$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft File: 1nPYSbfVBHN21X5veW8AGLcLRQY.mft (raw, json) Hash identifier: EsOpPakzCRrQ4TxykN0o7Niq9T4In+iWz/BHa9LTLEs= Subject key identifier: 24:DA:D6:1F:C7:E7:53:C7:90:10:4A:4E:AB:46:B9:71:0F:93:E7:44 Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506 Certificate serial: 0197711B27D816A75814F0DC8EAD688B2D7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft Manifest number: 159A Signing time: Sun 15 Jun 2025 01:01:34 +0000 Manifest this update: Sun 15 Jun 2025 01:01:34 +0000 Manifest next update: Mon 16 Jun 2025 01:01:34 +0000 Files and hashes: 1: 0MIjC24hYDTW286dNJh5qkIVoQM.roa (hash: MXU+N4PdoB06EZ/HjOQwFUwlQG2n1kwzXC/QtbLmJF0=) 2: 1-TrGp-z9XirqNAVi00kZmMtegAQ.roa (hash: cZ4yM8vQzUWF39oRoRKvKg08K8izx43nKLI06xAV69c=) 3: 1i8rkHyD_GEpEeT-VSPmrM7G9hg.roa (hash: T9uIPUHDBJqXpx6DpvHR6pRhllvR8xZm3kC3o7hqoD8=) 4: 1nPYSbfVBHN21X5veW8AGLcLRQY.crl (hash: 99lelZOieoAny63ytsUY3owE5jM2xXxru+e81fS6giY=) 5: ARk7nVFItdFVCXn3sJgvaZ_sS0g.roa (hash: 7EEJNomrXNWfyMmnkFvuBOXpyWJs7s8lvlhWBalFymc=) 6: AgHi8XOuA8AW6mQ9081yaHFi7LY.roa (hash: GntMqrIeYlMh8GQHa17dRcWuW6VcPzJOKzx7OubvqC4=) 7: B3ZVVduO-XEeJJT5EOMOysoNJrI.roa (hash: hGLOqNOpZ+B1pvsSFo3MX/h7GOvVIRzBnRvB+fSCcjA=) 8: FCxYBsvWXDM15GSlGFr8QNu4RYE.roa (hash: 0mvD6N4h6dDsOpud4GT2Wd7vYleLAl39nQHcItAcmYc=) 9: IP6dxUf_151oN-w_YJNTEK8gFBY.roa (hash: DuBNN+Dmeyf3QMZYAuCqpfhCledEl++glFpZz6IL1T4=) 10: P1PPxJKJvcVWj4wZUdazuOzBw4Q.roa (hash: HnwzMbfg3535mDnah1e/JlAfCR0Kk2ea4N+rWTnPdJY=) 11: PXVQtp8fbfqZ5jFNvah34s8vf1o.roa (hash: jLDp0a0yIOcsSTqlqaPMGk/PVKwXxyLWYql8ZP+aAO4=) 12: Q6ELIGGMyAWLP2-8AinpN7dCP-I.roa (hash: +d8Mriz+mLl19IhnPZ6nZe1Nzbfe1sFAT1awQgdm62g=) 13: cdoljHUC9Q9DPh0xJN6bOQNfYgI.roa (hash: asTmSigp9GpUrfz/TvjdPq/vlaO8kX04TRA2R2OR/KQ=) 14: dukzfVMcltyysZZBvIjQGrHZPLo.roa (hash: lgww+jOruUco3lHQUmYd3nD9/JIBuRROS48oFbH8RVc=) 15: ex-k0hBYMJp3Xt63sbFH4dmaPp0.roa (hash: S04+oB5rzQSuvoSFbDJ54Q32HsuNGomFta+C8/uA5R4=) 16: hansf5f-8ZlprgL3Get4FXhM3qg.roa (hash: tdLlts3wjizciN3JSF4Zj+MG2KHEHQp/kr7Y9fEY9Hk=) 17: ktcN_1CUp7LaLxP99XlfX2aR3JY.roa (hash: A4GSKwqS/3qXXX5KzVNih95wvOg7T1xafYwJVI0/Hp0=) 18: rw3wmNK1T9KyKFmnPInliFk653U.roa (hash: byyB+zxuPES8tnSL4mP/gAsHzJQoaaZNw85rrGkKtTM=) 19: s-kJqLbM0KEIQbJ-31AW4jYwkyY.roa (hash: lel2X5N/TCz7Pdk6leCd67OSoke7W8rTYmRW3JpbyRE=) 20: thGwDSmOCB2egMkJayh7HTNBOoA.roa (hash: vrdMbk1dhZJxT4RMXRheIxv51EMC51s58JC+BTY/Vpg=) 21: wAAXYuIkUKtvrw39DQ6SG8wkbtE.roa (hash: jytRpaU7guGLhPsBwh2sgZuD9rMlPbNl3UHkvQz/oCo=) 22: y51hiFPZW-gkNjlGWGRcL6QruIc.roa (hash: IeyRLiiRko+dn467AL+M0JoJJpnysqiT8H5/V2IcxR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 22:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:71:1b:27:d8:16:a7:58:14:f0:dc:8e:ad:68:8b:2d:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506 Validity Not Before: Jun 15 01:01:34 2025 GMT Not After : Jun 16 01:01:34 2025 GMT Subject: CN=24dad61fc7e753c790104a4eab46b9710f93e744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cb:e3:57:6f:5d:2a:71:34:b3:f8:c4:47:ca: 7a:dc:2a:22:f2:b5:6d:a5:8e:8c:97:e5:0f:ff:ad: