$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft File: THhEq-9xHCMshPg8gHpCCvOARyg.mft (raw, json) Hash identifier: av3pAAgrXj8VdWr6bp9T0bNjo08AAlaKyLZwsdpQPSM= Subject key identifier: 2C:0A:E6:3E:FF:1F:79:6D:FD:79:4E:A1:0B:B5:B1:99:AC:0D:AF:94 Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728 Certificate serial: 0196A98BA85A34322DD62EFB82A4C50AA97D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft Manifest number: 1533 Signing time: Wed 07 May 2025 07:00:24 +0000 Manifest this update: Wed 07 May 2025 07:00:24 +0000 Manifest next update: Thu 08 May 2025 07:00:24 +0000 Files and hashes: 1: 159ekJmBdzbPKpbON9hMEymGJuU.roa (hash: QP5wYUCm1hSjghfra2oVcPBPcr/BrQ1M69D/IBh13Ek=) 2: 788_6eQ_xFNLe9_wIK-pQKXpCzE.roa (hash: LF8TeWNVGROo8mUa/fN3lL86dQZtL7W6m2p1cv4RWDU=) 3: 7VL3TCVUHIkzVI-u_BV2H3VUTW0.roa (hash: 5DAqYiaH4HvpC1IHfjR7Nmgzznm6FMPuOC84EeBazuE=) 4: 8MxR-Tev1o1VL0t9VRgCRAf7vnI.roa (hash: acrlUTRAmmeUc2aIFqU4RxZwx6fjf2929QZq18A30Bo=) 5: DHF4t5PSRpk6qWKPy2mALhrDjIE.roa (hash: suENCv+FxMCoCroXS4u7UEipCrKhSFMxZ7eSrCqloAg=) 6: DP14eQdBJZ0IZ5xEuLsmxQbl9EY.roa (hash: I1RANQtOMkvey7c50zVN0sFWZ6sc3/FFShaZqQlcjW8=) 7: FetsHfbdUifY1TU89hnwoFpg5QI.roa (hash: ZHBz8QvXKu/jKruoZfTsft4ugiggH0hcJsS7NZeRumw=) 8: Kt5AY6bZ1gA0AyxYwkZX9eyBtTA.roa (hash: vEFM1Xuk52lqHbsTCEtx4tTiPZIq8w5DR7ss3hbOLsE=) 9: MfLf638cBMkfH5M2VRdb5zkozps.roa (hash: 2fcAYwjckXPjFWKMKBGwmwkGYgpmXwgfJsrW0TpRDWg=) 10: NOqs7ZQrrn3ai8o8Sfr5QgX_zoY.roa (hash: ewnWA3/QGkEv1H2zslDa2f3WNqSiX0NCN6++76C2dyc=) 11: RTDW_9ir78QV7tSH_VhKQZV9o9E.roa (hash: d4l0MWyE7MGz6KUyIY2o+vwNtkeh3WQEvCQ4JDRIKNw=) 12: SkDqJYtasnJYM-biaYFDlw-lbLI.roa (hash: SIZnkeDSwwVblW7CmwDd2pAiA3RYFWayoud1xIYiOZE=) 13: THhEq-9xHCMshPg8gHpCCvOARyg.crl (hash: 4OFYh4ughjoYCpbCi6HVVYQ5OVMpTRlBU1f3UJJdsCY=) 14: Ufg6XzRgoNG-SJwB5vLfRpSdKwM.roa (hash: JG7/C3Qu/BlDNJo3Xbaaiz8UsqXv4SIf7aVJX/4oLC8=) 15: Ux9zLJtd4_p9NV0Me_W8PVyz43I.roa (hash: GS5Alel3iVAtxVyr3H/1KmbzeB55m9O8mdahO6mwu3I=) 16: V4n_ERvR3r7FSnduE0noOKeefts.roa (hash: LPIfQu7peWz7IwtM6LejZS6t2OBvUe9ksCubWX40zoU=) 17: ak_XLj7BZSfR9vOAnnvTOmDEr6A.roa (hash: ikKkuXaDQk5CUy5oU8HwbfJMv8LLvWp+LKDjQ5BFERQ=) 18: