$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft File: HJY-PSKEfUZsJiwgh4wngNiEAAM.mft (raw, json) Hash identifier: Q/YyBYs5d5kfOBl6S3TAtY4dgk5s7eaEROVFJKM/Y70= Subject key identifier: 5F:B2:B7:9B:52:F4:BB:57:55:5F:F5:2C:44:2A:03:35:28:6F:FF:7D Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 0196075435B6D2B738831AD9236872778EAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft Manifest number: 0458 Signing time: Sat 05 Apr 2025 19:01:21 +0000 Manifest this update: Sat 05 Apr 2025 19:01:21 +0000 Manifest next update: Sun 06 Apr 2025 19:01:21 +0000 Files and hashes: 1: 0v94mnKmrgYtt5y2MQGuDazjxjA.roa (hash: 3Fy3bWz7jcZoEFMt18MGzYWf/tfMkeytNpRPKao8d4A=) 2: 1-kb4hmxMAktf4yYaTtNVFR4VnGM.roa (hash: Is673hjFs+Vhwv7WU2gQiJKw7iusXjoS6iS4OthWLzs=) 3: 4hx7X-qAofbTlhwwVV-AQ6KXp_w.roa (hash: OBb8406LAIV4rFPWUu9hOe5P2joW2t0g3DbKGweRhoQ=) 4: 92fBnrq_mIGybZF5gsHPTbdH0y4.roa (hash: 3nqgv8gEoJk+mexG4q/tymckm8ICa7hlkNqJQ4qh8Tg=) 5: 9UIWvr1OfNDaGDV1NFy_9NnoTYM.roa (hash: tixaefTMG5hslITfoqhr1S/+epdx4nSuGQbGRhnUPxs=) 6: 9tE0dhjecz_vEPgQYKZazxJZpXs.roa (hash: ybs354Sqw4G0DipKA3jVjo1yJgYq86p+0PfMWE0k7zg=) 7: B3hYI-yFzUsfLaXXcmpVXDtm1FA.roa (hash: l103Ybv4lweW1usLLXjIO7Qt2UGlUxgwH75Nm0FO+Vs=) 8: BT_y8tC6dIOsSolQji30EA3V_Ks.roa (hash: RaxhNpw/99qVV8Vhyi1Z0lIgvQ1GFVEiK3FOzMdy+wA=) 9: CBUmi1Sy-4OHlm4dqLE_fNMsxkQ.roa (hash: sD732gCP9DEw8s9H4wJkzWgViHWbKEY1xx697cAAzh8=) 10: DFllakhYeoutBATf4MzktTkzMHA.roa (hash: GuxDJWqtKXhEqBdraQY6S/n1UWX945Zxw/dwDjpnHZI=) 11: DRAzDA2vgEaiM5RUOX074m9AtAk.roa (hash: b17cUe8b1KGzAYHt+JmGZn90RCYEfEgnyjtke4m04uI=) 12: HJY-PSKEfUZsJiwgh4wngNiEAAM.crl (hash: tdRrrkpjIeWDAT9yJZanbwjTST00/64fNzEiYXCzjMM=) 13: HKoBlx4Ki-nzxCw9aEz-oTGTS5s.roa (hash: FQAxLC3PSJc2T88Euwq7LFUYTEkvVvSw9fr3e7bH7tM=) 14: KL_oocCv4khkyRa25dlbyITRdjc.roa (hash: 4wKDO2i1BeDNJh2oVpIy70ysxuQo2aRiUjHzNsE7zKM=) 15: KOI25PzdTkm-0xZVhCT_xtTg5-s.roa (hash: 1o0QY37vh42XXWTJhB6P/HZwmg8ud9LsKS5XYNkdPhE=) 16: LrGY9y2ZNRUWHRUUDq1ngEm3RFg.roa (hash: x9nSN8uTUQHNxwF54Ag9OVyXCtYq5RCsNgfYHddaIyk=) 17: NtsNx1ln9VTnlxvb3DnHe3HxX6M.roa (hash: 62MHE/ObSNCgKCi9O4CSEdldJK0WNMREIvL73UuyahQ=) 18: R2R3dYwVExujkP_3YEzS5IWSFks.roa (hash: iCdIt4hjH3rsHPjbBwBDkiRUbawLUhZbiZd908W2whA=) 19: TxUte2UJ9SRYfI0Kkfto-EOhFA0.roa (hash: jgnG8ECsuht9mADq610Na72eHRyPpWoKaV58yYAI49E=) 20: TyejWy3JMbuHPbI-YINhRswkn6U.roa (hash: ddeTozCzeGdeH2UQO6NJHuZFd1z2I2vHOsvjsVc+KhU=) 21: UexI4Z2MHoKJX7UArvShMTnFH1s.roa (hash: OG+DMZt/nQN7JQoIC3moczIdzt0YyA+sScQJwQ63uLM=) 22: Vif29W-3fcIPPVlWCYw3gqQgj0U.roa (hash: mBKo6kBp5aKtDQrGaY+LTFtjbW2WOx4wgeIf4JrxaMQ=) 23: Y5YvAPglDjFhK1YMzDU1y1jJIlE.roa (hash: nOlX7buINhy7ODIRgajp3PMZ+ShNH0qVTw3tydvl1+c=) 24: b7L1BVXVOnkuFE-ukpUlYeb0oaE.roa (hash: ebhWbVi3pqdJGhpytj7RzZG7COftl7jlFC0AgSJrfK4=) 25: b_esdvwuL7HMMRsaUDaWOqTlMVY.roa (hash: pwo77eC9fZ605tPPzC8qd5eRG6DFX9632hHdiz08KNM=) 26: clGGL9s85YgTAJ-RMjz5lCzOP5g.roa (hash: xPkxg9x/lb7QNTjqVIebB4jEI4Q8WiVxGZsDwX+/iUM=) 27: d-95rAHHuBAaQPmzAEPWgdKyxFo.roa (hash: 9Wboo4a75LUMWjrM7p8sJusEoWoF75d1YR86Ff0lJjY=) 28: iDHKoOkn76ewvGMKtSvQ55oreVI.roa (hash: FdmrkxRsqXjJl6GApfB2yCowxyhEWG38nOt3Zk2IOgw=) 29: lbIP4JZWhRE79FoTj02hfBkdN9U.roa (hash: UmpTEyTvDDtacG8R6LJOmoidepJdCHnpTWfSmIAqUAA=) 30: orZxC-53BDBk1U6uuSN8DRaau2c.roa (hash: HOGL1GzBKb2HP//0y1ozzX/F3kqSictn9tpzoAyDhSI=) 31: pteX_F18pKfY_J9Cs8K_KhX8xe8.roa (hash: m/yi1TVeKvstEX7vhie8NfbFmnVlI4Htbwkazoc2nMQ=) 32: r7-k0f-z2OlArTZoSJ6zSYon5xM.roa (hash: QUZGO8/mjv/Qdw+503/pGshPdbDCDrat1f+az31SAAc=) 33: u_xpoEFdMS4XphSvfLjhMqrSVCA.roa (hash: F/zktMNsr2weptvJLM+lhhTnzjBLxkGzNeypTL4hxZk=) 34: uhmFxnEKd2nWDe4y3QSW_tBBf5k.roa (hash: 3Bs+fdH+UE5EdQY+qhv9fnBOPcXhnzSeBJNZNfIjD6w=) 35: xpnbOWgAfiIJZmpjmdv34zXX7iA.roa (hash: hxYTr7x86gGFLz4Uj6fKUzE6Fc/CR0rrmrlRUyOVlSA=) 36: xuJYMqlUYpz7SNGCM4K_jvqIs20.roa (hash: d0TAOSbcF1oLLc0bjHz9EWzJ8DaW0Vbfqehz4TLqfCE=) 37: zAVxvux3Ij4Ln78b1yGsEJeiCfQ.roa (hash: 3NnVEWj3eRCtReW6v/aye01x2yi/QEBSea/+eiByuhc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:07:54:35:b6:d2:b7:38:83:1a:d9:23:68:72:77:8e:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Apr 5 19:01:21 2025 GMT Not After : Apr 6 19:01:21 2025 GMT Subject: CN=5fb2b79b52f4bb57555ff52c442a0335286fff7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2c:e2:d2:c1:11:67:6a:37:c4:c2:9c:e0:48: 6c:83:f4:82:b6:36:e9:fa:a0:89:6a:b0:23:31:ec: 14:20:e4:82:ac:57:f1:c2:c3:b4:6c:6b:c2:0c:ae: 3a:fb:cc:67:b3:72:55:75:21:d9:1e:7f:5c:2a:92: 86:bc:9a:d9:85:0f:7c:82:d0:80:60:bc:08:20:f6: 25:90:80:0a:37:28:c0:13:2e:f5:eb:68:d7:fd:a4: 83:be:d7:65:b8:e7:d8:60:9e:8b:4b:10:82:ce:dd: 1b:41:78:fd:b8:95:bd:19:68:1b:fa:cf:30:fb:78: 8e:2c:a9:5b:7b:48:7d:48:68:09:03:28:67:7d:66: 55:3e:f9:1c:29:ba:e2:79:75:c9:1e:44:7e:b5:c2: a5:82:f4:cf:be:12:9f:7e:5a:b4:98:60:11:5c:25: aa:07:7b:25:91:ce:70:05:bc:bc:93:5b:46:d5:86: 