$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft File: rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft (raw, json) Hash identifier: tWN0xmmv6K35n/FbWKNGYvKtocd4N8h41RRzpbFvKHk= Subject key identifier: B2:D2:AC:23:CB:81:A0:2F:D7:CB:CB:8F:AB:D0:A9:45:C4:59:71:7C Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808 Certificate serial: 01967EA1CE007375E7DB938B3498429141C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft Manifest number: 153D Signing time: Mon 28 Apr 2025 23:00:55 +0000 Manifest this update: Mon 28 Apr 2025 23:00:55 +0000 Manifest next update: Tue 29 Apr 2025 23:00:55 +0000 Files and hashes: 1: 04Xl2v7VZUiTmCr_w4v8QX2gTRY.roa (hash: MycY07gNOE3Ooqi4Uv41zgpH/iEzpn8tkzRPcGSW9aU=) 2: 26R907b9JZTa9LMd6c9-dwXbanc.roa (hash: Nr0pZSVAGWFTdm0Q/t/4gBjJB3CHvlfJvfnTY1Rsu6U=) 3: 4CkYdPgwuFRB9yfCSUR4mFZ2aRY.roa (hash: uxH7iNCE7ZmZDPzgHrmT88B0442eI2IPmR0JGvSaYus=) 4: N8IkUZJzTBOZlu70RR-lhbMLsyk.roa (hash: ibQxnRGTbY2fQW1i2qvy/3e4lxCnd9xPyOoTE1V98yc=) 5: Nz5RTdbiVqvTyf1uMtVJTNrUInA.roa (hash: 6DxKi3ibNRNUsq7DVRyyl9egdF22G2yI1jKGFf7eGvI=) 6: OrB13yHYot_uIXf_gXlQc8xI_hE.roa (hash: FMQdsecZx+s70UXzEHExqDx9Jcs+3DRJcI4Unl+IGvY=) 7: Pl7-hE7wkLNvDQabKfSwU8DkQ6w.roa (hash: 27nFWy7GlxT7WEaqE4vpzeeamTgM2rIB5rRF1VNL9hc=) 8: R6LZ_8XH3ExvRg1dUKFNV8Ey0F8.roa (hash: qFpymdyEBp79zE8j0kfuySy0J6zv46CXUcpRwgvhrUg=) 9: cMwLZYfTsXdjIqb9jx4UAT_n7A8.roa (hash: DlDoiDsmZqGB/sH+jVsLeAbtXXyd2YUnrqrE/juxJb0=) 10: d4OCK2D4mSeWoRqf9p5C2kL05YA.roa (hash: Elq7S05bbGTPAkW786TpCyuI8W7H2meHxaBdt6oA0iQ=) 11: eve0R85Bzf8fVYZiz_CwkQbNrfY.roa (hash: C31CurjzM4ZbD0eThfczK/2Jz2E+lMaCmCEqjBcpDzI=) 12: lGrajh7a_wa1_LmUlCkskSpHEUA.roa (hash: cqiS1zwnFw4W1rzDIACXMZPc8ZNVkVV3Hme04FAS5Cc=) 13: mk-EE-jomB4r81nV5hqnq3SbThA.roa (hash: s/WHq7pvPXbuGboH15G/GxJVOO9+dXTAtYjUAcjZio4=) 14: rEnKo4uFTJMFYN6Cn2Ft0459Avg.roa (hash: INMUl7RzFx1P7Rf6UvWbPgwSFgMQsbOXObYuvGU4UyU=) 15: r_x3Fm5qPpLt6tIgjqPoDH6NSOU.roa (hash: eOXFdxOR7gIGvVyPrVo91AN3j7CdU+E/QIH/+e1t/5w=) 16: rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl (hash: iDIvBwogv6oYApvQ2JVIW4WZgkVghqmpZ7/9FEk5az4=) 17: xgJFjaLiTqyrTAWyq4f18Pg7amk.roa (hash: 2iBDAhKAGL78CKGIrACCnUM4WIuzKixnPTq74lNq4V0=) 18: zNVGFbRsiePBxz6FwsPTrdVje0c.roa (hash: iOwivHuatZu0dYUoIFiY6LVls3U7FPznyEYVX0N4MfQ=) 19: zwam10qTIbqdFHd30kfqv_ZzWgE.roa (hash: FkxbmAbpcrj+MmOQBWMwaW9Kx0P0rYzKKqUDU8tkNdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7e:a1:ce:00:73:75:e7:db:93:8b:34:98:42:91:41:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808 Validity Not Before: Apr 28 23:00:55 2025 GMT Not After : Apr 29 23:00:55 2025 GMT Subject: CN=b2d2ac23cb81a02fd7cbcb8fabd0a945c459717c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9a:51:85:23:42:f0:6f:2a:47:af:c8:d2:58: cb:a9:d0:c1:e8:46:1a:9b:a7:09:7e:76:79:1e:2a: e8:da:d6:9c:e9:c5:64:84:5f:ea:50:38:ec:b5:b9: 99:b7:de:ab:35:be:47:65:c4:9f:f1:39:57:a6:e9: 23:a8:df:80:b0:a0:36:2d:e6:bf:25:54:d1:a1:9f: c5:50:1e:85:36:dc:66:72:b2:44:e7:a9:1e:f7:a3: 