$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft File: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json) Hash identifier: wV75gSrDss6msP4aDuwDSOwv6aP5mYhzhhy8gFPYYlg= Subject key identifier: 16:E9:2D:9B:F2:94:F7:B2:43:B0:24:4A:1E:08:5B:EE:7B:D6:43:6B Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019679E93A0F16D173E5D93CE8E4C87FDD39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft Manifest number: 152E Signing time: Mon 28 Apr 2025 01:00:49 +0000 Manifest this update: Mon 28 Apr 2025 01:00:49 +0000 Manifest next update: Tue 29 Apr 2025 01:00:49 +0000 Files and hashes: 1: 0UeT5v9kAog4Vy_9d6T-L38uB2Q.roa (hash: c3R0NvI9wSQVTmaH5yGuGplsQLYtXrXERE9zYTzHhy8=) 2: 4AS-0AOLUx__wmNhCGTeWPEnAQo.roa (hash: 1yOTh34TCVsaX9HiMqqafQzrMBKAhMm9U+yl1SEcoNw=) 3: 5Z9zQYiQT-9bbmf1gYjYtdMqh-A.roa (hash: dwoCL98zxAribSjy38tsgE74R02P0uk7PsgJvptX1JU=) 4: 6Ebu0HcrsLkrrgDBeBB1A2dy2BM.roa (hash: TccVrsP1WNA2hyHvabl2Zj8Mx0JoLI/zobG0dsNCzu8=) 5: 9OZxkpid54x2rsU5VRKfjY_gB2A.roa (hash: 38cpSiAtwD6roS3bP5O86nTXrnPOD+5Jin9ozETV8sI=) 6: Ay-SweIqjTD5x-W0BgOFlXFvGto.roa (hash: ENRR9lHZ+JRK+4SQ3UrX8bD9aFZzV05sOeoNCH2LeFY=) 7: Ctu_zdT55QvC6-G-SxIKwGi4wDc.roa (hash: wdlWguNWI5zFZbP+4kdzwSssF7MRzveLv4qiPvTiQro=) 8: EppnmZl-hivZ6yXCw8PIfVHg8ks.roa (hash: Wiyihq6BaYpeBkE31BV7I7S5C0Ot3rbB+PhwUmAMu5Q=) 9: FqYIT9v1PIigYUXlKqygd4WMyec.roa (hash: tv8mfQBReWKdNDNzaDeKywrzkQOxW77WcbdZkUDG+AU=) 10: G8IgPHN2FXyIl75Djei3X2y2GYc.roa (hash: mISIjy6aMOLzu15LO7KCjeFGNl/oTWf1+M4gWrvBkCY=) 11: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: oWembWt482peT0TlFFpT1bQsdrF2gN/5bZvrZLfqAFU=) 12: KcaXY5GqNLQM-eAtasEVAbUL2j0.roa (hash: eFzhogYKRZ4wuRZtpbVGGo9W1JTGOiiHVbwPqMYU5QQ=) 13: MUKicFTzhC00zdrY_h1AYYxVa-M.roa (hash: Ids/SWcSu2QegMrmqZTQrwfmzaSd55FYqNM5CzWSoLA=) 14: NKBdNnKPToLI47Hnl3n9Lr0qpVE.roa (hash: TjUhViH8+so4224KmGJym6LJscd3XEc8YHqommmYBXc=) 15: PNUti3X7fTE0OHEkRLQFQxtKCuk.roa (hash: aliXDs58/kIRits7ot3W71lRxlaREa6XrlyMb3I4GP0=) 16: SEv5PYdinUVT5nM_RvN02I4WnPI.roa (hash: bEn83H7TItfWeMGBLjyh2LDH4cnpzc0XU4z33ahI6+E=) 17: _4zuoFfJ1lWOHRxbFgnICqvRYTo.roa (hash: 6Z3yT4Uro8UD6Kg7GG2ZeAaXcFVddN8U5JapvYxDnt4=) 18: _PMt2OoL3tDM4rKRYVgBBMfWRFA.roa (hash: Ix2jd6T1COBEpwRmmTUBGYHR6LZbzYxbMPftc77UFdE=) 19: aym9fFTlCOO6_TFKucqP8rQK7Dc.roa (hash: 9WJnq0EqKoeXj6Ls0YEvw8jPPKPCxSuUMIvPja3ohkE=) 20: