$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft File: ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft (raw, json) Hash identifier: W3+f+3ss9Q3J1RAx+0SRQ1yV4GxSj75YtOE7j26WvlE= Subject key identifier: 85:51:E0:27:94:D8:55:D7:EA:5B:20:63:2E:2A:BD:37:89:50:B0:2D Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b Certificate serial: 0196059CB02C40C9ECD9F99CF9742DB36EE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft Manifest number: 15C7 Signing time: Sat 05 Apr 2025 11:01:16 +0000 Manifest this update: Sat 05 Apr 2025 11:01:16 +0000 Manifest next update: Sun 06 Apr 2025 11:01:16 +0000 Files and hashes: 1: 0SPY3ehqSJEunmmMtILqWyyAEMs.roa (hash: cgmnKIR+3Qr00X4S8IcJLsQ9ZXGxUN8YiwVkY/6EiLQ=) 2: 1-6N5hPx0xq2c7q29UWdbn6yCLaw.roa (hash: 8u7Yg4bXQe+cUd86jQFUFDSWmRwndqREwz4S8+zhCLg=) 3: 1-WBvajt9a9vMz3Gf-bxrEIk5KFI.roa (hash: ixOZ900fztMk7OjhYh4vnjfATcXP54nswes8la4aLuA=) 4: 4ukJa7HMkT7DBb2bYcfynHYUCtI.roa (hash: 50MwC4CJiyXyLJrN7qbX2kdlux7tIAVe2IdkMEIjYog=) 5: 56ynW-tMrHzaNsG7sH1wdFERI2s.roa (hash: IKfB0xjiL+k3DgvsHtHSeQu4uN+X+KGo7/petrFvOV0=) 6: 6gbYECNEsSZ7q4JdusnawAW762k.roa (hash: mnrnhi6Fsht+ntxveCOn/XM8T/ttUxP0oCf5rM/Eilo=) 7: Asr7ZOWfpkDBSjuEfEx9OsDKyrQ.roa (hash: p+62UDWtfe7dh4HDC1QfZ3od4Dagyf7n7BasHemhJIA=) 8: B-Ebcv-J_N7-DKp5EFrzjmiYRw0.roa (hash: 0LrUFyOJZXBRyQDcmvsLMHIZlAZinGZnG68VlQ7rxjU=) 9: BBKqIumEvQjL8b0aHvJsG7_dv_w.roa (hash: sS+JRPTTyxHDwSasc/B/8kRhyr0hzWqPDr1h36aZ+vc=) 10: ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl (hash: d+aTBS7sa4zVw4mwGmFQCdTOHWZLAij8SkLpN5v+54k=) 11: Gp66wYREOc1h9eDQ4Jl1zol0dGY.roa (hash: cbxRjqYTk6aDdWomh1V0dsmExBRlWyKb4b8IjMaBUTM=) 12: J5roBlA5puw3qKKb1FvCi0jVSzo.roa (hash: kfWG0LXc7ZWCpz1fFslOhZB1KDuyEVdFS239GndkOhM=) 13: LTyECeNCqqjLKolS1FQDHB0szi0.roa (hash: NMqquUf8k9Vi9iSmBBgAYLF5elpajsX2duO3ac5f7EA=) 14: NKKNKwKeM7BlTiZnda9Yz8Cz51k.roa (hash: eOYKSrPX4eKXl8WLWzwJl6t743IA9dMacABMn1dWxLc=) 15: Ojlwg9x75cm9yCRg1uRbtV9JzOQ.roa (hash: ogbfSoUm1OyL1fGJJ+4TLmGx+iphSaqafx5096ZmO90=) 16: QImgIZuTwnHz4p6WX58eUANoWgI.roa (hash: 55/FqeMl8dIDIdqqMZITlgQVVN1ShC0rREfu3bBTeKU=) 17: QtkpYFVkfpGCc6muBgcymFsYmcw.roa (hash: cTasgEqCWORockiyCZ3h8oJtqhnmA7saGpgSFUUMyRw=) 18: RvSq0f1_KH3WbOL8Dmljmap3ZVo.roa (hash: 5WZhQboymyKPaLswcG/VmWNce1ChWZNZjnINMA2NbP4=) 19: SJHvhaCpGVpEu19gR74F4_s00OM.roa (hash: QYvmEj267N2mBcF32kZnO8aAG/fQkwII3VAx268JC6k=) 20: TOO1C7Nfoo8I9jGT7tEPWovt-Dk.roa (hash: yJoNXkc40BQiMjXHd4+xV9gjbcua6Ni6TVwfda9wbCE=) 21: VQNQwkBf4DKiAyptu1NuzZNk1DE.roa (hash: KvtJJO5ZGQ49qNKAGMorGsOIb3EaRZS5YhJcNfPGvO4=) 22: VoolzUwqWdjT_6ym6OldKRkJu08.roa (hash: P83IslquU55GgGeVulsKAXE7c1EVmhXTqnamoFvTaus=) 23: WAhJZAlTDUaB6vmjVLZqksIGzmk.roa (hash: Ik7C6qmxni3KBC9zQeT1wej9gtYUxK6ifPjNRKdWczs=) 24: X0jlPh6e-kZkAllO0YRLXGSgDns.roa (hash: fOzjwl+fWwzss4YSzsRBfE9rTuqVHxBRysYK0qEx+RE=) 25: aMxsTucl9VgkelJcFxmjN0EGtJk.roa (hash: n33/iGcQp4P5VDOzq7NYuQn+t7c02zgYYh2ozCCcIYs=) 26: f8HNGqYZ56HDzKMkA97HvxLpDaY.roa (hash: UaI0iT5qEh6DsVjN4hoPGEtmvVSAkZnS69Ts1ZSzz7Y=) 27: g35tTn32QbT-bAwoUi98fNimhp8.roa (hash: 1Z+8GgnLMcbNoyJqOCvdplvh0vT0gEGnRnHP4B7CkZ0=) 28: g8HopqbG0ETACMkk_zXl3liDZDA.roa (hash: IlJyMCJEwJhYKwqsXmSH9IsBc+u/zpqyYvsIqkn0FEo=) 29: lce29TxMLeElQDDpQ8Ij3c0X0Tk.roa (hash: 78Yo5skViqQdWGup+psFTOfViVx1RTBcrcCMhgyvzbM=) 30: o5ChnZN8Fh2UfQkol6pllSa8vlg.roa (hash: aGdO4WpQUBPqENnqKDVSzkgV5hoyIVh/xhrIeTDF4cA=) 31: rRKhiSrbatFvYmuo6ymeVxGwrXE.roa (hash: FCC1G1laSHKy+MJRui/+QVk4PwxHWgeFN/8JBKnvpeQ=) 32: s0Lr7YuNvhvXYPcKrrFVoUy-LO8.roa (hash: a5e7ib7Q/DgMeBDM9u9FOonj1h8M13aRP36qAw7iBFY=) 33: tjYwqQeBxSVgFYzX84lkDNu9j30.roa (hash: gJ1kbe8SJbUDjR4HicbmD9bqr8NrbADsMiLRzf2DJUs=) 34: v7J0SuAlQFdaHot7td83uoznPPo.roa (hash: Ag0K9C9c2TlJAt8MNSulsrKBKAnHlI2lTalhgszhcOc=) 35: v8O-hmYnMSY31ejAOPQBw6PvlZo.roa (hash: n0/Am/fuQ0Bzlhu28NMtBIbpVUfZ8WWaeSJsXMS/dp8=) 36: ybt1ga0_vsN4KgTOqCIx6p76TyI.roa (hash: +Au68nUXgRDHemgu2ODT+EBUxbABQU2c90g5EDmI6o4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 11:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:05:9c:b0:2c:40:c9:ec:d9:f9:9c:f9:74:2d:b3:6e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b Validity Not Before: Apr 5 11:01:16 2025 GMT Not After : Apr 6 11:01:16 2025 GMT Subject: CN=8551e02794d855d7ea5b20632e2abd378950b02d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:34:c2:90:da:3e:d2:92:c3:48:fe:ca:81:ff: c5:97:f1:00:93:d8:12:20:39:da:fa:a7:f3:3b:40: a3:41:7e:5a:41:43:12:c5:61:c2:aa:c0:02:8e:ef: b6:ca:8e:e4:10:66:dc:93:60:41:2c:95:8b:c1:35: d7:1f:e5:9d:97:9d:a8:5e:11:4e:c5:7a:d6:fc:84: 7f:64:80:ce:7c:a0:a8:19:a4:5f:03:ca:94:2c:50: 05:57:4d:6d:33:16:4e:77:2b:e9:95:5c:72:7a:71: e1:8d:78:cf:9c:b1:ed:83:93:a0:40:5d:17:ef:2e: 0c:0a:af:46:c0:c0:b9:27:35:ae:27:46:00:d6:31: 70:4c:93:b4:8e:80:79:19:f6:3e:56:c5:03:64:ad: 8d:82:02:3f:d1:ae:6f:14:26:4b:de:7f:46:29:3c: ad:10:3b:23:bd:e5:bd:e1:1d:8a:78:46:ec:e7:95: a3:b9:90:c7:0b:00:3d:0b:49:9b:39:98:f7:02:f2: 6f:db:01:1a:93:cd:4e:87:b8:a3:80:92:64:4c:70: df:c8:c7:0f:4c:cb:74:ea:2a:c5:a4:fa:f3:e3:da: 95:c7:e6:1c:b1:e3:db:86:21:e0:1c:21:b8:a9:11: 32:65:5b:2d:bc:d7:04:05:18:93:f3:fa:6a:7e:00: 43:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:51:E0:27:94:D8:55:D7:EA:5B:20:63:2E:2A:BD:37:89:50:B0:2D X509v3 Authority Key Identifier: keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:ce:61:21:ca:98:82:fc:94:c4:d2:90:aa:30:b3:be:23:4a: 7a:52:37:3b:94:40:4d:43:61:7b:42:07:37:c1:ef:3c:8d:4b: 66:1a:e1:36:44:35:66:26:dd:56:49:86:aa:22:32:bc:00:42: 7e:9d:38:48:36:8c:1f:81:9c:93:3e:65:c3:43:e9:f4:41:7d: 2f:52:ce:f2:34:4e:dc:c4:5a:61:9a:1d:7e:9a:99:88:27:c5: 7c:5c:25:59:d7:f5:da:da:36:cb:92:13:67:13:2c:df:86:d3: 4b:37:fa:4e:5b:33:da:64:97:6b:70:86:84:36:dc:45:f0:1e: 06:0c:2a:fd:83:90:6c:31:33:1c:d3:df:14:58:bf:b9:2b:ee: 7f:0c:28:d3:f4:09:49:8f:3c:a2:86:76:23:59:72:f3:3a:25: 4d:51:be:31:8b:83:0e:04:60:82:76:12:ca:33:17:86:be:67: 9d:da:41:87:52:60:c2:a3:0f:22:e7:d9:96:e7:c6:2f:01:fe: c4:d4:a1:15:e6:ed:fe:d5:0a:3e:47:15:a8:55:d3:29:b0:ce: 4d:6c:a3:db:2e:23:b3:0e:2c:00:c1:b3:d0:5b:c2:1f:d6:95: 0d:d7:a9:8d:03:00:04:ac:dc:32:e7:37:82:2b:ee:b3:bf:b9: 71:d5:c5:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYFnLAsQMns2fmc+XQts27gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5 M2U0NmIwHhcNMjUwNDA1MTEwMTE2WhcNMjUwNDA2MTEwMTE2WjAzMTEwLwYDVQQD Eyg4NTUxZTAyNzk0ZDg1NWQ3ZWE1YjIwNjMyZTJhYmQzNzg5NTBiMDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTTCkNo+0pLDSP7Kgf/Fl/EAk9gS IDna+qfzO0CjQX5aQUMSxWHCqsACju+2yo7kEGbck2BBLJWLwTXXH+Wdl52oXhFO xXrW/IR/ZIDOfKCoGaRfA8qULFAFV01tMxZOdyvplVxyenHhjXjPnLHtg5OgQF0X 7y4MCq9GwMC5JzWuJ0YA1jFwTJO0joB5GfY+VsUDZK2NggI/0a5vFCZL3n9GKTyt EDsjveW94R2KeEbs55WjuZDHCwA9C0mbOZj3AvJv2wEak81Oh7ijgJJkTHDfyMcP TMt06irFpPrz49qVx+YcsePbhiHgHCG4qREyZVstvNcEBRiT8/pqfgBDfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVR4CeU2FXX6lsgYy4qvTeJULAtMB8GA1UdIwQY MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt Y2Q2MTUyMjYxYzZmLzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFs5hIcqY gvyUxNKQqjCzviNKelI3O5RATUNhe0IHN8HvPI1LZhrhNkQ1ZibdVkmGqiIyvABC fp04SDaMH4Gckz5lw0Pp9EF9L1LO8jRO3MRaYZodfpqZiCfFfFwlWdf12to2y5IT ZxMs34bTSzf6Tlsz2mSXa3CGhDbcRfAeBgwq/YOQbDEzHNPfFFi/uSvufwwo0/QJ SY88ooZ2I1ly8zolTVG+MYuDDgRggnYSyjMXhr5nndpBh1JgwqMPIufZlufGLwH+ xNShFebt/tUKPkcVqFXTKbDOTWyj2y4jsw4sAMGz0FvCH9aVDdepjQMABKzcMuc3 givus7+5cdXFrw== -----END CERTIFICATE-----Generated at Sat Apr 5 20:18:40 2025 by rpki-client