$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft File: ayM9dVCLToXMz0Q0mny3AxmNHSY.mft (raw, json) Hash identifier: fUdQYXAz+O23hj4T3dUyZcQIAMIijy01cY8uRsdQ3m0= Subject key identifier: 62:67:8E:8F:03:3C:08:F8:93:90:CD:86:26:74:DD:E7:20:01:CA:BA Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Certificate serial: 0196726671123263E8F9A4D8A3520057C58C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft Manifest number: 126A Signing time: Sat 26 Apr 2025 14:00:38 +0000 Manifest this update: Sat 26 Apr 2025 14:00:38 +0000 Manifest next update: Sun 27 Apr 2025 14:00:38 +0000 Files and hashes: 1: 2cIKXah99bs326V7_K2_ATU1wCc.roa (hash: 8U7vy7F8tH1dtIEl5RJoquiwlVH7Dw2C2urkmS/8Z1s=) 2: AjBp57cbFRBUIwIaXhNlUU4xc9Y.roa (hash: ZV9AX+FvWa4YVP0u/DD5byIthcNtHTveftQNUrL/KbI=) 3: MWVrNJSe74q7kEhW6qS8QXcSrrc.roa (hash: SMPMCny2Jv5HoImrcf2XEmoMCaHU3khczb0z6CCQ9uc=) 4: U7piPZ7C4IDT1jNCKjsB7PIZjlo.roa (hash: G+dDZh4rdavP8P4pzyt3QGP5LQimO35Dm2vr+LEXgOE=) 5: UeaUMTENz6rEtOnCBMfG9gC-gkA.roa (hash: Gae4+Xp55CQ/qfOEbOd8MSojTwvPkhhJCtVDf0XS3FE=) 6: ZkxRUMGE9CQRvySfgcJj3kHytZg.roa (hash: UKRx7jBVZPPDl6SgbH7t7Qygyz8pBsSIfl7nu9h+mgg=) 7: aB6sxL1ZlKSQNpa4jL29xIkPi_I.roa (hash: zA0AFONbK9br9fZoJVU4SW6cugn1tuIJBYSB1Nl3/G8=) 8: ayM9dVCLToXMz0Q0mny3AxmNHSY.crl (hash: nQVg/tA4pWbr7p8qzeELfxnXnNAzOZnk9zGws5BKnuo=) 9: fZeNbyH5ujZlgqfP9AgorOMXohA.roa (hash: Dn0aZqCRGKt2adMmUTTsiPmw4Pp+E7zhFHoCHO312UY=) 10: fb3lzsKRuT3DqmRVbbR-BGF4wXU.roa (hash: pxuBhHoXzqbakdVTx6L5TNOxX98HDl41yiAFcXSWT3Q=) 11: gYds0JITWToRAWO6EmM06xkOA-g.roa (hash: jtWYGOQZO5pMtNPGec2KrPh/oTve8btfCfcQpgZ5xYs=) 12: hQLzZNiEWPuf32qSABpOeATMW6E.roa (hash: tcNlvM0ivCHwuGCFeJnRMeoVP9hfxeNRmguV/9iTXJc=) 13: hUM0lQ0ODj8Qil7w4D2sZvQVB4w.roa (hash: 8bKnMQhqygeFZmPwESYE+kESImBLAc2qmeTscpnWZ2s=) 14: hZs6PbiV1FHRQvgoNjIWkApb1x4.roa (hash: slbvJPVch+dH2HvE/UBBZulZ2jCavWoY4Ccie6OcAiU=) 15: itqdYmGsrfepmyYSKCd1c5R77js.roa (hash: W2/G8eoM3IFmeLBvMWU5XzC6g/z37f1zNFuZs/37yXE=) 16: nPdGgeG-9wHMZBn1oHFY2TrIyd4.roa (hash: ixNDdEbsReVkHb4nZt1NyyQNAMSP0+ayTT4IyJE76/4=) 17: np9eNjgoLA0jYeMYnFqjApZ6K1s.roa (hash: rFv0HF9ou+nHz2ggvRQ0cKKf/+Wgihlq0XkCRw5GtV4=) 18: oxL_IFbrM6mz0m9aIFRfMqrCT6w.roa (hash: NXHU7sEwINGkL2J1XfrQuCQ6rExfJTOfXcqE64zJiN8=) 19: pSa6Cl1GXo7foAyFrHXmLJZlt1c.roa (hash: UNi09k+Bt5G9PMcC124mrj3Hl9EaVAVyKXxcinPAiXY=) 20: u5pfngYD-0MqXeQ11DbdTP8EwmU.roa (hash: xtu5m2bHnGuokc2D/B489MeQCUa3PeUYpTlbCBj8908=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:66:71:12:32:63:e8:f9:a4:d8:a3:52:00:57:c5:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Validity Not Before: Apr 26 14:00:38 2025 GMT Not After : Apr 27 14:00:38 2025 GMT Subject: CN=62678e8f033c08f89390cd862674dde72001caba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9d:3f:f5:d6:ab:ed:7a:10:33:4c:8a:b8:14: 4a:ec:10:4d:40:d0:35:25:38:ba:66:f3:a2:92:07: 28:f4:0b:20:bd:5d:84:34:f4:c9:60:87:d6:79:5a: 1f:f7:e9:6f:19:4f:7b:61:9a:51:d2:4d:5c:35:ec: 