$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft File: dqdYJumRIlpCn_ih5__cgEZkIN8.mft (raw, json) Hash identifier: PP55/xPbG0O6ZlUKm10wGhSrHzYrddWkN1R8b9WgMpU= Subject key identifier: ED:D0:C9:5B:55:8D:C6:89:13:83:42:F8:40:4E:77:0F:6A:40:1B:A6 Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df Certificate serial: 019736BD2DCD809BE3A7E884A91F1D036E3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft Manifest number: 1587 Signing time: Tue 03 Jun 2025 17:00:57 +0000 Manifest this update: Tue 03 Jun 2025 17:00:57 +0000 Manifest next update: Wed 04 Jun 2025 17:00:57 +0000 Files and hashes: 1: 0GRCDt4fJ388QfTkHCpESDtsT30.roa (hash: k9OOgOfGm6/D5FgP/oCwjZmCMN3rSoxJmPb/amgvunU=) 2: 1-yKYajfg5LY4mvNwPfafD3WCloA.roa (hash: WHC+36zJ+PfduDAkHrQdjdBbj6qnsfp62GV4AEEhmh8=) 3: 16QrQeCpwuqAfGGNMUzWS0WBV8Y.roa (hash: bmMldajlx/sTBR7HO2a2fTU2N475J5MRbFTSSzzaMIE=) 4: 4EfNGR4wiWbi_y1y433ICACWCZ0.roa (hash: W3KUBln3jDDd0cmmpR54v75Ll2wQ3RHqXSQ0s5O+eAU=) 5: 6yOls-b1_zSEPoNekFa6o4CZVU8.roa (hash: 4upnvyLgri06Nt5KSgO8Uwq/0K4QFNyV2w+ngXB4/18=) 6: 8np9ht0G3b67t2N9j69khCA5swc.roa (hash: s5WWOQNVlSSecjPvMShY+13EouocPqyy6TUkRGLT9Sw=) 7: DYMRxMEMoWV3Z5tMWRgW1jHqK9s.roa (hash: 6wMdwoy8UyJzHKKarNEHW2Cdeen4yoziiPrTe9YFHSg=) 8: Dpy95jXaeVWXPozFztldShHCRU4.roa (hash: /YGR1d8dV4jSlropxf6JRB0rYbUE70tJU0k00P3NxfE=) 9: FguRz0zA5etvzxWwMxGIJgd6k9Q.roa (hash: bUHFCLBTCucLtw2+JrZ57cEqNMKllYDmKc3mR95hRPw=) 10: L2UCeVHHcg9euQRtLcEzhApV2UE.roa (hash: awT5trUmAy4FPSzNkgCSgldj93M9lPrOlgd5pOswERE=) 11: M66I0UzjQBS9vnsa6hJXUcQSBYc.roa (hash: V+buEBexkfH/z8IfHQHVN3d+jviM7gfofPkFusouHl4=) 12: Orn9mMECvNnMxcocGzjxOdoRHk0.roa (hash: aAMLejN67KDw/WEq6MTlllANPts4owmBi6ah/2ILaOs=) 13: WEP8t9A44--cEjL5pRqrcK4NrA0.roa (hash: elcme8pyEkMhDdeVhgtzdCn+oqpKZYwu+OBHtYqbN08=) 14: WH2mqCoP_fWwSJcPuGUkRGobwNc.roa (hash: 7ARLGzAANjQVfOe30KclN1L6S5EbZnzPNgQQS4I4lwo=) 15: X8C31I22e7AIAIjXdr_l8xIku6c.roa (hash: 7Qhdi1NeFgvJPaxWBB0us3PX5KoyYrtl9JfPmMsmHRs=) 16: aKC4Ve_rwXPA5F4UwLOqVSzUoxQ.roa (hash: C2m1c3bcRtr4/LzoB1kvIKIl5IupGv3jDqJQPFpHE+Y=) 17: dqdYJumRIlpCn_ih5__cgEZkIN8.crl (hash: ET3rXLViUD3l2LNbwbUplOkRP28mLqNJzSNTo93bFtM=) 18: itJrIiDbZUHX0hMzNvHagOk0kkQ.roa (hash: 93vrSgc7l73uP0vt9qb0d56TAGfuxzEHnQxV4M3Vt/w=) 19: nA8ldX9v5Ip91riXYh1Is3JlGWU.roa (hash: LGoPjUjc03K0F3TRSud6cQW/fDxbqmiVQ8elBoGls6M=) 20: nheDIdc7Ex5DQQ3yUWyXEO40Wag.roa (hash: QW76PsmZ19rGr3AHGvysCP+0ICfRHV3icfaUxRkR4IA=) 21: tjgASAOzma6f2Z7RoOryTeTZY9s.roa (hash: DpWY737dSZuYYOG9ZIqDhXCNF5lWUkY9/w4EmAF3fpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Jun 2025 15:25:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:36:bd:2d:cd:80:9b:e3:a7:e8:84:a9:1f:1d:03:6e:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df Validity Not Before: Jun 3 17:00:57 2025 GMT Not After : Jun 4 17:00:57 2025 GMT Subject: CN=edd0c95b558dc689138342f8404e770f6a401ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:98:c0:cc:98:62:f3:32:f4:04:7e:76:9b:99: d1:bf:d9:6c:75:71:05:83:a8:79:eb:72:78:19:93: fc:bd:0c:9d:4b:ae:af:51:b1:b7:6f:78:3b:2c:6f: a3:fb:d7:fb:8e:8f:18:01:79:8e:48:f3:c9:a1:99: c6:c9:35:f9:be:db:2e:65:b5:d9:02:b7:3f:6d:6f: 01:c3:ac:79:0a:28:1b:52:97:60:ac:c1:df:25:96: 5e:a8:1a:26:a7:6a:7f:70:89:42:96:79:87:f6:dd: 94:46:37:8c:9d:f4:35:4d:1f:5e:75:0b:04:ae:19: 54:5d:34:fb:2e:34:c6:b1:01:3e:91:43:a0:06:ed: ae:a4:87:6d:0d:8a:c6:cf:fb:ec:e2:66:01:49:fa: a9:96:4c:6d:c9:be:e3:c3:b7:d1:12:b1:8f:0a:96: 22:e0:17:cb:ef:7f:8f:ef:b7:8a:3f:8f:19:15:63: 45:23:84:5f:45:6b:fc:1d:40:09:63:f1:1d:12:fe: 48:50:83:2f:36:65:a4:6f:71:14:da:b9:36:60:ae: f7:86:ce:86:3a:04:3e:7d:00:57:da:4c:7a:44:c5: e0:9d:e1:67:4b:cd:1a:03:5c:42:68:0d:63:f0:81: d1:1c:4b:59:9a:a7:5d:25:55:3e:86:94:86:40:17: 44:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D0:C9:5B:55:8D:C6:89:13:83:42:F8:40:4E:77:0F:6A:40:1B:A6 X509v3 Authority Key Identifier: keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:5f:29:b7:f0:f8:ca:30:22:ee:00:6a:a5:81:1e:76:e9:b6: 08:08:f9:81:b8:13:88:16:d1:cc:cd:b5:f8:68:33:3a:90:92: d8:a5:ff:ee:03:50:15:1a:3f:0e:75:a1:63:7c:e2:3d:7d:78: 9a:d5:0b:6d:ae:a1:ca:1f:c8:e7:67:2c:92:dd:20:9f:1d:50: a6:76:47:4a:23:c9:bd:38:87:f5:bd:bc:71:3f:ef:26:b0:1a: 2b:5a:fa:08:0b:38:1c:d0:44:d0:82:bf:6d:9c:88:3c:fd:11: 09:f4:d2:07:95:20:91:54:a9:99:1a:44:66:2b:9b:d0:8c:34: 05:bf:47:f6:79:7e:c5:3b:23:22:62:8a:69:e3:a6:e7:d5:68: 3a:e5:e8:b0:d6:c7:62:a5:a6:aa:1b:c0:3a:9f:68:82:e6:6c: 68:8a:6a:f3:c7:82:1d:c3:ca:92:49:fe:ac:e9:ab:eb:11:72: f7:62:9b:15:34:52:99:1d:19:b7:b6:08:56:9c:37:a1:72:d3: 59:59:f4:c7:f1:6f:e1:cb:68:6d:5f:29:36:af:d2:f3:d5:c4: 20:51:55:48:12:6e:ec:25:1f:45:89:fb:8e:8e:ee:c6:9c:8b: 4f:8c:31:02:23:6f:be:99:fc:92:6c:ae:49:a8:7d:0b:39:05: 5f:0e:91:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc2vS3NgJvjp+iEqR8dA249MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YTc1ODI2ZTk5MTIyNWE0MjlmZjhhMWU3ZmZkYzgwNDY2 NDIwZGYwHhcNMjUwNjAzMTcwMDU3WhcNMjUwNjA0MTcwMDU3WjAzMTEwLwYDVQQD EyhlZGQwYzk1YjU1OGRjNjg5MTM4MzQyZjg0MDRlNzcwZjZhNDAxYmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpjAzJhi8zL0BH52m5nRv9lsdXEF g6h563J4GZP8vQydS66vUbG3b3g7LG+j+9f7jo8YAXmOSPPJoZnGyTX5vtsuZbXZ Arc/bW8Bw6x5CigbUpdgrMHfJZZeqBomp2p/cIlClnmH9t2URjeMnfQ1TR9edQsE rhlUXTT7LjTGsQE+kUOgBu2upIdtDYrGz/vs4mYBSfqplkxtyb7jw7fRErGPCpYi 4BfL73+P77eKP48ZFWNFI4RfRWv8HUAJY/EdEv5IUIMvNmWkb3EU2rk2YK73hs6G OgQ+fQBX2kx6RMXgneFnS80aA1xCaA1j8IHRHEtZmqddJVU+hpSGQBdE4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO3QyVtVjcaJE4NC+EBOdw9qQBumMB8GA1UdIwQY MBaAFHanWCbpkSJaQp/4oef/3IBGZCDfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xZDMzY2EtOGQxYy00OWMwLWJlOTct YWQ4ZmJlYWE4ZGQ5LzEvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8xZDMzY2EtOGQxYy00OWMwLWJlOTctYWQ4ZmJlYWE4ZGQ5 LzEvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKV8pt/D4 yjAi7gBqpYEedum2CAj5gbgTiBbRzM21+GgzOpCS2KX/7gNQFRo/DnWhY3ziPX14 mtULba6hyh/I52cskt0gnx1QpnZHSiPJvTiH9b28cT/vJrAaK1r6CAs4HNBE0IK/ bZyIPP0RCfTSB5UgkVSpmRpEZiub0Iw0Bb9H9nl+xTsjImKKaeOm59VoOuXosNbH YqWmqhvAOp9oguZsaIpq88eCHcPKkkn+rOmr6xFy92KbFTRSmR0Zt7YIVpw3oXLT WVn0x/Fv4ctobV8pNq/S89XEIFFVSBJu7CUfRYn7jo7uxpyLT4wxAiNvvpn8kmyu Sah9CzkFXw6RTg== -----END CERTIFICATE-----Generated at Tue Jun 3 23:44:07 2025 by rpki-client