$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft File: um7Q-3syCDKsFYBTTHsmPzBOmBs.mft (raw, json) Hash identifier: 9xo7ExNUqyknlPfQx7yXZdQVH3QxWn3SGnKR9JMhxKg= Subject key identifier: 87:AE:C7:2E:27:9B:78:05:81:C7:F6:AD:A8:D7:0D:CB:7A:7C:47:C3 Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 019630F4D5A9C47CD3ED996DC04717B327E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft Manifest number: 1522 Signing time: Sun 13 Apr 2025 21:01:13 +0000 Manifest this update: Sun 13 Apr 2025 21:01:13 +0000 Manifest next update: Mon 14 Apr 2025 21:01:13 +0000 Files and hashes: 1: 06NSghyd-RfQfllOJ5ERAf7RZag.roa (hash: K/9Jk2p9txXgz2W0pBQzSeA+A3NB1VwxmrWVLGhwpqg=) 2: 2dPAufbhO8MYI_aYaSiQ223S-P4.roa (hash: h6W+EiR+fmRKkbzlRBzCKubEDQFry0Uk/nrdbeZ7uFY=) 3: 3ozxe3eCXT9JC_ZIJyhtuinyln4.roa (hash: gufLQO5o7Tk7ZZaE8OE4ZmY4rKilts70/MIEHSYdQtw=) 4: 4f_2xWjzr5fFrbiUmyj7b2GAR2c.roa (hash: 40fajzcms2HhTqbHykP7HgDBjZNVjd1JCZs/OBDeB3w=) 5: 51mfa4prfZ4aIFenwdh1tef3BD4.roa (hash: zRXMU/tcdvXFqHBSwYnaJo/sT01T39ww5SlzgBzMq4I=) 6: 9_2WrSSAKlN1EIPH4IL0OW56MrQ.roa (hash: o1bcqiGaGo6W2QG94hVI//R0YPuvhqmGXfJX8Qgac9w=) 7: 9hn6tYB1hGp5VS0kBTSMOtD8ABc.roa (hash: 2fucCKnDWpTEmrPqMmQsnrBxYHtoufXItgIN243OJxs=) 8: C5Bd8VWsABcOSIK7iAaVbeAto74.roa (hash: UFtvFbnPksU3f32VZVDCvar4F34zLCv2m0EpLitoWn4=) 9: ChAwhBWdFbK8H8OgjXlyx4EvkcA.roa (hash: S4V5zsfBw8Krxjs2yY7Dwj9hG1haukhzyaUt11satjo=) 10: DN3qiMWAkbxTvOYg-j1385pvluU.roa (hash: GuR7uK9EOmGeuRld6O+HBlrD3yhsw8UtG+WB0ocy/eA=) 11: ESoOanOemWaXIdUpJ0dGHUrH_eI.roa (hash: pABCCSi7bNCSXQc+TE7ByPE2ezfRsuJY9Lw7DPvUcX4=) 12: Eix1bwtpkh3DfRz10HNMwF0QezY.roa (hash: /tPs0X74Nztuoqdzxvgc+Rkd5OVF4g6dXydqRNkNKmU=) 13: GgWpcVuQcB3Rqpu4xIatLiANk7w.roa (hash: J4tkkEw9G4tBLPpuFam4guXUEl+6lIMfeuNV12F6G2g=) 14: I58Hs_8f85FK_FT8uW8jm1NBQEA.roa (hash: 1eLQQiRHfXYkm5iwzdRHxMNlhUtofu1CHp+dcbWo0/s=) 15: Ik6O3B7FjrBrAwWdNQilmgWzcwg.roa (hash: bOgvurD5h8ijhMvZNu0tCAvTWDZmQWqVikghJRX1T1U=) 16: JuHOqqyp6gPUNYRm3uhGk9D1za0.roa (hash: llqlHk2/9ecn2824xu4i9L0Xvy7NI+3x0axhhCRK9kQ=) 17: LZJCOwn77DXpbJDvlAzekT5apRA.roa (hash: +t4lT4iOzMOF8krgl8HnKOnttpxuNQB9BJNqFL0yj/0=) 18: M3ChRRCC95VWNUgT2kzwMTdPSS4.roa (hash: E6eER/DfbXmaLYyM9UUARrZCyqn2G0qstMCDWv5urp8=) 19: MvkXtMliSNZ4t0doOeJCt7yseKU.roa (hash: ywUFrH7OBGZw7qJ85x9kF2rMILkLc6SVWP6XkiZTaAM=) 20: Qak--g4cNpU6CoUjtQGbcVvopDE.roa (hash: N+RmhDxULogEXWrVUH8MMjtB+zv1gLSm5Ek5YZneh/g=) 21: SyFn9gXv-LiQEpx623FW7zp76Vs.roa (hash: TJf87iNCfO1Ewq8QElsjey5+veJYI8oBKv+M65Z4Cco=) 22: TkGlpc5Tn70aJVwhv7pNACfX1jA.roa (hash: btdfTVJmMqYsieIn46CF/cLd49A9Xyl8eSZFuUISFt8=) 23: YWatj6dDYX-fiuw6ePziaU4C0TQ.roa (hash: V8Z8+AX+rzz9xpEvpWsJlL9jJ/P0smo2rICd10IyVqc=) 24: _B1wZHtnKd18HaoeOE7IMpvthTE.roa (hash: GM2wXplOCIgkJTK+wMIqO8JhJE765YS5HF23fM9LJNM=) 25: _S6k1c_YZyTXV-QbiGNh2eJ9qek.roa (hash: DkdBRSksCprQfNdAaTY6NVmXsg3Z/hZACN3MJ2MSYoc=) 26: aXKFWmr05ujOACE-0dUG_c35U2Q.roa (hash: V2GbIAKcxdCncnWyBDIRBH2ulZIFWnPu4CLpIswEB3c=) 27: bJ5_3QBASsgKrYb1fEOP2pTRl-A.roa (hash: BdFbpQWd3ti+vlRHPZPpiX/PWbDrJqd23YLxBl37+F8=) 28: g2DFl2N-WdFrs9z950ghIm6CXgg.roa (hash: g4VcoYAo+P4AnCakQIRF1npt/PFP6SzCAGb+cSIm25Q=) 29: j1OR6cLV4AFRQ_Q8AYCC4jsEAYw.roa (hash: YpaIoCZ2JtRmpPYrq47DGeATMu5FRM2qhEbni9PeHgk=) 30: jv5AjQiEgUQOR9Bdu3vuXbWrMFM.roa (hash: 2DV2bTMok5nhASbXYW9C3vvtRvCp2zGEhY3zcbpmB4c=) 31: k3SD7Mo8S-wkCGjWHqkku78vk4o.roa (hash: nJKeC1C9D5VB3P7HR1VXT79mmOfAP2khl4fAaXBF83M=) 32: lMNVACJ-h1nsjjrfMh03NkCllrM.roa (hash: ivpqbHCSo3OaWnV7LbXMClcyXI+IHXLVT6OjKDwZgak=) 33: m9WFxaaoUJopCijrezK6Gq5Y4x0.roa (hash: IYAL/aevINvn/lzHc7XS8T3g/wDLEF6taIL5uE1kWoE=) 34: m_4FbtjHWVHft-KPpwBsunRcnfM.roa (hash: FOjLBFoO279KgrQxswrLZVJY7oVfxBkaRwq78/5efpE=) 35: oTPGJVYlb7GDuOecchScOtyVmK4.roa (hash: HxM+IsllX/8+gKO8ZDG7/ou6XQ0BBMHZq9SzkhezbL8=) 36: ooemiNKGVRy5RLKGSewCoVXtxhA.roa (hash: 50iBNWI3DGamOGaWNIoN0o4Mrbk721gvtsPT5f1uk78=) 37: um7Q-3syCDKsFYBTTHsmPzBOmBs.crl (hash: 5w2tHVBHwkQckVJqIK28JO18SQfarblIznV0ceunofM=) 38: wfV6g8bCyfjY-q8qOCb42jB3SVw.roa (hash: tdt9myrSVnnipTeZQJjpnWIHSj35hhKuPkiJkdRuRdI=) 39: xby6qjt0unPBaXjG7WI-Peg-jiE.roa (hash: KRd9ht/CIRbyrT8PG2G+CvkZ2u+/FF8umJVk4dxNy9U=) 40: zGfC91qQV1Kiw9lJXOxhhLdA8YM.roa (hash: Dw2IdvFg4+SBQDwswZOmKdsoBW8A8qVDYpgf92qGA+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 14 Apr 2025 21:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:30:f4:d5:a9:c4:7c:d3:ed:99:6d:c0:47:17:b3:27:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: Apr 13 21:01:13 2025 GMT Not After : Apr 14 21:01:13 2025 GMT Subject: CN=87aec72e279b780581c7f6ada8d70dcb7a7c47c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:34:74:a7:d0:7d:07:88:de:03:aa:2a:ec:21: 0c:6f:b1:23:5e:c1:0d:a6:be:9a:52:4e:f1:1a:07: fd:a0:8e:56:ec:fe:33:d8:89:ee:2c:e7:1d:4a:4f: b9:ac:de:b2:e1:86:04:3f:59:e8:c6:29:c6:39:fa: ce:c5:36:2c:9b:47:20:6d:d3:30:ea:64:ae:29:99: 78:af:e3:f1:70:0d:71:6f:dc:0e:7d:80:50:f1:8f: a0:48:93:08:81:5c:75:90:8d:c1:02:8e:5c:60:f7: 25:a3:77:fd:51:73:f9:34:01:f3:2e:37:f9:a0:18: 51:17:e4:05:08:1d:b7:01:b2:de:8a:14:c4:35:dd: 39:d1:7c:22:40:ec:e4:32:6e:13:82:2d:ed:05:39: 