$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft File: zV45ZYo-9vE8ohzBGk4z682UZwI.mft (raw, json) Hash identifier: B1Bmn5enr/1f+1rYcy0kzlHQzRCDMY9KzFa356l62/c= Subject key identifier: BA:0D:E1:F8:54:6E:FD:8D:0B:8B:96:E9:7E:82:45:BA:FC:31:83:C3 Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 01967868271482EF9A07F49C85CBB4C897DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft Manifest number: 1632 Signing time: Sun 27 Apr 2025 18:00:13 +0000 Manifest this update: Sun 27 Apr 2025 18:00:13 +0000 Manifest next update: Mon 28 Apr 2025 18:00:13 +0000 Files and hashes: 1: 56T6zW4aSWrMfRdHfPjh6ZGGSao.roa (hash: HRvdtCYIZPbv0zIOCx8/BNQolO+td6Hg8jXPnt+D8yc=) 2: 5n_YcLg3YQQNFYTwhU5huai3ZJI.roa (hash: 9mpciFsp3Kugx6pov8E04ElUzgFox7xfMS6pjLwC4Qg=) 3: ECT8clfNxElQsbNgWf5MSMBQJBw.roa (hash: OHKduQ+nBMz5yKr3Tz8KQLq2T4SUqaXm2BJrDDuQUCc=) 4: Eg5cB0gFbZt-mtb2g5DlnYfptYU.roa (hash: N8GnHFT4fRhNM3nodSxCZOH18KkVNRyweY1llmfoJHs=) 5: GCq3OcvhsVssgyhwVftlmv2qS0g.roa (hash: amGc7yYYdNqbzEM6/ZudOs3K3qKn0m9v09EM2kwWv7M=) 6: It_f8Sf2FfhB_S0DbfQKa-2JOPY.roa (hash: QAc5gHOaQXt39S4LjrikuPGmP8en9wsKvBleiEYuYHU=) 7: JnUDLpnSNZdUPTciH_SImfiQNPg.roa (hash: phKmDfTKEa4M5M2wLFu2WomQfhRDPt24TZJyLDqWijI=) 8: Jr0vftJR3CjRVz6-o4pf0gt3nug.roa (hash: +mzEEh0eCpPswQBbLT86K9qsx3oFcbJzNBm/K0viybI=) 9: KCCAvsdFABptcdWkmYzNnQ9RL6E.roa (hash: DSZuLAxhdSWLE0DFN+BFigCnq9IYv1dV5jCeoEQh9rg=) 10: SeBDGoUZsUtOUZx02IQlwMJ27mU.roa (hash: c6tFykgM8su9GyncwABr6lgk4O/lhzLOVTR6XdjeoGk=) 11: dlMgTA37PYjMj29gw-38SqdkU3Y.roa (hash: 1Uz3Ku2WqM/b08F/1HFeZ9d7LLkvQOmfAokOdqGf3nA=) 12: eHOgLTcKFTQCb9pEoV1RpO9Ob6A.roa (hash: RcgTIJu/NwqSqC/vmr9OYFdwRt2Fz/3jLy3D9rjl+1A=) 13: gRGDjjLT48vk7uk37lX43qmpguM.roa (hash: r1CGQBpwekmoJBDyj4suW0g94HtAtdOyi9owjr8gV84=) 14: ob_RURKVUgsmITZALhVsa-qXolg.roa (hash: Fa1GGWTo+0NV3NehS4X6jfnbmrCwDIsz+qaYmi3m0FU=) 15: pYYheMngH9PrFAWYb7D0Rnwh3Rc.roa (hash: Kusa3kjA5UvOGnNhZkPG36CpyMnLT1XxrIsJiFszyIE=) 16: ro5M-dHEvoHU0Wp1W7KVNXTJRB0.roa (hash: XLpdig1yngTdqxo047wSxCKu12A/eL61KXVLCkHmUrU=) 17: tY_SBiXlNsyr5MWGvZwrQKokaZY.roa (hash: kjGrN/I53C88kyyVw+9gflWs7bJ3X6mbRrf1jGUgHG8=) 18: uBPI4Rs7rRPQGCWlNIMKuX7PU7k.roa (hash: jFkWBUBLmZ3TDstxedf2WQQANWt19wC/I1ODOLEnI/k=) 19: v4CBgLv9j2JeRIvOJQdKbNxvJTA.roa (hash: Ttid+kREmc6Upy79hRBO9XMBfRE+dqbNAYWtSZGV6ag=) 20: vS_G30kRmF5yTvVCZuLriQbTalI.roa (hash: jpLTyi2oD569vb7nR4qsqTlGyMLcUPoGbyflTszDmns=) 21: yxb4qAopfVWx9tbVX2D9X8-NDPo.roa (hash: SCjFOGOJpyW+e/90L6KJ17UwdzCSiXn/XxCg01egwec=) 22: z5USRWL1xokOYfBSwUf22d4RSgs.roa (hash: +k9eJkOqlZwo2Ca8utkijZ5ya8drgkfsi12poSw6dDo=) 23: zV45ZYo-9vE8ohzBGk4z682UZwI.crl (hash: mOrESYD0PZ/i+Dcs3ioc8YMDJQ09GbkvJruTGlxdz18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 16:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:78:68:27:14:82:ef:9a:07:f4:9c:85:cb:b4:c8:97:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: Apr 27 18:00:13 2025 GMT Not After : Apr 28 18:00:13 2025 GMT Subject: