$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft File: ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json) Hash identifier: 0KHn4eHRBuud4aXSHn3TeLkZO8trsCyiDJ/Ectn/XHA= Subject key identifier: 5B:F1:5B:9F:E6:AC:2D:7C:72:F5:5C:C5:CB:8E:41:14:22:AA:35:D1 Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a Certificate serial: 0196090BC0B608F324D791184A11D119517D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft Manifest number: 152E Signing time: Sun 06 Apr 2025 03:01:27 +0000 Manifest this update: Sun 06 Apr 2025 03:01:27 +0000 Manifest next update: Mon 07 Apr 2025 03:01:27 +0000 Files and hashes: 1: 2_z48hJvW9cSrimqDQBgMrVpEQs.roa (hash: oE4HqjwZlQTv4ObB0KpkYDlK+xOPSCz/U5+L5QyTFnI=) 2: 4e5pIyH-5Elgfcqbgv__FOG63l8.roa (hash: 16h88AqJ7GzCv5plzgfUDX/bZIVuf4Ci8HhgyLVJXV4=) 3: 5cpMF4gywWh4TSF3WyLtzpEIguk.roa (hash: OtbGKrZ7YrSxXH5K8jC9MppIQd02GNRo1inboNoBRxM=) 4: 61tSV3QXLbjs_o_29J3y2Sz7rgQ.roa (hash: 6WGDu/T4fPA2CuqPdnDUedMj+jXcp4NfWsWrHmBy+tw=) 5: 8BSNOYyVDFZxdK6Tcxvw22iK4m8.roa (hash: +qLExyvNPSTVOOA92aPeXt0S4hRJ4I0dXrN9T8T2uoU=) 6: DVsFv0t_ecOVNHO3HwANDhXlask.roa (hash: Lwozg5a0CSQqgCd1wpNSUT8JWSsH0h6hmDldcmW800Q=) 7: E0jD3zaQKNcY4OwTowy1qkc7UII.roa (hash: LFEZv2sUyTiQuviAPaH5GVDhB6qp78p/+LRpCeIzCx8=) 8: ESVrWrjx7uQrIu0OVLySmaVBfAA.roa (hash: 3It2cHEioDdRd+vQFpeUNpMQgEGw5qFoe8Q/XwN8mJY=) 9: GUW7yMHSxMWKPOxBZPmYfJyT23c.roa (hash: ja5FNbrm3KfTJUYoB/uc275n0oYgzZBEDq6fXdub3G4=) 10: ILWOt7E0VcSN53t_NxyVxlZk5U8.roa (hash: fDXYQZD5ADS6uBj8cli9WDuucKNjqNS/JRawIUfAzxE=) 11: M0j7_1LaERciPULQ9bHyFVdlekg.roa (hash: st0UHombc6Z8INz/2/VOrk1dCPrSkjpUcNTVU3Gvg+Y=) 12: WXqpX2cUzR8srh7EQXKS6ZsVr1k.roa (hash: iKPqe2rKMp5bbd7ax1HJv4fDxF+WBcNpcpJkO6bLbGs=) 13: WdrZxhy3fLo5c5Ai6MRdTyqQ468.roa (hash: IrU3x8n31DYJH+OdZCgSZpf1IPCjbwcXSyqOIAQwYlI=) 14: Xfh8zrRZw7A0aXC3E9LebWyErd4.roa (hash: FUQj4hR3WY/C5r364dxzUxMw4OF2Ggqd9oIi1o4fn10=) 15: XnKhkIj8XU2HxSZI-PPO4P-cC2I.roa (hash: RZJBztvaM9qOkXAu1EUg2oUvPjGzxSs7nEvJhyJK0qY=) 16: XymxCebgP2iZukhvR2MoULKQYg8.roa (hash: Gic+qBu6uDav81P9UIqh8LoxizRVVE2tkjr5RFnItJo=) 17: baWixGmdwdkSX9TDGN-Qlb4lmGA.roa (hash: GhZuR5USZpNa0EDpXlmYqKRP7MC168zFvx0Rz6R/PK0=) 18: bs-Ks38HPiFE0Vzu9hCOAT_v2qk.roa (hash: 59dDdRNblQTB9SVjvDy4pNzxWykMNeIW4S3L/KbIT9A=) 19: c0ZnvHQrmnuJhbdNtuSYX2OHS9c.roa (hash: Xwx99qFCWbgDS7FjLjIYXDibpdvOr8Iwvs0X/aUeNvM=) 20: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: nReO+bii9ZRMhNWCADyPIkMwuZpCfzsVuw2NjjLaXv4=) 21: hABxVjfNOUJpj-z5UorT-xdaa44.roa (hash: 6sQ9BTmeHNBdeeQCTv6P6DGLQnjJuSvy0rz9LS1SIG4=) 22: j63jZRnMUiDSsXvYQHecWgsCRyQ.roa (hash: K8+M3lFPQKubjIsmYzQtDktqmYXELL1jNbS29/gsyAA=) 23: mA147Xd7z63TDz_x49XUByd9djA.roa (hash: QizndFGS4tu424cwh2ulp0h3A1hTFAM9aqHWhGGLPbA=) 24: rIgcdTeWZFGqJKg9n3iWHMAsC7Y.roa (hash: a0sp1XHVAFftpd98cWn25wYJYIERTkIsIUmu6LiYvzk=) 25: umw1f8KATzlinkc94jrVNM7O5FM.roa (hash: nSUZvuLB5WOlfTLV7B/9YHvz7jophepWeg4X/O79XDM=) 26: wBmGKXHN8M3c7OBKyxuRTU7lBLA.roa (hash: NjB9Qp+zgAcVCYv6VDKIdB6u1ZpCafutoKC8Tsuys6o=) 27: ynIgMwcMUfu6aoySdoB2_fxZ-2g.roa (hash: Ad2Ob20F2PglYmj0nGXoA2H7TNg37jxfUh38S1QtL8E=) 28: yxTjGPj_Qglxr_34LiTpZhaydeQ.roa (hash: Vz8qidNibQKtCnGpm2NL5uzzI7FPXB8PEr1lT5su1wg=) 29: z3aZTQKZFzM29IIBXsAtxZGZ_Tc.roa (hash: fjct9lWmGvHOEo0YjITzcQBCzb1QrDPT5eJeyB+eK+k=) 30: z80MVwRUXWgMDbcJ_g9xksS0uHs.roa (hash: SUb3bn81u2CP978uSjnzY5A3iGrgJwGR+seJyNzkQWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 07 Apr 2025 03:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:09:0b:c0:b6:08:f3:24:d7:91:18:4a:11:d1:19:51:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a Validity Not Before: Apr 6 03:01:27 2025 GMT Not After : Apr 7 03:01:27 2025 GMT Subject: CN=5bf15b9fe6ac2d7c72f55cc5cb8e411422aa35d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:46:6a:4c:65:69:b1:02:ef:0b:af:82:5d:97: ea:77:da:93:d3:46:7b:71:9f:38:a7:41:f7:a2:78: 1b:d3:54:2b:49:69:4b:86:e5:24:f4:71:f8:b4:0c: 85:6f:5c:88:5e:ba:6c:89:a2:6c:11:50:d5:ad:87: c5:fa:82:70:11:f4:ff:55:84:a1:48:d0:7e:e6:a1: 81:6d:71:87:15:07:c2:a1:bb:7e:7a:84:3d:18:05: 77:34:d7:a4:6e:76:cd:8f:08:66:2b:29:e0:19:5f: 96:6c:40:3b:d2:8d:93:47:d1:e5:ff:ad:87:45:06: b9:bb:76:dd:cb:7a:46:6d:9b:98:51:c5:89:0b:ae: bc:df:09:17:40:6d:35:db:c2:8e:67:12:a1:32:d9: 8b:3f:ca:62:16:68:e2:28:57:68:92:ac:72:01:b8: 7f:c9:bf:c2:e0:74:d1:d3:44:67:4f:eb:81:9b:f0: 7c:c6:d1:fb:fa:59:89:be:f2:63:a7:f2:80:da:0b: fb:a0:8d:5e:7d:3a:df:ce:b7:f0:e4:82:64:92:5d: 67:4b:8d:de:02:65:3e:c6:99:e5:88:7c:ab:ef:45: ec:ff:a7:80:76:6f:c5:a3:98:b9:e6:86:f5:19:8c: c4:c8:55:ce:7f:0d:00:8a:b4:54:85:20:6e:e6:9d: