$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: Rp3WqpQcWfptFHGr5te9ZGmR+6CdlHSJHcKBMuvCHZE= Subject key identifier: BE:B0:C8:53:F1:D7:34:5F:E2:86:15:70:CC:0F:F2:53:88:07:15:EB Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 01973D9AE53D23896488051AAB56747978B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 15DB Signing time: Thu 05 Jun 2025 01:00:50 +0000 Manifest this update: Thu 05 Jun 2025 01:00:50 +0000 Manifest next update: Fri 06 Jun 2025 01:00:50 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: B5crmkaB6n0xr/fjEnGnCBpoSnv8uvd/wmX6C86yGzI=) 2: 0httGqgqnBD-cyBZkV5zP0LpIO4.roa (hash: e5sFUpuEkPspxdtpRMty2JvPNTXvUGFt57BwVt8wTQk=) 3: 20w83vHPyYnLSWr2qqWCmD2gZNY.roa (hash: ClK+X58yEmA5ygXK0mo1ANs6qUTT/V8TWnwZD7Tusy4=) 4: 2s4ghGsMJ4UjziczDpj7_nBo6GE.roa (hash: jn5a6RlzlWn5orrS4JyYzumT++ei7+4zrAsQWhkhOUE=) 5: BBOySe2ApZYQpT0wPGJ7zV8XzsA.roa (hash: N6DdRHz14Xr18smaWB+L/0EFbg9FmP8IrnnkdfkP5sA=) 6: BjUAlonCB1CjmbTY52apZdHRGFk.roa (hash: vBVzlWqlUuZ7F5qeBjljk7LIKAFRXIaJSFWC4T698rw=) 7: DRLbJL7meHAnOmMNiiVi2VhOOMc.roa (hash: Lp9UgdizeLrJK6Zry0u6HD2WAPxw4E+r1wzuyfdMmtU=) 8: EXfTHtw-3BJt59JkT36dPstORFo.roa (hash: MhW4Yoiges2mvr+KewFgpAREQV0Mu5obgGNxi9eeOQc=) 9: FRvZFyOxFoddRwR8NWy2iDyogY8.roa (hash: bzSWZTj+o0faBM1dsh+8mBoLaK0jcFLNse7M1DVkpUs=) 10: G8jjrx8EZbysXI_Z13e_0NqYZdU.roa (hash: GPSkTNwl/L8vVjia7LOR9ahqlqqIZvGFNcWIGIi/vHw=) 11: Ib_gkG0OXaC9YGgBGzmQj28oy6Y.roa (hash: Dfa7w0wU+Mwe8FRxusOe5J5w207sEqOGP3MEUAezXaw=) 12: IeeTFnQlmZw5QQYCud1CYemZFpo.roa (hash: h9yIp1tlCMgUdpl9m96yFNJm/7N7CGyrEz7Vzq3DY3Q=) 13: Jp0UMtlRd8ZwvCOhqfD_ADrBKLI.roa (hash: mR/skrtMXmYrNl0WIwSjaGFdp8tWtvYO7SMbQmVqf6A=) 14: MguR744HGmOoEMdrlIzPUQQNYfs.roa (hash: Ve4h+6FdNbKYu9bYvRE5Dbmxn7BK8VvZ01cl79qxeJc=) 15: PcsvqoFss2sjt8KP5dE_s9b5R94.roa (hash: 2VnZlh9WN/gvQzrunwflGg0cw7Ym2P+YsV38lpVH0Gs=) 16: RySOnwd5yNUvkpOdlWzbq8gD58I.roa (hash: pMm1Q5jN9tu+9MZBtGXjdw1riel86JfdVWVMRs8pgEY=) 17: UNh6P6o5iukKyngJ923OKln6euE.roa (hash: N5ex54TauXC69hfaRmQEjxuyvZMfnOJEFnqZWvxkb8A=) 18: XXSSAkKxHIvFb1XDuVgAK48p7oI.roa (hash: p4mx1wVBI5jfCHEyW7RDH/AavCZwfWlBpFNbLCutJY0=) 19: Y5c3qkFCpv03-ICNcuAXdHgS3cY.roa (hash: XJDCD20D/hEgr09ZL/gnt/32UJp0okrjk8WR5CoxVyQ=) 20: Y6R9BZ4jbo-SeP4MKzTkUzdRmEs.roa (hash: T03e4fff7Y/zXUb0yVVk+lWsYWaY+JCxTDBS+p8Hygw=) 21: _Ja5VSGfVwaP_RssqzUEn4YMRnM.roa (hash: IopLtmpqrddq1TLUa3ph8Vkd8Gg6tUuEa1Mf8B120SY=) 22: dGJLbAT2BEW_BeGKm3wcElWmzQM.roa (hash: LpwWMhfDphnGaoTK0Cq8sMyGBvrawhClQxZfQfT1u7A=) 23: dSIvoRbcXmjEhaD-HdyHYcdmt90.roa (hash: JqFQVPXSWhIrd/AlZzo80JSKjqGLV5nybtYrZ/HoQns=) 24: fW0mZX2qVdA0eoUEboZhAE59bUE.roa (hash: stVjqf6xlyz/MOhoo6Rt330zmsp7vd4IC5S2fUEJ5WM=) 25: hVK512RaS7Wqoko0eCeNgWu9miM.roa (hash: tpa1Mpq3iNlKpncPJwo9VA05AS/nxDYqEa9TqaOOX08=) 26: kqDz7smZzEggwnOtTZ91wrlBE4c.roa (hash: OteTjZY0hrzoBDeoZG9laIbeOhFIt32mklvyy1YBT38=) 27: m9Q0QpkVO1rZKT8wIA-lB6ceYcg.roa (hash: yW9VuP+7IZqfB9uY1adWMtzwRUiSlhz/2UYbCN1BQSU=) 28: oqSgizr5ODUUGjBb8_Wzxokx-xk.roa (hash: Kl53NJDKPjecKCh1ZqXsoFCQIzYfPyjvOORgLlse+gY=) 29: qlt-CjR0Oi0L3lo2PS7A4jbvIUg.roa (hash: iydTkBpS1P6s3+CKe74qws4olK3ajXbhwYqoUw/uhBk=) 30: tdzsaKxsamCWBVwoUkqT8RggY6A.roa (hash: Fv0PNntXjBHiuO1Z367HBdmxJtFfh7CR44dwT354/lw=) 31: vFNkivgTExOsjU64HiM4VzsQFiw.roa (hash: DXIqZ5v2rgtSNx+D9s1xP6RBmK/3bmgJ3j5QKRP0qEA=) 32: wMbP2rODQDC-jcOXAyW7ktyAwFs.roa (hash: 9dxgb9cFX2rvzK0yUiEPPHMObwlTuLCycMbvyIulqKU=) 33: yNK_se_8Y1MH-IyQZOfpZj_aArA.roa (hash: Y/8odYpFkGDQCB6ybQitBRTCfwLFaWn7M7svPHhRrhA=) 34: z4dbT2rdI1MPHPzn2a4SSpvkt3E.roa (hash: pftbqIKgzEeVO9sl0LAVO5XHYPxIgJ6YwaN9JqNCTzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Jun 2025 01:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3d:9a:e5:3d:23:89:64:88:05:1a:ab:56:74:79:78:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Jun 5 01:00:50 2025 GMT Not After : Jun 6 01:00:50 2025 GMT Subject: CN=beb0c853f1d7345fe2861570cc0ff253880715eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a7:f8:a0:4a:7d:4d:d7:84:45:25:1a:6a:79: 1c:24:19:10:66:fa:e5:ca:32:83:4a:ea:dd:43:fb: e4:8b:64:df:a3:5a:a0:4b:ca:9e:fc:84:14:1e:9c: 3a:42:7a:e1:d6:e3:59:63:90:e8:0b:bf:ca:2d:20: 30:bc:c9:7b:32:a7:7e:42:8a:8c:6b:8d:81:89:3b: 47:46:d7:41:4c:d4:56:4b:d1:36:39:c1:9c:cd:d2: 6f:ac:86:d5:bb:c8:20:cb:61:c0:28:23:26:0a:6a: f1:99:21:83:6c:7c:a4:76:d4:9a:6b:55:b0:45:26: 2e:ee:d0:54:9b:bd:4e:51:d3:01:54:cd:16:7a:9a: 59:55:d6:7f:48:4f:af:2e:97:9d:a9:37:a5:31:f4: 60:49:e6:2e:7c:46:3a:89:56:66:34:15:6f:63:f7: 81:18:95:79:3d:65:0e:f0:70:b2:e8:6f:93:c0:c5: 07:e6:18:d1:0f:92:dc:36:5f:84:88:10:24:4a:de: 31:62:8e:e0:14:93:69:65:ee:39:c0:b1:f3:34:b1: 