CN=ba0de1f8546efd8d0b8b96e97e8245bafc3183c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d0:ae:93:83:f6:86:ec:56:2e:40:bc:bc:6c: 58:db:a7:1e:b3:af:64:10:00:ad:17:bc:5d:e0:f4: e4:eb:e5:32:87:08:21:4d:fe:6c:ed:d7:75:e6:65: 8a:96:79:ce:d8:6f:23:86:fc:32:06:24:2d:23:df: 7d:2c:c0:c8:95:99:ac:2b:aa:95:8c:95:2e:eb:06: 6b:d5:61:90:09:0c:66:83:72:3d:f2:21:61:f7:de: b0:86:50:f6:be:4f:8a:b3:6e:62:bd:c5:9f:11:f0: 0d:48:40:69:93:2d:0b:15:09:05:20:20:11:96:fb: 4a:27:93:b0:b7:89:cd:a5:b9:fd:fb:28:7a:1f:22: 55:01:ae:22:7f:66:8f:0b:1e:d2:19:c0:39:f2:7e: 91:07:c1:1b:ac:43:1d:9d:f4:7a:32:cc:8f:34:f7: b0:48:3c:91:50:d5:a0:73:c4:d2:3c:0b:42:49:5e: d3:af:18:01:5a:e6:38:86:29:b4:57:5e:ca:02:9e: 5f:d2:ce:37:15:fa:8e:20:0a:70:4e:e5:fe:45:4c: 78:83:9c:48:07:87:3d:3e:cd:78:55:42:09:b3:40: fa:1d:eb:3b:1a:a8:a7:cf:96:35:c6:a1:b8:52:3c: 1e:b6:57:05:66:91:a6:c3:08:02:7d:bc:a5:d1:90: 2f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:0D:E1:F8:54:6E:FD:8D:0B:8B:96:E9:7E:82:45:BA:FC:31:83:C3 X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:e4:a0:a2:5b:bf:1f:59:c1:a0:58:e8:25:13:7b:62:66:4a: 06:08:a9:5f:fc:d1:5c:3c:4a:2d:bf:f4:2f:de:79:c4:b1:5d: 39:39:5a:01:b5:33:aa:8b:bf:64:00:e1:a7:62:29:2a:71:15: 35:c2:ee:b9:1b:b9:28:71:b5:a6:cb:79:2b:bf:0b:a3:9c:2e: 83:6a:09:0a:4a:f2:db:ed:0f:3a:9e:a3:ab:a7:13:f2:4e:1f: 91:b2:61:9d:e6:8d:cb:34:07:d8:63:b7:cc:25:41:3b:4b:76: b3:82:2b:af:cf:ff:59:c0:14:c2:ee:7e:de:f5:2a:58:a7:e3: c1:14:9f:7f:ef:35:c2:95:b8:2c:67:43:51:a9:65:05:e1:4d: 28:7d:7d:e3:35:d4:f9:bb:4a:da:6f:c7:1d:eb:28:31:0c:72: 78:8a:99:e4:52:8e:a1:17:0b:90:a4:c2:f4:04:2c:04:f0:b7: a0:5d:5b:bf:b9:03:80:41:fb:96:84:35:d5:f4:93:e8:69:4f: 6a:47:3f:3d:dd:86:cb:d4:6e:4d:59:3a:45:d7:fd:98:dd:82: 07:78:e6:3f:f1:3e:18:11:37:9e:9f:b2:ea:00:0a:8a:8f:38: cf:77:9d:01:16:e9:64:e4:99:32:55:96:fd:94:47:c0:0e:ef: 41:b0:1e:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ4aCcUgu+aB/Schcu0yJfeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjUwNDI3MTgwMDEzWhcNMjUwNDI4MTgwMDEzWjAzMTEwLwYDVQQD EyhiYTBkZTFmODU0NmVmZDhkMGI4Yjk2ZTk3ZTgyNDViYWZjMzE4M2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NCuk4P2huxWLkC8vGxY26ces69k EACtF7xd4PTk6+UyhwghTf5s7dd15mWKlnnO2G8jhvwyBiQtI999LMDIlZmsK6qV jJUu6wZr1WGQCQxmg3I98iFh996whlD2vk+Ks25ivcWfEfANSEBpky0LFQkFICAR lvtKJ5Owt4nNpbn9+yh6HyJVAa4if2aPCx7SGcA58n6RB8EbrEMdnfR6MsyPNPew SDyRUNWgc8TSPAtCSV7TrxgBWuY4him0V17KAp5f0s43FfqOIApwTuX+RUx4g5xI B4c9Ps14VUIJs0D6Hes7Gqinz5Y1xqG4UjwetlcFZpGmwwgCfbyl0ZAvQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLoN4fhUbv2NC4uW6X6CRbr8MYPDMB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMeSgolu/ H1nBoFjoJRN7YmZKBgipX/zRXDxKLb/0L955xLFdOTlaAbUzqou/ZADhp2IpKnEV NcLuuRu5KHG1pst5K78Lo5wug2oJCkry2+0POp6jq6cT8k4fkbJhneaNyzQH2GO3 zCVBO0t2s4Irr8//WcAUwu5+3vUqWKfjwRSff+81wpW4LGdDUallBeFNKH194zXU +btK2m/HHesoMQxyeIqZ5FKOoRcLkKTC9AQsBPC3oF1bv7kDgEH7loQ11fST6GlP akc/Pd2Gy9RuTVk6Rdf9mN2CB3jmP/E+GBE3np+y6gAKio84z3edARbpZOSZMlWW /ZRHwA7vQbAeWA== -----END CERTIFICATE-----Generated at Mon Apr 28 02:13:49 2025 by rpki-client