$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft File: pa6KPYvaq_R2X9p51V7KjGnIvyw.mft (raw, json) Hash identifier: JmTImhM2ZnBq5A02Lg3feh2j0fhQ+O0DWH+qmunD630= Subject key identifier: F4:A7:43:C9:1D:19:60:EA:2B:D7:5A:DE:CE:A3:F7:D3:F4:A4:C6:6A Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 019607540F2A6AFB2544C013AA65A57685A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft Manifest number: 0D58 Signing time: Sat 05 Apr 2025 19:01:11 +0000 Manifest this update: Sat 05 Apr 2025 19:01:11 +0000 Manifest next update: Sun 06 Apr 2025 19:01:11 +0000 Files and hashes: 1: 0dU4nqEloVTcpEFXy475oUdUoRM.roa (hash: +4pYEKPa/Azd7C288MxT6V8nhRo2gQ9C9f/LKpJ2E7E=) 2: 1-b1uUe7cDgUrt3O4cESXQzwLGQ.roa (hash: 9R4woCA7+AwuSB5OUnv/Zt0yVaohvWvZyAFjNEcFpfE=) 3: 3xG70OjpGDqTBtiV7J7ymcYWBFA.roa (hash: NM1Xt/iOH+RmW3xgH3e/zgM6erx/P3+UNPyWgezEG04=) 4: 52gqmyCs4CgJ8hxO4adVAhEf4YY.roa (hash: XpLF/BJt6KR+R9bnvQWMbSq818F5Y+BHu0O++mZbSiE=) 5: 6X2qxBTvsCu1KGgFjFHR9uizprw.roa (hash: THkA0uqanR753o/JOdPq3eCkVb6ZWxt+PiJvED7/Lgs=) 6: 8HW0T0gkjxuqP-_rFWA6XvZFszI.roa (hash: yvdGjJhxvncAn0kSWkYpvMzmOc86v5+R2cMLIZsxEfo=) 7: AqFQoZ5tMcenZVTjwiA7wb5NyGQ.roa (hash: mIDD2KzFcnMgCK/1kzPsCL33au7Vs9+ruXIfYWsMf4I=) 8: CuWsHbgT_C2B1MpCzl3Tcnh7qDA.roa (hash: FydU5iTLeGKnPVKpFCTWxei80LuqHywDP80pxMyuq9w=) 9: EV8C5U1nh3UWRVZyZWy4C7aXG3s.roa (hash: Q9qCtjkY6ZONgmktoZ06EQ20f3d6KCx1NRtILOVyIkI=) 10: IDk9MhfQceeWf9Aau-Lq0fZ-_CA.roa (hash: xOkvkF2fhOLphDe62JH2DeSLHq9CCUD041TbmVLDc04=) 11: I_zTEANA5HgNFK3xcWmr5JQSd4w.roa (hash: 8kt6pXomqbmYP20u6DRlj+fZL0R8g/8XjkQCzdnUfBs=) 12: K5PwPytOI_jcP9He1nt3G317eYI.roa (hash: cTDvsg09oLpiFvnjwcs0kSKetfHr8fv3r7qeLPsUP5A=) 13: LCvaB4WSKzttpqTMBERAKzTPkc0.roa (hash: efuSbUVkMb1LRDxLfq3t1vkJUtMph/K3Ly/MOMCQIYc=) 14: LvCg6ODOvz7fOcsn6wU3ngQnNXI.roa (hash: 2DJ8XZWQOJtfhwxPU+bThNRmPW5rZXIuxQU0nHhPZHo=) 15: M0UFmj8utuihy8ywzKYVtKAlOpA.roa (hash: GB4oTrIEAnIhwubWgjQhf6VSBwPU6R7tbEiE074YX9M=) 16: PtspP9NAMUf1vNrA5veAQs8D3JA.roa (hash: ulePbYZBa8BBx8Rf9110z7Z7LwUX7PcrfS6/GMQQI50=) 17: QnKLXYadCEK7EFhDz6MF7GYNjvI.roa (hash: rOJkJ3eVk06xoaQ0gvNi9t1WIsPI6NQJ4lEou7caFDk=) 18: T48pBsuhvbZxzuQikn6LHKfOwhk.roa (hash: riJSrEr8eklbL0fdBY3f1J6u/fO/qv2OeNqqUNUL/bI=) 19: XOx0VQXemWnE1_T_CbW1BF1yKGs.roa (hash: AVLDrE5Y2ydpWZbzqq6OGq4i3RC3l/nkGJBMXJVQobo=) 20: Yl2M3tHD9BpxXAF-8RCTakseDqA.roa (hash: SffwXpK1Th2HbQCicN1UUfkjL/i1kZCt1vfJ2FKzFtA=) 