$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft File: hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft (raw, json) Hash identifier: IW80rWlrDMg6Q+GTN438o3460p1q1SIdNFXYRMxWI2g= Subject key identifier: 2F:E2:C6:1D:95:C8:6F:00:D7:E0:2E:34:C1:FE:30:0E:3D:24:AE:3A Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc Certificate serial: 0196A8B06FCA6C72D4305D10E88ECF8B7C5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft Manifest number: 12EE Signing time: Wed 07 May 2025 03:00:57 +0000 Manifest this update: Wed 07 May 2025 03:00:57 +0000 Manifest next update: Thu 08 May 2025 03:00:57 +0000 Files and hashes: 1: 0dOOZcxouEyBwDParynks7StwHE.roa (hash: JJ6ZudJMCas3SwJxwt6lm5WwMowMP1vWjiYzBqRT97Y=) 2: 0j_F7ObjeWM_-MDv2vnltyDHFUk.roa (hash: OsaLtzwPIW8gqCsltJsusg8e34JBn85Om/z5CrRK5Uo=) 3: 2sVCpnUAKblWh9v7qVEsEKRUfWA.roa (hash: 1CKYprr2EavvDbIEOzey7tbCXji3ClAfurVr7rHadc8=) 4: 7-L8h3vxgPMOucvJUyn6jvtlWq4.roa (hash: JqzKMiGM9qG/KoIssHAuY0XkXfUrBvh/Eg7mCU+N938=) 5: 9oLYcSPHMvCe-Pv2M_rza63XTow.roa (hash: wcB89ybRT1IhIFGZVbatLp94YXi4OhrbT8jvmNnsE+Y=) 6: FlI6inWj2TmnnIGOS7ZVGBf_bD0.roa (hash: 5X+YWS6gSiJ/Tn7alo0GG3dyffx54L0u6yH14DDRlbA=) 7: GaWyzUO0HJeBjasyRqC97NsCSD4.roa (hash: UvlgjWI3E2c5HU/6Dd5CAeuvj7bfQfjld2BSF5GNKKQ=) 8: IVO47FxImh-y3rWgAak5j9Lhqu0.roa (hash: UCZgxxNbeCBV4XvQFqq64x8nscbBvfYrvynDklgIEQw=) 9: JA31DZScZvYIwJfErV7LU6Pm8FI.roa (hash: j2dwdPSin1EaN8bZ47DvZWD73l5sMHPdzBMxjZwMols=) 10: OeMnrV0nVX6DCpX5ruJ0icY3qZM.roa (hash: CYtkRKt0tKCgVnuKUn9N15L60FkF9ZK/0wKUSmI7zGM=) 11: P3PfwPwkcE040d3Qr-D90iwF4_k.roa (hash: T1rptYAIYRS6lWsTlrVwQbPRhxvEwgxKU1Xm6hHDr7M=) 12: SYg89xuEXUG6bMD7Pl2CsVBcmVo.roa (hash: FafX8OoXWchxsyj8C7cAZtH+8tr3bEqU6ajEo9eZfcQ=) 13: V05XtxLuNAQpoO5H9P1IS4dSoX4.roa (hash: LXCIEksdGEPZzBTCWjbFwGM6+GL06zblhdET9a+UUAU=) 14: h6WkXFQCalKSUE8qQsL0s6At9NA.roa (hash: xC7sZws2p6+JMX2/NZkkNUsOt0/rPDjC11vfXSnqVOc=) 15: hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl (hash: yQKiMpIAO5OwmnOjWQdgtRRKpBch7UazjYU+U91s8tM=) 16: ijQaYqsX36Iual-crRkacGaVc58.roa (hash: ccJw28PP5f/TupBMNwlADhguaBvKtjfCXWHuFYXPLzA=) 17: tta7Y8CGam3Bk5ymO6HtDo5JmhU.roa (hash: XDbIU4BmGkvASLJz4BGT9b/lR8c31GenOVU33j6ph6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 23:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a8:b0:6f:ca:6c:72:d4:30:5d:10:e8:8e:cf:8b:7c:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc Validity Not Before: May 7 03:00:57 2025 GMT Not After : May 8 03:00:57 2025 GMT Subject: CN=2fe2c61d95c86f00d7e02e34c1fe300e3d24ae3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6b:76:7a:7e:2b:85:68:b9:21:83:90:26:3c: de:61:a2:cd:7c:a3:bf:44:c7:d2:b9:8d:98:44:1a: d6:2a:99:37:d6:4c:ff:23:0e:a9:67:a0:75:45:b3: f1:13:2e:c8:7c:b1:2e:5d:39:91:bd:a5:24:2e:6f: 66:b3:3d:66:4d:59:03:a2:c1:bc:5d:a7:04:89:1d: b4:df:7d:9d:7a:3c:22:51:08:2c:a1:8d:e9:bb:7d: c5:c4:c0:a4:cd:4e:6f:72:94:eb:88:e7:b6:24:17: 