$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft File: THhEq-9xHCMshPg8gHpCCvOARyg.mft (raw, json) Hash identifier: h39YDMKM53ZGIhxaqAfuQZ+PABJXcaa6An/ZTmNPZYk= Subject key identifier: 23:83:C3:D4:F9:07:CD:00:C8:AC:5E:DF:3F:47:A6:AD:A2:15:09:7E Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728 Certificate serial: 019747E739ED1065C72502C69F8F77DA946B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft Manifest number: 1585 Signing time: Sat 07 Jun 2025 01:00:25 +0000 Manifest this update: Sat 07 Jun 2025 01:00:25 +0000 Manifest next update: Sun 08 Jun 2025 01:00:25 +0000 Files and hashes: 1: 159ekJmBdzbPKpbON9hMEymGJuU.roa (hash: QP5wYUCm1hSjghfra2oVcPBPcr/BrQ1M69D/IBh13Ek=) 2: 788_6eQ_xFNLe9_wIK-pQKXpCzE.roa (hash: LF8TeWNVGROo8mUa/fN3lL86dQZtL7W6m2p1cv4RWDU=) 3: 7VL3TCVUHIkzVI-u_BV2H3VUTW0.roa (hash: 5DAqYiaH4HvpC1IHfjR7Nmgzznm6FMPuOC84EeBazuE=) 4: 8MxR-Tev1o1VL0t9VRgCRAf7vnI.roa (hash: acrlUTRAmmeUc2aIFqU4RxZwx6fjf2929QZq18A30Bo=) 5: DHF4t5PSRpk6qWKPy2mALhrDjIE.roa (hash: suENCv+FxMCoCroXS4u7UEipCrKhSFMxZ7eSrCqloAg=) 6: DP14eQdBJZ0IZ5xEuLsmxQbl9EY.roa (hash: I1RANQtOMkvey7c50zVN0sFWZ6sc3/FFShaZqQlcjW8=) 7: FetsHfbdUifY1TU89hnwoFpg5QI.roa (hash: ZHBz8QvXKu/jKruoZfTsft4ugiggH0hcJsS7NZeRumw=) 8: Kt5AY6bZ1gA0AyxYwkZX9eyBtTA.roa (hash: vEFM1Xuk52lqHbsTCEtx4tTiPZIq8w5DR7ss3hbOLsE=) 9: MfLf638cBMkfH5M2VRdb5zkozps.roa (hash: 2fcAYwjckXPjFWKMKBGwmwkGYgpmXwgfJsrW0TpRDWg=) 10: NOqs7ZQrrn3ai8o8Sfr5QgX_zoY.roa (hash: ewnWA3/QGkEv1H2zslDa2f3WNqSiX0NCN6++76C2dyc=) 11: RTDW_9ir78QV7tSH_VhKQZV9o9E.roa (hash: d4l0MWyE7MGz6KUyIY2o+vwNtkeh3WQEvCQ4JDRIKNw=) 12: SkDqJYtasnJYM-biaYFDlw-lbLI.roa (hash: SIZnkeDSwwVblW7CmwDd2pAiA3RYFWayoud1xIYiOZE=) 13: THhEq-9xHCMshPg8gHpCCvOARyg.crl (hash: ALeFMU2GZzJ15fGaQHwPXBP1Q3S7vV6nyJIiD/Xtlzg=) 14: Ufg6XzRgoNG-SJwB5vLfRpSdKwM.roa (hash: JG7/C3Qu/BlDNJo3Xbaaiz8UsqXv4SIf7aVJX/4oLC8=) 15: Ux9zLJtd4_p9NV0Me_W8PVyz43I.roa (hash: GS5Alel3iVAtxVyr3H/1KmbzeB55m9O8mdahO6mwu3I=) 16: V4n_ERvR3r7FSnduE0noOKeefts.roa (hash: LPIfQu7peWz7IwtM6LejZS6t2OBvUe9ksCubWX40zoU=) 17: ak_XLj7BZSfR9vOAnnvTOmDEr6A.roa (hash: ikKkuXaDQk5CUy5oU8HwbfJMv8LLvWp+LKDjQ5BFERQ=) 18: