$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft File: up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json) Hash identifier: /q1J9cUH/NSzJgvhbhV0sbwOBA4+lM9Wp1Gq1m8EFXE= Subject key identifier: F4:AC:73:F2:52:43:B3:6A:B9:2F:28:DF:41:DB:62:57:13:70:DF:51 Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 01960CE8608E6D2A77333F766B01BC681B21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft Manifest number: 14E7 Signing time: Sun 06 Apr 2025 21:01:17 +0000 Manifest this update: Sun 06 Apr 2025 21:01:17 +0000 Manifest next update: Mon 07 Apr 2025 21:01:17 +0000 Files and hashes: 1: 400_RzqZ2Zkj4RgRtQM0ieiw_70.roa (hash: cWGkkjGCyiI5yIlZYg8oK4kWIOo/BCALf4PQ/6MHr2Y=) 2: 4Wfz_EQvo6SYko68k4TSfAN47sU.roa (hash: ox9v/ftMGhy9fG8TSa40dOcstxMI1IJ6bYGEOLCjJzU=) 3: 6_4Hwc6tzBdm4l-R8mlGWEV4N9s.roa (hash: UHiP2cXYQ7lCrtkLIonRIJ0zFlvgCt2dpLZRN8ietd0=) 4: AJ6fmQiDz0GXs7lMqGohkie4ct4.roa (hash: r9hxOjQfXyLSDYE4VLoR0q1v13yTVS1W/Vgz5ZPmFVM=) 5: ATThoTvJNJF4N5lVg-wyxhidePQ.roa (hash: 8ezRICXjiYRUY5WiWzKJgIUwL+aryWeybUmLAWnMagE=) 6: FFOy7JzcrItrCcqIMOBP12gCuvA.roa (hash: 4feRGc55ccbj4QRPLSWi7NCE31nGpgj09ILORHtqr7E=) 7: IJorGzUf120CRI-mpVXAgOI_TJQ.roa (hash: DW42FlDi+SRpZXtqB1CINfiZYcz4yxFQLUYN4vDCN7c=) 8: OoklI3kvpUu2QON6vzr_znMlb4o.roa (hash: RZHqfGmBHtCF9GP4Ad5GiS/4m5qbDE50y9ANbpznwhg=) 9: QEvUN67KDbFaOfZj9g3vC9rUQm8.roa (hash: zUZsUbWINgqv3RegkdqlIa9Hhl7pusc0/yFVE36iNwo=) 10: QKPU8lHD1Ls8ijbvjjabsAgLzUg.roa (hash: /fSYXi8WIkq4YrB09WT2QnZLo4NqtBeyd9xE217JYvw=) 11: R2PawQq0aEUNn_27xWpTtnBVRIM.roa (hash: wgajC5DOyIsq57Qvm++dcs3T7mB2PJ+qFxFBFbbVsAw=) 12: RDOul7gyH90sNWuWnbwP87u8wBY.roa (hash: o6ZEueWl1RLQaWWUlM9zZ0WWrPg/eDS24KItGKwAdKc=) 13: SGqQT2BA7nvZeypVaggMahgg5Ag.roa (hash: rpRHSpS91VJQoigSTO7lxay+A/xm/jPFJyoswIPhH6c=) 14: UHKWf0IFUDq4891IQbRTHXY2rfo.roa (hash: khzJ2vmoGD7A0nhnzsOiCPmcx8Ixl6GoeAYAbQaOA34=) 15: VrGGCYFwhGi4BPeG9vQveoaFfLM.roa (hash: edTPl3MGZDPIQA5qIWNLHzc/W7A7u7n891N+syJZyK8=) 16: XOgRPDn4EAwuDOtKWrXwVLKxYbQ.roa (hash: 49AORPQzSmZAZLgFWXR4a6bM5aE+rKu1rS5QrLIREg4=) 17: f22Rg9MgZynKKLpI74qpWeFqUQg.roa (hash: