$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft File: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft (raw, json) Hash identifier: 8ydCY/DVE10kdQl8OSs7Fa3KB5h3/FlWLfD7U1d9U38= Subject key identifier: 26:00:0C:08:FA:E5:DB:DF:37:0C:49:BD:68:35:D7:4B:1E:BB:AF:0B Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 0195FF9AD0AEEE4E028493AF7EBC94BA5372 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft Manifest number: 1228 Signing time: Fri 04 Apr 2025 07:01:30 +0000 Manifest this update: Fri 04 Apr 2025 07:01:30 +0000 Manifest next update: Sat 05 Apr 2025 07:01:30 +0000 Files and hashes: 1: 0pSLjaK5jJNleu-R1-JaIUNyXTw.roa (hash: du8WDP9/QiGqQOMX+ttIn10kEatb/Zs0qVgMPU5RqcE=) 2: 1WhmCNdV46akTWjdNSLb7xvYYGY.roa (hash: YgT7som/aRyqXmNhgGt4xOXpluNZMOE49qj62NVQC/I=) 3: 47Db6II4VWguGq1fmON_zyxfDTw.roa (hash: EtXOL534BY7YerRgShjwEr47qYY33r1iCEI0u/06D0o=) 4: 7-GhubYtfN_LHVkFF6zgqVFEil8.roa (hash: nMY0AubUAwGxLZdATA5AGoarINwqSaBiO8weqjvyFYE=) 5: 9o1bJHIY2DKstOflrYyuB4_xDJU.roa (hash: v84lCLYd/0h8qh/tv6tRvbnV7bRzw3VazSaPX2e1ubo=) 6: BQ_7CRByLAUpF1evkSyLCrrovKE.roa (hash: uT3RGzji41/DL4m9M7hw+Zpz+kLpotb4EKSd9Zae5tA=) 7: CQSr_mSGvx_MO501tTIbCtodnJs.roa (hash: esowCKU64ui4/Ap6GOn6lU0uRgAnfvEQjSsW8NdABkY=) 8: GDi32Sl_OrQquHaF5eRnZJe-JNU.roa (hash: SiXuwxSrm46q0wZ0C2mDE4OXGGQ9n7xN1flM/SzNXRA=) 9: I8S2hVkDs5WQ9gotPSw5OhIE_XU.roa (hash: 5OhiLGp3GkkcRYzG4tfq1G76vW7BOIqKJjeoc64Pt4o=) 10: MhM8AdXgoCd4zrzFUNyYeB1JwVg.roa (hash: x8CsV2gfv0T+wUL+aorX982fUJ/l+SVnwH0Xs0/jba0=) 11: PBWz5FaEMqr9VnHaKiVhm-NVVl8.roa (hash: RIMrhXVWZgpA4EKCo1eJ1BqfdDBJ/tZAXJ7v1AtcQKI=) 12: TEmBttlqOql-6WlBVV0HWvswEQo.roa (hash: fN7yflsLhVlqg4R45jJbYQ9DskvVzHDmzUKU/2SCJrQ=) 13: bKDzGVLS3_6865mtln3Kw5WmywQ.roa (hash: 1z8bJ9Dv0gvS7Kzr3By8Hyv6gfSz5rRy8bS1g5sgkAA=) 14: bm3jAPSokNwmkDXJzC1yE4mlh8U.roa (hash: Ugi+oeIGdBF2ZuSWBZVXXcNVIbH2fno96x0J1auQtLQ=) 15: dGOEJpiLqXr1GxRQGfDAi5gIbkg.roa (hash: +wCypBByvXlOI7hJJjkhkxo33K/FrkpIIcsdMGYENyU=) 16: dU3qmUSa0GUKRhwNtqeBWyfdFgA.roa (hash: +1noky3lUg4Xw21sSrzlUFu5e24FajFmXh8kqpW0IH8=) 17: ieLYYEtxw8yorIFSAMUiUnhPzxc.roa (hash: zpEjE+0wqNe3063Xp+u8y1IQ6Fze1n5YSctd31AydZQ=) 18: kP7-2BrCdrR1vflyzN6bCG-bC4Y.roa (hash: uhNV7zf/NfCBx0RNf+uccZmVPDDvd1bgU3gAxdkEF5g=) 19: m-Q_Wn24gdJ-kqlu-siY_6OniFE.roa (hash: +f069Ignbpg0zmLTIqsmUaOuN5XLud0PtvHpBkikPfg=) 20: pubBNtMB3i07GYMPpVIhhyFOTo8.roa (hash: Mn01o/7jdUgPgTc66DieNIOLFHGdyMS6RTRjsWHR/O4=) 21: sucSe0eC1r3sihXi_iaR2SOp89U.roa (hash: /HwnUsqpfauRDshlfSmbLyvgIlTpLPydMX0GwSKwT/o=) 22: uGhxQuJoiydmGBCdoiTuE4rnskY.roa (hash: cp9F2KjzrCdyiwYgQ04s2rnpm15FpJSYgYYNO9VL9i4=) 23: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl (hash: yrEjtvO6crJNX4kWBDtEKtyH/eQql/fnWGh/HVmtw0o=) 24: w35GeF1NRVWkdgYrM-D2oVh4XKk.roa (hash: 0xzHuhqUOoAiP/Y6/IovF7/iSmc6xQ7Xmuv7ej0uOJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 07:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:ff:9a:d0:ae:ee:4e:02:84:93:af:7e:bc:94:ba:53:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: Apr 4 07:01:30 2025 GMT Not After : Apr 5 07:01:30 2025 