$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft File: L6FqsGAgBndApMH7R6kSYi8dByI.mft (raw, json) Hash identifier: ymTOitNRUXk1ym4cK99VjJKkB6q2rCqf1/nmM6HJpyo= Subject key identifier: EB:34:9F:77:44:C9:9D:01:92:FA:AF:CF:95:1D:7A:49:FA:24:3C:D9 Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Certificate serial: 0196726607DE3A1BF34B1DA49F94B9149261 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft Manifest number: 155A Signing time: Sat 26 Apr 2025 14:00:11 +0000 Manifest this update: Sat 26 Apr 2025 14:00:11 +0000 Manifest next update: Sun 27 Apr 2025 14:00:11 +0000 Files and hashes: 1: 02fWEW39DtOipFMD6ASDF08vEEo.roa (hash: 1pcwpV4dprUlTN0j3595RWhsxMg7qArA3wLzpHqEd1w=) 2: 3p0j32cYUOCnf_3ix5oMK3cKjZU.roa (hash: B5xTeALfTdQDGuz03rj872RqicG0ddnazQY9+v5kIg4=) 3: Ca2-ogSZC5B8tEEmtw5KxAEhJPM.roa (hash: 9b2u0lDf0ZcTigZmXHynF17wPQBPLYhpE0B4WDhTJ3Y=) 4: IO-WtDQojrXnpAq8np1ov8CUCWc.roa (hash: wK5cAChC2zZKj0xpr4U4SsnHLvY+XqHr++A5Z8gxuX0=) 5: ITMu_9G0gZ7hDjqWsuWYXnKA06k.roa (hash: EJ6xKkVoas6urLwLSHL1qGXfG7nshMzfhgWsYNbJ5+c=) 6: Iox1_56SLZuHET7km43PDB8l4G4.roa (hash: tf6KaHFbquktp4/KwglJ1eqUxXhgiVKX17/Y40u17EE=) 7: L6FqsGAgBndApMH7R6kSYi8dByI.crl (hash: YI+hGlNTdNsU1mbK7WJZzmTdMJaxyrgS8yLMTNvjOJc=) 8: NFmYzWkBl0tEXVCAjimOMbeZ05w.roa (hash: R5QkYmdUiNUTOAH1jI8sgRxo6knT03efS63N6kTFh/U=) 9: PAiV7wwH5lDn0JNrrWRqQNYoPCA.roa (hash: U/HM2vtQqlyAA5VvXddzuybceKGB/8tIXNAeUOLwY20=) 10: STYQ_SYXh2dq-C7xVZvQixI1Nko.roa (hash: vSZ2A0exPiZDNAtn0sk9ZHsG3cp+DcfIT5Z7upIIwZ4=) 11: WV11-zaxP3TKPgQgGOx7lPdVA_o.roa (hash: 8exGagHacuB84BILMLmp66gqsHLfgUa6w8jOySPn3no=) 12: YM3gYtjsCSk6V1--bovb_wYt7qI.roa (hash: HYnXH43Els8xcyz2VLZSSOsrk9jNKw0kKYdJbAGPWYk=) 13: aqmkhJlTlqxL9qQ_4a7JuspIios.roa (hash: fNPDsnQHTC9xg63koJtaKMKA62LHo0SqQzdTvfn/WNI=) 14: fLg2SaMIQSlzSFYFGBORzBovTYk.roa (hash: rlIWoEzmASI5VouJUKPcFn3tqT/IQL88vIzCEpCaf9k=) 15: gUT9YCkZWEcn742oGnu8ZfS34D8.roa (hash: AXHT/3cUQ+5r0lFJfezYLrNvbhUISwKUaKImq/bolQk=) 16: hxa6nxs_1z_VP7Dm_9A_jg_pRGc.roa (hash: /c24+EOtA2JGS+IHqjFa+CtjAJ+hAzZO9n24HxrhDss=) 17: jGhXzh2b4PKVeDKStlkuKpWSF1E.roa (hash: UKCCCfaCTIYyvaiefORFa+m9CnomjkMQIkqcoPohqCk=) 18: mxKqNAM863ITChJLjCi-JHUSkWw.roa (hash: dI+6FWK1t3x8Piw/q1k50w2Q/hiRygsH9DYBFb0RVSE=) 19: oxnSEKQpSx3qjOiXVpg8GgyrwWE.roa (hash: HmFA7T2pO0RgIRxx6C6iZ/e8wcjt6NXrfa5I/Q/NFvI=) 20: qrkEYAyWdukZTm5XyqiS-xT8TmY.roa (hash: zSUcH0ExfvbaHK3qrtk/nMWlCvae+aNOPb/D60GUy1g=) 21: x58nBW842pZhjhJLCJx9GkCSrU4.roa (hash: yI29HuKDYhaUmkGPwd2s/nIFspAoGLTPT9OHHAMuvaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:66:07:de:3a:1b:f3:4b:1d:a4:9f:94:b9:14:92:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Validity Not Before: Apr 26 14:00:11 2025 GMT Not After : Apr 27 14:00:11 2025 GMT Subject: CN=eb349f7744c99d0192faafcf951d7a49fa243cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:40:8a:cf:81:c3:a0:c3:89:25:7a:e6:38:6b: 77:c6:32:65:17:00:8e:d1:d2:36:dc:67:70:9f:84: 7a:3c:08:98:22:ac:ae:7f:17:da:72:54:d0:da:96: 