$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft File: HHrXdUeV3dYF8og4u3zDWd96Jmo.mft (raw, json) Hash identifier: wfJXbdeJQTb5LTVKnS5gFXU0v2DVanYfxsIR5VX1/3Q= Subject key identifier: AA:E1:E9:9D:A5:11:19:74:0A:B1:B7:36:F7:67:44:19:7F:A2:D7:4B Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 019609425FA8D112DDE52027AB01C5B460D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft Manifest number: 14F8 Signing time: Sun 06 Apr 2025 04:01:06 +0000 Manifest this update: Sun 06 Apr 2025 04:01:06 +0000 Manifest next update: Mon 07 Apr 2025 04:01:06 +0000 Files and hashes: 1: 0JAW72MZKRqNPvvLJj-mrzsc6bA.roa (hash: NEJr2j8Q5/yoZT3ZjHtn7D79sLVX3rHSkvuJZKnCCDU=) 2: 1-TiCaqN63y014VBjU4cN2TUy_V8.roa (hash: R9/uJWNYkuWkn9362/6eXHCOuC8x3gv8eszIJhtU6eQ=) 3: 2ZYVCHlVP79fGQDnUrmsC7N7n-A.roa (hash: K2aFrZIoX9SmdcEF5JzKuoA3IcG5HQKJ3ewD9wnPQMA=) 4: 3UFn9ZKL5xnyw3p3E5ZPlAB21Ko.roa (hash: 6Pd7GRQDu0g4GEPlaJKLxZv9PduNId/exEPYyekEroo=) 5: 5-QDCscMj9Leh6LzChmbvJFc3ig.roa (hash: EWC7cGHbOy6BhIFCFJ7EqN8NK2hfdxSdyM/lKvfMq/o=) 6: 5KpVCQ3CyEztQ9cIEvVYbZRbiYQ.roa (hash: wEh76twlgMaB5r7NetVkn53k9vIu3IdtKnUUcrVB2Dg=) 7: CwwBxU06yQHOSN9FW346av3eJSg.roa (hash: sN559HrGwcrwAx9RFEK1aPRGFezwF0x6CyfsT0lApC0=) 8: HHrXdUeV3dYF8og4u3zDWd96Jmo.crl (hash: sXH3+OBA4Mp3CTXY0S1b6WmzlSekbXO8frW+jlf7rPA=) 9: HrBRmTFS8Ys6uQLM7rhI98nFihs.roa (hash: MW9T552xzBnfQZt2F48RqgD/8u4vhEhciQf3oFl+8uM=) 10: K-bptzEyfSxe5brLutYZPui7KJo.roa (hash: RaMo3W1jAz/KokfzelPm6eQVRrUb/HW8AUWUJAZdGqY=) 11: O4G0X_PGrMW4h3U4KT4uijqkrhQ.roa (hash: 5S4xFFqPIUJkH1oerMYER6zbbt7AyzO7IDLvTuazmD0=) 12: QzQU3ZGZ8hKGnEpd1FBDBLaC54I.roa (hash: hwGGHotb5LYjRlv6CVYdkeylIRe1Cifyeb3uVRZFRw8=) 13: XkV_BzJ-10BB1M0sgp5kpjzCQ_0.roa (hash: 4EePChQLAU75id7JSNxKuA3gIb+9FFNSZgknDwLIyC0=) 14: iv3qLKysxVV4ZL5RT241TdjAl14.roa (hash: r9qUMWgU+MUkMxe2hq37VcclKhs/bYytS6pmpmAT6kU=) 15: vW6DP49xFYD9QamGuDpSrklSowc.roa (hash: PfNEb7N7MrV2yrb5oWGvEI95qISNxbt/vnCmIR8GyTs=) 16: vYpftoIYl0802LMSZotEkwGtO1k.roa (hash: AuWrLadvB2ERH3IjebmtnUJ/nP6gZejuogzS6BRYY2s=) 17: w-ow2t4s5d80X3-xzHRdMNix0fw.roa (hash: 4RIMZhfoktIdHVRbOcazQlm95TLudqzurk7X7sEszxc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 07 Apr 2025 04:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:09:42:5f:a8:d1:12:dd:e5:20:27:ab:01:c5:b4:60:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Apr 6 04:01:06 2025 GMT Not After : Apr 7 04:01:06 2025 GMT Subject: CN=aae1e99da51119740ab1b736f76744197fa2d74b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8a:33:23:ee:44:4c:de:cc:68:77:59:e5:91: 46:3e:e2:fc:a6:4d:21:7b:18:23:d4:17:c5:4c:d8: 7f:14:eb:54:c3:06:40:c5:fe:0e:88:af:b7:f2:51: f3:f2:4f:5e:4c:c6:84:be:5b:e4:d1:0b:7d:15:b1: da:69:c3:43:8f:5a:a0:ee:47:a5:3e:f4:27:97:4d: b6:22:6f:8c:d1:cb:5b:40:7c:7c:20:a1:5b:40:ad: e4:02:81:b5:36:f9:83:8f:d9:56:fc:2b:44:3f:c1: 46:7b:9a:51:4f:c3:15:6c:63:c5:4d:fb:d9:13:00: ef:81:42:87:e5:5c:9e:1c:29:1c:ae:cb:7b:1a:d1: 24:43:11:d1:0d:13:6c:06:15:81:92:be:16:aa:ce: fe:7b:10:9c:ed:6e:4f:71:64:bb:16:fc:09:d4:84: 5a:82:dc:ce:68:31:4b:97:13:1a:50:27:24:7d:eb: 79:48:48:de:37:c5:29:8f:2f:a8:52:f7:fb:2b:ce: 13:89:43:90:fc:5c:6a:cb:2f:20:6e:ac:88:1c:93: 33:88:4a:0e:7b:93:7b:e0:0d:81:7e:d2:e0:d8:20: 83:5b:ed:37:ea:82:ca:09:ac:09:db:04:33:84:06: d8:86:65:ca:cd:5d:48:8c:4a:dc:bb:be:16:b3:2a: e9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E1:E9:9D:A5:11:19:74:0A:B1:B7:36:F7:67:44:19:7F:A2:D7:4B X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:ad:66:7f:2d:c0:4c:34:98:f0:bf:bb:38:bd:74:d9:7f:fe: 34:f9:cb:65:18:7f:09:8e:85:5a:a2:a6:a4:6a:a1:89:22:f3: b3:9b:0a:4d:cb:45:0b:91:1e:b3:08:a6:0e:00:bf:c8:1d:cf: 50:6a:ca:57:20:e7:9f:47:18:f4:74:12:29:c1:91:99:3b:22: 85:43:eb:ad:a8:17:79:d2:8d:a3:eb:68:ed:72:f0:d4:a0:74: bf:d9:09:87:b5:4c:db:0f:a0:83:4c:56:e1:4e:1b:19:ee:ba: e3:b2:2e:3a:9e:14:c1:2d:f7:1d:20:21:78:04:bd:cc:9f:3a: f3:fe:20:3e:eb:e0:80:83:04:75:84:d1:76:b4:6b:33:a8:7d: e1:9a:b6:b9:52:05:33:b4:ca:2d:65:7f:4b:ee:7a:57:a5:3a: 18:10:9e:24:6e:a8:56:4f:fa:ca:b3:11:5b:8f:97:14:88:c2: b5:53:d1:b3:e3:de:3e:73:4b:e1:76:97:4b:0d:ef:5e:26:fc: 37:7f:8f:4c:a7:01:bd:7b:a2:00:b0:af:45:38:79:ba:77:90: 4b:6e:ab:e0:15:c6:0a:6d:09:e3:00:dc:95:eb:7d:b5:88:70: aa:8e:a3:27:84:b7:b0:d0:07:ac:b6:b9:0e:93:0e:4b:6e:e1: 0e:c8:b4:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYJQl+o0RLd5SAnqwHFtGDYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjUwNDA2MDQwMTA2WhcNMjUwNDA3MDQwMTA2WjAzMTEwLwYDVQQD EyhhYWUxZTk5ZGE1MTExOTc0MGFiMWI3MzZmNzY3NDQxOTdmYTJkNzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoozI+5ETN7MaHdZ5ZFGPuL8pk0h exgj1BfFTNh/FOtUwwZAxf4OiK+38lHz8k9eTMaEvlvk0Qt9FbHaacNDj1qg7kel PvQnl022Im+M0ctbQHx8IKFbQK3kAoG1NvmDj9lW/CtEP8FGe5pRT8MVbGPFTfvZ EwDvgUKH5VyeHCkcrst7GtEkQxHRDRNsBhWBkr4Wqs7+exCc7W5PcWS7FvwJ1IRa gtzOaDFLlxMaUCckfet5SEjeN8Upjy+oUvf7K84TiUOQ/Fxqyy8gbqyIHJMziEoO e5N74A2BftLg2CCDW+036oLKCawJ2wQzhAbYhmXKzV1IjErcu74WsyrpQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrh6Z2lERl0CrG3NvdnRBl/otdLMB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAca1mfy3A TDSY8L+7OL102X/+NPnLZRh/CY6FWqKmpGqhiSLzs5sKTctFC5EeswimDgC/yB3P UGrKVyDnn0cY9HQSKcGRmTsihUPrragXedKNo+to7XLw1KB0v9kJh7VM2w+gg0xW 4U4bGe6647IuOp4UwS33HSAheAS9zJ868/4gPuvggIMEdYTRdrRrM6h94Zq2uVIF M7TKLWV/S+56V6U6GBCeJG6oVk/6yrMRW4+XFIjCtVPRs+PePnNL4XaXSw3vXib8 N3+PTKcBvXuiALCvRTh5uneQS26r4BXGCm0J4wDclet9tYhwqo6jJ4S3sNAHrLa5 DpMOS27hDsi0Gw== -----END CERTIFICATE-----Generated at Sun Apr 6 10:31:27 2025 by rpki-client