$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft File: v7CXo2wjJdEDH_QJG6AKhkWdQog.mft (raw, json) Hash identifier: G7n3/DQ6jU9Oet/l3uoNsGEeDJLJFFfxWG4XxW7wzEo= Subject key identifier: E9:26:F4:42:DF:30:DF:BF:9E:D3:CB:42:5C:10:73:61:A0:34:FE:4A Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Certificate serial: 01963E78D81CF7494677511C420CED968C77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft Manifest number: 1509 Signing time: Wed 16 Apr 2025 12:00:29 +0000 Manifest this update: Wed 16 Apr 2025 12:00:29 +0000 Manifest next update: Thu 17 Apr 2025 12:00:29 +0000 Files and hashes: 1: 0Oc2gUlOBhHggQCKLFtd_Q9SZu8.roa (hash: lO8VRv7zTZ1lZGexXwpCSSefCLh4/ylUfznYotZ/r9I=) 2: 1-SnnIDOhH63HQ_N0BxypNJP3QjU.roa (hash: fAjpmK6Zca137o7vGKPycBeoqRjl3sX6zuEiOW/w6J8=) 3: 1-tVuMhvJHoeYNSWvwIs4Uj-ZhRk.roa (hash: ZcAfnmmPqdN3AkoVqXCV/iL8CT5WscJ/XlK/uMPt5lg=) 4: 1yKKrsNupGDzzD03jZOpe8iPhUA.roa (hash: HrCCQdsLhhK0Dd1/JhgsMNYCYEDcKrntK3e2NJtO0xE=) 5: 7l7s34fjkn1jL3Cf38Am0uWsDxc.roa (hash: RQXv8xonP+6ByiA9mMkcu2T5Ofx+p+iBRXco1axJ+is=) 6: 8fRQ2gaaSUyxlPfMmZU6YlBuF9s.roa (hash: J9iYhZ57NpzmVPmwg60w1m9TXW93kheuWUSOq5fqcNo=) 7: CYNZ0RAHrT9vV8_0mrfX5LM1kug.roa (hash: O/PKWyYrv2+2Dwkphq4C7HezWG7bAEi2rS0D+m+yIdU=) 8: MhqcPUVWdGpPrfIWk_ee5vpXfV4.roa (hash: VZyy53zNRKBJnQR8hOjgwk1ZMB+3U3h7IQWl1MMyJAE=) 9: OnRHsiqDeR9lPOPphyyOmOlqHJI.roa (hash: sc+Pmya8TqVV8sQvDFxWsBcLjxza8djqPlBaIMjD3rA=) 10: TbvHnfpEwil0k-m-bT5qxin7QgU.roa (hash: eMD2C00X6snjPjRp1k8vdynVDBwXZs3jHeKCcB71/uI=) 11: U7IGGV-QzeZyFI43ALHSLR0fRT4.roa (hash: YV6O4jGhX6w23lUDlEnTBaeFdLwSgpK6hJDxevkHnB8=) 12: WXYX5xAiYzJj-J1cJJRJMrPl1lc.roa (hash: eRbcD2eGlg7uugMn/bCwDLTg5dFFAb5lQYD2uRhlGzs=) 13: a-yIKeqgoYQNBR0ZqftsK2VKwtA.roa (hash: rYqhW3CVRIKIDuB7VC8t0ykZxEcqYyXyUHcCODKusRw=) 14: aEX6iGvtmMCBLbcN3D9lR9wWfYs.roa (hash: ck3g/sMwdLbMyNkBAAhpjxk0gLfl6oyVxwY3SE1wY/I=) 15: clP1LLso4z020v4QpmTmPRbZSto.roa (hash: lQLaEJcBPi63juWNagsHVyBgAJjdQuoynWou1IAm/GM=) 16: cvexNa_0mj6FW8KZpLGAFQIE4OA.roa (hash: iCleYEjTV16uifIQzD0T3cEabw9bGQHX0EZMLPEVxN4=) 17: e6KXF5wF0vO-qqTzdKeyh2Ean8Y.roa (hash: KHUWWv5iYnIrkVVVgtcwtIxqcrf8XOGEsuNQcxfs8gw=) 18: iX51NeJFLA8hZbYydiWCSJNdBac.roa (hash: feK/rKksTFQbgNdFYUDfTjFuIeyOIK8QXCIqWjoXBaI=) 19: l5nptPnNKKQFhoiS91lJWqnWlyE.roa (hash: e570cnA3CxKqJo/gWfnmYUg3TNwae9HIQvRpHl8vuuY=) 20: ljnA30NR9xOfROLBgYNtk3JZLTo.roa (hash: j0TBP2+nuBSwHuaX2USrAFWl7QAm3LV+oRIFPpLHIgA=) 21: m2LdD5mJb9uSRMZpWCDvnGsS-1Q.roa (hash: J5WFUDon+cM2DTrsQDK1CHd33XsZFilcmheGufzHxHA=) 22: mclNf4bSFt9zruWTpd4m4MEyVzM.roa (hash: XlAEFr1TWS3BT/lafylN5Pl3NVyaBtZCZ/ZvLEzRc/k=) 23: ocfuXCVMkG1iC3B_UfKU4_eAETA.roa (hash: sqzdBjIbz2nHdeb6vTsoG89AvTmuvfRmTuCYXqV0hik=) 24: piCyct0NVy-piTUDW9-m-zFaGCY.roa (hash: vC+LbNogTxwCzmTJZpmElrpfct/lmLrelfVwT361cKc=) 25: v7CXo2wjJdEDH_QJG6AKhkWdQog.crl (hash: wG2lfI09ddLby4pAzjzE7USIrYnYqAVhy/C7aIO3ROc=) 26: zIqL-e-xuHByBuNpYQeVAN56dIk.roa (hash: DfRfhMBFYRjS89naokHSrKzYfuZi0JN2/uXaKrvL2KE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 17 Apr 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:3e:78:d8:1c:f7:49:46:77:51:1c:42:0c:ed:96:8c:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Validity Not Before: Apr 16 12:00:29 2025 GMT Not After : Apr 17 12:00:29 2025 GMT Subject: CN=e926f442df30dfbf9ed3cb425c107361a034fe4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f1:c9:a6:a2:60:2b:0e:38:bb:ef:7e:27:80: e9:c2:a2:2e:68:dd:f4:bd:6d:e7:f2:00:f2:a6:51: de:f6:0d:b6:b1:55:57:10:30:db:ae:02:6c:d3:e1: 9d:e8:dd:f1:85:2b:a0:8f:36:53:2f:57:a0:45:c9: d2:60:2f:07:e1:b2:38:13:86:34:76:48:5d:71:10: 5e:b7:73:b1:ff:1f:53:3a:dc:e9:73:0b:30:0a:36: a6:22:7d:b1:bb:00:fd:7c:9d:4b:8e:b8:1f:cd:99: c3:af:76:87:1c:70:e5:71:32:30:fb:a5:93:14:a3: eb:0b:2e:09:b5:7a:15:b4:2f:53:a8:96:ad:3c:a8: 8e:6d:15:7f:a6:32:61:fe:3c:11:40:41:51:51:4f: ad:a7:81:c3:46:02:0f:fa:ff:ec:d0:a8:a2:71:df: 11:91:b1:64:16:8a:30:2d:72:d6:d6:b7:44:56:2d: d6:7e:2b:ef:b1:42:33:f7:ee:24:1d:ae:d4:0d:11: 04:b2:12:2a:e9:cb:ce:c5:1b:c5:3a:be:4a:37:6d: 5c:4a:53:c1:00:9b:c7:0e:6f:07:22:0a:b4:35:7e: dc:74:7a:ac:36:e6:13:e8:19:99:3a:15:07:12:17: 3a:8d:b5:76:91:f0:eb:8b:8d:58:bb:b6:4e:74:ab: 73:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:26:F4:42:DF:30:DF:BF:9E:D3:CB:42:5C:10:73:61:A0:34:FE:4A X509v3 Authority Key Identifier: keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:3e:ff:83:16:35:63:51:44:05:6b:8e:2f:5c:17:be:08:4d: 04:55:8e:35:ba:bb:27:31:98:63:62:4f:d3:e2:54:6c:66:79: b9:1a:06:57:18:7a:d9:c4:ae:81:52:8a:ab:35:79:58:91:d2: c8:91:ea:a6:1d:1d:12:38:3a:8d:03:25:90:2d:b0:0a:fc:4a: 81:36:17:0f:63:7e:b4:34:38:5d:a3:e0:68:c4:b0:ae:00:0a: c1:f8:98:4c:e3:e2:97:17:bb:7b:38:52:6f:a8:f1:8a:f7:ff: 24:3b:ec:20:24:b3:a4:81:fb:c5:90:e3:d5:00:db:99:66:70: 0a:2a:82:e3:c2:15:cc:d4:7f:b6:0b:ed:6c:98:59:7f:a8:84: 2c:f5:f2:49:40:35:15:75:e7:be:9f:77:a9:35:03:cb:dd:4c: a3:6d:6f:01:d7:b1:83:33:d4:1a:57:43:40:5b:0a:53:e9:24: 28:75:25:be:97:e2:b2:99:59:bd:91:9f:f2:b4:d2:b2:f1:53: 51:ef:9d:3e:c2:31:08:bd:50:00:bb:f7:6c:0e:d5:ff:59:b5: 8c:54:02:5a:7a:71:a5:59:33:34:0b:28:75:df:ce:64:2f:f3: f6:5a:c1:fa:e0:0c:f1:9b:eb:fd:ae:71:2d:c2:a9:ce:42:2e: 76:28:3d:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZY+eNgc90lGd1EcQgztlox3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5 ZDQyODgwHhcNMjUwNDE2MTIwMDI5WhcNMjUwNDE3MTIwMDI5WjAzMTEwLwYDVQQD EyhlOTI2ZjQ0MmRmMzBkZmJmOWVkM2NiNDI1YzEwNzM2MWEwMzRmZTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/HJpqJgKw44u+9+J4DpwqIuaN30 vW3n8gDyplHe9g22sVVXEDDbrgJs0+Gd6N3xhSugjzZTL1egRcnSYC8H4bI4E4Y0 dkhdcRBet3Ox/x9TOtzpcwswCjamIn2xuwD9fJ1LjrgfzZnDr3aHHHDlcTIw+6WT FKPrCy4JtXoVtC9TqJatPKiObRV/pjJh/jwRQEFRUU+tp4HDRgIP+v/s0Kiicd8R kbFkFoowLXLW1rdEVi3WfivvsUIz9+4kHa7UDREEshIq6cvOxRvFOr5KN21cSlPB AJvHDm8HIgq0NX7cdHqsNuYT6BmZOhUHEhc6jbV2kfDri41Yu7ZOdKtzJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOkm9ELfMN+/ntPLQlwQc2GgNP5KMB8GA1UdIwQY MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It ZWNjNDliZGMyYWQ4LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4 LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATj7/gxY1 Y1FEBWuOL1wXvghNBFWONbq7JzGYY2JP0+JUbGZ5uRoGVxh62cSugVKKqzV5WJHS yJHqph0dEjg6jQMlkC2wCvxKgTYXD2N+tDQ4XaPgaMSwrgAKwfiYTOPilxe7ezhS b6jxivf/JDvsICSzpIH7xZDj1QDbmWZwCiqC48IVzNR/tgvtbJhZf6iELPXySUA1 FXXnvp93qTUDy91Mo21vAdexgzPUGldDQFsKU+kkKHUlvpfisplZvZGf8rTSsvFT Ue+dPsIxCL1QALv3bA7V/1m1jFQCWnpxpVkzNAsodd/OZC/z9lrB+uAM8Zvr/a5x LcKpzkIudig9hA== -----END CERTIFICATE-----Generated at Wed Apr 16 19:22:16 2025 by rpki-client