$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft File: up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json) Hash identifier: kpYqzmoGxJD+e4FwP90Kb5o4QmU3kSAZ1gB+sJsN84s= Subject key identifier: CC:49:F5:6B:CD:2E:03:6D:67:50:12:F5:68:0B:62:72:B9:01:87:39 Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 0197499F1BCCDAA4E76109C80C19C514924B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft Manifest number: 158B Signing time: Sat 07 Jun 2025 09:00:53 +0000 Manifest this update: Sat 07 Jun 2025 09:00:53 +0000 Manifest next update: Sun 08 Jun 2025 09:00:53 +0000 Files and hashes: 1: 400_RzqZ2Zkj4RgRtQM0ieiw_70.roa (hash: cWGkkjGCyiI5yIlZYg8oK4kWIOo/BCALf4PQ/6MHr2Y=) 2: 4Wfz_EQvo6SYko68k4TSfAN47sU.roa (hash: ox9v/ftMGhy9fG8TSa40dOcstxMI1IJ6bYGEOLCjJzU=) 3: 6_4Hwc6tzBdm4l-R8mlGWEV4N9s.roa (hash: UHiP2cXYQ7lCrtkLIonRIJ0zFlvgCt2dpLZRN8ietd0=) 4: AJ6fmQiDz0GXs7lMqGohkie4ct4.roa (hash: r9hxOjQfXyLSDYE4VLoR0q1v13yTVS1W/Vgz5ZPmFVM=) 5: ATThoTvJNJF4N5lVg-wyxhidePQ.roa (hash: 8ezRICXjiYRUY5WiWzKJgIUwL+aryWeybUmLAWnMagE=) 6: FFOy7JzcrItrCcqIMOBP12gCuvA.roa (hash: 4feRGc55ccbj4QRPLSWi7NCE31nGpgj09ILORHtqr7E=) 7: IJorGzUf120CRI-mpVXAgOI_TJQ.roa (hash: DW42FlDi+SRpZXtqB1CINfiZYcz4yxFQLUYN4vDCN7c=) 8: OoklI3kvpUu2QON6vzr_znMlb4o.roa (hash: RZHqfGmBHtCF9GP4Ad5GiS/4m5qbDE50y9ANbpznwhg=) 9: QEvUN67KDbFaOfZj9g3vC9rUQm8.roa (hash: zUZsUbWINgqv3RegkdqlIa9Hhl7pusc0/yFVE36iNwo=) 10: QKPU8lHD1Ls8ijbvjjabsAgLzUg.roa (hash: /fSYXi8WIkq4YrB09WT2QnZLo4NqtBeyd9xE217JYvw=) 11: R2PawQq0aEUNn_27xWpTtnBVRIM.roa (hash: wgajC5DOyIsq57Qvm++dcs3T7mB2PJ+qFxFBFbbVsAw=) 12: RDOul7gyH90sNWuWnbwP87u8wBY.roa (hash: o6ZEueWl1RLQaWWUlM9zZ0WWrPg/eDS24KItGKwAdKc=) 13: SGqQT2BA7nvZeypVaggMahgg5Ag.roa (hash: rpRHSpS91VJQoigSTO7lxay+A/xm/jPFJyoswIPhH6c=) 14: UHKWf0IFUDq4891IQbRTHXY2rfo.roa (hash: khzJ2vmoGD7A0nhnzsOiCPmcx8Ixl6GoeAYAbQaOA34=) 15: VrGGCYFwhGi4BPeG9vQveoaFfLM.roa (hash: edTPl3MGZDPIQA5qIWNLHzc/W7A7u7n891N+syJZyK8=) 16: XOgRPDn4EAwuDOtKWrXwVLKxYbQ.roa (hash: 49AORPQzSmZAZLgFWXR4a6bM5aE+rKu1rS5QrLIREg4=) 17: f22Rg9MgZynKKLpI74qpWeFqUQg.roa (hash: nzoA/aYd6ivHr6t+Z/FKBabLT0D3aCpU8WEfvxU6+0Q=) 18: fYISzZWRzG7_wtxIDhjyXHPM4P4.roa (hash: G+ywPlLAl4RvDHTdYmvn2UIgfVxBZaWwGMa191aRbWk=) 19: gR6HPRWa_I93ATF_6lEGpZdtVD0.roa (hash: akW6B3OCvdeceBU9Nhi1NU2MjvgHwNjLQ7OLUdvvzL4=) 20: mAo26VPj0zSn83SBRVoaCRdhIg4.roa (hash: C7ffNHQiA5Pk5uSBOSpDLGUyZWz38AAFh4I1f40dGgU=) 21: oWrtd0aFvC95N4Z6gxyZZ1SWrJs.roa (hash: AlvH9oYmiwAzp0Z4dOdOt5RLv8lOGK9l5kvoT65TGlA=) 22: qvRavzCJNzlbWaxfB4-Csl1ipM8.roa (hash: TD2WbwBpamsZuvWzJKbhtgXUy7eDy6Fj193ZH7DB3bY=) 23: s8dlGwwG7APZ3e9v5u6lvgLO1LA.roa (hash: 8xnfXfiigbDRlP2kATr1I4JuafJveXZL4+MTG5Nb4O0=) 24: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: 67ZzKtQ68eFI2hH4hKeCRIe508+nwA/HyyoOXK8FNGs=) 25: xGjAXSy-rPa7gZ2kCW6E-VgMqD8.roa (hash: AKtFMHlOVM+NFVSI2WpJP3l3MsXbWpJgiU4DhcCI8gQ=) 26: xqd3xWJCW96sJcN2e73CvA4BAEA.roa (hash: laL7IIKjO1uC6O19XqLmeRI4pdgH1HSkOUvvYu+TK5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:49:9f:1b:cc:da:a4:e7:61:09:c8:0c:19:c5:14:92:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Jun 7 09:00:53 2025 GMT Not After : Jun 8 09:00:53 2025 GMT Subject: CN=cc49f56bcd2e036d675012f5680b6272b9018739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:be:73:b0:e9:d0:47:47:10:5c:df:0b:88:58: 32:46:58:78:8a:8e:30:fe:93:7a:ab:b5:02:de:c7: cb:70:c4:48:ac:ae:9a:76:20:81:7b:76:90:70:72: ed:8d:23:52:53:c9:f3:56:08:70:73:c5:b0:47:e0: de:27:11:bd:b7:97:ee:82:51:ab:d2:f4:e8:49:e9: cd:0b:5d:50:e6:1b:c9:76:89:eb:60:86:0e:ab:52: 8a:4d:1c:7b:07:d3:c2:5c:b5:08:b4:36:a5:fb:97: d7:b0:1d:74:de:eb:f5:53:0a:c1:81:57:81:f8:82: 59:8f:bc:5e:11:2e:7c:65:58:b4:97:5a:04:81:be: 97:c5:9d:9d:77:18:70:c8:94:3a:71:0c:11:da:24: d6:c0:91:ff:71:d1:0d:c5:22:de:a3:53:dd:e5:68: 03:87:d1:40:71:ad:e8:ed:c0:c2:60:fe:b7:67:14: 17:e7:5f:48:71:09:11:d6:3b:a0:95:28:11:23:ef: 08:84:37:a3:d3:b2:07:e6:b2:dc:86:f4:41:aa:b6: 45:4d:27:2d:98:96:be:11:69:7f:21:94:d4:72:ed: 30:82:4c:7c:86:7e:26:a8:2b:a2:36:b6:53:2e:d9: d8:80:52:6d:fc:79:3c:f5:f7:44:3e:6d:af:6c:dd: 52:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:49:F5:6B:CD:2E:03:6D:67:50:12:F5:68:0B:62:72:B9:01:87:39 