$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft File: jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft (raw, json) Hash identifier: mHvV4bnpY8/DDSCT1zy/gFmtFqsZukeeClzwHIeN9to= Subject key identifier: EB:69:74:02:44:0C:9C:2A:BB:F0:AA:6C:05:7F:F4:82:64:62:1E:4F Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24 Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624 Certificate serial: 0196BCDBE01A04B6840ED1854F28FE85168B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft Manifest number: 0E1A Signing time: Sun 11 May 2025 01:00:48 +0000 Manifest this update: Sun 11 May 2025 01:00:48 +0000 Manifest next update: Mon 12 May 2025 01:00:48 +0000 Files and hashes: 1: 0JcOAjVYzD7ATTRTY6zM_FW7ibk.roa (hash: ae6zh695aCdxOBAb92vW9Mqs/ewqcDH7wayEClXo5lU=) 2: 1-Y2dKMtSX_HHImXALZ9Ywq-mBt0.roa (hash: 7qyTbmtwccyXrpltxd1wqJPnd+/MFLmBgiiCsu8AQkU=) 3: 2QTRX3rMARDGeCqwmM0inJSU1I8.roa (hash: JqKkV8sJ2151XjqigefJVjz+CjQivqO6Q6p2fwfafME=) 4: 7UYDYjcK9QG1kAzAVdRISMcK0fw.roa (hash: sob5MfrYBgiKx+YfOtoKRqwcLnr1PeTeNg0kII/WuRY=) 5: 9fRtydBjgnhbFaykZOo5uuxjF38.roa (hash: RH3Om+bNuUzjZrbi9dURSTYAb514YDgcJdJj7pg2lZE=) 6: EY7ogwruZGSD63obEpUnqn0nkuo.roa (hash: eHBlu7ijObgowuU+joBjfNNXkGVZmY2eT3u/EnffphU=) 7: HJWy01pqJrtg2Vo5SudbPdEEkd4.roa (hash: Vr6k9Sg54f+U5YuclxncYArpuGy+CEnoAy/c+X99oH4=) 8: IYKB-HSEiCq4O7HvrSnxClTqE4I.roa (hash: HbfqesX7Z3CjfGeH5MdNYm5FcZQ54JXRPRk/orWo/qA=) 9: PT8j9eHtg5ttD87ZTwg2GzdumEg.roa (hash: 6rQ85ph5sdL+xNggsMfKZpzXGn+sK3MhYgm3m97nS/I=) 10: ZlUjZQcl9nR0SUVxsgzMhtk30HU.roa (hash: RueFoN4i6RiouAbfwEgZPqUPq4WVTXhPv6TjG8c7n5M=) 11: _K57y8dAfTW_4za5nQ1yw_fKnZI.roa (hash: Rymw72FXGoLgMvCj/WyEf1Es/Ms+t2XEE94XwkN2BgM=) 12: aAifBze_JXbbUHJNy418NFONnUo.roa (hash: rLLARXHfwNDLekNJ80A4f1i0LwTr3pN9Pr1HKxuL2t0=) 13: fyVTS8KnNLJLAvMPXFhguHqf8wg.roa (hash: rK8pnbIqXHxeMFgFBrhTIo/gwpafsDBMMFa/tGIcB3c=) 14: g6TYrOiqfeY_zc4wZ63S9GaTHtA.roa (hash: McFJsvyZf/CJB69UHaeJLyOzFI33CZnDxz9asvMb9+k=) 15: hiMcEIjHUWN5FsB7VlVyAr5izXE.roa (hash: 6yVp6mlnWSD0tIxqmD2GQ7svu30uQXkMfzEBlI3SWXo=) 16: jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl (hash: Rn/3icAOnMHAOQvJGRUm7yAj7RBl6S0Qt6PkNhpxwd4=) 17: mXX0pAjU5w8oM8Kw23jhrgx4Wvk.roa (hash: sc8dapOFwgxs0Xrg6eWIDXxwfzY184TsGMxeq92yyGI=) 18: o0ZwaYj89qD05J13n0pZ23X4IIA.roa (hash: Y8iKBwsONnOxQpFezT8Qy8hc9RHNcwVnuvC+XOuLtNY=) 19: ySGM40xeAZyu32ERIMnkJoio4hw.roa (hash: w5mMTd2fQSF1PurNOaDTdU1aGhD+Vitko+NZO/EWYYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 23:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bc:db:e0:1a:04:b6:84:0e:d1:85:4f:28:fe:85:16:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624 Validity Not Before: May 11 01:00:48 2025 GMT Not After : May 12 01:00:48 2025 GMT Subject: CN=eb697402440c9c2abbf0aa6c057ff48264621e4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c1:94:25:08:ee:a3:4b:52:fd:d3:64:a0:a0: 84:9b:fc:b1:ad:c8:b5:20:70:aa:f8:1d:c8:e5:2e: 15:26:bf:b2:39:74:55:16:7f:75:8e:21:48:83:81: 07:f1:72:f0:81:80:3a:95:0a:20:5c:61:37:52:c2: d2:0d:25:83:50:4d:ea:65:37:5a:4e:f9:c1:20:24: 