d5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F1:5B:9F:E6:AC:2D:7C:72:F5:5C:C5:CB:8E:41:14:22:AA:35:D1 X509v3 Authority Key Identifier: keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:f3:af:7f:61:ca:1d:18:58:81:4a:d2:0a:76:b7:82:60:09: 8a:0f:a0:72:41:b9:fe:b2:2d:df:e1:92:1e:15:1b:2b:3b:1f: 8f:c6:f1:d1:02:78:3c:ad:70:f4:a5:33:47:ef:6e:4f:aa:c2: fc:71:10:6a:6d:39:6d:d3:6c:7d:5c:db:f9:ed:17:d0:27:97: 7e:5f:77:a0:01:31:7e:26:4d:63:7d:be:08:03:eb:68:ce:24: ec:a2:24:05:89:55:df:39:c2:86:eb:11:b2:bf:33:4a:1a:10: 33:a6:5b:a6:eb:53:7e:6a:8b:aa:4f:10:1a:ec:b6:f5:d9:b6: 9d:a3:57:79:76:2d:57:e7:72:23:85:d4:39:19:4c:43:07:89: 82:7d:f3:0c:34:72:26:54:a8:38:cb:74:4b:a8:61:03:3c:df: 25:82:da:be:3e:90:13:24:33:5d:b3:32:07:85:9a:b2:7d:14: 16:fa:01:69:8f:20:02:8e:d4:28:5a:1e:ab:00:1a:84:73:33: 52:66:e3:c8:30:fd:b6:35:f2:c2:5d:10:18:69:d7:d1:58:b9: ac:23:93:74:0d:65:5f:75:7a:71:2b:b1:e2:4a:5c:6e:73:0b: 30:ab:37:e1:18:f9:ff:bf:0c:d9:a2:96:9b:24:b0:54:8b:c5: 45:ff:1a:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYJC8C2CPMk15EYShHRGVF9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My ODc3M2EwHhcNMjUwNDA2MDMwMTI3WhcNMjUwNDA3MDMwMTI3WjAzMTEwLwYDVQQD Eyg1YmYxNWI5ZmU2YWMyZDdjNzJmNTVjYzVjYjhlNDExNDIyYWEzNWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEZqTGVpsQLvC6+CXZfqd9qT00Z7 cZ84p0H3ongb01QrSWlLhuUk9HH4tAyFb1yIXrpsiaJsEVDVrYfF+oJwEfT/VYSh SNB+5qGBbXGHFQfCobt+eoQ9GAV3NNekbnbNjwhmKyngGV+WbEA70o2TR9Hl/62H RQa5u3bdy3pGbZuYUcWJC6683wkXQG0128KOZxKhMtmLP8piFmjiKFdokqxyAbh/ yb/C4HTR00RnT+uBm/B8xtH7+lmJvvJjp/KA2gv7oI1efTrfzrfw5IJkkl1nS43e AmU+xpnliHyr70Xs/6eAdm/Fo5i55ob1GYzEyFXOfw0AirRUhSBu5p3VVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFvxW5/mrC18cvVcxcuOQRQiqjXRMB8GA1UdIwQY MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt YTU1OGVlNjU0MzFmLzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdvOvf2HK HRhYgUrSCna3gmAJig+gckG5/rIt3+GSHhUbKzsfj8bx0QJ4PK1w9KUzR+9uT6rC /HEQam05bdNsfVzb+e0X0CeXfl93oAExfiZNY32+CAPraM4k7KIkBYlV3znChusR sr8zShoQM6ZbputTfmqLqk8QGuy29dm2naNXeXYtV+dyI4XUORlMQweJgn3zDDRy JlSoOMt0S6hhAzzfJYLavj6QEyQzXbMyB4Wasn0UFvoBaY8gAo7UKFoeqwAahHMz UmbjyDD9tjXywl0QGGnX0Vi5rCOTdA1lX3V6cSux4kpcbnMLMKs34Rj5/78M2aKW mySwVIvFRf8aNg== -----END CERTIFICATE-----Generated at Sun Apr 6 11:49:06 2025 by rpki-client