$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft File: jRrIPuOj-WjWatL99GFue7Hk0dc.mft (raw, json) Hash identifier: yAXrsd8YeuK/y4sgUiJv523xoxaoGNEvyZb0BF+3U2Q= Subject key identifier: 85:81:13:7F:5F:57:DD:87:AE:63:6B:06:34:F1:97:EC:44:F6:16:FF Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Certificate serial: 019604F84F48B381F54EA1C30C836957EEEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft Manifest number: 0A4D Signing time: Sat 05 Apr 2025 08:01:44 +0000 Manifest this update: Sat 05 Apr 2025 08:01:44 +0000 Manifest next update: Sun 06 Apr 2025 08:01:44 +0000 Files and hashes: 1: 0hcYkFvLnPnX3tJPZIl-Uhot1i0.roa (hash: 6/eHz/J+k5SuDY5b5eslxHZpd3P/l7+bfENiu84Xo/Y=) 2: A3vCnLdcCAHsjG0TKS7PepEiSRQ.roa (hash: 8/8TxF0wXw7stYTcBeXGRpf0HZpKR5xHMrhdKNPhjb4=) 3: Eb3nQCsubyrRRwgtef25b2tcJbQ.roa (hash: sgX7PEOSSTdMVUw2kIAqvpDSoV+TN56cGW37Ykizvek=) 4: FJwzUUbdezVNzNPoBur-f72I-yY.roa (hash: Be0En7pc+J9Z+qriz5NoqsV2WY9CqrIfwJvj67jTpOU=) 5: FQFiaH-Uhznyo9tuv-39hg1SgIc.roa (hash: AaAgvoQWwsBdEDlzs9JJLKseENMJxUCvDZ1+feCaadI=) 6: LNIAH1MylX8WQQ-W8xfPHTlOsW0.roa (hash: GFXXpakvt3mJ4yGbBFawI3+WVF7sKNF14A1lgtziIek=) 7: Lxv8RdYN9P2vj1nZyAjFF9lNkU8.roa (hash: xMtpILHpW8icGyga3EnNkKUNmrRxGITTuJWIIZqDxDI=) 8: MudRzNeUk2R859eEP09GJeDExf0.roa (hash: 2o3NbfW7AkgEJtAc91HUgnIB/5KesUMTjVvuVU09fp4=) 9: O-5F8n-juBk2nYl1gci_-XOB28Y.roa (hash: q4H/W5/riiS15ohKwn5Jvpq3eN+EVAlqCfqt3wMvB5o=) 10: RTZYU-7DG4fUoipBd0qSh8BirjI.roa (hash: 3eo6AFVTXAYcIIpYV9OFjF0R4DRTO3nfrXKCxpb3Q8c=) 11: Vuwy4UpCh3r45QRPGtnFisDhkBg.roa (hash: nn4gkMTZTxc05c4TzvqQVbbL5rTK/jkU1c33DwnOyy8=) 12: aZdPCjQPrpXH6_ugUt-kcLfLBww.roa (hash: bvQOO3EjkLFVPQ56lvOeF4mzLEyN5lqfogJ0iJmnl1o=) 13: jRrIPuOj-WjWatL99GFue7Hk0dc.crl (hash: oiaygGCeKjWgIotHMrlagsH+LAa8ti8OA0B7x06HDfw=) 14: koWcD6_YJsplq6MpdAuoeyxurzM.roa (hash: 2bTDDvlz5M3JHeYmPpa6SlfroaAlw505uc1zw7/pXCU=) 15: l-VXPhXSd9oDrwdeFBV0TfekxRI.roa (hash: J5Ti7dTZ3X/5jS4aqunQYVcXN1Efh318fTK/MczMR4M=) 16: lO8z4PUnAAW_FQZ30LG2G_SaC34.roa (hash: TP4CK9avYURoeZBLUriM0sZhHgj7m8xB680P8/Q/778=) 17: nHSye6xLjTJdy1NFMQ9UNlBR1r0.roa (hash: x+w+bpNcYVfLYVFpFJoqaG3bmPwP5KeEN+TuOk91gTE=) 18: ptIzMM5pGR32qdt6NWym3eUNiak.roa (hash: bSsM8QyZGEjlRqx/UPAoekl3qkyD03EUapHU3WIbdX4=) 19: tesrxSIX8wDOD0usavdzlelTyC8.roa (hash: 2mw6qDJEVPvk2SB5Frfa2IZ+DHf6Rgtla+C91qwtmwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 04:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:04:f8:4f:48:b3:81:f5:4e:a1:c3:0c:83:69:57:ee:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Validity Not Before: Apr 5 08:01:44 2025 GMT Not After : Apr 6 08:01:44 2025 GMT Subject: CN=8581137f5f57dd87ae636b0634f197ec44f616ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f4:45:ae:d3:be:7f:d0:93:3c:e9:68:5b:c1: 71:f5:47:4d:17:ad:a4:44:19:cd:db:d9:bd:80:65: 3e:67:9d:e9:53:8d:48:dc:42:68:c2:b4:cc:02:04: f4:3f:8a:bd:39:b8:98:5f:eb:06:f5:f8:25:85:d3: 