$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft File: 1nPYSbfVBHN21X5veW8AGLcLRQY.mft (raw, json) Hash identifier: Hvn3sDujv/6tRVd7pHymz+NJbs9OrUAfHb5KQohsexM= Subject key identifier: 85:75:B7:9E:91:FC:33:E5:91:71:E8:E9:4D:CC:C4:84:5B:2D:13:8D Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506 Certificate serial: 019679E9D14338C33AE4BB149825E52E52DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft Manifest number: 151A Signing time: Mon 28 Apr 2025 01:01:28 +0000 Manifest this update: Mon 28 Apr 2025 01:01:28 +0000 Manifest next update: Tue 29 Apr 2025 01:01:28 +0000 Files and hashes: 1: 0MIjC24hYDTW286dNJh5qkIVoQM.roa (hash: MXU+N4PdoB06EZ/HjOQwFUwlQG2n1kwzXC/QtbLmJF0=) 2: 1-TrGp-z9XirqNAVi00kZmMtegAQ.roa (hash: cZ4yM8vQzUWF39oRoRKvKg08K8izx43nKLI06xAV69c=) 3: 1i8rkHyD_GEpEeT-VSPmrM7G9hg.roa (hash: T9uIPUHDBJqXpx6DpvHR6pRhllvR8xZm3kC3o7hqoD8=) 4: 1nPYSbfVBHN21X5veW8AGLcLRQY.crl (hash: B3caenbw3q2gjZgcDVSo/kmmefE5dc3su2nhxFGm2HA=) 5: ARk7nVFItdFVCXn3sJgvaZ_sS0g.roa (hash: 7EEJNomrXNWfyMmnkFvuBOXpyWJs7s8lvlhWBalFymc=) 6: AgHi8XOuA8AW6mQ9081yaHFi7LY.roa (hash: GntMqrIeYlMh8GQHa17dRcWuW6VcPzJOKzx7OubvqC4=) 7: B3ZVVduO-XEeJJT5EOMOysoNJrI.roa (hash: hGLOqNOpZ+B1pvsSFo3MX/h7GOvVIRzBnRvB+fSCcjA=) 8: FCxYBsvWXDM15GSlGFr8QNu4RYE.roa (hash: 0mvD6N4h6dDsOpud4GT2Wd7vYleLAl39nQHcItAcmYc=) 9: IP6dxUf_151oN-w_YJNTEK8gFBY.roa (hash: DuBNN+Dmeyf3QMZYAuCqpfhCledEl++glFpZz6IL1T4=) 10: P1PPxJKJvcVWj4wZUdazuOzBw4Q.roa (hash: HnwzMbfg3535mDnah1e/JlAfCR0Kk2ea4N+rWTnPdJY=) 11: PXVQtp8fbfqZ5jFNvah34s8vf1o.roa (hash: jLDp0a0yIOcsSTqlqaPMGk/PVKwXxyLWYql8ZP+aAO4=) 12: Q6ELIGGMyAWLP2-8AinpN7dCP-I.roa (hash: +d8Mriz+mLl19IhnPZ6nZe1Nzbfe1sFAT1awQgdm62g=) 13: cdoljHUC9Q9DPh0xJN6bOQNfYgI.roa (hash: asTmSigp9GpUrfz/TvjdPq/vlaO8kX04TRA2R2OR/KQ=) 14: dukzfVMcltyysZZBvIjQGrHZPLo.roa (hash: lgww+jOruUco3lHQUmYd3nD9/JIBuRROS48oFbH8RVc=) 15: ex-k0hBYMJp3Xt63sbFH4dmaPp0.roa (hash: S04+oB5rzQSuvoSFbDJ54Q32HsuNGomFta+C8/uA5R4=) 16: hansf5f-8ZlprgL3Get4FXhM3qg.roa (hash: tdLlts3wjizciN3JSF4Zj+MG2KHEHQp/kr7Y9fEY9Hk=) 17: ktcN_1CUp7LaLxP99XlfX2aR3JY.roa (hash: A4GSKwqS/3qXXX5KzVNih95wvOg7T1xafYwJVI0/Hp0=) 18: rw3wmNK1T9KyKFmnPInliFk653U.roa (hash: byyB+zxuPES8tnSL4mP/gAsHzJQoaaZNw85rrGkKtTM=) 19: s-kJqLbM0KEIQbJ-31AW4jYwkyY.roa (hash: lel2X5N/TCz7Pdk6leCd67OSoke7W8rTYmRW3JpbyRE=) 20: thGwDSmOCB2egMkJayh7HTNBOoA.roa (hash: vrdMbk1dhZJxT4RMXRheIxv51EMC51s58JC+BTY/Vpg=) 21: wAAXYuIkUKtvrw39DQ6SG8wkbtE.roa (hash: jytRpaU7guGLhPsBwh2sgZuD9rMlPbNl3UHkvQz/oCo=) 22: y51hiFPZW-gkNjlGWGRcL6QruIc.roa (hash: IeyRLiiRko+dn467AL+M0JoJJpnysqiT8H5/V2IcxR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 23:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:79:e9:d1:43:38:c3:3a:e4:bb:14:98:25:e5:2e:52:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506 Validity Not Before: Apr 28 01:01:28 2025 GMT Not After : Apr 29 01:01:28 2025 GMT Subject: CN=8575b79e91fc33e59171e8e94dccc4845b2d138d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a6:75:b1:da:7d:f2:f4:2f:5a:03:3e:52:e1: 2d:a6:85:a2:7d:7f:ec:45:33:f2:11:45:6b:65:ce: 