$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft File: YGYXWM4zBiJHCjmujW70ogRPg8Q.mft (raw, json) Hash identifier: 1pk2Ax33mtLNkFeYZZeBrBs/c+7uff1PZmUwpsjsatQ= Subject key identifier: F0:DD:CF:30:B3:74:26:A5:66:18:19:4C:AD:C0:0D:B0:D9:75:98:69 Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Certificate serial: 019672D417E8E0C5E425BB690B9341B0DD79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft Manifest number: 153D Signing time: Sat 26 Apr 2025 16:00:24 +0000 Manifest this update: Sat 26 Apr 2025 16:00:24 +0000 Manifest next update: Sun 27 Apr 2025 16:00:24 +0000 Files and hashes: 1: 1jJgRYb9W4sURCICTmoLplbZHfs.roa (hash: qvyeOItWUbyQ2K5Z+KPy3O+0hoC+eVZj/p5eOsFLL2A=) 2: 2bitAWBYtHnJOfetAxEk1NWDm2Y.roa (hash: Ny4sMxLaEUhtST4+VmyAnyHZb/s80LG64s9z9X1sBRQ=) 3: FzUBpaz-C-RxalVbWOkDzpE2yCM.roa (hash: T/pZcNXmahfhGqhyvuYT5Ve4BWsAYlUMonVIOR9Jwwc=) 4: GnpXllFnavAmEq5NxCew5FbUJHI.roa (hash: UrAOMyeUWJbJMwCGhOZ8xTwTpTiZsyt257TfGcy1E8E=) 5: JsNpDFVTIVYgUCJ1BB9Q_OSa1eI.roa (hash: WP14cmIm0lMtM89Vbr+2k9QFB+POLX7HRTX2iqF9kl8=) 6: Ru0qR7TRZaYr9H0bORVN2DKCxoI.roa (hash: 8HruGL7yjBEpznKxnMUFMkvUrJXEnuhg3el+Q45d0VY=) 7: YGYXWM4zBiJHCjmujW70ogRPg8Q.crl (hash: 3REtP9tv5alD5lcvX3aHQGJr7XS4T4UDZiFxPGBqLfc=) 8: ZGmf9YqAk4QzlnuTzaLSUF06ZmU.roa (hash: 4TTQ/eXadulSIhoVzB1gQqr9voOBbcYnz7UwH2X8rJI=) 9: aUwME-OEW2tfuy8IUz8xO9RJ9VA.roa (hash: TJpr115B55iHu7xXQQMd6VR9p+/zOYhE8FX2JwI2PiU=) 10: c3DCrLRFAJY72J3n3qrjNug2KJI.roa (hash: dR7zsNeMamp+bQYtYrwKTVfIZFLqO0MP1cdCrGnLSmE=) 11: cUEqkvOn3Or6KK_gteey-M1immw.roa (hash: NBFmDrlpaQLqY6RSKBmBrpZhLZbGW8F9pK5gAcvo2qA=) 12: fI3NusZkrqWO5jLO3fTZ5z39Yl0.roa (hash: KILLD4GBsSEpBwdB72CBo4dP3KtsyWxUfk3vFU0iOuU=) 13: k6TUAjq7IKBlApZOlbsqYXrEIx8.roa (hash: bC2yv2JOs11J0JF7qUwzq/8PnVIsXN9xT7P0dfHswKQ=) 14: kAyD-iamG8PuwFNIujY2KowQdcE.roa (hash: RV+R2SNYZWh3uXsxFcbw49NH++kmcr/RW695RLifrdU=) 15: ojVk8vkZ0BLY9GAaenbVqf3H9rc.roa (hash: Ba9QsIqkvrtmVCQkpDkO0vZ9nFVhfN+UrHpeojqVkNI=) 16: qQ7qZcsRXtjJvwERncTyOZfQz3Q.roa (hash: mqEcMXW4dbXayMYmxFVMUymF7f19p03bN3IauxDIgdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:d4:17:e8:e0:c5:e4:25:bb:69:0b:93:41:b0:dd:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Validity Not Before: Apr 26 16:00:24 2025 GMT Not After : Apr 27 16:00:24 2025 GMT Subject: CN=f0ddcf30b37426a56618194cadc00db0d9759869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e1:16:49:c3:58:5d:2b:f6:b7:cf:08:b6:b4: f6:12:b0:3d:c1:60:72:78:2f:c0:9d:49:dd:e3:f0: e0:f1:e2:92:84:bb:b6:09:00:bf:3b:07:4a:ae:31: 57:a9:45:79:78:bb:b8:d8:d2:b5:ba:d3:20:2c:a2: 48:5c:4c:98:84:ec:d6:40:4e:0b:33:e1:a5:25:45: 2d:93:fb:64:72:48:32:b5:af:34:fc:f2:a4:92:8f: 8e:11:7d:b5:f0:8f:15:be:0c:77:4a:e2:55:07:64: 98:a6:6d:92:25:b7:51:fb:be:8b:b2:18:8c:e9:a8: 