$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft File: V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft (raw, json) Hash identifier: 2M+7Qju6TwmbJoP8G1AqYh5Yfzyup3rD4OJl2iUZjTM= Subject key identifier: FA:D8:A6:D2:50:ED:D5:95:CE:A7:B2:A4:B1:02:DC:01:EA:97:61:59 Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47 Certificate serial: 0196760D0375D497FA44A3C113AF1D130EB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft Manifest number: 10FF Signing time: Sun 27 Apr 2025 07:01:26 +0000 Manifest this update: Sun 27 Apr 2025 07:01:26 +0000 Manifest next update: Mon 28 Apr 2025 07:01:26 +0000 Files and hashes: 1: 1-2ze8RFqsfXiBAT11ime5104BjY.roa (hash: 1G/91kNwXr6Euhuawe1vb8XkKyyCivckcaN+MUB7G0c=) 2: 2Kp_9YpfYIQIxyL5CznhHnkIxfU.roa (hash: LYK8gdoVuDcWT2M8puwmkXBr6TS/IOAg3OaPmCBsVwI=) 3: 5lDpUUbHXzya0fMquFYbFulqqVs.roa (hash: f1hht89a/wconxQu5KNK8QHufJfhYi0HFOvBnekJIq0=) 4: FHAcQ1hSwnBkPa_1eYwrasvDBAI.roa (hash: UEqpRdrSw3UNWb3wNwi2VW+eLR/IeGW0ScqzLsmeYpU=) 5: FeD_-2NSvz_oTh1LHrP44NqzWIo.roa (hash: M0rfgf8nLa/Z7WmSdsaO8N+Wk6yxPhPTCcsAwupLmJk=) 6: G0XtWDoXmf3g4WPOe4oJBWwD53c.roa (hash: ah5ed8JgyczAK0ktQp/XfJNbJde2PQoHxbYeBWCDQq0=) 7: HlClfikOJrfktj0svDKphR0_6Ic.roa (hash: g1qw7C3eBB8cA1eir2ZaMGGhWvD9jq2Y2uAjecDMYHM=) 8: JHZeQoZfAbaLUlrZmCxtZ1ApkWo.roa (hash: +VPqWsWngmfKHIzBC3GFe6m9tn9RXpVp3jH9A+hxoC0=) 9: LXaOacmSywqNlfh5CO5J1YXXGmI.roa (hash: jtQHK2Bwk3+TO9AZet3mFNI8IuZDJg2fZaIIhEkYoQM=) 10: OXCR5eZAjAKFe_5_WqZvsLDsIGw.roa (hash: +dX5GIlPaHoX8hOklKsClO3JcTsDNTNWJiq3yrlcruo=) 11: SpYcE3S7smMV4xZjzIbw_3YgWQ8.roa (hash: r3TEKYZlZtxmxAKHk3aPSvesmIPuqj82Nxme4CHttjE=) 12: V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl (hash: tf8dRNEcFJowQuk4JhxF3J6/5f+42MPLDsWmtLNlMo4=) 13: Xdc1GXsEPiQ6GE6eHjFDA0ZgS3w.roa (hash: OE+tVEQ0oQcFP5VxqAmEpxiSoF7RE792pp1YSKmB2O0=) 14: ctU4FIR-r7525NdQcQhV07S1InU.roa (hash: AU7Mc04mkVMs25EZU4CCsCrYPVp1VtWzfOi9wTwg8to=) 15: mgE4NAvl5a_fjijODt9d3QXoFWo.roa (hash: U49USPjZ5W98U1upDeeRKhUCJZwO5RTn5SJ+Rro+7ys=) 16: valOsPAluNa3RG5X659q6dsU_FA.roa (hash: fkBC+Rvf3Gv+oy6BC36LsnU6WeruMquhW06fi/seA5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 05:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:76:0d:03:75:d4:97:fa:44:a3:c1:13:af:1d:13:0e:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47 Validity Not Before: Apr 27 07:01:26 2025 GMT Not After : Apr 28 07:01:26 2025 GMT Subject: CN=fad8a6d250edd595cea7b2a4b102dc01ea976159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a3:ed:2c:26:62:b6:cb:1f:bc:09:5f:8e:cb: f5:0d:8b:ac:b1:84:76:cc:c2:44:82:80:8d:29:ce: 5c:3f:ad:bb:05:2e:c8:6f:0b:d5:90:74:20:ba:1c: ab:35:04:71:2b:d2:52:e6:0b:f8:5a:c3:25:6e:c3: 65:ea:d7:1f:3a:3f:b6:8d:b9:31:35:ba:7e:e5:49: 84:b5:f4:7c:ae:33:aa:ab:47:22:4a:ed:a6:20:90: bb:87:b1:25:9d:67:69:90:d2:36:8b:7f:a7:b2:5b: 