$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft File: HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft (raw, json) Hash identifier: vF5RBvQNGwwwUtNK3KBRRk7/Nzod+2mq0U5XfvCb0Zc= Subject key identifier: 28:47:2E:7B:7A:68:19:0E:C9:99:DB:AB:96:09:B6:50:ED:0A:4D:D1 Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4 Certificate serial: 01967EA1D247E77ADCEFE0725BD2F8BB67FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft Manifest number: 0B4E Signing time: Mon 28 Apr 2025 23:00:56 +0000 Manifest this update: Mon 28 Apr 2025 23:00:56 +0000 Manifest next update: Tue 29 Apr 2025 23:00:56 +0000 Files and hashes: 1: 1Gb7bKOB6qaqSl4slwDpG6HeQuU.roa (hash: +m50Iqil1tpGPCH1POgDTMYG3pR8qHGO84rW5K/euCI=) 2: 5yN22ahrdAN1NXIIN6NZ1jhN7Jg.roa (hash: j0qMcGfpFNrPYWDQOmrLH7ZMvqbrcA5XzAeaKGehsQA=) 3: 8EQPiSjQEYby_XgXqAmaDuC4v4s.roa (hash: 8d10+B2y/tYDuhscsgeyLhd3jc337orMULwx5SPapmY=) 4: E4_h1qYRN41D_VDuA1H5nUNKrr4.roa (hash: cIztELSHss6QRuEFFxw4N/UrkNKRSLWYj+DkUBUvoq4=) 5: HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl (hash: zzsa9fJc5GsoUfU+CrJcx4vnWEZtbgZA7sqL4JdseKo=) 6: HxQPVTCiHIEZEvZuDoFbWMCKkq0.roa (hash: gUjH3fV/xGXEx9RSjByHdu4FqtAvEWS+pJpQ7nPwfHM=) 7: I_uguIxF_BMEoyGLoIURMKuvuX4.roa (hash: 8eCD2dZaEAtY0Dv9hMHZwLlo808FjJsySBHzoOCHK7Q=) 8: JljJiSWFuhVdyGXatEB9x9JdnZk.roa (hash: jAkIP+k6idLyICi/ICZpuqWo5Ubp27FQJ+EpWgBEDeU=) 9: K6xaLl2fknJBgw1Nb2Cj0TA8oJA.roa (hash: +DXRxtDiDTuNPP3XfbOuBoSJqxfeETnbTJao9qkvOp4=) 10: QECshKhyym3U39W11wvqgySCjwE.roa (hash: aX5d7QpOhGIPJ4lMxrEQ7G2+ORViErZX+IKTs8thiL8=) 11: Q_qTon8MvtRJ7Yc5pdD8eXsue1k.roa (hash: tTK7gSyyI93W6RmRW4OEkhpUWe2cbJoZYsLm8Htm4m4=) 12: UmjABTUr0Zb4pHIrxaH4BnUZZBw.roa (hash: 5WOS1og+TrtZTsHliThud8m2Aj8cNpDdBDap4VqTPRc=) 13: XI623dsCQno6qF3qQmT7tBPRYL0.roa (hash: 68h6NdWczDm9jsCruyHJWBo3tYdsQcqc0/iou/1F0NA=) 14: ZLpoyTREbTFQSrueNjcvwhc4UVM.roa (hash: znxYwYux+1zAcRv+r+9X6VGpZLk/JOsk2KAl4CWZVu4=) 15: cQE0U4xZCH69tgR4nrNYYPj6JOo.roa (hash: bmWiNVCBbvYWUh9gi74WST8Cmi7v0uEcrjWGnyUEh+0=) 16: d3pxfpSAdMX5-xYmVFQaOfvLDSg.roa (hash: NLZDZC6DgJ7PomVCUoylLvrMZJUUP5EGmw8tlYepepc=) 17: gl18mKpO2JmUfkGnm0eQydlc6tI.roa (hash: OH9VSaC9xrFx/iWwi8X6+CuDn8+UvNS7uG5JY4B0Oao=) 18: jB-z6tU49eCpdLJATgE8Ex9roFU.roa (hash: i061JOQcxN7EcQaNeqtPKLXeQ2gYUgXTC3ZwpyVqD5g=) 19: q_nlZkVqMlecgYlyALwoNvlv0GU.roa (hash: XWj99O5UU/Tl9hJ/AXU1UIfYkTkR0RwVzYKv59mEUos=) 20: vP2xgKPjxexBd9elzajYP9djzSw.roa (hash: 666wkPXnB8va+FhTZzHDfJzrl43782Zx7uG28Yjj0ck=) 21: xa0pQq-tzXZJ9qWqDGQiLSuJe2Q.roa (hash: HXMP1GMDjDTbIw4GEhYV4aHqEPGVTAftKR+Yt5JJrQE=) 22: zAGkvZDi5GKm7RaT5qRHQq9Y3aI.roa (hash: b/4EVy5mQO5WrpROE6epbzPlL80tDYlW6g0ZerhEzvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7e:a1:d2:47:e7:7a:dc:ef:e0:72:5b:d2:f8:bb:67:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4 Validity Not Before: Apr 28 23:00:56 2025 GMT Not After : Apr 29 23:00:56 2025 GMT Subject: CN=28472e7b7a68190ec999dbab9609b650ed0a4dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:da:db:0e:8e:d4:ae:fa:1f:ea:48:c8:5e:03: 