2d:08:fd:f7:5a:23:3a:66:d9:26:3d:ad:98:c6:1d: 5f:34:e3:b0:a8:83:47:f5:ec:1b:2b:21:22:1f:e6: bb:cc:79:05:c3:f6:2a:6b:32:d1:bb:7d:64:57:52: 7d:10:5e:ee:b1:ea:38:49:06:f9:f5:4a:09:7b:1c: 8f:74:4c:2c:c8:9d:f3:52:53:69:1b:45:18:d9:56: 42:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B2:B7:9B:52:F4:BB:57:55:5F:F5:2C:44:2A:03:35:28:6F:FF:7D X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:d7:69:10:b6:7b:4d:33:1a:7a:5b:20:a9:59:d7:48:e3:84: d8:2a:c8:a7:d6:49:0f:27:4b:94:56:7c:b3:aa:f1:ed:53:14: e9:07:2e:81:e0:a9:42:2f:67:a2:b7:84:30:82:9f:0f:82:14: b6:4a:01:fe:79:62:f6:ed:5e:d2:43:ad:86:ed:fa:5f:e9:3d: 14:ae:1c:b6:09:eb:de:59:3d:5b:67:17:c4:d4:4d:c5:ab:ff: 6a:49:bf:8b:01:17:81:f6:f1:97:a3:cc:53:54:5c:2d:3f:e6: 43:ed:3b:10:bb:c6:10:6f:6e:b1:f0:8a:ea:32:4c:21:a9:da: 4a:65:e1:e8:c7:7e:df:18:7e:96:bf:86:1c:19:c4:b3:c3:7c: 63:4d:d2:c9:91:7b:b3:3d:94:a7:07:b7:9f:14:c7:e3:2a:9e: b4:8d:0d:5b:6c:99:e2:a2:c6:be:0f:61:72:7e:48:9f:65:2a: 3f:63:ea:2e:cc:9e:1e:40:72:55:67:2f:71:41:5d:dd:a3:83: 12:aa:0c:34:81:4c:cf:88:a0:bb:3c:f9:98:1c:c3:27:2c:74: a7:1b:bf:26:d1:62:d9:a2:69:09:f0:ba:b6:2e:ac:0d:a6:a1: ee:38:83:90:e4:8a:62:17:7b:d1:6a:cf:6c:3c:15:ad:4f:e7: 7d:68:83:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYHVDW20rc4gxrZI2hyd46sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUwNDA1MTkwMTIxWhcNMjUwNDA2MTkwMTIxWjAzMTEwLwYDVQQD Eyg1ZmIyYjc5YjUyZjRiYjU3NTU1ZmY1MmM0NDJhMDMzNTI4NmZmZjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSzi0sERZ2o3xMKc4Ehsg/SCtjbp +qCJarAjMewUIOSCrFfxwsO0bGvCDK46+8xns3JVdSHZHn9cKpKGvJrZhQ98gtCA YLwIIPYlkIAKNyjAEy7162jX/aSDvtdluOfYYJ6LSxCCzt0bQXj9uJW9GWgb+s8w +3iOLKlbe0h9SGgJAyhnfWZVPvkcKbrieXXJHkR+tcKlgvTPvhKfflq0mGARXCWq B3slkc5wBby8k1tG1YYtCP33WiM6ZtkmPa2Yxh1fNOOwqINH9ewbKyEiH+a7zHkF w/YqazLRu31kV1J9EF7useo4SQb59UoJexyPdEwsyJ3zUlNpG0UY2VZCZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+yt5tS9LtXVV/1LEQqAzUob/99MB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAINdpELZ7 TTMaelsgqVnXSOOE2CrIp9ZJDydLlFZ8s6rx7VMU6QcugeCpQi9noreEMIKfD4IU tkoB/nli9u1e0kOthu36X+k9FK4ctgnr3lk9W2cXxNRNxav/akm/iwEXgfbxl6PM U1RcLT/mQ+07ELvGEG9usfCK6jJMIanaSmXh6Md+3xh+lr+GHBnEs8N8Y03SyZF7 sz2Upwe3nxTH4yqetI0NW2yZ4qLGvg9hcn5In2UqP2PqLsyeHkByVWcvcUFd3aOD EqoMNIFMz4iguzz5mBzDJyx0pxu/JtFi2aJpCfC6ti6sDaah7jiDkOSKYhd70WrP bDwVrU/nfWiDWA== -----END CERTIFICATE-----Generated at Sat Apr 5 20:57:47 2025 by rpki-client