$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft File: fQakK7JEblHxkuo3W99-7FpRx38.mft (raw, json) Hash identifier: wHFAHXN/8/nGT27VHtF9+sYB83K+tweqo1ysrraQONQ= Subject key identifier: 21:01:EF:C9:58:77:F5:61:47:1D:E1:A2:87:D9:23:73:9E:27:97:AE Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 019671C216EDE69FB44B1D662B430670BF64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft Manifest number: 110A Signing time: Sat 26 Apr 2025 11:01:07 +0000 Manifest this update: Sat 26 Apr 2025 11:01:07 +0000 Manifest next update: Sun 27 Apr 2025 11:01:07 +0000 Files and hashes: 1: 2EnX4m92s0lhKmWE_sTzMD4Ayro.roa (hash: gA57KxZUSDCVnGJyJOSYKPN5gZzPfcQGEC6QQbL5A80=) 2: 3-Grh5jLZ10JU7OBJD1tp_47eyY.roa (hash: 2c45XwsvJy+h7TqtuH/GlyKMkqIf7Xkil5OLxUtEjls=) 3: 3O-PquqRfbA6nwdvb9qh_AlphQI.roa (hash: ui7wdGtAkSn5jSbzg9QOpRGaOjEkXjjG4DHPpDLyVM8=) 4: 9tG_IZuU5_cUB2VxB4_mFuzbZWA.roa (hash: PfJNVhJ2t/gHrswGCAzyuF/aOd+UybWj7m8V6C9TjnM=) 5: Ev1rARJ34nYfG1V0Ld0spQXI-VU.roa (hash: SD0RplzRHSl5AqxByRd93YJkWu3aK44s9ywFpp3pnJ0=) 6: FktOgxEd5inrsl5Xig_9VZ-14kI.roa (hash: YzQiSJ9dizGMefq4AymfGDFF9EYlcJRts+qMHM/974Q=) 7: Ge_uX_W3v6Qv50Vw5ae1VK51UEU.roa (hash: XNzqWOUJb1G6BusqTwhK231Qfjyjj7xbS2sFfNlRRIY=) 8: GvM7qMsGGY0NB0Mdwqd9KZDIh64.roa (hash: S/WeVLNJSBWvfGHQHnHShtzGzYAW49VG43Ku/JYfDys=) 9: HTr5rydQdFHu-uCLJk2lOL3Ir2E.roa (hash: i32saCx4DgxcZ7o3IHdv+kvs+bAPQrDg12HNZKhQfo4=) 10: RHQDwKu8R1BiqVyY2Tjg4hHJAWc.roa (hash: b8HvAiKDPdfzzLQtID64DX+UXDDGwjs7bi1PBPQ+P/8=) 11: VRTyQw_v4LlqfkprAuq0lJwtgOs.roa (hash: TQeOD7Ggy40BK6kV3Z98eRb7CzgYrpfrmwu6QAHlOZc=) 12: WabN-J1FDu6W3p8yB6HeIVyu7fM.roa (hash: 4LNC/qP52AV9uC8vUXLHv0auNiYxyYlw8sJ9ArCTUpg=) 13: X3Q0SNhCbMHeUBwGf788wp_czsU.roa (hash: 091XmsdNMlLYLPcTwFanyKRL1REvB0J6UE48TAdGAMo=) 14: XE7cRB6SWvPtqodUbBU29gAlxy0.roa (hash: VEw1GCPGuZXegW9h5elGs3pbrIScm0hRkL6R6Vn1RLY=) 15: ct5jXmRV16i6fK8y9z-vqgBC-eM.roa (hash: YwoZM0/dlMDJEjxF3IHm0bkS1+bWwqNb2ETiYm2dLk0=) 16: fQakK7JEblHxkuo3W99-7FpRx38.crl (hash: qGiHJfH1Oum9+GsHuEoLVbVNF2vtX5/JiOCJMw2LAcU=) 17: hV3esBXd7kWM19SwGoTWr4W2RYo.roa (hash: nkuIcdLSR2rDjqKAyaaEtGABcGXULTJNPUbi1fRjd+w=) 18: hqcWZscvMvxfFB8QI_S-D4mwSnM.roa (hash: ffNiaNjp7TZpp1BEsr11TAWkOb9RQ/w06b89HrPSZY4=) 19: iHqHOmwrVyrtHOqJBGU-h4gTPGE.roa (hash: LgyVv3T9GhaxHLbeG0cUmNnr3zf3ppvzWIBGJwHUSNg=) 20: iPUqVolhLmbwFocDgLV6ncA_LRs.roa (hash: Vf7btw8BxFTBWWeh1+kJas/26jHzb0LOznlp7bXnAAo=) 21: iTLc5VqU9KTkxYI4woYxihTaS1E.roa (hash: 9Lihlb46Ba0mozz2ZnqtyUczktp8pAuj6kFBxT8olqk=) 22: l9F2BKLRzJdwd0fdRPbEtVrxZ_w.roa (hash: sQ1Z2qgiFPzai3M2nTZDaES/HRhMJZ1SRAb6A8g+cZw=) 23: mshsch9jvLRWMOkW640opDKVZ6U.roa (hash: BsoqjBrJxvmkPWcY+fPLitNMqJrGGEQ6Lx9nbs/IguA=) 24: mss18FIq4ydcYebAHYX2pd8ocjk.roa (hash: J88GfjksI+w3VtUia6Hq+rhitJHHRkLoOK14jy8vrfc=) 25: n8beE_tI7GeE5JTD0amAF0WQp1M.roa (hash: iiReayb/lEPVoMVcPoo7tc123PhSZyon0Hw4QE2B2Jc=) 26: nwvxh4Kq6QGnrSG8dHlSPWKzWS8.roa (hash: oWPee3Z5fruu6Qydv3LTw9u+9tD+meWbQsYByk2qusI=) 27: pWuQiH7oCzI0HQTOK5N0XFIvpC0.roa (hash: i9S7NxmicTLIf3yhZDDOTywtRB20Rf0o941WAv3hGkY=) 28: phdVSjC8d7P_IPR9pfuqF3ibJeQ.roa (hash: LdfALFSTfppofahy/V7vrDSqtAjnA1jl4Wz8tBm0yaQ=) 29: qhqAQR22JaN9sFDstmAnfgH6jD4.roa (hash: DYrIqHwNjcGZSEbGFvg0f1ZcKdSDEK96zCtPjprY0u8=) 30: qsCWx0y5U0_tpArKY33BWGyPAKg.roa (hash: 5zlW+fe570TQ9t9Q/r880168DEL2PLYQkcP+DEhbBe0=) 31: vSFUAztM4xg8pnCN2uvJ0r0ZpOY.roa (hash: lfAk2RkoT9Z6h0Jxb78c4RLN4P2hpHz0D8+Q/p7nmkA=) 32: vWcgLORNYaxn8oW87i0UFzUEE_0.roa (hash: H32EyNsUB/y926E/9Y3FItCi0tRX+tClcrtmQ4SkcBw=) 33: yArUxJuVZr7ZjsAQ50iIy89Di3E.roa (hash: FYImSGmHMUN8RyvNxZTCDINMDJQGeXHDQkBay1ZLpaA=) 34: yyxJQ5XATA8lfc_O-A0MIq50viw.roa (hash: b3vHgrn6G4FC+/ORCr2nTAcwUFNQFEM4kTv5ph/7kMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:71:c2:16:ed:e6:9f:b4:4b:1d:66:2b:43:06:70:bf:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Apr 26 11:01:07 2025 GMT Not After : Apr 27 11:01:07 2025 GMT Subject: CN=2101efc95877f561471de1a287d923739e2797ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5b:e5:bb:87:6e:86:83:f9:77:e9:ba:1d:92: 0d:77:3f:cc:f7:5d:3b:7a:0c:8c:33:5c:b6:a9:07: 1c:45:2c:0b:b3:63:3b:c2:08:e5:e0:61:24:80:59: fb:9e:a6:fb:3b:bb:1a:56:51:80:fc:ef:8a:fb:da: c6:76:69:24:ac:70:f6:06:89:e2:5a:ad:5c:94:2b: 03:d1:03:e3:27:9d:f3:73:d0:ec:75:0b:92:3b:82: ae:ba:36:b5:c7:b1:f0:ac:68:ff:53:4d:40:23:de: df:aa:ed:39:8f:22:fd:08:76:48:fb:14:36:40:52: 27:f3:cb:f3:d6:d5:f8:eb:27:32:29:e9:0d:2d:ff: 77:3b:4f:b9:65:79:9f:f9:31:f7:90:cf:53:cc:cf: 4e:64:83:df:36:ce:5b:9a:0b:46:a0:9a:ab:05:5c: 2d:cf:a0:df:d6:34:78:a7:ab:67:e8:8f:f7:b4:98: 3b:2a:56:89:03:14:a4:61:0b:94:3c:9d:34:85:32: 17:0d:b6:3c:fe:d5:c3:6a:21:36:9b:24:c4:af:30: f3:87:6b:7d:9d:ce:15:72:58:fc:be:76:68:cd:a8: 6c:6d:4c:85:c1:73:ed:35:c1:25:87:c8:80:d9:a4: e3:83:93:bc:b8:91:58:5b:9f:df:b2:34:6f:fc:f2: a9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:01:EF:C9:58:77:F5:61:47:1D:E1:A2:87:D9:23:73:9E:27:97:AE X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:b3:6a:5f:d9:92:26:39:82:cd:cc:7a:31:cc:f0:0e:a3:ff: 38:cc:30:bd:16:8a:58:19:a3:79:77:db:22:d6:fa:3f:1f:d2: 5b:c8:e1:d2:15:45:29:d0:f6:22:0f:2a:08:31:df:33:3a:a5: 79:1f:c2:3f:70:8e:02:69:c1:67:6e:b5:6a:9d:6e:6f:56:9b: da:60:34:17:ac:37:a0:90:fb:01:36:eb:20:8d:40:38:7c:5d: df:d1:0a:4e:5d:85:83:7f:2e:7c:4e:09:3a:dd:4e:9c:02:2d: ab:8f:80:dd:6a:9d:c0:3c:3a:43:5d:c5:de:ea:f3:79:7d:7f: fa:97:fe:71:c2:6d:26:3a:ed:fc:ed:cc:3a:fa:5a:1e:d1:0b: ef:8a:c4:56:79:69:5f:40:99:87:1e:d5:b2:e1:9d:49:35:32: ed:be:4c:6b:23:8c:a0:b8:bd:ea:7b:63:23:57:7b:7b:67:b7: a8:3e:9b:0b:55:ba:cc:7f:30:c8:a2:e2:7d:02:79:69:53:76: c4:ae:cc:e4:1f:dc:de:2b:e6:d1:87:93:b2:06:8c:85:d1:38: 5f:f8:f3:03:7d:31:01:ba:a1:9b:14:5f:29:d4:bc:eb:92:52: ea:63:a3:cb:89:2e:a0:da:86:3a:6b:9e:06:56:8d:b1:62:bb: 1b:56:6f:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZxwhbt5p+0Sx1mK0MGcL9kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjUwNDI2MTEwMTA3WhcNMjUwNDI3MTEwMTA3WjAzMTEwLwYDVQQD EygyMTAxZWZjOTU4NzdmNTYxNDcxZGUxYTI4N2Q5MjM3MzllMjc5N2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lvlu4duhoP5d+m6HZINdz/M9107 egyMM1y2qQccRSwLs2M7wgjl4GEkgFn7nqb7O7saVlGA/O+K+9rGdmkkrHD2Boni Wq1clCsD0QPjJ53zc9DsdQuSO4Kuuja1x7HwrGj/U01AI97fqu05jyL9CHZI+xQ2 QFIn88vz1tX46ycyKekNLf93O0+5ZXmf+TH3kM9TzM9OZIPfNs5bmgtGoJqrBVwt z6Df1jR4p6tn6I/3tJg7KlaJAxSkYQuUPJ00hTIXDbY8/tXDaiE2myTErzDzh2t9 nc4Vclj8vnZozahsbUyFwXPtNcElh8iA2aTjg5O8uJFYW5/fsjRv/PKp5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEB78lYd/VhRx3hoofZI3OeJ5euMB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2rNqX9mS JjmCzcx6MczwDqP/OMwwvRaKWBmjeXfbItb6Px/SW8jh0hVFKdD2Ig8qCDHfMzql eR/CP3COAmnBZ261ap1ub1ab2mA0F6w3oJD7ATbrII1AOHxd39EKTl2Fg38ufE4J Ot1OnAItq4+A3WqdwDw6Q13F3urzeX1/+pf+ccJtJjrt/O3MOvpaHtEL74rEVnlp X0CZhx7VsuGdSTUy7b5MayOMoLi96ntjI1d7e2e3qD6bC1W6zH8wyKLifQJ5aVN2 xK7M5B/c3ivm0YeTsgaMhdE4X/jzA30xAbqhmxRfKdS865JS6mOjy4kuoNqGOmue BlaNsWK7G1ZvXg== -----END CERTIFICATE-----Generated at Sat Apr 26 18:11:13 2025 by rpki-client