$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: 5uOeYmZKJDRNJhDt7LUv05n1B3DVX8jG3IR5tKIl2gY= Subject key identifier: 65:1C:E6:63:95:B9:6E:25:9A:7F:63:C8:9E:53:90:D7:B0:B8:C2:5D Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 0197B6327CEB7997D4612EFD4E3F89AAC78B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 1627 Signing time: Sat 28 Jun 2025 11:00:51 +0000 Manifest this update: Sat 28 Jun 2025 11:00:51 +0000 Manifest next update: Sun 29 Jun 2025 11:00:51 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: iNQ+1sBWi/p0ZHA6cXfUJ1IjAy2Jzo/SygZ/+54EWIQ=) 2: 0httGqgqnBD-cyBZkV5zP0LpIO4.roa (hash: e5sFUpuEkPspxdtpRMty2JvPNTXvUGFt57BwVt8wTQk=) 3: 20w83vHPyYnLSWr2qqWCmD2gZNY.roa (hash: ClK+X58yEmA5ygXK0mo1ANs6qUTT/V8TWnwZD7Tusy4=) 4: 2s4ghGsMJ4UjziczDpj7_nBo6GE.roa (hash: jn5a6RlzlWn5orrS4JyYzumT++ei7+4zrAsQWhkhOUE=) 5: 5RBinPwOy0Ur02K4skRXrZ57oe4.roa (hash: FohLkPaRCdpVe1POii3jQVhmOCscuDyAYaI/LSwOnms=) 6: BBOySe2ApZYQpT0wPGJ7zV8XzsA.roa (hash: N6DdRHz14Xr18smaWB+L/0EFbg9FmP8IrnnkdfkP5sA=) 7: BjUAlonCB1CjmbTY52apZdHRGFk.roa (hash: vBVzlWqlUuZ7F5qeBjljk7LIKAFRXIaJSFWC4T698rw=) 8: DRLbJL7meHAnOmMNiiVi2VhOOMc.roa (hash: Lp9UgdizeLrJK6Zry0u6HD2WAPxw4E+r1wzuyfdMmtU=) 9: EXfTHtw-3BJt59JkT36dPstORFo.roa (hash: MhW4Yoiges2mvr+KewFgpAREQV0Mu5obgGNxi9eeOQc=) 10: FRvZFyOxFoddRwR8NWy2iDyogY8.roa (hash: bzSWZTj+o0faBM1dsh+8mBoLaK0jcFLNse7M1DVkpUs=) 11: G8jjrx8EZbysXI_Z13e_0NqYZdU.roa (hash: GPSkTNwl/L8vVjia7LOR9ahqlqqIZvGFNcWIGIi/vHw=) 12: H5_UEf6RMp0ZMb_Mv4D8iAcwsyU.roa (hash: uonWTKVU8g+mUAIIxQ5x86Iq7w5qOGhQtxDY89kAJIY=) 13: Ib_gkG0OXaC9YGgBGzmQj28oy6Y.roa (hash: Dfa7w0wU+Mwe8FRxusOe5J5w207sEqOGP3MEUAezXaw=) 14: Jp0UMtlRd8ZwvCOhqfD_ADrBKLI.roa (hash: mR/skrtMXmYrNl0WIwSjaGFdp8tWtvYO7SMbQmVqf6A=) 15: MguR744HGmOoEMdrlIzPUQQNYfs.roa (hash: Ve4h+6FdNbKYu9bYvRE5Dbmxn7BK8VvZ01cl79qxeJc=) 16: PcsvqoFss2sjt8KP5dE_s9b5R94.roa (hash: 2VnZlh9WN/gvQzrunwflGg0cw7Ym2P+YsV38lpVH0Gs=) 17: RySOnwd5yNUvkpOdlWzbq8gD58I.roa (hash: pMm1Q5jN9tu+9MZBtGXjdw1riel86JfdVWVMRs8pgEY=) 18: UNh6P6o5iukKyngJ923OKln6euE.roa (hash: N5ex54TauXC69hfaRmQEjxuyvZMfnOJEFnqZWvxkb8A=) 19: XXSSAkKxHIvFb1XDuVgAK48p7oI.roa (hash: p4mx1wVBI5jfCHEyW7RDH/AavCZwfWlBpFNbLCutJY0=) 20: Y5c3qkFCpv03-ICNcuAXdHgS3cY.roa (hash: XJDCD20D/hEgr09ZL/gnt/32UJp0okrjk8WR5CoxVyQ=) 