$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft File: d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft (raw, json) Hash identifier: 6WHXbxybKVTPmncmCBZ8GP6gmvEIqznFw3UUSet3kzM= Subject key identifier: 2C:D9:3F:68:C3:D1:60:F4:DC:CF:96:9C:29:09:CB:2B:61:9A:98:EB Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84 Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784 Certificate serial: 019732E04BC39CDFC8B5C7750795EFE6C3FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft Manifest number: 15F4 Signing time: Mon 02 Jun 2025 23:00:49 +0000 Manifest this update: Mon 02 Jun 2025 23:00:49 +0000 Manifest next update: Tue 03 Jun 2025 23:00:49 +0000 Files and hashes: 1: 6OE9SiBXfj4CrhXl1IhIqgML0B4.roa (hash: I+4fgDm8h6Gl2QM6feCA3XQ/vqIKkpArxBydFon12po=) 2: BFOakhPnuL0L7mtZczMTb1C4Te4.roa (hash: IN5v1SH94sVq7W7KBSVjen81W9F0epiDV9txEvMGmR4=) 3: DhQS4vOYDF6H_8OWg4SHjhbpiRI.roa (hash: fNK2myED2q9q2doGfvQzo78kwtzYcmHRZJlkYm51Txg=) 4: G3n1fmpvxWOzjbB1db8Vj90w1z0.roa (hash: V2uHJgqy+vP8ErQ/TWqwyd3ruJ62gj12CXBlt1NsI04=) 5: GbLhCb7LtppG03iqg1JrQPxPGik.roa (hash: Nhpdg3evar8Wgs90fQIra7qhNWc+KSECGcaKhukai1s=) 6: H9YsoSVqujSzIl1jC8bNi8oWfWg.roa (hash: 0dy9ycp0QLf3d25OkGOB0YPWnPgDY1tgsWVu7Y1vx58=) 7: JEzxWWenT3GfTXkwl9vUyNpy6Ns.roa (hash: qgR7gOl4WgMIXNhv57wtr5r1gDfvvLSYLQY7icBJ4YU=) 8: KlkPll-2eT4OEc7JEVeBjKeKFvY.roa (hash: D5i0rk6m1yJPb6vmyolamvrhIx1gvzHDS5KpZlKyc8E=) 9: L5WtoV3BFHEh7ee302wn8vi_VdY.roa (hash: aeS2KxRTadI0bQvnm7vgoZxmnQFSj7clIU01Ondzlk0=) 10: Qd-7MuUT4GYh0J-MfEHgFFh8b4Q.roa (hash: c/5l1GiDiCB7mLH+5TWxHZaDa+CFb25O/VddyUT+Q4A=) 11: RodzSko_vmyzPqCKuCKq3cJkGq0.roa (hash: UPyFlyEqZNcFpcK848BEBEE7TBg3Ypn/rHLne1CII1k=) 12: VweKz9j23hz-Ksk5OZcJDAktVRY.roa (hash: ymNCGzRMIuCrkxBZjyiuwPjst5RrxUcCCAVY7LL5IWo=) 13: XQuJXpDkA9qYgxcQ38huwth57wA.roa (hash: DXlOkVbY/RHDCgHRhEXU+SDyImy4MVnIFTYuOjrcEzE=) 14: Xug-JWqIvU_cGZO2X23AwQGwo1E.roa (hash: yZB0hX1SHdmsQw8VPl7LdiQvKzJkBdYGo5TH1U0pXwc=) 15: a4N6uZ3zLxFcWudvf4q59eJt-Kk.roa (hash: A/Eckh4mmsJ3JlwelGysLbD+UYW4yWmGq8d/OLHRzNY=) 16: biEUqCkAyoPq-Mnm3P1_OvhDdi8.roa (hash: Gi+zixTezsMvQDObpXCaUkc6hzyFUma3jDwHSH/UkhU=) 17: bkuVFSmwR5rEQDdMTdBk_JXXGss.roa (hash: 27OhIF6o+zBfja35/NnhhZLHyv4jDAhBThs7wTkygh8=) 18: cmTeW-ofpNY8BjH8cXTtwhADRzA.roa (hash: SuBfMr197wymIhNTs9zfHdUIhpZWN/FfTHb7Y4F5q/Y=) 19: d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl (hash: ctExavH4PLOATOLeyH4TG4q1yn8bEPzkHgf8D0bA+OU=) 20: jVD0Cx22C6rtJhjEyMwl_d7ttOM.roa (hash: vrC9crcbkmlgTTSHswR4Ww7gI1l8vbnHNsq1l2jd/ok=) 21: kE7edc6RxVB8wHBrlQuyIVRBSOE.roa (hash: VgCrc55fFSMPGAF1+eEmgsiO+WwjxfM4Lli8mq5wNmg=) 22: ktYyB7Lo8mei1Js5I-I0yf-MCXU.roa (hash: Wuqa50eBmMkD+O8hs0aB4Jfbv6/LdAF4VRAO0szb7/E=) 23: nTYZ-KMsZnRAOylEgWxzRgkqcjE.roa (hash: G6392WelkXUUGAazTyZCXqq/F4O82Q1Be1qAJMLhnCI=) 24: o1ISKkD-Tnv8WDLjnHzvZxb8P6c.roa (hash: h+vO7xJkIP0Gi0X6/S1jhxnU4ZRO9Brsr/xSv7WCb00=) 25: phj8xSqpRWUthExdTnPQzXh3IiY.roa (hash: r7FDjUSXURVGsc44gHgkOSYVSnZ1xgiM8t2uj7Mcguo=) 26: tzNmVvB2-Kb7n7f7uGfrlaT_5N0.roa (hash: /5iZIN6C0RTqyaoEd2UqC7lQwSHOOr0DtjWIfNsZ0ig=) 27: y7gAm7kghjHHyhd8lNyuOvqL-gE.roa (hash: WTPaSKHOX9uHT0vFATOWJ6Sa/T+XEBB2nCNbOZzZ6VI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Jun 2025 23:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:32:e0:4b:c3:9c:df:c8:b5:c7:75:07:95:ef:e6:c3:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784 Validity Not Before: Jun 2 23:00:49 2025 GMT Not After : Jun 3 23:00:49 2025 GMT Subject: CN=2cd93f68c3d160f4dccf969c2909cb2b619a98eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4f:b4:39:ab:66:9e:00:4d:bf:c6:a6:da:e8: 36:e9:ad:ed:58:fe:48:9b:e6:46:af:77:f3:5f:7c: d8:b0:9f:93:e7:f0:9f:5b:4e:a6:28:21:c4:13:57: ab:0f:9e:2c:6d:20:b8:39:ce:58:80:89:9e:da:86: 10:35:8c:70:0d:9d:77:a0:ea:70:5d:21:0c:20:da: 6a:05:6d:22:eb:12:77:c2:fd:3b:42:3c:ab:e3:66: b9:f9:f0:a9:ae:84:30:62:74:e4:5b:35:eb:ef:ab: 4e:36:b8:6d:a2:2e:60:66:d9:f8:a3:85:66:6c:f9: 3a:35:cd:4d:c6:97:ce:36:c2:f1:20:8b:c6:4a:6e: f5:0f:7f:49:90:db:f4:89:e5:93:ed:d4:a4:f8:20: 8d:a4:52:a2:db:ad:a8:03:ce:63:2d:c7:0a:54:a4: f1:ae:4c:cb:a4:2f:79:4c:6d:64:10:36:66:ab:6b: e1:ce:e8:90:14:58:03:ba:70:f0:66:ca:24:83:eb: 13:16:dd:26:04:86:bb:2b:11:68:b4:80:6a:55:df: 1a:bd:6f:92:91:0c:20:fe:41:da:fc:d8:dc:0a:18: c6:c6:48:64:32:d9:9a:6f:2b:26:17:ab:3d:06:9d: bb:88:b6:94:4a:5f:04:28:1c:51:45:b5:8b:fd:0d: af:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D9:3F:68:C3:D1:60:F4:DC:CF:96:9C:29:09:CB:2B:61:9A:98:EB X509v3 Authority Key Identifier: keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:37:ed:97:16:3d:10:30:e2:4e:47:be:b8:21:37:46:d0:e1: 69:32:25:f7:d6:e2:15:69:59:8e:29:5e:9d:04:ff:52:ba:03: 67:79:82:58:24:c2:fa:bf:4e:6c:d6:63:81:39:44:01:75:d9: f9:f3:ce:83:0e:93:44:31:51:3c:9a:de:d8:3e:81:59:bf:47: 42:b3:bb:8b:b1:53:63:44:b4:75:8a:78:22:c7:3d:08:62:2d: 8a:90:fe:b2:96:c4:50:db:98:3b:cb:ab:f2:6d:5e:0d:e3:07: bc:36:6f:10:0e:56:36:3d:44:bc:bf:f0:4c:0c:6a:81:ad:1b: 8b:7b:f6:8a:62:8a:20:a5:d9:6f:07:d3:dd:65:d3:9e:fa:23: 36:e4:d5:e0:67:79:b7:8c:1b:05:00:83:bc:06:cf:e1:b8:b7: 7e:63:60:6f:d3:cf:60:9e:88:18:ee:bd:cc:58:54:d5:94:c7: ef:88:14:35:d4:be:80:6c:fc:a0:bd:1a:f7:81:8f:13:ae:b2: df:4a:1c:c4:f6:f7:f0:53:87:6b:d5:65:c5:58:d1:ed:b6:98: 0c:a7:28:3f:72:15:60:77:7a:6d:64:ef:b9:f7:aa:ff:7c:27: dd:f7:8b:2d:2f:a1:a9:a4:2f:eb:18:3d:92:00:0c:21:d1:71: c4:bf:bc:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZcy4EvDnN/Itcd1B5Xv5sP+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZjYxZmM3YzBhYjQxY2UxNTRlN2JjYjA4ZWY5NjIzNTFh NDY3ODQwHhcNMjUwNjAyMjMwMDQ5WhcNMjUwNjAzMjMwMDQ5WjAzMTEwLwYDVQQD EygyY2Q5M2Y2OGMzZDE2MGY0ZGNjZjk2OWMyOTA5Y2IyYjYxOWE5OGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0+0OatmngBNv8am2ug26a3tWP5I m+ZGr3fzX3zYsJ+T5/CfW06mKCHEE1erD54sbSC4Oc5YgIme2oYQNYxwDZ13oOpw XSEMINpqBW0i6xJ3wv07Qjyr42a5+fCproQwYnTkWzXr76tONrhtoi5gZtn4o4Vm bPk6Nc1NxpfONsLxIIvGSm71D39JkNv0ieWT7dSk+CCNpFKi262oA85jLccKVKTx rkzLpC95TG1kEDZmq2vhzuiQFFgDunDwZsokg+sTFt0mBIa7KxFotIBqVd8avW+S kQwg/kHa/NjcChjGxkhkMtmabysmF6s9Bp27iLaUSl8EKBxRRbWL/Q2vsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCzZP2jD0WD03M+WnCkJyythmpjrMB8GA1UdIwQY MBaAFHf2H8fAq0HOFU57ywjvliNRpGeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjkt ZWRjOWQwMmZhZjU0LzEvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjktZWRjOWQwMmZhZjU0 LzEvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzftlxY9 EDDiTke+uCE3RtDhaTIl99biFWlZjilenQT/UroDZ3mCWCTC+r9ObNZjgTlEAXXZ +fPOgw6TRDFRPJre2D6BWb9HQrO7i7FTY0S0dYp4Isc9CGItipD+spbEUNuYO8ur 8m1eDeMHvDZvEA5WNj1EvL/wTAxqga0bi3v2imKKIKXZbwfT3WXTnvojNuTV4Gd5 t4wbBQCDvAbP4bi3fmNgb9PPYJ6IGO69zFhU1ZTH74gUNdS+gGz8oL0a94GPE66y 30ocxPb38FOHa9VlxVjR7baYDKcoP3IVYHd6bWTvufeq/3wn3feLLS+hqaQv6xg9 kgAMIdFxxL+8MA== -----END CERTIFICATE-----Generated at Tue Jun 3 10:16:20 2025 by rpki-client