$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft File: KQn__NgaZryYtinUwFeSR2RfD-Q.mft (raw, json) Hash identifier: +0a3lBSgBFOyXPZM+2glZT3W/0r9trKqXYgf7mH3SOo= Subject key identifier: C5:94:E4:53:94:13:43:FF:3C:13:7B:5F:5A:4A:F5:C2:A8:7F:A7:63 Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4 Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4 Certificate serial: 0197391977B2FD41B1BB37F270BF8514DB99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft Manifest number: 159C Signing time: Wed 04 Jun 2025 04:00:59 +0000 Manifest this update: Wed 04 Jun 2025 04:00:59 +0000 Manifest next update: Thu 05 Jun 2025 04:00:59 +0000 Files and hashes: 1: 1bGM56MEcLFHsgzDo3baYK4aCMQ.roa (hash: oVXVqg3b1Z1hACKH4hIRJE0IPfCRY+hMDc2k4VQe4XU=) 2: 9qoftOkUQubHrr_5Y0O0OEB0jsk.roa (hash: NpXUbKfrAE82THRrSEt65m3odGmwe5q6Rv8hzF4EGTU=) 3: AFOcU_w_QN-XxQkkQfgesDtPy4Q.roa (hash: vuDPxy3QeT/X/Z21aASlCY+NXDSblPQKGqB5xLpgpdQ=) 4: Cdz1li8VqIIJV-m5kmfKj99Y7vo.roa (hash: Injt2qVEYstD1CFDA2RDhQ4n71XCzIHna09I/6r+g6s=) 5: ITP65m-ELAYrIziT1mqhAaKmFKI.roa (hash: TA6Lz6SPSkTI7bhEP+cVZ388px4lL7fPEARYK+dRI9A=) 6: KQn__NgaZryYtinUwFeSR2RfD-Q.crl (hash: xfso8XiZae+3DNyvz8Lib7foVg6aVLtgduaJmaEFUa4=) 7: M10xggNFEiYKiCOpaRSr9Q_E5jI.roa (hash: or9G2RnVnC9nrrlnpNuQsb0VwFoCXmXB+b6uwP7Zhns=) 8: NkPgAsBwPPi223h4iUw2t-cEvWY.roa (hash: ynaAeCHhaF8I4fYynmpFVpN8gHRf6H4SVtkjV4EJ3VY=) 9: OFoxo4tSb8S4WTnb9Arp2ooyRvw.roa (hash: RZrf7jypWJt6TvS7MztBYdDEvw+Yp5dHCbAbuiSrNfs=) 10: PxE0dP6xcqVNoXMtC1a5Dmb6n-s.roa (hash: Ybvp2SkTVaVfqhDzUmHlRC82UcW4sX3toG9HthgZ+Es=) 11: RFQq8CL00Iuq4i_jx3Jd0iwOLHI.roa (hash: +y+KD8Sa0MVn4eIucYiZ7dhXT2uIb+hoC3jKlQ4uUUg=) 12: TI9rtNLD66XYwxwHXpdPJetrLYc.roa (hash: ujb2Pqco4C4UTnNLYGJAf0pytP8/IiyRIp98qQq1a6Y=) 13: U8lnC6TG0pv6pWZXKVHzbslUv7Y.roa (hash: en2pnR7bb0v314EN8AtTeDNZJOdRSB9qKOFTcoTcCf0=) 14: ULfjtaXZKeO21K8lDdoLHe5Lbts.roa (hash: Ky4d9tu18NCNsNUD91GQmMhDdLCi4CgvFfPWYH5+Qp4=) 15: WUnk7TNpoMRbrcKaZRtURt3p4fo.roa (hash: PjPxGwGWGX727ceFQzedXW06Hv7b8nuKhbmV/9bEQCI=) 16: X8iQP860aal3YLOybxReqwSyPWU.roa (hash: 8p2TloT9N3iJXhSo+Uh11LexFFF6Vzvsu6ANvx+UWDA=) 17: XvUgOjjL99J51pC_sC90Y2oxW38.roa (hash: c2LYASTNBV0y11dbQezPYJYqj9am3X4y+DmSJidna/c=) 18: cT-m8k4SDtvWHlQKpD65GuRYzTQ.roa (hash: r6RkMNZjMfYtE9PPmCf0mAK1eFJX+kttY3BaDf/aAME=) 19: tvd71H71vKZmhl1lUI4Wfg7oqjo.roa (hash: e5ndVp+pna8lqdjnskWIAOqf7gaAH2YiQgOHVw4SZNM=) 20: vS5j-9f_l8NB8D0F1O7CDV1036U.roa (hash: R1R99GD9Fbi68eCqK84dzkbtSynzzus+WGLpYqyYhxQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:39:19:77:b2:fd:41:b1:bb:37:f2:70:bf:85:14:db:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4 Validity Not Before: Jun 4 04:00:59 2025 GMT Not After : Jun 5 04:00:59 2025 GMT Subject: CN=c594e453941343ff3c137b5f5a4af5c2a87fa763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:79:72:72:1d:43:7f:64:80:3f:84:d7:ba:1c: d8:4c:7a:54:d0:fa:9b:8f:09:43:c9:36:45:e8:4d: 1a:c4:5f:a9:78:0f:c4:48:23:75:a8:8f:09:0c:62: 8d:b4:50:81:f0:3b:1e:1d:19:b6:45:63:fb:59:82: 13:51:9d:eb:e9:21:8c:4f:6b:1e:21:2b:b9:12:c5: 93:2c:5c:9d:d9:ed:ee:8c:e9:3a:99:76:fc:31:4e: a0:fb:9d:9a:e1:9e:25:8f:78:a7:44:47:82:bf:d3: 