$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft File: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft (raw, json) Hash identifier: 9/h1qfE646TQGGapM9WS+dCZvDWYq2UEdXoW61CpFLE= Subject key identifier: C5:E4:74:F3:44:E1:3D:CD:FD:8A:04:48:B0:B1:36:6E:82:CC:3E:DA Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c Certificate serial: 0196748C30DE005D262A5E1643EB458DF1E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft Manifest number: 1542 Signing time: Sun 27 Apr 2025 00:01:06 +0000 Manifest this update: Sun 27 Apr 2025 00:01:06 +0000 Manifest next update: Mon 28 Apr 2025 00:01:06 +0000 Files and hashes: 1: 05T5QjbJNc87hT4My9l-JdCX1h4.roa (hash: iWvw7hOFWKPo65JahFO85oDHfJOnZV1Mm2k2unmLhhE=) 2: 1RAZSq7_BCIXMPLmCNYBwnRPVeM.roa (hash: iP8JwzeV1htPI5dhx1UE8Z1vTHtvlA2uWPOR/wMsfgs=) 3: 2sZWzmP4jcGE7Pa4efqWfw9IU60.roa (hash: gUtbnusOf662l8whAzqSEqeD8Bk4DCjq3EznrZO972g=) 4: 5m85a6z_82pxvCFTAubCZE3IDRY.roa (hash: yTwyQOsGZdUMHgKCUc+pKc+Yl8K88OgV6IbbvGfhyYk=) 5: CmOI9SR69ovMKrxlDxbUWh5QUU0.roa (hash: ebd4rV/RF1OTbOXyyPqPuU0N5clQOOerkc0GReb1J2w=) 6: JAH3IXMvbG6Ys2dPmwodnWJGeoI.roa (hash: Gw60ldKvXUBK2ktt+kjbpS50udL3AC6hPM4eFLUJXXw=) 7: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl (hash: Ajufz7+5g6tnRNP7T676/8cJluxJYsVSG67+DeNg5Jw=) 8: Mo2Yxg7E21ifTL9q1N5-J92Xwoc.roa (hash: TkwVa0SYaV5hBeXyQJUfV73qt/zpkvlDBmt4dTIf2cM=) 9: R1MyqdNbJMXA2B9hCOoJVtEYSAo.roa (hash: Oyl4OLft0GlbGZgUB6suVirp+SJlYsYQ9M9olwoUBhU=) 10: WMM-Jj0p6VWzGlo6msh5tpjK74c.roa (hash: /4WO/iijr2ysoJfrqLnn3dB9+scGttOptVRk8eNo8H4=) 11: ZKvHQby0NQ22M7VFCjQ_KqulEx8.roa (hash: ivLBRNaqrPZubBjRNX4dYKOMZvwYNsaC4yTeWqcGhaw=) 12: d3dV-F9i1Br6ldDDQ9My5gk4FEk.roa (hash: D5hjHITpq2OuWGDqz/F3KXiZU9mjTm6pBy0ZexAzEsE=) 13: h7K92qiMiWFLtkqLXfWLx7T3RS0.roa (hash: SXAVcoWGoZlytOpyw4bPPikyafW7og6IlMVyTr7sX3s=) 14: kYicqWZAzu8hiJozc5PHShhEq-E.roa (hash: OYwB+H/kkij7RR6F2kmOg8GEEkzDZp7ZZQMM62pUIGk=) 15: oWWO6Pva3OKGYV4SbuU_A-N5y1U.roa (hash: wiPRw1JJ6JQ3Y/GXPGUGO3wdWm/JMB2trum1N3IbVAQ=) 16: pPQq_lolA8g8QxXqDDucDfwuETo.roa (hash: L1m+KNUP0y0o8T6Tj0pDmrtwsUBi0b51YKd4t4w0w/g=) 17: rGuulbHd9kRPQ-Vjw-QiFUOKt_A.roa (hash: B7yPzOPI+uMdkQOcYQEtalAjsrTFRRTxVc7BxeoQZ2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:74:8c:30:de:00:5d:26:2a:5e:16:43:eb:45:8d:f1:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c Validity Not Before: Apr 27 00:01:06 2025 GMT Not After : Apr 28 00:01:06 2025 GMT Subject: CN=c5e474f344e13dcdfd8a0448b0b1366e82cc3eda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5d:a5:c5:4c:eb:ac:fb:a8:51:21:f2:0d:d5: 57:7c:1d:c6:d5:8c:21:fb:4d:c4:6e:2e:12:8c:ad: 7a:2c:ec:93:b2:1e:a1:6c:51:89:46:29:66:a3:71: 83:eb:a5:5c:81:bd:e4:3c:25:67:0e:6a:44:f3:bd: c7:76:b5:bb:34:35:26:3b:b3:03:8e:82:07:2b:c4: 8f:22:0e:be:30:72:1a:06:ad:bd:7d:0b:74:b3:e6: 