nzoA/aYd6ivHr6t+Z/FKBabLT0D3aCpU8WEfvxU6+0Q=) 18: fYISzZWRzG7_wtxIDhjyXHPM4P4.roa (hash: G+ywPlLAl4RvDHTdYmvn2UIgfVxBZaWwGMa191aRbWk=) 19: gR6HPRWa_I93ATF_6lEGpZdtVD0.roa (hash: akW6B3OCvdeceBU9Nhi1NU2MjvgHwNjLQ7OLUdvvzL4=) 20: mAo26VPj0zSn83SBRVoaCRdhIg4.roa (hash: C7ffNHQiA5Pk5uSBOSpDLGUyZWz38AAFh4I1f40dGgU=) 21: oWrtd0aFvC95N4Z6gxyZZ1SWrJs.roa (hash: AlvH9oYmiwAzp0Z4dOdOt5RLv8lOGK9l5kvoT65TGlA=) 22: qvRavzCJNzlbWaxfB4-Csl1ipM8.roa (hash: TD2WbwBpamsZuvWzJKbhtgXUy7eDy6Fj193ZH7DB3bY=) 23: s8dlGwwG7APZ3e9v5u6lvgLO1LA.roa (hash: 8xnfXfiigbDRlP2kATr1I4JuafJveXZL4+MTG5Nb4O0=) 24: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: m7kz+5UH/V+lv3/OenkJfwaf0HgRroFo8oqM2GkEWu8=) 25: xGjAXSy-rPa7gZ2kCW6E-VgMqD8.roa (hash: AKtFMHlOVM+NFVSI2WpJP3l3MsXbWpJgiU4DhcCI8gQ=) 26: xqd3xWJCW96sJcN2e73CvA4BAEA.roa (hash: laL7IIKjO1uC6O19XqLmeRI4pdgH1HSkOUvvYu+TK5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 07 Apr 2025 16:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:0c:e8:60:8e:6d:2a:77:33:3f:76:6b:01:bc:68:1b:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Apr 6 21:01:17 2025 GMT Not After : Apr 7 21:01:17 2025 GMT Subject: CN=f4ac73f25243b36ab92f28df41db62571370df51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2f:ca:f1:9f:0b:2d:80:20:75:96:2e:b9:b2: b1:d3:c1:a8:ef:f7:4c:46:85:93:30:d4:34:b2:49: 41:fc:bb:68:a3:2e:5d:82:7e:4d:39:d8:31:49:9e: 44:ef:2b:f7:8d:22:5c:8b:01:58:e5:d8:3a:b5:7f: 01:8a:f6:42:fb:4b:8f:76:4a:83:fb:e0:cf:39:f2: ee:f9:99:e9:8c:54:31:e1:33:d1:c3:5a:9f:13:71: 3f:26:a6:b4:05:06:94:1f:2d:09:f0:b1:1c:d8:f4: d2:5a:92:8b:4c:93:e9:16:55:fb:72:60:4b:85:3a: 29:56:46:56:62:70:c4:ee:69:1c:90:f5:05:50:03: 67:58:09:a9:54:84:1c:2e:2b:87:c7:ab:e3:5f:7a: 58:44:6c:39:e2:11:9c:45:a0:8c:3b:b3:69:a8:65: 5d:b8:f9:5c:24:7c:4d:93:68:44:ae:1b:da:91:e5: bd:c8:65:d6:d0:67:49:5f:a3:76:be:4c:7e:a2:84: 81:ec:53:cf:f1:fe:7e:ad:34:6c:36:3a:41:93:99: 5a:24:90:86:58:4b:33:6f:0a:74:1e:07:27:10:4f: 80:fd:eb:2f:f9:47:d6:59:78:06:a8:13:a5:d4:f8: 59:85:bf:3f:01:66:a2:35:2a:d8:fa:00:af:a7:07: d8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:AC:73:F2:52:43:B3:6A:B9:2F:28:DF:41:DB:62:57:13:70:DF:51 