$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft File: zYMT5B5kagnNAeLm9HOdO9I2xP8.mft (raw, json) Hash identifier: hUHwfEk3yepIpB9vi7NLMrByXCJX3VO4Z80pzv3+opk= Subject key identifier: 81:0A:6B:06:D5:4D:C3:0C:73:B6:91:A0:85:10:25:B7:A8:C8:08:94 Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Certificate serial: 019676B121C228CE4B7420C34EA0ED2B7B58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft Manifest number: 151C Signing time: Sun 27 Apr 2025 10:00:42 +0000 Manifest this update: Sun 27 Apr 2025 10:00:42 +0000 Manifest next update: Mon 28 Apr 2025 10:00:42 +0000 Files and hashes: 1: 2PiS2J9-ItXkVvnefA7xUJmmHco.roa (hash: fm4Z7vvzHDMokg8lvCFW4L0Rre6/U9BEbHKtNsNHxxs=) 2: 9TwneljnoP6bcfYQvihrxla0RcI.roa (hash: Zr2Ui8lpKBSfU5vJuPYuh/1cm8NiWiUfV6M604x4ojg=) 3: HkTCrKZqDwa8EUL4YflDFIxvuSo.roa (hash: zO36rkW4iEPf0HW9ThqXz35RBy/UdvCTSm39AhOu1Wg=) 4: KcTcayFrsZLodbwf3DiREG7aMgQ.roa (hash: 8/vbDhWMe2EfxMGVicJi+/pUGnJZy6R4MjOjEjkxjUk=) 5: LsmwcIccA3zM4d7kxqt3XhLcSa0.roa (hash: 98WTFaz7XPqlrJj7+XyfBTJEw1Sf7UEiPzA9D8zWsIw=) 6: PneAThfusF70GWHWywmhFb0vzKg.roa (hash: 0kjnbKbpSjxRU2te032pdWFUGrUsCjxiyKJ48H1DPUU=) 7: QPCXSoVGqmo5YTCi73-CSDuyZ-M.roa (hash: BYlFE9CUTQ67gGcO7goW8z5RieIlu+Sp4h/7HCES0Bg=) 8: T-x5NWBWP7z0RtMavKGuf9lbyTk.roa (hash: 5meL33wuT4ICoWjsr5JwrdL6iizp93b+W5Vq2RQt4cs=) 9: YPhWBSPHGs5SvVUlaCiCKWmqFfE.roa (hash: 5GbYaE22J8Owy6TgFxnM856qPEXWo4AxIXtfMEPnMxs=) 10: Yqt3Kg8k1YJOv7s88RcINuiKaCE.roa (hash: nWZ5K8Cmhazakp99a9slUSDcrdtW/sXazmS+lE8qgb8=) 11: d-qZVEez3-tqSbLZHyKHdZ5qcJA.roa (hash: +81/qDkled7/tuehBezhqXR9TX8Qi/57Cwe4Hugu7Ps=) 12: e3hNMZozjl2a8wTj5jqUKt2netU.roa (hash: z65fVe11ggvNgyomVpHPZ3mT5uEYvV6n9cNO6WIVkOQ=) 13: jcSJxEfFuIOqv-vUuvBQckyf-ZI.roa (hash: V8+8ahCoa4BEtoKDRdWiWxQzrt5GRgWy4qkSi1g/uZs=) 14: lcN6tqSn03IPMO2AvpfpxpGgDQY.roa (hash: 8fvPqg+8qqIeW9Kd8tRNl8Xlys8MO8b9CTy9FA3u9tA=) 15: lzFclAiK-AKgH976Yl_uXg9r5wM.roa (hash: H/cy8Ymyjy+9oeeIlZQHYMPSRfjOx2uqFxTFGhSTiGE=) 16: oLt7xT_rHP-Hxh3lUeggtdVEvTs.roa (hash: hblIrYC6F95+wg2sH5P/uCfjsNRvIhmQ2s3oU6U1S/g=) 17: ogeSaiZjPO4Kd4PF4MmZ3E0M2dA.roa (hash: Y6nye2lCZkZiTnuBzh99LMq3fLt8LGMzc9QAvB3SwlM=) 18: p-aeeSEszU3aapQ0yEslN0bhQQ8.roa (hash: Mh/Q23651bJq9potJm5ecJKYPprCxzH57rPx/Ooy5iY=) 19: r40XtPdgr8Y3RxrHTUe0xVuomM0.roa (hash: t4ySxCeAxHkHkDK1q9KhuYpYVZshrBVi3KJ4uODs/8Q=) 20: rD4_vnlr510eZLzrr2aCnfyAvEE.roa (hash: dL+NP4nhH4zwWo5a+tL5dbCaIelO5RMTVy2uI8g69YI=) 21: rdclR5rmMPPiGdub64u9CAD4cr0.roa (hash: wXgXLOiDxEJK62XQ7DLJMuxi7/zXmFbGyGpgUuOv+8k=) 22: tNteV-bYipxacIdsneN2kRS27vI.roa (hash: DK40xOAWm2KZPWxZ02RGtb+aUbxm0wIjZBTHx/mZzWs=) 23: uzMFOnPKpMqU8CP0ss6Mpv56PiE.roa (hash: F8nsfvroSbli8FdaVZTheRyMCu5cUrtu6qwv9yns62A=) 24: zYMT5B5kagnNAeLm9HOdO9I2xP8.crl (hash: ApGtcxxYNfGV7g1iO8yd45ZE+BMpOuXyvPBSURMqvk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 05:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:76:b1:21:c2:28:ce:4b:74:20:c3:4e:a0:ed:2b:7b:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Validity Not Before: Apr 27 10:00:42 2025 GMT Not After : Apr 28 10:00:42 2025 GMT Subject: CN=810a6b06d54dc30c73b691a0851025b7a8c80894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a4:e4:dc:de:ce:58:a2:b7:48:2e:4b:a8:01: 31:5a:db:3f:fd:d7:11:a6:45:0e:3d:90:6c:27:aa: 69:27:0c:1c:a3:5e:91:d0:cb:94:4c:b1:ec:54:7f: 76:0f:58:f2:8b:39:ae:3f:25:e9:2b:26:e0:21:a1: c0:0b:51:70:cd:80:5f:02:58:f8:9c:27:19:25:2f: 46:ca:ea:e9:6c:3d:73:0a:dc:28:3d:06:1c:47:45: 53:4d:1c:4c:e5:b8:b8:10:72:af:41:67:e0:7b:bc: 8a:15:a2:07:b0:7b:ae:cf:36:9d:4f:21:45:a3:0c: 0d:64:93:c8:a4:a0:91:90:e6:19:5f:0e:63:82:a2: a6:62:9f:9d:3f:91:57:5e:22:39:6a:1d:43:03:2a: 27:8e:e9:cd:a0:1e:14:66:83:0d:78:39:ed:1e:94: c9:1a:72:95:33:bd:69:05:fa:54:26:73:7f:1b:76: 35:79:38:54:9d:79:3d:a5:71:f6:4b:77:eb:f3:66: bf:b5:af:06:cc:78:02:da:c2:fc:ab:69:73:55:55: fc:ba:c3:27:5c:dc:74:3e:b0:bd:ce:42:41:6c:66: 69:76:bf:2d:9f:3e:34:2a:b4:89:9d:dd:c5:b7:b6: ac:35:00:7f:f2:ca:a9:eb:44:21:7f:08:ac:25:99: 16:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0A:6B:06:D5:4D:C3:0C:73:B6:91:A0:85:10:25:B7:A8:C8:08:94 X509v3 Authority Key Identifier: keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:48:70:79:b1:d0:8f:05:04:17:02:98:5b:c8:55:a1:04:71: 75:44:82:c1:7a:76:9c:bc:95:5f:a6:f5:21:8e:11:60:10:63: 87:64:d8:df:72:fe:6c:67:68:04:b9:34:2d:31:58:45:bf:24: 14:1b:17:b3:62:14:d7:2e:59:93:0f:55:71:50:1a:ac:7f:04: 9a:55:e8:c1:79:9a:51:c2:79:aa:e2:ac:88:14:13:66:2d:30: 7c:0d:fd:61:f6:d6:04:c3:5a:96:19:8a:c5:cb:9c:39:89:f1: 4c:37:26:03:ed:6e:f3:87:c4:b4:02:ec:dc:35:a7:dd:b9:0f: 86:12:42:18:2b:63:16:c5:bf:1e:54:fb:b3:05:0d:ca:dd:2c: e1:93:50:c9:05:95:9a:e4:02:bb:85:5a:70:86:1a:17:ee:ad: f0:81:c8:ce:b7:75:77:0d:74:a7:d0:17:76:b2:b8:5a:f5:c1: 7c:71:6f:86:6d:50:cb:06:36:24:cb:7d:85:4a:fb:9f:47:89: 86:e8:81:d1:81:52:64:a0:a7:13:9c:78:02:86:fc:2e:b1:3d: a2:92:43:02:0e:5c:c7:67:7e:b1:a7:8f:24:5c:4c:34:ed:5a: 75:a1:26:38:aa:f4:69:0c:ef:69:aa:bd:33:b2:54:5f:c8:ac: ca:af:6c:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ2sSHCKM5LdCDDTqDtK3tYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz NmM0ZmYwHhcNMjUwNDI3MTAwMDQyWhcNMjUwNDI4MTAwMDQyWjAzMTEwLwYDVQQD Eyg4MTBhNmIwNmQ1NGRjMzBjNzNiNjkxYTA4NTEwMjViN2E4YzgwODk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraTk3N7OWKK3SC5LqAExWts//dcR pkUOPZBsJ6ppJwwco16R0MuUTLHsVH92D1jyizmuPyXpKybgIaHAC1FwzYBfAlj4 nCcZJS9GyurpbD1zCtwoPQYcR0VTTRxM5bi4EHKvQWfge7yKFaIHsHuuzzadTyFF owwNZJPIpKCRkOYZXw5jgqKmYp+dP5FXXiI5ah1DAyonjunNoB4UZoMNeDntHpTJ GnKVM71pBfpUJnN/G3Y1eThUnXk9pXH2S3fr82a/ta8GzHgC2sL8q2lzVVX8usMn XNx0PrC9zkJBbGZpdr8tnz40KrSJnd3Ft7asNQB/8sqp60QhfwisJZkWBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIEKawbVTcMMc7aRoIUQJbeoyAiUMB8GA1UdIwQY MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt ODg2MmI1MTczMTdjLzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcUhwebHQ jwUEFwKYW8hVoQRxdUSCwXp2nLyVX6b1IY4RYBBjh2TY33L+bGdoBLk0LTFYRb8k FBsXs2IU1y5Zkw9VcVAarH8EmlXowXmaUcJ5quKsiBQTZi0wfA39YfbWBMNalhmK xcucOYnxTDcmA+1u84fEtALs3DWn3bkPhhJCGCtjFsW/HlT7swUNyt0s4ZNQyQWV muQCu4VacIYaF+6t8IHIzrd1dw10p9AXdrK4WvXBfHFvhm1QywY2JMt9hUr7n0eJ huiB0YFSZKCnE5x4Aob8LrE9opJDAg5cx2d+saePJFxMNO1adaEmOKr0aQzvaaq9 M7JUX8isyq9sQw== -----END CERTIFICATE-----Generated at Sun Apr 27 13:08:06 2025 by rpki-client