$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft File: 7xxmWwOGkrk7310djzzqPphpegM.mft (raw, json) Hash identifier: QIJJQPyL/oBvsT/ceDuNRLHpguNWinlwhKsFa8LEVJo= Subject key identifier: D0:C0:7D:72:94:0A:18:79:B8:94:2E:3A:99:1C:C6:F6:BE:C6:1E:33 Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Certificate serial: 0196726649935D350CCA2EAE1C90F12F3677 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft Manifest number: 154A Signing time: Sat 26 Apr 2025 14:00:28 +0000 Manifest this update: Sat 26 Apr 2025 14:00:28 +0000 Manifest next update: Sun 27 Apr 2025 14:00:28 +0000 Files and hashes: 1: 2As0Mp8svkA_acr8TjpzRvXcyRw.roa (hash: x7SMSN6/Nb1zQXVVEV5INFQjFMZ3I+mES8tTWRbKxME=) 2: 5CikPgAp5jK6pSp3Js9BBzIPLTs.roa (hash: 3KlXSk2A55yorEOG87Fyp/oyUbDybm4fyMBJebbovv0=) 3: 6cgyQw3c6pwtU4O5qiL8so1iLO0.roa (hash: RrJ/CIW7j+YCVbEs17TVrQYeU0kZt0hrM4cIT1zfgiE=) 4: 74UxeEZGGUp4hcEj6IOpMbtbMQY.roa (hash: ptmjV2tZkQpAgK/kc2iedynulu5N2vpF6ojZ4cIXBag=) 5: 7ZDYTKvAvTNv12GuIpMzhz94tXM.roa (hash: 9lUGbHgSaTzoBqrtOfwYxrD4Ctnrj/4XCW9Dfv6cVfg=) 6: 7xxmWwOGkrk7310djzzqPphpegM.crl (hash: azagADKjGe1ceP4thgqso1xUQu7rFO7rP6s4fyn3TyY=) 7: GojN_v9AmfIlDGJ-pJiiWvRB3t4.roa (hash: gyhGTfbQ/CUnY8OiIN0VNwGVdkmIAUvZzNOgZEIdotE=) 8: Q0G9s41BFpS1cMxCZoIHJk-pW6Q.roa (hash: FvO5ikNQfN+oNfsreOeiUDXZg/1ZawIRE/udyXEqBRw=) 9: VevE1Qkku5OCuflEElcF548SkKs.roa (hash: OO4osqCuMqLt/NPspapEtGPa5x8FCuxawiZlsDGiwlo=) 10: f6xp71AmSGD06YY2IrJqZ9soec4.roa (hash: P2ngCAMEJOf4Ce1vVcWfg+Kihos97gOGnSUxltJgsDU=) 11: i0UtjKhThBAIzRT1eJL3hD2Ywmk.roa (hash: BKlQ/77pz1u1TCDlrGybeS13ax7xeZWbK2z+UAz10UA=) 12: wtHvUUEBKpecU95cJCBjwBXIyFM.roa (hash: mNNvoDTEhZQOBLemoApsWk3Gy3NbhXq1e0BNHY0+0p4=) 13: xAMpMh4nbO4LyB6Qja6DFe_88jA.roa (hash: ue80NNFiLfpsrkKjl+M4mLElo07egwD3NcN+sAuZBTc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 14:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:66:49:93:5d:35:0c:ca:2e:ae:1c:90:f1:2f:36:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Validity Not Before: Apr 26 14:00:28 2025 GMT Not After : Apr 27 14:00:28 2025 GMT Subject: CN=d0c07d72940a1879b8942e3a991cc6f6bec61e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:28:01:5e:3c:7d:4b:4c:f5:69:c1:cb:ba:25: 0a:11:52:a6:05:30:5e:5b:72:2e:7a:2d:19:cf:58: d8:4b:e0:df:f6:a3:24:51:11:0a:47:e9:07:57:0f: 43:f3:c4:5e:00:94:c9:7c:c3:5c:3c:e3:31:cf:fc: 02:50:5b:bb:70:97:82:aa:be:87:a7:e3:43:85:d9: c8:89:cc:67:cc:f7:89:0e:15:44:b2:ed:fd:61:3f: 68:f8:48:a1:a3:a7:76:cf:8d:b0:8f:0f:67:fa:4d: 0d:75:97:39:13:6c:bc:7f:28:be:83:d0:78:15:c8: 52:18:95:79:79:81:e8:88:4d:0f:dd:47:88:ba:37: ab:e6:af:0f:3e:ee:67:03:c1:9a:f5:be:d9:76:00: b0:5c:60:37:2d:e6:1d:38:ad:b4:f8:14:29:07:e2: 32:af:5b:3c:a0:93:f1:2a:f2:9e:d3:4d:59:ab:21: ed:1f:88:d4:d0:68:5f:84:22:96:2f:53:08:a2:1f: d2:f5:b1:93:6f:d9:4a:3f:bc:ac:71:91:84:c0:8c: 5f:74:2f:a5:38:6e:65:07:db:5c:d8:34:ca:bf:5d: 56:cf:cc:08:4f:c7:5c:2d:46:d0:ba:03:b4:ce:f6: cb:47:65:df:34:ba:6c:08:fc:83:78:51:c0:8c:3e: 16:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C0:7D:72:94:0A:18:79:B8:94:2E:3A:99:1C:C6:F6:BE:C6:1E:33 X509v3 Authority Key Identifier: keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:ee:1d:01:c8:f8:74:09:93:9e:77:39:1e:54:9d:9a:31:5d: de:d9:62:6d:06:7e:57:2e:a8:e2:e4:8a:48:5f:ab:a3:ba:fd: b7:2c:6d:ce:7f:91:24:e0:60:3f:32:3b:7e:d0:cc:2b:04:21: 53:58:c9:5b:22:25:27:48:c4:cf:62:a1:4f:89:4a:da:fd:18: 9a:d2:32:a9:dd:4d:e4:08:8c:64:da:9d:50:50:37:2e:83:1d: 44:32:dd:8f:15:37:c1:b5:4b:7a:4d:37:94:54:fb:bf:bd:de: 37:4b:74:f0:e6:e0:d3:63:27:8b:dc:37:c4:bd:13:76:2c:6d: 7e:6b:33:0e:8b:57:2f:51:b3:95:9e:57:5f:d9:16:bc:6e:40: ae:30:17:20:50:78:e5:da:ed:4c:5e:15:2f:9e:61:9e:a3:4b: 3c:3c:31:62:47:d3:d7:86:b2:cb:f0:d5:6e:f6:f9:af:c9:5a: cf:16:95:40:1b:0e:2e:58:3d:5d:94:60:b0:b6:60:b5:34:d5: 73:bc:3f:db:2b:c2:a4:0d:df:06:86:71:2b:9d:64:80:77:3e: 50:1f:5d:5f:7e:d6:b1:94:d1:88:24:2b:93:07:26:ac:cf:d4: 5e:90:e4:28:82:02:33:75:8b:c4:b4:80:15:b3:75:51:6b:06: 2c:c4:18:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZyZkmTXTUMyi6uHJDxLzZ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMWM2NjViMDM4NjkyYjkzYmRmNWQxZDhmM2NlYTNlOTg2 OTdhMDMwHhcNMjUwNDI2MTQwMDI4WhcNMjUwNDI3MTQwMDI4WjAzMTEwLwYDVQQD EyhkMGMwN2Q3Mjk0MGExODc5Yjg5NDJlM2E5OTFjYzZmNmJlYzYxZTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnygBXjx9S0z1acHLuiUKEVKmBTBe W3Iuei0Zz1jYS+Df9qMkUREKR+kHVw9D88ReAJTJfMNcPOMxz/wCUFu7cJeCqr6H p+NDhdnIicxnzPeJDhVEsu39YT9o+Eiho6d2z42wjw9n+k0NdZc5E2y8fyi+g9B4 FchSGJV5eYHoiE0P3UeIujer5q8PPu5nA8Ga9b7ZdgCwXGA3LeYdOK20+BQpB+Iy r1s8oJPxKvKe001ZqyHtH4jU0GhfhCKWL1MIoh/S9bGTb9lKP7yscZGEwIxfdC+l OG5lB9tc2DTKv11Wz8wIT8dcLUbQugO0zvbLR2XfNLpsCPyDeFHAjD4WcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNDAfXKUChh5uJQuOpkcxva+xh4zMB8GA1UdIwQY MBaAFO8cZlsDhpK5O99dHY886j6YaXoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAt Njg4ZDMzM2VkOWQ1LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAtNjg4ZDMzM2VkOWQ1 LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQu4dAcj4 dAmTnnc5HlSdmjFd3tlibQZ+Vy6o4uSKSF+ro7r9tyxtzn+RJOBgPzI7ftDMKwQh U1jJWyIlJ0jEz2KhT4lK2v0YmtIyqd1N5AiMZNqdUFA3LoMdRDLdjxU3wbVLek03 lFT7v73eN0t08Obg02Mni9w3xL0TdixtfmszDotXL1GzlZ5XX9kWvG5ArjAXIFB4 5drtTF4VL55hnqNLPDwxYkfT14ayy/DVbvb5r8lazxaVQBsOLlg9XZRgsLZgtTTV c7w/2yvCpA3fBoZxK51kgHc+UB9dX37WsZTRiCQrkwcmrM/UXpDkKIICM3WLxLSA FbN1UWsGLMQYmQ== -----END CERTIFICATE-----Generated at Sat Apr 26 23:00:57 2025 by rpki-client