65:85:bf:b8:54:aa:57:96:7a:1a:d8:c9:80:7f:c1: 8e:8f:eb:cf:50:2a:33:4c:a1:7b:ac:fb:70:33:a0: 60:b6:9a:4b:44:2f:79:92:3d:ea:4a:5f:c8:08:83: 73:12:07:6a:9f:9a:b7:d0:bb:1e:ff:a5:ad:54:a3: 8c:da:aa:98:bc:1a:e9:71:93:c8:cb:32:9c:67:d4: 43:bb:06:bd:77:6a:00:28:4b:7d:27:1d:e6:6a:5f: 61:4b:f0:5d:4d:06:3e:eb:66:5a:5f:b3:d9:fd:4e: 27:55:4d:ce:35:36:52:0a:d2:ad:1c:8e:e3:31:b1: df:e8:59:f8:4f:42:a6:45:98:82:a7:c2:21:a2:88: 1a:a4:35:bd:a7:d8:ab:08:0f:20:74:0d:55:85:9d: f6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D8:A6:D2:50:ED:D5:95:CE:A7:B2:A4:B1:02:DC:01:EA:97:61:59 X509v3 Authority Key Identifier: keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:9b:ee:fc:b6:9c:73:a4:a0:62:1a:ea:4d:ff:dc:bc:4a:66: 7e:26:77:4b:5f:91:63:14:b9:c0:71:25:af:c5:f9:75:ca:42: 0b:20:a5:c2:21:75:c8:33:88:df:a0:0e:ff:0f:91:53:e9:0b: 8e:17:f8:1f:43:b3:b6:ca:0e:7b:32:7a:60:68:a5:32:34:11: 05:ce:bb:3b:90:c4:93:d9:b7:ac:cd:31:5b:e8:b9:d5:f4:cb: 64:63:de:a0:d4:0e:76:31:e1:8c:8d:57:30:c5:31:06:ef:88: f1:55:a3:4d:0e:68:2f:93:d7:b8:7f:ee:a5:ee:60:a9:81:7f: c5:38:a0:4a:ae:f9:cd:08:7a:db:94:42:5c:be:20:5f:35:53: 12:04:ed:ac:47:8a:2c:87:58:2e:af:ca:56:ee:b3:ed:5c:c0: f4:21:a6:d3:f7:76:b3:19:07:d4:02:6f:b0:a1:26:6d:ea:0b: e5:81:36:0b:d0:cd:de:b4:47:de:23:87:76:1f:eb:5f:f0:fa: 02:f9:3d:d9:9c:fc:9b:28:d0:44:20:4d:72:c2:3a:d9:68:cd: 05:64:8e:85:d4:35:25:e4:88:fa:68:75:f6:1d:52:93:99:cd: ca:e8:01:c8:5e:93:aa:da:72:72:4d:ab:e2:09:e5:69:35:59: 51:f9:0b:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ2DQN11Jf6RKPBE68dEw6xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1 MzhkNDcwHhcNMjUwNDI3MDcwMTI2WhcNMjUwNDI4MDcwMTI2WjAzMTEwLwYDVQQD EyhmYWQ4YTZkMjUwZWRkNTk1Y2VhN2IyYTRiMTAyZGMwMWVhOTc2MTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKPtLCZitssfvAlfjsv1DYussYR2 zMJEgoCNKc5cP627BS7IbwvVkHQguhyrNQRxK9JS5gv4WsMlbsNl6tcfOj+2jbkx Nbp+5UmEtfR8rjOqq0ciSu2mIJC7h7ElnWdpkNI2i3+nsltlhb+4VKpXlnoa2MmA f8GOj+vPUCozTKF7rPtwM6BgtppLRC95kj3qSl/ICINzEgdqn5q30Lse/6WtVKOM 2qqYvBrpcZPIyzKcZ9RDuwa9d2oAKEt9Jx3mal9hS/BdTQY+62ZaX7PZ/U4nVU3O NTZSCtKtHI7jMbHf6Fn4T0KmRZiCp8IhoogapDW9p9irCA8gdA1VhZ327QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPrYptJQ7dWVzqeypLEC3AHql2FZMB8GA1UdIwQY MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It MWVkMTA5NTRiZDk2LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2 LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp5vu/Lac c6SgYhrqTf/cvEpmfiZ3S1+RYxS5wHElr8X5dcpCCyClwiF1yDOI36AO/w+RU+kL jhf4H0OztsoOezJ6YGilMjQRBc67O5DEk9m3rM0xW+i51fTLZGPeoNQOdjHhjI1X MMUxBu+I8VWjTQ5oL5PXuH/upe5gqYF/xTigSq75zQh625RCXL4gXzVTEgTtrEeK LIdYLq/KVu6z7VzA9CGm0/d2sxkH1AJvsKEmbeoL5YE2C9DN3rRH3iOHdh/rX/D6 Avk92Zz8myjQRCBNcsI62WjNBWSOhdQ1JeSI+mh19h1Sk5nNyugByF6Tqtpyck2r 4gnlaTVZUfkLzA== -----END CERTIFICATE-----Generated at Sun Apr 27 15:20:26 2025 by rpki-client