X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:42:de:9b:dd:7f:13:fb:5c:66:c4:24:a9:32:ba:5b:13:01: 41:67:93:7b:9d:b8:d4:d3:0b:3c:e4:71:5d:01:38:88:44:18: b2:30:cf:cb:ff:ea:2d:d3:fb:aa:4c:e5:26:e9:13:98:4b:ba: bd:69:67:38:6f:c4:c5:82:f3:13:83:db:0b:da:fd:c6:0f:b4: a5:94:9b:54:14:7d:74:c5:dd:03:27:d5:87:78:85:68:2b:fb: 65:87:0e:1f:0e:63:92:8f:84:fb:f4:a9:92:c8:c0:cf:3c:a8: 30:74:ed:3a:47:b6:07:30:5a:eb:95:92:1b:53:d6:c5:fb:c5: 1b:d6:88:d5:fb:11:9d:5e:96:de:7a:3a:9f:92:ed:27:ba:f2: 91:85:c0:9c:c0:1e:0e:d9:44:30:87:96:84:30:e0:cc:7a:a9: a9:92:97:e1:d6:4b:af:f9:bb:9d:a2:db:7e:5c:02:1b:b9:46: 36:68:a7:99:a3:9d:93:fd:11:d6:8b:85:d7:0e:57:70:3c:cd: d4:16:4e:9b:38:b5:f5:32:66:53:90:fd:41:b3:47:fb:1f:0a: 1a:60:f0:ba:a6:2c:5c:26:79:b5:88:c8:2d:9f:32:07:cc:ea: 52:77:b7:83:3a:6e:85:e7:58:e5:8a:a9:c3:b7:bb:49:ff:23: 1b:bf:14:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdJnxvM2qTnYQnIDBnFFJJLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjUwNjA3MDkwMDUzWhcNMjUwNjA4MDkwMDUzWjAzMTEwLwYDVQQD EyhjYzQ5ZjU2YmNkMmUwMzZkNjc1MDEyZjU2ODBiNjI3MmI5MDE4NzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA175zsOnQR0cQXN8LiFgyRlh4io4w /pN6q7UC3sfLcMRIrK6adiCBe3aQcHLtjSNSU8nzVghwc8WwR+DeJxG9t5fuglGr 0vToSenNC11Q5hvJdonrYIYOq1KKTRx7B9PCXLUItDal+5fXsB103uv1UwrBgVeB +IJZj7xeES58ZVi0l1oEgb6XxZ2ddxhwyJQ6cQwR2iTWwJH/cdENxSLeo1Pd5WgD h9FAca3o7cDCYP63ZxQX519IcQkR1juglSgRI+8IhDej07IH5rLchvRBqrZFTSct mJa+EWl/IZTUcu0wgkx8hn4mqCuiNrZTLtnYgFJt/Hk89fdEPm2vbN1SAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxJ9WvNLgNtZ1AS9WgLYnK5AYc5MB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkLem91/ E/tcZsQkqTK6WxMBQWeTe5241NMLPORxXQE4iEQYsjDPy//qLdP7qkzlJukTmEu6 vWlnOG/ExYLzE4PbC9r9xg+0pZSbVBR9dMXdAyfVh3iFaCv7ZYcOHw5jko+E+/Sp ksjAzzyoMHTtOke2BzBa65WSG1PWxfvFG9aI1fsRnV6W3no6n5LtJ7rykYXAnMAe DtlEMIeWhDDgzHqpqZKX4dZLr/m7naLbflwCG7lGNminmaOdk/0R1ouF1w5XcDzN 1BZOmzi19TJmU5D9QbNH+x8KGmDwuqYsXCZ5tYjILZ8yB8zqUne3gzpuhedY5Yqp w7e7Sf8jG78Uug== -----END CERTIFICATE-----Generated at Sat Jun 7 13:40:17 2025 by rpki-client