GMT Subject: CN=26000c08fae5dbdf370c49bd6835d74b1ebbaf0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1d:33:a0:36:aa:72:8f:b4:4d:87:34:cc:84: a9:f2:ef:f0:4c:ea:d7:4d:78:ca:d5:28:4a:c1:42: 05:b9:b8:57:a3:8a:6f:1b:61:0f:b4:16:12:e1:1b: 19:cd:d7:29:87:7a:9a:cd:9a:ba:af:b2:5d:cc:9e: 25:26:18:51:08:44:f7:a7:7c:12:b8:72:8c:ba:ce: 8f:1c:db:02:cb:4e:c4:36:0f:b2:e8:2d:b3:2d:40: 8f:5f:6a:a3:d0:af:30:04:56:b6:ae:8d:2f:9d:03: 14:ba:3a:85:52:1a:6e:20:db:84:9f:c3:40:cc:49: 5a:c4:cf:ac:65:bd:a6:76:08:d6:f5:f8:b7:a8:e9: 66:dc:c8:71:f4:e9:57:09:0c:ad:98:08:95:30:c2: d1:a2:cf:19:b2:fa:67:82:f3:ed:d6:52:5f:71:a1: 5b:e8:0e:6c:9c:a0:29:5f:05:07:d0:30:2d:6d:e9: cd:41:45:0b:af:2e:75:d9:ef:93:f9:e9:58:0f:a2: de:56:32:e1:80:42:2f:33:bd:34:3d:bf:6a:a7:b6: f5:50:49:fd:28:67:7f:37:c7:05:de:8e:2f:09:59: 06:e5:e5:62:41:44:c1:a5:63:93:5a:89:bd:54:5d: 23:3a:d0:57:19:44:a7:39:4c:f1:14:5c:6e:86:f9: 79:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:00:0C:08:FA:E5:DB:DF:37:0C:49:BD:68:35:D7:4B:1E:BB:AF:0B X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:18:91:bf:37:b4:f0:c8:88:71:54:c0:53:79:44:c5:4c:c5: f1:7b:30:2c:f9:3f:b5:65:03:c4:eb:e2:81:5d:78:b4:97:0f: aa:e5:86:89:34:2a:94:08:ad:95:23:c6:e5:7e:f7:29:74:18: 92:73:ee:b4:da:dc:ea:ad:a9:32:0c:2a:f0:6b:62:75:e2:25: 92:e1:c4:3e:5b:1a:69:ff:af:17:34:e1:8f:8d:0d:f2:37:ff: 5b:b9:cb:8e:49:eb:ce:1d:4d:8d:79:eb:67:a0:16:65:07:bf: 1e:3c:49:37:69:2e:02:c8:e4:32:9e:c3:b3:f9:23:03:6c:a8: e7:05:69:b6:d7:b1:b6:cd:0b:e2:a1:f4:2f:80:61:96:7f:50: 86:05:67:da:e5:29:3c:45:79:14:b1:17:44:33:cb:78:7a:1d: 64:57:11:58:ea:c7:fd:8e:0e:46:16:fb:c2:25:14:c5:0b:10: 8b:51:80:7a:9c:55:66:bf:94:4b:6e:a4:63:fa:55:4f:84:a5: d1:53:f6:7b:96:ed:4f:b6:9d:73:82:45:3f:20:dd:df:dd:00: d7:cd:ae:1f:f4:e8:b8:ea:1d:2a:0e:44:62:5f:76:59:e6:53: 56:97:1e:c7:35:df:2c:81:05:17:ad:fd:f8:eb:72:53:26:57: 8f:d3:d8:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZX/mtCu7k4ChJOvfryUulNyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjUwNDA0MDcwMTMwWhcNMjUwNDA1MDcwMTMwWjAzMTEwLwYDVQQD EygyNjAwMGMwOGZhZTVkYmRmMzcwYzQ5YmQ2ODM1ZDc0YjFlYmJhZjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx0zoDaqco+0TYc0zISp8u/wTOrX TXjK1ShKwUIFubhXo4pvG2EPtBYS4RsZzdcph3qazZq6r7JdzJ4lJhhRCET3p3wS uHKMus6PHNsCy07ENg+y6C2zLUCPX2qj0K8wBFa2ro0vnQMUujqFUhpuINuEn8NA zElaxM+sZb2mdgjW9fi3qOlm3Mhx9OlXCQytmAiVMMLRos8ZsvpngvPt1lJfcaFb 6A5snKApXwUH0DAtbenNQUULry512e+T+elYD6LeVjLhgEIvM700Pb9qp7b1UEn9 KGd/N8cF3o4vCVkG5eViQUTBpWOTWom9VF0jOtBXGUSnOUzxFFxuhvl5bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYADAj65dvfNwxJvWg110seu68LMB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASRiRvze0 8MiIcVTAU3lExUzF8XswLPk/tWUDxOvigV14tJcPquWGiTQqlAitlSPG5X73KXQY knPutNrc6q2pMgwq8GtideIlkuHEPlsaaf+vFzThj40N8jf/W7nLjknrzh1NjXnr Z6AWZQe/HjxJN2kuAsjkMp7Ds/kjA2yo5wVpttexts0L4qH0L4Bhln9QhgVn2uUp PEV5FLEXRDPLeHodZFcRWOrH/Y4ORhb7wiUUxQsQi1GAepxVZr+US26kY/pVT4Sl 0VP2e5btT7adc4JFPyDd390A182uH/TouOodKg5EYl92WeZTVpcexzXfLIEFF639 +OtyUyZXj9PYIA== -----END CERTIFICATE-----Generated at Fri Apr 4 17:07:11 2025 by rpki-client