$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft File: M8NCwGqsw1nTlDn_WN76jqGHV0g.mft (raw, json) Hash identifier: wnHH0P9NTcG89Yozd7Cf6/qo6N9DyTnSu0a2GdIBmt8= Subject key identifier: E4:40:E8:8C:DA:8C:AA:12:AF:DD:65:1D:29:F9:C8:82:FE:B2:1B:83 Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748 Certificate serial: 0197481E94BA640C53315D09492CE3101790 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft Manifest number: 157C Signing time: Sat 07 Jun 2025 02:00:53 +0000 Manifest this update: Sat 07 Jun 2025 02:00:53 +0000 Manifest next update: Sun 08 Jun 2025 02:00:53 +0000 Files and hashes: 1: 1-yS3aYPqpaClbUu2NxEJjasn11w.roa (hash: 5XgaEX1gVaWrfAm4eZoLyJtYysjnny395i7jpZsSAQY=) 2: 1_CHZT9QfuR7tsU-euaK767cklU.roa (hash: 63+eLT9Dw8Qs2m1cc8lHoIY3XMdIir76QzW85Og4v9M=) 3: 2_oHdZTLwl8Ni8dVchp52bQoBP8.roa (hash: 1IGeiz1Jq/CL3kqilbFu1/fy+mEjiI24ecXvvRj4kX4=) 4: 36PcBEuS0YaFeejxK9Rr2Qkonyg.roa (hash: crvn7STBSQ8hyIYObc7IEiRjwRLGGVAHLgb6Zwn91c8=) 5: 4CLeeil6rnYYbSXDioOdMRk-fu0.roa (hash: nA2tspg1OX/8GxIGauCnmSzDzS8p+XC3M6EwX+K2Zuc=) 6: 7Lq5thg4GVm1ghsW2nTmTfntl7Q.roa (hash: Cug0ydNU1zlYNhdljKnKemuyYIF9W9jlVIkuddLMlTQ=) 7: 7usS4n2wTmwQKN_FfLFrT2gzTes.roa (hash: rmvLzeLSfvnfViQvQG0evozZFVJcIY19+X8a4fI9x4Q=) 8: 8YSnvyCLvUiHNjAw1eWuFCNdk2c.roa (hash: PTMxJnzevVSgZNxZ+M3p3kXGLUbEbhxizVHAA+Gkp9w=) 9: DbP7K2VtNw3kapyPyuFvQE7JBSM.roa (hash: 2fzeTpuJWnP6/gv4fT9R5JKUn/1ALgN/OCuPkiMy+VY=) 10: M8NCwGqsw1nTlDn_WN76jqGHV0g.crl (hash: dZI8waItvdqNAT7SfGzOrcC5rDREFf5MhH4/ofHCPcE=) 11: PtdarDr91PAic9ExXEPtp5rDR90.roa (hash: pCWRE4xl0SCTzuH+d2oTniDVCc4UbcqvXbr0am8wd2E=) 12: XHw85hniBF8TOIktC8VH-K5Sz7M.roa (hash: Ea6SLJBNB8kXoImOZvy4ZtmOcm4IPMCnAht2m4dCzfQ=) 13: _Cb6FUCoQ03XQzWaAGVZCL11bhk.roa (hash: 7DHJ0ftYg5chCGMOY75jI68kzxP7FSC041EsKG1o0UA=) 14: hmKd6LubvseWFnch4vVN9v-GR6U.roa (hash: eqD+J0wg0iQNL4Cg+PT3/sHzu0dI9aBjTjQ//aaCFJQ=) 15: ixgQ7SiQi_wWeVAAXtTKU7XdZIk.roa (hash: 96bA0cNzp2CN/kCqbjKPaK+FRxIBqzNEUGIfvg5EFb4=) 16: qmxFyvD5jjibZjJM1ZLLs4anyDg.roa (hash: y/C7QUn/kfSJX+tk2XBXNZQ/E3dp0hw1Ap5O7ikQtfw=) 17: v9Lrt2SfuAlXzVot4u7KvPVgY2M.roa (hash: Y7iaJQnKOEgRwNsqfZadHFtG6v/ZxO1cSgSJLizeQ/g=) 18: vmLDD1TBTYG-hEjE6Ab3SFuTYs0.roa (hash: NyOwpcin3g/lVGCyaCZG0ziR33wb6JD1mwKtweMIjl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 02:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:48:1e:94:ba:64:0c:53:31:5d:09:49:2c:e3:10:17:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748 Validity Not Before: Jun 7 02:00:53 2025 GMT Not After : Jun 8 02:00:53 2025 GMT Subject: CN=e440e88cda8caa12afdd651d29f9c882feb21b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:15:64:49:24:99:9c:6b:1c:e8:2e:25:ef:a8: 7b:07:06:e6:a5:b0:cf:b2:9a:4f:8f:a0:29:0f:93: cc:94:82:1e:c5:76:ad:15:50:95:65:bf:e6:ef:53: ed:4d:1b:5c:b0:f3:18:87:5e:f7:72:59:e5:72:f4: 25:ec:01:59:fe:cb:a0:4a:79:27:69:b6:3f:b9:ae: 4a:aa:21:f3:af:fd:2a:43:ec:a9:0f:b1:9c:28:50: 3b:d6:fb:6a:aa:be:be:65:5a:9f:94:4d:4b:0d:94: 