8d:d2:11:e2:90:6f:bb:4c:d8:25:d7:0b:63:10:e5: 38:53:9d:00:ce:34:73:2b:ab:89:7c:97:1b:6a:08: fb:31:d1:20:b0:f3:51:bd:8c:95:23:e6:59:c4:df: 3c:d5:7d:85:73:07:b1:26:13:e5:f3:51:ab:4b:08: 60:91:bf:44:57:b3:a4:57:de:5f:cc:e5:cb:0a:e2: 5b:8d:61:10:8c:8b:a7:06:00:3c:0e:cc:9c:5b:79: 10:3f:b3:f1:b8:c0:e0:f8:9f:39:44:57:f4:77:47: 97:f0:29:52:f2:c9:7c:0d:aa:c9:1e:92:c9:35:b5: e0:6f:bd:6e:47:15:d9:f4:6e:fe:d4:32:22:81:15: 58:a8:f4:d2:7d:16:6e:2f:cc:db:e8:a1:45:f8:1c: 9b:ec:4c:a2:b4:d8:34:9a:ae:ec:e4:e0:e6:5d:96: 70:55:a7:fb:33:33:f3:f8:c9:16:d5:66:97:5a:44: 82:5e:87:f1:0d:dd:d0:1f:c3:84:97:ac:a1:c6:ca: 81:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:81:13:7F:5F:57:DD:87:AE:63:6B:06:34:F1:97:EC:44:F6:16:FF X509v3 Authority Key Identifier: keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:3c:64:55:c1:c3:37:fa:1d:6a:cc:b5:8e:91:37:84:ab:8f: ff:9a:a8:de:cc:24:01:d8:41:7a:52:6f:b8:5b:69:30:a1:c2: 75:7c:e4:d1:0f:08:b2:4f:41:5e:2d:f4:ee:71:6b:46:da:6f: ad:b0:a1:c0:10:09:4b:f2:8d:6d:b1:ea:b6:00:77:dd:b3:32: 27:7f:a3:0a:48:be:8c:51:b3:83:53:99:ef:83:29:6a:55:53: 99:6a:76:83:77:55:af:02:8f:44:af:c5:5c:b5:bc:1d:15:7e: 6f:f4:30:2f:a8:4f:fa:f0:e6:3e:34:c9:a3:24:8f:16:1a:5e: b0:9b:df:20:c9:78:73:0b:39:ff:80:a7:93:2a:94:9c:85:c5: 5c:8d:46:b2:a0:fc:67:ab:c6:c3:e9:2a:2b:ea:b9:21:c7:1d: cf:f7:b9:39:77:91:41:40:aa:c6:83:8b:c7:3b:e2:e1:66:55: cd:95:31:4b:15:83:53:5d:08:57:ce:63:34:8e:17:38:f5:62: e8:f0:fd:c4:4a:34:e5:bc:63:a6:9b:63:45:0b:a9:c5:6f:6c: ec:f2:37:d2:7a:44:4f:e1:a1:ab:37:dc:04:63:3f:28:56:80: 23:bf:a0:ef:75:a5:ff:83:b7:65:1a:3e:db:d8:e8:b1:27:c8: 63:0c:05:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYE+E9Is4H1TqHDDINpV+7qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl NGQxZDcwHhcNMjUwNDA1MDgwMTQ0WhcNMjUwNDA2MDgwMTQ0WjAzMTEwLwYDVQQD Eyg4NTgxMTM3ZjVmNTdkZDg3YWU2MzZiMDYzNGYxOTdlYzQ0ZjYxNmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/RFrtO+f9CTPOloW8Fx9UdNF62k RBnN29m9gGU+Z53pU41I3EJowrTMAgT0P4q9ObiYX+sG9fglhdON0hHikG+7TNgl 1wtjEOU4U50AzjRzK6uJfJcbagj7MdEgsPNRvYyVI+ZZxN881X2FcwexJhPl81Gr Swhgkb9EV7OkV95fzOXLCuJbjWEQjIunBgA8DsycW3kQP7PxuMDg+J85RFf0d0eX 8ClS8sl8DarJHpLJNbXgb71uRxXZ9G7+1DIigRVYqPTSfRZuL8zb6KFF+Byb7Eyi tNg0mq7s5ODmXZZwVaf7MzPz+MkW1WaXWkSCXofxDd3QH8OEl6yhxsqBnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWBE39fV92HrmNrBjTxl+xE9hb/MB8GA1UdIwQY MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt ZGRmNTY3ZWRlZDAzLzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTxkVcHD N/odasy1jpE3hKuP/5qo3swkAdhBelJvuFtpMKHCdXzk0Q8Isk9BXi307nFrRtpv rbChwBAJS/KNbbHqtgB33bMyJ3+jCki+jFGzg1OZ74MpalVTmWp2g3dVrwKPRK/F XLW8HRV+b/QwL6hP+vDmPjTJoySPFhpesJvfIMl4cws5/4CnkyqUnIXFXI1GsqD8 Z6vGw+kqK+q5Iccdz/e5OXeRQUCqxoOLxzvi4WZVzZUxSxWDU10IV85jNI4XOPVi 6PD9xEo05bxjpptjRQupxW9s7PI30npET+GhqzfcBGM/KFaAI7+g73Wl/4O3ZRo+ 29josSfIYwwF5g== -----END CERTIFICATE-----Generated at Sat Apr 5 12:58:21 2025 by rpki-client