3b:97:78:2c:e7:46:6e:a1:bf:d1:c2:cd:ec:26:72: 33:85:c2:f7:96:09:f1:d8:23:8f:f8:b0:61:77:66: e5:f9:36:d0:91:fb:71:96:5f:71:3a:f9:17:d9:30: e3:67:b4:c3:f7:0e:21:24:29:3e:c2:03:90:96:ae: 49:05:34:a1:b2:9e:94:bf:d2:34:28:3d:14:44:17: 80:df:54:60:e5:9f:10:43:2d:84:60:29:88:de:59: d7:5e:37:61:af:38:31:a2:da:bb:ce:28:4b:0e:4b: df:67:c9:fa:3c:c7:e4:88:3e:ea:84:85:18:9e:00: 3e:a9:72:35:65:70:33:bb:04:98:8a:20:f0:d3:10: 96:98:5f:99:84:5c:62:b3:47:f5:dd:9b:ef:b9:06: a7:db:97:39:4c:b1:7d:95:9c:f4:88:db:fc:97:71: 6a:eb:b6:13:a9:28:e2:ef:6a:af:a7:96:df:b0:d9: 60:43:26:e0:2e:70:0e:1a:0e:1d:5a:a5:b2:cf:bb: 57:83:9b:17:b1:09:05:41:ab:9d:ff:ad:ac:23:83: 29:6d:94:cb:01:13:63:03:55:61:34:96:2a:57:82: bb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:75:B7:9E:91:FC:33:E5:91:71:E8:E9:4D:CC:C4:84:5B:2D:13:8D X509v3 Authority Key Identifier: keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:23:8c:cc:22:45:94:11:df:e3:19:dd:f2:ab:b6:68:a8:6c: 67:43:fe:27:2d:37:63:6e:a2:8d:13:fa:0f:76:48:26:85:f4: a1:83:7a:38:8b:1a:82:b2:58:35:68:36:a7:73:b6:49:f8:70: 6b:d2:53:8a:78:26:18:0e:70:1c:4d:9f:da:ab:8a:e2:52:53: 5f:1f:11:f9:04:d0:1b:d6:b3:27:9f:10:30:4d:b9:35:62:85: f7:d5:d4:43:33:0b:65:22:68:3f:2e:f7:1c:28:14:f3:47:04: 16:49:9f:bd:98:29:7d:7f:ca:3e:bd:37:94:40:e7:82:ab:00: 2a:c2:59:a5:d6:3a:0c:88:7d:a4:48:c3:e8:c5:f5:f1:58:bb: c0:bb:16:15:89:11:9b:51:fb:af:b4:b1:01:d2:62:f1:f2:05: 3b:3f:5c:05:8a:5f:81:bb:d6:0e:05:df:02:a1:f3:39:cd:9d: a4:d6:e3:3d:9b:85:6f:08:5f:05:3a:58:42:b4:89:81:cd:9c: 2a:a2:89:31:cd:3b:3f:45:e3:b0:0c:c1:ab:7c:7b:4b:3f:ef: d9:27:e7:1b:06:37:0d:98:c2:c3:51:5e:62:91:e6:2a:61:e5: 73:a0:79:60:94:a2:2b:13:7a:08:3f:da:35:06:26:8c:69:13: a4:4d:d3:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ56dFDOMM65LsUmCXlLlLbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw YjQ1MDYwHhcNMjUwNDI4MDEwMTI4WhcNMjUwNDI5MDEwMTI4WjAzMTEwLwYDVQQD Eyg4NTc1Yjc5ZTkxZmMzM2U1OTE3MWU4ZTk0ZGNjYzQ4NDViMmQxMzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qZ1sdp98vQvWgM+UuEtpoWifX/s RTPyEUVrZc47l3gs50Zuob/Rws3sJnIzhcL3lgnx2COP+LBhd2bl+TbQkftxll9x OvkX2TDjZ7TD9w4hJCk+wgOQlq5JBTShsp6Uv9I0KD0URBeA31Rg5Z8QQy2EYCmI 3lnXXjdhrzgxotq7zihLDkvfZ8n6PMfkiD7qhIUYngA+qXI1ZXAzuwSYiiDw0xCW mF+ZhFxis0f13ZvvuQan25c5TLF9lZz0iNv8l3Fq67YTqSji72qvp5bfsNlgQybg LnAOGg4dWqWyz7tXg5sXsQkFQaud/62sI4MpbZTLARNjA1VhNJYqV4K7ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIV1t56R/DPlkXHo6U3MxIRbLRONMB8GA1UdIwQY MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt OGVlYjc1N2NmNTQ1LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1 LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSOMzCJF lBHf4xnd8qu2aKhsZ0P+Jy03Y26ijRP6D3ZIJoX0oYN6OIsagrJYNWg2p3O2Sfhw a9JTingmGA5wHE2f2quK4lJTXx8R+QTQG9azJ58QME25NWKF99XUQzMLZSJoPy73 HCgU80cEFkmfvZgpfX/KPr03lEDngqsAKsJZpdY6DIh9pEjD6MX18Vi7wLsWFYkR m1H7r7SxAdJi8fIFOz9cBYpfgbvWDgXfAqHzOc2dpNbjPZuFbwhfBTpYQrSJgc2c KqKJMc07P0XjsAzBq3x7Sz/v2SfnGwY3DZjCw1FeYpHmKmHlc6B5YJSiKxN6CD/a NQYmjGkTpE3TZg== -----END CERTIFICATE-----Generated at Mon Apr 28 09:10:36 2025 by rpki-client