$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft File: fQakK7JEblHxkuo3W99-7FpRx38.mft (raw, json) Hash identifier: OL+PoaFy30qiCoTaCr1z2ia1x9NAvWQTh05DMTOT4XM= Subject key identifier: 8E:51:75:3C:12:2B:D1:55:1D:31:71:4F:AB:7F:9B:A1:48:2F:BA:4A Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 019644E906186218B462DBE339989EE7A6B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft Manifest number: 10F2 Signing time: Thu 17 Apr 2025 18:00:44 +0000 Manifest this update: Thu 17 Apr 2025 18:00:44 +0000 Manifest next update: Fri 18 Apr 2025 18:00:44 +0000 Files and hashes: 1: 2EnX4m92s0lhKmWE_sTzMD4Ayro.roa (hash: gA57KxZUSDCVnGJyJOSYKPN5gZzPfcQGEC6QQbL5A80=) 2: 3-Grh5jLZ10JU7OBJD1tp_47eyY.roa (hash: 2c45XwsvJy+h7TqtuH/GlyKMkqIf7Xkil5OLxUtEjls=) 3: 3O-PquqRfbA6nwdvb9qh_AlphQI.roa (hash: ui7wdGtAkSn5jSbzg9QOpRGaOjEkXjjG4DHPpDLyVM8=) 4: 9tG_IZuU5_cUB2VxB4_mFuzbZWA.roa (hash: PfJNVhJ2t/gHrswGCAzyuF/aOd+UybWj7m8V6C9TjnM=) 5: Ev1rARJ34nYfG1V0Ld0spQXI-VU.roa (hash: SD0RplzRHSl5AqxByRd93YJkWu3aK44s9ywFpp3pnJ0=) 6: FktOgxEd5inrsl5Xig_9VZ-14kI.roa (hash: YzQiSJ9dizGMefq4AymfGDFF9EYlcJRts+qMHM/974Q=) 7: Ge_uX_W3v6Qv50Vw5ae1VK51UEU.roa (hash: XNzqWOUJb1G6BusqTwhK231Qfjyjj7xbS2sFfNlRRIY=) 8: GvM7qMsGGY0NB0Mdwqd9KZDIh64.roa (hash: S/WeVLNJSBWvfGHQHnHShtzGzYAW49VG43Ku/JYfDys=) 9: HTr5rydQdFHu-uCLJk2lOL3Ir2E.roa (hash: i32saCx4DgxcZ7o3IHdv+kvs+bAPQrDg12HNZKhQfo4=) 10: TV69kqHjyeIs6SyKtJS7y7vqsMA.roa (hash: j8rtwZUvSwiOl5RpVQQncmBLRe+d+je/6YGxxoYbrG4=) 11: VRTyQw_v4LlqfkprAuq0lJwtgOs.roa (hash: TQeOD7Ggy40BK6kV3Z98eRb7CzgYrpfrmwu6QAHlOZc=) 12: WabN-J1FDu6W3p8yB6HeIVyu7fM.roa (hash: 4LNC/qP52AV9uC8vUXLHv0auNiYxyYlw8sJ9ArCTUpg=) 13: X3Q0SNhCbMHeUBwGf788wp_czsU.roa (hash: 091XmsdNMlLYLPcTwFanyKRL1REvB0J6UE48TAdGAMo=) 14: XE7cRB6SWvPtqodUbBU29gAlxy0.roa (hash: VEw1GCPGuZXegW9h5elGs3pbrIScm0hRkL6R6Vn1RLY=) 15: ct5jXmRV16i6fK8y9z-vqgBC-eM.roa (hash: YwoZM0/dlMDJEjxF3IHm0bkS1+bWwqNb2ETiYm2dLk0=) 16: fQakK7JEblHxkuo3W99-7FpRx38.crl (hash: 00XcSU3Kj1z/YK9FJlkGDPN1oSeVF33wEI9c8nUBnGE=) 17: hV3esBXd7kWM19SwGoTWr4W2RYo.roa (hash: nkuIcdLSR2rDjqKAyaaEtGABcGXULTJNPUbi1fRjd+w=) 18: hqcWZscvMvxfFB8QI_S-D4mwSnM.roa (hash: ffNiaNjp7TZpp1BEsr11TAWkOb9RQ/w06b89HrPSZY4=) 19: iHqHOmwrVyrtHOqJBGU-h4gTPGE.roa (hash: LgyVv3T9GhaxHLbeG0cUmNnr3zf3ppvzWIBGJwHUSNg=) 20: iPUqVolhLmbwFocDgLV6ncA_LRs.roa (hash: Vf7btw8BxFTBWWeh1+kJas/26jHzb0LOznlp7bXnAAo=) 21: iTLc5VqU9KTkxYI4woYxihTaS1E.roa (hash: 9Lihlb46Ba0mozz2ZnqtyUczktp8pAuj6kFBxT8olqk=) 22: kBaE1jHCbO0NZSYgeZ58_AVU_2s.roa (hash: UgP1XEYyoWbvprLUeqNkyvq961rurgqnzeP3q+NzEPY=) 23: l9F2BKLRzJdwd0fdRPbEtVrxZ_w.roa (hash: sQ1Z2qgiFPzai3M2nTZDaES/HRhMJZ1SRAb6A8g+cZw=) 24: mshsch9jvLRWMOkW640opDKVZ6U.roa (hash: BsoqjBrJxvmkPWcY+fPLitNMqJrGGEQ6Lx9nbs/IguA=) 25: mss18FIq4ydcYebAHYX2pd8ocjk.roa (hash: J88GfjksI+w3VtUia6Hq+rhitJHHRkLoOK14jy8vrfc=) 26: n8beE_tI7GeE5JTD0amAF0WQp1M.roa (hash: iiReayb/lEPVoMVcPoo7tc123PhSZyon0Hw4QE2B2Jc=) 27: nwvxh4Kq6QGnrSG8dHlSPWKzWS8.roa (hash: oWPee3Z5fruu6Qydv3LTw9u+9tD+meWbQsYByk2qusI=) 28: pWuQiH7oCzI0HQTOK5N0XFIvpC0.roa (hash: i9S7NxmicTLIf3yhZDDOTywtRB20Rf0o941WAv3hGkY=) 29: phdVSjC8d7P_IPR9pfuqF3ibJeQ.roa (hash: LdfALFSTfppofahy/V7vrDSqtAjnA1jl4Wz8tBm0yaQ=) 30: qhqAQR22JaN9sFDstmAnfgH6jD4.roa (hash: DYrIqHwNjcGZSEbGFvg0f1ZcKdSDEK96zCtPjprY0u8=) 31: qsCWx0y5U0_tpArKY33BWGyPAKg.roa (hash: 5zlW+fe570TQ9t9Q/r880168DEL2PLYQkcP+DEhbBe0=) 32: vSFUAztM4xg8pnCN2uvJ0r0ZpOY.roa (hash: lfAk2RkoT9Z6h0Jxb78c4RLN4P2hpHz0D8+Q/p7nmkA=) 33: vWcgLORNYaxn8oW87i0UFzUEE_0.roa (hash: H32EyNsUB/y926E/9Y3FItCi0tRX+tClcrtmQ4SkcBw=) 34: yArUxJuVZr7ZjsAQ50iIy89Di3E.roa (hash: FYImSGmHMUN8RyvNxZTCDINMDJQGeXHDQkBay1ZLpaA=) 35: yyxJQ5XATA8lfc_O-A0MIq50viw.roa (hash: b3vHgrn6G4FC+/ORCr2nTAcwUFNQFEM4kTv5ph/7kMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Apr 2025 16:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:44:e9:06:18:62:18:b4:62:db:e3:39:98:9e:e7:a6:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Apr 17 18:00:44 2025 GMT Not After : Apr 18 18:00:44 2025 GMT Subject: CN=8e51753c122bd1551d31714fab7f9ba1482fba4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:89:dc:40:d4:e7:7e:0c:ce:05:f1:57:db:4f: 1d:c0:ce:52:f4:16:1b:2e:cd:2a:c5:6f:cb:fa:a7: 9e:e6:55:69:e2:be:9c:ea:e9:8a:57:c1:91:a9:19: c7:88:b9:74:d7:98:82:f1:36:1c:a3:b1:23:f8:d7: 1c:eb:b9:10:02:e8:ed:9a:c7:67:cf:ce:9b:bf:b8: 7f:d2:33:c3:f9:39:db:a2:2b:d7:89:69:66:cf:b2: 02:fb:65:f9:b1:ea:95:e4:af:67:27:13:dc:30:36: bc:f4:42:91:03:90:9c:29:a4:83:f9:4a:0b:b3:b5: 72:d7:ef:86:6c:bc:ed:86:b0:ce:30:11:dc:73:4e: 27:8f:4d:30:ad:6a:99:2c:cc:7a:dc:29:e9:7e:56: d8:46:a8:13:79:15:d9:a2:35:c5:07:c3:43:b1:e6: 0d:1f:aa:96:62:63:c8:07:9e:57:d5:d0:3a:3b:2c: c1:82:96:e2:c5:6f:2f:e1:96:5c:63:31:f8:7c:e5: 