$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft File: O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json) Hash identifier: YRd4G3EtAf++2a9I4rxrxy6WdC+pRi2xiP05FfmGJxw= Subject key identifier: 27:54:2E:8D:B3:25:6E:94:DF:2B:6E:A1:1F:C1:86:74:50:E4:62:29 Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 01973D644AC863E229A1D0AAB61EA1F5F39E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft Manifest number: 174E Signing time: Thu 05 Jun 2025 00:01:12 +0000 Manifest this update: Thu 05 Jun 2025 00:01:12 +0000 Manifest next update: Fri 06 Jun 2025 00:01:12 +0000 Files and hashes: 1: 4vgCB29E8qksUTRT80hibqkfyyc.roa (hash: jmfyWEEY9JnvGnTw4OogSC5Brt6r5w8K86EHD/wwf9A=) 2: 526untxz-mzv2dHnFDXL_1ptt60.roa (hash: eTZ7gYAJgAUW5KmvOus9/SXIOPMjtfVvCRByFZ9gVg0=) 3: 7AXFe4yxIHvF0jtzsP_F-wLpTyo.roa (hash: fz447Zdcr7iuvJ9YqYhhlssvYnd7PF5Z4bBFuoyFksI=) 4: C-8-iMMsxJ6tnwl9OBqOWIwbNsU.roa (hash: pdyDDn72ivSi04YeLJDn/Rf+owjmwql5RY6I2jPWQjI=) 5: Cz5IOaLfZShikRrc5qEp3L0_dDE.roa (hash: yJQIMc4u5I3PxM3zxWJYXZyrXzNKlBnDlO54oa7k+I4=) 6: D0L0LFndzzXtixPyXy6YiMbyR7Q.roa (hash: le65wEoYAgLiuW7LHDLfiJaMqsJkMNtdkgbBI9+aSho=) 7: DXkQJWoXXxUWl_6wOwUCNK2iqzE.roa (hash: Et9FWADnNl04HSdSo6iAdV5+gKD6jObcWqGDBUveUoM=) 8: DxgEUmzhCfbLGW1VYUfMpFa37nw.roa (hash: aTiJxBWDUefv6IrHKfkDtn+24ct4bHV07inB3EBckiI=) 9: GXy-YScDdlVSOjaigEKgJ51XCY8.roa (hash: Y3LR/iT+9EdXx7rq4pgAup8VPeSq/ZLbP9lE7Caoknc=) 10: H7yrNUT75yVv09M5UBmNbZIqcoA.roa (hash: CZfSBGRpxyxAFQpjENd+v0cJ93DJ7YkMpWAIc48uiNM=) 11: KfRroo9-BNURF9yUWR1WlHgU1ig.roa (hash: d0EUN/5YCOmmW4SmyztOjubnx+pkCFBWNsBncoAozSc=) 12: KtPtCnsNO7KrNH_mi8irxAh2a64.roa (hash: 0X6VJNdKzEQIN2KQI1h+LTGHgQgh9YXQ8FCAd7HKCL4=) 13: NBdPQa-wvhCcNUR62UijOKmqLb4.roa (hash: FBuWOoWqS3kDovQ4RTLJifcKo3Lt+KtJgveTvXA1/PY=) 14: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: 3vvp6ETgvCW+00Al8aB2kiDPT1bsWbUO/DILMVrlN2M=) 15: OHtdamk3K8NdLEh-keiR2rSuuSg.roa (hash: qIQbXlJhQUZZHP5a7YOGBONxaoVnF9gndUOU4O5iAEE=) 16: ONvCFUby9FQsaJnAxo4Axtdte3w.roa (hash: Ifw+sRLVQyRVbH8IoOOspPffjTFu/L5Tp5Iujz6vsEg=) 17: PqyNHcmLJdPWxXV1ritb4BmJxi4.roa (hash: 3vlH477/W9mn8TAvOvuTdFa84/v39cjh6RY9RiJ8GGQ=) 18: RPtIr4SyxST2FhDUlfIaVDvDv30.roa (hash: GtTmqq9ciOzu0ubmXjSZndWCRadfRgXNWiYJpFrJC5s=) 19: UfHhhtI05mBJabZ-hLmNIxHX8ug.roa (hash: E4kcCskG284NOpULkH3nCUBGoPB5JKBTg+hvJO3hTjc=) 20: W4gGQid-BJ2ydE-GfarPQD0BXHk.roa (hash: AIulnkFQm6EME0MTgDdsXVMYUQiBqZHjvvdiEh/TZmw=) 21: Xf3YKxRqkeL7M00W8PeVBpyDwo4.roa (hash: l1kq88C+6MsbDoI9xmNG80iyS2+gmcx5dOr77F5QPn4=) 22: Y2m9dQZRR5IryF_5Zz3iwenilus.roa (hash: Jz9GiZ+cQjwgpfumcixZsPRulTmHrskYTNVB0A9hwMs=) 23: aRKgFuNEew699NwvZOmMVRESxJw.roa (hash: BbnnNcBf5b80ecOVIfxt6czSFR5JGmFsnVDqmj8IYKc=) 24: bIscYSktyuSdXA8uuitNFV9EUno.roa (hash: w2B+jU39CkMFN16wFNwH+8WwrfFPrjamkhdn7et9g8s=) 25: ilG6y2Wso3mOgxG85ra3iR2e8Ck.roa (hash: INQh1RPZ3Hg+l39PdTi0B9Y2GnJwgu1gLpokQWLUkWY=) 26: lRiWjK4xEGSZ7hhdPgk-iqq1mwI.roa (hash: JgHkOVWJLhXz09JsY8CuxiPcEyyxQ/VY17v428GySkE=) 27: nei3AaGClDiyy_EfGYw9mDGViqc.roa (hash: qXKOsUvJTZ9r5zNLO+LyECtFcWGid4ruKizdlfVXjdw=) 28: oMVUugxzWQV8CTV8CsCSyXRaVrM.roa (hash: pMKFMHKU1JhFpXnjr6tLo7AocNPXia8Qa3GSVsF74/E=) 29: wEkeXxOYSGR-y3CW1yOLj2XTYJ8.roa (hash: YRmX+nG2q2LjuBQefSHzWGMt9DR2HFgV/XMAB2Upk+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 21:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3d:64:4a:c8:63:e2:29:a1:d0:aa:b6:1e:a1:f5:f3:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Jun 5 00:01:12 2025 GMT Not After : Jun 6 00:01:12 2025 GMT Subject: CN=27542e8db3256e94df2b6ea11fc1867450e46229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e7:28:36:4e:6b:aa:64:16:30:81:e3:9a:2f: 52:08:ac:31:e4:d2:b6:36:a9:21:70:d6:6a:ae:2b: ae:90:c0:81:77:1e:de:0f:17:df:11:0e:13:a5:75: e6:04:71:29:48:ee:d8:eb:cc:3d:30:4e:43:6c:81: e0:5d:1f:46:86:5c:b7:51:8f:62:00:4f:33:d9:47: cd:58:93:1d:50:7d:b1:50:9e:3a:2a:9d:7e:15:07: 65:24:ac:9a:fc:f7:bf:33:2e:93:49:8a:10:31:bd: bd:d6:20:7b:19:59:c4:41:c9:06:9c:2c:31:e6:9b: 8a:a1:8d:54:21:fe:b3:85:a0:fa:ab:66:5a:af:72: 37:63:b3:e6:c2:17:fa:2a:a7:7e:77:b5:b7:c1:75: de:e5:fd:12:76:d3:f5:5f:5f:e5:03:43:3b:06:b2: 02:77:bb:cf:be:96:6e:f6:b3:b9:fc:55:24:f0:f3: 29:0e:1a:e8:b0:31:c9:6a:d5:19:6d:da:fa:e7:81: f4:8d:90:3b:59:c2:d1:df:1d:84:4d:b0:54:5a:65: b7:ba:4d:dd:81:1b:f5:41:b4:b0:c9:e7:6c:20:c2: 10:d4:c3:5c:3d:e0:c3:c7:e7:66:07:ac:bc:e4:d2: 7f:23:59:7d:c1:e6:a3:37:28:cf:0d:ea:24:5f:2c: 35:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:54:2E:8D:B3:25:6E:94:DF:2B:6E:A1:1F:C1:86:74:50:E4:62:29 X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:87:6c:e6:41:2f:6d:63:f1:f9:6d:b7:f2:e9:0e:10:d9:59: e3:1c:c7:ea:73:47:f8:6e:9a:d5:a2:8a:fe:f6:1e:36:2c:d8: da:b1:26:d4:5e:b9:3e:5b:f8:3a:8b:82:95:7e:a7:58:0f:67: 57:0d:b1:4a:55:a7:a5:6b:2d:61:c0:ff:56:9e:38:80:e0:e1: 1d:f7:40:0e:79:ce:d9:e4:a3:ef:4a:1c:99:a9:d5:76:e9:6c: e0:51:75:f8:b6:ba:04:ad:f2:fd:ea:35:fc:8d:2e:29:e2:1b: 79:28:32:bd:c6:e2:bf:c9:ef:32:25:61:26:af:69:2f:78:f3: 9c:13:3c:9d:11:cc:ea:c3:3f:39:68:a6:f3:96:c4:b5:1f:34: a6:67:14:77:4c:ac:72:a7:ce:bc:09:1f:66:49:28:e4:17:42: 7d:e9:73:2d:a6:c4:5f:5c:7d:7c:88:37:b5:5b:3b:fa:c2:43: 30:0a:d9:9c:1c:43:16:86:a2:9e:35:bc:71:84:3e:84:ce:76: 27:d6:9b:55:59:5c:2b:c9:5c:13:ed:f5:fa:6a:b1:e4:2e:98: ac:50:2c:dc:c8:e6:11:40:a1:47:d3:85:43:83:27:91:7d:6c: f0:82:06:10:b7:28:ca:14:f9:99:b6:a2:00:04:f0:b4:f8:05: c9:5f:c5:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc9ZErIY+IpodCqth6h9fOeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjUwNjA1MDAwMTEyWhcNMjUwNjA2MDAwMTEyWjAzMTEwLwYDVQQD EygyNzU0MmU4ZGIzMjU2ZTk0ZGYyYjZlYTExZmMxODY3NDUwZTQ2MjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuecoNk5rqmQWMIHjmi9SCKwx5NK2 NqkhcNZqriuukMCBdx7eDxffEQ4TpXXmBHEpSO7Y68w9ME5DbIHgXR9Ghly3UY9i AE8z2UfNWJMdUH2xUJ46Kp1+FQdlJKya/Pe/My6TSYoQMb291iB7GVnEQckGnCwx 5puKoY1UIf6zhaD6q2Zar3I3Y7Pmwhf6Kqd+d7W3wXXe5f0SdtP1X1/lA0M7BrIC d7vPvpZu9rO5/FUk8PMpDhrosDHJatUZbdr654H0jZA7WcLR3x2ETbBUWmW3uk3d gRv1QbSwyedsIMIQ1MNcPeDDx+dmB6y85NJ/I1l9weajNyjPDeokXyw1EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdULo2zJW6U3ytuoR/BhnRQ5GIpMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKIds5kEv bWPx+W238ukOENlZ4xzH6nNH+G6a1aKK/vYeNizY2rEm1F65Plv4OouClX6nWA9n Vw2xSlWnpWstYcD/Vp44gODhHfdADnnO2eSj70ocmanVduls4FF1+La6BK3y/eo1 /I0uKeIbeSgyvcbiv8nvMiVhJq9pL3jznBM8nRHM6sM/OWim85bEtR80pmcUd0ys cqfOvAkfZkko5BdCfelzLabEX1x9fIg3tVs7+sJDMArZnBxDFoainjW8cYQ+hM52 J9abVVlcK8lcE+31+mqx5C6YrFAs3MjmEUChR9OFQ4MnkX1s8IIGELcoyhT5mbai AATwtPgFyV/Fkg== -----END CERTIFICATE-----Generated at Thu Jun 5 05:15:43 2025 by rpki-client