eV7DHZCofiB8XK6t9zdEW8QBmNE.roa (hash: ziPPnswaXIfrS3ugoGocK/TB+/DsS0Y8eyLBNQhW8CA=) 19: ehl3MzoakHMyAhI6D9Y3Cy-GPCQ.roa (hash: c/pdm8QJPrUaNWBntBuCKT5L6EGDpSv8U+KeXzAhvgM=) 20: etz2hZixJbP5i4gWcSwK7LRFSm0.roa (hash: He+gUSNkDpgM/YmAlWou/f7IBd7ClRDJZpOAAsQM4Gc=) 21: j4rh0ZB1TNetuBYRDobHojuhdfk.roa (hash: gG/GxtjjKSA1/GWHAwQGCjfaoi/2Fsi2k0vRIown77I=) 22: nRd2QQHJvxWvYt2MaDtdcdyAXq0.roa (hash: yZqn0BYFHogcQ5mr/kG0CSKrE+RjbicfkkCTMtc6QdE=) 23: pgzL98bXwq-9exs7N1Aw8lwmeJ8.roa (hash: xy+0YdokIF7xVDG+fNdt0bMI+vPVGsiM9WuUOpAJvfE=) 24: tl2CuMI8daX_Uy_0-dhV_jYIjok.roa (hash: fhgp+n0E4Y3FzjH1buSmXdmrrGnvYKzvAV0R9W80bHI=) 25: vTuj5nkiC_3i4jeecr0ZYlh6QFQ.roa (hash: hGNi9opDGQg4RKjrBzVyQfTDJbC2WxKz4FBHifedxJI=) 26: yJHEdUxsuxE5hka9evM6UogprJA.roa (hash: ISigKBqS2g0TxwqY9vjjEMwica/8G6mT5W+e6wBxj6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 May 2025 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a9:8b:a8:5a:34:32:2d:d6:2e:fb:82:a4:c5:0a:a9:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7844abef711c232c84f83c807a420af3804728 Validity Not Before: May 7 07:00:24 2025 GMT Not After : May 8 07:00:24 2025 GMT Subject: CN=2c0ae63eff1f796dfd794ea10bb5b199ac0daf94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4e:8d:d2:29:23:7d:d1:ff:b0:f8:49:0b:09: 2c:fa:d8:3b:f4:14:57:94:a9:bb:90:d9:20:2a:16: 2e:84:75:0d:ce:ef:7e:00:e9:65:28:c6:f5:7a:f1: 99:57:0d:2d:b7:20:0c:f0:97:4a:d2:ec:da:fe:13: 0b:4b:14:e5:41:87:2a:df:75:bc:f9:04:60:be:39: 45:e9:7b:db:91:7c:6a:c3:1e:b4:a8:d1:61:37:b2: 81:52:90:4d:24:e8:65:42:58:14:6b:27:c2:c4:14: 23:3e:1f:ec:76:c7:fe:d4:1c:94:68:07:7d:80:d8: e5:e7:81:74:be:79:0f:5a:77:b8:c2:c8:a7:da:a7: 2d:c4:07:a1:54:40:f1:b0:ed:ef:f9:9d:10:46:77: a1:be:b9:14:00:15:17:d1:ac:6e:2c:71:fc:9e:42: 72:89:51:ad:fc:4a:13:ad:a9:12:1f:9e:5d:7e:86: cd:19:ec:01:0a:22:31:ea:e8:31:3e:c4:39:30:1b: 4e:81:e9:42:42:48:53:ef:31:af:49:85:00:52:df: b0:69:5b:d9:71:b1:8f:7a:09:d2:e6:eb:92:12:58: 58:dd:f3:a1:f3:da:9c:a1:9e:40:59:1e:fe:0b:5f: 5e:f6:cf:0a:c2:25:95:c3:3b:27:49:e0:13:e8:d4: 47:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0A:E6:3E:FF:1F:79:6D:FD:79:4E:A1:0B:B5:B1:99:AC:0D:AF:94 X509v3 Authority Key