$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft File: H0c4OJyzuZjsT6bUJy-N15n7xKk.mft (raw, json) Hash identifier: Y0aLhkc55ts0ZK7bxIgG9FKKcV2KqoDO1ZvzdqXiKV0= Subject key identifier: ED:C4:CA:BC:99:08:11:F2:F9:27:AF:33:A5:B3:5D:C1:D7:2F:7E:D0 Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Certificate serial: 019605656CB173598138556995D3E30F58F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft Manifest number: 123D Signing time: Sat 05 Apr 2025 10:00:55 +0000 Manifest this update: Sat 05 Apr 2025 10:00:55 +0000 Manifest next update: Sun 06 Apr 2025 10:00:55 +0000 Files and hashes: 1: 1-6x9jHZ3cw39179HQd4O3fAvnpk.roa (hash: PgXhvVg0YUToc07oyC3isPahNyz6852StHcO0CF7qN8=) 2: 1nUEd9XAFqDWEykKA06-e3Jht8E.roa (hash: FjXuDY1LWSoerVvC1COnQH7k++3mS52vkkMLizNO12Q=) 3: 2pdvmZCHvau2bejs7kiQ6VYT8aY.roa (hash: sxVxk1VG9jbnXlYRRTgFy8naU2+NPtqmSzhI8JvCk0Q=) 4: 7jhea4Z45q_-w6Bw5hm9Ljo6jd0.roa (hash: 0432QcgMFkJ7sn27j+nTeHIZYZPsrtQmgOnk9+WOg5s=) 5: E2kHiMdYodrnFH2KHA9US6yByGg.roa (hash: 4gqy0Z2gsQk+minstyMsiIr4y+M4uI9pxsNNqBMzDmE=) 6: H0c4OJyzuZjsT6bUJy-N15n7xKk.crl (hash: ghtoK+FtfhuYe2IZM2e13XNePKgJHDjaNGy/BqtECXc=) 7: H46sB790XpHEnYv4TqNMx8liI5A.roa (hash: tky/zzkhPHiHwewqdrJ7FzGu6YnMSWzvscvwv5Raoik=) 8: LIpJLbylGhFRNKd4Vb6i8k36YRg.roa (hash: Uma+Nee5Et6Up+tXMeUjv4OVtrZCCxIFiku3HIhbB/4=) 9: ORp5S2gwOdo1fvVCheux3Z-tEqE.roa (hash: 6QCXpLzMvGC+j67Cjb2lewZSHVD5p64YnzlA/zGClIY=) 10: PLU8wqNdMXnL9v3tJJzISiKB10E.roa (hash: VqGtKJSXmrM4NojpQ2fDKWSLpkBqvw8V5Igvg7IZsCo=) 11: RNEGyKfylX6Y800rWZPCCJc50_A.roa (hash: VU3yf9iAHvzAzzlVwWU4OukRHg8QQbxfRarucNtL/BU=) 12: VZ4v5Zl_fSWlCJddoFWAprfwDEQ.roa (hash: HSIRCE/846JiI6ro7JECbGIyt/cQkLU+ZkGrpS5afGk=) 13: WZBLvv9OFIzqKVar5Stt9tIoe6c.roa (hash: eDDz9g857ZbC4qMPJ/+ARLyYUZhWBgiSlQKhk+w4u2c=) 14: YGMe0KWo_m6eJ0gMSerQxd_mK7o.roa (hash: TX2OaT/Kq4swweS2SKxtiDq7F1NZ0dIzMpi6TRLh/ZA=) 15: dpNKQ2Sgz6QIHDbXymZzkoop83E.roa (hash: VrlYMgpMUbMGcZ9vFi+tBzjsUYnk4uGqxHrElmnVkpU=) 16: gDccJCyvv-XSleOWBZa0j1v0ILc.roa (hash: CO5e5TItEhwMis3LPrh0yYWspCPoVfBb8vdm/rXIFt8=) 17: gfqVNhzGNxb7VDFrcNLUrtDXd5o.roa (hash: Krtgp6Kar2XuUAEtscbGlUw/+BkCTJxFBL71vdsXlls=) 18: sQpCyqrYhPNlqPdrmizFtrGO14c.roa (hash: yjB8Md4YNzJrNV3sVTOoBXACOOSqrVWUCWDSaqokA0I=) 19: sTCjVSTmDshI0UQ4XJFDWyeTvEw.roa (hash: kRON3o29OnRVzY/uFJzsoCpOZD9O1rSV9QBQnyCi9Nk=) 20: w9RX6MaAp0BwQCPK8hrZIWWzFm4.roa (hash: 6rxWErjQqbL7+OcI7QwVV76+tY/f2tbAGsAv/hz0KnE=) 21: z10me3-6yqryER4MpvIKiLcjNws.roa (hash: PjRl12NyPSpVNtUWuutmb/VXRvozChTacSvxqPRianU=) 22: zd8S8_RgIECBQgNFopt3gQi-4JA.roa (hash: 1PRRid9DTRPe3oTZKlt84NqobBLMXq/tvroFe+HAuOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 04:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:05:65:6c:b1:73:59:81:38:55:69:95:d3:e3:0f:58:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Validity Not Before: Apr 5 10:00:55 2025 GMT Not After : Apr 6 10:00:55 2025 GMT Subject: CN=edc4cabc990811f2f927af33a5b35dc1d72f7ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:35:c3:9d:e9:9f:ea:f2:5e:61:8d:df:d9:c7: 