$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft File: YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft (raw, json) Hash identifier: OgNLdn8ee/irRxyRdBiLTDSWf/p/iR2BqBP6ySXoPQw= Subject key identifier: C4:A3:A0:2E:02:96:3B:4A:6F:E1:37:85:8E:59:B3:28:9A:6D:D1:D7 Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Certificate serial: 01968EEFFEB90E0A0EF148BB01FCB2F38B3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft Manifest number: 0928 Signing time: Fri 02 May 2025 03:00:15 +0000 Manifest this update: Fri 02 May 2025 03:00:15 +0000 Manifest next update: Sat 03 May 2025 03:00:15 +0000 Files and hashes: 1: EiGTvhy4eiV5Vu8zlFXwrWjEg_k.roa (hash: 0BXHqu+47L7wX/7bQpoeXTrDIxrQJJO2G9WNWOkjsI8=) 2: ISSEb8mvPD7Wb-BO3eMjyBnQD-A.roa (hash: dUQ5dbyZRiVT9qvtigPflifhbpzSjWdmMJQhCiRK9yY=) 3: ITCvofTUKcrPXUX4ThJtq_NekLI.roa (hash: AZpr92O9rMAjpfYJ9xUOlJVoKycP42+TRFWjyvB4His=) 4: LLA4IvVGtRI6yA90ov_lLpcYo6k.roa (hash: 7JmnUHmpGf8b/M1tDswRWUSaT/rNeM/CbbqIQS+ZYgw=) 5: LXQ5Dl426hhh6QRd3yqtOofjp0o.roa (hash: znv04G+MmU69F8joUAs2FqyoL/VISgL++/Y2Z827I2w=) 6: PX1j4imQFBN7657jyc7Zu1gTrXU.roa (hash: 8zsptqmRSRBJaOtfsTJAsFAwYhvmDOrkIMgQNuU7OfE=) 7: Sh7JlMJhv-6RtBisv-L0kfbZJks.roa (hash: F+4kBoxCrAhOhNOKd39I4JEpehCkgRYyGrELsXTNP9s=) 8: Vhllw2glaqL8EoPQw5XUwOXiBGo.roa (hash: wq9dUzUVsrgsDS8bxTvADCSBnajTq7yo0dmS3z28Cq4=) 9: VicI--UiT4J4AutTMYdO2uMhkGg.roa (hash: Y40nMU70m0+2jleYg2nqHmXkrHQzj9QhtyBLW6piLPY=) 10: YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl (hash: 7B0BJgqGVPkCFGlKydzeBneKxFBpkL+CRhG9Ma+e5Bw=) 11: dGxUQhmXosrd6snNM74Lqxgx6XA.roa (hash: 9vHiXTHPhgjpbGVFJ6NuVl7cW85jEiPNxPoz0tnnkYg=) 12: eagdGfGJlmEZQGY_VHLxO8WUTq8.roa (hash: Qa/XODMcIs8RjiGQJgYDisZS+5jCHEU61E4SO+4K1Jo=) 13: i39d_g_1_9oM3E5qn-WFCJuc6cY.roa (hash: 3J8AXusWQrGt85CnVf7tcXl4q37hdR3eK7fR6zkLiJ4=) 14: l8KpKReixNDHkSubHdfI2z2J0LI.roa (hash: pX4lLViztQ13HYJwweHqkIk+20Vma9iisJYbAnhei/E=) 15: rpUidfPLaFOcta7e_Cd7vj4f2yI.roa (hash: SBNCqpl4yY77T1TIQFUe8+GhTqmXQvEg+yrLX2iKkQ8=) 16: tVbXIsKonEYY3NQbCMNk-3GrQgw.roa (hash: C+asYh9Wc9bJHLCabAmtSAQY11vbwluQbmtmn754Gvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 May 2025 03:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:8e:ef:fe:b9:0e:0a:0e:f1:48:bb:01:fc:b2:f3:8b:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20 Validity Not Before: May 2 03:00:15 2025 GMT Not After : May 3 03:00:15 2025 GMT Subject: CN=c4a3a02e02963b4a6fe137858e59b3289a6dd1d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f3:4c:7f:a7:69:65:3f:a3:7a:a8:33:43:06: be:11:9d:af:51:0b:4e:05:10:d4:d4:48:b5:83:45: 80:0a:b1:42:88:66:9a:cf:2d:e1:56:fe:32:54:88: b9:41:ee:c2:6e:3b:52:6e:f2:d1:b9:cf:a2:0d:f0: 19:6c:2f:6f:04:86:cf:81:13:10:1e:5f:63:92:e8: 47:ab:ed:56:b9:0a:2b:9d:bd:d3:bb:b9:bc:4d:81: b8:75:69:e6:8e:4e:a1:cb:ff:fd:01:fd:3d:6a:50: 