$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: MmAq1mTtMfh5kEzdC9VbQStJoBtFstCTs4Z2j8hfUiU= Subject key identifier: 01:89:23:E2:6D:F4:F7:79:F8:E6:47:D7:92:17:66:E2:72:4C:30:77 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 0195FD75073E68185B91F54B273725F49DB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 0DF2 Signing time: Thu 03 Apr 2025 21:00:59 +0000 Manifest this update: Thu 03 Apr 2025 21:00:59 +0000 Manifest next update: Fri 04 Apr 2025 21:00:59 +0000 Files and hashes: 1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=) 2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=) 3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: r1a0yknjBRMfKRtKfGTQdwXvb7QO7rQcLmexdNq+5C0=) 4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=) 5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=) 6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=) 7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=) 8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=) 9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=) 10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=) 11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=) 12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=) 13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=) 14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=) 15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=) 16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=) 17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=) 18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=) 19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 04 Apr 2025 21:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:fd:75:07:3e:68:18:5b:91:f5:4b:27:37:25:f4:9d:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Apr 3 21:00:59 2025 GMT Not After : Apr 4 21:00:59 2025 GMT Subject: CN=018923e26df4f779f8e647d7921766e2724c3077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:13:e4:f0:79:a9:a1:cd:33:78:b5:cd:f5:df: 44:8c:e6:7a:dc:ad:b3:4a:a1:e2:45:c5:2c:85:10: 35:a3:63:1b:2e:a8:b6:b3:b7:d3:c8:5f:8b:24:4a: 42:9c:60:8f:a8:a4:04:67:63:c5:9e:c0:83:5d:2e: 1f:9b:67:db:9e:b5:3e:97:6d:70:74:cd:b1:14:a9: 9e:2b:3a:a0:f9:34:bd:70:88:03:1e:d3:4f:8e:27: cd:97:91:b8:2d:6f:01:33:f5:7c:12:1e:65:15:bc: 88:4b:2e:9c:ee:a1:89:a5:8e:63:48:e5:f5:45:2d: 22:21:f5:1a:e5:40:99:b6:e4:49:66:e8:84:3e:ca: 99:27:97:3a:ef:f8:d5:a1:df:20:29:bc:3e:03:f7: 36:04:44:23:63:13:3d:eb:02:c1:ba:7d:cf:51:a5: d2:20:66:1a:53:2d:fd:31:b1:62:5c:48:97:61:d7: 08:8e:aa:bf:19:0c:79:39:8f:c3:7b:f7:9d:70:3f: e1:70:f9:bb:68:0e:2f:3c:e9:b2:31:7c:b4:e7:ba: 02:82:16:b3:0d:ed:7c:89:c8:54:3a:72:49:5d:dd: 04:a3:43:e3:c4:57:d2:d6:56:c8:a5:d6:30:bd:3f: 9d:13:2a:ca:73:bd:83:a6:b2:d2:e2:72:ff:29:83: af:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:89:23:E2:6D:F4:F7:79:F8:E6:47:D7:92:17:66:E2:72:4C:30:77 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e8:b1:b1:74:84:54:f7:22:de:88:25:8e:e5:d1:eb:8a:f2: 50:eb:d7:78:26:e5:43:41:07:6d:50:88:50:2e:6e:fb:8c:b2: ea:34:6c:13:4e:35:d2:74:11:cd:60:8d:54:29:db:92:9e:84: ce:3b:7c:91:bc:65:df:17:d5:a7:9d:52:92:d5:d0:f3:c0:fc: c5:83:62:ae:24:dc:92:12:61:b1:4a:f3:05:1e:67:ec:10:e4: 7a:9f:8b:b5:1d:59:52:21:b8:cb:78:a0:c4:aa:66:18:68:f2: 1a:76:9d:65:b3:9c:5d:1b:c3:52:cd:3f:ba:ea:ac:3b:95:a1: 4a:ca:c0:83:d0:6e:51:36:02:d8:57:85:9b:cd:79:e0:6e:d3: ae:9f:71:3e:69:0a:43:fe:c8:d9:93:b5:e3:6e:e8:dd:aa:ad: 49:36:08:50:e5:ca:c3:8d:8a:21:f1:76:89:1e:63:f5:df:d0: 65:09:1d:37:00:a9:58:0c:58:1c:f5:30:cb:e8:ff:0c:8e:e1: 9a:28:98:42:21:83:41:d9:64:97:59:2c:5e:2a:1c:73:e4:89: d8:82:93:d2:0d:5d:b9:32:bc:e7:cb:75:1d:d4:ef:32:7a:2a: 02:6e:37:07:d1:05:78:e3:91:15:da:88:d0:95:c0:4e:9f:c1: 08:4e:5b:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZX9dQc+aBhbkfVLJzcl9J25MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjUwNDAzMjEwMDU5WhcNMjUwNDA0MjEwMDU5WjAzMTEwLwYDVQQD EygwMTg5MjNlMjZkZjRmNzc5ZjhlNjQ3ZDc5MjE3NjZlMjcyNGMzMDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRPk8Hmpoc0zeLXN9d9EjOZ63K2z SqHiRcUshRA1o2MbLqi2s7fTyF+LJEpCnGCPqKQEZ2PFnsCDXS4fm2fbnrU+l21w dM2xFKmeKzqg+TS9cIgDHtNPjifNl5G4LW8BM/V8Eh5lFbyISy6c7qGJpY5jSOX1 RS0iIfUa5UCZtuRJZuiEPsqZJ5c67/jVod8gKbw+A/c2BEQjYxM96wLBun3PUaXS IGYaUy39MbFiXEiXYdcIjqq/GQx5OY/De/edcD/hcPm7aA4vPOmyMXy057oCghaz De18ichUOnJJXd0Eo0PjxFfS1lbIpdYwvT+dEyrKc72DprLS4nL/KYOvxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGJI+Jt9Pd5+OZH15IXZuJyTDB3MB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALOixsXSE VPci3ogljuXR64ryUOvXeCblQ0EHbVCIUC5u+4yy6jRsE0410nQRzWCNVCnbkp6E zjt8kbxl3xfVp51SktXQ88D8xYNiriTckhJhsUrzBR5n7BDkep+LtR1ZUiG4y3ig xKpmGGjyGnadZbOcXRvDUs0/uuqsO5WhSsrAg9BuUTYC2FeFm8154G7Trp9xPmkK Q/7I2ZO1427o3aqtSTYIUOXKw42KIfF2iR5j9d/QZQkdNwCpWAxYHPUwy+j/DI7h miiYQiGDQdlkl1ksXiocc+SJ2IKT0g1duTK858t1HdTvMnoqAm43B9EFeOORFdqI 0JXATp/BCE5b4g== -----END CERTIFICATE-----Generated at Fri Apr 4 05:47:19 2025 by rpki-client