55:7d:14:b1:7a:b5:1c:17:cf:33:34:c9:13:d5:44: e4:46:ed:f8:55:b7:f3:b6:20:48:32:9c:c0:0d:29: 96:38:45:a6:d4:d8:b1:11:37:12:cb:f4:f8:eb:72: e8:db:ce:ee:fe:cc:df:c1:15:3f:e8:11:5a:b6:18: c8:6a:d5:1d:5b:df:e0:aa:b8:3c:d3:77:7e:86:f4: 82:d1:cd:e7:df:b4:64:b2:05:7e:11:33:b9:15:9e: 76:09:ae:8f:8b:ca:3e:ed:85:f7:db:5a:8e:8f:75: 31:79:24:a2:4c:82:89:be:9a:7b:e8:5d:2f:45:8d: 36:b4:97:3d:5f:bd:15:ed:38:9b:b2:14:df:81:6c: 3a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DD:CF:30:B3:74:26:A5:66:18:19:4C:AD:C0:0D:B0:D9:75:98:69 X509v3 Authority Key Identifier: keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:10:2d:40:bc:b9:00:fd:8c:e0:61:3a:3b:8f:c5:c2:b9:f8: 9d:6b:12:5b:78:8b:46:6d:07:94:19:61:64:a0:11:66:02:05: cb:55:86:41:5f:81:67:1d:65:ea:3a:c2:dd:92:52:14:9f:30: f9:3a:8c:20:8e:d4:2e:87:12:13:48:95:c5:6f:63:3e:30:0e: 02:38:77:d2:f2:fe:74:dc:8a:5f:f5:3b:be:01:90:9c:5c:c5: 2b:5e:56:b7:27:38:07:6b:51:cb:a8:ec:f6:63:82:3c:04:52: 78:96:fc:98:1c:10:ae:be:5f:e4:fd:01:c2:a5:e3:bb:8c:87: 9f:35:84:db:10:3f:76:f2:17:fa:fa:50:bd:85:14:59:80:a1: 7b:3c:13:52:91:e0:a2:8d:e9:f0:3f:b6:3f:98:0c:db:d0:09: 28:ae:d0:fb:f9:3d:79:6f:a9:73:c7:ef:d0:a1:00:d9:b1:8f: 21:e5:c2:e0:ac:1b:36:39:b9:dc:c9:0b:18:d9:b5:f0:21:f1: 1c:f4:23:8a:0d:68:cb:cd:07:de:d1:01:15:53:a1:ed:2e:49: 8d:c1:40:11:0c:42:93:30:54:1a:a4:31:aa:32:fe:8f:c8:17: ce:da:67:af:44:e0:c7:92:20:a8:da:15:55:74:cc:67:54:fa: d9:37:83:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZy1Bfo4MXkJbtpC5NBsN15MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0 ZjgzYzQwHhcNMjUwNDI2MTYwMDI0WhcNMjUwNDI3MTYwMDI0WjAzMTEwLwYDVQQD EyhmMGRkY2YzMGIzNzQyNmE1NjYxODE5NGNhZGMwMGRiMGQ5NzU5ODY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOEWScNYXSv2t88ItrT2ErA9wWBy eC/AnUnd4/Dg8eKShLu2CQC/OwdKrjFXqUV5eLu42NK1utMgLKJIXEyYhOzWQE4L M+GlJUUtk/tkckgyta80/PKkko+OEX218I8Vvgx3SuJVB2SYpm2SJbdR+76LshiM 6ahVfRSxerUcF88zNMkT1UTkRu34VbfztiBIMpzADSmWOEWm1NixETcSy/T463Lo 287u/szfwRU/6BFathjIatUdW9/gqrg803d+hvSC0c3n37RksgV+ETO5FZ52Ca6P i8o+7YX321qOj3UxeSSiTIKJvpp76F0vRY02tJc9X70V7TibshTfgWw65wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDdzzCzdCalZhgZTK3ADbDZdZhpMB8GA1UdIwQY MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut MWY4NzQ2OTQ1NDgzLzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOxAtQLy5 AP2M4GE6O4/Fwrn4nWsSW3iLRm0HlBlhZKARZgIFy1WGQV+BZx1l6jrC3ZJSFJ8w +TqMII7ULocSE0iVxW9jPjAOAjh30vL+dNyKX/U7vgGQnFzFK15Wtyc4B2tRy6js 9mOCPARSeJb8mBwQrr5f5P0BwqXju4yHnzWE2xA/dvIX+vpQvYUUWYChezwTUpHg oo3p8D+2P5gM29AJKK7Q+/k9eW+pc8fv0KEA2bGPIeXC4KwbNjm53MkLGNm18CHx HPQjig1oy80H3tEBFVOh7S5JjcFAEQxCkzBUGqQxqjL+j8gXztpnr0Tgx5IgqNoV VXTMZ1T62TeDNw== -----END CERTIFICATE-----Generated at Sat Apr 26 19:06:15 2025 by rpki-client