$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft File: rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft (raw, json) Hash identifier: MKUh+2yAnvwxWUH0CCbua+04DQqt4A2Oqjy6usWlJX8= Subject key identifier: F3:20:F9:61:E3:CE:80:9A:C2:77:93:E8:50:63:F6:3D:56:38:2F:E0 Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808 Certificate serial: 01964C6BDD0569891183F64E5FA43A98DEE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft Manifest number: 1523 Signing time: Sat 19 Apr 2025 05:00:59 +0000 Manifest this update: Sat 19 Apr 2025 05:00:59 +0000 Manifest next update: Sun 20 Apr 2025 05:00:59 +0000 Files and hashes: 1: 04Xl2v7VZUiTmCr_w4v8QX2gTRY.roa (hash: MycY07gNOE3Ooqi4Uv41zgpH/iEzpn8tkzRPcGSW9aU=) 2: 26R907b9JZTa9LMd6c9-dwXbanc.roa (hash: Nr0pZSVAGWFTdm0Q/t/4gBjJB3CHvlfJvfnTY1Rsu6U=) 3: 4CkYdPgwuFRB9yfCSUR4mFZ2aRY.roa (hash: uxH7iNCE7ZmZDPzgHrmT88B0442eI2IPmR0JGvSaYus=) 4: N8IkUZJzTBOZlu70RR-lhbMLsyk.roa (hash: ibQxnRGTbY2fQW1i2qvy/3e4lxCnd9xPyOoTE1V98yc=) 5: Nz5RTdbiVqvTyf1uMtVJTNrUInA.roa (hash: 6DxKi3ibNRNUsq7DVRyyl9egdF22G2yI1jKGFf7eGvI=) 6: OrB13yHYot_uIXf_gXlQc8xI_hE.roa (hash: FMQdsecZx+s70UXzEHExqDx9Jcs+3DRJcI4Unl+IGvY=) 7: Pl7-hE7wkLNvDQabKfSwU8DkQ6w.roa (hash: 27nFWy7GlxT7WEaqE4vpzeeamTgM2rIB5rRF1VNL9hc=) 8: R6LZ_8XH3ExvRg1dUKFNV8Ey0F8.roa (hash: qFpymdyEBp79zE8j0kfuySy0J6zv46CXUcpRwgvhrUg=) 9: cMwLZYfTsXdjIqb9jx4UAT_n7A8.roa (hash: DlDoiDsmZqGB/sH+jVsLeAbtXXyd2YUnrqrE/juxJb0=) 10: d4OCK2D4mSeWoRqf9p5C2kL05YA.roa (hash: Elq7S05bbGTPAkW786TpCyuI8W7H2meHxaBdt6oA0iQ=) 11: eve0R85Bzf8fVYZiz_CwkQbNrfY.roa (hash: C31CurjzM4ZbD0eThfczK/2Jz2E+lMaCmCEqjBcpDzI=) 12: lGrajh7a_wa1_LmUlCkskSpHEUA.roa (hash: cqiS1zwnFw4W1rzDIACXMZPc8ZNVkVV3Hme04FAS5Cc=) 13: mk-EE-jomB4r81nV5hqnq3SbThA.roa (hash: s/WHq7pvPXbuGboH15G/GxJVOO9+dXTAtYjUAcjZio4=) 14: rEnKo4uFTJMFYN6Cn2Ft0459Avg.roa (hash: INMUl7RzFx1P7Rf6UvWbPgwSFgMQsbOXObYuvGU4UyU=) 15: r_x3Fm5qPpLt6tIgjqPoDH6NSOU.roa (hash: eOXFdxOR7gIGvVyPrVo91AN3j7CdU+E/QIH/+e1t/5w=) 16: rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl (hash: Cxpo1nDz0bqBHTP7H+qivMmPzS/W0yZ83PJc+wkMpzs=) 17: xgJFjaLiTqyrTAWyq4f18Pg7amk.roa (hash: 2iBDAhKAGL78CKGIrACCnUM4WIuzKixnPTq74lNq4V0=) 18: zNVGFbRsiePBxz6FwsPTrdVje0c.roa (hash: iOwivHuatZu0dYUoIFiY6LVls3U7FPznyEYVX0N4MfQ=) 19: zwam10qTIbqdFHd30kfqv_ZzWgE.roa (hash: FkxbmAbpcrj+MmOQBWMwaW9Kx0P0rYzKKqUDU8tkNdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 20 Apr 2025 04:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:4c:6b:dd:05:69:89:11:83:f6:4e:5f:a4:3a:98:de:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808 Validity Not Before: Apr 19 05:00:59 2025 GMT Not After : Apr 20 05:00:59 2025 GMT Subject: CN=f320f961e3ce809ac27793e85063f63d56382fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0e:01:33:9e:6d:38:84:3c:a5:0e:7c:92:58: 56:a5:2d:d9:65:c8:e0:63:27:5c:01:6e:cc:a7:4b: 5a:dd:91:82:69:09:13:f3:30:16:fd:45:af:e1:70: 9e:5f:1e:59:78:a6:37:9e:72:ea:7c:f4:52:29:1a: 6b:a0:b2:73:14:5c:b1:6c:99:ed:9a:71:e6:50:fd: 