82:62:e1:b9:8d:2a:d9:bb:f7:6a:b2:28:5e:b0:99: e0:53:ad:bb:1a:47:c7:c9:6b:a1:0b:1e:21:42:d3: ce:90:44:45:2d:24:48:cb:9b:d6:be:24:e3:b8:b7: 31:1e:7e:84:52:2e:2e:1f:9c:3e:dd:44:81:ff:54: d7:bd:f5:79:eb:f2:58:32:ce:db:58:cb:2c:1f:af: 74:cc:e5:a1:e7:ff:5f:eb:30:a8:e0:27:b7:41:f9: c9:2a:db:63:04:47:93:1d:bb:d9:4f:d6:d0:54:67: c8:ae:36:03:c9:d4:1a:49:43:1a:dc:4d:a9:a3:1a: e1:d0:e8:37:4f:2f:dc:80:9b:4f:08:e9:9d:4d:d4: 2f:c4:50:5e:f8:d0:5d:d1:35:45:20:ca:39:4d:2a: 80:10:3e:e1:33:49:db:f7:09:71:43:69:c5:47:af: 42:5b:57:75:41:19:79:57:44:d0:56:d8:5c:6f:97: 21:18:60:da:09:70:35:3a:d7:1f:7d:92:26:33:6f: 90:9e:ee:e0:88:81:9a:86:f8:91:f1:e4:88:73:14: ef:6a:2e:57:be:ed:5f:70:af:55:c6:bd:16:40:bc: 98:16:2a:1b:7b:96:29:76:bf:25:68:3d:d6:ca:f8: 19:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:47:2E:7B:7A:68:19:0E:C9:99:DB:AB:96:09:B6:50:ED:0A:4D:D1 X509v3 Authority Key Identifier: keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:39:ee:70:6c:d3:c1:75:ed:9d:af:64:47:ba:22:66:de:82: 13:76:e8:20:07:64:d5:b3:67:31:fe:d4:c5:70:06:11:49:d4: 27:0e:81:f5:38:72:9e:59:48:a7:a8:8b:cc:24:77:23:a0:d6: 1e:12:ea:24:51:1a:1b:a7:d8:ca:c9:78:1f:5a:48:98:67:ce: c4:82:bc:82:99:fe:83:0f:80:85:93:85:b9:33:ca:62:7c:6d: 1f:bd:6c:12:7c:d9:a4:8b:62:f7:72:c5:0a:72:44:e0:ef:c7: c0:2e:14:42:14:0d:73:05:5d:60:33:70:a1:4c:01:da:71:eb: 92:ff:88:e4:05:ed:71:ff:ed:3a:a7:70:51:2f:fa:45:9f:31: 84:97:4f:5a:a8:c4:8f:a9:e0:38:1e:e0:8a:84:1c:af:c1:3b: 35:ae:66:69:7d:9a:8f:79:f4:35:6f:77:37:a6:4c:27:2f:00: 63:b1:4e:d7:6c:4f:e3:d6:d6:43:0b:42:44:27:8b:9c:25:07: aa:02:e9:4a:23:99:84:c3:14:ff:01:53:49:2d:c9:da:84:ec: 40:91:d4:91:67:17:b2:72:77:ac:86:bc:44:3a:45:94:67:4d: 07:d2:3e:36:89:ab:4c:5a:92:ea:de:31:21:12:c3:98:eb:65: fe:4a:24:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ+odJH53rc7+ByW9L4u2f9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy NTdkYzQwHhcNMjUwNDI4MjMwMDU2WhcNMjUwNDI5MjMwMDU2WjAzMTEwLwYDVQQD EygyODQ3MmU3YjdhNjgxOTBlYzk5OWRiYWI5NjA5YjY1MGVkMGE0ZGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39rbDo7Urvof6kjIXgOCYuG5jSrZ u/dqsihesJngU627GkfHyWuhCx4hQtPOkERFLSRIy5vWviTjuLcxHn6EUi4uH5w+ 3USB/1TXvfV56/JYMs7bWMssH690zOWh5/9f6zCo4Ce3QfnJKttjBEeTHbvZT9bQ VGfIrjYDydQaSUMa3E2poxrh0Og3Ty/cgJtPCOmdTdQvxFBe+NBd0TVFIMo5TSqA ED7hM0nb9wlxQ2nFR69CW1d1QRl5V0TQVthcb5chGGDaCXA1OtcffZImM2+Qnu7g iIGahviR8eSIcxTvai5Xvu1fcK9Vxr0WQLyYFiobe5Ypdr8laD3WyvgZ+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChHLnt6aBkOyZnbq5YJtlDtCk3RMB8GA1UdIwQY MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt OTk5MGUyZDllYWZlLzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATnucGzT wXXtna9kR7oiZt6CE3boIAdk1bNnMf7UxXAGEUnUJw6B9ThynllIp6iLzCR3I6DW HhLqJFEaG6fYysl4H1pImGfOxIK8gpn+gw+AhZOFuTPKYnxtH71sEnzZpIti93LF CnJE4O/HwC4UQhQNcwVdYDNwoUwB2nHrkv+I5AXtcf/tOqdwUS/6RZ8xhJdPWqjE j6ngOB7gioQcr8E7Na5maX2aj3n0NW93N6ZMJy8AY7FO12xP49bWQwtCRCeLnCUH qgLpSiOZhMMU/wFTSS3J2oTsQJHUkWcXsnJ3rIa8RDpFlGdNB9I+NomrTFqS6t4x IRLDmOtl/koklg== -----END CERTIFICATE-----Generated at Tue Apr 29 09:28:13 2025 by rpki-client