$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: QxqRko/VzyxPLekpRE8k2Fsw7xQT/kL4gK0xPf5lUB4= Subject key identifier: 9F:38:90:D3:A4:08:EB:90:8F:DA:22:36:BF:A6:8E:3C:2A:ED:33:09 Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 0196B2588B98C622D655FBD8157FDD99111A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 1587 Signing time: Fri 09 May 2025 00:01:09 +0000 Manifest this update: Fri 09 May 2025 00:01:09 +0000 Manifest next update: Sat 10 May 2025 00:01:09 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: Py8itNBAzErJySI6fDl9h1IaOov3QnUjMaDoIIVAIY8=) 2: 0httGqgqnBD-cyBZkV5zP0LpIO4.roa (hash: e5sFUpuEkPspxdtpRMty2JvPNTXvUGFt57BwVt8wTQk=) 3: 20w83vHPyYnLSWr2qqWCmD2gZNY.roa (hash: ClK+X58yEmA5ygXK0mo1ANs6qUTT/V8TWnwZD7Tusy4=) 4: 2s4ghGsMJ4UjziczDpj7_nBo6GE.roa (hash: jn5a6RlzlWn5orrS4JyYzumT++ei7+4zrAsQWhkhOUE=) 5: BBOySe2ApZYQpT0wPGJ7zV8XzsA.roa (hash: N6DdRHz14Xr18smaWB+L/0EFbg9FmP8IrnnkdfkP5sA=) 6: BjUAlonCB1CjmbTY52apZdHRGFk.roa (hash: vBVzlWqlUuZ7F5qeBjljk7LIKAFRXIaJSFWC4T698rw=) 7: DRLbJL7meHAnOmMNiiVi2VhOOMc.roa (hash: Lp9UgdizeLrJK6Zry0u6HD2WAPxw4E+r1wzuyfdMmtU=) 8: EXfTHtw-3BJt59JkT36dPstORFo.roa (hash: MhW4Yoiges2mvr+KewFgpAREQV0Mu5obgGNxi9eeOQc=) 9: G8jjrx8EZbysXI_Z13e_0NqYZdU.roa (hash: GPSkTNwl/L8vVjia7LOR9ahqlqqIZvGFNcWIGIi/vHw=) 10: Ib_gkG0OXaC9YGgBGzmQj28oy6Y.roa (hash: Dfa7w0wU+Mwe8FRxusOe5J5w207sEqOGP3MEUAezXaw=) 11: Jp0UMtlRd8ZwvCOhqfD_ADrBKLI.roa (hash: mR/skrtMXmYrNl0WIwSjaGFdp8tWtvYO7SMbQmVqf6A=) 12: KMU9gp2Pze6tK6RqnG6WkdxMvhI.roa (hash: s7jbrR/tYQZH56SCp6DZfaO9EeWTAe129IHD4mNW6qQ=) 13: Ldz2Fcxy2lIR0D-Lc9uIVwn1sVg.roa (hash: 7Jrxd3qwLriiBdyBMLT8U/Q6YrwgSz/r4ZzkDOjpxzQ=) 14: MguR744HGmOoEMdrlIzPUQQNYfs.roa (hash: Ve4h+6FdNbKYu9bYvRE5Dbmxn7BK8VvZ01cl79qxeJc=) 15: OJRKFrAGazOzJ40gSGoefwXYAYk.roa (hash: PYjRffHLN9ZeR3WG+z3kihL+ssNvEEg9dtGsRN0k3fI=) 16: PcsvqoFss2sjt8KP5dE_s9b5R94.roa (hash: 2VnZlh9WN/gvQzrunwflGg0cw7Ym2P+YsV38lpVH0Gs=) 17: RySOnwd5yNUvkpOdlWzbq8gD58I.roa (hash: pMm1Q5jN9tu+9MZBtGXjdw1riel86JfdVWVMRs8pgEY=) 18: UNh6P6o5iukKyngJ923OKln6euE.roa (hash: N5ex54TauXC69hfaRmQEjxuyvZMfnOJEFnqZWvxkb8A=) 19: XXSSAkKxHIvFb1XDuVgAK48p7oI.roa (hash: p4mx1wVBI5jfCHEyW7RDH/AavCZwfWlBpFNbLCutJY0=) 20: Y5c3qkFCpv03-ICNcuAXdHgS3cY.roa (hash: XJDCD20D/hEgr09ZL/gnt/32UJp0okrjk8WR5CoxVyQ=) 21: Y6R9BZ4jbo-SeP4MKzTkUzdRmEs.roa (hash: T03e4fff7Y/zXUb0yVVk+lWsYWaY+JCxTDBS+p8Hygw=) 22: _Ja5VSGfVwaP_RssqzUEn4YMRnM.roa (hash: IopLtmpqrddq1TLUa3ph8Vkd8Gg6tUuEa1Mf8B120SY=) 23: dSIvoRbcXmjEhaD-HdyHYcdmt90.roa (hash: JqFQVPXSWhIrd/AlZzo80JSKjqGLV5nybtYrZ/HoQns=) 24: fW0mZX2qVdA0eoUEboZhAE59bUE.roa (hash: stVjqf6xlyz/MOhoo6Rt330zmsp7vd4IC5S2fUEJ5WM=) 25: kqDz7smZzEggwnOtTZ91wrlBE4c.roa (hash: OteTjZY0hrzoBDeoZG9laIbeOhFIt32mklvyy1YBT38=) 26: m9Q0QpkVO1rZKT8wIA-lB6ceYcg.roa (hash: yW9VuP+7IZqfB9uY1adWMtzwRUiSlhz/2UYbCN1BQSU=) 27: oqSgizr5ODUUGjBb8_Wzxokx-xk.roa (hash: Kl53NJDKPjecKCh1ZqXsoFCQIzYfPyjvOORgLlse+gY=) 28: ps4Flj1BkuW7sLiIgaxaOcmRga0.roa (hash: z/miJktON8vN7qBgG9XGiJDAvY3R13S1nLYmw94yLfM=) 29: qlt-CjR0Oi0L3lo2PS7A4jbvIUg.roa (hash: iydTkBpS1P6s3+CKe74qws4olK3ajXbhwYqoUw/uhBk=) 30: tdzsaKxsamCWBVwoUkqT8RggY6A.roa (hash: Fv0PNntXjBHiuO1Z367HBdmxJtFfh7CR44dwT354/lw=) 31: vFNkivgTExOsjU64HiM4VzsQFiw.roa (hash: DXIqZ5v2rgtSNx+D9s1xP6RBmK/3bmgJ3j5QKRP0qEA=) 32: wMbP2rODQDC-jcOXAyW7ktyAwFs.roa (hash: 9dxgb9cFX2rvzK0yUiEPPHMObwlTuLCycMbvyIulqKU=) 33: yNK_se_8Y1MH-IyQZOfpZj_aArA.roa (hash: Y/8odYpFkGDQCB6ybQitBRTCfwLFaWn7M7svPHhRrhA=) 34: z4dbT2rdI1MPHPzn2a4SSpvkt3E.roa (hash: pftbqIKgzEeVO9sl0LAVO5XHYPxIgJ6YwaN9JqNCTzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 16:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b2:58:8b:98:c6:22:d6:55:fb:d8:15:7f:dd:99:11:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: May 9 00:01:09 2025 GMT Not After : May 10 00:01:09 2025 GMT Subject: CN=9f3890d3a408eb908fda2236bfa68e3c2aed3309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:26:ba:be:f3:2a:c9:e7:66:62:69:4d:58:72: 37:12:0c:92:60:ba:59:00:b5:4c:2f:a8:c5:2b:cb: 4a:4d:6c:6b:9f:6a:08:d5:f8:62:f2:d9:75:c2:d5: 12:4e:14:53:57:f6:df:a7:af:88:12:7e:8c:c3:6d: 63:91:e4:01:68:16:3d:bb:d1:ae:e3:d1:6f:e4:0a: c4:97:5d:1b:1d:f4:74:a7:6f:1e:03:ad:00:42:0b: 39:7e:d5:31:93:02:8c:30:7d:b6:b8:8b:34:31:de: ac:94:c4:60:d4:8b:40:ab:56:23:38:fb:3b:90:11: e1:57:ed:33:f3:b3:c8:ec:b6:0a:7f:19:d4:a7:70: 69:5e:8c:ff:22:52:7f:80:51:11:01:c2:97:01:04: fa:8c:b6:d7:52:ac:9f:fc:14:f4:75:b8:eb:52:1e: 06:47:5c:76:e3:10:f0:65:21:a1:f2:ea:9e:f2:59: 65:a6:46:b9:c4:49:8a:05:e0:76:07:1d:48:0a:85: 28:f9:b9:22:f0:57:1b:87:bb:b1:d7:31:b2:fb:d7: c2:4a:c1:9d:21:19:28:eb:49:d9:0a:83:df:21:30: 0c:15:77:2e:be:fe:92:a6:49:6f:99:66:5f:67:13: 9c:c7:90:d5:c6:c2:b0:46:90:ac:6f:7c:02:f2:1a: 34:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:38:90:D3:A4:08:EB:90:8F:DA:22:36:BF:A6:8E:3C:2A:ED:33:09 X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:a2:42:4f:e2:17:98:91:39:91:95:c6:80:9d:dd:1b:61:21: 22:a8:ab:09:96:92:09:0f:e9:b1:37:2f:08:80:c5:73:4d:f3: bd:c1:be:95:5d:3c:34:17:a2:c3:30:30:58:bd:aa:b7:61:45: ea:ce:f3:2c:3c:61:7c:cd:1e:08:08:10:2e:b2:71:45:43:e1: 23:d6:aa:d8:dc:48:77:e2:68:4f:6b:74:7a:c4:7a:38:2e:f4: cf:f4:dd:81:48:c7:a8:6e:af:ee:84:d0:af:f4:13:08:20:8e: 77:03:9c:57:13:46:7d:f1:d8:85:b8:32:11:37:0a:56:3b:18: 16:c9:fa:0f:2c:48:d1:b0:e2:9a:8f:44:15:88:f4:22:42:21: 65:14:71:56:7f:29:14:16:17:5a:79:b1:83:58:68:99:d6:8b: fa:c9:cd:05:37:53:08:9a:86:af:eb:0e:34:f8:fd:8f:77:02: 78:55:c4:e8:c8:b8:50:49:0d:d5:58:3b:62:60:72:de:59:94: cd:ab:6f:97:31:de:0e:77:8d:6c:3e:70:74:68:8b:4c:91:96: c3:3a:96:ff:ab:d0:05:3b:b3:41:9a:bf:3f:21:91:d0:9a:9e: f2:ce:a9:3d:8b:81:53:18:07:87:e1:ff:7f:a1:17:dd:aa:7a: 99:4e:b2:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZayWIuYxiLWVfvYFX/dmREaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjUwNTA5MDAwMTA5WhcNMjUwNTEwMDAwMTA5WjAzMTEwLwYDVQQD Eyg5ZjM4OTBkM2E0MDhlYjkwOGZkYTIyMzZiZmE2OGUzYzJhZWQzMzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArya6vvMqyedmYmlNWHI3EgySYLpZ ALVML6jFK8tKTWxrn2oI1fhi8tl1wtUSThRTV/bfp6+IEn6Mw21jkeQBaBY9u9Gu 49Fv5ArEl10bHfR0p28eA60AQgs5ftUxkwKMMH22uIs0Md6slMRg1ItAq1YjOPs7 kBHhV+0z87PI7LYKfxnUp3BpXoz/IlJ/gFERAcKXAQT6jLbXUqyf/BT0dbjrUh4G R1x24xDwZSGh8uqe8lllpka5xEmKBeB2Bx1ICoUo+bki8Fcbh7ux1zGy+9fCSsGd IRko60nZCoPfITAMFXcuvv6SpklvmWZfZxOcx5DVxsKwRpCsb3wC8ho08wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ84kNOkCOuQj9oiNr+mjjwq7TMJMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAKJCT+IX mJE5kZXGgJ3dG2EhIqirCZaSCQ/psTcvCIDFc03zvcG+lV08NBeiwzAwWL2qt2FF 6s7zLDxhfM0eCAgQLrJxRUPhI9aq2NxId+JoT2t0esR6OC70z/TdgUjHqG6v7oTQ r/QTCCCOdwOcVxNGffHYhbgyETcKVjsYFsn6DyxI0bDimo9EFYj0IkIhZRRxVn8p FBYXWnmxg1homdaL+snNBTdTCJqGr+sONPj9j3cCeFXE6Mi4UEkN1Vg7YmBy3lmU zatvlzHeDneNbD5wdGiLTJGWwzqW/6vQBTuzQZq/PyGR0Jqe8s6pPYuBUxgHh+H/ f6EX3ap6mU6yRg== -----END CERTIFICATE-----Generated at Fri May 9 02:46:02 2025 by rpki-client