19:ae:45:71:2f:cd:09:a8:a0:8b:10:7c:7f:1b:6f: 93:89:c3:36:0b:97:b6:59:c9:34:38:45:6d:e9:46: 56:0d:97:05:60:8a:39:ef:c6:42:84:87:98:86:55: 22:2a:7f:89:9c:85:72:e9:3e:0a:10:52:4a:12:3d: 38:c6:4e:d6:6a:a4:63:2e:98:64:fc:cf:f5:ab:ba: 5c:e1:96:cb:5a:b7:40:1a:7c:a1:9e:6b:dc:cf:41: e8:34:6e:ef:95:6c:c0:77:d1:f5:27:b1:c0:5a:5d: 3f:74:22:38:84:83:cc:dc:f8:c3:07:65:f4:2e:08: e3:85:6b:82:d3:fd:2e:fa:09:be:19:b7:48:22:b4: 28:c8:2e:cf:94:0c:0f:04:78:bc:4e:e3:d6:45:3e: cb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A3:A0:2E:02:96:3B:4A:6F:E1:37:85:8E:59:B3:28:9A:6D:D1:D7 X509v3 Authority Key Identifier: keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:08:3b:9b:3d:cd:b2:4e:9a:ff:1b:17:84:13:3c:7f:67:5d: f0:06:14:de:33:c6:01:85:68:d3:17:25:24:48:3f:63:7b:77: f7:bd:62:4f:aa:14:25:b8:52:f6:64:dd:d9:85:39:a2:9b:98: fd:fc:71:3b:38:14:d6:d7:ed:0e:12:a7:8b:63:dd:28:16:89: 86:e4:03:a7:c1:77:f9:2b:62:f3:52:80:69:a2:87:91:f6:a6: d4:cf:f3:4e:c4:52:44:45:96:ae:bb:cf:7c:79:31:be:28:42: 03:b4:21:7b:08:72:be:1f:73:55:14:f0:88:02:0d:a5:4a:bc: 78:87:77:a7:77:d5:18:c9:65:f6:61:3a:91:f2:05:f1:6d:20: 83:c2:d6:6d:b5:f6:06:eb:4c:2f:81:14:e9:d7:a1:a2:35:c2: 4f:25:12:ab:2e:d9:f0:9a:4b:cf:bc:94:6b:67:2b:ce:d8:75: 51:63:82:5f:7d:78:54:a6:4f:12:5d:30:c0:15:c9:85:5f:48: 20:0b:b8:cd:4f:ad:37:44:10:f1:16:55:f4:71:32:34:c5:9f: f6:ac:e9:bd:fd:f4:bf:bf:17:4c:76:0d:c1:30:9b:28:4b:89: 4d:1b:c8:81:f5:e2:65:3c:26:00:30:a6:28:ce:f7:e9:60:b0: bd:b1:6a:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaO7/65DgoO8Ui7Afyy84s+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx OWZiMjAwHhcNMjUwNTAyMDMwMDE1WhcNMjUwNTAzMDMwMDE1WjAzMTEwLwYDVQQD EyhjNGEzYTAyZTAyOTYzYjRhNmZlMTM3ODU4ZTU5YjMyODlhNmRkMWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPNMf6dpZT+jeqgzQwa+EZ2vUQtO BRDU1Ei1g0WACrFCiGaazy3hVv4yVIi5Qe7CbjtSbvLRuc+iDfAZbC9vBIbPgRMQ Hl9jkuhHq+1WuQornb3Tu7m8TYG4dWnmjk6hy//9Af09alAZrkVxL80JqKCLEHx/ G2+TicM2C5e2Wck0OEVt6UZWDZcFYIo578ZChIeYhlUiKn+JnIVy6T4KEFJKEj04 xk7WaqRjLphk/M/1q7pc4ZbLWrdAGnyhnmvcz0HoNG7vlWzAd9H1J7HAWl0/dCI4 hIPM3PjDB2X0LgjjhWuC0/0u+gm+GbdIIrQoyC7PlAwPBHi8TuPWRT7LJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSjoC4CljtKb+E3hY5ZsyiabdHXMB8GA1UdIwQY MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt NDI2OWI1NmJmN2Q0LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0 LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEgg7mz3N sk6a/xsXhBM8f2dd8AYU3jPGAYVo0xclJEg/Y3t3971iT6oUJbhS9mTd2YU5opuY /fxxOzgU1tftDhKni2PdKBaJhuQDp8F3+Sti81KAaaKHkfam1M/zTsRSREWWrrvP fHkxvihCA7Qhewhyvh9zVRTwiAINpUq8eId3p3fVGMll9mE6kfIF8W0gg8LWbbX2 ButML4EU6dehojXCTyUSqy7Z8JpLz7yUa2crzth1UWOCX314VKZPEl0wwBXJhV9I IAu4zU+tN0QQ8RZV9HEyNMWf9qzpvf30v78XTHYNwTCbKEuJTRvIgfXiZTwmADCm KM736WCwvbFqAg== -----END CERTIFICATE-----Generated at Fri May 2 12:47:38 2025 by rpki-client