7d:aa:23:64:f6:bb:16:de:f3:29:95:68:54:6a:8c: 41:e7:b8:08:78:67:62:b8:ea:57:7a:f8:41:d0:92: 8c:c3:d8:ec:18:44:80:72:1f:e6:94:b8:8b:84:95: fd:7a:94:58:67:1b:8f:97:b5:bd:24:3b:1d:54:ff: 49:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:51:75:3C:12:2B:D1:55:1D:31:71:4F:AB:7F:9B:A1:48:2F:BA:4A X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:58:45:e1:84:75:65:6e:d1:49:fc:7b:11:eb:4d:80:4b:54: 4e:11:c9:78:19:72:d5:4e:50:14:97:49:0f:05:a3:53:6d:44: 33:3e:a7:d9:7a:ce:5f:1a:42:96:eb:b0:db:03:a2:16:ed:66: 34:71:02:17:a2:d3:4c:37:75:73:13:c5:be:57:82:01:9c:d7: 43:04:e5:62:ff:64:d4:48:02:e8:5a:1f:ff:40:ac:e8:45:57: 0a:b0:98:61:6f:71:e7:be:bb:ff:9a:d6:50:ff:fe:ce:e0:ad: b2:cf:04:0c:c5:97:32:7c:a8:48:33:55:fd:ea:b1:e3:8c:ed: e3:9a:3f:ce:c7:16:97:42:63:3f:c8:1e:85:d7:a9:7e:39:7a: 5b:76:c8:33:db:89:85:da:fa:3a:78:36:9e:55:df:e1:48:2d: fd:5d:71:1a:1b:9c:a7:2b:a8:23:dd:93:79:dc:a5:0f:bd:f0: c7:e7:71:b6:28:aa:66:fa:34:5c:bb:cd:41:1b:09:33:ca:74: ae:71:f1:31:b3:b5:4f:55:d1:56:68:e4:b3:50:81:e7:b2:3f: c1:c9:81:a5:bf:4e:3c:5d:bb:66:2f:71:80:10:f9:25:c5:f5: 5e:74:d7:db:8a:7c:b7:e4:af:bb:07:ea:2b:25:55:94:2e:4b: 71:d8:08:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZE6QYYYhi0YtvjOZie56a4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjUwNDE3MTgwMDQ0WhcNMjUwNDE4MTgwMDQ0WjAzMTEwLwYDVQQD Eyg4ZTUxNzUzYzEyMmJkMTU1MWQzMTcxNGZhYjdmOWJhMTQ4MmZiYTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YncQNTnfgzOBfFX208dwM5S9BYb Ls0qxW/L+qee5lVp4r6c6umKV8GRqRnHiLl015iC8TYco7Ej+Ncc67kQAujtmsdn z86bv7h/0jPD+TnboivXiWlmz7IC+2X5seqV5K9nJxPcMDa89EKRA5CcKaSD+UoL s7Vy1++GbLzthrDOMBHcc04nj00wrWqZLMx63CnpflbYRqgTeRXZojXFB8NDseYN H6qWYmPIB55X1dA6OyzBgpbixW8v4ZZcYzH4fOV9qiNk9rsW3vMplWhUaoxB57gI eGdiuOpXevhB0JKMw9jsGESAch/mlLiLhJX9epRYZxuPl7W9JDsdVP9JgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5RdTwSK9FVHTFxT6t/m6FIL7pKMB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVhF4YR1 ZW7RSfx7EetNgEtUThHJeBly1U5QFJdJDwWjU21EMz6n2XrOXxpCluuw2wOiFu1m NHECF6LTTDd1cxPFvleCAZzXQwTlYv9k1EgC6Fof/0Cs6EVXCrCYYW9x5767/5rW UP/+zuCtss8EDMWXMnyoSDNV/eqx44zt45o/zscWl0JjP8gehdepfjl6W3bIM9uJ hdr6Ong2nlXf4Ugt/V1xGhucpyuoI92TedylD73wx+dxtiiqZvo0XLvNQRsJM8p0 rnHxMbO1T1XRVmjks1CB57I/wcmBpb9OPF27Zi9xgBD5JcX1XnTX24p8t+Svuwfq KyVVlC5LcdgIUg== -----END CERTIFICATE-----Generated at Fri Apr 18 02:10:45 2025 by rpki-client