$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft File: iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft (raw, json) Hash identifier: f32GIy2G2XqSCGGRZWcTMrHZQV1gluA6Mm+RkVZaGOw= Subject key identifier: 09:22:92:63:B1:C9:D4:AF:2E:4E:C8:36:68:DF:86:12:B4:6B:05:10 Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 0196711CCFFB85F75D779A92A4EA1D716B4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft Manifest number: 1531 Signing time: Sat 26 Apr 2025 08:00:35 +0000 Manifest this update: Sat 26 Apr 2025 08:00:35 +0000 Manifest next update: Sun 27 Apr 2025 08:00:35 +0000 Files and hashes: 1: 03ttC7MNZ-eN5xujfgJt0dz2GhY.roa (hash: N6ysVlOyohrexefrFHAfhhT7Stu1rZo1RMy/wUBR7MQ=) 2: 5WM_zAMHpqFWYVzE6IZZi6hpdnY.roa (hash: /uh58nVe20e1KyQ1vsMKFZb5lxZnKC2kKaUik0+Y3GI=) 3: 91l4ZLiFMW7ttAVA_13Nf_vSwVo.roa (hash: 6ZMOAo7QZ6muivlXzRnrZugrdEX8AI+FwG0c36ozCJU=) 4: AhTO7WBaZMu_Dr1N8NIiVL9XCpU.roa (hash: nT81Q9YgZY4q725cyr+A+UtBMshY9pksRnCCbkN57Ug=) 5: IWmCzk6cq45EnYSJ96MKtN3JC8I.roa (hash: XoBuI/JfFprw14YCMqakYs9R02jMXW/1dfsiuGeuG6E=) 6: Nhe42hsHlP2RBTZ7_kDi1_iiNfU.roa (hash: 1ChBAUPQiX4oKvnrR0PT43uzbwy03dsgNX67eormdRo=) 7: Qgvz3qeamfuL3u6R2fQCsmpxSRw.roa (hash: Fthf6nbQ6BOb4+e4Sn3jtmrBprh7tBkDmIQLTEMcHSw=) 8: R0-mbrlkQj2Gy6Nt6WDL988hyv8.roa (hash: TNdehcbateMNki61iSUqlN2sgtl/UwdBnEcO8z3cSF0=) 9: TZy2Lj5Do11SuxgPs2obSCOm6wo.roa (hash: wQuMuVdv7vu7zZtJFhzSt8gNYJsiuUHW5bBFqAXYCwE=) 10: VNqmap2cBv5ChNgOn9ms1SN0H5o.roa (hash: w05TtavIfxX9TdHISFDvez7dGIfRkXGhTg1l75h/Dg4=) 11: YqBkj1ylfOU3p4nh5tWQJYeuZwc.roa (hash: e97BhLLiAxaAWW5yEKTWMiYt2ECxgzdgXHgWr5LzCXc=) 12: _uI7KgVWERW5ciSrmPSld8U6PMM.roa (hash: aCEcvYxY6pmMS4ucVj7Td5LTfLLeSnWc2GvVH4GmfSA=) 13: bksTsZ-cnXirfbGe5nOmhmEPTTY.roa (hash: TrYgodJgIf3QruBYh8Ql9SuQhoWZToHJF9bYnOMjot0=) 14: hyT2EfPv12n8N_VGnG0HoBv4WA8.roa (hash: qwaOMuBBLopfdSUzcmQ8ElB63zBFeiv+lpSkM4LzxhM=) 15: iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl (hash: LxuxsCv2MjwzEAT0RQhKnKgK8HYjHCJPX5pYRR7PiaI=) 16: jjdoaZZ5Z0TLOYBEYoTrJF5pk8g.roa (hash: 11pCwSSXo25WM4RT2PeM5zRMDmPAdkAqViKY2TeGUtA=) 17: wqytb1PA_Vs89tauNyxpWqTXHcs.roa (hash: QrQj+j17rq7QnFS50LWdWH3bq1I5zdpeI+T0lQTYEG8=) 18: wyWiX4Im8oisLaWNIo4l-9mnjwE.roa (hash: cAnnmggJab3fQCHKyRLtLldwW9SkCCdIfA55sbJKMoQ=) 19: ybDfqb3XZNRLUBxHkNBKsIILb5s.roa (hash: 7YCnDF3mW0qqjrtRov5y15/Rj5mINnxt1l1MoE0Q2v4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 08:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:71:1c:cf:fb:85:f7:5d:77:9a:92:a4:ea:1d:71:6b:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Apr 26 08:00:35 2025 GMT Not After : Apr 27 08:00:35 2025 GMT Subject: CN=09229263b1c9d4af2e4ec83668df8612b46b0510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:33:6a:e8:a8:88:cd:50:be:51:d9:61:b0:36: 16:56:d6:4d:8d:3f:88:22:9d:b4:ce:45:d7:04:16: 3f:9e:d6:0b:11:33:1b:49:30:cd:6c:a3:f8:8d:6d: 