$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft File: iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json) Hash identifier: dc5zB3Swf2EjZW8/qkT4vAG98Lh6MQLknTfSWIPN68Q= Subject key identifier: 55:D8:02:A5:52:09:AC:D1:8E:D7:62:52:95:58:24:1A:C4:3B:5D:7D Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019608D458D450CBD609F445B15BD348F0E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft Manifest number: 14E8 Signing time: Sun 06 Apr 2025 02:00:56 +0000 Manifest this update: Sun 06 Apr 2025 02:00:56 +0000 Manifest next update: Mon 07 Apr 2025 02:00:56 +0000 Files and hashes: 1: 0EefvGTe-CgGPi3LClLG8zkw2Bs.roa (hash: pQ8xUeInwth0hYwUoerBSXG2avCvXMU1nbOP1RalcsE=) 2: 1CEIIYZi1BNa3oTJqmH_tyPw6vM.roa (hash: F6BLpQ1sJ4914gt6UycenluwMGJ0KK1fHxsO2ar2skg=) 3: 5VtvZUZnOiWWHOq4Bzt3fR-Uvtk.roa (hash: 0aZFtVAEpAa0F5d0HclFHuicWqZJwsnLbj2r28DzGwE=) 4: BR0WpUqyVlLFgCU-al1zzwTeWvY.roa (hash: YHXk/Q5pzaU5vFP/0ClS3O8XoVVM2YYOGsR9O85YzI4=) 5: CSCVpnD9UZcOY9dh51GQDiQtUDY.roa (hash: HjUHDCqkZKlp4khp1k6PV1nRwKGQqNvxyYIzG+YWGAo=) 6: FUSDgc58t7U4fuucmEPuEjO5Yhg.roa (hash: aS1RV6Hjz0mszrBpJALZA+zpAxzsSz5luvIAMzBTdPk=) 7: SVFExGqmN2rWr0pdHn2EBcXlt5k.roa (hash: YNeTDKYu1kVI5UITAgJVP4E8+UH/BHxBF+QWa3NBqu4=) 8: T3dYaQ_itGY8sg6N2piIETo4lNY.roa (hash: jr3iaS2h5oKJUS7JXvE4JXbV33q5i4nh8t/0oFzKNAE=) 9: UkcXR5GY1oJE8ql6EfUayHGo-5c.roa (hash: 7ieqNXiHBu4w3yGmh/1MmL46uIjoL27ZQaAgb0zIvtE=) 10: Ur9khRK7hCXitL3VAcUAYAEvce8.roa (hash: 9hx/PwnKPtBM0vXR/kqUYRApb3bCcTtpcvT1ZKRuh8g=) 11: UxCcWDIpfcmIxF4GEQqbNBWBqbU.roa (hash: d6xT2AVAtqIrXTNYslVlnC6liJTON2/El6rs3gVpHJw=) 12: ZNEy3K2T14RzRnaZT87Xby8zPg0.roa (hash: Z6txybaZLKHynJqOdkdyJnlPVvcmYHBvv/qyQ5MOK7Y=) 13: ZZ_S8bbdhWqNksgGcq7TK0C_O6o.roa (hash: cZSS45yPpwSAtlNorKOcZLYVgsI7c5iH/VGntyl+CPQ=) 14: gPum4DXKDMJ6BVlCRX41E_z1RtE.roa (hash: m+nmj8yFxwPSU4MC7F9QT+i5Cc+XxFDvykCgFkarI9g=) 15: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: 0jdA1kyrgwfB5cuYibxtxW9+33T8/+8dxyrDS0B/iZs=) 16: mY1ufwtGCljFF7lZ6CWRsYHr8SQ.roa (hash: g60/pAqTVBNRMpLoOtOl1CqOXpp6KEeIdA1Y9Rm5TG8=) 17: rTie_7PEv6-re-3-oCL-n4T2Vz8.roa (hash: k418fDoA6+KZQZvl5i4/4Kf1761FasBs1TWPOk46NN0=) 18: r_i4vXEqCp88npQLo5wupbGQvCU.roa (hash: 681bIL2hvemk9KcZlvxDEY+6W4gGDzfccxK3H8tBwKk=) 19: rupNQnzVXpHhZGo4k4orZsL9fsI.roa (hash: Sef19YxuD467IYWmHT5hBmXK8CI1St5Uce/fkYmJFrI=) 20: sjMZT67l8DT5c2OCQ0eZwsJvZOs.roa (hash: eE5iDtLrCkQogodNmuQSyO46uKWAFjSRZ5se0Gx5RvI=) 21: uMzAGcYGyFfYg0xRGgxEE1Lf-Og.roa (hash: RhGx8DQbnjV6ldE2V5DKIbOmTIylu6VhP3FkhLKG4ms=) 22: vpnzE36sGjGpThv2cGB-8JWt7A4.roa (hash: QD7ZgcH/2KUBCt+7GKIhMXGxia9FaAN7lUMkf7xzXUQ=) 23: wpVyG2veNXXiqvd9qbb56p6RhMY.roa (hash: A6UqxkMUpX9ZIGVbEYAfKZvH4lu0ByMng2y+/s3lvEU=) 24: yeb6qJrxDHxENE-5-YT0Ja7NZ40.roa (hash: oK8BFD89TrExTlZbJ/In7+i40KH2MurB9MBJtryRnzo=) 25: yjNjQum49zE8oaEbbGwNjU1csGk.roa (hash: a+ZHTvcXLlXULObWqZE5DGx1Uba0NvfCvm7QVFQB2fM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 07 Apr 2025 02:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:08:d4:58:d4:50:cb:d6:09:f4:45:b1:5b:d3:48:f0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Apr 6 02:00:56 