$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft File: HHsGv0EwDcTTDz0OGAybldK83f8.mft (raw, json) Hash identifier: zXt8WDpECljnHPqFiq5kPkSXwEvLgeoO26eK3NuiEm8= Subject key identifier: E6:AC:42:08:D2:BA:66:73:69:14:EE:9C:07:FE:58:B6:EF:88:13:1E Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 01960F7B7FFA2521364923D7EAFAC932B378 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft Manifest number: 14F2 Signing time: Mon 07 Apr 2025 09:01:14 +0000 Manifest this update: Mon 07 Apr 2025 09:01:14 +0000 Manifest next update: Tue 08 Apr 2025 09:01:14 +0000 Files and hashes: 1: 1-cqQGhXn60MgU2VUeNpjveMW2qk.roa (hash: feFbGoFtjwOyIRFeQAOSoVibJ96/Lb0iYRt2u/rBKMg=) 2: 38_Nyvzqxd0PvNucOR1iwmjTQ_o.roa (hash: tMPubQJjYp/dcRFcviDk7lh4PnDXnz7NxUZ6aWZWDyw=) 3: 61vRkExsI62jJ48irmkSDqW7AqQ.roa (hash: JvZBuIGS2vn+dO3Q9/C07cjmDLxdJUfuxzakaBvC2Ms=) 4: B-leWKyHyUWQaTSAIdQFN-Zp9rw.roa (hash: zSJCyrn6RempGySvfu/Xbm5Mpb6WnVGqpUroJHwaWew=) 5: Fxmcu1Qi0nhsZOIxVkNPueqhUl4.roa (hash: 5Bu1yMZZneENHRnbSmQP3RKWM4Ya4gnEDHmeUdig1bo=) 6: HHsGv0EwDcTTDz0OGAybldK83f8.crl (hash: V43u86MQxRM33BCSPEKgmAOaNRsb9wfmOd5juU+//L4=) 7: Ie2e1wt_FuvjPhvPZmJ8YbfF_Tw.roa (hash: 0jvW11Eh+nanPzwmW1R+ZUtO2i7ehli0d4txf/mUkQE=) 8: KT_XRl68MXL3ukVnoMjZI1SdZ_Q.roa (hash: ug8+swCsKmFRIJydlY68K1ox72m3uNsfqqtSels/7I8=) 9: PLFnFsip4j-sETB8PPQgrmVAohU.roa (hash: h6NOUcP49OYU6YMMiK3QVB4r4u8oK/zQN8Ei+4fsxfc=) 10: UAEVVZJh_F--n89kLYAR_ZrMiAA.roa (hash: KwDeeF7UfAzk4CN3kaftHTo6xiyKPchWU5oi2GhJgUA=) 11: XgPwQOKsd9uJBigbEk6gk3WV4gw.roa (hash: MfMJHXV5sXbrxV0YBc5joH+vkuSR+zLfQaFUaN552Bw=) 12: Z9kOlfq-w01D8Ml4l6fqbORR_5E.roa (hash: gxikB87WE0XHMDAk0eS1AdtF8pmhQbJr0n4lM1hO40I=) 13: cUfpv5-AAffzxD9fcxzlAlyBCJ4.roa (hash: xpWzwpf+CMwbZhPneV1IeCxiayddwXs6mMP85+eMFG8=) 14: f7jihsbQZQOjudWmankbYdgvSd0.roa (hash: Kmr8nTMHln2GoQ9z1uNdCIRV8UiFMuI6zP59QLBGAfA=) 15: m8selLLRbKezlnaS1FUfG6Kw0Ns.roa (hash: gDn7HNTqTqOigQSPvIZJVIcZmeh/IZoOdyWyJdwiR84=) 16: oANVOGpGqSZNzfjjdghTPit9_38.roa (hash: VSfuOwX73gMez7dFTyLtUenlMRci41842EschwuvUEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 08 Apr 2025 09:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:0f:7b:7f:fa:25:21:36:49:23:d7:ea:fa:c9:32:b3:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: Apr 7 09:01:14 2025 GMT Not After : Apr 8 09:01:14 2025 GMT Subject: CN=e6ac4208d2ba66736914ee9c07fe58b6ef88131e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e6:e4:5b:0b:ad:d6:aa:ef:63:66:33:ae:1c: 60:11:a8:e8:7b:1d:50:ca:d7:aa:36:08:32:32:63: 64:c1:05:64:fb:aa:c6:35:33:16:ce:09:b9:04:7f: 5c:9b:fe:68:bc:fc:19:ed:c4:c1:e2:32:9e:75:4a: 06:50:e8:bb:5c:2e:3f:85:e7:18:bf:31:88:8e:fd: b1:96:4f:86:5c:01:92:71:3d:f9:d1:95:71:9d:8c: db:84:5b:f6:e8:5e:3a:63:c6:bc:86:e3:5d:f7:e5: b3:0c:a7:f6:3e:2e:84:e4:b3:81:ab:71:95:c4:d7: 8c:ec:90:9c:f1:fa:b1:d8:2e:fd:12:d6:4f:51:f4: 71:b5:17:7e:f8:25:01:05:45:2a:db:3c:ac:83:49: 9b:0d:2c:01:5c:49:cf:4c:11:97:4d:cb:e7:ad:79: a9:87:a8:99:ef:56:c5:7c:1a:c4:3d:1e:85:8c:b2: dc:1e:8e:2b:ad:c7:3e:e5:6d:23:ac:fa:26:73:93: b8:4a:11:81:eb:ab:6b:bd:ba:b5:79:66:46:db:46: 5a:a1:3b:28:f8:55:36:a4:2f:d4:7f:94:ec:b8:ad: f2:2b:ae:8f:b0:6a:e8:02:ab:85:68:62:99:c9:1a: 43:68:74:4d:e8:80:a9:25:6a:e0:ac:98:9b:c6:5d: 4f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:AC:42:08:D2:BA:66:73:69:14:EE:9C:07:FE:58:B6:EF:88:13:1E X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:18:6d:92:e2:3e:fa:5f:db:62:3d:a0:f1:ee:1f:48:69:b8: ef:3c:0d:dc:bc:98:c8:44:7f:97:d8:1c:a9:ef:e1:9b:fd:c1: 77:fa:cb:40:16:05:de:a5:01:a7:56:f5:b2:20:3f:e4:50:2e: 01:b2:9c:e4:3a:c7:0d:37:f0:77:10:f5:75:8c:c3:58:a5:67: 42:fe:90:e7:3d:e8:11:27:6b:76:7f:b2:a5:b7:dd:84:5b:51: 5f:8e:e1:dc:85:a8:74:42:0c:33:dd:89:f5:48:88:3e:52:58: 27:07:48:3a:36:43:7a:52:6f:7b:5a:30:b2:89:59:54:8d:07: 1c:9e:7c:a7:b7:ee:46:82:12:0f:80:a5:20:ef:ec:32:6f:b7: 43:46:44:9e:27:67:01:e1:4a:cc:6e:89:45:8c:3f:0a:44:0b: bd:8d:11:f9:d6:81:f2:74:54:a3:4f:05:83:9f:03:28:0d:2a: 2d:c5:1b:e9:80:85:f1:43:e6:44:f2:68:8f:7a:67:6c:ba:f2: 52:e6:b2:25:53:e7:63:17:2d:ca:3c:88:2f:dc:d8:a6:1b:63: 7b:11:23:63:f1:00:e6:ef:e0:34:9e:c5:75:f0:bb:b0:3e:d7: f9:61:55:1f:46:01:a2:cb:5e:21:ff:ce:20:bb:c8:c1:8e:07: b1:4c:5e:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYPe3/6JSE2SSPX6vrJMrN4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjUwNDA3MDkwMTE0WhcNMjUwNDA4MDkwMTE0WjAzMTEwLwYDVQQD EyhlNmFjNDIwOGQyYmE2NjczNjkxNGVlOWMwN2ZlNThiNmVmODgxMzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ubkWwut1qrvY2YzrhxgEajoex1Q yteqNggyMmNkwQVk+6rGNTMWzgm5BH9cm/5ovPwZ7cTB4jKedUoGUOi7XC4/hecY vzGIjv2xlk+GXAGScT350ZVxnYzbhFv26F46Y8a8huNd9+WzDKf2Pi6E5LOBq3GV xNeM7JCc8fqx2C79EtZPUfRxtRd++CUBBUUq2zysg0mbDSwBXEnPTBGXTcvnrXmp h6iZ71bFfBrEPR6FjLLcHo4rrcc+5W0jrPomc5O4ShGB66trvbq1eWZG20ZaoTso +FU2pC/Uf5TsuK3yK66PsGroAquFaGKZyRpDaHRN6ICpJWrgrJibxl1PlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOasQgjSumZzaRTunAf+WLbviBMeMB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRhtkuI+ +l/bYj2g8e4fSGm47zwN3LyYyER/l9gcqe/hm/3Bd/rLQBYF3qUBp1b1siA/5FAu AbKc5DrHDTfwdxD1dYzDWKVnQv6Q5z3oESdrdn+ypbfdhFtRX47h3IWodEIMM92J 9UiIPlJYJwdIOjZDelJve1owsolZVI0HHJ58p7fuRoISD4ClIO/sMm+3Q0ZEnidn AeFKzG6JRYw/CkQLvY0R+daB8nRUo08Fg58DKA0qLcUb6YCF8UPmRPJoj3pnbLry UuayJVPnYxctyjyIL9zYphtjexEjY/EA5u/gNJ7FdfC7sD7X+WFVH0YBosteIf/O ILvIwY4HsUxekA== -----END CERTIFICATE-----Generated at Mon Apr 7 20:07:52 2025 by rpki-client