$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: IaBmuizbr7oeyfcfYadRlqoFS9qWun816DGEp5QogmY= Subject key identifier: 18:52:10:DF:3A:7A:9E:D6:EE:27:49:30:AC:9B:82:BD:32:15:D0:65 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 0196C83B10BC71C11EE6E523611F8B25088D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 0E5B Signing time: Tue 13 May 2025 06:00:36 +0000 Manifest this update: Tue 13 May 2025 06:00:36 +0000 Manifest next update: Wed 14 May 2025 06:00:36 +0000 Files and hashes: 1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=) 2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=) 3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: 359/oddKk3rBqHkhWvwZ/wLKCd1YaN2wnq/lFphx/z0=) 4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=) 5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=) 6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=) 7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=) 8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=) 9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=) 10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=) 11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=) 12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=) 13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=) 14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=) 15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=) 16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=) 17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=) 18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=) 19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 May 2025 06:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c8:3b:10:bc:71:c1:1e:e6:e5:23:61:1f:8b:25:08:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: May 13 06:00:36 2025 GMT Not After : May 14 06:00:36 2025 GMT Subject: CN=185210df3a7a9ed6ee274930ac9b82bd3215d065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:02:0e:95:6d:c5:c1:62:59:f2:19:fd:88:4d: 14:f2:15:b3:6e:0f:bc:ca:dc:bc:2d:97:6b:4c:aa: e7:1b:f6:6d:f9:78:87:0e:16:9b:0e:69:bc:04:c1: 29:f0:d9:96:45:94:20:3f:f7:68:53:46:ba:55:ae: 12:9e:60:fd:1d:e2:5d:a0:f5:35:89:fd:f5:b5:08: 3b:a8:e4:66:d2:48:39:d8:cd:cf:1f:3b:6c:6f:02: 86:51:48:85:4f:8d:21:6d:b3:0c:f6:00:42:56:53: 2e:d1:69:c5:b1:ea:f4:e5:4c:5e:f7:57:59:3e:87: 3f:3d:2f:b8:55:48:e0:70:41:3b:c0:27:48:fd:d2: dc:cc:a7:61:d1:35:bb:30:fe:f9:f7:b8:7e:b9:ec: a3:63:20:90:34:34:d3:b7:c5:8e:c5:f0:ea:db:c5: 0b:bc:5e:0e:f3:61:25:9e:9a:a0:ec:1d:51:86:60: 9a:ef:ed:72:d8:88:0a:66:f1:43:d8:cb:89:e8:82: b1:41:4a:b0:0a:ce:0e:1f:50:0c:0f:d3:42:c2:c6: f0:fd:a9:dd:7e:64:f2:56:19:ce:40:ca:a1:d8:55: b6:0e:e7:06:49:b0:9a:44:da:bb:ac:3b:db:e9:f6: b6:d2:15:4e:51:4f:b8:33:44:04:a3:60:1f:fc:d6: 45:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:52:10:DF:3A:7A:9E:D6:EE:27:49:30:AC:9B:82:BD:32:15:D0:65 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:ea:79:a1:e2:25:0f:ee:9d:af:a6:05:57:eb:77:37:61:c2: 4b:36:09:bd:eb:70:2e:3f:68:87:5e:c7:f2:b8:31:12:97:52: 76:72:cd:c3:17:3c:46:21:6e:99:e1:55:04:0c:27:d9:ab:1c: 84:6f:30:77:4a:84:92:98:74:e2:3c:3d:96:bc:a4:19:23:65: 99:a9:89:08:b1:2c:e7:6b:d4:5e:e8:49:d1:e5:64:90:bd:0a: 93:25:8a:82:84:89:1c:ba:22:96:13:6f:e7:1c:cd:20:fd:cb: b2:8c:7d:cf:6e:0d:1b:62:6c:93:91:1c:1d:74:a3:42:90:a6: 59:b9:66:e0:80:f6:93:42:e6:45:d5:2b:f2:91:7f:8a:70:08: 86:35:04:10:84:78:00:20:a5:4f:d0:39:ab:f5:32:af:f4:ff: 48:7a:ea:96:8d:96:dd:28:3f:51:66:30:b4:12:2f:9e:0e:7c: 1c:16:7a:bf:c3:d7:b7:ee:f0:37:fd:f6:ff:c8:d7:f2:b6:b5: ec:91:7e:34:27:6e:0e:d6:9b:82:10:bd:29:49:80:ed:65:bd: c5:aa:3f:22:d4:ea:d9:63:6a:cf:22:95:f3:3b:69:02:60:ed: 27:13:27:e7:ad:9f:17:db:39:72:d7:e8:e7:d1:96:a7:af:26: fd:6b:5f:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbIOxC8ccEe5uUjYR+LJQiNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjUwNTEzMDYwMDM2WhcNMjUwNTE0MDYwMDM2WjAzMTEwLwYDVQQD EygxODUyMTBkZjNhN2E5ZWQ2ZWUyNzQ5MzBhYzliODJiZDMyMTVkMDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQIOlW3FwWJZ8hn9iE0U8hWzbg+8 yty8LZdrTKrnG/Zt+XiHDhabDmm8BMEp8NmWRZQgP/doU0a6Va4SnmD9HeJdoPU1 if31tQg7qORm0kg52M3PHztsbwKGUUiFT40hbbMM9gBCVlMu0WnFser05Uxe91dZ Poc/PS+4VUjgcEE7wCdI/dLczKdh0TW7MP7597h+ueyjYyCQNDTTt8WOxfDq28UL vF4O82Elnpqg7B1RhmCa7+1y2IgKZvFD2MuJ6IKxQUqwCs4OH1AMD9NCwsbw/and fmTyVhnOQMqh2FW2DucGSbCaRNq7rDvb6fa20hVOUU+4M0QEo2Af/NZFAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhSEN86ep7W7idJMKybgr0yFdBlMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANup5oeIl D+6dr6YFV+t3N2HCSzYJvetwLj9oh17H8rgxEpdSdnLNwxc8RiFumeFVBAwn2asc hG8wd0qEkph04jw9lrykGSNlmamJCLEs52vUXuhJ0eVkkL0KkyWKgoSJHLoilhNv 5xzNIP3Lsox9z24NG2Jsk5EcHXSjQpCmWblm4ID2k0LmRdUr8pF/inAIhjUEEIR4 ACClT9A5q/Uyr/T/SHrqlo2W3Sg/UWYwtBIvng58HBZ6v8PXt+7wN/32/8jX8ra1 7JF+NCduDtabghC9KUmA7WW9xao/ItTq2WNqzyKV8ztpAmDtJxMn562fF9s5ctfo 59GWp68m/Wtfxw== -----END CERTIFICATE-----Generated at Tue May 13 15:03:49 2025 by rpki-client