$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft File: 6AHyPOghwmTWdydTbsGDU3WUxfI.mft (raw, json) Hash identifier: /xgr1TjJu843Un4Bc6u4KDX4WXTcHTZgYtPpvseYpDY= Subject key identifier: AF:50:98:93:A4:22:71:6F:6D:E4:C0:CC:FC:13:2E:6C:7A:60:08:2C Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2 Certificate serial: 019644E8D1F332C6A764EE7AA4BA06268D38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft Manifest number: 14FF Signing time: Thu 17 Apr 2025 18:00:30 +0000 Manifest this update: Thu 17 Apr 2025 18:00:30 +0000 Manifest next update: Fri 18 Apr 2025 18:00:30 +0000 Files and hashes: 1: 1AY-3wX89pHsKMEMJWGHTHsJ8gI.roa (hash: isIoAb0bdzc9Cbbslo3RKCKles0GJe6/bSmHAxkyj+A=) 2: 21W9uhOLCfGBSLMK8xlCrH8tOg4.roa (hash: AjEuF2+0cRLXo4E2JHpp6w+dtVFDkzA5bZ7j4AtGGgA=) 3: 2nB34LVBbtl74aGRyrgO8R7Ndlc.roa (hash: vcU/vsmwMZU339dKKRVuUgWsl3f587fyzQ0cKDXFwYs=) 4: 36o_asZrpJckrJYtCQ_3cyS6VxI.roa (hash: n+NrjdHAcQK/VqsswfVMbQbVU4jqmrrdhbmTvGV91ts=) 5: 4YclLAlicy2DcCNHws_6seOTF_o.roa (hash: MDIYzRbkjVFgI1Ats/352Yqa0tN/SB9gbJGmZv6PQg0=) 6: 6AHyPOghwmTWdydTbsGDU3WUxfI.crl (hash: IEW2nyFdaJqbZ0uKOQYc2NUYpUbz8hMCl3KWMAGPilo=) 7: 7QqVIV8LUR5c1jRBC94m2154ry8.roa (hash: TrmmIYdBlXXb3FxJhiLUTMljo4lEhT6KOCibHbFmEAg=) 8: 9K0UiUtwMeDGLO07jN4cphQ0NhA.roa (hash: iD28nbSB8h3AMCMtfL1dVEifxVKaj30VOiCxNvUpdlc=) 9: FQAhyrS0gBW9SqtuZi6NPEvhgvs.roa (hash: b2xzO3i1ZOAXGwMPX7/Wy40sppb1tn8N9pURrf2iaI0=) 10: GIbN6bPur810JuGuHTYh5u7F5NM.roa (hash: Oikl7sXMAHs0Y+UGW9FTy+uNhN71zF966LLlZ+ZYmZI=) 11: Gyz6a3KXlcszmeD4XP7JYSSJB98.roa (hash: AzG7hu1mJnSnaE2NJTDYkswyaDmFnEmOHi9jFFpjg7U=) 12: I5CoNuYa1QHmdQ9Kc75dGAMDAcM.roa (hash: k45LeIb2ZuFIg9nv2VIXeMwWDcrg/6igPHCTVBEmt7c=) 13: KDbreFm6qa86qVWPbMSXjiRJb_s.roa (hash: 1MEUcBOj0QBk1+QfUlYD7XLcRWpZwRWbbrAL7ZihjGM=) 14: ZT5okXQpCE1L_UFUxKGgKpmWveI.roa (hash: ApTwm5XOwO8lK1KOUvV88VBx+9bwwdRBzVYLDFE5Eqo=) 15: dlTZMeVOmH-sGjLKfnpWqcWWk2s.roa (hash: DB9sfDl87OFpyZ/nDL1JNomcxUe0WBEVSpKL3sB9cVU=) 16: dxiJRbb0rG53Lq98f0i5g1Diw3E.roa (hash: 9/nhvqiEnr8fAWmfTM/kuetnXqSQzx8yP5QO3uiQqGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Apr 2025 16:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:44:e8:d1:f3:32:c6:a7:64:ee:7a:a4:ba:06:26:8d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2 Validity Not Before: Apr 17 18:00:30 2025 GMT Not After : Apr 18 18:00:30 2025 GMT Subject: CN=af509893a422716f6de4c0ccfc132e6c7a60082c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:02:b7:a5:0d:10:29:f2:bb:56:b2:0a:b7:d6: da:65:71:13:50:de:6c:56:16:4f:b5:7a:fe:41:b1: 95:47:f9:db:1b:b1:78:5e:e8:b8:1b:5e:56:50:14: ea:cd:ee:cc:a9:d7:cb:39:51:4d:76:6b:8d:b9:12: b8:1f:c8:d7:5f:e8:6a:9b:53:1d:74:2e:90:87:bc: f4:55:f1:4a:9b:58:1c:af:7c:4d:f4:2f:ff:a9:c0: c5:98:d1:51:80:c8:2c:6b:38:8a:a2:9d:8b:e9:1d: 8a:ef:ce:b5:09:b2:79:b0:0b:fa:0f:82:f0:d6:c4: 