$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft File: 437h7O0Z-KCjpjW_qiZCk-NDd5U.mft (raw, json) Hash identifier: 7vzgo42MVmNvGHBUm0iazfKTPTXLmcFrORKst64qB7U= Subject key identifier: 7E:3E:63:7C:06:64:B2:1A:FF:C8:E8:37:7A:19:C6:9C:F3:07:04:52 Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Certificate serial: 01968058D4C8F3B227EC4C762C1D9ED6D064 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft Manifest number: 153C Signing time: Tue 29 Apr 2025 07:00:27 +0000 Manifest this update: Tue 29 Apr 2025 07:00:27 +0000 Manifest next update: Wed 30 Apr 2025 07:00:27 +0000 Files and hashes: 1: 1-gMcB2tX1aJagc2aIqyie1JosUM.roa (hash: e/zYIsHTFYDxeTkK5hyPfn+knzLFEB1hZl3ZQmxyCc0=) 2: 437h7O0Z-KCjpjW_qiZCk-NDd5U.crl (hash: qbfW61UVtqquU4XveIsKamTeGz3e5pSd2m4vwD9kJZ8=) 3: 9eNXipbIkyVdZ3T8NqmEYXwSLqE.roa (hash: BrQPu/EjsIQipBfThN07mTNPYYMcHP60+6UvtDcOjIw=) 4: EFuxyCYga5KedfhIetzIM8Wqp3Y.roa (hash: O+IR1hZ8a8RGzU0SmSAJy1+brABxzqq2amGl3toGZFo=) 5: HCRZ7kidZrpHRM8SX0jXI98_QOg.roa (hash: HUPg13X8WTvtMO+SgQO0HEMJKkRMS4NI1byIhfG01j4=) 6: JS9UWtZttem3o1fXhyj6cDhffLI.roa (hash: 2i5hM4JyTJhdNStU0tEfjgguQh3ME+ydQZVTRw+h18A=) 7: RX5TjbcaEwYk1IhE69eAlXBXNyQ.roa (hash: c0wkjrnxIEHQj5HUBmajY9pyKvCItPr80kJiD5UVJ6c=) 8: TxnmQLTJ7RG9p8EWlmGMzoVFKYM.roa (hash: ya4Fhh2AAgBvWI3PefXXRZJhuG79XQoe+sEudA3lm48=) 9: Ug41i06gdv9Ukc46NZ5XcrOupdE.roa (hash: llRNNcmXFkFqLY4QgsxGuCXjBef7WAi2K7CKwj9Mkc8=) 10: _z7lUoI1zB7ijV7HBhNzAOg7hvI.roa (hash: /vONE0L2m45mBqfcuw95QHCPgC/SgADGzcrX8+7SrZY=) 11: btFiCRe6ijn7iG7FxViTiaat_Ss.roa (hash: LM2pD9aQd87JsY0EO+NGidT06PsoOqy+c+K8ZJnFpLQ=) 12: iTq1k1-n5HC3mDH6yOxsGqky0UI.roa (hash: AGbGIRgcWmrYfxQjlQUEIVcfb2QPCldn/oJ/TJ7MR/A=) 13: ijEqoAEZpU0XwucBGAsnbQDDdNw.roa (hash: JCAoDA+s8OPB6Om2MtNX+ndsLOblJSylnwNeZbS7ZEI=) 14: oUN6hm9XIH9hez7uSosGEeiTS64.roa (hash: O2lJOrBjeZAv4ECvJJ0xPhkbtSeFQ6Qb6tFoYeeLtF0=) 15: rHz8kaauSx9yjUtMHgkc7yNJ95o.roa (hash: PhKHXgs0bJsWkyri4OmHbJXKHUs8Dv3fw5JQFOIgfUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 07:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:80:58:d4:c8:f3:b2:27:ec:4c:76:2c:1d:9e:d6:d0:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Validity Not Before: Apr 29 07:00:27 2025 GMT Not After : Apr 30 07:00:27 2025 GMT Subject: CN=7e3e637c0664b21affc8e8377a19c69cf3070452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c1:89:ab:bd:ef:f2:b2:d8:2f:15:2a:c1:b3: 9e:fc:3a:c2:28:28:7e:48:9f:9f:28:d7:92:75:1b: 61:5b:71:fc:e8:e6:cb:77:36:02:3a:61:2c:81:b2: 76:9c:f6:ea:41:28:2e:11:fa:e1:d0:c3:db:ae:55: 7c:01:bc:e4:7e:3c:6b:15:dc:6e:e8:a4:b1:0e:af: c9:5d:ad:41:62:d3:ba:77:ce:6b:8c:1a:3a:74:1b: fa:c3:58:61:ba:51:63:27:35:f6:34:0c:1f:19:fa: 12:9e:e2:f5:4a:39:e8:bf:3d:e8:e3:73:16:d9:c2: b7:72:26:94:07:9f:9e:98:23:bc:1e:b7:5e:ed:6d: 55:80:55:b3:cd:33:34:8b:c8:fa:44:ea:c1:52:10: 54:08:b7:9b:1d:a9:5c:4c:ae:08:7b:fc:d2:65:f1: 06:dc:3e:9d:26:c2:c2:91:03:9f:5c:12:af:0a:6e: b6:72:41:27:51:1c:d4:72:82:4c:19:da:e3:8f:a4: 50:ed:2a:e8:03:29:e4:65:c8:37:5f:63:7a:8b:71: c7:2e:f2:70:ff:a3:cd:35:20:c0:f8:af:16:dc:1a: 34:9e:79:ac:0e:46:fb:53:d4:31:81:09:72:8d:61: 1e:4e:9e:10:73:a5:1b:f7:51:9e:fe:1e:52:5d:1d: 44:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:3E:63:7C:06:64:B2:1A:FF:C8:E8:37:7A:19:C6:9C:F3:07:04:52 X509v3 Authority Key Identifier: keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:98:c1:d1:92:75:34:b7:59:4c:a7:2b:83:56:fc:ab:d6:d3: 83:7c:e5:8c:59:5d:4b:ea:b3:23:57:d1:d7:da:66:e4:a0:b4: 20:fb:d4:d6:a3:1a:d1:7a:32:b5:7e:02:b5:1b:a8:08:72:74: 0c:23:70:70:63:1f:e2:11:12:02:d2:78:ce:3f:57:0e:f6:50: b4:60:59:05:8a:e3:cb:b2:5e:f0:e9:90:33:2b:49:cf:96:e4: e5:7f:8e:b7:9a:0f:e6:55:fd:74:9e:00:97:ed:6a:80:a3:99: d7:12:77:f5:e0:d1:8c:3d:4b:3a:c5:2a:0c:30:8a:a0:a2:e2: e5:d0:fc:f1:d2:06:3b:fc:ee:10:54:7b:06:8a:ea:a6:b7:bd: 61:97:e3:76:e3:45:0d:14:b1:c3:48:bd:5e:29:53:6e:5f:d9: b7:a0:63:cc:1c:de:d5:04:5f:24:41:5d:2a:b9:b7:2b:c2:08: 90:51:01:54:58:45:ab:ff:50:f3:4d:4b:c9:20:ce:45:6b:48: 3e:46:0d:5a:74:eb:d3:7c:80:50:95:3f:4b:6f:d4:ba:c7:9b: b9:d3:33:a5:ac:c1:b1:11:7c:37:f3:11:0d:18:c8:a8:cb:6e: 2d:f2:15:ac:7b:a7:2a:7c:96:b8:14:9f:82:3c:06:73:95:f0: 1d:be:7d:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaAWNTI87In7Ex2LB2e1tBkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0 Mzc3OTUwHhcNMjUwNDI5MDcwMDI3WhcNMjUwNDMwMDcwMDI3WjAzMTEwLwYDVQQD Eyg3ZTNlNjM3YzA2NjRiMjFhZmZjOGU4Mzc3YTE5YzY5Y2YzMDcwNDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMGJq73v8rLYLxUqwbOe/DrCKCh+ SJ+fKNeSdRthW3H86ObLdzYCOmEsgbJ2nPbqQSguEfrh0MPbrlV8AbzkfjxrFdxu 6KSxDq/JXa1BYtO6d85rjBo6dBv6w1hhulFjJzX2NAwfGfoSnuL1Sjnovz3o43MW 2cK3ciaUB5+emCO8Hrde7W1VgFWzzTM0i8j6ROrBUhBUCLebHalcTK4Ie/zSZfEG 3D6dJsLCkQOfXBKvCm62ckEnURzUcoJMGdrjj6RQ7SroAynkZcg3X2N6i3HHLvJw /6PNNSDA+K8W3Bo0nnmsDkb7U9QxgQlyjWEeTp4Qc6Ub91Ge/h5SXR1EuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4+Y3wGZLIa/8joN3oZxpzzBwRSMB8GA1UdIwQY MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt MzZlMzQ0YWJjOWQzLzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5jB0ZJ1 NLdZTKcrg1b8q9bTg3zljFldS+qzI1fR19pm5KC0IPvU1qMa0XoytX4CtRuoCHJ0 DCNwcGMf4hESAtJ4zj9XDvZQtGBZBYrjy7Je8OmQMytJz5bk5X+Ot5oP5lX9dJ4A l+1qgKOZ1xJ39eDRjD1LOsUqDDCKoKLi5dD88dIGO/zuEFR7Borqpre9YZfjduNF DRSxw0i9XilTbl/Zt6BjzBze1QRfJEFdKrm3K8IIkFEBVFhFq/9Q801LySDORWtI PkYNWnTr03yAUJU/S2/UusebudMzpazBsRF8N/MRDRjIqMtuLfIVrHunKnyWuBSf gjwGc5XwHb59/A== -----END CERTIFICATE-----Generated at Tue Apr 29 12:09:00 2025 by rpki-client