eV7DHZCofiB8XK6t9zdEW8QBmNE.roa (hash: ziPPnswaXIfrS3ugoGocK/TB+/DsS0Y8eyLBNQhW8CA=) 19: ehl3MzoakHMyAhI6D9Y3Cy-GPCQ.roa (hash: c/pdm8QJPrUaNWBntBuCKT5L6EGDpSv8U+KeXzAhvgM=) 20: etz2hZixJbP5i4gWcSwK7LRFSm0.roa (hash: He+gUSNkDpgM/YmAlWou/f7IBd7ClRDJZpOAAsQM4Gc=) 21: j4rh0ZB1TNetuBYRDobHojuhdfk.roa (hash: gG/GxtjjKSA1/GWHAwQGCjfaoi/2Fsi2k0vRIown77I=) 22: nRd2QQHJvxWvYt2MaDtdcdyAXq0.roa (hash: yZqn0BYFHogcQ5mr/kG0CSKrE+RjbicfkkCTMtc6QdE=) 23: pgzL98bXwq-9exs7N1Aw8lwmeJ8.roa (hash: xy+0YdokIF7xVDG+fNdt0bMI+vPVGsiM9WuUOpAJvfE=) 24: tl2CuMI8daX_Uy_0-dhV_jYIjok.roa (hash: fhgp+n0E4Y3FzjH1buSmXdmrrGnvYKzvAV0R9W80bHI=) 25: vTuj5nkiC_3i4jeecr0ZYlh6QFQ.roa (hash: hGNi9opDGQg4RKjrBzVyQfTDJbC2WxKz4FBHifedxJI=) 26: yJHEdUxsuxE5hka9evM6UogprJA.roa (hash: ISigKBqS2g0TxwqY9vjjEMwica/8G6mT5W+e6wBxj6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 22:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:47:e7:39:ed:10:65:c7:25:02:c6:9f:8f:77:da:94:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7844abef711c232c84f83c807a420af3804728 Validity Not Before: Jun 7 01:00:25 2025 GMT Not After : Jun 8 01:00:25 2025 GMT Subject: CN=2383c3d4f907cd00c8ac5edf3f47a6ada215097e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:48:05:12:2c:45:ae:e5:04:07:b7:6e:7f:a1: d8:26:b4:08:cc:2a:9f:93:ac:45:47:1c:22:d3:b6: 5c:2d:08:7f:05:62:96:f0:67:cb:2b:a1:a4:05:10: 89:65:b5:db:c0:87:76:4c:67:97:48:83:4a:3f:92: a0:27:dc:e6:b9:95:3e:87:ce:45:d9:e6:07:71:b9: 42:e3:bc:32:d2:9c:7e:b6:91:90:6c:61:f5:86:77: e0:04:a8:fd:d2:7d:a5:81:ac:b8:55:1c:ce:26:5f: 8f:aa:04:d7:a9:71:54:0a:1b:1a:69:83:7c:66:56: 24:80:a8:7f:a2:70:62:b9:8a:82:eb:dc:c8:83:5d: 13:ba:64:b5:33:cd:e5:46:b7:ad:9f:b2:37:85:23: 67:cc:dd:00:1b:88:f5:98:b6:8c:39:16:fc:c7:ac: 74:32:09:9d:10:1d:00:a2:4f:09:a2:55:7d:bf:03: ec:39:a2:44:c9:50:e5:1f:8f:4f:53:39:9e:18:24: dc:ea:8b:35:27:f0:8b:64:8b:21:5b:09:d7:ee:7e: 06:06:69:3f:ff:45:ee:63:3f:ec:48:cb:f1:56:4d: 2c:5e:c6:ca:d4:1f:03:f1:b3:8a:de:31:87:85:e5: 84:5b:ee:73:e6:37:7b:1d:51:f8:c5:13:76:78:42: 8a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:83:C3:D4:F9:07:CD:00:C8:AC:5E:DF:3F:47:A6:AD:A2:15:09:7E X509v3 Authority Key