1a:db:08:ff:34:ab:21:0a:29:14:6a:1e:ad:8e:23: 58:7a:38:29:5c:d7:8b:57:85:5f:0b:82:70:8d:2a: 41:c9:2a:4d:d1:78:cf:81:a6:51:44:17:e8:cb:7c: e5:db:09:ac:b6:e8:e5:0f:d6:29:26:60:3a:e2:1a: 85:9b:66:74:8e:dc:2c:11:fb:1a:a4:c0:d8:86:80: 40:31:92:e9:52:c0:0f:9d:be:24:2a:04:b8:0f:7d: 0d:6a:44:61:5e:a4:6a:6d:ee:8e:49:5a:7b:ad:12: 05:12:fe:b1:35:ca:ec:6c:45:cb:e3:0a:27:d9:bb: b3:e9:47:a4:d0:87:45:73:20:d4:fb:84:ce:d3:d5: c9:2f:83:d5:6d:9f:ae:12:69:1e:4f:a1:42:d5:15: b6:29:50:39:14:df:06:13:af:c7:d0:aa:76:e2:a4: fc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D2:AC:23:CB:81:A0:2F:D7:CB:CB:8F:AB:D0:A9:45:C4:59:71:7C X509v3 Authority Key Identifier: keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:30:a4:5d:52:59:74:fa:69:ff:37:ba:5c:cf:34:5d:ee:40: 19:3e:e7:56:55:e2:65:e7:7b:f7:eb:df:7b:7f:13:f6:34:14: 0a:82:e9:a4:f7:21:8e:24:f5:fd:ab:a3:64:6c:60:9d:47:ac: 12:dc:98:4c:62:27:8a:ae:bd:71:09:62:5d:9a:24:4a:64:a4: 94:6c:5d:74:78:91:f8:74:33:dc:57:a1:8d:4f:6f:66:67:79: 41:a4:fe:df:c0:09:77:e1:0e:e9:2d:1a:a0:ad:ff:32:3c:3a: 1b:91:b5:32:92:19:5d:93:22:3d:bc:bb:6f:f2:31:13:80:aa: 6c:0a:8a:25:3a:e6:2c:9e:ab:01:bf:62:f3:57:cf:05:8d:54: 01:84:f6:9c:33:e7:38:01:94:97:0a:f9:fb:9c:dc:ad:c7:6e: d5:61:a3:dd:97:00:b4:1b:99:40:38:f5:f8:87:4b:8c:1b:6b: ae:dc:6a:01:9a:0a:18:c5:80:ef:b0:22:70:61:1f:bd:63:31: 4b:df:3c:8d:84:75:76:ee:06:81:d9:90:1b:28:5b:3c:56:85: f2:1a:2e:a1:b6:a8:11:9d:17:21:a8:80:ec:9f:ca:b2:44:64: 08:15:8d:1d:76:e1:26:05:bb:b3:04:87:77:92:79:86:9c:2a: 06:40:eb:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ+oc4Ac3Xn25OLNJhCkUHJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYWM4MzBjY2FhNzQ3ODNkZDk2MWZhYjI0MWEyMjhkN2Nj NmY4MDgwHhcNMjUwNDI4MjMwMDU1WhcNMjUwNDI5MjMwMDU1WjAzMTEwLwYDVQQD EyhiMmQyYWMyM2NiODFhMDJmZDdjYmNiOGZhYmQwYTk0NWM0NTk3MTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZpRhSNC8G8qR6/I0ljLqdDB6EYa m6cJfnZ5Hiro2tac6cVkhF/qUDjstbmZt96rNb5HZcSf8TlXpukjqN+AsKA2Lea/ JVTRoZ/FUB6FNtxmcrJE56ke96Ma2wj/NKshCikUah6tjiNYejgpXNeLV4VfC4Jw jSpBySpN0XjPgaZRRBfoy3zl2wmstujlD9YpJmA64hqFm2Z0jtwsEfsapMDYhoBA MZLpUsAPnb4kKgS4D30NakRhXqRqbe6OSVp7rRIFEv6xNcrsbEXL4won2buz6Uek 0IdFcyDU+4TO09XJL4PVbZ+uEmkeT6FC1RW2KVA5FN8GE6/H0Kp24qT8CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLSrCPLgaAv18vLj6vQqUXEWXF8MB8GA1UdIwQY MBaAFK2sgwzKp0eD3ZYfqyQaIo18xvgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgt OTI5ZjdkNjM1ZjRiLzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgtOTI5ZjdkNjM1ZjRi LzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAczCkXVJZ dPpp/ze6XM80Xe5AGT7nVlXiZed79+vfe38T9jQUCoLppPchjiT1/aujZGxgnUes EtyYTGIniq69cQliXZokSmSklGxddHiR+HQz3FehjU9vZmd5QaT+38AJd+EO6S0a oK3/Mjw6G5G1MpIZXZMiPby7b/IxE4CqbAqKJTrmLJ6rAb9i81fPBY1UAYT2nDPn OAGUlwr5+5zcrcdu1WGj3ZcAtBuZQDj1+IdLjBtrrtxqAZoKGMWA77AicGEfvWMx S988jYR1du4GgdmQGyhbPFaF8houobaoEZ0XIaiA7J/KskRkCBWNHXbhJgW7swSH d5J5hpwqBkDrqw== -----END CERTIFICATE-----Generated at Tue Apr 29 09:33:35 2025 by rpki-client