$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft File: mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft (raw, json) Hash identifier: 4Mo25xzbIxteaUxTejeVd3Ibb4t2FBGSNBKvOkJrZIc= Subject key identifier: FB:5A:B8:B2:4A:8B:49:4C:7F:D4:D5:C5:48:32:1B:FB:A2:A3:62:4C Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019671F8BA612036715D8E6E0A9C42CD12CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft Manifest number: 15DB Signing time: Sat 26 Apr 2025 12:00:48 +0000 Manifest this update: Sat 26 Apr 2025 12:00:48 +0000 Manifest next update: Sun 27 Apr 2025 12:00:48 +0000 Files and hashes: 1: 1-W8fXv0jttdWKlzJAXVxxYtpRug.roa (hash: gpIh638+Fcd1tAei50b0+8GVpPlev9wrd/g4gdASdjg=) 2: 1UWB6DiO5XdV3re-o8rnuoqA6Ms.roa (hash: acQwekWVQZ/8nvJFITjzBnRus/D8fEtyc11Q6KELe7w=) 3: 21_l98tMuuHtah8-s1GQ4s9w80o.roa (hash: kBh4jdwY3MGZ4Pq8reV1XfNIfs+7zVu2WLUGJ+5lgvc=) 4: 4w30D5KawwaEKeLXCLppZs-985Y.roa (hash: D2Lwmoer5qGID/4i5fsaA6M5CcgJmrhikqoV9diBlTk=) 5: 86PqxVW6kwg2uAh7WbBcKHdg2nI.roa (hash: CuXGZytdc0z3bOivO1qPbLT67lDlFMigmbZjCs37dqk=) 6: Brhkd2-auvvZmCyvxy5ORhHeQ6E.roa (hash: g8WF2m4nW9TPwqD2pE0ddCjVXs1fr0m/MHPrZ/Qj2HI=) 7: CnHjgZKNSNMP8dJ_BtYZ7Xo4ZrM.roa (hash: FqQbIRpVOThM0L1uy/AMjORSqSUsS/5+snA6mZqlQAA=) 8: GfEJ2k33_VAN4eURlQBejqU172g.roa (hash: Zb6Q3T1NQyYfh4p1sNv+Mcf+eglvzLCaJ0QkXatHMFA=) 9: GvKIQgl1iO-dugbsKuhw7FNxuHs.roa (hash: TqaFs/yLAnRS9/gxois1dNbWL2jGhaiFgXhDothuXww=) 10: IrnlAQa6M1A96HHiDasRUfVGqbQ.roa (hash: xgq5FcKSqvltS9tf8414o9TbLoeW+VIxwonV5uaPruw=) 11: LOKrZEDDVhVnSlJWlOLgQ5nPcM0.roa (hash: 2CeUB6HU9O6IboYshEwLG/p+jYhiKQ64ZtA5Y3idzrs=) 12: LbbsmkI3GqawDuN3XH6acheMxPw.roa (hash: BqWA3SYDAKLfoYVuIlyCld31iNDXkXCl/KtIv69jNUw=) 13: OOYkNDqqDn1Unj3M-yrjf_S9VlU.roa (hash: oCGvjVeC4FC9ueufaA6bhsrNhxHd2pd306IA0XGXLfs=) 14: QJvPeNzFvPANqEbfkIc8-3zDQLs.roa (hash: felyBGjLHZhYiBLtOS5vAZwi9iqRNucwfxHrWgkMpWA=) 15: SWbtiDhJekAGKrMxaIr0DPXQOzg.roa (hash: xUg9JN0E8iV/LnVbnu54/5qiJiwqupilOIRHtpvUcCQ=) 16: UlqMdzKNjKKz7GVAWhNQ0GeC6iE.roa (hash: vyjrNuYYOAehZPhyITO+Q5uPp2e1fJC2nVGYypgHEhg=) 17: YseId6w-wK5VfWBLdiAj4d6boZY.roa (hash: wh8Vov3CNC6MsCQsUCMvToUSrtlM+qEzITIJ9QcG8fc=) 18: azJgsmdTDF3ELk-I19mAROWoKeE.roa (hash: oh/dgWtIFhqfW7S9fR3cOqTRk0csYkiTH2ALt2aoNhQ=) 19: eChAGDbdQGMbx-CgEa8ktTddF6A.roa (hash: