$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft File: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft (raw, json) Hash identifier: CziD7nswQDW8ll9AqTChrfai0U8damiCpnw9Ha7KqQA= Subject key identifier: B6:A5:C0:8B:21:6B:8A:F5:C0:67:B6:CA:90:CD:4E:A0:7B:02:A6:8E Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Certificate serial: 019680223C4D8E7B2498DA44F976D942CE4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft Manifest number: 0A14 Signing time: Tue 29 Apr 2025 06:00:49 +0000 Manifest this update: Tue 29 Apr 2025 06:00:49 +0000 Manifest next update: Wed 30 Apr 2025 06:00:49 +0000 Files and hashes: 1: 2m_CYVmLsPzF7bcN6vIid84YZD8.roa (hash: LBmz6BkcC+hYAgg9NpyTpTiVYvW2FI/a+Z33OiNH3bM=) 2: 4nVbm_9mW8-MAn0I_kGjdBfxhVw.roa (hash: pTL9FLQm2ArdSOx4IvTJl5dYC4wcCTYCswuw3GEGHMQ=) 3: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl (hash: wtPMfQVxHe8iSruOI80Mspr8amNkMmB7PK+RR39Y30c=) 4: ASUGNfdEr-zmHuBMKbmczWEEyX0.roa (hash: XbBf6Nfds25faGeda9A9EZrA0jUpRsOTRIO73TfrGdU=) 5: D_RGKNjU3HO1804H_N4lL39f8xU.roa (hash: lQxsMyLpAGFJHo/y+xtaq8v1/ZEVry9ym0LdrZC/Bgk=) 6: Di4BCmfwCebJmpiiwQVl8kD1SGY.roa (hash: YROnCwrXQNQ5Na/T+Qstm6PeSLYo1KpF7+7yHOQYHZY=) 7: GPFpap7M0DbSFtJBpaKp67RfOgs.roa (hash: 6C0EKVC4/wJ0awCJ51hmh22riQaO8QV9e+LjKWFhq3o=) 8: IrnZpWugwiVaDWE0Y8y2HTk6myM.roa (hash: hz4dzGEJlp9nAI/PksWqX4be/cNB9cFXoUk0RTppUW4=) 9: UPL7qImi1Ys3kJpNeUneyjua3iE.roa (hash: yEbc7GI9w/HHKG7S49YH0IbZWjyzBWFPN0Ij4so55ao=) 10: Wqi1dLZsHvoMXUpSlZaZNHPgS_4.roa (hash: uMbe0TM0fIuYtnHf63Llp9sJ+CZVXJ/tOzlQU2AOjts=) 11: gqYJ1QlxZp2sfbvxF5yVPiDZ3Dk.roa (hash: +mkHl1F4HLXN9PfWQktZtYiROfsgXfptEmlNuP4F0GM=) 12: hrJ9G8LdPfpuv4HEnlrj0UM1FZI.roa (hash: Ap/wGOk300z33ESWLkwykljx6YcmZDQ+kuaPYGOBuOE=) 13: ip51KpcMdfOcRWLVf2HbT1-y1Tk.roa (hash: w96a29aqdZpAZsW1TalxljppYBFpY8XCQQF21I+O+bg=) 14: qOKY-IzakK8b3r-fGGAM7SuFUFM.roa (hash: 0xmS3lTVgR47MEU89O0ODLmZ+nEhlRcq1hkGVTaLD7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:80:22:3c:4d:8e:7b:24:98:da:44:f9:76:d9:42:ce:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Validity Not Before: Apr 29 06:00:49 2025 GMT Not After : Apr 30 06:00:49 2025 GMT Subject: CN=b6a5c08b216b8af5c067b6ca90cd4ea07b02a68e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:18:d1:47:a2:90:c2:22:7d:7f:f6:f9:53:30: 88:d3:6a:a7:06:f7:f1:57:6d:e9:80:d1:9b:11:85: d2:53:7b:46:89:3d:f9:20:9f:16:41:6a:b3:d7:fa: 35:b6:b4:1d:8e:aa:07:96:eb:12:fe:d9:12:54:4b: 5b:36:0f:cd:ca:8a:63:4a:fe:5f:37:85:ec:61:7c: 3e:d0:32:03:cc:75:e1:dd:ee:a0:c7:e6:b6:cc:68: 68:c4:2e:83:47:d1:49:5b:ce:1a:d1:07:02:0d:43: 7c:30:c1:e7:15:1a:1b:df:56:32:3a:57:0b:5d:8d: 44:c5:98:75:e2:74:be:a1:ab:e8:19:62:e1:89:12: a2:da:00:1e:fe:c7:0b:ee:ec:0c:e4:db:d1:42:6d: 0b:3a:b6:ec:5b:cd:8a:b3:65:84:1b:95:74:83:cf: f9:8e:e3:29:f2:16:da:50:de:13:5b:43:67:51:d6: ba:62:bc:d0:70:c6:2c:80:23:6d:b8:4f:90:1d:c1: 31:ef:a1:b3:b7:2a:22:4b:d4:78:91:7d:aa:ef:c1: 4c:a8:75:0a:76:a6:8e:d3:89:5a:9c:4f:6f:cb:12: 7d:50:d9:28:af:03:06:17:48:82:d6:18:43:0a:ce: c9:2e:0b:d7:07:c4:c5:41:49:4e:e3:89:d5:4b:03: 75:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A5:C0:8B:21:6B:8A:F5:C0:67:B6:CA:90:CD:4E:A0:7B:02:A6:8E X509v3 Authority Key Identifier: keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:3f:4c:63:c9:e9:35:ec:e4:7d:12:c1:c1:0c:1f:25:1c:f9: 0d:d2:ff:5e:e0:4a:55:72:6a:51:eb:97:f4:5b:4a:8c:e0:b3: c3:ce:99:cf:b9:c9:a9:d2:a1:b9:b1:59:dc:c0:ec:03:a2:e0: e7:8c:e3:e1:44:f9:aa:87:ac:91:ee:8e:aa:21:e8:72:bc:7f: 8b:0b:0c:2c:64:42:fc:6b:66:1c:fe:6e:15:96:8c:bb:80:a7: ee:dc:58:e5:6b:e2:7f:38:21:e2:54:f9:0f:e2:0a:11:27:d8: 05:8c:b0:51:28:25:ca:f8:5b:34:b3:e0:7e:f2:8b:3b:a6:e3: 00:5e:2d:a5:bd:88:e8:47:af:b6:29:7e:8c:34:be:1f:60:f6: 11:5f:72:18:74:55:da:e0:7d:97:e5:52:20:fe:a6:95:74:5c: 0e:c3:df:07:be:30:5b:91:b6:b9:0a:56:1e:fd:b5:1e:12:74: c0:2a:81:85:c3:d5:cf:8a:d4:62:41:08:07:be:f9:f6:87:f2: 7c:98:d2:5e:73:0c:1d:b5:6e:17:15:0e:4a:e0:c0:de:5e:f9: 01:33:57:92:5c:39:36:24:6d:71:42:58:df:2d:a7:18:ff:41: 4d:2e:57:c8:6d:91:ea:8a:a8:2c:26:bb:da:64:f1:ff:38:fb: 6f:b4:5a:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaAIjxNjnskmNpE+XbZQs5LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh N2IwYmEwHhcNMjUwNDI5MDYwMDQ5WhcNMjUwNDMwMDYwMDQ5WjAzMTEwLwYDVQQD EyhiNmE1YzA4YjIxNmI4YWY1YzA2N2I2Y2E5MGNkNGVhMDdiMDJhNjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hjRR6KQwiJ9f/b5UzCI02qnBvfx V23pgNGbEYXSU3tGiT35IJ8WQWqz1/o1trQdjqoHlusS/tkSVEtbNg/NyopjSv5f N4XsYXw+0DIDzHXh3e6gx+a2zGhoxC6DR9FJW84a0QcCDUN8MMHnFRob31YyOlcL XY1ExZh14nS+oavoGWLhiRKi2gAe/scL7uwM5NvRQm0LOrbsW82Ks2WEG5V0g8/5 juMp8hbaUN4TW0NnUda6YrzQcMYsgCNtuE+QHcEx76GztyoiS9R4kX2q78FMqHUK dqaO04lanE9vyxJ9UNkorwMGF0iC1hhDCs7JLgvXB8TFQUlO44nVSwN1mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLalwIsha4r1wGe2ypDNTqB7AqaOMB8GA1UdIwQY MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt ZGZiZmEzZmNmMDIxLzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXT9MY8np NezkfRLBwQwfJRz5DdL/XuBKVXJqUeuX9FtKjOCzw86Zz7nJqdKhubFZ3MDsA6Lg 54zj4UT5qoeske6OqiHocrx/iwsMLGRC/GtmHP5uFZaMu4Cn7txY5Wvifzgh4lT5 D+IKESfYBYywUSglyvhbNLPgfvKLO6bjAF4tpb2I6Eevtil+jDS+H2D2EV9yGHRV 2uB9l+VSIP6mlXRcDsPfB74wW5G2uQpWHv21HhJ0wCqBhcPVz4rUYkEIB7759ofy fJjSXnMMHbVuFxUOSuDA3l75ATNXklw5NiRtcUJY3y2nGP9BTS5XyG2R6oqoLCa7 2mTx/zj7b7Raug== -----END CERTIFICATE-----Generated at Tue Apr 29 15:02:32 2025 by rpki-client