53:b0:ac: eb:b7:85:fd:81:65:fd:93:23:b2:4e:94:01:ba:9b:63:c5:63: e5:8c:65:ab:10:36:40:86:91:98:22:18:63:21:b6:28:88:44: 37:e9:25:5b:ea:c7:f7:5a:7e:79:47:a4:cd:71:ff:9c:d4:8a: e6:8d:fc:0d:39:5a:ed:fb:35:a1:66:0c:01:50:b5:8a:e6:43: 86:8a:57:d0:e9:af:1b:94:2e:b5:36:7d:97:36:7f:fb:64:96: 17:ec:0a:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZyMB/wUnKBsr3kkAOKz35eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2 N2IxZTQwHhcNMjUwNDI2MTMwMTE4WhcNMjUwNDI3MTMwMTE4WjAzMTEwLwYDVQQD EygyZjU0ZGVlMTVhYTI4YjNjNThlMjIzZDk2Mjc5MDc0MjMwMDEyMTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOnn5SmFQVYv3eW0pqzdxh0D/YkQ d7GP51+iKFoteuxQb3gSj4t6KVvZ/BRAcD5BHjo8KjYqtLAxf6WE/zJSet5JHX4c mQiENpKJBKhSTAckMte3pMjUIIrNtMDaeEQlqBgxJPHqjR0gMCfClISsuHMC/tE1 WObZQINIktCdct05yoxYQJMbF4L7A5/G9CC2lOu15w4y7tu/q8CU74FFaEyWqfiV sCFo185n+9eOkHtxeXrlJRplUSL/bkQHFPfnlAFfbYJJseM9TmZUtLluJGWxXWKT v4ooPBZaTwTPWNQZCeZWxJVXHeBIfZE99GBjsAmP3LSxc7ZjzA8aIY3JsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9U3uFaoos8WOIj2WJ5B0IwASEHMB8GA1UdIwQY MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut ODk3MTRhN2U4ZDU4LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4 LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgMMHEay PhF8rzoFXjJI+S5tT0PMrgtwjDvuimDd4TGaS3wtt0TC+EWPTlq0Mygqm4GqqNS4 rSMN4JAks7V4sV3SFgI9JWfQIxf8WrGub95ekBIsS/lLoNXQwghgurJ9D912jLnX HndD0JekuLycgiF7H93Sc/DHym2LKQodYK0TMpy8zfUC1TE+U2U8WQjQzHxIX5ad ZFBhYdzmei+sU7Cs67eF/YFl/ZMjsk6UAbqbY8Vj5YxlqxA2QIaRmCIYYyG2KIhE N+klW+rH91p+eUekzXH/nNSK5o38DTla7fs1oWYMAVC1iuZDhopX0OmvG5QutTZ9 lzZ/+2SWF+wKTQ== -----END CERTIFICATE-----Generated at Sat Apr 26 19:36:15 2025 by rpki-client