eC_DqBJXUL0bZ3NGBuH9zqfQGg4.roa (hash: eglPjv/u5AlTJot/2QRfyPZBeks5h8j1RactwsszD4s=) 21: fKz1-9xo27dZ2S0IPacWOZTZsy4.roa (hash: Km7ntY5vzUDI+if2xFqUXvoglWfTB7cuYK1InFbKqaw=) 22: fN6-ucvixEMwzfEXNRUOgkq3p3w.roa (hash: QSoq1kjSTfa9vGe0ryYrcV8u0DdFoiJrIzt5wytYDbI=) 23: gGSxPt2Sh4M8i7J8HJfnceMCe00.roa (hash: O0jgtQJgjrWOC325S7JKGmv6jCCpS56jcL4dcIe6mxs=) 24: hS1jiuVl2dU6SMvZXo-aur-baIo.roa (hash: wRVp8ycxJk1e2oMiYTfs3ketnUSkqnJTyHStucSEmSA=) 25: kPALK0u_pJmbieCv7kbynfsqawg.roa (hash: r0Pzr2DCQpihDWBe0rVtTwTVSjviPIsMp30ZSdfUtv4=) 26: lC-MwQo01Gp82RT3mnQhOnXTNVo.roa (hash: txd4viUbMysMasnkwJrSk5DhmqAOC+f+W+IModM0p6I=) 27: oM5327UG2mWTAGTtGcOz-JmJhgg.roa (hash: h1ZmVFDbPqTV4L0/Cf60sFkuro5CPdVUS191+lmyuUs=) 28: olvBi524Gp3rI2E2UN409GVcjvQ.roa (hash: vTG53M/PHsVm4KjJT/BnZq8SO+0VF2H1PbNP7yYXlSU=) 29: rIGw4rvANHfOuMx5NCLXbIqwca4.roa (hash: Ax9z9G2JPoeUmfYGQQfPW9WibNiDAosH5QsVz6vOEcs=) 30: sT-XqmsaKrnwKY9Ra9wzvok_kNE.roa (hash: GUZUDJYWdLrHKEBuVtLpBU6JuOIR3vdhCyBhBteo5W8=) 31: sgWOuS580F3ik2qbZoDfyyTVqq8.roa (hash: 1rWiUes/UGLhnsQQwqKoTOa3kTzfkG+OrqoT+5TD+hc=) 32: w_q7lMoSjsh87AtbKJG_MjZSzbs.roa (hash: aLEvMvWLIZ7MDfR1jeEEkQ6VSWVyC5TKwxKUplfky8o=) 33: yh42Ac90RZWWPXc_66CM7NZ_M5k.roa (hash: tzV8E5OYlSixUq1CthaGUqHvnzc4smQonJaVny+Z3SM=) 34: yzwX0PcQhkzl7kpV2tBHUCY-ZU4.roa (hash: p9i8I2Z2Hnlivas+hpBSidTPpg6KPMeUDk8C71jgMes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 23:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:79:e9:3a:0f:16:d1:73:e5:d9:3c:e8:e4:c8:7f:dd:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Apr 28 01:00:49 2025 GMT Not After : Apr 29 01:00:49 2025 GMT Subject: CN=16e92d9bf294f7b243b0244a1e085bee7bd6436b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0a:a8:5b:33:2c:90:1e:ed:c8:23:ff:9e:50: 2e:0d:88:b9:ac:c7:ca:58:09:2a:e7:a9:50:ae:b0: f4:9d:4d:65:06:d1:ee:7c:cb:10:0e:1a:c3:28:97: 6c:07:7d:64:9f:a6:8e:a4:f7:53:8d:15:10:63:2d: 8d:bd:27:a9:1a:59:5c:7e:63:45:98:2c:b2:09:5e: 53:cf:03:73:82:9e:f9:81:4c:87:40:01:a2:d5:11: 8f:54:20:f4:16:dc:49:cf:59:7f:29:48:20:8a:c1: ef:b4:71:18:8c:0d:d8:9e:b6:4e:bd:ee:4e:4e:fb: 4e:6f:10:6b:1e:7d:9b:55:fa:b3:63:20:2e:f8:5b: 79:6f:71:78:bf:7a:65:8b:4a:3b:30:ea:87:19:e9: f6:2d:5b:44:ee:08:e7:1e:86:26:b7:7f:73:1f:db: ed:65:c8:40:50:cf:9a:b0:e3:4c:09:70:81:c9:7c: 6e:8c:7e:f2:c6:ba:9e:c2:da:d6:2b:64:3f:6a:d7: 