$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft File: rtruqRF6HVzMMgIilVoJ-qB5j9k.mft (raw, json) Hash identifier: ydmCu5kcIBex+VfLhfX5eLN4UH7/md1kJFm3NFZPJ9E= Subject key identifier: B7:E6:3E:E9:91:91:87:4E:14:5D:E1:E0:EE:F9:38:53:F8:A7:44:87 Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Certificate serial: 019671F8824EFD98F65C9792A26AD8753F84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft Manifest number: 151B Signing time: Sat 26 Apr 2025 12:00:33 +0000 Manifest this update: Sat 26 Apr 2025 12:00:33 +0000 Manifest next update: Sun 27 Apr 2025 12:00:33 +0000 Files and hashes: 1: 2J2zD3rTOO4ekhA-SPW7MGnbxGQ.roa (hash: ZDpaopgvjDrdBtYEwGx6CMJY/HeEIsJZYVpJsQWQQUY=) 2: 3mlxlqxxKeV1HcJ7bUJquBWrLPM.roa (hash: LdsNRL7zR8y++XszDkFJs9ezvrT1lTI0NjP093U5ljg=) 3: 4SdJi3BPt8-RDec3IP7ET9slx0Q.roa (hash: QGo99RDwnHzRGoxgfvvtNisf3X6cgnQ851GWbQCaLvs=) 4: 7bwXhpAggJ_eID4STuVsUUonWWE.roa (hash: jwAsf9XJ11Ai8DUGeYC8bRJZ9GOha8mucoK1IxHdfkY=) 5: CzaaDeOWHQ6kTwaAx_O9YkLSomg.roa (hash: GUI6ZQYLsnldTDNTDgycT5JJ61OE2lf64zAhH2MlHo0=) 6: F-IifLCSbkSEOgi4sKV1jV1DQV8.roa (hash: 7kKwPi2Jx1AhBc2lAsg83y6Ji6J7QPEIqmUmsdkgOP8=) 7: M9dXL-Oza0PNDTAVGMoUMD1-IlA.roa (hash: jhP7c0ubJpNShQl4AZbo7W8l+sNrqPUvkjw+552fAtk=) 8: N8yg-rsBIkNZqhIg3aIitQuuaUk.roa (hash: Vq9e+6B3g3tkLctdReugpY+B6dczna3y7yxghSqb1lg=) 9: Oac09hx3rqQddn6sXzqSQ66tEsk.roa (hash: 0YnaolK2p37HCU8XIKe9HEtLFbwrR1vF1VCsBkGV6VQ=) 10: QB06ZN3QBBlBCzXQ38Wxu-W0hTY.roa (hash: YOe7BlkRM3bRTDlXC12POtxs/G4SQHLEyUujJ2j8le4=) 11: QeLZg2QtCjiT_FgF9I_8vW-GdW8.roa (hash: SAeRikMKDg+ufTk9edjpL98DiGUmXizgEulF/oacLNQ=) 12: bETkyP80sy6hlRCzvEGmZeisxF4.roa (hash: +PMdRBV3+/H3Dapb4/ZootNYzjktYG8iASt1NgJq53A=) 13: dnVM1cVOQmo9o53eHsEv3eXfeEM.roa (hash: h/M7g6bSmmEmFXClXRgmZ/cbukURXTiejXMMoqawhio=) 14: o9IncMeHSMz3mrSJeF9aMdkFAcU.roa (hash: KamLMqMs7PVReutKf0aHBQwg2azCb9n4pFhxDQwK6vA=) 15: rtruqRF6HVzMMgIilVoJ-qB5j9k.crl (hash: b8J84vavKQX4o9hiE/yy6oOONC552PgbLWyJ0QcL1Ys=) 16: uFTtcjsPGnkaZVI5W5A8IkTF394.roa (hash: SZYFDFQluX6/of0g5ijROkb7a9Qa6zQP//c286jjxKM=) 17: w3UqKWnMOF5NaXpk2iA4PKS4_bM.roa (hash: u2j3jAMfurHPfPAg9hddmCUv1bl75zA9+z27+zKCwbI=) 18: xZ_023oKHQSUR6TwKwMkGIsy224.roa (hash: ifrv9R6haJqU4fA+SuKlYO2IqiC8qB9Zjz5Ablqp45M=) 19: y_VdrldyiOysCbP_n_SofIR2xM4.roa (hash: 3Y8+s1Vq2DoJJO2anwZwA2qsfUgRB7+A97MBZINmwUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:71:f8:82:4e:fd:98:f6:5c:97:92:a2:6a:d8:75:3f:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Validity Not Before: Apr 26 12:00:33 2025 GMT Not After : Apr 27 12:00:33 2025 GMT Subject: CN=b7e63ee99191874e145de1e0eef93853f8a74487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ec:59:5f:5c:a7:71:87:6a:6a:2b:94:57:23: 3e:a9:67:56:07:06:3b:35:33:94:0c:3c:11:db:13: 15:29:39:0a:2f:b3:08:4b:ff:e9:c2:54:64:61:0e: ad:4f:7f:86:6a:73:90:16:f2:d8:80:ce:45:40:a1: 37:43:cb:7c:d1:8c:7c:1e:b4:92:c3:d1:c8:11:80: 