21: gaylLdxDyQb8sels7s5ku7UtfkU.roa (hash: U1UfdjYQAukjcg29y8zD3MFVpeQLO0fB9T/k1AE2BIc=) 22: hPYLx_9mBj_Ye24Y1_2lQPvsrq4.roa (hash: vQ4lqUvsFgblBgv4IH3pH1VZWDEVfeUus2uMPqiXEdM=) 23: i-XH3WsMULykHW1y-BG3UdFVuxk.roa (hash: VJILQeKFY+tCpv/VALS6QQ/A8bjqBJ9CpKPAXcs36qg=) 24: lxacDbK0eMnuXnpxPVHxYt8h8A4.roa (hash: rsXevB7T0iAAuzzWpzZrb3jX78EQxi4+Xjb6q3I67TY=) 25: o0unYtOvK0ypo95RgHxsLRbSEI0.roa (hash: /Kszii2RBvuT+vSDoTo/zRmMb8Q32yFP1SEkPKjGPyg=) 26: oBhyptF6QE4JF_exwsXWUGhFPFA.roa (hash: 3hvM7M438cadgQ4g9HhgILZgXMpg0ZtzDaSbf/K5RFE=) 27: oxqqJb6s3Y9_xl6qI2Z76gczjAE.roa (hash: 3Mi3svCpiZUvbXpx9Bao9teVj53BNUZ6cGIpnDn9NXg=) 28: oyokzIn026-PrXoWkL2twkIzg5c.roa (hash: vnYvn1vfv3V6OKUsd9n/C+ZJyouWqYiCJWFXAmzYfwA=) 29: pa6KPYvaq_R2X9p51V7KjGnIvyw.crl (hash: oapcl8rggyZJeStIJAiDSAbhNk9Xt2XGk8Z2gpdwjPU=) 30: pakgoJm1JHH02EFn_cluKwwBgfw.roa (hash: 9psJh/g+q6UomADY1AKlNBezhzkIM0njclurAr2L1G8=) 31: qyVuEE_iZxUcQNKHUqVvNbUSd5Q.roa (hash: yJBmopjTpiGvBLTxepISwc4Bu7mb8teVZwXirlkcbTI=) 32: rMButntV5GnO7W7_TuF_ZPA6g1Q.roa (hash: QKYvOeC5NwDMQzqYncxkm8rqO0746QVz/H7okZ5iBmI=) 33: ti0W6fjaL6Z8NJz1MH9rdtxIt7Q.roa (hash: eexhvPXToWxtG+Ffy16JfuC8/yelu2NCnq6+i2y5ma4=) 34: uV6pu-rvAp4G68o2AgVK7vbBPX8.roa (hash: ykD9UesXzEoyDyDfGqtntVW1hYElb551gS1dPJQBUlo=) 35: wifLocMxfpz5rpj13UULY6xFWiA.roa (hash: zSAQgyK21VbhaQRoZfBOovQi13W5eH/UHapg2UUnRmI=) 36: wv61e77oscUDJBn9VYlTu_3AbRM.roa (hash: WF74l5Tv59hxzHDkv3UDIsUfaTD5KoMxhkr5geA0BW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:07:54:0f:2a:6a:fb:25:44:c0:13:aa:65:a5:76:85:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: Apr 5 19:01:11 2025 GMT Not After : Apr 6 19:01:11 2025 GMT Subject: CN=f4a743c91d1960ea2bd75adecea3f7d3f4a4c66a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d4:a6:0c:0b:0a:45:72:cb:c3:e2:55:57:98: 0d:b8:cd:46:7d:61:8b:f4:6e:92:30:6f:56:84:67: b7:6e:d9:e7:a4:bf:04:a9:98:8f:ef:9e:fa:af:fa: 8c:13:de:d2:ba:33:2e:3f:ca:45:c1:9f:b3:d5:5a: 1d:bd:04:94:66:32:84:2e:56:af:bc:c9:da:74:88: d4:9c:4a:5e:c2:5e:eb:aa:04:99:b7:b9:bd:c6:ad: 1b:5c:35:18:b0:b4:3a:9a:6c:aa:31:49:13:95:dc: 8f:33:2c:ef:41:2a:a2:29:1d:b9:ec:7b:8e:7d:f4: 5f:44:6f:57:7b:63:6c:9f:81:62:ca:0e:be:58:8c: 4b:d1:3b:e8:2f:8a:59:fc:2a:4a:71:e8:c0:c3:d0: 20:e0:e7:01:8d:00:d1:49:08:28:c3:71:39:76:0a: 68:23:bd:fb:f8:58:36:e4:be:a9:67:15:21:86:86: 10:41:63:a3:58:eb:b4:3f:af:bc:62:a0:1b:e0:4a: e7:74:5b:6c:68:25:ee:39:c4:82:28:9f:9e:3a:18: a9:3e:54:4f:89:df:91:93:d5:f5:12:ba:12:6c:18: 50:ed:68:ac:4d:79:8e:e6:a6:09:34:3c:94:53:27: 5b:42:e1:ad:b0:61:60:98:ec:80:9d:d7:0f:a1:dc: 0f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A7:43:C9:1D:19:60:EA:2B:D7:5A:DE:CE:A3:F7:D3:F4:A4:C6:6A X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:50:da:a3:22:e7:0e:25:39:fb:1c:c0:ae:08:00:0e:17:41: f4:7b:07:96:fd:e3:17:4f:45:ae:5e:bd:ff:77:bd:db:90:ea: ba:eb:18:f5:55:e2:2d:af:f4:9d:e0:5f:1a:da:3e:39:05:9d: 9f:b3:5d:0b:63:e7:09:a8:3c:95:0e:3f:15:f2:39:7f:12:5e: 9f:69:62:78:64:5a:09:0a:a3:5b:36:45:25:5c:b7:5e:2f:76: 2e:23:c1:cc:09:69:59:8c:bf:74:38:df:7f:4c:d7:fc:7e:59: b8:19:5d:eb:77:0b:38:ee:11:07:d6:d8:53:d7:82:a5:b9:ce: 6e:b9:27:a6:bd:27:16:03:03:cf:13:4a:3b:0d:3e:11:a7:cf: a3:18:15:11:d0:46:5f:a4:ed:77:73:79:9e:7d:28:a9:6a:26: 66:a6:11:a4:7f:8a:b2:dd:52:74:ca:e5:d0:16:85:f3:84:f9: 01:53:dd:9a:dd:21:a8:0c:d1:18:9f:a6:67:42:8b:2f:f0:c7: 28:98:42:31:03:c2:51:d7:f3:4f:99:45:38:cb:0d:53:2c:73: aa:d2:b6:5d:14:9e:0a:a4:48:6d:79:3c:7d:14:90:34:8b:0c: 78:61:50:f9:25:52:e6:e6:47:10:04:df:99:42:1b:73:0b:7b: 4f:4e:f7:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYHVA8qavslRMATqmWldoWoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjUwNDA1MTkwMTExWhcNMjUwNDA2MTkwMTExWjAzMTEwLwYDVQQD EyhmNGE3NDNjOTFkMTk2MGVhMmJkNzVhZGVjZWEzZjdkM2Y0YTRjNjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9SmDAsKRXLLw+JVV5gNuM1GfWGL 9G6SMG9WhGe3btnnpL8EqZiP7576r/qME97SujMuP8pFwZ+z1VodvQSUZjKELlav vMnadIjUnEpewl7rqgSZt7m9xq0bXDUYsLQ6mmyqMUkTldyPMyzvQSqiKR257HuO ffRfRG9Xe2Nsn4Fiyg6+WIxL0TvoL4pZ/CpKcejAw9Ag4OcBjQDRSQgow3E5dgpo I737+Fg25L6pZxUhhoYQQWOjWOu0P6+8YqAb4ErndFtsaCXuOcSCKJ+eOhipPlRP id+Rk9X1EroSbBhQ7WisTXmO5qYJNDyUUydbQuGtsGFgmOyAndcPodwPMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSnQ8kdGWDqK9da3s6j99P0pMZqMB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1DaoyLn DiU5+xzArggADhdB9HsHlv3jF09Frl69/3e925DquusY9VXiLa/0neBfGto+OQWd n7NdC2PnCag8lQ4/FfI5fxJen2lieGRaCQqjWzZFJVy3Xi92LiPBzAlpWYy/dDjf f0zX/H5ZuBld63cLOO4RB9bYU9eCpbnObrknpr0nFgMDzxNKOw0+EafPoxgVEdBG X6Ttd3N5nn0oqWomZqYRpH+Kst1SdMrl0BaF84T5AVPdmt0hqAzRGJ+mZ0KLL/DH KJhCMQPCUdfzT5lFOMsNUyxzqtK2XRSeCqRIbXk8fRSQNIsMeGFQ+SVS5uZHEATf mUIbcwt7T073MA== -----END CERTIFICATE-----Generated at Sat Apr 5 22:32:51 2025 by rpki-client