55:26:dd:a5:35:1e:68:9c:c1:ff:45:0d:f0:1a:4a: d0:f8:f9:7e:ad:06:52:bb:77:f9:91:dc:6b:4d:4c: 50:7a:54:dd:43:e1:05:5d:06:ed:16:a8:b2:69:98: 2f:27:42:3e:83:9b:22:df:d8:36:91:0d:12:d6:41: 63:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E9:2D:9B:F2:94:F7:B2:43:B0:24:4A:1E:08:5B:EE:7B:D6:43:6B X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:65:fb:5f:b6:38:fb:d3:af:d7:ab:e3:80:81:72:70:60:0c: b1:b1:6a:c1:8c:92:f1:91:b9:b8:1b:88:a6:17:e1:e8:29:f2: 11:6a:4b:eb:b0:bf:b3:6a:13:8a:6d:b4:da:86:28:2a:bd:94: 80:e6:f3:1b:99:e0:88:cd:38:e5:2f:0d:28:32:e2:62:fe:f6: aa:41:f4:71:f8:94:02:46:52:12:2a:f0:74:2b:af:11:61:c1: 61:82:6a:84:6e:0d:a2:03:67:d5:fe:af:3b:ad:d0:59:41:83: 77:4d:0c:cd:40:d9:b1:b4:c3:ff:d9:bd:b9:32:9f:74:6e:6e: 52:f3:dc:8e:b0:54:81:0f:58:dc:4b:16:eb:70:cf:ef:34:f8: 57:12:cb:4e:3d:99:07:2f:18:10:40:ab:4f:b1:c5:d9:7a:14: 4b:a5:02:72:95:75:8c:1b:e6:db:11:65:93:7a:74:95:a7:99: 27:32:e8:ee:51:ed:d9:03:01:bf:e0:eb:04:39:56:d4:f1:c6: 15:c9:9d:c5:8c:d2:ba:b6:b2:e9:48:ef:06:d3:b5:8d:b0:8c: a9:e9:fb:b5:8c:cd:51:76:70:92:c9:ef:c6:92:d2:8a:44:f6: 27:04:06:6e:7f:4d:c3:a9:41:66:7f:3e:07:4c:a2:d2:27:20: c9:0c:ff:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ56ToPFtFz5dk86OTIf905MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjUwNDI4MDEwMDQ5WhcNMjUwNDI5MDEwMDQ5WjAzMTEwLwYDVQQD EygxNmU5MmQ5YmYyOTRmN2IyNDNiMDI0NGExZTA4NWJlZTdiZDY0MzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgqoWzMskB7tyCP/nlAuDYi5rMfK WAkq56lQrrD0nU1lBtHufMsQDhrDKJdsB31kn6aOpPdTjRUQYy2NvSepGllcfmNF mCyyCV5TzwNzgp75gUyHQAGi1RGPVCD0FtxJz1l/KUggisHvtHEYjA3YnrZOve5O TvtObxBrHn2bVfqzYyAu+Ft5b3F4v3pli0o7MOqHGen2LVtE7gjnHoYmt39zH9vt ZchAUM+asONMCXCByXxujH7yxrqewtrWK2Q/atdVJt2lNR5onMH/RQ3wGkrQ+Pl+ rQZSu3f5kdxrTUxQelTdQ+EFXQbtFqiyaZgvJ0I+g5si39g2kQ0S1kFjTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbpLZvylPeyQ7AkSh4IW+571kNrMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUGX7X7Y4 +9Ov16vjgIFycGAMsbFqwYyS8ZG5uBuIphfh6CnyEWpL67C/s2oTim202oYoKr2U gObzG5ngiM045S8NKDLiYv72qkH0cfiUAkZSEirwdCuvEWHBYYJqhG4NogNn1f6v O63QWUGDd00MzUDZsbTD/9m9uTKfdG5uUvPcjrBUgQ9Y3EsW63DP7zT4VxLLTj2Z By8YEECrT7HF2XoUS6UCcpV1jBvm2xFlk3p0laeZJzLo7lHt2QMBv+DrBDlW1PHG FcmdxYzSuray6UjvBtO1jbCMqen7tYzNUXZwksnvxpLSikT2JwQGbn9Nw6lBZn8+ B0yi0icgyQz/HA== -----END CERTIFICATE-----Generated at Mon Apr 28 06:08:50 2025 by rpki-client