2c:07:10:61:16:8f:52:7e:54:63:53:61:79:2d:30: 77:55:5e:8f:03:cc:94:7c:11:16:bf:91:b6:a9:6a: 94:06:94:38:c9:28:03:a2:3b:c3:e6:cf:01:72:7a: cf:31:db:47:c3:d5:55:c5:ee:a0:fb:f1:d5:31:f7: ab:87:d3:39:b0:c3:cd:e1:94:8b:cf:71:b0:6c:5e: c7:7d:d8:a4:99:22:59:e5:04:61:5c:12:be:a8:54: 7f:7d:9e:a1:8c:75:ea:11:82:ea:8a:62:44:4e:5f: 86:14:49:44:63:71:c2:94:2a:9d:a1:85:29:ff:49: 09:d6:2f:e0:63:b3:fb:08:4b:93:d4:16:74:10:bb: 14:53:ac:0b:6e:3f:9f:ba:40:63:37:29:57:2d:6c: 18:1c:55:c9:e8:16:68:33:87:61:ea:53:a2:a6:56: 54:0a:99:86:45:26:2f:90:ff:88:04:38:9d:cd:24: e6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E6:3E:E9:91:91:87:4E:14:5D:E1:E0:EE:F9:38:53:F8:A7:44:87 X509v3 Authority Key Identifier: keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:52:71:22:10:bf:1f:a0:32:d1:bc:f1:b6:62:71:87:ac:9d: 56:ca:6f:9b:24:48:4f:2b:df:af:e5:24:74:70:cb:50:2a:3b: 30:10:29:2b:5f:d1:31:d7:32:5f:c0:de:15:ff:26:24:76:af: a7:62:e9:a3:75:f5:d5:1b:e0:a5:cf:71:6f:ad:dc:c3:f0:b1: dc:a8:06:d3:f2:44:9a:b2:70:b5:05:4d:fc:0d:34:a4:5b:2b: 04:a4:df:99:b7:9d:e8:45:22:42:c9:de:6e:66:cc:e6:31:95: e3:77:30:f8:32:55:47:05:64:6c:24:55:75:4d:a2:5e:90:ce: 47:33:f7:39:47:9c:c2:3e:0d:6c:21:67:0e:c7:e8:a0:4d:e2: 8b:11:41:a2:ee:a1:eb:88:6c:06:74:32:d4:63:ad:55:7d:91: 15:bf:5e:8a:49:36:61:12:dc:ed:3c:53:98:c4:26:db:06:e4: 46:f3:61:5c:fa:ae:d5:62:38:f1:87:8e:83:52:6d:e0:f8:0e: 7c:6c:92:ba:26:b5:cf:56:c1:55:fb:d4:7b:8b:8c:82:ec:a2: 18:f5:ac:7b:d2:ff:2d:55:4c:3e:3d:28:a6:2f:0c:cd:f1:7a: c3:3b:b4:0a:25:57:bc:7e:e2:40:b3:d8:18:02:e9:44:b7:2c: b7:4f:e6:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZx+IJO/Zj2XJeSomrYdT+EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3 OThmZDkwHhcNMjUwNDI2MTIwMDMzWhcNMjUwNDI3MTIwMDMzWjAzMTEwLwYDVQQD EyhiN2U2M2VlOTkxOTE4NzRlMTQ1ZGUxZTBlZWY5Mzg1M2Y4YTc0NDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoexZX1yncYdqaiuUVyM+qWdWBwY7 NTOUDDwR2xMVKTkKL7MIS//pwlRkYQ6tT3+GanOQFvLYgM5FQKE3Q8t80Yx8HrSS w9HIEYAsBxBhFo9SflRjU2F5LTB3VV6PA8yUfBEWv5G2qWqUBpQ4ySgDojvD5s8B cnrPMdtHw9VVxe6g+/HVMferh9M5sMPN4ZSLz3GwbF7HfdikmSJZ5QRhXBK+qFR/ fZ6hjHXqEYLqimJETl+GFElEY3HClCqdoYUp/0kJ1i/gY7P7CEuT1BZ0ELsUU6wL bj+fukBjNylXLWwYHFXJ6BZoM4dh6lOiplZUCpmGRSYvkP+IBDidzSTmWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLfmPumRkYdOFF3h4O75OFP4p0SHMB8GA1UdIwQY MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt OTk4NjhjNTEzMjlhLzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFJxIhC/ H6Ay0bzxtmJxh6ydVspvmyRITyvfr+UkdHDLUCo7MBApK1/RMdcyX8DeFf8mJHav p2Lpo3X11Rvgpc9xb63cw/Cx3KgG0/JEmrJwtQVN/A00pFsrBKTfmbed6EUiQsne bmbM5jGV43cw+DJVRwVkbCRVdU2iXpDORzP3OUecwj4NbCFnDsfooE3iixFBou6h 64hsBnQy1GOtVX2RFb9eikk2YRLc7TxTmMQm2wbkRvNhXPqu1WI48YeOg1Jt4PgO fGySuia1z1bBVfvUe4uMguyiGPWse9L/LVVMPj0opi8MzfF6wzu0CiVXvH7iQLPY GALpRLcst0/mAA== -----END CERTIFICATE-----Generated at Sat Apr 26 18:30:39 2025 by rpki-client