Identifier: keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:f2:41:fe:9d:ef:cf:ae:8d:45:ae:7d:30:d3:59:a5:2c:b3: a1:a5:b4:18:4c:12:e9:a8:6a:81:ff:09:99:b5:34:70:f3:ba: 02:34:27:eb:5d:73:f9:38:71:e8:61:f7:59:5d:fc:50:57:6f: 85:d4:10:c9:18:a3:0e:34:5f:b8:27:12:11:e3:79:26:e8:90: 34:16:49:3b:7e:a0:ec:6e:6e:19:41:46:4c:3a:42:4c:42:66: 24:ab:5f:2a:e3:33:b3:23:09:30:9a:2e:86:9d:6f:87:3c:1e: b0:e7:6a:22:4b:73:7c:78:99:94:ae:31:11:41:80:36:7a:ed: 86:6b:54:08:c2:82:e6:3b:00:f3:9c:ff:98:6d:27:f4:a3:32: fc:16:26:85:31:10:0d:e3:00:18:7d:f7:4f:f9:c2:f4:7c:3e: 39:1a:ba:82:51:86:b7:0d:65:f8:02:29:66:4e:bd:b6:fc:f9: 7e:8a:e5:2f:69:af:7b:5f:8b:6d:74:57:b5:72:86:56:a5:1a: 8e:74:ae:25:b1:f9:75:e1:80:ae:d8:6a:95:10:ef:f5:2a:5d: 58:27:8c:5d:bb:6f:ea:2c:b7:8e:73:26:e1:56:a9:ec:1e:9a: 09:b0:da:e6:fa:c8:0f:50:da:47:35:dd:b9:98:3a:33:ae:68: aa:53:15:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdH5zntEGXHJQLGn4932pRrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4 MDQ3MjgwHhcNMjUwNjA3MDEwMDI1WhcNMjUwNjA4MDEwMDI1WjAzMTEwLwYDVQQD EygyMzgzYzNkNGY5MDdjZDAwYzhhYzVlZGYzZjQ3YTZhZGEyMTUwOTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EgFEixFruUEB7duf6HYJrQIzCqf k6xFRxwi07ZcLQh/BWKW8GfLK6GkBRCJZbXbwId2TGeXSINKP5KgJ9zmuZU+h85F 2eYHcblC47wy0px+tpGQbGH1hnfgBKj90n2lgay4VRzOJl+PqgTXqXFUChsaaYN8 ZlYkgKh/onBiuYqC69zIg10TumS1M83lRretn7I3hSNnzN0AG4j1mLaMORb8x6x0 MgmdEB0Aok8JolV9vwPsOaJEyVDlH49PUzmeGCTc6os1J/CLZIshWwnX7n4GBmk/ /0XuYz/sSMvxVk0sXsbK1B8D8bOK3jGHheWEW+5z5jd7HVH4xRN2eEKKLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCODw9T5B80AyKxe3z9Hpq2iFQl+MB8GA1UdIwQY MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt ZGFiNmI4M2NmN2VjLzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp/JB/p3v z66NRa59MNNZpSyzoaW0GEwS6ahqgf8JmbU0cPO6AjQn611z+Thx6GH3WV38UFdv hdQQyRijDjRfuCcSEeN5JuiQNBZJO36g7G5uGUFGTDpCTEJmJKtfKuMzsyMJMJou hp1vhzwesOdqIktzfHiZlK4xEUGANnrthmtUCMKC5jsA85z/mG0n9KMy/BYmhTEQ DeMAGH33T/nC9Hw+ORq6glGGtw1l+AIpZk69tvz5forlL2mve1+LbXRXtXKGVqUa jnSuJbH5deGArthqlRDv9SpdWCeMXbtv6iy3jnMm4Vap7B6aCbDa5vrID1DaRzXd uZg6M65oqlMVww== -----END CERTIFICATE-----Generated at Sat Jun 7 07:43:01 2025 by rpki-client