WaY78nyI3A8kBY4pFd0TG8ZJI0s+NCkhF+OV6SV5Crw=) 20: gN00iWVZ4X9ImdixtPXeB88eR_k.roa (hash: DPVgneYPbYS00UaxJyd5C7zkqYJRRcPWgn4xBTn6bHk=) 21: gnHztlWIUEkbfP_VpJDgy1aZ-q8.roa (hash: 8IEq5Il4ymKT0XR1RNf3aEeBm7YPqbccSq4VWhr/cXU=) 22: mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl (hash: x9dZyOm4EkWdcQuBPP/vdWGvL8456862ByVUs5KJoWM=) 23: owD2F5PTIfIuOH1ResHlD6bHqfw.roa (hash: FwwD5nwDxuakINFZYh01TzvwO9abW6HL7q42RgazHtQ=) 24: qjM14mHgk1Edy0idzb8PcMe4oBE.roa (hash: pcsI+0E79qmlWXPdLST7nM+67d24tKTfwvx2fxrvqMw=) 25: s5Ai9g5eYYL8Bgx7ZWiTovq-xxE.roa (hash: BtApyhPvW43mqLBFeRPcKdPRw6DTk5KYzme6TZtVXns=) 26: sW7iMiWbwjQZ4JTr9eqMstrH0fY.roa (hash: fl3fF4gUVsev8QdVZnLOIu5u/5rzRWGxzrZRrAPXabs=) 27: tdG4gwbiCDTl2DZU4EFrqi-57Fc.roa (hash: HXWAwqtUcnHFWl+ei5dmWCUQV5Bz5IiYmO9iAB6ydxI=) 28: w23_TR4dcsNa31LTX8HVMLWRN_w.roa (hash: rfdkH9NAgBWGbrUS8/d8Rmrz5XY4u8KepKOXwjiNknw=) 29: wC6DsFwXeb5eGnIgBiuuCnh9et4.roa (hash: sGsXZWDl7SypOrlv+5/efuocDxm8kzfpm5Fu/6yQLrA=) 30: wWRDfWHup1u0k3UjICPfUYIPuSY.roa (hash: yzH1M2v1GGWQRBkb4bWaRfefbh3n4eH1xoy+GhWge5A=) 31: wYxMdXSUEDjU1Cv3_j8xQDvi1yg.roa (hash: WyaQu0KrdFh/xZS6g5xHvbw77OL9Wai9qSXwo4Oty1g=) 32: xeXsIqRyNQ8tCJjLiS_SWkibat0.roa (hash: JByqNQHgtIum6mQVh/2h0Z7sUMkRsbp23RZvkf78Q8U=) 33: zA8L3Jvv9SEACC4CD6D8SPMP2Sk.roa (hash: Tngvw9PMaTEzEGc2VaqgRFM8azKZIG82ga5hio7GHN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:71:f8:ba:61:20:36:71:5d:8e:6e:0a:9c:42:cd:12:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Apr 26 12:00:48 2025 GMT Not After : Apr 27 12:00:48 2025 GMT Subject: CN=fb5ab8b24a8b494c7fd4d5c548321bfba2a3624c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:28:dd:6a:fe:07:1b:9f:0b:4c:ac:1a:22:4b: 65:60:b3:11:b9:f8:6f:0f:10:31:3d:8b:13:0b:f8: f2:49:1f:cf:03:c3:48:4d:be:a6:77:ff:ab:47:d2: 88:e1:cf:a5:0b:c5:bf:28:70:7e:dd:fc:8d:aa:b4: 74:5b:f1:03:2a:5d:fa:22:2e:9e:3c:04:0d:ac:fd: 8f:20:63:47:a1:b1:98:4d:dd:c7:37:5b:bd:dc:af: e8:3d:8c:0d:87:65:ab:32:29:53:52:07:66:62:9a: ad:25:9b:ec:21:e2:e7:ae:a1:43:0a:6a:7a:07:38: 97:4e:74:ba:1d:8e:a5:ff:9b:9e:0f:fe:4c:fe:67: 9c:ae:20:7a:3a:ca:e0:38:38:01:49:8b:6c:3a:2c: 2c:ce:5f:02:dd:ed:b3:77:bb:95:fe:8b:7a:94:d9: 7f:e4:70:36:77:ba:74:70:8e:51:d4:07:dd:6f:52: 19:d6:b8:68:a9:be:7a:a7:4e:3d:cf:60:1b:63:27: d2:90:86:24:a7:ad:69:57:29:18:37:c1:9f:b2:c2: db:e0:9a:f0:b8:b8:0a:05:4a:fe:77:89:3e:63:5f: 46:44:6c:b6:a4:22:5f:1c:b2:61:a4:06:15:0e:46: 48:d6:cd:63:aa:7d:55:6d:59:98:81:9e:b7:6a:87: 36:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5A:B8:B2:4A:8B:49:4C:7F:D4:D5:C5:48:32:1B:FB:A2:A3:62:4C X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:5e:1f:81:f3:c7:41:d0:87:66:ff:5f:97:ed:94:0e:22:90: f3:51:c0:08:71:a7:29:e1:4e:79:f3:3d:f2:20:3d:84:b2:84: fe:12:ad:b3:1d:4d:6a:3e:2b:79:eb:29:b3:9b:4c:30:6f:04: 35:16:af:71:98:df:f0:09:0e:6e:c3:fe:b2:26:31:a3:29:31: f3:4a:3a:98:99:62:99:96:fa:5a:c0:5a:44:d5:81:cc:c5:c7: 02:e2:39:67:38:68:82:ef:53:10:b0:9b:99:27:79:96:28:31: 34:e1:e4:c5:29:06:56:3c:cf:4d:31:8c:8c:ce:cc:b0:d2:42: 69:21:72:b7:0e:fb:db:0a:83:1e:80:55:ce:9c:52:ec:e8:5c: b5:94:df:d8:4e:15:51:54:a1:bd:23:44:17:6f:81:99:e7:fe: e3:96:71:52:a6:07:82:08:5f:eb:57:fd:5b:bf:c0:9e:3f:b6: b7:42:33:aa:2c:d0:7d:a0:f7:c4:88:f5:71:22:f1:71:00:9d: 91:c2:85:74:cc:00:14:dc:72:4e:bb:be:85:e3:66:31:04:08: d1:a6:18:c6:57:b1:25:08:3e:75:66:43:3c:5f:58:00:08:62: 8a:db:c4:f8:8c:b9:9a:9f:96:14:aa:f1:d3:8e:b3:34:16:d9: 3f:23:87:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZx+LphIDZxXY5uCpxCzRLMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjUwNDI2MTIwMDQ4WhcNMjUwNDI3MTIwMDQ4WjAzMTEwLwYDVQQD EyhmYjVhYjhiMjRhOGI0OTRjN2ZkNGQ1YzU0ODMyMWJmYmEyYTM2MjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ijdav4HG58LTKwaIktlYLMRufhv DxAxPYsTC/jySR/PA8NITb6md/+rR9KI4c+lC8W/KHB+3fyNqrR0W/EDKl36Ii6e PAQNrP2PIGNHobGYTd3HN1u93K/oPYwNh2WrMilTUgdmYpqtJZvsIeLnrqFDCmp6 BziXTnS6HY6l/5ueD/5M/mecriB6OsrgODgBSYtsOiwszl8C3e2zd7uV/ot6lNl/ 5HA2d7p0cI5R1Afdb1IZ1rhoqb56p049z2AbYyfSkIYkp61pVykYN8GfssLb4Jrw uLgKBUr+d4k+Y19GRGy2pCJfHLJhpAYVDkZI1s1jqn1VbVmYgZ63aoc2KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtauLJKi0lMf9TVxUgyG/uio2JMMB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAil4fgfPH QdCHZv9fl+2UDiKQ81HACHGnKeFOefM98iA9hLKE/hKtsx1Naj4reesps5tMMG8E NRavcZjf8AkObsP+siYxoykx80o6mJlimZb6WsBaRNWBzMXHAuI5Zzhogu9TELCb mSd5ligxNOHkxSkGVjzPTTGMjM7MsNJCaSFytw772wqDHoBVzpxS7OhctZTf2E4V UVShvSNEF2+Bmef+45ZxUqYHgghf61f9W7/Anj+2t0IzqizQfaD3xIj1cSLxcQCd kcKFdMwAFNxyTru+heNmMQQI0aYYxlexJQg+dWZDPF9YAAhiitvE+Iy5mp+WFKrx 046zNBbZPyOHYw== -----END CERTIFICATE-----Generated at Sat Apr 26 19:05:33 2025 by rpki-client