$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft File: _TfMjxazxsvTNGqj7WF3Hz6DrJc.mft (raw, json) Hash identifier: 1zYIT1M1YYRyq8D8dbGU1/YWR6PWZ/Low/UMcxwoqIQ= Subject key identifier: 23:7F:D1:0A:AA:7E:42:43:7B:6D:81:C3:E9:F7:28:44:08:04:19:69 Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Certificate serial: 019607C1F9854FA26C1B18C4866B2AE34692 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft Manifest number: 152C Signing time: Sat 05 Apr 2025 21:01:14 +0000 Manifest this update: Sat 05 Apr 2025 21:01:14 +0000 Manifest next update: Sun 06 Apr 2025 21:01:14 +0000 Files and hashes: 1: 0HACyBUxgNOKSEcXcfPHI7LfmIg.roa (hash: wqTJepcUODfu+UsDaT3UCXuLJcUfFBmEBfdq4N3Rg18=) 2: 0SGQgnDHvljd8WswPS3Zor6FDL4.roa (hash: 6cEGIRuHIzEG7/ilcX3ol3tjHMExu8vRWtvJG3iihbQ=) 3: 70Zrvtr4nuS-PVwqAB7GFzvSCps.roa (hash: /iJVRb+B9I3ooDnoMdPG5FHTA+NvihSaLYbf26Rqffs=) 4: 8YFjhJllAvnuj7iLErGij7HrSXA.roa (hash: Jhl/M/KE8hoNx5Qk80x4cpNTjAEwV+xL9n1btN845EY=) 5: 8rC5KACpXHxTX33_V-TJVV6e2kw.roa (hash: MGhlHHTS2Sm1Rr0tkLszVM0ctGniCsswsBgGpFWkkSY=) 6: CkYxOCFcXglZibNQBz57XM7xS7k.roa (hash: tPE6/6y5+L8gtSA/0lIV1hRfNlGi7fzBLSET7NYUXhQ=) 7: L2ou3KYC7aOW9h4MkxvmRdF9-XM.roa (hash: HdnRHq9xsHsffUN6vf8PfjK/qp0rtSAt5eAQOAgASLA=) 8: Qx6qMFrufEPZv8mWu9XgjLsLMB8.roa (hash: P/r3/JxO1CdcEUxJoGOxAQuq95icEB2m2qPK3qHqs10=) 9: TAdP0yKv9NpfjSbhNts0juEkm1U.roa (hash: dvn2DfwTU0n63QcUIMIBNntGEWr2G1UXma7Nhu8Iurs=) 10: WoZoEuE3OARNKqVJ9taXo2-Zt8M.roa (hash: Sn/ecsmLImTPn1yvBagjjq/XB8omW7tpmekWgI2yuFs=) 11: XdBKdwv6cTf-QnKldOeZvGt4D_Y.roa (hash: TxqV86SQTi0t4BbX6SVLNGYD/xhHt70JrJfSx9PYDmA=) 12: _TfMjxazxsvTNGqj7WF3Hz6DrJc.crl (hash: CkKY74HNL6p0JdmjKEkLR9eSRZWG2OrXvOZ1E3UpS7A=) 13: bboBBp1tKqS0RC4vsgwoBCmEwqY.roa (hash: 74uXCligXDCEvZU13I/aaPCJJzSMTM22JuT1PuhmBlQ=) 14: cTcEU6BZVDHzKsGmYrYFuehVnmw.roa (hash: Wt8W9AEoHsxpxFYj5Y9GGKvIgV+LkMQs3tuB0PH0H4Q=) 15: peQXZljVycjXahMLHOgebWKzO6c.roa (hash: 6nDgFHnTrpxmQJyrmsK88oc050AwIyK1nEAS/RY/l94=) 16: xCt-3I4HSr25MhC8BMd2thevgVU.roa (hash: sZUNm0dz+rTstayb8zMPvmRuDI0MPNSTCMqD12A4Oww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 21:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:07:c1:f9:85:4f:a2:6c:1b:18:c4:86:6b:2a:e3:46:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Validity Not Before: Apr 5 21:01:14 2025 GMT Not After : Apr 6 21:01:14 2025 GMT Subject: CN=237fd10aaa7e42437b6d81c3e9f7284408041969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0c:55:65:b9:f9:1d:0d:1f:22:61:73:66:51: 12:bf:84:63:78:a7:74:99:d5:45:9c:55:45:31:bb: f2:e9:04:1f:c3:83:7f:dc:22:0b:b1:10:24:dc:ff: b2:01:ac:34:e1:5b:5a:da:ed:fb:ba:01:41:42:45: 96:96:c4:18:2a:ed:06:06:e6:f8:01:cb:f1:02:4d: f0:ba:fa:a3:2a:33:69:b7:2e:36:c6:ae:26:70:91: a9:81:8c:d5:18:03:a6:ef:b4:77:e6:36:30:b2:c8: 10:b9:9c:a0:89:59:eb:cd:6e:1a:2f:b9:43:06:a7: a1:47:0d:ae:c3:e6:6c:42:07:49:8a:04:29:1f:4e: 0f:77:33:fe:1f:22:4e:66:e6:2a:31:9b:2e:6c:5b: 4a:f4:b0:b3:75:6a:8b:63:f5:28:6f:e5:67:1e:9e: b1:dd:f4:5d:0d:b0:8c:68:cf:ba:69:c4:7d:9e:a5: d0:f6:c7:d0:07:81:c7:da:98:11:2c:ea:ae:dc:d1: ce:37:8f:3e:01:56:e4:09:1a:ea:e9:ef:14:46:a0: af:c0:15:b5:e8:ab:0d:4a:4b:f7:7f:96:4b:bd:79: 2f:e2:42:6d:c0:2c:47:9a:b7:5c:2b:c5:f5:7d:ac: 1e:7a:56:6f:ae:d9:07:04:fe:5e:a0:42:c0:08:e1: 47:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7F:D1:0A:AA:7E:42:43:7B:6D:81:C3:E9:F7:28:44:08:04:19:69 X509v3 Authority Key Identifier: keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:0e:af:b1:ae:95:e8:bb:9f:c7:e9:88:5c:27:a1:5c:56:fe: 66:b5:d9:7e:b6:67:06:6a:01:09:ed:07:0a:f1:36:be:8e:d1: 5e:17:a3:41:70:39:e8:e6:a1:53:6b:76:29:df:97:80:b4:33: 02:d4:07:53:d4:c4:8c:e9:68:91:82:ee:b5:4a:72:bc:e8:f5: 45:11:31:15:12:06:80:d6:69:35:32:3a:e1:d6:fe:0e:f2:2e: 38:ca:92:31:73:45:f0:25:aa:8c:f1:1c:32:b8:5f:3a:d3:bc: 54:91:ea:ab:ef:73:23:e4:fc:82:79:1e:f8:63:c2:e7:86:bd: 90:df:58:de:79:46:9c:b8:ae:a1:93:48:eb:3a:fd:9a:e9:23: 81:ac:bd:20:c3:32:eb:23:20:59:d0:8c:ef:1d:6b:d4:44:d9: 14:03:b9:75:fd:a2:be:36:99:6a:0e:16:59:a6:10:92:0f:a8: 93:6a:9c:eb:c7:8a:f6:6e:64:55:d6:75:7b:88:54:d2:2b:a7: a4:fc:91:6a:3c:4a:64:d8:09:64:b5:60:22:78:67:69:35:cc: 3e:53:e6:47:0d:fe:49:9d:2e:1d:65:22:90:47:f9:0a:e4:42: 66:4b:1b:0e:2b:23:89:6b:65:30:ff:f6:e7:a3:2d:cf:1b:22: 8c:f6:eb:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYHwfmFT6JsGxjEhmsq40aSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4 M2FjOTcwHhcNMjUwNDA1MjEwMTE0WhcNMjUwNDA2MjEwMTE0WjAzMTEwLwYDVQQD EygyMzdmZDEwYWFhN2U0MjQzN2I2ZDgxYzNlOWY3Mjg0NDA4MDQxOTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwxVZbn5HQ0fImFzZlESv4RjeKd0 mdVFnFVFMbvy6QQfw4N/3CILsRAk3P+yAaw04Vta2u37ugFBQkWWlsQYKu0GBub4 AcvxAk3wuvqjKjNpty42xq4mcJGpgYzVGAOm77R35jYwssgQuZygiVnrzW4aL7lD BqehRw2uw+ZsQgdJigQpH04PdzP+HyJOZuYqMZsubFtK9LCzdWqLY/Uob+VnHp6x 3fRdDbCMaM+6acR9nqXQ9sfQB4HH2pgRLOqu3NHON48+AVbkCRrq6e8URqCvwBW1 6KsNSkv3f5ZLvXkv4kJtwCxHmrdcK8X1faweelZvrtkHBP5eoELACOFHpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCN/0QqqfkJDe22Bw+n3KEQIBBlpMB8GA1UdIwQY MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt N2UwNWFiNDFiNmU0LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0 LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2g6vsa6V 6Lufx+mIXCehXFb+ZrXZfrZnBmoBCe0HCvE2vo7RXhejQXA56OahU2t2Kd+XgLQz AtQHU9TEjOlokYLutUpyvOj1RRExFRIGgNZpNTI64db+DvIuOMqSMXNF8CWqjPEc MrhfOtO8VJHqq+9zI+T8gnke+GPC54a9kN9Y3nlGnLiuoZNI6zr9mukjgay9IMMy 6yMgWdCM7x1r1ETZFAO5df2ivjaZag4WWaYQkg+ok2qc68eK9m5kVdZ1e4hU0iun pPyRajxKZNgJZLVgInhnaTXMPlPmRw3+SZ0uHWUikEf5CuRCZksbDisjiWtlMP/2 56MtzxsijPbrcA== -----END CERTIFICATE-----Generated at Sun Apr 6 03:24:43 2025 by rpki-client