X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:31:4b:00:ef:d1:fd:6b:34:f1:68:30:7e:59:e2:89:67:d9: 83:a4:74:ca:66:59:e1:7a:33:79:1b:73:5b:5b:d1:d5:a5:63: e9:e2:70:f5:0e:16:cc:4d:e5:a8:69:65:2a:4e:2d:c2:19:8e: 10:94:52:e7:97:91:2e:08:a1:01:45:4c:02:d6:03:53:27:49: 1a:cb:66:69:ec:bf:fa:2b:8a:8d:f6:13:82:e2:46:55:4d:b8: bd:0e:e8:a5:f7:c0:16:51:29:ba:3b:c5:a2:73:b2:2d:02:01: d2:de:8b:6e:2f:f7:71:39:2f:a7:ca:37:49:dd:3b:08:ed:d0: d4:cb:77:71:ca:47:03:86:c7:40:a7:9a:a2:d3:29:7c:87:1c: d8:a3:ed:4e:c5:5e:3c:df:54:c8:ca:df:82:79:d2:bc:49:1e: 6c:11:a1:4a:21:a2:81:8d:79:a1:16:86:57:11:61:69:9a:d9: 6a:57:e3:5b:27:f2:6e:33:84:47:32:ba:ef:f6:54:45:42:f2: bb:21:df:e2:cb:49:ed:6b:f8:2f:42:9f:a9:f7:6e:44:81:ed: 24:19:bc:61:d3:5f:c7:ad:90:c5:7b:7b:20:50:f3:56:a6:87: f4:ef:cd:bf:96:de:e0:0d:ee:4e:76:1d:3f:81:d7:27:75:6d: a2:c0:c8:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYM6GCObSp3Mz92awG8aBshMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjUwNDA2MjEwMTE3WhcNMjUwNDA3MjEwMTE3WjAzMTEwLwYDVQQD EyhmNGFjNzNmMjUyNDNiMzZhYjkyZjI4ZGY0MWRiNjI1NzEzNzBkZjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy/K8Z8LLYAgdZYuubKx08Go7/dM RoWTMNQ0sklB/Ltooy5dgn5NOdgxSZ5E7yv3jSJciwFY5dg6tX8BivZC+0uPdkqD ++DPOfLu+ZnpjFQx4TPRw1qfE3E/Jqa0BQaUHy0J8LEc2PTSWpKLTJPpFlX7cmBL hTopVkZWYnDE7mkckPUFUANnWAmpVIQcLiuHx6vjX3pYRGw54hGcRaCMO7NpqGVd uPlcJHxNk2hErhvakeW9yGXW0GdJX6N2vkx+ooSB7FPP8f5+rTRsNjpBk5laJJCG WEszbwp0HgcnEE+A/esv+UfWWXgGqBOl1PhZhb8/AWaiNSrY+gCvpwfY7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSsc/JSQ7NquS8o30HbYlcTcN9RMB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgTFLAO/R /Ws08WgwflniiWfZg6R0ymZZ4XozeRtzW1vR1aVj6eJw9Q4WzE3lqGllKk4twhmO EJRS55eRLgihAUVMAtYDUydJGstmaey/+iuKjfYTguJGVU24vQ7opffAFlEpujvF onOyLQIB0t6Lbi/3cTkvp8o3Sd07CO3Q1Mt3ccpHA4bHQKeaotMpfIcc2KPtTsVe PN9UyMrfgnnSvEkebBGhSiGigY15oRaGVxFhaZrZalfjWyfybjOERzK67/ZURULy uyHf4stJ7Wv4L0KfqfduRIHtJBm8YdNfx62QxXt7IFDzVqaH9O/Nv5be4A3uTnYd P4HXJ3VtosDIuQ== -----END CERTIFICATE-----Generated at Mon Apr 7 02:15:09 2025 by rpki-client