4c:45:0b:de:2d:9e:c6:20:53:25:23:15:12:54:ab: a9:bf:6a:37:ed:7b:1d:a3:33:95:ac:97:61:e9:74: 4c:82:f5:40:4d:4e:67:6b:1f:7f:c7:25:79:39:2b: 44:50:27:c3:2f:1a:e2:41:db:e8:d7:09:35:07:80: c1:0c:fc:2e:a9:5a:ca:b5:8f:27:f5:06:4a:55:c0: c1:22:fa:d2:27:6a:05:a6:ba:6b:e0:6d:2f:16:68: fd:45:03:20:87:75:f3:bf:38:69:ec:dc:3e:a4:6f: 61:05:ca:52:43:ba:f8:98:08:63:de:c4:4f:01:dc: 37:17:65:9a:73:cb:ff:e9:01:84:5c:f7:d8:43:32: b7:29:2a:e6:97:4d:29:58:7e:3c:6c:77:e6:6e:e5: 8b:8e:cf:5e:5e:c8:03:31:b4:13:cf:bf:45:ca:cf: c2:0b:c9:92:e0:f2:24:5e:11:bc:82:93:02:61:12: ee:42:19:12:0d:da:63:e7:61:c4:91:6e:97:7e:cc: 35:f9:09:e9:83:a8:8b:ad:c5:53:62:ff:02:43:c9: e2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:34:9F:77:44:C9:9D:01:92:FA:AF:CF:95:1D:7A:49:FA:24:3C:D9 X509v3 Authority Key Identifier: keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:4e:59:82:ee:ef:c4:87:16:61:5c:e4:5a:4f:79:ac:64:fa: 57:28:d8:45:9a:b5:88:ea:99:c2:63:36:1b:25:95:2d:2f:ca: 21:8a:4b:1f:6f:91:63:53:99:76:56:f0:a0:27:3c:8c:52:b2: 4b:aa:43:5f:c0:3d:51:7d:2c:2e:b3:3d:96:77:e1:67:80:80: 6d:9d:86:a2:c6:8e:e2:7d:aa:ee:ef:8e:f9:71:67:3f:fd:40: 6f:e5:26:4c:92:69:0b:e3:3f:46:10:8e:fb:64:21:2a:aa:2c: de:fc:c5:69:78:a6:85:72:34:a5:34:f1:2e:9c:14:a2:1a:e9: a3:d4:b6:17:5b:96:36:3b:4c:51:66:67:22:59:04:25:f6:29: 06:d8:89:55:46:fa:b1:fb:f4:b9:0c:06:7d:df:fc:8e:de:bd: dc:8e:6d:3c:f9:88:31:69:e7:a8:3f:fd:10:53:4d:04:a4:4a: 79:60:2f:39:a3:4e:3e:c6:ae:55:ec:04:d6:7d:dc:80:48:59: 9c:dc:a8:22:f9:fb:35:b8:05:85:a9:8c:d2:57:dd:3e:43:9a: e6:1e:2f:30:2a:20:d7:b0:81:83:f3:23:80:0c:3e:ce:90:eb: fa:4d:c0:94:86:77:b5:26:8a:c8:db:d9:45:42:e2:b5:4d:9d: 05:aa:c9:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZyZgfeOhvzSx2kn5S5FJJhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx ZDA3MjIwHhcNMjUwNDI2MTQwMDExWhcNMjUwNDI3MTQwMDExWjAzMTEwLwYDVQQD EyhlYjM0OWY3NzQ0Yzk5ZDAxOTJmYWFmY2Y5NTFkN2E0OWZhMjQzY2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkCKz4HDoMOJJXrmOGt3xjJlFwCO 0dI23Gdwn4R6PAiYIqyufxfaclTQ2pZMRQveLZ7GIFMlIxUSVKupv2o37XsdozOV rJdh6XRMgvVATU5nax9/xyV5OStEUCfDLxriQdvo1wk1B4DBDPwuqVrKtY8n9QZK VcDBIvrSJ2oFprpr4G0vFmj9RQMgh3Xzvzhp7Nw+pG9hBcpSQ7r4mAhj3sRPAdw3 F2Wac8v/6QGEXPfYQzK3KSrml00pWH48bHfmbuWLjs9eXsgDMbQTz79Fys/CC8mS 4PIkXhG8gpMCYRLuQhkSDdpj52HEkW6Xfsw1+Qnpg6iLrcVTYv8CQ8ni3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOs0n3dEyZ0Bkvqvz5Udekn6JDzZMB8GA1UdIwQY MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt ZDI0MmI2ZjNhOGExLzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsE5Zgu7v xIcWYVzkWk95rGT6VyjYRZq1iOqZwmM2GyWVLS/KIYpLH2+RY1OZdlbwoCc8jFKy S6pDX8A9UX0sLrM9lnfhZ4CAbZ2GosaO4n2q7u+O+XFnP/1Ab+UmTJJpC+M/RhCO +2QhKqos3vzFaXimhXI0pTTxLpwUohrpo9S2F1uWNjtMUWZnIlkEJfYpBtiJVUb6 sfv0uQwGfd/8jt693I5tPPmIMWnnqD/9EFNNBKRKeWAvOaNOPsauVewE1n3cgEhZ nNyoIvn7NbgFhamM0lfdPkOa5h4vMCog17CBg/MjgAw+zpDr+k3AlIZ3tSaKyNvZ RULitU2dBarJIQ== -----END CERTIFICATE-----Generated at Sat Apr 26 20:18:28 2025 by rpki-client