75:be:b7:44:ea:3a:90:c8:4a:0b:e1:3d:a7:cf:9e: 28:9b:a1:6c:3d:a0:a5:85:18:d1:2e:d8:9d:bb:92: 77:5c:a8:45:c1:09:5c:31:8e:63:bf:bf:61:8c:70: ac:f7:a4:50:af:e9:c6:4b:ed:53:5c:22:ab:07:1a: 5f:c1:15:c9:ff:a0:5d:15:1d:0b:18:9f:76:bb:54: bb:31:93:73:d6:fc:3f:e0:9f:e4:1b:8f:02:91:ce: e7:33:43:dc:43:b5:c1:5e:97:15:77:14:80:88:9e: ca:28:6c:99:13:e8:fa:26:72:4a:47:30:33:a2:6f: 4b:72:42:5e:a9:0e:b7:ab:53:02:0a:9b:e0:e0:42: a3:e1:81:3d:bf:71:24:ee:27:57:97:31:d3:16:e4: 5e:7c:9e:68:bb:5c:7e:e6:45:46:66:89:de:f8:4e: bf:fb:96:30:d8:3a:1d:a2:8e:0f:3b:2a:6b:93:09: 19:2a:7a:86:0e:25:03:c4:be:f0:1a:99:74:32:05: 66:7a:6e:b1:f2:46:e3:c9:69:a6:69:58:47:95:bd: 6b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:22:92:63:B1:C9:D4:AF:2E:4E:C8:36:68:DF:86:12:B4:6B:05:10 X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:d7:9c:f6:c0:28:34:0d:f3:2a:5a:3d:6c:4e:90:75:f5:c4: 01:35:7e:5b:4a:d2:bc:ba:f7:da:5b:9c:72:de:ef:13:fb:f9: 00:61:af:47:1f:5b:c4:7f:ec:cc:5c:db:df:23:ad:7c:48:52: 1d:2b:3e:19:e9:44:b0:13:c9:98:1a:9b:f9:26:71:3a:c9:dd: 13:a4:55:36:4a:c2:75:0a:1c:95:1d:e9:80:b2:49:69:fe:8a: 7d:50:c9:f5:29:24:db:c4:9f:e5:88:54:b2:54:b5:d9:a2:8d: 20:5e:26:d7:4e:37:ed:e0:b2:d0:cf:36:48:fb:f6:a5:aa:58: f4:f8:4a:c2:25:e5:0f:23:ea:3d:e3:8d:f1:53:6f:8c:47:27: 55:6a:ed:7a:e2:9e:33:cd:18:f5:2f:c4:b7:2a:59:c3:03:ac: ba:4b:d2:66:3b:8c:c4:2e:63:76:5b:86:f1:06:f2:e3:9f:f6: 6d:18:94:40:3b:f7:a4:82:6c:bf:c6:a5:89:9b:c9:ba:58:55: 68:67:3a:71:1d:a9:00:02:eb:9c:c2:22:38:1c:b4:f6:92:73: 26:90:15:02:4e:8a:5b:42:84:ec:e1:a6:c8:b7:31:8a:b8:dc: 0e:c8:84:27:c5:3a:fb:b1:04:81:c3:da:56:90:47:de:c2:92: a0:95:43:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZxHM/7hfddd5qSpOodcWtKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjUwNDI2MDgwMDM1WhcNMjUwNDI3MDgwMDM1WjAzMTEwLwYDVQQD EygwOTIyOTI2M2IxYzlkNGFmMmU0ZWM4MzY2OGRmODYxMmI0NmIwNTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzNq6KiIzVC+UdlhsDYWVtZNjT+I Ip20zkXXBBY/ntYLETMbSTDNbKP4jW11vrdE6jqQyEoL4T2nz54om6FsPaClhRjR Ltidu5J3XKhFwQlcMY5jv79hjHCs96RQr+nGS+1TXCKrBxpfwRXJ/6BdFR0LGJ92 u1S7MZNz1vw/4J/kG48Ckc7nM0PcQ7XBXpcVdxSAiJ7KKGyZE+j6JnJKRzAzom9L ckJeqQ63q1MCCpvg4EKj4YE9v3Ek7idXlzHTFuRefJ5ou1x+5kVGZone+E6/+5Yw 2Dodoo4POyprkwkZKnqGDiUDxL7wGpl0MgVmem6x8kbjyWmmaVhHlb1rKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkikmOxydSvLk7INmjfhhK0awUQMB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtec9sAo NA3zKlo9bE6QdfXEATV+W0rSvLr32lucct7vE/v5AGGvRx9bxH/szFzb3yOtfEhS HSs+GelEsBPJmBqb+SZxOsndE6RVNkrCdQoclR3pgLJJaf6KfVDJ9Skk28Sf5YhU slS12aKNIF4m10437eCy0M82SPv2papY9PhKwiXlDyPqPeON8VNvjEcnVWrteuKe M80Y9S/EtypZwwOsukvSZjuMxC5jdluG8Qby45/2bRiUQDv3pIJsv8aliZvJulhV aGc6cR2pAALrnMIiOBy09pJzJpAVAk6KW0KE7OGmyLcxirjcDsiEJ8U6+7EEgcPa VpBH3sKSoJVD+g== -----END CERTIFICATE-----Generated at Sat Apr 26 17:49:47 2025 by rpki-client