$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft File: ayM9dVCLToXMz0Q0mny3AxmNHSY.mft (raw, json) Hash identifier: HO+b8Ts5A+PlRFrTspTUbx8gFXE3pGmCfLIyReEzHrk= Subject key identifier: DE:AF:F9:0E:6A:8B:65:E8:AE:66:D7:B9:44:76:EC:74:51:76:08:DF Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Certificate serial: 01973E76517C2AB06FDEBA1261AF7A32F831 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft Manifest number: 12D8 Signing time: Thu 05 Jun 2025 05:00:30 +0000 Manifest this update: Thu 05 Jun 2025 05:00:30 +0000 Manifest next update: Fri 06 Jun 2025 05:00:30 +0000 Files and hashes: 1: 2cIKXah99bs326V7_K2_ATU1wCc.roa (hash: 8U7vy7F8tH1dtIEl5RJoquiwlVH7Dw2C2urkmS/8Z1s=) 2: AjBp57cbFRBUIwIaXhNlUU4xc9Y.roa (hash: ZV9AX+FvWa4YVP0u/DD5byIthcNtHTveftQNUrL/KbI=) 3: MWVrNJSe74q7kEhW6qS8QXcSrrc.roa (hash: SMPMCny2Jv5HoImrcf2XEmoMCaHU3khczb0z6CCQ9uc=) 4: ONBLhs2q3EPNBcKzjuUXI9NfDXk.roa (hash: 02TEqjTXH1kKdBwPOe/Fj5S0NZ7Hp7pCF4TDcYi4oGk=) 5: UeaUMTENz6rEtOnCBMfG9gC-gkA.roa (hash: Gae4+Xp55CQ/qfOEbOd8MSojTwvPkhhJCtVDf0XS3FE=) 6: ZkxRUMGE9CQRvySfgcJj3kHytZg.roa (hash: UKRx7jBVZPPDl6SgbH7t7Qygyz8pBsSIfl7nu9h+mgg=) 7: aB6sxL1ZlKSQNpa4jL29xIkPi_I.roa (hash: zA0AFONbK9br9fZoJVU4SW6cugn1tuIJBYSB1Nl3/G8=) 8: ayM9dVCLToXMz0Q0mny3AxmNHSY.crl (hash: N7yw7dx3VJ/Wupduy7/7UJC9R0QSiavFPUKtKYZcKmc=) 9: fZeNbyH5ujZlgqfP9AgorOMXohA.roa (hash: Dn0aZqCRGKt2adMmUTTsiPmw4Pp+E7zhFHoCHO312UY=) 10: fb3lzsKRuT3DqmRVbbR-BGF4wXU.roa (hash: pxuBhHoXzqbakdVTx6L5TNOxX98HDl41yiAFcXSWT3Q=) 11: gYds0JITWToRAWO6EmM06xkOA-g.roa (hash: jtWYGOQZO5pMtNPGec2KrPh/oTve8btfCfcQpgZ5xYs=) 12: hQLzZNiEWPuf32qSABpOeATMW6E.roa (hash: tcNlvM0ivCHwuGCFeJnRMeoVP9hfxeNRmguV/9iTXJc=) 13: hUM0lQ0ODj8Qil7w4D2sZvQVB4w.roa (hash: 8bKnMQhqygeFZmPwESYE+kESImBLAc2qmeTscpnWZ2s=) 14: hZs6PbiV1FHRQvgoNjIWkApb1x4.roa (hash: slbvJPVch+dH2HvE/UBBZulZ2jCavWoY4Ccie6OcAiU=) 15: itqdYmGsrfepmyYSKCd1c5R77js.roa (hash: W2/G8eoM3IFmeLBvMWU5XzC6g/z37f1zNFuZs/37yXE=) 16: nPdGgeG-9wHMZBn1oHFY2TrIyd4.roa (hash: ixNDdEbsReVkHb4nZt1NyyQNAMSP0+ayTT4IyJE76/4=) 17: np9eNjgoLA0jYeMYnFqjApZ6K1s.roa (hash: rFv0HF9ou+nHz2ggvRQ0cKKf/+Wgihlq0XkCRw5GtV4=) 18: oxL_IFbrM6mz0m9aIFRfMqrCT6w.roa (hash: NXHU7sEwINGkL2J1XfrQuCQ6rExfJTOfXcqE64zJiN8=) 19: pSa6Cl1GXo7foAyFrHXmLJZlt1c.roa (hash: UNi09k+Bt5G9PMcC124mrj3Hl9EaVAVyKXxcinPAiXY=) 20: u5pfngYD-0MqXeQ11DbdTP8EwmU.roa (hash: xtu5m2bHnGuokc2D/B489MeQCUa3PeUYpTlbCBj8908=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Jun 2025 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3e:76:51:7c:2a:b0:6f:de:ba:12:61:af:7a:32:f8:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Validity Not Before: Jun 5 05:00:30 2025 GMT Not After : Jun 6 05:00:30 2025 GMT Subject: CN=deaff90e6a8b65e8ae66d7b94476ec74517608df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:da:ca:1b:a1:eb:93:94:65:b9:b9:42:25:2b: 8f:67:d4:33:d6:fa:1c:a0:fd:2c:0c:82:bd:ed:fb: 91:cd:4c:ea:77:b5:3e:d3:58:40:c2:d9:72:7e:c3: 