$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft File: um7Q-3syCDKsFYBTTHsmPzBOmBs.mft (raw, json) Hash identifier: KNs3lWVxjimo80y7oxtQzhHS77W5jFNklBdHjIhqoPI= Subject key identifier: 55:E5:9D:1D:54:F4:72:89:FE:2D:06:D8:9F:C3:97:51:62:F0:33:D1 Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 0196C0EF7B8615E445D2CC3088F77E8E06FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft Manifest number: 156D Signing time: Sun 11 May 2025 20:00:42 +0000 Manifest this update: Sun 11 May 2025 20:00:42 +0000 Manifest next update: Mon 12 May 2025 20:00:42 +0000 Files and hashes: 1: 06NSghyd-RfQfllOJ5ERAf7RZag.roa (hash: K/9Jk2p9txXgz2W0pBQzSeA+A3NB1VwxmrWVLGhwpqg=) 2: 2dPAufbhO8MYI_aYaSiQ223S-P4.roa (hash: h6W+EiR+fmRKkbzlRBzCKubEDQFry0Uk/nrdbeZ7uFY=) 3: 3ozxe3eCXT9JC_ZIJyhtuinyln4.roa (hash: gufLQO5o7Tk7ZZaE8OE4ZmY4rKilts70/MIEHSYdQtw=) 4: 4f_2xWjzr5fFrbiUmyj7b2GAR2c.roa (hash: 40fajzcms2HhTqbHykP7HgDBjZNVjd1JCZs/OBDeB3w=) 5: 51mfa4prfZ4aIFenwdh1tef3BD4.roa (hash: zRXMU/tcdvXFqHBSwYnaJo/sT01T39ww5SlzgBzMq4I=) 6: 9_2WrSSAKlN1EIPH4IL0OW56MrQ.roa (hash: o1bcqiGaGo6W2QG94hVI//R0YPuvhqmGXfJX8Qgac9w=) 7: 9hn6tYB1hGp5VS0kBTSMOtD8ABc.roa (hash: 2fucCKnDWpTEmrPqMmQsnrBxYHtoufXItgIN243OJxs=) 8: C5Bd8VWsABcOSIK7iAaVbeAto74.roa (hash: UFtvFbnPksU3f32VZVDCvar4F34zLCv2m0EpLitoWn4=) 9: ChAwhBWdFbK8H8OgjXlyx4EvkcA.roa (hash: S4V5zsfBw8Krxjs2yY7Dwj9hG1haukhzyaUt11satjo=) 10: DN3qiMWAkbxTvOYg-j1385pvluU.roa (hash: GuR7uK9EOmGeuRld6O+HBlrD3yhsw8UtG+WB0ocy/eA=) 11: ESoOanOemWaXIdUpJ0dGHUrH_eI.roa (hash: pABCCSi7bNCSXQc+TE7ByPE2ezfRsuJY9Lw7DPvUcX4=) 12: Eix1bwtpkh3DfRz10HNMwF0QezY.roa (hash: /tPs0X74Nztuoqdzxvgc+Rkd5OVF4g6dXydqRNkNKmU=) 13: I58Hs_8f85FK_FT8uW8jm1NBQEA.roa (hash: 1eLQQiRHfXYkm5iwzdRHxMNlhUtofu1CHp+dcbWo0/s=) 14: Ik6O3B7FjrBrAwWdNQilmgWzcwg.roa (hash: bOgvurD5h8ijhMvZNu0tCAvTWDZmQWqVikghJRX1T1U=) 15: JuHOqqyp6gPUNYRm3uhGk9D1za0.roa (hash: llqlHk2/9ecn2824xu4i9L0Xvy7NI+3x0axhhCRK9kQ=) 16: LZJCOwn77DXpbJDvlAzekT5apRA.roa (hash: +t4lT4iOzMOF8krgl8HnKOnttpxuNQB9BJNqFL0yj/0=) 17: M3ChRRCC95VWNUgT2kzwMTdPSS4.roa (hash: E6eER/DfbXmaLYyM9UUARrZCyqn2G0qstMCDWv5urp8=) 18: MvkXtMliSNZ4t0doOeJCt7yseKU.roa (hash: ywUFrH7OBGZw7qJ85x9kF2rMILkLc6SVWP6XkiZTaAM=) 19: Qak--g4cNpU6CoUjtQGbcVvopDE.roa (hash: N+RmhDxULogEXWrVUH8MMjtB+zv1gLSm5Ek5YZneh/g=) 20: SyFn9gXv-LiQEpx623FW7zp76Vs.roa (hash: TJf87iNCfO1Ewq8QElsjey5+veJYI8oBKv+M65Z4Cco=) 21: TkGlpc5Tn70aJVwhv7pNACfX1jA.roa (hash: btdfTVJmMqYsieIn46CF/cLd49A9Xyl8eSZFuUISFt8=) 22: YWatj6dDYX-fiuw6ePziaU4C0TQ.roa (hash: V8Z8+AX+rzz9xpEvpWsJlL9jJ/P0smo2rICd10IyVqc=) 23: _B1wZHtnKd18HaoeOE7IMpvthTE.roa (hash: GM2wXplOCIgkJTK+wMIqO8JhJE765YS5HF23fM9LJNM=) 24: _S6k1c_YZyTXV-QbiGNh2eJ9qek.roa (hash: DkdBRSksCprQfNdAaTY6NVmXsg3Z/hZACN3MJ2MSYoc=) 25: aXKFWmr05ujOACE-0dUG_c35U2Q.roa (hash: V2GbIAKcxdCncnWyBDIRBH2ulZIFWnPu4CLpIswEB3c=) 26: bJ5_3QBASsgKrYb1fEOP2pTRl-A.roa (hash: BdFbpQWd3ti+vlRHPZPpiX/PWbDrJqd23YLxBl37+F8=) 27: g2DFl2N-WdFrs9z950ghIm6CXgg.roa (hash: g4VcoYAo+P4AnCakQIRF1npt/PFP6SzCAGb+cSIm25Q=) 28: j1OR6cLV4AFRQ_Q8AYCC4jsEAYw.roa (hash: YpaIoCZ2JtRmpPYrq47DGeATMu5FRM2qhEbni9PeHgk=) 29: jv5AjQiEgUQOR9Bdu3vuXbWrMFM.roa (hash: 2DV2bTMok5nhASbXYW9C3vvtRvCp2zGEhY3zcbpmB4c=) 30: k3SD7Mo8S-wkCGjWHqkku78vk4o.roa (hash: nJKeC1C9D5VB3P7HR1VXT79mmOfAP2khl4fAaXBF83M=) 31: lMNVACJ-h1nsjjrfMh03NkCllrM.roa (hash: ivpqbHCSo3OaWnV7LbXMClcyXI+IHXLVT6OjKDwZgak=) 32: m9WFxaaoUJopCijrezK6Gq5Y4x0.roa (hash: IYAL/aevINvn/lzHc7XS8T3g/wDLEF6taIL5uE1kWoE=) 33: m_4FbtjHWVHft-KPpwBsunRcnfM.roa (hash: FOjLBFoO279KgrQxswrLZVJY7oVfxBkaRwq78/5efpE=) 34: oTPGJVYlb7GDuOecchScOtyVmK4.roa (hash: HxM+IsllX/8+gKO8ZDG7/ou6XQ0BBMHZq9SzkhezbL8=) 35: ooemiNKGVRy5RLKGSewCoVXtxhA.roa (hash: 50iBNWI3DGamOGaWNIoN0o4Mrbk721gvtsPT5f1uk78=) 36: s0JsDGlEd99sz4uxgNL4hjnqi-I.roa (hash: Zx5qudBQQtligA3k0WWx7F2/NDeycbSDlKmc3QrXbJ0=) 37: um7Q-3syCDKsFYBTTHsmPzBOmBs.crl (hash: yDXxmDlt9LOTOk4RYpBCsccK2XsZGHbmwTl00FxCiyU=) 38: wfV6g8bCyfjY-q8qOCb42jB3SVw.roa (hash: tdt9myrSVnnipTeZQJjpnWIHSj35hhKuPkiJkdRuRdI=) 39: xby6qjt0unPBaXjG7WI-Peg-jiE.roa (hash: KRd9ht/CIRbyrT8PG2G+CvkZ2u+/FF8umJVk4dxNy9U=) 40: zGfC91qQV1Kiw9lJXOxhhLdA8YM.roa (hash: Dw2IdvFg4+SBQDwswZOmKdsoBW8A8qVDYpgf92qGA+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 16:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c0:ef:7b:86:15:e4:45:d2:cc:30:88:f7:7e:8e:06:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: May 11 20:00:42 2025 GMT Not After : May 12 20:00:42 2025 GMT Subject: CN=55e59d1d54f47289fe2d06d89fc3975162f033d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:64:76:6c:7a:82:31:2f:ba:51:a2:45:20:5f: a5:d5:b3:56:9e:0c:b3:ff:16:a9:c6:99:74:6e:ab: 8f:8b:07:cb:e5:b3:d6:2a:60:94:b2:46:32:fa:00: 4e:70:3d:a9:99:8e:c2:44:72:10:55:1b:9f:40:b1: 6a:1d:14:3f:2f:8b:0e:dc:f9:33:1d:7f:6f:39:61: cd:01:97:a3:03:d4:56:e1:43:07:90:95:18:59:cf: 35:00:4f:60:0b:2b:34:23:9c:9b:5d:c4:91:03:7b: 6e:46:53:0f:c5:e7:0a:87:f3:0c:4a:d7:fd:63:d9: 0d:ef:61:87:e5:59:7c:1a:a4:cc:d7:fc:97:0a:30: df:39:9d:7c:40:ba:34:87:ef:bf:0c:83:8f:91:48: bd:1d:69:ad:cb:11:a2:e8:f3:24:bc:15:7f:45:2d: 25:d5:78:48:0b:85:22:33:98:3c:62:63:82:f0:4e: 84:e3:e5:65:fc:59:d2:e6:01:66:8c:b3:3e:6e:77: 28:0b:e7:eb:47:50:de:46:79:78:d0:05:f7:6a:f1: ac:5e:0d:df:26:08:72:b4:c5:ad:a9:48:e4:0e:ad: e8:92:cc:89:a6:60:64:27:f4:fb:75:39:38:cc:6f: d8:d5:a9:ae:1b:6f:4b:3e:19:63:ae:61:1a:20:4e: 09:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E5:9D:1D:54:F4:72:89:FE:2D:06:D8:9F:C3:97:51:62:F0:33:D1 X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:5c:ee:67:fd:ed:7d:73:0b:ec:39:e8:c3:5d:20:6b:c7:2e: bb:81:35:cc:f8:e1:df:1a:cd:a7:bf:f3:8e:df:09:34:19:9d: 86:89:9f:80:d8:4a:34:47:6b:11:db:7a:38:f4:d5:35:c0:a7: 70:94:cd:7b:af:49:1a:eb:66:88:7d:99:74:ac:0f:39:1b:33: c6:47:66:ea:31:ab:65:5b:35:ef:2a:9e:11:04:9b:cb:2d:43: 12:d0:a4:20:f4:98:76:05:29:b8:80:75:8b:9c:72:fa:2d:9d: 82:05:87:09:19:56:da:55:e7:3b:6e:3e:7d:b2:d0:42:9c:47: d2:8a:86:08:86:58:9d:d5:2c:47:0b:5e:2d:13:de:cb:b5:2e: db:76:0f:49:51:78:3b:9c:21:05:19:4c:d3:d8:c3:d1:96:74: d0:84:63:5b:a2:97:d1:71:94:e7:db:e5:4b:97:9a:fd:5d:5a: af:ac:83:0b:5f:e4:ac:09:cb:e7:22:90:fd:aa:23:1c:80:9c: d9:c4:4d:d6:44:16:6f:f8:4d:3a:74:52:11:ef:98:8f:4a:7d: 73:37:dd:26:47:d4:6c:cb:2c:db:e1:07:66:b8:d9:88:66:3f: 3e:66:7b:a3:d0:32:05:db:21:36:bf:0d:63:88:30:96:e0:81: a0:3b:af:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbA73uGFeRF0swwiPd+jgb7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjUwNTExMjAwMDQyWhcNMjUwNTEyMjAwMDQyWjAzMTEwLwYDVQQD Eyg1NWU1OWQxZDU0ZjQ3Mjg5ZmUyZDA2ZDg5ZmMzOTc1MTYyZjAzM2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmR2bHqCMS+6UaJFIF+l1bNWngyz /xapxpl0bquPiwfL5bPWKmCUskYy+gBOcD2pmY7CRHIQVRufQLFqHRQ/L4sO3Pkz HX9vOWHNAZejA9RW4UMHkJUYWc81AE9gCys0I5ybXcSRA3tuRlMPxecKh/MMStf9 Y9kN72GH5Vl8GqTM1/yXCjDfOZ18QLo0h++/DIOPkUi9HWmtyxGi6PMkvBV/RS0l 1XhIC4UiM5g8YmOC8E6E4+Vl/FnS5gFmjLM+bncoC+frR1DeRnl40AX3avGsXg3f JghytMWtqUjkDq3oksyJpmBkJ/T7dTk4zG/Y1amuG29LPhljrmEaIE4J2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXlnR1U9HKJ/i0G2J/Dl1Fi8DPRMB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlzuZ/3t fXML7Dnow10ga8cuu4E1zPjh3xrNp7/zjt8JNBmdhomfgNhKNEdrEdt6OPTVNcCn cJTNe69JGutmiH2ZdKwPORszxkdm6jGrZVs17yqeEQSbyy1DEtCkIPSYdgUpuIB1 i5xy+i2dggWHCRlW2lXnO24+fbLQQpxH0oqGCIZYndUsRwteLRPey7Uu23YPSVF4 O5whBRlM09jD0ZZ00IRjW6KX0XGU59vlS5ea/V1ar6yDC1/krAnL5yKQ/aojHICc 2cRN1kQWb/hNOnRSEe+Yj0p9czfdJkfUbMss2+EHZrjZiGY/PmZ7o9AyBdshNr8N Y4gwluCBoDuvwQ== -----END CERTIFICATE-----Generated at Sun May 11 22:31:32 2025 by rpki-client