de:d7:26:8a:93:3b:79:37:41:fa:fb:ba:70:3e:6d: 33:57:7b:97:3c:66:37:bf:7b:2c:ac:98:b1:49:32: 3b:37:42:38:3d:21:c9:aa:17:54:bf:46:a0:63:61: b6:ea:37:1d:81:25:73:8d:af:17:b9:b3:2e:c8:2a: 1e:f0:69:b4:39:93:ab:de:cd:c2:11:1f:68:ea:c8: 04:40:b0:4f:92:32:c4:3c:90:47:cd:cb:d6:fd:22: 49:f4:b2:86:20:bb:9b:05:44:3e:15:56:f5:e5:a1: 2f:c6:b0:8c:6e:d2:4f:57:b3:bb:9b:7a:d1:33:8d: 6c:32:e2:31:35:a2:50:94:60:b4:5f:ad:f5:f8:52: 01:54:00:54:85:94:58:44:90:d5:29:c3:73:d9:22: 1a:41:3a:6d:14:9c:d9:e9:45:ff:b5:3d:72:63:d0: fd:0e:cf:58:af:db:1f:e4:f7:72:27:7e:13:02:a5: e4:16:74:1b:19:fb:8d:e0:0d:98:ef:98:85:ae:46: a1:cd:66:df:e2:29:7d:d9:b4:c0:76:1a:00:fd:e6: 2d:bf:df:e1:1e:4f:34:2f:f6:11:b5:87:4e:fc:fd: ca:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DA:D6:1F:C7:E7:53:C7:90:10:4A:4E:AB:46:B9:71:0F:93:E7:44 X509v3 Authority Key Identifier: keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:d9:20:de:09:d9:a0:97:67:fc:0c:d6:26:2f:b3:f0:51:9c: c6:75:71:48:d2:10:4c:3a:90:17:cb:98:42:69:23:1e:9a:a6: 46:2c:e4:cd:f3:d7:be:b4:7d:51:b8:d8:82:08:2b:b8:b0:4a: a9:07:8b:d7:94:1b:ae:9e:e4:91:35:24:cf:f3:2b:e9:b0:fa: ab:db:0a:ad:fc:8c:e5:a6:d5:2b:5b:3c:9e:93:f1:29:a2:af: 78:f7:db:d4:61:e6:60:e2:a7:46:46:2f:d5:cb:b0:eb:7e:6a: 25:6f:83:c4:7d:59:2b:db:36:13:a8:b4:b9:9e:05:0c:65:55: 79:79:59:83:e5:cf:c6:96:90:84:b4:38:9e:6f:9c:bd:17:bd: 93:54:be:73:4c:30:73:26:f2:12:4e:c1:c0:a7:66:cc:5c:29: 72:bd:a2:91:68:a3:5e:24:64:9c:d4:fa:36:98:54:b0:2e:69: 99:62:1f:7c:36:19:18:88:fc:fa:dd:5d:79:47:c0:ab:d4:22: 32:1b:2d:7a:6e:d3:04:7d:29:df:f2:8d:1c:95:58:41:8e:ba: 87:a5:c6:44:a2:94:cb:52:f9:6d:a2:da:c8:ef:aa:70:75:d3: 7a:db:06:91:17:7c:78:f4:8c:ba:10:8e:48:22:5a:98:1d:3e: 1f:74:4e:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdxGyfYFqdYFPDcjq1oiy1/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw YjQ1MDYwHhcNMjUwNjE1MDEwMTM0WhcNMjUwNjE2MDEwMTM0WjAzMTEwLwYDVQQD EygyNGRhZDYxZmM3ZTc1M2M3OTAxMDRhNGVhYjQ2Yjk3MTBmOTNlNzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MvjV29dKnE0s/jER8p63Coi8rVt pY6Ml+UP/63e1yaKkzt5N0H6+7pwPm0zV3uXPGY3v3ssrJixSTI7N0I4PSHJqhdU v0agY2G26jcdgSVzja8XubMuyCoe8Gm0OZOr3s3CER9o6sgEQLBPkjLEPJBHzcvW /SJJ9LKGILubBUQ+FVb15aEvxrCMbtJPV7O7m3rRM41sMuIxNaJQlGC0X631+FIB VABUhZRYRJDVKcNz2SIaQTptFJzZ6UX/tT1yY9D9Ds9Yr9sf5PdyJ34TAqXkFnQb GfuN4A2Y75iFrkahzWbf4il92bTAdhoA/eYtv9/hHk80L/YRtYdO/P3KaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTa1h/H51PHkBBKTqtGuXEPk+dEMB8GA1UdIwQY MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt OGVlYjc1N2NmNTQ1LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1 LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3tkg3gnZ oJdn/AzWJi+z8FGcxnVxSNIQTDqQF8uYQmkjHpqmRizkzfPXvrR9UbjYgggruLBK qQeL15Qbrp7kkTUkz/Mr6bD6q9sKrfyM5abVK1s8npPxKaKvePfb1GHmYOKnRkYv 1cuw635qJW+DxH1ZK9s2E6i0uZ4FDGVVeXlZg+XPxpaQhLQ4nm+cvRe9k1S+c0ww cybyEk7BwKdmzFwpcr2ikWijXiRknNT6NphUsC5pmWIffDYZGIj8+t1deUfAq9Qi Mhstem7TBH0p3/KNHJVYQY66h6XGRKKUy1L5baLayO+qcHXTetsGkRd8ePSMuhCO SCJamB0+H3ROVw== -----END CERTIFICATE-----Generated at Sun Jun 15 09:09:22 2025 by rpki-client