97:22:e6:2a:34:db:0b:6b:65:be:f0:a5:e2:93:20: 5c:a5:a2:08:e7:23:e4:a0:f6:91:02:7b:bf:2c:d9: b4:1d:93:6b:fd:78:ee:25:40:83:f6:9f:89:83:84: 27:8b:21:21:90:58:3c:62:8a:ea:25:30:82:50:04: a6:ed:c2:e7:f5:a9:f3:dc:f1:05:ce:85:4b:c9:20: f5:ca:35:b9:3f:b2:dd:1a:ee:3d:73:45:89:d8:90: 54:ca:dd:53:c0:bf:e0:3b:d3:0e:2d:bd:ec:29:4a: 12:4b:45:5d:80:86:2b:eb:18:f9:ad:48:c0:8b:61: 72:67:42:de:b5:be:cc:bf:e2:31:e0:5b:ba:59:b0: f4:9c:94:b4:cc:e5:29:34:12:6c:30:9c:00:2b:fb: 3a:32:fa:dd:91:f9:9c:27:71:64:41:f9:b6:9a:2c: a9:3c:53:e0:77:9c:02:d1:78:8a:7d:37:6d:b9:59: b1:e1:c4:2d:c6:80:82:28:ae:cb:94:99:b2:a8:07: 0b:46:59:d9:69:21:74:65:b1:15:8c:de:6d:4c:f9: 53:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AF:F9:0E:6A:8B:65:E8:AE:66:D7:B9:44:76:EC:74:51:76:08:DF X509v3 Authority Key Identifier: keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:3f:5c:3e:02:6b:c9:72:cc:30:e9:f0:5d:49:e6:18:95:64: b0:84:9d:f7:d5:0e:ba:d6:22:dd:cd:49:cb:af:29:37:f7:b9: 63:fa:0d:cb:a9:07:00:14:6c:8c:5d:c0:ea:29:70:81:e8:73: d7:87:fa:11:dd:7c:8f:36:f1:3a:03:de:6f:12:da:26:21:fa: fe:aa:e1:4b:a7:32:bb:e9:3b:9e:38:3a:74:4f:ea:21:f3:dc: e4:a9:f5:c4:54:08:7b:61:dd:d8:84:15:7f:58:86:8c:92:f7: dc:b0:1e:d1:0e:81:9b:ac:a9:c5:9f:32:dc:b6:d2:4b:b2:c0: 31:13:5c:97:4e:f5:f2:1a:e6:be:75:5b:3f:0b:61:5c:5e:ed: cf:2d:e5:04:4f:86:39:e3:a7:11:05:f8:c3:5b:3b:95:91:f5: e2:0e:f4:b6:03:4d:ad:c4:07:0a:d7:be:52:22:ad:31:c0:14: 58:c8:31:df:39:10:3e:99:60:2a:17:3f:52:6e:8d:eb:24:08: e2:4d:20:db:29:b0:b3:ed:16:81:25:8f:09:d2:d0:9c:bb:f0: 75:95:9a:ca:49:bf:97:fa:f1:7a:33:10:1a:cc:5b:af:62:8a: 45:a6:8b:2c:40:50:b1:f3:a5:a8:49:58:ee:18:8c:cb:d8:63: 51:cb:23:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc+dlF8KrBv3roSYa96MvgxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4 ZDFkMjYwHhcNMjUwNjA1MDUwMDMwWhcNMjUwNjA2MDUwMDMwWjAzMTEwLwYDVQQD EyhkZWFmZjkwZTZhOGI2NWU4YWU2NmQ3Yjk0NDc2ZWM3NDUxNzYwOGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNrKG6Hrk5RlublCJSuPZ9Qz1voc oP0sDIK97fuRzUzqd7U+01hAwtlyfsOXIuYqNNsLa2W+8KXikyBcpaII5yPkoPaR Anu/LNm0HZNr/XjuJUCD9p+Jg4QniyEhkFg8YorqJTCCUASm7cLn9anz3PEFzoVL ySD1yjW5P7LdGu49c0WJ2JBUyt1TwL/gO9MOLb3sKUoSS0VdgIYr6xj5rUjAi2Fy Z0Letb7Mv+Ix4Fu6WbD0nJS0zOUpNBJsMJwAK/s6MvrdkfmcJ3FkQfm2miypPFPg d5wC0XiKfTdtuVmx4cQtxoCCKK7LlJmyqAcLRlnZaSF0ZbEVjN5tTPlTfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6v+Q5qi2XormbXuUR27HRRdgjfMB8GA1UdIwQY MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt ZmE5Y2I1MWNkMGYxLzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATD9cPgJr yXLMMOnwXUnmGJVksISd99UOutYi3c1Jy68pN/e5Y/oNy6kHABRsjF3A6ilwgehz 14f6Ed18jzbxOgPebxLaJiH6/qrhS6cyu+k7njg6dE/qIfPc5Kn1xFQIe2Hd2IQV f1iGjJL33LAe0Q6Bm6ypxZ8y3LbSS7LAMRNcl0718hrmvnVbPwthXF7tzy3lBE+G OeOnEQX4w1s7lZH14g70tgNNrcQHCte+UiKtMcAUWMgx3zkQPplgKhc/Um6N6yQI 4k0g2ymws+0WgSWPCdLQnLvwdZWaykm/l/rxejMQGsxbr2KKRaaLLEBQsfOlqElY 7hiMy9hjUcsjbg== -----END CERTIFICATE-----Generated at Thu Jun 5 07:08:20 2025 by rpki-client