$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft File: OroRckcuqAJl0SmCln3gqLC8WQE.mft (raw, json) Hash identifier: GiNbTOkwcUkiQ6/HNWVvsvwR23RIxiAJpIN3/jH9qOs= Subject key identifier: 54:E1:A1:77:97:9C:CD:3B:CA:9B:EE:55:31:72:6D:82:41:CB:1B:CC Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901 Certificate serial: 01961B48C71A5D392236A776BA4BDBDE28DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft Manifest number: 1506 Signing time: Wed 09 Apr 2025 16:01:16 +0000 Manifest this update: Wed 09 Apr 2025 16:01:16 +0000 Manifest next update: Thu 10 Apr 2025 16:01:16 +0000 Files and hashes: 1: 6BTZ5AaOEQekUYjUxJjubDiWWfg.roa (hash: Eh6waq+vwtUrAUXpLnHirNMkZ/QKST4EehD+sMDaTTU=) 2: 900joE2kII87-kVZQYJE9AVHaUE.roa (hash: 0o1fmx1wkON/yzQU3eDlgv0XvPCaxuqScr/6FHEDSAU=) 3: F7JXtoqYAnfTjuecjcOTuo1qCkw.roa (hash: OEFPqG5xW1fNzTGExyHBZVtQ+HvaVdHh6rDRxCBiNXc=) 4: FXMeaT7mqLaeoQKo6gjW0hUo-Kg.roa (hash: ai3NnXxTZaMRdq2X8gaZ6slmnlshdaCfmTM1E9B0TBc=) 5: G71nm17nOEzUWw1GLyO7Zfj_lkU.roa (hash: r0m4YbLwwtUtSb9XhbM+KsB7fqF7UQjjTclZT2Fc14A=) 6: JIOTHuHxMtqBMx5mXgc6EZ3pd2k.roa (hash: DCxRs8r4ffmbTDh+ON4DjiCp8BK/u4NKeBfbW9CrT2I=) 7: JLwtTQi8VNVHhaVDu0kN5D34KjI.roa (hash: 8veoK+i1W9Fs1rw5NS+3eYVP4YbxUV5xVG3SSE+qpqo=) 8: LWbif0B1GjIE18I7vwELt-c9l-w.roa (hash: d8IrvYkKiZyuhb8k6fQb7RXqEUdNoQvoKy7SfXCWzdQ=) 9: Ln8QlB3P0RX7C0x_g97ovwG-MN4.roa (hash: 8wye3Q/ZQvQqLzNWOjfsPRuB58YYCzfOe1zTV5GvyPs=) 10: OroRckcuqAJl0SmCln3gqLC8WQE.crl (hash: j3L0Qj3/9Vws8pLIFYAANlFfnGo36nZcIaOUD1FBfMk=) 11: bpV8b7AtbhXdGFm5LUSeu0J87Js.roa (hash: dlLYGpRMWUx9YdT08Q5m5VPvbiMJH/5+liPq9p5+8YQ=) 12: dfVrorkgDXq-b3-QlttQA8sgW4w.roa (hash: 5H66iIzqCMGoksSoQLOuKiVcrRxOIQ4J1jOJkX6At50=) 13: hs3PS0PRyRLIwptbOrxYgVXbpUk.roa (hash: EMDVPaUHTTvlVBnvbCHPVNncgqYud935PafdYG6UmCo=) 14: k44Mpa9GcJ6dnuXPl0nYSwqip6I.roa (hash: pwXmLZKe7pdmF7xytwQTGPruNvJ7hi4Xv4R9xq2KjQc=) 15: kW066m9DXa5QVOUSyinFWrQGR_k.roa (hash: qDkdXP2dueHR9dJeUVzMjqaWnTwJkS158Rm7QFLdZvQ=) 16: ljrsKkBLXJvYvcdZuX8JWasQFe4.roa (hash: vBmx7C2e8PSmXtfZdupHaynZdSjLgLaFpSb8R62FCP0=) 17: nPqUpg1aR7hnc6HTlLtA9BuMCTE.roa (hash: KwhXJO05kwAc7WcWDrPEDKsnvptXZGJFAiZEMHkerdU=) 18: nfdXz1IG7b_z6nn3ZM-dFbFrj0o.roa (hash: 16xUnfqni5W44fEXrAqCEswn3RFCkRKYxijUqdQX43o=) 19: nkeXVKF6zzQCYL4BHAHTb24meB8.roa (hash: pcIicCRvZsHCwkYq5WwVoVzOQXOI/E6R317Mea33uac=) 20: w5_xzg68siU1xwo2TRNx9ptuZUg.roa (hash: dz0710YGDAoK//WB0wD9yVfkTEtuo0ioNy/ODQjxKRM=) 21: wBcVnV6GV1PLpN1_UQhROd-ziWs.roa (hash: 8tEjzzagR6kqOzcrllrUMEcovJGqHcmFHZF+QG9fdx0=) 22: zMLH0Z0n_ZfTiWpxjWDNCBm8FP0.roa (hash: 1zSkkqDH7rhfTGP6CblxxApp8yosaiHxrLIiFpb9d40=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Apr 2025 16:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:1b:48:c7:1a:5d:39:22:36:a7:76:ba:4b:db:de:28:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901 Validity Not Before: Apr 9 16:01:16 2025 GMT Not After : Apr 10 16:01:16 2025 GMT Subject: CN=54e1a177979ccd3bca9bee5531726d8241cb1bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c7:43:fe:e0:fb:2f:e5:af:4c:4c:ec:f1:38: 