$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: PHbaedyxaeAm45n7y5h0fUHfkN+Tz9OErcVcCPJvaSM= Subject key identifier: 0F:F1:1F:F8:89:C4:DC:27:EE:88:6B:90:60:F5:79:E0:11:52:14:0A Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 01960E322C2909E0839F76FA55281A12B8AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 1532 Signing time: Mon 07 Apr 2025 03:01:31 +0000 Manifest this update: Mon 07 Apr 2025 03:01:31 +0000 Manifest next update: Tue 08 Apr 2025 03:01:31 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: jh8cHvtjsFxNmtFsq/fPsRem0Zuy0aPMX8+DUgvnDdU=) 2: 0httGqgqnBD-cyBZkV5zP0LpIO4.roa (hash: e5sFUpuEkPspxdtpRMty2JvPNTXvUGFt57BwVt8wTQk=) 3: 20w83vHPyYnLSWr2qqWCmD2gZNY.roa (hash: ClK+X58yEmA5ygXK0mo1ANs6qUTT/V8TWnwZD7Tusy4=) 4: 2s4ghGsMJ4UjziczDpj7_nBo6GE.roa (hash: jn5a6RlzlWn5orrS4JyYzumT++ei7+4zrAsQWhkhOUE=) 5: BBOySe2ApZYQpT0wPGJ7zV8XzsA.roa (hash: N6DdRHz14Xr18smaWB+L/0EFbg9FmP8IrnnkdfkP5sA=) 6: BjUAlonCB1CjmbTY52apZdHRGFk.roa (hash: vBVzlWqlUuZ7F5qeBjljk7LIKAFRXIaJSFWC4T698rw=) 7: DRLbJL7meHAnOmMNiiVi2VhOOMc.roa (hash: Lp9UgdizeLrJK6Zry0u6HD2WAPxw4E+r1wzuyfdMmtU=) 8: EXfTHtw-3BJt59JkT36dPstORFo.roa (hash: MhW4Yoiges2mvr+KewFgpAREQV0Mu5obgGNxi9eeOQc=) 9: G8jjrx8EZbysXI_Z13e_0NqYZdU.roa (hash: GPSkTNwl/L8vVjia7LOR9ahqlqqIZvGFNcWIGIi/vHw=) 10: Ib_gkG0OXaC9YGgBGzmQj28oy6Y.roa (hash: Dfa7w0wU+Mwe8FRxusOe5J5w207sEqOGP3MEUAezXaw=) 11: Jp0UMtlRd8ZwvCOhqfD_ADrBKLI.roa (hash: mR/skrtMXmYrNl0WIwSjaGFdp8tWtvYO7SMbQmVqf6A=) 12: KMU9gp2Pze6tK6RqnG6WkdxMvhI.roa (hash: s7jbrR/tYQZH56SCp6DZfaO9EeWTAe129IHD4mNW6qQ=) 13: Ldz2Fcxy2lIR0D-Lc9uIVwn1sVg.roa (hash: 7Jrxd3qwLriiBdyBMLT8U/Q6YrwgSz/r4ZzkDOjpxzQ=) 14: MguR744HGmOoEMdrlIzPUQQNYfs.roa (hash: Ve4h+6FdNbKYu9bYvRE5Dbmxn7BK8VvZ01cl79qxeJc=) 15: OJRKFrAGazOzJ40gSGoefwXYAYk.roa (hash: PYjRffHLN9ZeR3WG+z3kihL+ssNvEEg9dtGsRN0k3fI=) 16: PcsvqoFss2sjt8KP5dE_s9b5R94.roa (hash: 2VnZlh9WN/gvQzrunwflGg0cw7Ym2P+YsV38lpVH0Gs=) 17: RySOnwd5yNUvkpOdlWzbq8gD58I.roa (hash: pMm1Q5jN9tu+9MZBtGXjdw1riel86JfdVWVMRs8pgEY=) 18: UNh6P6o5iukKyngJ923OKln6euE.roa (hash: N5ex54TauXC69hfaRmQEjxuyvZMfnOJEFnqZWvxkb8A=) 19: XXSSAkKxHIvFb1XDuVgAK48p7oI.roa (hash: p4mx1wVBI5jfCHEyW7RDH/AavCZwfWlBpFNbLCutJY0=) 20: Y5c3qkFCpv03-ICNcuAXdHgS3cY.roa (hash: XJDCD20D/hEgr09ZL/gnt/32UJp0okrjk8WR5CoxVyQ=) 21: Y6R9BZ4jbo-SeP4MKzTkUzdRmEs.roa (hash: T03e4fff7Y/zXUb0yVVk+lWsYWaY+JCxTDBS+p8Hygw=) 22: _Ja5VSGfVwaP_RssqzUEn4YMRnM.roa (hash: IopLtmpqrddq1TLUa3ph8Vkd8Gg6tUuEa1Mf8B120SY=) 23: dSIvoRbcXmjEhaD-HdyHYcdmt90.roa (hash: JqFQVPXSWhIrd/AlZzo80JSKjqGLV5nybtYrZ/HoQns=) 24: fW0mZX2qVdA0eoUEboZhAE59bUE.roa (hash: stVjqf6xlyz/MOhoo6Rt330zmsp7vd4IC5S2fUEJ5WM=) 25: kqDz7smZzEggwnOtTZ91wrlBE4c.roa (hash: OteTjZY0hrzoBDeoZG9laIbeOhFIt32mklvyy1YBT38=) 26: m9Q0QpkVO1rZKT8wIA-lB6ceYcg.roa (hash: yW9VuP+7IZqfB9uY1adWMtzwRUiSlhz/2UYbCN1BQSU=) 27: oqSgizr5ODUUGjBb8_Wzxokx-xk.roa (hash: Kl53NJDKPjecKCh1ZqXsoFCQIzYfPyjvOORgLlse+gY=) 28: ps4Flj1BkuW7sLiIgaxaOcmRga0.roa (hash: z/miJktON8vN7qBgG9XGiJDAvY3R13S1nLYmw94yLfM=) 29: qlt-CjR0Oi0L3lo2PS7A4jbvIUg.roa (hash: iydTkBpS1P6s3+CKe74qws4olK3ajXbhwYqoUw/uhBk=) 30: tdzsaKxsamCWBVwoUkqT8RggY6A.roa (hash: Fv0PNntXjBHiuO1Z367HBdmxJtFfh7CR44dwT354/lw=) 31: vFNkivgTExOsjU64HiM4VzsQFiw.roa (hash: DXIqZ5v2rgtSNx+D9s1xP6RBmK/3bmgJ3j5QKRP0qEA=) 32: wMbP2rODQDC-jcOXAyW7ktyAwFs.roa (hash: 9dxgb9cFX2rvzK0yUiEPPHMObwlTuLCycMbvyIulqKU=) 33: yNK_se_8Y1MH-IyQZOfpZj_aArA.roa (hash: Y/8odYpFkGDQCB6ybQitBRTCfwLFaWn7M7svPHhRrhA=) 34: z4dbT2rdI1MPHPzn2a4SSpvkt3E.roa (hash: pftbqIKgzEeVO9sl0LAVO5XHYPxIgJ6YwaN9JqNCTzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 08 Apr 2025 03:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:0e:32:2c:29:09:e0:83:9f:76:fa:55:28:1a:12:b8:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Apr 7 03:01:31 2025 GMT Not After : Apr 8 03:01:31 2025 GMT Subject: CN=0ff11ff889c4dc27ee886b9060f579e01152140a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ac:f6:44:f2:e0:8b:fa:b9:8b:12:d2:49:79: 1f:d8:41:0a:ff:0e:7b:1e:b8:f9:49:a7:01:c4:e4: 5f:5e:83:00:85:ee:79:e3:1b:9d:c8:9e:40:49:c3: 49:98:38:15:88:f1:39:14:9a:af:6d:f8:a5:45:88: 91:2b:8f:87:6f:2b:b3:39:fe:4d:16:78:10:4e:4c: 66:41:02:c7:f7:f1:05:c2:30:d0:be:65:7f:8b:88: 0a:25:c0:af:29:82:0f:6f:54:75:6d:13:f5:7b:d1: 31:b6:a9:65:7c:8e:c3:8b:4e:f3:89:11:df:fa:1c: 3b:05:49:b0:e8:f5:10:12:4a:8b:6b:94:01:7a:02: 71:9c:a3:71:ee:df:02:11:b4:28:91:84:69:c2:e9: 20:90:ac:d3:80:bd:3a:b4:0a:f1:79:12:ca:07:88: 7f:2b:fc:93:0b:39:66:30:f1:30:4a:35:bd:16:32: 41:c8:55:ff:23:f3:8a:57:7b:32:68:72:30:87:a3: d1:cd:b8:d0:dc:e1:2d:75:23:f7:b2:f2:c0:e1:62: 