$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft File: jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft (raw, json) Hash identifier: WXIJMKfyISChooT+CIW8xRealDDQpkiqTyXixRTC4EE= Subject key identifier: 05:9E:1D:BD:3B:09:9D:8D:46:51:EF:94:E5:CF:1D:B0:E4:DA:DC:C8 Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24 Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624 Certificate serial: 01958F9882D7C32A76B79BA357574CEE7074 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft Manifest number: 0D7E Signing time: Thu 13 Mar 2025 13:01:31 +0000 Manifest this update: Thu 13 Mar 2025 13:01:31 +0000 Manifest next update: Fri 14 Mar 2025 13:01:31 +0000 Files and hashes: 1: 0JcOAjVYzD7ATTRTY6zM_FW7ibk.roa (hash: ae6zh695aCdxOBAb92vW9Mqs/ewqcDH7wayEClXo5lU=) 2: 1-Y2dKMtSX_HHImXALZ9Ywq-mBt0.roa (hash: 7qyTbmtwccyXrpltxd1wqJPnd+/MFLmBgiiCsu8AQkU=) 3: 2QTRX3rMARDGeCqwmM0inJSU1I8.roa (hash: JqKkV8sJ2151XjqigefJVjz+CjQivqO6Q6p2fwfafME=) 4: 7UYDYjcK9QG1kAzAVdRISMcK0fw.roa (hash: sob5MfrYBgiKx+YfOtoKRqwcLnr1PeTeNg0kII/WuRY=) 5: 9fRtydBjgnhbFaykZOo5uuxjF38.roa (hash: RH3Om+bNuUzjZrbi9dURSTYAb514YDgcJdJj7pg2lZE=) 6: EY7ogwruZGSD63obEpUnqn0nkuo.roa (hash: eHBlu7ijObgowuU+joBjfNNXkGVZmY2eT3u/EnffphU=) 7: HJWy01pqJrtg2Vo5SudbPdEEkd4.roa (hash: Vr6k9Sg54f+U5YuclxncYArpuGy+CEnoAy/c+X99oH4=) 8: IYKB-HSEiCq4O7HvrSnxClTqE4I.roa (hash: HbfqesX7Z3CjfGeH5MdNYm5FcZQ54JXRPRk/orWo/qA=) 9: PT8j9eHtg5ttD87ZTwg2GzdumEg.roa (hash: 6rQ85ph5sdL+xNggsMfKZpzXGn+sK3MhYgm3m97nS/I=) 10: ZlUjZQcl9nR0SUVxsgzMhtk30HU.roa (hash: RueFoN4i6RiouAbfwEgZPqUPq4WVTXhPv6TjG8c7n5M=) 11: _K57y8dAfTW_4za5nQ1yw_fKnZI.roa (hash: Rymw72FXGoLgMvCj/WyEf1Es/Ms+t2XEE94XwkN2BgM=) 12: aAifBze_JXbbUHJNy418NFONnUo.roa (hash: rLLARXHfwNDLekNJ80A4f1i0LwTr3pN9Pr1HKxuL2t0=) 13: fyVTS8KnNLJLAvMPXFhguHqf8wg.roa (hash: rK8pnbIqXHxeMFgFBrhTIo/gwpafsDBMMFa/tGIcB3c=) 14: g6TYrOiqfeY_zc4wZ63S9GaTHtA.roa (hash: McFJsvyZf/CJB69UHaeJLyOzFI33CZnDxz9asvMb9+k=) 15: hiMcEIjHUWN5FsB7VlVyAr5izXE.roa (hash: 6yVp6mlnWSD0tIxqmD2GQ7svu30uQXkMfzEBlI3SWXo=) 16: jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl (hash: W6itSwiQgWdEi8PtmVvBaT6G3cCuRnokd1XkH2cSj5c=) 17: mXX0pAjU5w8oM8Kw23jhrgx4Wvk.roa (hash: sc8dapOFwgxs0Xrg6eWIDXxwfzY184TsGMxeq92yyGI=) 18: o0ZwaYj89qD05J13n0pZ23X4IIA.roa (hash: Y8iKBwsONnOxQpFezT8Qy8hc9RHNcwVnuvC+XOuLtNY=) 19: ySGM40xeAZyu32ERIMnkJoio4hw.roa (hash: w5mMTd2fQSF1PurNOaDTdU1aGhD+Vitko+NZO/EWYYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 14 Mar 2025 09:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:8f:98:82:d7:c3:2a:76:b7:9b:a3:57:57:4c:ee:70:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624 Validity Not Before: Mar 13 13:01:31 2025 GMT Not After : Mar 14 13:01:31 2025 GMT Subject: CN=059e1dbd3b099d8d4651ef94e5cf1db0e4dadcc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:93:30:a3:2c:8f:c5:c0:7d:d1:7e:8a:70:78: 25:5f:76:3b:bb:24:57:6b:7d:d9:ba:e1:69:3b:28: c5:cf:83:46:64:a6:6f:8e:da:3b:51:47:5a:1c:e1: 40:9e:c0:6c:38:f2:07:a6:d4:79:71:e9:94:7e:35: e0:71:1a:d8:54:37:5d:0e:3c:55:78:d3:46:a1:0b: 72:0c:d5:9f:47:3e:25:0c:0a:4d:f8:33:02:73:41: 2b:5f:a7:8b:4f:2f:61:6c:57:44:54:81:3c:0d:bf: 82:6c:53:b1:09:02:9a:99:fb:6a:a7:d9:3f:1d:6f: dc:7e:6b:94:26:b6:f5:f2:64:4a:d2:63:1b:26:21: 7a:96:dd:0f:fe:e2:07:77:ad:88:0a:7e:6e:5e:62: 00:06:9d:d8:70:ec:c1:2c:47:a4:dd:e9:ad:c2:f4: 6c:84:8d:87:f9:6e:0a:e6:07:00:8d:31:0a:98:ec: 0e:7d:05:84:21:e0:94:6b:55:9c:99:bf:3e:1d:d2: e1:08:a1:34:0d:66:92:f9:a3:7d:b7:16:be:6d:16: ca:6c:60:0b:85:d0:31:0f:4a:00:7c:98:17:e9:e7: c6:52:c5:87:13:a4:ea:ad:85:88:c3:5d:8a:16:8d: 0c:89:c4:11:1c:f8:fd:bf:b6:bb:ce:05:2a:57:c3: d2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:9E:1D:BD:3B:09:9D:8D:46:51:EF:94:E5:CF:1D:B0:E4:DA:DC:C8 X509v3 Authority Key Identifier: keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:7b:6c:5c:ce:44:e7:dd:b6:a8:0b:38:e4:e7:15:3b:62:56: 9c:a4:54:fa:26:e3:85:da:2c:64:df:36:3d:61:08:86:df:1d: b3:f5:ac:81:3a:0b:64:93:59:7f:a8:77:6d:84:d1:71:67:b2: 9b:23:6a:16:23:6b:73:e1:35:8c:40:4d:81:ca:cf:cb:7b:c7: 8a:ae:5c:40:b5:d3:f2:87:f5:46:9a:40:cb:14:ae:7a:26:f2: fc:ee:ab:8f:42:7b:ca:23:aa:90:0c:cd:46:4a:53:10:1a:81: 76:10:b5:c3:30:a2:d4:7f:bc:28:92:63:93:f5:f8:66:b0:be: 4f:16:c7:42:d5:26:72:99:34:05:40:ea:96:a1:8e:38:81:ae: 78:0a:8a:09:fb:d8:54:91:fa:6c:d6:29:c5:4c:5b:b1:10:03: 5e:70:30:d9:21:e3:7b:a7:9d:40:2e:c4:cd:42:d3:40:02:f5: 44:85:33:82:4f:13:d8:69:db:57:20:6c:48:4b:c1:a9:17:72: e8:f9:48:0c:70:8e:02:6c:cd:cd:10:3a:c6:88:36:4b:44:57: 8e:7a:86:a8:32:2f:0e:06:a3:d0:3c:33:42:f5:fe:0e:7e:a1: 9c:25:8e:bb:71:0b:ff:df:7d:eb:10:a0:d6:d9:ca:48:eb:88: f8:e7:d9:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZWPmILXwyp2t5ujV1dM7nB0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNjI2YzkwOWViNDk1MTE1NGJjZWU4MjIxZTQzOTUxYjQy NTc2MjQwHhcNMjUwMzEzMTMwMTMxWhcNMjUwMzE0MTMwMTMxWjAzMTEwLwYDVQQD EygwNTllMWRiZDNiMDk5ZDhkNDY1MWVmOTRlNWNmMWRiMGU0ZGFkY2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZMwoyyPxcB90X6KcHglX3Y7uyRX a33ZuuFpOyjFz4NGZKZvjto7UUdaHOFAnsBsOPIHptR5cemUfjXgcRrYVDddDjxV eNNGoQtyDNWfRz4lDApN+DMCc0ErX6eLTy9hbFdEVIE8Db+CbFOxCQKamftqp9k/ HW/cfmuUJrb18mRK0mMbJiF6lt0P/uIHd62ICn5uXmIABp3YcOzBLEek3emtwvRs hI2H+W4K5gcAjTEKmOwOfQWEIeCUa1Wcmb8+HdLhCKE0DWaS+aN9txa+bRbKbGAL hdAxD0oAfJgX6efGUsWHE6TqrYWIw12KFo0MicQRHPj9v7a7zgUqV8PSKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWeHb07CZ2NRlHvlOXPHbDk2tzIMB8GA1UdIwQY MBaAFI5ibJCetJURVLzugiHkOVG0JXYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAt ZTk3ZDFkMDIyMGFmLzEvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAtZTk3ZDFkMDIyMGFm LzEvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOHtsXM5E 5922qAs45OcVO2JWnKRU+ibjhdosZN82PWEIht8ds/WsgToLZJNZf6h3bYTRcWey myNqFiNrc+E1jEBNgcrPy3vHiq5cQLXT8of1RppAyxSueiby/O6rj0J7yiOqkAzN RkpTEBqBdhC1wzCi1H+8KJJjk/X4ZrC+TxbHQtUmcpk0BUDqlqGOOIGueAqKCfvY VJH6bNYpxUxbsRADXnAw2SHje6edQC7EzULTQAL1RIUzgk8T2GnbVyBsSEvBqRdy 6PlIDHCOAmzNzRA6xog2S0RXjnqGqDIvDgaj0DwzQvX+Dn6hnCWOu3EL/9996xCg 1tnKSOuI+OfZWg== -----END CERTIFICATE-----Generated at Thu Mar 13 20:53:25 2025 by rpki-client