75:8e:27:bc:4b:18:a3:18:56:31:54:1d:5f:2b:6d: 34:d4:c5:f4:1d:8f:fb:c5:fe:bc:13:ee:b7:82:b5: 26:8f:c6:13:e5:30:a1:cb:c2:2b:1e:2f:77:19:1d: 33:62:46:a4:60:02:c5:64:2d:43:06:a6:7e:f0:70: 91:87:9d:88:80:d5:1c:59:6e:44:84:34:06:75:25: 49:38:a2:85:7e:14:0d:dd:f7:be:fc:42:d4:08:3b: 75:07:69:37:06:3e:c7:80:fd:0a:63:53:c0:66:4c: e5:1f:1b:93:37:30:af:8d:0f:ec:3a:d9:75:57:4a: d5:39:41:07:e2:2f:6e:cb:a8:d8:30:0c:52:05:46: 6e:9d:d9:f1:8c:8c:60:38:68:2f:d6:c7:a9:21:71: 26:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:94:E4:53:94:13:43:FF:3C:13:7B:5F:5A:4A:F5:C2:A8:7F:A7:63 X509v3 Authority Key Identifier: keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:74:8d:65:50:c5:36:c5:27:2c:b5:8e:80:fa:18:0c:8d:a1: 99:42:5a:8b:a9:21:5c:a0:e6:4b:71:7a:b2:27:61:ec:1d:9b: 9c:3c:1f:ae:49:08:59:82:11:13:9c:a1:ad:89:e8:fa:82:c3: 26:6f:12:ea:d4:f5:a9:de:f2:32:5f:2a:1b:2a:dd:f5:84:fd: b9:b3:81:5f:50:a2:b7:9f:43:45:ef:79:33:0e:06:fc:20:29: e5:7f:3f:29:35:0b:84:41:58:fa:df:c2:87:df:22:62:66:c1: 08:ae:0c:8a:22:01:a4:7b:83:dd:e2:84:e8:1c:59:9e:39:4a: aa:a9:c7:48:ce:37:69:07:5d:75:d3:25:4c:70:d0:77:d0:b3: 1c:0d:fc:d9:3f:8f:65:75:09:49:55:e7:9b:84:92:d2:de:bc: 64:b2:51:b9:8a:4a:10:3e:bc:b0:2f:11:26:cc:77:ac:b4:99: d3:5e:b5:79:11:61:f2:d4:6d:68:57:a4:35:ff:5f:5d:18:e4: 20:92:36:8d:61:bc:7a:22:f1:69:e8:87:18:4c:bd:7b:b3:7b: 6b:0a:72:89:e2:d3:40:63:76:2c:0c:13:49:c0:e4:3d:76:de: fb:ce:4d:f7:6b:5d:80:a0:ba:ae:27:f5:80:dd:ca:37:74:ce: 9c:9b:bc:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc5GXey/UGxuzfycL+FFNuZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MDlmZmZjZDgxYTY2YmM5OGI2MjlkNGMwNTc5MjQ3NjQ1 ZjBmZTQwHhcNMjUwNjA0MDQwMDU5WhcNMjUwNjA1MDQwMDU5WjAzMTEwLwYDVQQD EyhjNTk0ZTQ1Mzk0MTM0M2ZmM2MxMzdiNWY1YTRhZjVjMmE4N2ZhNzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHlych1Df2SAP4TXuhzYTHpU0Pqb jwlDyTZF6E0axF+peA/ESCN1qI8JDGKNtFCB8DseHRm2RWP7WYITUZ3r6SGMT2se ISu5EsWTLFyd2e3ujOk6mXb8MU6g+52a4Z4lj3inREeCv9N1jie8SxijGFYxVB1f K2001MX0HY/7xf68E+63grUmj8YT5TChy8IrHi93GR0zYkakYALFZC1DBqZ+8HCR h52IgNUcWW5EhDQGdSVJOKKFfhQN3fe+/ELUCDt1B2k3Bj7HgP0KY1PAZkzlHxuT NzCvjQ/sOtl1V0rVOUEH4i9uy6jYMAxSBUZundnxjIxgOGgv1sepIXEm2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWU5FOUE0P/PBN7X1pK9cKof6djMB8GA1UdIwQY MBaAFCkJ//zYGma8mLYp1MBXkkdkXw/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1FuX19OZ2FacnlZdGluVXdGZVNSMlJmRC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9kZTMwNDEtOTUzNi00OTJlLWE5Y2Qt ZjJhZTdiYzdlY2M1LzEvS1FuX19OZ2FacnlZdGluVXdGZVNSMlJmRC1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9kZTMwNDEtOTUzNi00OTJlLWE5Y2QtZjJhZTdiYzdlY2M1 LzEvS1FuX19OZ2FacnlZdGluVXdGZVNSMlJmRC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASnSNZVDF NsUnLLWOgPoYDI2hmUJai6khXKDmS3F6sidh7B2bnDwfrkkIWYIRE5yhrYno+oLD Jm8S6tT1qd7yMl8qGyrd9YT9ubOBX1Cit59DRe95Mw4G/CAp5X8/KTULhEFY+t/C h98iYmbBCK4MiiIBpHuD3eKE6BxZnjlKqqnHSM43aQddddMlTHDQd9CzHA382T+P ZXUJSVXnm4SS0t68ZLJRuYpKED68sC8RJsx3rLSZ0161eRFh8tRtaFekNf9fXRjk IJI2jWG8eiLxaeiHGEy9e7N7awpyieLTQGN2LAwTScDkPXbe+85N92tdgKC6rif1 gN3KN3TOnJu8aA== -----END CERTIFICATE-----Generated at Wed Jun 4 12:14:02 2025 by rpki-client