$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft File: 1nPYSbfVBHN21X5veW8AGLcLRQY.mft (raw, json) Hash identifier: ChUUIlTCF8ZpCG0NNXuLMQjMCMQV/WdqEaeUiX8M6R4= Subject key identifier: 3D:A6:21:41:26:D1:17:14:93:86:5F:CE:3D:51:C2:BA:C2:DB:06:4D Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506 Certificate serial: 01961D36F63C15B814BE7F8D1C782A351B40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft Manifest number: 14EA Signing time: Thu 10 Apr 2025 01:01:03 +0000 Manifest this update: Thu 10 Apr 2025 01:01:03 +0000 Manifest next update: Fri 11 Apr 2025 01:01:03 +0000 Files and hashes: 1: 0MIjC24hYDTW286dNJh5qkIVoQM.roa (hash: MXU+N4PdoB06EZ/HjOQwFUwlQG2n1kwzXC/QtbLmJF0=) 2: 1-TrGp-z9XirqNAVi00kZmMtegAQ.roa (hash: cZ4yM8vQzUWF39oRoRKvKg08K8izx43nKLI06xAV69c=) 3: 1i8rkHyD_GEpEeT-VSPmrM7G9hg.roa (hash: T9uIPUHDBJqXpx6DpvHR6pRhllvR8xZm3kC3o7hqoD8=) 4: 1nPYSbfVBHN21X5veW8AGLcLRQY.crl (hash: PfBkpJJpntDVxUSNjZF5N1neJ2fEKeUlGWJAglfiFSw=) 5: ARk7nVFItdFVCXn3sJgvaZ_sS0g.roa (hash: 7EEJNomrXNWfyMmnkFvuBOXpyWJs7s8lvlhWBalFymc=) 6: AgHi8XOuA8AW6mQ9081yaHFi7LY.roa (hash: GntMqrIeYlMh8GQHa17dRcWuW6VcPzJOKzx7OubvqC4=) 7: B3ZVVduO-XEeJJT5EOMOysoNJrI.roa (hash: hGLOqNOpZ+B1pvsSFo3MX/h7GOvVIRzBnRvB+fSCcjA=) 8: FCxYBsvWXDM15GSlGFr8QNu4RYE.roa (hash: 0mvD6N4h6dDsOpud4GT2Wd7vYleLAl39nQHcItAcmYc=) 9: IP6dxUf_151oN-w_YJNTEK8gFBY.roa (hash: DuBNN+Dmeyf3QMZYAuCqpfhCledEl++glFpZz6IL1T4=) 10: P1PPxJKJvcVWj4wZUdazuOzBw4Q.roa (hash: HnwzMbfg3535mDnah1e/JlAfCR0Kk2ea4N+rWTnPdJY=) 11: PXVQtp8fbfqZ5jFNvah34s8vf1o.roa (hash: jLDp0a0yIOcsSTqlqaPMGk/PVKwXxyLWYql8ZP+aAO4=) 12: Q6ELIGGMyAWLP2-8AinpN7dCP-I.roa (hash: +d8Mriz+mLl19IhnPZ6nZe1Nzbfe1sFAT1awQgdm62g=) 13: cdoljHUC9Q9DPh0xJN6bOQNfYgI.roa (hash: asTmSigp9GpUrfz/TvjdPq/vlaO8kX04TRA2R2OR/KQ=) 14: dukzfVMcltyysZZBvIjQGrHZPLo.roa (hash: lgww+jOruUco3lHQUmYd3nD9/JIBuRROS48oFbH8RVc=) 15: ex-k0hBYMJp3Xt63sbFH4dmaPp0.roa (hash: S04+oB5rzQSuvoSFbDJ54Q32HsuNGomFta+C8/uA5R4=) 16: hansf5f-8ZlprgL3Get4FXhM3qg.roa (hash: tdLlts3wjizciN3JSF4Zj+MG2KHEHQp/kr7Y9fEY9Hk=) 17: ktcN_1CUp7LaLxP99XlfX2aR3JY.roa (hash: A4GSKwqS/3qXXX5KzVNih95wvOg7T1xafYwJVI0/Hp0=) 18: rw3wmNK1T9KyKFmnPInliFk653U.roa (hash: byyB+zxuPES8tnSL4mP/gAsHzJQoaaZNw85rrGkKtTM=) 19: s-kJqLbM0KEIQbJ-31AW4jYwkyY.roa (hash: lel2X5N/TCz7Pdk6leCd67OSoke7W8rTYmRW3JpbyRE=) 20: thGwDSmOCB2egMkJayh7HTNBOoA.roa (hash: vrdMbk1dhZJxT4RMXRheIxv51EMC51s58JC+BTY/Vpg=) 21: wAAXYuIkUKtvrw39DQ6SG8wkbtE.roa (hash: jytRpaU7guGLhPsBwh2sgZuD9rMlPbNl3UHkvQz/oCo=) 22: y51hiFPZW-gkNjlGWGRcL6QruIc.roa (hash: IeyRLiiRko+dn467AL+M0JoJJpnysqiT8H5/V2IcxR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Apr 2025 01:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:1d:36:f6:3c:15:b8:14:be:7f:8d:1c:78:2a:35:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506 Validity Not Before: Apr 10 01:01:03 2025 GMT Not After : Apr 11 01:01:03 2025 GMT Subject: CN=3da6214126d1171493865fce3d51c2bac2db064d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6d:5c:0e:16:d3:14:65:ba:ee:f5:ad:59:d2: 30:1d:40:25:42:7c:b5:f7:67:35:10:54:2a:58:6d: d0:fe:1c:88:2b:82:08:5d:14:7d:33:78:fd:8c:d7: af:3e:76:b4:e4:72:9f:75:ef:c6:c2:b4:be:77:f4: 8d:fb:bd:f6:8f:e5:d0:ff:3e:b6:62:35:81:bf:7a: 89:98:ee:47:11:06:34:7f:ca:b4:04:77:bf:9c:f6: 71:1e:e6:12:9c:54:ee:64:07:49:da:f6:c1:af:c3: f3:f0:f1:40:9a:7d:a2:44:49:8e:dc:73:ac:29:44: 98:44:e8:fc:7e:ac:c8:54:60:30:64:d8:3a:05:9b: 87:1b:93:1d:d5:4a:82:ef:81:c4:5b:25:ac:da:b8: 7f:1b:fc:e8:ba:23:bc:2f:f6:e0:8e:87:86:e2:7c: 69:35:9c:07:69:9c:06:db:8f:38:fc:83:b2:b1:c4: 79:19:7e:3e:36:a2:29:8c:bd:4c:88:b9:ac:01:4c: 0f:4f:f8:28:b8:2f:b8:26:9e:6c:1b:be:0e:4b:39: 4c:f9:14:ed:04:38:1b:e5:06:23:dd:fb:90:25:94: e1:d9:de:12:71:c6:f7:fb:d7:40:fb:d2:17:4c:ce: 7c:e4:5c:98:6d:9f:6c:f7:dc:a7:2e:18:33:b1:0f: a6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A6:21:41:26:D1:17:14:93:86:5F:CE:3D:51:C2:BA:C2:DB:06:4D X509v3 Authority Key Identifier: keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:cd:53:99:dc:59:0d:09:05:51:b2:b2:31:92:37:b2:4a:57: a9:87:52:b2:df:11:08:76:31:39:4a:ad:b4:00:e2:78:ab:4e: 63:b3:30:9c:7c:b8:88:a1:a4:ea:60:34:3f:25:ea:a2:b7:35: a3:cc:27:b8:e3:88:97:1b:03:fd:61:c5:29:89:77:61:cb:b1: 64:6a:ae:d3:29:75:38:c8:96:73:f8:a4:c6:65:39:5d:8d:91: f5:a4:ec:54:26:86:a0:3b:47:e3:f5:3c:a7:8d:e7:98:f2:0b: 79:5d:02:05:44:1c:f8:8e:cc:cd:17:64:e7:a8:37:0a:0c:cb: eb:2f:f5:c1:9a:ad:1e:a7:ed:6c:0b:a1:82:89:4d:fb:a2:b9: 8f:3a:d7:bd:d7:fd:ac:f8:69:a9:15:d1:ea:68:e3:62:47:10: 32:05:07:b2:85:c5:74:56:8c:58:24:cf:c0:27:b2:09:8c:79: 48:d2:88:b1:f1:9f:f2:76:73:74:a3:43:7c:a2:e6:81:49:d9: f5:40:25:f3:21:27:50:7d:1d:89:c0:95:5d:35:ff:c0:e1:f0: 6f:09:38:be:4e:cb:2b:a4:c9:78:2d:54:5a:48:8a:b9:11:80: fc:e5:d0:2a:f1:81:0f:cb:d9:c2:50:70:82:e9:5e:a0:0a:ea: c4:31:36:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYdNvY8FbgUvn+NHHgqNRtAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw YjQ1MDYwHhcNMjUwNDEwMDEwMTAzWhcNMjUwNDExMDEwMTAzWjAzMTEwLwYDVQQD EygzZGE2MjE0MTI2ZDExNzE0OTM4NjVmY2UzZDUxYzJiYWMyZGIwNjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA021cDhbTFGW67vWtWdIwHUAlQny1 92c1EFQqWG3Q/hyIK4IIXRR9M3j9jNevPna05HKfde/GwrS+d/SN+732j+XQ/z62 YjWBv3qJmO5HEQY0f8q0BHe/nPZxHuYSnFTuZAdJ2vbBr8Pz8PFAmn2iREmO3HOs KUSYROj8fqzIVGAwZNg6BZuHG5Md1UqC74HEWyWs2rh/G/zouiO8L/bgjoeG4nxp NZwHaZwG2484/IOyscR5GX4+NqIpjL1MiLmsAUwPT/gouC+4Jp5sG74OSzlM+RTt BDgb5QYj3fuQJZTh2d4Sccb3+9dA+9IXTM585FyYbZ9s99ynLhgzsQ+mJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2mIUEm0RcUk4Zfzj1RwrrC2wZNMB8GA1UdIwQY MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt OGVlYjc1N2NmNTQ1LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1 LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4c1TmdxZ DQkFUbKyMZI3skpXqYdSst8RCHYxOUqttADieKtOY7MwnHy4iKGk6mA0PyXqorc1 o8wnuOOIlxsD/WHFKYl3YcuxZGqu0yl1OMiWc/ikxmU5XY2R9aTsVCaGoDtH4/U8 p43nmPILeV0CBUQc+I7MzRdk56g3CgzL6y/1wZqtHqftbAuhgolN+6K5jzrXvdf9 rPhpqRXR6mjjYkcQMgUHsoXFdFaMWCTPwCeyCYx5SNKIsfGf8nZzdKNDfKLmgUnZ 9UAl8yEnUH0dicCVXTX/wOHwbwk4vk7LK6TJeC1UWkiKuRGA/OXQKvGBD8vZwlBw guleoArqxDE2IQ== -----END CERTIFICATE-----Generated at Thu Apr 10 11:06:22 2025 by rpki-client