$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft File: _TfMjxazxsvTNGqj7WF3Hz6DrJc.mft (raw, json) Hash identifier: SX87yH2Ey5hSSq3xh14+i212vD9ey1TuhkqhguCpr/Y= Subject key identifier: D6:8C:64:DA:BF:56:1F:57:E6:4F:9C:DC:DE:44:11:BA:8D:80:13:0E Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Certificate serial: 0196722F69E7DEF1A3BA8EED9C51B5F174D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft Manifest number: 1567 Signing time: Sat 26 Apr 2025 13:00:31 +0000 Manifest this update: Sat 26 Apr 2025 13:00:31 +0000 Manifest next update: Sun 27 Apr 2025 13:00:31 +0000 Files and hashes: 1: 0HACyBUxgNOKSEcXcfPHI7LfmIg.roa (hash: wqTJepcUODfu+UsDaT3UCXuLJcUfFBmEBfdq4N3Rg18=) 2: 0SGQgnDHvljd8WswPS3Zor6FDL4.roa (hash: 6cEGIRuHIzEG7/ilcX3ol3tjHMExu8vRWtvJG3iihbQ=) 3: 52PmmGV3aXleWbX9-5QkD3T7G80.roa (hash: YUpifY1bSAdptUQTodCY1O+Ws4plwdNZWT5tmGKMklE=) 4: 8YFjhJllAvnuj7iLErGij7HrSXA.roa (hash: Jhl/M/KE8hoNx5Qk80x4cpNTjAEwV+xL9n1btN845EY=) 5: CkYxOCFcXglZibNQBz57XM7xS7k.roa (hash: tPE6/6y5+L8gtSA/0lIV1hRfNlGi7fzBLSET7NYUXhQ=) 6: L2ou3KYC7aOW9h4MkxvmRdF9-XM.roa (hash: HdnRHq9xsHsffUN6vf8PfjK/qp0rtSAt5eAQOAgASLA=) 7: ORny9zSgmvPNlHA0GSjf-fW7JAM.roa (hash: 2mt1E0mw+ncsqd4MDmo2JIYlDgVM2APWu07de1NTQyk=) 8: Qx6qMFrufEPZv8mWu9XgjLsLMB8.roa (hash: P/r3/JxO1CdcEUxJoGOxAQuq95icEB2m2qPK3qHqs10=) 9: TAdP0yKv9NpfjSbhNts0juEkm1U.roa (hash: dvn2DfwTU0n63QcUIMIBNntGEWr2G1UXma7Nhu8Iurs=) 10: WoZoEuE3OARNKqVJ9taXo2-Zt8M.roa (hash: Sn/ecsmLImTPn1yvBagjjq/XB8omW7tpmekWgI2yuFs=) 11: XdBKdwv6cTf-QnKldOeZvGt4D_Y.roa (hash: TxqV86SQTi0t4BbX6SVLNGYD/xhHt70JrJfSx9PYDmA=) 12: _TfMjxazxsvTNGqj7WF3Hz6DrJc.crl (hash: 1TNbh509HBOO80m8FLrihMp2QJeFBtEt+zrmzdjZjC8=) 13: bboBBp1tKqS0RC4vsgwoBCmEwqY.roa (hash: 74uXCligXDCEvZU13I/aaPCJJzSMTM22JuT1PuhmBlQ=) 14: cTcEU6BZVDHzKsGmYrYFuehVnmw.roa (hash: Wt8W9AEoHsxpxFYj5Y9GGKvIgV+LkMQs3tuB0PH0H4Q=) 15: peQXZljVycjXahMLHOgebWKzO6c.roa (hash: 6nDgFHnTrpxmQJyrmsK88oc050AwIyK1nEAS/RY/l94=) 16: xCt-3I4HSr25MhC8BMd2thevgVU.roa (hash: sZUNm0dz+rTstayb8zMPvmRuDI0MPNSTCMqD12A4Oww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 13:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:2f:69:e7:de:f1:a3:ba:8e:ed:9c:51:b5:f1:74:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Validity Not Before: Apr 26 13:00:31 2025 GMT Not After : Apr 27 13:00:31 2025 GMT Subject: CN=d68c64dabf561f57e64f9cdcde4411ba8d80130e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:94:cd:06:78:cf:23:ed:bc:6c:ca:f4:f3:92: c6:8a:85:f6:70:1e:2c:75:19:f4:a1:60:fb:75:62: f0:62:e5:16:95:05:5d:79:a3:8b:47:5c:d9:ae:15: d8:15:28:9f:80:32:20:a0:5e:25:b2:d1:4f:3b:0a: 34:2a:8e:32:d6:17:49:2e:a3:98:58:e9:40:73:b7: 6a:07:00:33:94:d6:9b:3e:5c:1f:33:36:ec:48:c2: d2:b2:c7:8e:7e:45:49:40:2a:de:5d:48:7c:3c:cd: 0d:0c:4f:7d:93:a0:f5:01:df:15:51:97:5e:bc:fe: ae:ca:77:8a:de:e5:79:c9:ae:96:fa:e5:d8:15:a8: 19:bc:32:df:49:6f:6d:88:ad:0e:06:33:46:c3:16: c0:08:38:86:fc:46:66:08:10:8f:b4:f1:92:b9:85: 2f:e4:6d:cc:f9:a4:2a:1a:e7:04:64:79:25:11:4b: 9f:c1:0f:89:7e:3c:ea:ea:56:2a:7c:64:d1:a0:fd: 67:64:0c:46:9f:d3:88:d2:79:46:66:07:0c:78:ae: 9d:77:8a:5b:1a:c4:a6:ae:8e:3e:f5:45:44:73:04: ff:dd:2d:0b:88:84:05:92:a1:1e:d3:27:0c:4b:6a: 55:01:f2:8c:3f:c3:bf:c9:06:78:af:b0:77:72:2c: 25:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:8C:64:DA:BF:56:1F:57:E6:4F:9C:DC:DE:44:11:BA:8D:80:13:0E X509v3 Authority Key Identifier: keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:f1:e3:15:62:aa:b2:5a:58:ae:84:b9:ca:83:f0:05:9a:5e: 11:3e:68:df:d7:a5:11:fd:04:11:04:84:25:e1:7a:cb:39:2b: 4d:1b:37:86:f3:59:32:36:b2:9e:5c:75:0e:e1:74:4e:18:19: e4:be:ba:8c:99:4a:dc:f2:73:e4:ae:5f:29:19:ff:54:58:59: b1:1c:b4:61:e6:23:9b:8c:07:2a:15:ff:db:26:5d:ca:b9:53: 47:2c:8e:eb:24:9d:49:e1:55:4f:a7:e7:7c:0b:9c:2e:45:1b: c0:92:2c:5a:40:dc:0d:b0:77:ec:3c:ee:c5:db:b7:8f:c8:32: 45:db:41:c5:c6:65:df:5e:1c:44:6b:17:a9:e7:30:26:a6:bc: a7:1b:0a:9a:7d:8c:b2:95:fa:2e:8c:30:b0:92:b8:a6:e3:8c: c9:61:98:0a:aa:ba:0f:cf:bb:2a:3f:c9:56:2c:08:48:73:14: ac:34:7f:dd:d3:87:ea:f6:b4:82:f6:ab:66:74:ae:cb:32:32: 8b:34:1c:6b:81:18:fc:76:8f:24:1d:5f:7b:f8:82:af:b3:db: cb:37:e1:0c:52:bb:e5:49:18:fc:35:9d:b6:60:3c:68:53:66: 27:f2:eb:4c:25:e1:f5:d4:4a:39:88:50:ab:ec:37:ad:77:0e: 8a:77:d9:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZyL2nn3vGjuo7tnFG18XTTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4 M2FjOTcwHhcNMjUwNDI2MTMwMDMxWhcNMjUwNDI3MTMwMDMxWjAzMTEwLwYDVQQD EyhkNjhjNjRkYWJmNTYxZjU3ZTY0ZjljZGNkZTQ0MTFiYThkODAxMzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJTNBnjPI+28bMr085LGioX2cB4s dRn0oWD7dWLwYuUWlQVdeaOLR1zZrhXYFSifgDIgoF4lstFPOwo0Ko4y1hdJLqOY WOlAc7dqBwAzlNabPlwfMzbsSMLSsseOfkVJQCreXUh8PM0NDE99k6D1Ad8VUZde vP6uyneK3uV5ya6W+uXYFagZvDLfSW9tiK0OBjNGwxbACDiG/EZmCBCPtPGSuYUv 5G3M+aQqGucEZHklEUufwQ+Jfjzq6lYqfGTRoP1nZAxGn9OI0nlGZgcMeK6dd4pb GsSmro4+9UVEcwT/3S0LiIQFkqEe0ycMS2pVAfKMP8O/yQZ4r7B3ciwlIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNaMZNq/Vh9X5k+c3N5EEbqNgBMOMB8GA1UdIwQY MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt N2UwNWFiNDFiNmU0LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0 LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPHjFWKq slpYroS5yoPwBZpeET5o39elEf0EEQSEJeF6yzkrTRs3hvNZMjaynlx1DuF0ThgZ 5L66jJlK3PJz5K5fKRn/VFhZsRy0YeYjm4wHKhX/2yZdyrlTRyyO6ySdSeFVT6fn fAucLkUbwJIsWkDcDbB37Dzuxdu3j8gyRdtBxcZl314cRGsXqecwJqa8pxsKmn2M spX6LowwsJK4puOMyWGYCqq6D8+7Kj/JViwISHMUrDR/3dOH6va0gvarZnSuyzIy izQca4EY/HaPJB1fe/iCr7PbyzfhDFK75UkY/DWdtmA8aFNmJ/LrTCXh9dRKOYhQ q+w3rXcOinfZbg== -----END CERTIFICATE-----Generated at Sat Apr 26 22:16:29 2025 by rpki-client