23:a8:1b:b4:46:94:de:e3:13:e9:41:e1:f5:19:02: f9:b9:8b:7f:a2:35:99:6e:b7:41:5d:06:1e:b2:ac: ff:89:2e:9a:0f:19:bd:44:47:7d:a9:d6:07:c1:d6: 3a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F1:1F:F8:89:C4:DC:27:EE:88:6B:90:60:F5:79:E0:11:52:14:0A X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:1c:87:b0:a1:60:bc:d7:85:cd:6e:4e:a2:10:13:31:92:21: 3d:62:95:b3:5c:6f:97:82:39:99:8b:35:de:69:b5:d8:0f:91: 16:44:f4:95:6f:ee:b5:58:17:5e:31:78:f6:54:51:c5:58:d3: 63:37:8b:14:76:b3:45:d4:e8:98:63:aa:a4:5a:be:91:f4:3b: c9:b9:8b:e6:35:81:d2:7c:83:fb:5d:77:d8:40:11:36:db:d4: e1:0c:c2:75:c2:33:57:58:12:bc:a9:55:56:b9:29:d4:26:01: da:a8:c8:3a:12:46:45:20:27:9e:c6:fc:3a:29:4a:92:84:1e: ee:de:2b:75:84:26:8a:5a:86:4d:33:22:e0:e1:f0:67:e3:f5: 6d:1c:c6:4c:e3:1d:a5:30:dc:a5:b9:1d:f5:07:77:4b:34:b9: 85:45:3e:e1:9b:2e:47:ed:61:fb:d7:ba:31:9e:98:46:01:c0: ec:98:a7:f6:7d:84:aa:6c:20:37:7a:75:7e:38:7b:87:fa:af: dd:fc:69:a3:ea:2e:ca:04:4d:95:5a:2f:d9:20:37:52:79:a6: 82:02:e3:69:c0:3d:a8:db:50:bc:26:eb:73:9b:a5:ec:0a:53: 02:8b:73:cf:df:12:a5:df:ba:6c:36:08:c3:8e:06:6d:f1:cf: b4:91:fe:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYOMiwpCeCDn3b6VSgaErirMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjUwNDA3MDMwMTMxWhcNMjUwNDA4MDMwMTMxWjAzMTEwLwYDVQQD EygwZmYxMWZmODg5YzRkYzI3ZWU4ODZiOTA2MGY1NzllMDExNTIxNDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6z2RPLgi/q5ixLSSXkf2EEK/w57 Hrj5SacBxORfXoMAhe554xudyJ5AScNJmDgViPE5FJqvbfilRYiRK4+HbyuzOf5N FngQTkxmQQLH9/EFwjDQvmV/i4gKJcCvKYIPb1R1bRP1e9ExtqllfI7Di07ziRHf +hw7BUmw6PUQEkqLa5QBegJxnKNx7t8CEbQokYRpwukgkKzTgL06tArxeRLKB4h/ K/yTCzlmMPEwSjW9FjJByFX/I/OKV3syaHIwh6PRzbjQ3OEtdSP3svLA4WIjqBu0 RpTe4xPpQeH1GQL5uYt/ojWZbrdBXQYesqz/iS6aDxm9REd9qdYHwdY66QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/xH/iJxNwn7ohrkGD1eeARUhQKMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADByHsKFg vNeFzW5OohATMZIhPWKVs1xvl4I5mYs13mm12A+RFkT0lW/utVgXXjF49lRRxVjT YzeLFHazRdTomGOqpFq+kfQ7ybmL5jWB0nyD+1132EARNtvU4QzCdcIzV1gSvKlV Vrkp1CYB2qjIOhJGRSAnnsb8OilKkoQe7t4rdYQmilqGTTMi4OHwZ+P1bRzGTOMd pTDcpbkd9Qd3SzS5hUU+4ZsuR+1h+9e6MZ6YRgHA7Jin9n2EqmwgN3p1fjh7h/qv 3fxpo+ouygRNlVov2SA3UnmmggLjacA9qNtQvCbrc5ul7ApTAotzz98Spd+6bDYI w44GbfHPtJH+cw== -----END CERTIFICATE-----Generated at Mon Apr 7 13:08:15 2025 by rpki-client