6a:6f:8c:48:78:23:ac:96:f8:8f:c9:e3:8a:ea:5f: b1:1f:46:07:74:f0:cc:6c:a1:fb:c4:3d:ec:1e:5e: 89:57:51:16:1e:c2:c3:4c:5f:e5:96:4e:0b:13:cd: 28:21:06:69:c1:44:b1:cc:5c:73:25:fe:14:f5:61: 15:90:ad:df:cb:c5:94:f1:ca:fe:6a:7a:a4:1b:8b: d6:d5:a3:aa:69:69:80:e8:ac:e6:c3:01:d3:8f:98: 64:9e:66:09:05:b8:09:88:74:89:dc:5a:df:90:12: 6d:b7:be:24:e0:2c:e5:06:cd:5a:02:4f:83:2c:0a: 67:b8:0c:b3:3c:df:84:a7:b7:80:2c:1e:44:cd:9c: 1c:10:74:ac:84:33:c9:99:80:fd:9e:3f:af:7e:bf: 30:0e:e2:a0:4d:8c:71:ca:e9:2d:3b:b6:82:ed:7a: db:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E4:74:F3:44:E1:3D:CD:FD:8A:04:48:B0:B1:36:6E:82:CC:3E:DA X509v3 Authority Key Identifier: keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:df:75:f2:41:b0:45:ad:9f:cd:17:a9:99:25:66:25:fb:46: 8a:65:45:e7:43:d8:8c:f3:77:d7:f3:b0:97:93:13:ff:43:44: e6:4c:24:ca:40:8e:85:97:75:e6:5f:f9:10:d9:5b:12:e8:93: 9e:26:9f:8f:37:e0:96:8e:e9:7a:ec:23:c8:ef:e4:59:ca:1f: 3a:bb:22:c6:db:37:ce:b5:e0:1b:96:0b:03:47:fd:de:39:2a: 05:9f:41:8d:d1:17:05:73:81:3e:0b:99:ce:1d:ad:ae:36:e7: 36:cb:44:ab:42:d1:3f:5e:bb:1b:50:13:37:1d:99:b3:a7:78: 44:8c:79:02:22:a7:9e:25:9d:b9:81:df:a0:14:af:ab:bb:ef: 99:d5:da:97:95:d5:9c:5e:9f:bd:3c:04:fc:e9:8e:cf:70:b4: 08:86:3a:21:78:d7:b1:4f:a5:c3:3d:6b:01:1e:33:22:02:2b: 3b:fe:ab:ad:bf:c9:3e:0b:67:87:9c:d3:bb:0f:db:55:ae:0b: 81:3c:08:e3:0c:03:a9:bc:8c:f4:87:19:bf:24:f1:77:e3:60: c3:8a:63:f7:e2:c8:c8:16:76:a7:3a:a6:1e:06:98:d7:c0:76: b5:76:f4:34:40:ba:68:62:94:9a:24:31:de:92:e1:b7:70:d4: 11:6c:fa:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ0jDDeAF0mKl4WQ+tFjfHnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky MDVmM2MwHhcNMjUwNDI3MDAwMTA2WhcNMjUwNDI4MDAwMTA2WjAzMTEwLwYDVQQD EyhjNWU0NzRmMzQ0ZTEzZGNkZmQ4YTA0NDhiMGIxMzY2ZTgyY2MzZWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl2lxUzrrPuoUSHyDdVXfB3G1Ywh +03Ebi4SjK16LOyTsh6hbFGJRilmo3GD66Vcgb3kPCVnDmpE873HdrW7NDUmO7MD joIHK8SPIg6+MHIaBq29fQt0s+Zqb4xIeCOslviPyeOK6l+xH0YHdPDMbKH7xD3s Hl6JV1EWHsLDTF/llk4LE80oIQZpwUSxzFxzJf4U9WEVkK3fy8WU8cr+anqkG4vW 1aOqaWmA6KzmwwHTj5hknmYJBbgJiHSJ3FrfkBJtt74k4CzlBs1aAk+DLApnuAyz PN+Ep7eALB5EzZwcEHSshDPJmYD9nj+vfr8wDuKgTYxxyuktO7aC7Xrb5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXkdPNE4T3N/YoESLCxNm6CzD7aMB8GA1UdIwQY MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt ZWQzZTM4Zjk1NzdmLzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFt918kGw Ra2fzRepmSVmJftGimVF50PYjPN31/Owl5MT/0NE5kwkykCOhZd15l/5ENlbEuiT niafjzfglo7peuwjyO/kWcofOrsixts3zrXgG5YLA0f93jkqBZ9BjdEXBXOBPguZ zh2trjbnNstEq0LRP167G1ATNx2Zs6d4RIx5AiKnniWduYHfoBSvq7vvmdXal5XV nF6fvTwE/OmOz3C0CIY6IXjXsU+lwz1rAR4zIgIrO/6rrb/JPgtnh5zTuw/bVa4L gTwI4wwDqbyM9IcZvyTxd+Ngw4pj9+LIyBZ2pzqmHgaY18B2tXb0NEC6aGKUmiQx 3pLht3DUEWz6VA== -----END CERTIFICATE-----Generated at Sun Apr 27 04:24:01 2025 by rpki-client