66:6e:0d:0f:10:a6:cc:0e:ea:58:b8:15:45:21:43: 11:d7:98:c7:ea:de:45:1c:8c:1c:61:63:b0:5d:d4: d6:f3:57:26:64:25:36:d2:f1:a0:ae:ce:31:fa:02: 95:c9:96:bc:ef:92:ed:ad:ef:be:a5:45:ba:cb:3d: 50:f6:74:b5:e0:67:ee:51:f4:91:93:c3:12:92:9f: f6:36:9a:d4:72:f7:7b:74:36:8e:4f:b4:72:86:df: ba:60:0e:77:0b:1e:85:cd:3f:e6:4d:91:ac:31:40: 33:a5:22:03:bc:51:eb:fc:a2:9e:44:3a:02:a4:78: ae:6d:b4:c8:3d:f3:81:c1:84:ce:4e:cd:0a:de:98: 8c:c9:e2:0a:d2:b2:0b:c8:be:e1:8a:70:10:8a:a8: fd:fa:68:46:0a:2d:64:74:29:25:f5:30:42:8a:3c: d4:9f:8b:7c:19:54:10:79:e7:8b:38:6c:f7:ef:dc: 8d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:69:74:02:44:0C:9C:2A:BB:F0:AA:6C:05:7F:F4:82:64:62:1E:4F X509v3 Authority Key Identifier: keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:4e:10:1b:4c:9d:94:51:6f:54:59:54:75:bc:39:9d:6e:cf: 75:33:2c:13:c0:3b:bb:7c:32:42:3b:f9:70:6e:72:d0:21:9b: c0:fa:c2:a7:4a:fb:df:f5:1f:39:25:47:62:c0:e3:e0:ec:ce: b9:c9:7f:6f:5d:50:24:e7:c3:cc:26:60:49:fb:b2:b3:92:5d: af:f1:ff:dd:48:a0:e4:8b:be:e0:dc:a2:08:c4:cf:c5:78:19: 5e:19:b5:e4:9c:c0:5f:bd:0c:cb:f7:3e:3a:ad:70:ca:56:af: 90:2e:78:95:0d:75:9e:93:12:b1:2a:89:55:c2:c9:ae:d5:19: 68:89:6e:11:04:23:ca:f8:31:e9:a7:e5:71:78:31:72:c0:c8: 69:36:f0:6e:47:ab:ad:64:ac:ea:5f:c0:4a:73:52:d1:60:64: 1c:79:7b:37:8b:d5:a7:94:db:f8:4a:db:6d:5e:22:ee:43:d6: 86:b2:f3:03:c3:15:61:11:13:89:e8:5b:0e:52:b3:5b:98:80: ec:e7:75:3e:ef:a6:5e:b8:b9:06:78:3d:ef:89:20:f8:b2:be: 6c:a4:ba:76:e6:6f:81:8c:5e:ba:5f:d7:ce:a9:84:1a:5f:b1: 24:82:56:88:ca:ab:e3:f9:85:c4:65:07:27:ed:5f:82:a6:ac: 04:a5:04:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa82+AaBLaEDtGFTyj+hRaLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNjI2YzkwOWViNDk1MTE1NGJjZWU4MjIxZTQzOTUxYjQy NTc2MjQwHhcNMjUwNTExMDEwMDQ4WhcNMjUwNTEyMDEwMDQ4WjAzMTEwLwYDVQQD EyhlYjY5NzQwMjQ0MGM5YzJhYmJmMGFhNmMwNTdmZjQ4MjY0NjIxZTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8GUJQjuo0tS/dNkoKCEm/yxrci1 IHCq+B3I5S4VJr+yOXRVFn91jiFIg4EH8XLwgYA6lQogXGE3UsLSDSWDUE3qZTda TvnBICRmbg0PEKbMDupYuBVFIUMR15jH6t5FHIwcYWOwXdTW81cmZCU20vGgrs4x +gKVyZa875Ltre++pUW6yz1Q9nS14GfuUfSRk8MSkp/2NprUcvd7dDaOT7Ryht+6 YA53Cx6FzT/mTZGsMUAzpSIDvFHr/KKeRDoCpHiubbTIPfOBwYTOTs0K3piMyeIK 0rILyL7hinAQiqj9+mhGCi1kdCkl9TBCijzUn4t8GVQQeeeLOGz379yNXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtpdAJEDJwqu/CqbAV/9IJkYh5PMB8GA1UdIwQY MBaAFI5ibJCetJURVLzugiHkOVG0JXYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAt ZTk3ZDFkMDIyMGFmLzEvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAtZTk3ZDFkMDIyMGFm LzEvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnE4QG0yd lFFvVFlUdbw5nW7PdTMsE8A7u3wyQjv5cG5y0CGbwPrCp0r73/UfOSVHYsDj4OzO ucl/b11QJOfDzCZgSfuys5Jdr/H/3Uig5Iu+4NyiCMTPxXgZXhm15JzAX70My/c+ Oq1wylavkC54lQ11npMSsSqJVcLJrtUZaIluEQQjyvgx6aflcXgxcsDIaTbwbker rWSs6l/ASnNS0WBkHHl7N4vVp5Tb+ErbbV4i7kPWhrLzA8MVYRETiehbDlKzW5iA 7Od1Pu+mXri5Bng974kg+LK+bKS6duZvgYxeul/XzqmEGl+xJIJWiMqr4/mFxGUH J+1fgqasBKUEOg== -----END CERTIFICATE-----Generated at Sun May 11 09:23:11 2025 by rpki-client