$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft File: EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft (raw, json) Hash identifier: A20HsJyc2U4OH3XbMgo1rHv+lZzaYhG2UVVu0mMMoTk= Subject key identifier: DA:5F:EF:CA:BE:5B:16:77:E9:B5:03:BB:C1:71:B7:90:1A:F9:99:E1 Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Certificate serial: 019606E6AC9EFE68957ACA480741B5C3F426 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft Manifest number: 1536 Signing time: Sat 05 Apr 2025 17:01:42 +0000 Manifest this update: Sat 05 Apr 2025 17:01:42 +0000 Manifest next update: Sun 06 Apr 2025 17:01:42 +0000 Files and hashes: 1: 1-z0xCJwtZ7oNjVyEZRiUl707L_U.roa (hash: kH96KZu4zVwqWimn8lprbltf+L6jN14xGOOzu5+uka8=) 2: 3L3xDarJu5Fz4sXBw4PnJpUrKg8.roa (hash: mYOTUrTGScHJ9ebv2B+CxOPHDS6vmmMB/iTWFsSubac=) 3: 6lCcCiAG_a6sOfmRZ6qeYO15iGs.roa (hash: BFQuhQiCrduZkmNzpLq32WMBJG9sF3KBeOMWP2TxRSA=) 4: 8HMlEMu_BSHgTuVZxYXkPOUH-XA.roa (hash: nzR0epdeX2+WJtESwgq5prAKeUM2fNXd9Y9hluvNjBg=) 5: EU4QWvJeKnbJ2gVJ_l-zXW58tiI.roa (hash: 2GTsiEN1pVkfT8wxoGUw+kBia4yRrXQI1p3cFmoAfU0=) 6: EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl (hash: 0ovoTwsaDh5FB42C5x1jHedaySsk1xRcSKqSvKULB64=) 7: JY0sVxRmdyc5WAgUY19lxnxmM4I.roa (hash: 86gvkJrlTS8XF8/W3CjtN+tW5tBzNGMNDhj7XFXK96U=) 8: NK_WPhYvDc3eEpYFCQ9ge52GMvk.roa (hash: 1fbP+50M9LhkCXd17Y2+Euhe18E6Q+JHRhqDIhYbeMs=) 9: NauuGUSZn-SgPXuLy6E5pAV66N0.roa (hash: dn6a8tKxIadhVZxQhBzsKgyugbJ2THkUTfOT2uFIVqs=) 10: PICG-s3Q4YZkop6Z75tQ1uqUjjc.roa (hash: RYwj25TTRgCRFd7rjmY1yuMhB2tlpTJT7SA0DAX0bR8=) 11: PyyzXUdlmoA9Bk7oa0uF75YdupI.roa (hash: KrKiurvSNPj8UgpNpGVtpzLAre3QiNcGoEwUhT8E1Zw=) 12: RRHkc1lOsJ0WrMbiCvf9G3l9Ja4.roa (hash: fpJ4KH8CMslY9U5qvXp1614yNP772K6f37C+wQxE5Ec=) 13: SfLzunSNfVE3jb-NulCQVQsuoCM.roa (hash: G79tyE5U2vanoxkN6vEyOepef/dA2Pb0suWRvxlA2eY=) 14: VH8QK20zoazrn9p_89zomLcULQg.roa (hash: pptS2UyRLo0076Ca5F8RsGdYwbB788fcM68VL9PGOQs=) 15: WdrQA2XxuRSob5fch_vmulfj1p4.roa (hash: eriXlUX2rEIxDuWxy0Sj12+EAh+KHElo42nsQ2xL4P8=) 16: YshAp7kvzSEqzUAJqYQaXPlimXM.roa (hash: 9wAijCHBf70P9HVKz7vJxcgO3NSgfGywCSLu5rKQFcc=) 17: dcujdY7nZpLDRD7umvphEez-qpw.roa (hash: DCDyLYPDKXFLZDtPjhfGEgVVy0YwKX5izGR8g7lqUrY=) 18: eKYivdThEYNqXTARb0-te2VE2kI.roa (hash: UvHTjONqnplM8Hb7ZC6ohM64r8xQixEce73idZxGGsw=) 19: gg8zzgS55uq5P6kGkuaJFoKcCTA.roa (hash: nEDs7oqRrIVyofxdHlPaduwYU8FU0iwSUVYcN9fZIC8=) 20: p7JIV6hAP8Iqcna1OjzOq4_7YRE.roa (hash: BJrzKoW9PKHRZxoa3GctY7R2lGv3C7NaVaECKpXws6k=) 21: pHrarVnk95oQe2hI0xpt7DgCX4I.roa (hash: sJ3eEhOn7jQjhfcoZ42EdbEeYJY/zzcWxgg/rji7kDE=) 22: pxErwoucWB8yQbaQqe1v45Sxb10.roa (hash: 8JG+D2s4aIAKcUNnH/GZ789KXpymk/hO3QsT835m9zk=) 23: t7-lVymTI7BBAmfc0HyT7P4YiOk.roa (hash: 5liRD96jP/HBEKpzaeMEPIuWW26VUEfUx+5EWcBIeqI=) 24: ul3uv5hec5ukIf7FCGeau4nCEHc.roa (hash: pc0UTa1zNFc4D1XbCiXp6Zxm7lOslpwK+C/ygH0+nGg=) 25: ys8EEYV9duz4vQMnV4A63KTELEI.roa (hash: Mzw/QCxXFE0BItwPGjx2i5l7tZTi3Kn7VnGnniz1APM=) 26: zpZBrq8RbkZDS9RG2TxpwXGuLC8.roa (hash: owyVbjuxXBLCpmTk2xHR5ZOcrMg9navrhIk8zkX+9js=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:06:e6:ac:9e:fe:68:95:7a:ca:48:07:41:b5:c3:f4:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Validity Not Before: Apr 5 17:01:42 2025 GMT Not After : Apr 6 17:01:42 2025 GMT Subject: CN=da5fefcabe5b1677e9b503bbc171b7901af999e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0f:c8:9e:6c:b0:77:f6:f7:1e:0c:64:92:b3: 8c:3c:69:b0:a8:b8:b0:cf:ad:87:b6:fe:2f:83:8c: 2e:c5:74:bb:f2:ef:c0:19:8d:6f:07:10:82:fb:1a: 2c:81:c4:c6:0e:7b:67:79:65:66:2c:37:9a:11:94: 2b:cf:82:ee:17:90:97:94:f1:91:14:14:bf:d0:42: e2:15:02:a0:ec:04:44:a3:44:45:d9:f7:ad:97:c7: 69:60:75:f1:12:17:b9:6b:3a:92:df:35:2d:fd:ce: 54:76:98:95:0b:4c:d1:fb:c8:01:6f:9a:5f:99:b3: 33:37:89:53:a0:f1:27:6d:34:46:91:1b:36:38:15: 7b:6a:75:9a:73:9a:9f:21:3c:98:aa:6d:7b:83:f1: c2:cb:15:e1:5e:68:46:83:5d:c0:f3:0d:a3:d4:16: ac:68:55:a0:07:f7:97:48:c8:14:0e:3e:15:ca:82: 95:33:40:be:ef:d7:16:5d:3a:3e:c1:d2:c9:43:4c: cb:a6:4f:26:f2:30:d3:e7:af:9a:4a:d0:26:8e:6e: 83:33:48:8d:9a:58:56:b4:bc:68:24:60:61:b1:cd: 21:39:7a:97:59:b4:09:bf:c5:3a:43:2c:23:95:4a: c2:18:9c:be:1e:82:ab:da:26:3b:c4:eb:40:2e:79: 27:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:5F:EF:CA:BE:5B:16:77:E9:B5:03:BB:C1:71:B7:90:1A:F9:99:E1 X509v3 Authority Key Identifier: keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:7e:98:c5:0d:15:bb:97:67:56:8d:2b:ab:e8:67:18:90:38: 33:42:65:cd:a5:a5:99:0e:19:06:90:55:aa:37:84:ac:2e:e8: e4:94:d1:01:cf:5f:04:3b:16:b9:78:7b:cf:52:64:02:13:ef: 7f:48:b9:e4:7c:78:72:a1:31:59:79:81:d5:d2:f3:46:90:b5: 86:e5:09:69:27:8e:5c:1d:b2:39:67:c7:e0:f8:6f:f7:49:d0: a5:d1:04:d8:b6:22:c2:0d:0c:fd:88:9b:95:be:a1:88:3b:76: 34:95:8c:ea:45:1c:27:43:50:9c:21:88:43:58:3b:2f:0a:54: 17:15:56:8b:10:89:8b:be:62:fd:6b:87:e1:78:02:bf:1c:5a: 0c:9c:87:31:f0:5b:52:6f:a1:ac:6e:5e:48:3f:d3:d7:80:ca: 79:d9:41:2f:97:9c:cd:51:8a:e8:52:a9:cb:88:d9:72:11:83: 4b:9b:2b:40:af:2e:bc:2a:89:3a:a0:3c:84:d8:1b:70:ca:f9: 8d:7a:6f:d1:98:67:ef:08:e9:46:69:10:2a:1f:07:4f:74:e6: 19:db:1e:de:c9:a0:92:5c:5f:93:8b:5f:ab:cb:16:80:db:5f: 4d:cf:83:eb:33:c2:86:0b:e5:9d:72:26:15:c5:b9:30:7e:90: 39:7a:93:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYG5qye/miVespIB0G1w/QmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm MWM3ZTgwHhcNMjUwNDA1MTcwMTQyWhcNMjUwNDA2MTcwMTQyWjAzMTEwLwYDVQQD EyhkYTVmZWZjYWJlNWIxNjc3ZTliNTAzYmJjMTcxYjc5MDFhZjk5OWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA/Inmywd/b3HgxkkrOMPGmwqLiw z62Htv4vg4wuxXS78u/AGY1vBxCC+xosgcTGDntneWVmLDeaEZQrz4LuF5CXlPGR FBS/0ELiFQKg7AREo0RF2fetl8dpYHXxEhe5azqS3zUt/c5UdpiVC0zR+8gBb5pf mbMzN4lToPEnbTRGkRs2OBV7anWac5qfITyYqm17g/HCyxXhXmhGg13A8w2j1Bas aFWgB/eXSMgUDj4VyoKVM0C+79cWXTo+wdLJQ0zLpk8m8jDT56+aStAmjm6DM0iN mlhWtLxoJGBhsc0hOXqXWbQJv8U6QywjlUrCGJy+HoKr2iY7xOtALnknfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpf78q+WxZ36bUDu8Fxt5Aa+ZnhMB8GA1UdIwQY MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt ZWU3NDY1NzU0ZmY2LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2 LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWH6YxQ0V u5dnVo0rq+hnGJA4M0JlzaWlmQ4ZBpBVqjeErC7o5JTRAc9fBDsWuXh7z1JkAhPv f0i55Hx4cqExWXmB1dLzRpC1huUJaSeOXB2yOWfH4Phv90nQpdEE2LYiwg0M/Yib lb6hiDt2NJWM6kUcJ0NQnCGIQ1g7LwpUFxVWixCJi75i/WuH4XgCvxxaDJyHMfBb Um+hrG5eSD/T14DKedlBL5eczVGK6FKpy4jZchGDS5srQK8uvCqJOqA8hNgbcMr5 jXpv0Zhn7wjpRmkQKh8HT3TmGdse3smgklxfk4tfq8sWgNtfTc+D6zPChgvlnXIm FcW5MH6QOXqT+g== -----END CERTIFICATE-----Generated at Sat Apr 5 23:16:49 2025 by rpki-client