36:00:71:0e:90:f7:4e:6b:d2:4a:e3:3c:96:43:3d: 89:58:ea:52:a8:bb:6a:00:d2:8a:b0:8d:a5:97:28: f1:f4:9e:02:88:54:4c:92:9e:ad:2d:4d:7f:e2:d9: 3c:66:bb:f2:f0:2c:1c:7d:ce:b7:3c:df:54:57:23: 12:13:d8:0d:b6:37:e2:33:39:1f:aa:1c:3e:cf:af: 13:07:7a:8f:f4:40:b1:0a:61:86:36:5d:c2:0e:f4: 74:57:4c:4a:e1:09:b0:10:24:7e:b7:a4:59:fd:53: 87:1d:86:5b:3c:35:9b:f8:bb:45:5e:12:03:80:6a: d5:7f:40:40:5d:cc:dc:10:71:b0:a0:e9:68:7e:a5: 01:0a:66:27:23:8c:1f:09:48:96:4b:da:a2:61:88: 9d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:40:E8:8C:DA:8C:AA:12:AF:DD:65:1D:29:F9:C8:82:FE:B2:1B:83 X509v3 Authority Key Identifier: keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:13:72:ed:f9:0d:46:2b:51:61:04:7f:6e:f3:81:33:49:96: 27:cd:cb:12:7d:53:28:ff:f0:c3:1e:a1:b0:8c:16:71:12:da: c3:5b:8c:df:fe:cc:d6:1a:37:b8:78:3a:71:e2:85:56:e1:55: 5b:cd:e2:4b:9b:40:5e:e0:91:e0:0e:53:b7:61:65:6f:67:15: be:bc:52:25:92:1f:62:f6:d1:3b:ad:10:a5:7d:69:d1:52:ba: 85:7b:c0:c5:a3:65:70:39:19:44:1b:3f:30:31:a4:a7:20:ac: 10:54:71:14:48:2d:91:1b:e6:e8:1e:b9:b7:57:85:f5:a9:70: 1c:82:60:20:71:4b:f0:e4:7b:7d:d8:4a:e3:f4:45:16:68:4b: ca:18:a4:26:6e:91:e9:19:a4:9f:f5:2b:c5:e6:e3:b6:ef:52: 0e:d2:db:ec:e8:61:9b:f6:56:1c:31:8e:42:20:07:21:03:7a: 22:ff:58:5b:0e:74:85:7e:de:aa:66:eb:bd:e0:ed:a6:d1:dc: 17:4e:81:61:f4:18:83:6e:eb:36:c5:4f:fd:56:4f:f7:1b:c6: 37:22:a4:0e:dd:05:c7:02:12:c9:7b:28:6a:0f:71:e4:40:21: ce:e5:d8:db:66:cd:55:50:62:4a:90:5f:76:bd:71:20:bc:d7: 68:e5:17:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdIHpS6ZAxTMV0JSSzjEBeQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYzM0MmMwNmFhY2MzNTlkMzk0MzlmZjU4ZGVmYThlYTE4 NzU3NDgwHhcNMjUwNjA3MDIwMDUzWhcNMjUwNjA4MDIwMDUzWjAzMTEwLwYDVQQD EyhlNDQwZTg4Y2RhOGNhYTEyYWZkZDY1MWQyOWY5Yzg4MmZlYjIxYjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxVkSSSZnGsc6C4l76h7BwbmpbDP sppPj6ApD5PMlIIexXatFVCVZb/m71PtTRtcsPMYh173clnlcvQl7AFZ/sugSnkn abY/ua5KqiHzr/0qQ+ypD7GcKFA71vtqqr6+ZVqflE1LDZQ2AHEOkPdOa9JK4zyW Qz2JWOpSqLtqANKKsI2llyjx9J4CiFRMkp6tLU1/4tk8Zrvy8Cwcfc63PN9UVyMS E9gNtjfiMzkfqhw+z68TB3qP9ECxCmGGNl3CDvR0V0xK4QmwECR+t6RZ/VOHHYZb PDWb+LtFXhIDgGrVf0BAXczcEHGwoOlofqUBCmYnI4wfCUiWS9qiYYidJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORA6IzajKoSr91lHSn5yIL+shuDMB8GA1UdIwQY MBaAFDPDQsBqrMNZ05Q5/1je+o6hh1dIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUt N2YyMzMzNjA0OTk3LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUtN2YyMzMzNjA0OTk3 LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhNy7fkN RitRYQR/bvOBM0mWJ83LEn1TKP/wwx6hsIwWcRLaw1uM3/7M1ho3uHg6ceKFVuFV W83iS5tAXuCR4A5Tt2Flb2cVvrxSJZIfYvbRO60QpX1p0VK6hXvAxaNlcDkZRBs/ MDGkpyCsEFRxFEgtkRvm6B65t1eF9alwHIJgIHFL8OR7fdhK4/RFFmhLyhikJm6R 6Rmkn/Urxebjtu9SDtLb7Ohhm/ZWHDGOQiAHIQN6Iv9YWw50hX7eqmbrveDtptHc F06BYfQYg27rNsVP/VZP9xvGNyKkDt0FxwISyXsoag9x5EAhzuXY22bNVVBiSpBf dr1xILzXaOUX5w== -----END CERTIFICATE-----Generated at Sat Jun 7 12:11:14 2025 by rpki-client