Identifier: keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:41:2f:e6:d9:e2:7b:74:e2:fb:fd:17:3d:0b:c8:2d:f5:5d: 34:8a:2f:68:c3:9a:f1:7f:0c:d4:90:3c:fa:fa:f4:1e:82:bc: a4:61:dc:a9:ed:15:61:c4:74:45:2e:d5:49:6e:e7:29:34:a8: 2d:64:dc:84:f0:2e:48:8e:f0:8b:c7:ba:b3:b6:92:46:93:e9: 85:73:aa:e4:ea:98:af:ed:48:2c:a3:f7:3d:ff:dc:88:27:c8: 12:6b:22:5b:2b:94:2d:cd:7d:64:c5:d0:27:62:5b:88:a0:ab: 23:4b:cf:bc:85:74:19:65:47:23:9a:73:a1:0c:10:38:9a:14: 96:a5:1e:34:b7:62:3c:2e:d1:d4:5b:f8:49:65:b4:c7:16:22: 0e:67:d7:c8:17:85:db:60:91:58:d6:30:8c:73:e6:a1:7e:a6: cd:b7:63:52:b5:15:64:63:2e:4f:61:1d:3f:16:db:85:4e:f3: b4:65:cb:ad:8f:a3:1c:80:76:5e:4c:40:33:cd:72:f8:7e:fc: c6:4e:c2:34:58:f9:4f:99:dd:96:72:8b:f1:f6:4b:9c:2a:3e: 55:79:1e:9a:eb:31:bc:97:99:ed:bd:85:d3:39:d0:e5:a2:f7: f6:4a:75:2c:5b:5e:36:a6:b7:47:97:0c:30:c2:14:23:6a:a9: 46:b1:c3:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZapi6haNDIt1i77gqTFCql9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4 MDQ3MjgwHhcNMjUwNTA3MDcwMDI0WhcNMjUwNTA4MDcwMDI0WjAzMTEwLwYDVQQD EygyYzBhZTYzZWZmMWY3OTZkZmQ3OTRlYTEwYmI1YjE5OWFjMGRhZjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE6N0ikjfdH/sPhJCwks+tg79BRX lKm7kNkgKhYuhHUNzu9+AOllKMb1evGZVw0ttyAM8JdK0uza/hMLSxTlQYcq33W8 +QRgvjlF6XvbkXxqwx60qNFhN7KBUpBNJOhlQlgUayfCxBQjPh/sdsf+1ByUaAd9 gNjl54F0vnkPWne4wsin2qctxAehVEDxsO3v+Z0QRnehvrkUABUX0axuLHH8nkJy iVGt/EoTrakSH55dfobNGewBCiIx6ugxPsQ5MBtOgelCQkhT7zGvSYUAUt+waVvZ cbGPegnS5uuSElhY3fOh89qcoZ5AWR7+C19e9s8KwiWVwzsnSeAT6NRHxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwK5j7/H3lt/XlOoQu1sZmsDa+UMB8GA1UdIwQY MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt ZGFiNmI4M2NmN2VjLzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuUEv5tni e3Ti+/0XPQvILfVdNIovaMOa8X8M1JA8+vr0HoK8pGHcqe0VYcR0RS7VSW7nKTSo LWTchPAuSI7wi8e6s7aSRpPphXOq5OqYr+1ILKP3Pf/ciCfIEmsiWyuULc19ZMXQ J2JbiKCrI0vPvIV0GWVHI5pzoQwQOJoUlqUeNLdiPC7R1Fv4SWW0xxYiDmfXyBeF 22CRWNYwjHPmoX6mzbdjUrUVZGMuT2EdPxbbhU7ztGXLrY+jHIB2XkxAM81y+H78 xk7CNFj5T5ndlnKL8fZLnCo+VXkemusxvJeZ7b2F0znQ5aL39kp1LFteNqa3R5cM MMIUI2qpRrHDrw== -----END CERTIFICATE-----Generated at Wed May 7 11:39:27 2025 by rpki-client