$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft File: THhEq-9xHCMshPg8gHpCCvOARyg.mft (raw, json) Hash identifier: y/wCvsm4WB51GbryHmUoHRXDRxEfKDgmzGYDo7BcQzc= Subject key identifier: 3F:27:50:33:6D:02:DA:9D:78:FC:FE:5A:6E:5F:C4:E5:10:55:A2:9D Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728 Certificate serial: 01964CD99D9641365BC00AC500A3B960C301 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft Manifest number: 1503 Signing time: Sat 19 Apr 2025 07:00:51 +0000 Manifest this update: Sat 19 Apr 2025 07:00:51 +0000 Manifest next update: Sun 20 Apr 2025 07:00:51 +0000 Files and hashes: 1: 159ekJmBdzbPKpbON9hMEymGJuU.roa (hash: QP5wYUCm1hSjghfra2oVcPBPcr/BrQ1M69D/IBh13Ek=) 2: 788_6eQ_xFNLe9_wIK-pQKXpCzE.roa (hash: LF8TeWNVGROo8mUa/fN3lL86dQZtL7W6m2p1cv4RWDU=) 3: 7VL3TCVUHIkzVI-u_BV2H3VUTW0.roa (hash: 5DAqYiaH4HvpC1IHfjR7Nmgzznm6FMPuOC84EeBazuE=) 4: 8MxR-Tev1o1VL0t9VRgCRAf7vnI.roa (hash: acrlUTRAmmeUc2aIFqU4RxZwx6fjf2929QZq18A30Bo=) 5: DHF4t5PSRpk6qWKPy2mALhrDjIE.roa (hash: suENCv+FxMCoCroXS4u7UEipCrKhSFMxZ7eSrCqloAg=) 6: DP14eQdBJZ0IZ5xEuLsmxQbl9EY.roa (hash: I1RANQtOMkvey7c50zVN0sFWZ6sc3/FFShaZqQlcjW8=) 7: FetsHfbdUifY1TU89hnwoFpg5QI.roa (hash: ZHBz8QvXKu/jKruoZfTsft4ugiggH0hcJsS7NZeRumw=) 8: Kt5AY6bZ1gA0AyxYwkZX9eyBtTA.roa (hash: vEFM1Xuk52lqHbsTCEtx4tTiPZIq8w5DR7ss3hbOLsE=) 9: MfLf638cBMkfH5M2VRdb5zkozps.roa (hash: 2fcAYwjckXPjFWKMKBGwmwkGYgpmXwgfJsrW0TpRDWg=) 10: NOqs7ZQrrn3ai8o8Sfr5QgX_zoY.roa (hash: ewnWA3/QGkEv1H2zslDa2f3WNqSiX0NCN6++76C2dyc=) 11: RTDW_9ir78QV7tSH_VhKQZV9o9E.roa (hash: d4l0MWyE7MGz6KUyIY2o+vwNtkeh3WQEvCQ4JDRIKNw=) 12: SkDqJYtasnJYM-biaYFDlw-lbLI.roa (hash: SIZnkeDSwwVblW7CmwDd2pAiA3RYFWayoud1xIYiOZE=) 13: THhEq-9xHCMshPg8gHpCCvOARyg.crl (hash: 5Ep4dZGsqza5HZR8p3q5ojI2UjUq8voSqtzZRN474QA=) 14: Ufg6XzRgoNG-SJwB5vLfRpSdKwM.roa (hash: JG7/C3Qu/BlDNJo3Xbaaiz8UsqXv4SIf7aVJX/4oLC8=) 15: Ux9zLJtd4_p9NV0Me_W8PVyz43I.roa (hash: GS5Alel3iVAtxVyr3H/1KmbzeB55m9O8mdahO6mwu3I=) 16: V4n_ERvR3r7FSnduE0noOKeefts.roa (hash: LPIfQu7peWz7IwtM6LejZS6t2OBvUe9ksCubWX40zoU=) 17: ak_XLj7BZSfR9vOAnnvTOmDEr6A.roa (hash: ikKkuXaDQk5CUy5oU8HwbfJMv8LLvWp+LKDjQ5BFERQ=) 18: eV7DHZCofiB8XK6t9zdEW8QBmNE.roa (hash: ziPPnswaXIfrS3ugoGocK/TB+/DsS0Y8eyLBNQhW8CA=) 19: ehl3MzoakHMyAhI6D9Y3Cy-GPCQ.roa (hash: c/pdm8QJPrUaNWBntBuCKT5L6EGDpSv8U+KeXzAhvgM=) 20: etz2hZixJbP5i4gWcSwK7LRFSm0.roa (hash: He+gUSNkDpgM/YmAlWou/f7IBd7ClRDJZpOAAsQM4Gc=) 21: j4rh0ZB1TNetuBYRDobHojuhdfk.roa (hash: gG/GxtjjKSA1/GWHAwQGCjfaoi/2Fsi2k0vRIown77I=) 22: nRd2QQHJvxWvYt2MaDtdcdyAXq0.roa (hash: yZqn0BYFHogcQ5mr/kG0CSKrE+RjbicfkkCTMtc6QdE=) 23: pgzL98bXwq-9exs7N1Aw8lwmeJ8.roa (hash: xy+0YdokIF7xVDG+fNdt0bMI+vPVGsiM9WuUOpAJvfE=) 24: tl2CuMI8daX_Uy_0-dhV_jYIjok.roa (hash: fhgp+n0E4Y3FzjH1buSmXdmrrGnvYKzvAV0R9W80bHI=) 25: vTuj5nkiC_3i4jeecr0ZYlh6QFQ.roa (hash: hGNi9opDGQg4RKjrBzVyQfTDJbC2WxKz4FBHifedxJI=) 26: yJHEdUxsuxE5hka9evM6UogprJA.roa (hash: ISigKBqS2g0TxwqY9vjjEMwica/8G6mT5W+e6wBxj6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 20 Apr 2025 07:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:4c:d9:9d:96:41:36:5b:c0:0a:c5:00:a3:b9:60:c3:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7844abef711c232c84f83c807a420af3804728 Validity Not Before: Apr 19 07:00:51 2025 GMT Not After : Apr 20 07:00:51 2025 GMT Subject: CN=3f2750336d02da9d78fcfe5a6e5fc4e51055a29d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c3:4f:11:36:b5:f2:93:1a:5f:96:73:6b:d3: b5:7e:41:71:2f:fe:21:79:14:6a:fb:ad:68:2f:dd: 2d:c8:d3:75:1b:90:39:45:c5:3b:ea:6c:c4:15:8c: f9:bb:aa:7c:aa:ca:65:12:fe:ef:7c:df:12:a3:fa: a1:30:1a:76:a9:2e:1f:29:5c:c2:6e:00:26:86:25: 69:8d:67:22:e0:a6:2f:64:c9:31:08:3e:dc:d1:4e: c5:49:d1:7a:99:7d:b1:a7:61:85:c5:c7:57:e1:d3: 3f:d1:d4:8f:70:14:d4:d4:a4:c5:5a:c0:c6:50:fe: 18:e3:32:49:e8:20:36:bb:17:bf:9b:e1:0f:e3:34: 75:b5:7d:46:50:fc:ef:49:36:cd:99:96:88:12:6c: a8:34:7b:58:7e:e0:bc:81:05:56:5c:80:82:26:68: 64:25:a0:32:3a:0e:31:b9:9e:03:b5:4b:a4:46:6c: fd:d2:af:16:1b:10:6f:0f:a5:da:02:d0:fa:06:f4: de:95:7f:82:38:5f:b1:71:59:45:d8:93:80:f4:99: 07:08:84:5f:69:23:9a:1c:a2:f8:f2:c4:eb:e8:51: 52:78:8f:74:bd:64:37:b1:5c:eb:e5:22:c5:19:4f: 21:0e:4e:91:07:5a:fd:90:36:1b:ff:5a:e2:ed:9a: ba:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:27:50:33:6D:02:DA:9D:78:FC:FE:5A:6E:5F:C4:E5:10:55:A2:9D X509v3 Authority Key