2025 GMT Not After : Apr 7 02:00:56 2025 GMT Subject: CN=55d802a55209acd18ed762529558241ac43b5d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:17:7b:64:85:84:77:af:61:02:51:38:bc:6b: 6b:60:be:26:9f:7f:1b:f7:03:d5:cb:e3:18:b1:de: c8:04:27:ff:72:c1:c4:79:96:3a:81:bb:b3:61:3a: 4a:34:87:7f:28:14:40:02:54:69:b8:6d:f4:fc:78: 03:38:1d:58:42:db:3f:ca:31:ef:32:66:8b:44:2d: 9d:6f:ba:d7:46:4a:90:59:67:b6:ad:22:66:11:2d: ec:a9:3a:16:4c:96:b5:c6:f2:69:24:cc:b5:31:c7: d3:51:a5:9c:ee:4e:37:cc:b6:55:9d:84:20:0e:40: 48:32:13:e3:8e:78:c6:d8:9c:9e:fc:2e:1e:a3:5e: 71:dc:b3:7e:52:3c:76:4b:b1:af:7d:c4:09:2e:ae: 40:f9:14:f1:d7:5c:ab:d6:14:69:9a:41:9c:ca:ff: 53:9b:39:ea:54:72:0d:3c:0c:33:20:11:c0:75:82: d6:e4:c2:72:cb:78:b5:76:cd:a6:ed:57:e9:88:ff: b9:27:57:74:a0:44:38:ee:ed:5e:3a:48:13:36:bc: 88:a9:b5:69:c6:a2:7d:42:fd:c8:69:d9:cb:65:6b: 14:d2:32:85:c3:0c:26:b4:59:50:b5:7f:c9:bd:c9: 5d:8c:d4:15:b4:7b:b1:cf:89:cb:a4:94:79:c7:6d: a4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D8:02:A5:52:09:AC:D1:8E:D7:62:52:95:58:24:1A:C4:3B:5D:7D X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:4a:2d:5d:07:28:0b:a7:0e:f3:85:7c:07:4d:59:e0:d1:c6: 27:8e:59:ce:ec:5b:2c:60:e9:b2:98:15:47:52:20:4e:c0:b0: f6:bb:4c:57:97:45:57:e4:b3:7d:73:ea:71:f9:20:ff:7c:e5: bc:8d:bf:ef:cd:03:7c:93:cb:69:3e:2c:01:d7:64:a1:a0:4a: a3:28:31:fd:6d:ef:31:9e:17:8d:ef:07:53:d8:2c:10:b6:f5: 71:6c:f8:c9:5b:8b:19:10:5d:c8:20:ff:84:2b:c7:90:c8:af: 83:1e:4a:8f:10:21:c2:95:00:c7:69:c4:39:c7:b2:22:05:06: 5f:6c:a7:3d:ce:1d:b0:92:0e:13:f8:11:3e:b9:69:43:1f:4d: 1e:ca:a0:d7:cb:aa:49:dd:c6:41:df:8e:ee:68:3c:46:92:1c: 9b:d1:85:e4:e0:eb:90:e8:01:15:5c:e4:58:83:48:ae:2f:fe: 66:23:f4:9d:b6:18:1c:b1:ae:cc:35:4e:ec:69:3c:77:0b:9f: 6c:4b:2a:77:17:c2:66:6d:f5:48:1c:aa:56:0c:cb:f3:00:1c: 47:09:21:53:cc:9b:62:fb:c6:2d:5a:7b:89:da:2f:72:06:27: 0e:b3:ea:15:53:cb:36:98:75:d3:71:fd:0d:46:21:5e:cd:a0: 50:7d:c7:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYI1FjUUMvWCfRFsVvTSPDgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjUwNDA2MDIwMDU2WhcNMjUwNDA3MDIwMDU2WjAzMTEwLwYDVQQD Eyg1NWQ4MDJhNTUyMDlhY2QxOGVkNzYyNTI5NTU4MjQxYWM0M2I1ZDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xd7ZIWEd69hAlE4vGtrYL4mn38b 9wPVy+MYsd7IBCf/csHEeZY6gbuzYTpKNId/KBRAAlRpuG30/HgDOB1YQts/yjHv MmaLRC2db7rXRkqQWWe2rSJmES3sqToWTJa1xvJpJMy1McfTUaWc7k43zLZVnYQg DkBIMhPjjnjG2Jye/C4eo15x3LN+Ujx2S7GvfcQJLq5A+RTx11yr1hRpmkGcyv9T mznqVHINPAwzIBHAdYLW5MJyy3i1ds2m7VfpiP+5J1d0oEQ47u1eOkgTNryIqbVp xqJ9Qv3IadnLZWsU0jKFwwwmtFlQtX/JvcldjNQVtHuxz4nLpJR5x22kUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXYAqVSCazRjtdiUpVYJBrEO119MB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXEotXQco C6cO84V8B01Z4NHGJ45ZzuxbLGDpspgVR1IgTsCw9rtMV5dFV+SzfXPqcfkg/3zl vI2/780DfJPLaT4sAddkoaBKoygx/W3vMZ4Xje8HU9gsELb1cWz4yVuLGRBdyCD/ hCvHkMivgx5KjxAhwpUAx2nEOceyIgUGX2ynPc4dsJIOE/gRPrlpQx9NHsqg18uq Sd3GQd+O7mg8RpIcm9GF5ODrkOgBFVzkWINIri/+ZiP0nbYYHLGuzDVO7Gk8dwuf bEsqdxfCZm31SByqVgzL8wAcRwkhU8ybYvvGLVp7idovcgYnDrPqFVPLNph103H9 DUYhXs2gUH3HDQ== -----END CERTIFICATE-----Generated at Sun Apr 6 11:34:59 2025 by rpki-client