1c:c6:6b:2d:2e:d1:70:0b:7c:29:a7:2a:3b:b7:52: cc:07:c7:2f:a0:06:f9:dd:b3:e2:b7:7f:a3:dd:f5: ef:47:ea:e6:60:84:b8:f8:69:55:d3:3b:2d:1c:6b: a4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B0:C8:53:F1:D7:34:5F:E2:86:15:70:CC:0F:F2:53:88:07:15:EB X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:af:ae:72:d5:5a:bb:79:62:9b:bd:ca:39:22:d8:94:83:73: 09:bc:61:37:f1:e9:62:45:f7:29:77:52:fa:33:37:f3:b1:ae: 0f:10:94:8a:c9:dd:12:b8:5a:7a:79:c3:54:29:fd:ad:ae:60: eb:9d:7a:e7:06:03:30:c5:cb:b5:d6:3d:07:a8:8a:50:a7:14: 12:73:53:b3:5e:11:f8:85:f7:08:7c:93:aa:7f:25:8f:18:10: bc:4c:81:1c:72:e7:7f:6e:84:1b:52:c9:2f:89:ac:12:f6:71: 9c:f5:91:14:c7:48:33:cc:76:f7:82:ad:c0:9e:bf:9f:dd:c7: 82:00:5a:32:16:c1:f7:bd:14:c2:1b:ff:d9:fd:a2:6b:ce:c1: 7a:2f:bb:11:8f:57:f7:aa:c3:c6:c1:f3:99:d6:2d:85:67:fb: b1:c5:d5:f5:6d:38:17:ae:b4:32:b5:8c:a1:40:49:e5:5d:cf: d5:c9:ec:a7:0c:30:06:48:ce:62:c1:b5:ec:de:6c:61:fb:45: ee:25:75:2f:2a:bf:42:2e:10:e6:98:e0:18:bc:7e:cc:06:a3: 38:52:a6:c1:f2:71:b2:a4:2c:0e:a4:36:c6:cb:72:1c:43:51: e3:d8:ab:1b:6a:74:69:3a:46:b0:e9:c1:5c:b9:94:82:b9:1e: a0:20:55:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc9muU9I4lkiAUaq1Z0eXi5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjUwNjA1MDEwMDUwWhcNMjUwNjA2MDEwMDUwWjAzMTEwLwYDVQQD EyhiZWIwYzg1M2YxZDczNDVmZTI4NjE1NzBjYzBmZjI1Mzg4MDcxNWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0af4oEp9TdeERSUaankcJBkQZvrl yjKDSurdQ/vki2Tfo1qgS8qe/IQUHpw6Qnrh1uNZY5DoC7/KLSAwvMl7Mqd+QoqM a42BiTtHRtdBTNRWS9E2OcGczdJvrIbVu8ggy2HAKCMmCmrxmSGDbHykdtSaa1Ww RSYu7tBUm71OUdMBVM0WeppZVdZ/SE+vLpedqTelMfRgSeYufEY6iVZmNBVvY/eB GJV5PWUO8HCy6G+TwMUH5hjRD5LcNl+EiBAkSt4xYo7gFJNpZe45wLHzNLEcxmst LtFwC3wppyo7t1LMB8cvoAb53bPit3+j3fXvR+rmYIS4+GlV0zstHGukmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6wyFPx1zRf4oYVcMwP8lOIBxXrMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq6+uctVa u3lim73KOSLYlINzCbxhN/HpYkX3KXdS+jM387GuDxCUisndErhaennDVCn9ra5g 65165wYDMMXLtdY9B6iKUKcUEnNTs14R+IX3CHyTqn8ljxgQvEyBHHLnf26EG1LJ L4msEvZxnPWRFMdIM8x294KtwJ6/n93HggBaMhbB970Uwhv/2f2ia87Bei+7EY9X 96rDxsHzmdYthWf7scXV9W04F660MrWMoUBJ5V3P1cnspwwwBkjOYsG17N5sYftF 7iV1Lyq/Qi4Q5pjgGLx+zAajOFKmwfJxsqQsDqQ2xstyHENR49irG2p0aTpGsOnB XLmUgrkeoCBVnA== -----END CERTIFICATE-----Generated at Thu Jun 5 07:04:42 2025 by rpki-client