62:12:2e:63:f3:15:c3:84:7d:8e:f1:2e:32:32:f5: 61:00:19:52:b9:02:97:b2:dc:15:2c:10:49:a8:88: 84:3a:e2:54:b3:f3:3b:8c:2f:9e:06:ac:33:7f:ce: 6d:89:68:8a:4d:cd:ff:be:11:0c:2e:22:2f:d7:5d: cb:df:97:6f:ff:d6:82:4a:4c:39:ac:7b:12:7e:18: fc:ee:0f:a6:5a:97:7b:c0:3a:4b:ef:b8:b7:3d:d2: 78:8e:e5:84:8c:aa:7b:26:45:ef:d8:5c:1f:0d:02: 25:8d:7d:ec:7f:ea:7a:8e:39:55:7c:c6:1b:15:f6: d1:ad:44:04:6e:13:b2:76:a1:d7:f4:f5:81:39:24: c3:f4:bc:8e:2d:f9:0b:66:98:b7:28:c6:c3:dc:5a: 3e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E2:C6:1D:95:C8:6F:00:D7:E0:2E:34:C1:FE:30:0E:3D:24:AE:3A X509v3 Authority Key Identifier: keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:ab:76:1e:a9:e8:83:0d:64:3f:e1:be:1e:c3:f2:3d:5d:6a: 88:d0:a4:c8:d0:4c:20:89:8e:ad:94:77:46:d9:b6:44:7e:ec: ce:cc:5f:8e:bd:fd:ab:9d:cd:e5:68:04:04:08:e8:28:9b:df: 51:80:56:fc:7b:dc:e1:51:41:e3:74:b7:d4:40:a6:3e:4d:c5: c7:64:c2:02:41:03:e0:fb:91:6f:af:14:31:61:b1:50:66:69: 92:9c:89:2e:be:ff:95:04:b2:b8:b3:bd:6a:d6:26:6e:71:4b: be:91:be:cf:2c:04:04:db:4b:91:23:8f:06:7c:81:10:9b:58: 40:6d:aa:75:b9:a7:f1:ae:30:a2:6d:f5:0d:96:2b:ae:fc:af: 6d:5a:59:f4:8b:da:91:61:1d:fb:3c:54:44:67:a0:e8:23:82: 84:4a:15:6b:45:17:09:2f:36:a1:6d:31:24:56:c3:7e:9f:39: ec:04:25:16:a5:46:08:e8:31:d7:12:da:8a:10:69:68:d6:e4: e9:64:02:e6:24:fd:b9:1a:59:d4:42:85:dd:f7:31:b0:34:c6: e7:6c:d4:9e:85:aa:2a:e9:78:46:14:a9:bc:3d:88:a7:08:48: c9:da:57:cb:21:b5:db:90:19:c4:4f:02:fe:cf:e7:e1:c3:6b: d3:90:57:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaosG/KbHLUMF0Q6I7Pi3xdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzNlZjQ2MTE2ZmQ5ZDIxYmZiNTMzZTQ0YmRlNTE3ODkw YzI0ZGMwHhcNMjUwNTA3MDMwMDU3WhcNMjUwNTA4MDMwMDU3WjAzMTEwLwYDVQQD EygyZmUyYzYxZDk1Yzg2ZjAwZDdlMDJlMzRjMWZlMzAwZTNkMjRhZTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2t2en4rhWi5IYOQJjzeYaLNfKO/ RMfSuY2YRBrWKpk31kz/Iw6pZ6B1RbPxEy7IfLEuXTmRvaUkLm9msz1mTVkDosG8 XacEiR20332dejwiUQgsoY3pu33FxMCkzU5vcpTriOe2JBdiEi5j8xXDhH2O8S4y MvVhABlSuQKXstwVLBBJqIiEOuJUs/M7jC+eBqwzf85tiWiKTc3/vhEMLiIv113L 35dv/9aCSkw5rHsSfhj87g+mWpd7wDpL77i3PdJ4juWEjKp7JkXv2FwfDQIljX3s f+p6jjlVfMYbFfbRrUQEbhOydqHX9PWBOSTD9LyOLfkLZpi3KMbD3Fo+PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/ixh2VyG8A1+AuNMH+MA49JK46MB8GA1UdIwQY MBaAFIUz70YRb9nSG/tTPkS95ReJDCTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAt NzM5MjNkYWVmMTE0LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAtNzM5MjNkYWVmMTE0 LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZKt2Hqno gw1kP+G+HsPyPV1qiNCkyNBMIImOrZR3Rtm2RH7szsxfjr39q53N5WgEBAjoKJvf UYBW/Hvc4VFB43S31ECmPk3Fx2TCAkED4PuRb68UMWGxUGZpkpyJLr7/lQSyuLO9 atYmbnFLvpG+zywEBNtLkSOPBnyBEJtYQG2qdbmn8a4wom31DZYrrvyvbVpZ9Iva kWEd+zxURGeg6COChEoVa0UXCS82oW0xJFbDfp857AQlFqVGCOgx1xLaihBpaNbk 6WQC5iT9uRpZ1EKF3fcxsDTG52zUnoWqKul4RhSpvD2IpwhIydpXyyG125AZxE8C /s/n4cNr05BXGw== -----END CERTIFICATE-----Generated at Wed May 7 06:24:54 2025 by rpki-client