26:89:37:42:c4:b7:9c:1f:5c:20:a3:a1:74:ae:5b: c5:34:87:4c:2b:4a:b2:7e:27:16:df:a0:81:e3:60: ef:cb:2e:f6:fb:d9:1a:75:9b:c7:48:3e:fe:0a:e9: f7:a3:cd:f9:37:a6:ab:e7:27:54:11:6b:4c:94:0e: 70:bb:8f:af:12:3a:b2:72:bf:6a:0e:82:2c:32:b8: 94:50:69:c5:88:53:20:e5:82:66:ca:51:e7:ea:0e: a7:e8:f8:81:13:39:43:42:6c:e7:79:13:09:12:fa: 4f:67:18:27:1a:82:ae:21:b9:33:eb:fc:17:1e:18: d6:19:09:f0:97:b4:94:61:12:7a:01:56:00:da:b2: 1b:22:5b:86:52:df:74:bc:23:d1:15:6a:d8:08:c0: 81:39:19:99:6e:28:ba:2b:3d:73:11:f0:9c:d3:35: b4:ce:23:6d:19:8c:92:9f:e0:aa:e5:f2:7e:84:93: 0a:b9:be:a7:af:64:1d:b2:c1:ff:4f:15:9d:a4:9b: 5e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:67:8E:8F:03:3C:08:F8:93:90:CD:86:26:74:DD:E7:20:01:CA:BA X509v3 Authority Key Identifier: keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:5a:fa:74:79:5a:fa:12:82:05:59:4f:17:a7:e7:aa:d4:76: b5:a3:c1:fa:0a:cc:e5:3c:92:8c:8d:12:69:c6:ff:37:13:2c: 56:99:ce:98:4d:cb:87:b6:5c:d0:ec:2b:d0:12:26:30:c1:a4: 2d:29:a9:7d:b3:53:9b:ee:9c:c1:d2:0a:53:62:59:2d:1e:3c: a3:c3:55:c2:00:6d:37:a6:47:d4:8b:fb:4b:44:0a:b0:c6:e4: 14:ab:f0:22:ed:8b:15:b4:50:ed:ab:7e:7b:aa:5b:f3:4a:e4: b3:ea:09:ff:47:3f:b5:89:4e:28:9b:66:1c:27:db:bf:ef:4c: a2:85:39:4d:e8:e1:42:af:75:71:b3:e1:96:70:03:f7:b9:23: 7b:b9:69:d0:b5:72:b4:1f:08:52:6f:d3:1c:0a:07:83:76:e6: 6c:a5:ee:13:ac:3b:cb:ac:a6:be:33:bb:18:6b:ba:ca:ac:fd: 6c:05:e7:3d:9d:77:78:49:f3:16:c7:80:64:70:56:f2:5b:29: 91:1c:e1:46:0b:10:03:cf:42:84:6d:cb:d8:04:07:b0:fd:22: f0:f3:9b:92:36:4b:03:8f:ab:74:25:ae:94:03:21:aa:b2:68: 5e:bc:1f:5d:41:25:8b:2a:7a:a7:8e:c8:67:f0:46:d5:3b:dc: 2d:26:2c:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZyZnESMmPo+aTYo1IAV8WMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4 ZDFkMjYwHhcNMjUwNDI2MTQwMDM4WhcNMjUwNDI3MTQwMDM4WjAzMTEwLwYDVQQD Eyg2MjY3OGU4ZjAzM2MwOGY4OTM5MGNkODYyNjc0ZGRlNzIwMDFjYWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz50/9dar7XoQM0yKuBRK7BBNQNA1 JTi6ZvOikgco9AsgvV2ENPTJYIfWeVof9+lvGU97YZpR0k1cNewmiTdCxLecH1wg o6F0rlvFNIdMK0qyficW36CB42Dvyy72+9kadZvHSD7+Cun3o835N6ar5ydUEWtM lA5wu4+vEjqycr9qDoIsMriUUGnFiFMg5YJmylHn6g6n6PiBEzlDQmzneRMJEvpP ZxgnGoKuIbkz6/wXHhjWGQnwl7SUYRJ6AVYA2rIbIluGUt90vCPRFWrYCMCBORmZ bii6Kz1zEfCc0zW0ziNtGYySn+Cq5fJ+hJMKub6nr2QdssH/TxWdpJteGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJnjo8DPAj4k5DNhiZ03ecgAcq6MB8GA1UdIwQY MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt ZmE5Y2I1MWNkMGYxLzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFr6dHla +hKCBVlPF6fnqtR2taPB+grM5TySjI0Sacb/NxMsVpnOmE3Lh7Zc0Owr0BImMMGk LSmpfbNTm+6cwdIKU2JZLR48o8NVwgBtN6ZH1Iv7S0QKsMbkFKvwIu2LFbRQ7at+ e6pb80rks+oJ/0c/tYlOKJtmHCfbv+9MooU5TejhQq91cbPhlnAD97kje7lp0LVy tB8IUm/THAoHg3bmbKXuE6w7y6ymvjO7GGu6yqz9bAXnPZ13eEnzFseAZHBW8lsp kRzhRgsQA89ChG3L2AQHsP0i8PObkjZLA4+rdCWulAMhqrJoXrwfXUEliyp6p47I Z/BG1TvcLSYsPQ== -----END CERTIFICATE-----Generated at Sat Apr 26 19:24:20 2025 by rpki-client