12:2d:e2:ec:4e:b3:69:68:30:7a:01:27:16:a3:7e: 09:2f:2c:5f:0d:60:52:85:70:72:8b:97:20:2d:ce: 43:91:dc:6c:4c:5a:2f:09:0c:1b:5b:a6:e3:38:40: 61:a3:16:a9:17:63:42:68:50:4f:f8:74:70:9f:ef: 9f:f9:be:3c:22:a8:f1:76:15:71:db:42:21:bd:f9: 88:06:88:1e:21:8c:2b:06:37:a5:df:c5:69:45:09: 34:79:41:b7:20:47:d0:2a:0c:c4:d0:18:4d:9c:2a: a5:ad:51:4a:c2:ef:1b:08:66:cb:c4:32:6e:85:b5: 90:9f:87:69:4a:df:1c:fe:da:be:46:ea:74:74:7a: a1:58:60:ef:1e:3d:6a:89:98:8a:83:ca:e9:b2:53: 1e:37:7a:83:fb:2b:2a:b6:24:b3:78:ef:94:ca:2f: 55:f1:24:5a:09:e6:29:4a:65:82:47:0a:e5:8d:d8: e1:eb:68:92:cc:da:1d:6e:a4:a2:85:da:77:e9:71: 1a:dd:37:20:17:59:35:c6:0e:95:4f:0d:cf:96:45: 3d:74:7e:ab:b5:a0:c4:a1:e8:10:a2:20:0e:da:56: b5:fe:ab:07:51:2c:3f:1f:c1:5d:dc:30:79:07:79: d8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E1:A1:77:97:9C:CD:3B:CA:9B:EE:55:31:72:6D:82:41:CB:1B:CC X509v3 Authority Key Identifier: keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:38:46:c6:81:cf:6b:70:e9:af:37:a1:2f:23:44:80:36:3c: bd:a5:2e:e7:17:d7:1f:44:30:40:6b:79:cd:6c:56:4e:44:c6: 6a:20:ab:d3:6b:c9:9a:fd:72:29:e6:4b:67:13:a4:43:0f:59: b2:fa:e4:be:fb:8f:cc:b2:b9:7b:2b:ef:58:4b:b2:51:5e:a7: fd:9c:4b:59:21:62:49:0f:14:97:86:30:20:85:c3:d4:09:99: 0a:0d:0d:b9:ab:b8:65:7a:63:fd:db:4b:42:f5:c9:7e:2a:ac: a6:3b:9e:40:1d:70:cc:a9:7e:4e:e3:56:48:14:5d:12:cc:c1: 84:08:2e:0f:f8:6c:31:bf:2a:18:c2:2b:5d:f8:8a:11:cb:54: 18:57:86:8c:98:a2:5a:7b:49:58:c0:3f:f5:cc:25:f8:86:24: 72:bb:11:77:5f:43:8d:f5:c2:bd:01:07:c2:ac:8b:65:82:72: 7e:67:db:34:31:3c:fd:74:43:fa:56:0a:3e:38:7b:20:eb:25: e9:ea:53:a0:9e:b6:54:4a:a4:4d:07:3d:b2:50:c2:f0:fa:54: e5:fd:88:31:b3:8f:7c:53:84:e5:32:40:52:f1:db:a1:62:06: 87:7a:92:19:f8:61:4a:2d:1b:95:4a:02:32:85:c4:e3:84:f9: aa:0c:78:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYbSMcaXTkiNqd2ukvb3ijbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi YzU5MDEwHhcNMjUwNDA5MTYwMTE2WhcNMjUwNDEwMTYwMTE2WjAzMTEwLwYDVQQD Eyg1NGUxYTE3Nzk3OWNjZDNiY2E5YmVlNTUzMTcyNmQ4MjQxY2IxYmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8dD/uD7L+WvTEzs8TgSLeLsTrNp aDB6AScWo34JLyxfDWBShXByi5cgLc5DkdxsTFovCQwbW6bjOEBhoxapF2NCaFBP +HRwn++f+b48IqjxdhVx20IhvfmIBogeIYwrBjel38VpRQk0eUG3IEfQKgzE0BhN nCqlrVFKwu8bCGbLxDJuhbWQn4dpSt8c/tq+Rup0dHqhWGDvHj1qiZiKg8rpslMe N3qD+ysqtiSzeO+Uyi9V8SRaCeYpSmWCRwrljdjh62iSzNodbqSihdp36XEa3Tcg F1k1xg6VTw3PlkU9dH6rtaDEoegQoiAO2la1/qsHUSw/H8Fd3DB5B3nYuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFThoXeXnM07ypvuVTFybYJByxvMMB8GA1UdIwQY MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt NGRkMDQzNDZhYmMzLzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjhGxoHP a3DprzehLyNEgDY8vaUu5xfXH0QwQGt5zWxWTkTGaiCr02vJmv1yKeZLZxOkQw9Z svrkvvuPzLK5eyvvWEuyUV6n/ZxLWSFiSQ8Ul4YwIIXD1AmZCg0Nuau4ZXpj/dtL QvXJfiqspjueQB1wzKl+TuNWSBRdEszBhAguD/hsMb8qGMIrXfiKEctUGFeGjJii WntJWMA/9cwl+IYkcrsRd19DjfXCvQEHwqyLZYJyfmfbNDE8/XRD+lYKPjh7IOsl 6epToJ62VEqkTQc9slDC8PpU5f2IMbOPfFOE5TJAUvHboWIGh3qSGfhhSi0blUoC MoXE44T5qgx4CQ== -----END CERTIFICATE-----Generated at Thu Apr 10 01:11:06 2025 by rpki-client