3d:c3:b1:de:3c:60:69:be:bf:ce:7a:c0:fa:1c:76: b8:30:8c:1e:e7:4d:16:11:98:de:86:d0:79:96:df: e8:5c:46:9c:45:28:f1:06:38:6c:78:1f:df:b0:2b: 44:09:77:33:f2:8c:57:8b:82:d3:4b:be:ca:e0:a7: 92:d7:d1:bd:c2:ca:55:4a:1d:e9:79:e8:af:3f:0b: a3:a6:7e:f6:ad:d6:a7:7a:65:f8:f1:6e:f7:1e:34: 09:88:e7:81:c4:df:2b:c9:ec:da:89:1c:4e:69:e4: e7:16:34:bf:2a:99:13:93:be:be:05:5c:fe:d1:78: 3b:03:71:8b:e4:c1:7f:8b:96:43:3a:7f:8d:ad:a2: 73:5e:d1:52:57:ef:dc:03:a2:5a:03:3f:f9:69:b3: 12:60:ac:12:82:cb:2e:cf:5c:c3:c6:47:f1:84:0b: 7f:64:82:e7:12:10:4b:7d:83:85:dc:69:d8:a1:dd: bf:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:20:F9:61:E3:CE:80:9A:C2:77:93:E8:50:63:F6:3D:56:38:2F:E0 X509v3 Authority Key Identifier: keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:34:be:2e:7c:88:db:2f:d6:9e:8f:54:52:52:cb:9c:81:9a: fa:0c:a4:b4:91:71:f2:3e:c1:04:2d:1d:37:f3:99:dc:5a:77: b9:ab:df:7d:9c:92:15:e3:88:d8:4e:f6:32:af:f1:35:67:5e: 5f:8e:58:b9:f9:79:ed:d9:a5:8a:a5:01:f5:ec:74:38:e9:5b: 52:1b:dc:e4:55:bb:4b:b9:e4:38:ed:07:f9:1f:7a:81:14:8f: 1c:95:6e:10:a9:9b:ab:06:45:07:c3:a2:16:ab:c3:65:c8:6a: 0b:e4:c2:43:2e:b1:25:62:a9:7b:ff:80:89:ad:3e:3d:24:aa: 31:e3:2e:30:40:48:5b:77:78:dd:dd:6e:e7:0e:3c:37:0d:a5: bc:90:9f:04:3d:2a:e3:2e:ea:68:09:c4:01:3a:b1:13:9d:a9: 6f:54:a8:15:0f:d3:f3:13:d8:68:a8:7d:d1:f5:ef:71:3a:54: 10:88:cf:4c:bf:45:07:11:4a:d9:12:36:ed:35:72:3b:f7:6e: 74:df:a6:65:17:2d:81:3f:22:37:0a:c3:f0:14:5c:03:05:85: f2:7b:4b:af:a0:2b:ed:1b:a1:8b:00:11:1a:58:47:03:e5:22: 28:61:63:23:94:96:d9:3d:5b:7d:8f:26:6e:d6:6f:e7:86:41: 17:46:44:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZMa90FaYkRg/ZOX6Q6mN7pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYWM4MzBjY2FhNzQ3ODNkZDk2MWZhYjI0MWEyMjhkN2Nj NmY4MDgwHhcNMjUwNDE5MDUwMDU5WhcNMjUwNDIwMDUwMDU5WjAzMTEwLwYDVQQD EyhmMzIwZjk2MWUzY2U4MDlhYzI3NzkzZTg1MDYzZjYzZDU2MzgyZmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Q4BM55tOIQ8pQ58klhWpS3ZZcjg YydcAW7Mp0ta3ZGCaQkT8zAW/UWv4XCeXx5ZeKY3nnLqfPRSKRproLJzFFyxbJnt mnHmUP09w7HePGBpvr/OesD6HHa4MIwe500WEZjehtB5lt/oXEacRSjxBjhseB/f sCtECXcz8oxXi4LTS77K4KeS19G9wspVSh3peeivPwujpn72rdanemX48W73HjQJ iOeBxN8ryezaiRxOaeTnFjS/KpkTk76+BVz+0Xg7A3GL5MF/i5ZDOn+NraJzXtFS V+/cA6JaAz/5abMSYKwSgssuz1zDxkfxhAt/ZILnEhBLfYOF3GnYod2/vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPMg+WHjzoCawneT6FBj9j1WOC/gMB8GA1UdIwQY MBaAFK2sgwzKp0eD3ZYfqyQaIo18xvgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgt OTI5ZjdkNjM1ZjRiLzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgtOTI5ZjdkNjM1ZjRi LzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2jS+LnyI 2y/Wno9UUlLLnIGa+gyktJFx8j7BBC0dN/OZ3Fp3uavffZySFeOI2E72Mq/xNWde X45Yufl57dmliqUB9ex0OOlbUhvc5FW7S7nkOO0H+R96gRSPHJVuEKmbqwZFB8Oi FqvDZchqC+TCQy6xJWKpe/+Aia0+PSSqMeMuMEBIW3d43d1u5w48Nw2lvJCfBD0q 4y7qaAnEATqxE52pb1SoFQ/T8xPYaKh90fXvcTpUEIjPTL9FBxFK2RI27TVyO/du dN+mZRctgT8iNwrD8BRcAwWF8ntLr6Ar7RuhiwARGlhHA+UiKGFjI5SW2T1bfY8m btZv54ZBF0ZEQw== -----END CERTIFICATE-----Generated at Sat Apr 19 14:38:45 2025 by rpki-client