$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft File: k2d9fLknHONhJW6YM8x7FP0CPr4.mft (raw, json) Hash identifier: x0Bx7Km7QzbJ5Ldv0W/TCdVY73D+krSSCQM/R/wO9Ck= Subject key identifier: 24:42:B8:4C:11:EE:ED:E3:2F:DB:5F:5D:8B:ED:71:A0:97:4B:A2:CB Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 0196721A075B76813DFB26383AEEF1FB698E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft Manifest number: 158C Signing time: Sat 26 Apr 2025 12:37:10 +0000 Manifest this update: Sat 26 Apr 2025 12:37:10 +0000 Manifest next update: Sun 27 Apr 2025 12:37:10 +0000 Files and hashes: 1: 0WVzWJG1rgIAV0kLDRDyeBCR_TA.roa (hash: uYyyFo7BUkZvbMkd0A2+lJFy9VE4MPkRhot0wRNavZE=) 2: 0fkfNJNcgCF0bgtJ9THGzgcqzN8.roa (hash: 2OoZu9r1Wd+T9o4nJLv7KklX45JdT1nwjKFtbBsYews=) 3: 1-A-QA-_AjVUZ4rL2aqlnJb4OEnY.roa (hash: 8o47yyHRx5XOwPi+KE63QVHpBtLvNB5PiBx0UCIZe6w=) 4: 2a9Z4MiFWUxUqmTNMuUVscHb0hE.roa (hash: gobSMYv3Krt8vXt9XFdC11nQ+nS6jtG46MKfF14gNHU=) 5: 43Lev2KmmsX2oQjHWOVqR7pGv_o.roa (hash: X3cJ9btnCgxa0qcBGYYxWGeuURRVSrnur28C/7enAsQ=) 6: 4kc-K4lXqDQWlQ1acwGiIbcvZCM.roa (hash: iwJ60t6RgAb6kap7YpqbSewI5ktaDdebMpnk8DNCEn8=) 7: 5l1FOYERpzwjCWZ7FNTbyAsfM5o.roa (hash: v2uCv1ouDdkiX0lyLyC8bVmuGUM1Kkuub/JlhDDXphQ=) 8: 7v7zPiSwf_za11lTC54_J6QS9tU.roa (hash: o3PqyZiDxPsDP8hfldoctzjoxtcGEXizsSGCO88ZyRA=) 9: 9_F1V2cr-2qmu0BHm3AVSU-qPxM.roa (hash: GRV3fAC1E+nhKcHh6o0uVmcQSg4jOW4KJF2Imhd7LJ0=) 10: Al2KaWomFf8GhcORE3K4q4R9IR8.roa (hash: pVm7PEjI3+WRx03gEcy+oA8b2HM+FqL4qCoE1gIpZnU=) 11: CAoRm_NPK8PfeGJv38H3DAAqgwY.roa (hash: EdFjhhEvB+nVaMBUtV2CyFZBHaxTW29TZ7K1aFMV1ck=) 12: G4N5RYla6fjlsBv4AqQQ8H19rRs.roa (hash: /cOKslqtRznPZkTvknnJYZdRjHaMmTcA0TEYmAIJqIQ=) 13: JWFrACGqXAEPwk5yERzaH1k3xEE.roa (hash: eRkSlBoh54+iXz4l+cuyt8uCJGHuQx8lExR+xSC6BSg=) 14: JpAui5634AEUJhh37Wh_vZRvbVI.roa (hash: kYgmciBc6zEHfesfWH2bJDQb7SHUX9fP72N5IHTx3+Y=) 15: M_Z5OG01qKfHRU0thM0hkTqyX4E.roa (hash: hn+/oPvpd4mb7jjhlAfQomOPIaOtr1F9YOcPlnqwWgg=) 16: MgJgYL9l6eKJ0Kmwl4y3YpthS-M.roa (hash: igpzPJYbXYIv+C9ih5BbtSw1dZ2mBgNdp+reY422/cw=) 17: N0lDGVk0p7AcoRLY5EKnIKUZJ_I.roa (hash: 4jYpZBr+LgVTino1CNOAvWdIN+AhM6noIwU+uxMVojE=) 18: NJbMFgEWR8OCOcj-4vA3BkIS944.roa (hash: MWZ/EMVCArGx30ry9vrlbraU7VZaJ+T1oviZlNEjkZM=) 19: Qvclw3p6GBEwfed15US4eMZDssA.roa (hash: UWEN+eEsjGRM3fqsL5cJc7RQBWKq6NxYbqkBONZx9Ds=) 20: RX8x7NBqKqNqrHjY3RrZOIwmw84.roa (hash: qG1pxlwKH3SmnTU8k1NPrDe+8libzJhE26dpkDKjPb0=) 21: T6FuvnVJtTiDQWsvxgr8orCk9Ec.roa (hash: nWxEhVbf38vpuJvcxfSEnZKoW7anxOD2vfrvVNM+o2U=) 22: Vedd31K36BW0FtFdJmgu7RtebZ0.roa (hash: UL6Hnivw/B+oxS5q55F7qNNs7Ynb0wMF1mBZUl4ggtM=) 23: W2dVuhdvkZPCT4xbWj4hASghcGs.roa (hash: nMnqrzO3QlTClxSDTq/6l+sFo3+5m+fCPUztpwysE7s=) 24: XD5lyN3IK2UsJeObMTBY2xot5DU.roa (hash: p5taUYH4AVBdxVLeGOYvbtP0mpvx/YEGj8SIqMDS618=) 25: X_-XGWHxiyT31XcsVcXztO1CAUo.roa (hash: h9fzXHeF6FN+NnLG9OWfg3VoICXbfHZUao+YO2BeTVI=) 26: aFRiQRnDB9TXgWRRIMtNARzxVn8.roa (hash: hWE8vTVKPZar03SzLtgbIuwLQ05FffNM309Sx4njq4c=) 27: bDIcLcgGp-5S7AYDgnIAsZkN5sQ.roa (hash: gQjvkkb2pNgzXW4i64U/jxG8dqyN9edAwWDPKi6u07c=) 28: bHXLulP8CUgt-JCJIqSM8hvlsCA.roa (hash: Mexso3pNidi3XstQ5hR0lM6Sn2w60SPQEvdapeY/VjQ=) 29: cdRkB7AVAsaCQza2C6eaLskeEHY.roa (hash: R3X0t9w4kaySZ1sZzxcJ1+mmA7WHRo/nLaZSV1WFUCk=) 30: eY2HUAll7fDnreBQhRAKJKSb0kY.roa (hash: EWy2Lu75sciEu8/fmP+MiOxG/sgdglQMCzvxx2HZI0Y=) 31: ga0VPW1s3XSHpgEohcLNxN7J_oQ.roa (hash: wC0JV8jUHfPLAhBEwBEM+LxR4vaNiTk9CGptUwCWnjs=) 32: k2d9fLknHONhJW6YM8x7FP0CPr4.crl (hash: E209h2xZ0yoMsJHw5jZTJn+9QJ6+kMf3mmLXxnIOxn8=) 33: lNbE1YgxqJCc3cHI2vXpXlyz_nM.roa (hash: BB6MmQH+rCEmTn2b4vV8K++LviBSGKSxEZC17nRtmRE=) 34: s2ACVztzA1vsZj0LeR6CzlnTOm8.roa (hash: oz7Vsf3An5MBbrJmvyyxPiGXT2v35uRZRv/m5nuw4mg=) 35: tH9WPK3_uWF3vLS6DlnKVCMMN0E.roa (hash: EHLhUNTXUDdrdsOY3Wig8TACqPCPV2imol00Ow5NhQ4=) 36: xOvbONmuHLggj1kz21tIox0xOws.roa (hash: ds3rCPllIr2md5+i8qtkfA5r8fRJicK2asbgHg2K2Q0=) 37: zEdOf00V8YpbfdbuVh6edhLFxOc.roa (hash: xw2nGcLzNzC2781DBhmqoJCxxw5fW6F+mjQBcvq6T2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:1a:07:5b:76:81:3d:fb:26:38:3a:ee:f1:fb:69:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Apr 26 12:37:10 2025 GMT Not After : Apr 27 12:37:10 2025 GMT Subject: CN=2442b84c11eeede32fdb5f5d8bed71a0974ba2cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2d:88:1b:fb:34:9f:97:58:e1:b2:16:da:43: bb:d7:b5:dd:e0:97:07:c2:66:f3:ea:2c:63:c7:d7: 38:d3:6c:d0:a5:00:ac:19:8a:fa:67:37:fc:17:21: de:60:5c:db:8e:ce:bf:6d:8d:8e:57:38:c2:77:61: 0b:20:9b:aa:2c:33:94:1a:86:4b:0f:5a:2a:a8:46: dc:54:78:0b:db:19:57:47:7b:16:ce:04:6d:14:26: 88:e1:b3:02:f5:f4:ba:c7:7a:05:f8:b9:cb:d2:5b: 1a:f1:24:82:8f:f4:48:cb:69:da:43:7a:ac:7d:41: 2d:c1:88:b5:81:0f:a9:c8:95:86:42:d0:3f:dc:a8: 70:d5:fb:ac:6c:34:7a:60:84:4d:da:f7:d2:54:92: d4:bc:1e:7f:2f:06:ee:62:5c:fb:af:4b:e8:50:61: 62:47:dc:4e:f3:70:f2:8e:16:24:76:b2:01:48:fa: e3:34:4b:0d:60:2e:d5:91:fe:e0:c1:96:55:3c:b3: 06:3b:e5:fa:85:94:57:51:4c:9a:33:2a:e6:77:76: 84:84:18:99:65:f3:fc:83:ea:07:d1:1e:fc:ed:4d: b2:ae:e8:f6:51:3d:3b:b9:79:c7:0f:7c:29:1f:4f: 4d:cd:89:11:ff:ec:af:94:75:ac:46:28:4c:b6:38: 1b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:42:B8:4C:11:EE:ED:E3:2F:DB:5F:5D:8B:ED:71:A0:97:4B:A2:CB X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:0a:ef:a3:69:c4:00:d7:71:c3:a6:b5:b5:73:45:62:ff:cd: 15:d2:a8:4c:43:24:00:9e:24:83:b6:13:57:ec:a2:85:75:20: 92:69:b9:4e:81:01:bb:f8:fa:21:68:17:42:66:7c:7a:35:de: ee:c7:88:72:2c:80:17:94:98:51:63:b1:30:78:4b:bb:a9:25: 08:0f:a2:cd:33:1e:9b:8a:5a:27:7c:c6:6e:a8:72:af:66:ee: 3c:0d:e8:1a:e4:58:69:51:5b:3c:eb:60:e4:d3:86:9a:e8:85: fc:1e:a8:d3:34:55:99:cd:f8:a7:33:18:46:1a:02:07:e8:8b: 2b:e1:15:f8:bb:34:a7:e4:b0:98:ea:2e:3d:6c:ac:11:39:0c: 8f:ea:fb:8a:13:be:76:2a:01:2e:30:6b:b3:4b:c1:61:08:0c: 31:4e:3e:19:4e:19:9a:52:20:88:89:d2:10:63:28:df:c2:7a: c5:72:75:2f:cb:3c:c9:2f:ac:6f:c7:41:84:3e:bb:dd:85:ee: fb:d1:28:1f:97:fe:77:d6:96:e2:1f:ff:f7:26:14:64:49:b6: d3:14:16:3a:d8:b0:5d:41:97:f2:0a:c6:25:bb:39:73:8f:af: 6f:6f:f8:d5:fd:c3:44:a8:ae:a6:e5:39:3f:3d:aa:01:9a:93: 59:e3:92:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZyGgdbdoE9+yY4Ou7x+2mOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjUwNDI2MTIzNzEwWhcNMjUwNDI3MTIzNzEwWjAzMTEwLwYDVQQD EygyNDQyYjg0YzExZWVlZGUzMmZkYjVmNWQ4YmVkNzFhMDk3NGJhMmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy2IG/s0n5dY4bIW2kO717Xd4JcH wmbz6ixjx9c402zQpQCsGYr6Zzf8FyHeYFzbjs6/bY2OVzjCd2ELIJuqLDOUGoZL D1oqqEbcVHgL2xlXR3sWzgRtFCaI4bMC9fS6x3oF+LnL0lsa8SSCj/RIy2naQ3qs fUEtwYi1gQ+pyJWGQtA/3Khw1fusbDR6YIRN2vfSVJLUvB5/LwbuYlz7r0voUGFi R9xO83DyjhYkdrIBSPrjNEsNYC7Vkf7gwZZVPLMGO+X6hZRXUUyaMyrmd3aEhBiZ ZfP8g+oH0R787U2yruj2UT07uXnHD3wpH09NzYkR/+yvlHWsRihMtjgbpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRCuEwR7u3jL9tfXYvtcaCXS6LLMB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPArvo2nE ANdxw6a1tXNFYv/NFdKoTEMkAJ4kg7YTV+yihXUgkmm5ToEBu/j6IWgXQmZ8ejXe 7seIciyAF5SYUWOxMHhLu6klCA+izTMem4paJ3zGbqhyr2buPA3oGuRYaVFbPOtg 5NOGmuiF/B6o0zRVmc34pzMYRhoCB+iLK+EV+Ls0p+SwmOouPWysETkMj+r7ihO+ dioBLjBrs0vBYQgMMU4+GU4ZmlIgiInSEGMo38J6xXJ1L8s8yS+sb8dBhD673YXu +9EoH5f+d9aW4h//9yYUZEm20xQWOtiwXUGX8grGJbs5c4+vb2/41f3DRKiupuU5 Pz2qAZqTWeOS5A== -----END CERTIFICATE-----Generated at Sat Apr 26 17:37:59 2025 by rpki-client