95:41:dd:bb:0f:32:90:ab:ff:2a:f3:d5:34:2b:99: 8f:18:f0:d1:a4:db:6f:d6:0a:05:83:ba:69:4c:42: 60:3c:e7:ec:ed:0c:1a:c0:f2:e9:4a:e2:82:2d:ed: de:5a:ba:22:79:39:01:57:1d:65:8c:16:22:27:b0: 31:c8:c5:f0:40:3d:4c:c7:2c:68:c7:30:5c:90:cd: 97:7f:2e:67:1c:6a:e1:7f:da:e5:09:57:66:e7:44: b1:5b:3e:1a:db:87:67:7b:d4:ac:fd:33:c7:83:30: 64:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AE:C7:2E:27:9B:78:05:81:C7:F6:AD:A8:D7:0D:CB:7A:7C:47:C3 X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a1:79:10:93:c6:b0:97:b6:26:27:67:a5:c0:1a:ce:27:c7: 13:47:4e:ed:de:3e:be:77:a0:b1:e2:96:6a:a0:cf:b5:b3:4f: be:5e:7f:e3:25:a6:ae:89:21:42:30:52:ee:04:2c:f4:6a:c6: 92:c2:03:65:bb:69:3f:b2:0a:51:1e:02:7e:ed:93:15:a7:9b: 82:2c:6b:58:92:1a:18:df:18:c8:0e:d2:3a:28:73:c3:af:d3: 87:52:d3:0d:89:34:76:ae:ee:4d:d9:60:d0:fc:e3:2c:e2:b8: 92:67:d9:14:af:2f:4e:56:37:db:7e:f9:7f:f3:c7:9b:17:99: 6c:a8:96:03:54:1d:6f:04:e7:7d:ac:f3:e3:e2:eb:6c:8e:0b: 8c:79:59:2f:c7:e8:ac:e7:ff:60:88:3f:fe:26:08:36:d8:16: d3:4a:ca:0a:86:ad:f3:d3:6e:ac:0a:f8:ac:c9:2a:81:8f:00: 5a:22:cc:58:a4:25:09:a0:7c:bc:05:24:da:30:fe:c2:f4:57: fa:99:dd:69:d2:e9:6e:50:00:53:12:8f:a1:e8:c1:4f:f4:cd: 03:c2:4e:50:fb:1d:ba:ca:22:a9:2e:de:a3:c8:f5:54:4f:78: 23:76:80:ba:93:fb:aa:5d:25:5a:22:bc:81:03:fa:97:ce:b6: d4:12:24:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYw9NWpxHzT7ZltwEcXsyfiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjUwNDEzMjEwMTEzWhcNMjUwNDE0MjEwMTEzWjAzMTEwLwYDVQQD Eyg4N2FlYzcyZTI3OWI3ODA1ODFjN2Y2YWRhOGQ3MGRjYjdhN2M0N2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TR0p9B9B4jeA6oq7CEMb7EjXsEN pr6aUk7xGgf9oI5W7P4z2InuLOcdSk+5rN6y4YYEP1noxinGOfrOxTYsm0cgbdMw 6mSuKZl4r+PxcA1xb9wOfYBQ8Y+gSJMIgVx1kI3BAo5cYPclo3f9UXP5NAHzLjf5 oBhRF+QFCB23AbLeihTENd050XwiQOzkMm4Tgi3tBTmVQd27DzKQq/8q89U0K5mP GPDRpNtv1goFg7ppTEJgPOfs7QwawPLpSuKCLe3eWroieTkBVx1ljBYiJ7AxyMXw QD1MxyxoxzBckM2Xfy5nHGrhf9rlCVdm50SxWz4a24dne9Ss/TPHgzBkXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIeuxy4nm3gFgcf2rajXDct6fEfDMB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6F5EJPG sJe2JidnpcAazifHE0dO7d4+vnegseKWaqDPtbNPvl5/4yWmrokhQjBS7gQs9GrG ksIDZbtpP7IKUR4Cfu2TFaebgixrWJIaGN8YyA7SOihzw6/Th1LTDYk0dq7uTdlg 0PzjLOK4kmfZFK8vTlY32375f/PHmxeZbKiWA1QdbwTnfazz4+LrbI4LjHlZL8fo rOf/YIg//iYINtgW00rKCoat89NurAr4rMkqgY8AWiLMWKQlCaB8vAUk2jD+wvRX +pndadLpblAAUxKPoejBT/TNA8JOUPsdusoiqS7eo8j1VE94I3aAupP7ql0lWiK8 gQP6l8621BIkZg== -----END CERTIFICATE-----Generated at Mon Apr 14 05:02:45 2025 by rpki-client