21: Y6R9BZ4jbo-SeP4MKzTkUzdRmEs.roa (hash: T03e4fff7Y/zXUb0yVVk+lWsYWaY+JCxTDBS+p8Hygw=) 22: _Ja5VSGfVwaP_RssqzUEn4YMRnM.roa (hash: IopLtmpqrddq1TLUa3ph8Vkd8Gg6tUuEa1Mf8B120SY=) 23: dSIvoRbcXmjEhaD-HdyHYcdmt90.roa (hash: JqFQVPXSWhIrd/AlZzo80JSKjqGLV5nybtYrZ/HoQns=) 24: fW0mZX2qVdA0eoUEboZhAE59bUE.roa (hash: stVjqf6xlyz/MOhoo6Rt330zmsp7vd4IC5S2fUEJ5WM=) 25: kqDz7smZzEggwnOtTZ91wrlBE4c.roa (hash: OteTjZY0hrzoBDeoZG9laIbeOhFIt32mklvyy1YBT38=) 26: m9Q0QpkVO1rZKT8wIA-lB6ceYcg.roa (hash: yW9VuP+7IZqfB9uY1adWMtzwRUiSlhz/2UYbCN1BQSU=) 27: oqSgizr5ODUUGjBb8_Wzxokx-xk.roa (hash: Kl53NJDKPjecKCh1ZqXsoFCQIzYfPyjvOORgLlse+gY=) 28: qlt-CjR0Oi0L3lo2PS7A4jbvIUg.roa (hash: iydTkBpS1P6s3+CKe74qws4olK3ajXbhwYqoUw/uhBk=) 29: tdzsaKxsamCWBVwoUkqT8RggY6A.roa (hash: Fv0PNntXjBHiuO1Z367HBdmxJtFfh7CR44dwT354/lw=) 30: u1CnbOWLzLXHMIAGQgwkM6vFUAQ.roa (hash: K3i75EIlXpx8ZbQow3ibFiQPjkMER64km2kkkaJJ48Q=) 31: vFNkivgTExOsjU64HiM4VzsQFiw.roa (hash: DXIqZ5v2rgtSNx+D9s1xP6RBmK/3bmgJ3j5QKRP0qEA=) 32: wMbP2rODQDC-jcOXAyW7ktyAwFs.roa (hash: 9dxgb9cFX2rvzK0yUiEPPHMObwlTuLCycMbvyIulqKU=) 33: yNK_se_8Y1MH-IyQZOfpZj_aArA.roa (hash: Y/8odYpFkGDQCB6ybQitBRTCfwLFaWn7M7svPHhRrhA=) 34: z4dbT2rdI1MPHPzn2a4SSpvkt3E.roa (hash: pftbqIKgzEeVO9sl0LAVO5XHYPxIgJ6YwaN9JqNCTzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 11:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:32:7c:eb:79:97:d4:61:2e:fd:4e:3f:89:aa:c7:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Jun 28 11:00:51 2025 GMT Not After : Jun 29 11:00:51 2025 GMT Subject: CN=651ce66395b96e259a7f63c89e5390d7b0b8c25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ee:11:aa:a0:ae:c5:67:3d:fa:9c:72:9a:e8: 20:50:46:4e:6f:5b:c8:c2:e6:d1:66:9e:97:ff:84: c7:2b:20:56:90:2d:e9:20:16:08:90:90:8e:a8:6e: bd:05:1a:b0:33:7e:9b:06:dd:18:6a:51:13:cd:1b: 8a:fa:6b:52:48:7f:84:fe:f0:ac:64:ce:5c:ae:e3: f1:38:ae:7f:68:db:f3:d0:d5:f1:79:fb:e7:be:20: f0:45:ad:7b:bb:4a:b3:68:17:c9:8f:a8:b7:af:ac: b2:8c:0c:0a:6d:ea:c5:7b:7b:f9:33:61:a2:e6:8d: 4a:27:49:f7:ab:e3:6b:ec:40:e0:d7:3d:b3:ee:57: ce:f5:70:d9:6e:bd:ba:fa:d4:dd:f2:99:88:1d:32: 15:ed:55:c8:ff:84:d3:22:7d:34:3e:3a:67:b7:4a: ca:38:50:00:ac:40:6e:e1:72:ac:d3:6c:cc:76:e2: bb:a9:a1:83:e7:65:9b:b4:bf:5e:c5:c8:fb:69:6d: 5d:34:43:46:b7:48:ea:46:7a:66:b1:11:e2:3a:8f: fc:a5:32:8b:2a:bc:5d:f1:6b:7a:af:a7:70:53:ff: 10:09:e0:f0:19:f1:a2:cf:93:96:a7:be:09:c6:f7: 42:43:ce:74:3a:37:4c:8e:8c:56:01:4e:b5:04:21: fb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:1C:E6:63:95:B9:6E:25:9A:7F:63:C8:9E:53:90:D7:B0:B8:C2:5D X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:2a:61:1c:e8:49:94:65:51:4b:ca:59:ef:c3:09:54:03:a0: 0c:12:0d:a3:b2:e2:a7:16:71:82:99:eb:31:9f:3c:ad:2b:99: fd:56:05:7e:e1:e3:b8:4f:e9:4d:d2:23:68:1a:0b:c2:1d:73: 4a:cb:40:5a:8b:13:21:5b:95:38:b4:10:67:b4:1d:5b:60:04: 1f:d1:15:2e:81:ec:4d:01:31:37:c5:9f:69:9e:ac:f3:2b:ed: 19:92:aa:6a:60:89:7b:89:70:c9:93:44:5e:93:54:5f:f3:20: a2:69:bc:18:3e:31:f6:d6:5d:e8:39:01:59:b9:6f:66:c8:be: 22:c4:29:99:f1:91:ac:77:36:e1:94:ef:6c:80:eb:fb:ce:13: b9:c4:f9:5d:c8:96:92:40:ad:f9:50:b4:76:1f:57:12:49:45: 45:85:d3:24:88:52:05:20:bb:53:f4:ed:6c:4c:e8:8c:da:de: 4e:38:f6:fb:42:8e:36:25:16:95:8b:1a:fc:37:ec:75:a8:51: 69:2e:76:3e:4b:23:ea:8a:77:fc:6d:69:e0:67:58:01:42:f3: 6d:9d:ca:c1:14:7a:a6:6d:99:b4:d3:ea:35:84:32:04:c2:80: d7:f2:43:9f:48:43:d4:b9:ab:55:0e:cc:c0:a1:90:b2:d3:3a: 08:db:13:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2MnzreZfUYS79Tj+JqseLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjUwNjI4MTEwMDUxWhcNMjUwNjI5MTEwMDUxWjAzMTEwLwYDVQQD Eyg2NTFjZTY2Mzk1Yjk2ZTI1OWE3ZjYzYzg5ZTUzOTBkN2IwYjhjMjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve4RqqCuxWc9+pxymuggUEZOb1vI wubRZp6X/4THKyBWkC3pIBYIkJCOqG69BRqwM36bBt0YalETzRuK+mtSSH+E/vCs ZM5cruPxOK5/aNvz0NXxefvnviDwRa17u0qzaBfJj6i3r6yyjAwKberFe3v5M2Gi 5o1KJ0n3q+Nr7EDg1z2z7lfO9XDZbr26+tTd8pmIHTIV7VXI/4TTIn00Pjpnt0rK OFAArEBu4XKs02zMduK7qaGD52WbtL9excj7aW1dNENGt0jqRnpmsRHiOo/8pTKL Krxd8Wt6r6dwU/8QCeDwGfGiz5OWp74JxvdCQ850OjdMjoxWAU61BCH7+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUc5mOVuW4lmn9jyJ5TkNewuMJdMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAASphHOhJ lGVRS8pZ78MJVAOgDBINo7LipxZxgpnrMZ88rSuZ/VYFfuHjuE/pTdIjaBoLwh1z SstAWosTIVuVOLQQZ7QdW2AEH9EVLoHsTQExN8WfaZ6s8yvtGZKqamCJe4lwyZNE XpNUX/Mgomm8GD4x9tZd6DkBWblvZsi+IsQpmfGRrHc24ZTvbIDr+84TucT5XciW kkCt+VC0dh9XEklFRYXTJIhSBSC7U/TtbEzojNreTjj2+0KONiUWlYsa/DfsdahR aS52Pksj6op3/G1p4GdYAULzbZ3KwRR6pm2ZtNPqNYQyBMKA1/JDn0hD1LmrVQ7M wKGQstM6CNsTtA== -----END CERTIFICATE-----Generated at Sat Jun 28 20:27:40 2025 by rpki-client