2d:de:9b:e1:d0:e0:4b:59:39:43:f2:86:3a:93:4b: 26:fd:19:77:76:74:70:6b:88:57:59:0f:3d:14:e3: e7:aa:63:c8:4a:92:26:fe:e4:ee:5c:e2:bf:36:4d: 61:81:84:b4:33:95:19:74:9e:95:a3:a2:25:b3:76: df:3b:6d:fd:7d:43:79:a0:23:7f:51:8e:2a:e4:a9: f1:19:99:90:3e:b8:29:e2:b5:05:44:fe:8f:01:f8: 4a:72:26:44:77:e3:77:0c:41:29:76:4c:9b:6f:e3: 3c:d4:54:9c:d0:66:d7:94:c6:a4:47:d3:dc:38:cf: 36:5f:ed:96:13:87:04:2e:4c:68:82:bf:f4:10:55: 85:a9:69:79:38:df:4f:bc:ea:72:87:cb:23:06:b1: e8:af:5b:69:87:78:15:02:5e:cf:3b:d3:bf:15:64: 5c:93:25:8c:d7:35:64:ad:ae:05:f2:45:fe:dd:ba: 1d:e5:83:4b:46:0d:a6:82:42:c6:66:8d:1e:61:f3: 8c:72:83:ce:9d:5d:ba:ea:56:61:88:9a:fc:41:d7: 52:cd:66:ca:d5:4f:77:ed:93:6e:d2:7c:2b:f9:23: cf:31:42:c0:67:57:81:57:37:fc:ba:95:d7:04:3b: 39:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C4:CA:BC:99:08:11:F2:F9:27:AF:33:A5:B3:5D:C1:D7:2F:7E:D0 X509v3 Authority Key Identifier: keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:28:4a:eb:6e:60:6a:e9:3b:65:9b:4c:eb:02:cb:0c:c8:03: b9:c4:7e:bb:bd:ec:7c:bf:15:b0:81:7a:77:fb:80:65:24:fb: d3:cd:41:98:57:8c:a8:a4:98:85:d8:a3:f6:44:5b:97:a1:4f: 27:78:26:06:e8:4d:d2:9b:16:91:0a:63:21:d6:28:9d:4d:d7: e3:3e:17:84:66:4e:41:6f:d2:4e:c5:a4:51:12:9d:d2:ff:a6: d4:d8:c1:5c:6a:77:81:ba:e3:5b:1c:25:4d:c6:80:ad:c1:e6: d7:ed:16:e3:e2:58:fd:7a:5a:ee:06:4d:1d:2f:a5:c6:b1:82: d2:6d:ae:6b:82:4c:e3:58:f8:f5:a6:0e:28:e0:06:68:da:1e: 1a:45:11:d8:95:57:78:5c:c7:dc:38:9f:cb:67:a8:df:eb:25: b7:1d:9a:87:65:9b:a1:bc:c9:05:1b:0a:b4:c2:ed:ee:a7:41: 36:19:54:c3:29:26:52:fc:3a:a2:c0:43:f5:f3:09:d6:ed:2b: 17:82:23:c9:4f:60:90:b1:83:99:b6:df:f0:4d:42:e6:1d:69: 6f:7a:45:29:76:2b:b4:64:da:3b:a8:9b:2a:c2:93:50:7b:73: 70:ab:4b:4a:1f:ba:e3:92:36:ef:9f:d7:15:00:4b:62:b1:3f: a8:fa:5b:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYFZWyxc1mBOFVpldPjD1j3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm YmM0YTkwHhcNMjUwNDA1MTAwMDU1WhcNMjUwNDA2MTAwMDU1WjAzMTEwLwYDVQQD EyhlZGM0Y2FiYzk5MDgxMWYyZjkyN2FmMzNhNWIzNWRjMWQ3MmY3ZWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDXDnemf6vJeYY3f2cct3pvh0OBL WTlD8oY6k0sm/Rl3dnRwa4hXWQ89FOPnqmPISpIm/uTuXOK/Nk1hgYS0M5UZdJ6V o6Ils3bfO239fUN5oCN/UY4q5KnxGZmQPrgp4rUFRP6PAfhKciZEd+N3DEEpdkyb b+M81FSc0GbXlMakR9PcOM82X+2WE4cELkxogr/0EFWFqWl5ON9PvOpyh8sjBrHo r1tph3gVAl7PO9O/FWRckyWM1zVkra4F8kX+3bod5YNLRg2mgkLGZo0eYfOMcoPO nV266lZhiJr8QddSzWbK1U937ZNu0nwr+SPPMULAZ1eBVzf8upXXBDs5pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO3EyryZCBHy+SevM6WzXcHXL37QMB8GA1UdIwQY MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt NmM3ZTU2ODU4OTBjLzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWChK625g auk7ZZtM6wLLDMgDucR+u73sfL8VsIF6d/uAZST7081BmFeMqKSYhdij9kRbl6FP J3gmBuhN0psWkQpjIdYonU3X4z4XhGZOQW/STsWkURKd0v+m1NjBXGp3gbrjWxwl TcaArcHm1+0W4+JY/Xpa7gZNHS+lxrGC0m2ua4JM41j49aYOKOAGaNoeGkUR2JVX eFzH3Dify2eo3+sltx2ah2WbobzJBRsKtMLt7qdBNhlUwykmUvw6osBD9fMJ1u0r F4IjyU9gkLGDmbbf8E1C5h1pb3pFKXYrtGTaO6ibKsKTUHtzcKtLSh+645I275/X FQBLYrE/qPpbQQ== -----END CERTIFICATE-----Generated at Sat Apr 5 13:20:11 2025 by rpki-client