6f:8c:11:92:78:7f:e3:89:c5:99:e4:f2:4f:2c:3a: e4:19:51:c0:08:05:a5:aa:d6:60:d5:8f:91:7e:48: 7a:55:f3:3d:82:8b:78:5e:3b:a6:90:99:fe:4f:6b: 2d:16:71:1a:4a:9e:a5:38:be:c6:37:cf:fd:88:05: cd:74:eb:06:ae:aa:04:17:e7:bf:23:c2:b1:81:e9: f4:a4:57:64:b3:36:07:4d:02:ac:4b:41:e5:5f:d7: a2:9b:8e:30:12:bf:c7:14:c9:0f:9f:c2:a9:f0:31: 05:90:d7:26:70:ab:ec:07:b7:f9:02:54:fc:c6:39: c0:68:29:7e:6b:de:25:6c:71:87:13:6b:a9:27:4e: d4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:50:98:93:A4:22:71:6F:6D:E4:C0:CC:FC:13:2E:6C:7A:60:08:2C X509v3 Authority Key Identifier: keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:1a:a6:44:24:ee:9c:97:29:e6:9f:45:fc:d3:9d:41:f2:e8: 89:b0:df:8d:81:13:c6:88:e1:a6:94:f2:d4:94:4f:6f:2c:14: 45:77:ff:65:cd:4e:98:bb:3a:4e:e2:e7:bc:da:15:ed:e8:0e: 01:10:6b:59:9d:a4:bd:5b:66:10:cb:6d:fc:04:72:65:31:65: 7d:23:c6:05:81:83:bc:c0:8c:4d:5c:b6:be:2e:62:25:89:ff: df:ca:c3:db:98:cc:71:66:71:5f:5c:46:3b:d4:83:b9:39:cc: 10:f6:c5:a8:3d:f8:ef:72:42:c7:85:06:d9:4c:29:88:bc:86: 21:35:57:b1:17:e5:1c:ad:b0:c4:00:b9:0f:95:d5:73:38:fa: de:a2:99:45:fd:20:63:98:d0:5d:f6:92:7f:cd:85:76:c5:b1: 81:a1:e5:35:e8:8c:11:59:a8:eb:ce:5a:b0:61:83:33:3f:9f: cf:a4:bd:0f:91:ab:cb:5c:56:08:09:d2:3e:4f:5d:db:01:d3: cc:4a:51:98:86:53:ea:2b:7d:d9:c3:10:42:27:e3:26:3e:b0: fb:7f:70:47:a0:44:6d:6e:14:7d:aa:68:df:23:ef:0c:6a:e7: c5:74:69:48:64:37:01:7f:59:c0:1c:98:c4:d3:e3:67:21:c6: bb:af:50:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZE6NHzMsanZO56pLoGJo04MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MDFmMjNjZTgyMWMyNjRkNjc3Mjc1MzZlYzE4MzUzNzU5 NGM1ZjIwHhcNMjUwNDE3MTgwMDMwWhcNMjUwNDE4MTgwMDMwWjAzMTEwLwYDVQQD EyhhZjUwOTg5M2E0MjI3MTZmNmRlNGMwY2NmYzEzMmU2YzdhNjAwODJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwK3pQ0QKfK7VrIKt9baZXETUN5s VhZPtXr+QbGVR/nbG7F4Xui4G15WUBTqze7MqdfLOVFNdmuNuRK4H8jXX+hqm1Md dC6Qh7z0VfFKm1gcr3xN9C//qcDFmNFRgMgsaziKop2L6R2K7861CbJ5sAv6D4Lw 1sRvjBGSeH/jicWZ5PJPLDrkGVHACAWlqtZg1Y+Rfkh6VfM9got4XjumkJn+T2st FnEaSp6lOL7GN8/9iAXNdOsGrqoEF+e/I8Kxgen0pFdkszYHTQKsS0HlX9eim44w Er/HFMkPn8Kp8DEFkNcmcKvsB7f5AlT8xjnAaCl+a94lbHGHE2upJ07U+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9QmJOkInFvbeTAzPwTLmx6YAgsMB8GA1UdIwQY MBaAFOgB8jzoIcJk1ncnU27Bg1N1lMXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAt NDY0ZWIxODNiNTY4LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAtNDY0ZWIxODNiNTY4 LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwBqmRCTu nJcp5p9F/NOdQfLoibDfjYETxojhppTy1JRPbywURXf/Zc1OmLs6TuLnvNoV7egO ARBrWZ2kvVtmEMtt/ARyZTFlfSPGBYGDvMCMTVy2vi5iJYn/38rD25jMcWZxX1xG O9SDuTnMEPbFqD3473JCx4UG2UwpiLyGITVXsRflHK2wxAC5D5XVczj63qKZRf0g Y5jQXfaSf82FdsWxgaHlNeiMEVmo685asGGDMz+fz6S9D5Gry1xWCAnSPk9d2wHT zEpRmIZT6it92cMQQifjJj6w+39wR6BEbW4Ufapo3yPvDGrnxXRpSGQ3AX9ZwByY xNPjZyHGu69Q9w== -----END CERTIFICATE-----Generated at Fri Apr 18 01:28:20 2025 by rpki-client