Identifier: keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:62:8f:55:53:0f:11:cb:a4:30:e4:e6:36:76:e5:d3:d7:1a: d7:d4:f7:49:b8:e6:fd:f0:1d:e2:38:71:cb:5c:d8:63:fb:f1: 63:c1:cd:36:15:75:65:c2:a9:f9:02:fb:bb:98:59:1e:4a:c2: 80:a8:02:57:ad:e8:c7:d0:4b:8c:34:35:ce:c3:b6:31:a9:09: 63:d1:23:a8:27:87:94:13:b5:f6:4c:40:c9:b6:a3:7e:cc:43: 9f:51:7e:a3:d3:93:3f:85:c8:0e:c1:e7:72:1d:56:8d:7f:8b: 85:72:78:a3:45:3e:f2:b5:5e:16:d2:76:ae:35:22:8b:73:1d: 4d:ea:66:ed:0d:3b:d6:3d:68:ea:12:4c:52:2b:a4:be:b7:bc: 1b:8f:95:7a:f9:77:f4:75:e9:2e:dd:5d:66:32:59:aa:0e:a0: ef:f4:a9:96:28:28:0d:71:9f:e0:db:8e:5a:44:bf:aa:26:60: e6:be:4b:a5:7a:60:ed:71:dc:8f:86:e6:6d:1b:47:ca:e1:76: fb:7e:a3:eb:89:0f:10:0e:36:ca:9c:4d:19:17:81:82:10:15: 3c:9e:0f:f8:cd:9e:31:c7:97:4a:81:8c:6f:c2:a7:0f:2a:73: cb:c3:e3:71:9c:22:c3:38:67:a9:58:f6:f2:5c:3b:c0:55:61: be:dd:91:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZM2Z2WQTZbwArFAKO5YMMBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4 MDQ3MjgwHhcNMjUwNDE5MDcwMDUxWhcNMjUwNDIwMDcwMDUxWjAzMTEwLwYDVQQD EygzZjI3NTAzMzZkMDJkYTlkNzhmY2ZlNWE2ZTVmYzRlNTEwNTVhMjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycNPETa18pMaX5Zza9O1fkFxL/4h eRRq+61oL90tyNN1G5A5RcU76mzEFYz5u6p8qsplEv7vfN8So/qhMBp2qS4fKVzC bgAmhiVpjWci4KYvZMkxCD7c0U7FSdF6mX2xp2GFxcdX4dM/0dSPcBTU1KTFWsDG UP4Y4zJJ6CA2uxe/m+EP4zR1tX1GUPzvSTbNmZaIEmyoNHtYfuC8gQVWXICCJmhk JaAyOg4xuZ4DtUukRmz90q8WGxBvD6XaAtD6BvTelX+COF+xcVlF2JOA9JkHCIRf aSOaHKL48sTr6FFSeI90vWQ3sVzr5SLFGU8hDk6RB1r9kDYb/1ri7Zq6iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD8nUDNtAtqdePz+Wm5fxOUQVaKdMB8GA1UdIwQY MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt ZGFiNmI4M2NmN2VjLzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx2KPVVMP EcukMOTmNnbl09ca19T3Sbjm/fAd4jhxy1zYY/vxY8HNNhV1ZcKp+QL7u5hZHkrC gKgCV63ox9BLjDQ1zsO2MakJY9EjqCeHlBO19kxAybajfsxDn1F+o9OTP4XIDsHn ch1WjX+LhXJ4o0U+8rVeFtJ2rjUii3MdTepm7Q071j1o6hJMUiukvre8G4+Vevl3 9HXpLt1dZjJZqg6g7/SpligoDXGf4NuOWkS/qiZg5r5LpXpg7XHcj4bmbRtHyuF2 +36j64kPEA42ypxNGReBghAVPJ4P+M2eMceXSoGMb8KnDypzy8PjcZwiwzhnqVj2 8lw7wFVhvt2Rdg== -----END CERTIFICATE-----Generated at Sat Apr 19 15:19:48 2025 by rpki-client