$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json) Hash identifier: bEtsehhs3sALPKht8VidwX3zt/fj+x7iV7wlFcJnYfQ= Subject key identifier: 1B:10:9E:B3:7E:B3:03:C2:6C:F5:9A:BD:B4:9D:1B:34:B6:8B:FE:06 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 0196726638A0592CF1054A4F58396FE1FEAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft Manifest number: 03DB Signing time: Sat 26 Apr 2025 14:00:23 +0000 Manifest this update: Sat 26 Apr 2025 14:00:23 +0000 Manifest next update: Sun 27 Apr 2025 14:00:23 +0000 Files and hashes: 1: 4NwBF8TPrVxf78B6fgE595ZYIcY.roa (hash: UcGEL17wXUOTJDNf0EgeFxFCcRvQ35cDmPksItdA2FU=) 2: 5MuegZc941EXlrf0YhhZc8L4RKk.roa (hash: kHiIPTd4Jj/nvsaJvM9+xNmDRvRf/qPKh36k1EGAn74=) 3: 7hACT5sKnz3HxIi_xLJsA5iZrPQ.roa (hash: kR684iL/BnCvE3LFX4t7FZeKIp8gUxbro9Dzx1l6bTg=) 4: 9PbkvZ4ol2yeRfGaoDftkNRF4EM.roa (hash: ZO5449lHjcawIHB7jnV7qvkZUlVwVElkUGzx+T6uypQ=) 5: 9xV9_fze4hEiHRTfetcMOaYtwpc.roa (hash: CklFQfcIKFqNZPhKFZNKEUynWDpDHjzYSRYtePRY3l0=) 6: BUagtr_9kQTY8i9MdNXLq5cnNHM.roa (hash: FYPs+RVTF2NhaR4COrGmc5vQPfr7hdf5D4C5BHXkqrs=) 7: D4aJgyurg5sBV9aRkfmz2Wsl9lU.roa (hash: zPt9r8i/IiMY/kNPrd/XCtTmcwSRz/do1PNZccVMDv8=) 8: FNiNdr2A7OQKs4Lh8NIXmrr0CpY.roa (hash: lzfjAZjaBGiVtNnSHHAFnCh/6pNb/eM+js/obHoKL1U=) 9: Gw2mbsE_MoMLk8qNwEEX0NgcNl8.roa (hash: 1jUFBnLBvfA4uzicHOhc17W0Ci/2g8HkC2YbueNHc3Q=) 10: HAEssOWQRwSdc5TGWOA9Yahl7WM.roa (hash: GGhgfbO/+6MLQCq+HU+0d0YUwkftNYr1yFwg0YzDhQk=) 11: KSgdLldEqa59Zql4-IziLX55TPU.roa (hash: XUqaNezvDdSkEpv/qzEgciAhag3ntITFRCYMF7kPQRw=) 12: RWE60Ns1mQje11llf2ihFVQVFic.roa (hash: DmwyemnAa+wXP/+CS2xNccyTOXtBd2D9MzdHPDGZd3A=) 13: Ro3-EUE6MEHO8Brlu5iaFdAlG5Q.roa (hash: u0Ts/8nh0LiCnzteTiJkyma0H6U2qh30HZDM8HXhaHI=) 14: _ts8OAlwojVR7RrxU45171xnFEQ.roa (hash: 1o7jXDgX6gwszcNb2hDK4ztSUb/3OElL3cvx3GiOQa4=) 15: dmEWgN6h3xFkBWjn9tW8-qNYTVM.roa (hash: xaHtGUiCewEsAabyHcWlMpWAwt2sd21SLnG70Nk49gU=) 16: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: IpyXgnAAudmd6SO5UEcK6725g6q75m6X0y6F7dbI9SQ=) 17: grdt8mgDzKnb-AIa5iVppNSJziE.roa (hash: YgndpH0ES5lTVzS9HaDo0++Ke9eabHkve02TiNj7Qmg=) 18: m3kbgVGInZoxkGlQeAONX97frV4.roa (hash: 8gUwO/0n4gQZPZEJMORDD8t/sRehPTtCRHIzAdAWNug=) 19: oXNf5SHrKh2QWntqtmC7qB19SGk.roa (hash: qifSnbRKsEUjrXFAx3OGYSd8X1I2Ha3pqqE8xrvWVLQ=) 20: qILC_Pv0K7-ROV4CDhL6zSnDsio.roa (hash: tV5WuqZJh0gjM0aw66Rwu52v2V+q3xkrQZsO/3MBrn0=) 21: toMHEB280KETNfSWfwGdAQlBHIo.roa (hash: /78AEGOua5BdiHCzMqoUcFzXGSUc4tOmrRCkCS8IUTo=) 22: v6DRm2BxHSU2TI8KD12J2fvQjdI.roa (hash: 2jOdiO20NF/908n5Oq5KVZ1zpLepOGdqMBtD3aX7Ya4=) 23: x2XVu0ALr02iGe6yyUDAD6F8NjI.roa (hash: 08nS9hEpSqpZaHf0s18vSYc5qS8WtwFKwLrU014TaPc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:66:38:a0:59:2c:f1:05:4a:4f:58:39:6f:e1:fe:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Apr 26 14:00:23 2025 GMT Not After : Apr 27 14:00:23 2025 GMT Subject: CN=1b109eb37eb303c26cf59abdb49d1b34b68bfe06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2d:6d:12:7c:d4:ba:9e:92:76:22:de:b4:f0: f2:fa:4a:f1:fc:ec:07:a7:16:39:88:45:bd:ae:01: 04:2b:74:f5:6a:7c:2d:6c:0a:74:e6:c5:b5:f7:03: 28:c3:6c:22:65:9b:5a:00:ed:b2:a3:fe:0c:f3:81: ab:a7:ff:94:8d:46:d8:66:78:76:cd:94:0d:4b:4f: 99:bf:54:c6:fc:97:13:25:76:cc:d0:c3:64:b8:dc: 52:c9:6e:2b:76:d3:27:ac:bf:4a:e2:9d:dd:8d:c8: 63:2e:84:a6:f1:58:7e:8e:b4:96:a9:91:30:4e:43: be:ba:8b:61:76:b3:df:c7:7a:19:f4:e3:ab:57:8c: 2f:be:84:c4:19:e3:56:cb:68:45:db:f2:00:70:70: 76:ee:ef:ad:80:07:06:0d:f3:0b:c6:b0:5d:41:b0: b1:aa:6a:16:33:c0:6b:8e:89:c3:c0:0a:78:1a:da: a1:4e:1e:a0:9d:bb:7a:65:1d:50:27:36:c8:cd:75: e4:c5:21:65:ea:e4:08:45:53:97:48:78:f5:d6:13: fe:8e:9d:ca:ef:c0:e3:e4:98:20:02:a1:ae:4d:50: 0a:a5:55:ca:4e:6f:66:10:50:d1:25:a7:a3:a9:09: bb:eb:91:22:12:88:5e:2d:60:6a:b7:24:31:e4:ac: d9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:10:9E:B3:7E:B3:03:C2:6C:F5:9A:BD:B4:9D:1B:34:B6:8B:FE:06 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:04:0d:bf:3a:d6:81:98:55:52:b8:18:f8:dc:d6:a3:fa:82: 67:ea:4a:d1:0f:66:c9:35:3b:02:7d:da:01:04:8a:ff:76:7e: bc:e3:45:1a:a5:6e:ec:a1:26:33:f5:be:99:e7:ac:ac:c3:fe: ef:f8:ea:79:39:cd:16:51:ad:e2:d2:58:7e:b4:98:aa:8a:89: b3:d2:58:8e:43:62:0c:f0:98:13:f0:76:33:1d:d8:12:45:29: aa:c6:12:c8:ec:85:3c:0c:bf:f1:63:a7:8d:cd:11:7d:ee:65: a2:72:00:6c:5b:18:46:ab:a1:14:fb:b7:48:bd:6e:25:bd:30: b2:97:07:ad:38:28:6c:18:03:75:f2:32:37:92:4e:f6:ef:ea: 0e:b7:2f:5d:44:c2:27:81:73:61:99:47:c7:0c:94:e3:a7:ec: 78:03:17:d5:44:79:8b:f0:5e:49:b9:d1:1b:5c:86:1a:dd:28: c4:72:13:e6:4c:1c:09:84:a5:33:0e:d5:19:66:9c:82:16:d8: f0:5a:b4:9b:1c:27:fc:17:2c:18:fe:ed:27:ae:c2:6e:5e:41: 80:db:73:17:f2:97:42:07:2c:57:e3:6a:fd:c3:25:1b:3f:01: 15:e3:c1:b1:ae:58:8d:00:ea:10:ea:24:56:e9:d4:1f:27:9b: 7f:80:70:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZyZjigWSzxBUpPWDlv4f6tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjUwNDI2MTQwMDIzWhcNMjUwNDI3MTQwMDIzWjAzMTEwLwYDVQQD EygxYjEwOWViMzdlYjMwM2MyNmNmNTlhYmRiNDlkMWIzNGI2OGJmZTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxy1tEnzUup6SdiLetPDy+krx/OwH pxY5iEW9rgEEK3T1anwtbAp05sW19wMow2wiZZtaAO2yo/4M84Grp/+UjUbYZnh2 zZQNS0+Zv1TG/JcTJXbM0MNkuNxSyW4rdtMnrL9K4p3djchjLoSm8Vh+jrSWqZEw TkO+uothdrPfx3oZ9OOrV4wvvoTEGeNWy2hF2/IAcHB27u+tgAcGDfMLxrBdQbCx qmoWM8BrjonDwAp4GtqhTh6gnbt6ZR1QJzbIzXXkxSFl6uQIRVOXSHj11hP+jp3K 78Dj5JggAqGuTVAKpVXKTm9mEFDRJaejqQm765EiEoheLWBqtyQx5KzZTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBsQnrN+swPCbPWavbSdGzS2i/4GMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZgQNvzrW gZhVUrgY+NzWo/qCZ+pK0Q9myTU7An3aAQSK/3Z+vONFGqVu7KEmM/W+meesrMP+ 7/jqeTnNFlGt4tJYfrSYqoqJs9JYjkNiDPCYE/B2Mx3YEkUpqsYSyOyFPAy/8WOn jc0Rfe5lonIAbFsYRquhFPu3SL1uJb0wspcHrTgobBgDdfIyN5JO9u/qDrcvXUTC J4FzYZlHxwyU46fseAMX1UR5i/BeSbnRG1yGGt0oxHIT5kwcCYSlMw7VGWacghbY 8Fq0mxwn/BcsGP7tJ67Cbl5BgNtzF/KXQgcsV+Nq/cMlGz8BFePBsa5YjQDqEOok VunUHyebf4BwEA== -----END CERTIFICATE-----Generated at Sat Apr 26 16:24:30 2025 by rpki-client