$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft File: Sm0oF0kd0s0GeAaONanvxoZn3wI.mft (raw, json) Hash identifier: kC6Ak9Oi3bUgKxL7RbhCXQfveXRqRcUCcSfTK5f812I= Subject key identifier: A9:69:1F:46:23:D3:95:D1:FA:61:A7:A9:48:A1:23:D3:01:34:9A:88 Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 0197B77C4D5C2DD27F964AD5C6B3E27F16DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft Manifest number: 09DC Signing time: Sat 28 Jun 2025 17:01:06 +0000 Manifest this update: Sat 28 Jun 2025 17:01:06 +0000 Manifest next update: Sun 29 Jun 2025 17:01:06 +0000 Files and hashes: 1: 0CT1joEXXqHn7ApZderh8oz-6X8.roa (hash: BvOsPrngGNiLcDK7gBcQWH9QFWAThZP/Rzb+/PLbPTU=) 2: 1syvLvZNw4oAM-YcaPxmJP31bEQ.roa (hash: LPtgL6Q40OCE7W48yA4YQ85j1wM296i1AWyNKAFeL24=) 3: 2eiy-_16euZlcY312olF09W31s4.roa (hash: IUh18w7P0P6a+lmEiR7StlwVEgGLtk0s4vBFZb7XO5A=) 4: 3EbDHVpUGPClmvm3J9iIFuXcrd8.roa (hash: cSc8UvFvDER4vb0XGisijdGU9FyUobR1/SMTyehQLHQ=) 5: 45wSdKS9u-kLwBER9DAdp0dOdgk.roa (hash: fvR/mlJedJy8x4zrL0etfG0pS/sgz873Mc4ixjc+vyg=) 6: 4hsvXB1iTRQzBfKiak8pW2I8BF4.roa (hash: XAp414dDwa28MtvplUV/sn7g1yns68g20QzpT6TX080=) 7: 9RqjWLw5HPxJzuXKXhGXXmyVkAE.roa (hash: 16h/SJTNr54l9qICOmuHkNeVLrt+8pmYa+3yNFUR3qM=) 8: CyAx1lcKD4wc_amccZ1znyVkKIY.roa (hash: Xo4DDTOMDsU3unzlvdlmOXck+6K2PDfwqs5xU35c1bQ=) 9: D8tDS5afEI55b3ob8NG1ZTIaLQQ.roa (hash: HR9k0vtrdM5wK2sftLGXjSwvC6aqcZVjRpaEL6hcsrk=) 10: D9x1CTV8F_4B-wx1zITSO-EMubE.roa (hash: HbzAlStX6f56p1esX7YT4omJKAR7bHh229e0ejlC5Eg=) 11: FG5pNQ5_c3TjGvqm7drNqjAtp_0.roa (hash: pcv1sQ3cPr8Z5RqoT1cS23yqOKHpxM+1wRoitpX9AAY=) 12: H72gujMCMAZpLRg2cNnbawNMi2A.roa (hash: mc2ktHWkVm4x7yx+zpHQ1y0JVlLOdpVbGYpYAwP02X4=) 13: HIuQQFKgSBuAKuZ5NFV39UWdk-0.roa (hash: 6EaFRuDYvhQ4ZsTUqzReAUxLoig1ZR4YO2BpnNtxZIo=) 14: IYyyhMB1ESxGlLx1uYqNqrIgR6U.roa (hash: 4+KfJiZUKyrNHi/Wrz4kW/2Z3KBOulRvE66Y7Dq4jLQ=) 15: LbcVeiuDUugzhWMtPmYqNrGtC38.roa (hash: 17lM/1TLk5NwhqbTHI9QcyIG0e9IHDWy4YL3CEcB+EE=) 16: LgEojSSWxqPQSa07ze94dva_jUY.roa (hash: bgXznWdGQZcKwK/PhDBEr8V0fAhdejJIL6EFj3ITnqs=) 17: MGapW0vbEsDh07CObJqBM_xk66k.roa (hash: P8snUlMzN8SD1TPId1VEZe9Ri9QxtvHOJ9QJWot9Jpw=) 18: MrSOOhfdgSDu8DQamecQZPxYswE.roa (hash: mfmpNUSQT/f2SOWnIgX00XuCSJAj/TdvBXwWPhwJxA4=) 19: Nf4HvEGyFdJaZ55NzcAbgQ8tyKw.roa (hash: 5jYKkFvljl/sNCuuK9Ccg8C+9QQrnGFhMRE89ePvdFM=) 20: O0wQkTberJBGf616XMSFIFD7KBs.roa (hash: 17n6+YLzt02MURVWqCyG+6B7DEgjzFUFOHL19KG1glw=) 21: OX5WGRMzsMc_dGpoOLVRfny2bxo.roa (hash: 8X3DRCHPDRRM7fXfOlVxxkg/aG8D1XcXWTqt5pAok5c=) 22: OufG3sBDvZI7hwG4WyzIc-Z0xOI.roa (hash: i/Y4cgjlSFEZdmlvRCXLNV99JlvYX2KAZ/g9aNaovag=) 23: PEoeENAheHgzP-nL_A9MPW80L0Y.roa (hash: iWOMsN9mK7Qviawj2/fUT70nqm31lGZIYRGadWpH1II=) 24: PGRCK_988SWzktKeQMe19aO2XTA.roa (hash: QsLivLGV0/DhneRFQo4vdA6cUJRH1asxl+VSehvXl8g=) 25: QNAvqEtOtUfMbDmfsPFEe603WNU.roa (hash: 1LcNY8ab58yNfN182kfxAkp7IB4n+zASQa1ST2WM24w=) 26: SBzgWhSF_OyJTG2wd8o-Ulr1nmk.roa (hash: 6nfYexvO1Kc2k+mD82GVF9WHZYMyGMTF3rCD7nDSq6c=) 27: SLxMZY3ZeVIlZCRsD5-G_5fuV-I.roa (hash: K6b6z9i944Syq+ZCWjptF5NFMjXs/+RPvy8K9zsSPCc=) 28: Sm0oF0kd0s0GeAaONanvxoZn3wI.crl (hash: kIh0U4oLtzN/ykAqBO4FC7FTkli+fMzwGoslTBGcJlY=) 29: TwoNGVXfFwHv00p0hl1agjjAKh0.roa (hash: EnXnb3QTXsz/G4VrSLiwLMRbpZkmAexWJqS5QR8p6FI=) 30: VkgHoc_Rx9LO0thb-KJrhy8aQQ8.roa (hash: zIBkV8AorlkbljaZ5zOpi/5kWq6s1363XBg2GvdQ8pE=) 31: W81rCzQb4TbKxPTooSlXa8XN4QI.roa (hash: CtqqoCzBFYTr59fu6lgBm7DIo8Hs2FvwBTe1ZDr7Ngk=) 32: WCelWbxY_ryT25IoQyob9TjveSo.roa (hash: bnYBgUb483TxMKFPkryTdkRUhsIN0EWfbbSv1I4sQIU=) 33: XqUpHQ8-a4h7NWOOmuDaL7p8h20.roa (hash: wucX+GJutPw3tDOpsoQ6MWs680eTe2mkRw2xXYGRGbY=) 34: c6w9ZhDFdmBK7mIz3e7Tj7cKgNY.roa (hash: W9CgyAiS0YOpvUOhIebxxS0z/0teFH9NlJCz2jTE+zo=) 35: cMU8VvUmjbwv8fW28N13UafJfMI.roa (hash: r21tLs/TiTIXMMK7rlbmRyjsYlaJyqFWP02tJ2yQ+5o=) 36: cTM_wPu67RVLbAM3nD6sWnqniqw.roa (hash: Ate7PK/dPf9sl6jT2ZlxKjCFiwliYg6RScR5spCNLF4=) 37: dgRDsleizFFiXe9DaqQOkGqkv1w.roa (hash: 5SxZOgkCgjuwwOmw1bmV20/4QSWRJ59FbX4T3oudoSo=) 38: khtbiZZNtdravP-MConYlqJTYmY.roa (hash: xXo87eImVPHif3j6yLOoXwcVidIvdHpygsCrdgfHCM4=) 39: kzJROGRJyZHBGTjoX7TVF70t_uI.roa (hash: Jj+yaaYYgzB6tRgd4hOyiggZphR9XS4OGfW8KoSDVmg=) 40: l5h3qSPN2b6fME8XWGqxn5Ie5tM.roa (hash: 1gYcxOTK35gAGaMUX4XHHZe6la72rr7YynYRUMDnuCw=) 41: pLRMCkjbhFiMNh52TnBAspU8Hjk.roa (hash: U1FUmpIZB70rTHNhu4UV38Kt+GlWp4EPp8i4yoOh8xY=) 42: pS3QOZ2wypZ71SVvS4_yCNQwDJE.roa (hash: ftQJDmKbzx9RdLUMravYt2oMuiMTqqjLnLQ/z0Jk1Gg=) 43: rWSnUoFSizQeONQqtbmoxgRXQLg.roa (hash: WRwAsaYm/Kcb4E7MVkOhb4dnAP9wdxMUgAV7X/La5Vs=) 44: rxk8aFkOeWjK91_TW-WX0ASv1Z4.roa (hash: 13VThZFeUCr48FxuuPNHQvJ0Fk0X//zMlJyzyJOre9Y=) 45: u-s_IvRi_d2uT0pVGYggJ-9vf_w.roa (hash: xE0k9qkP4J77FkjGvlKk6uMwrXPnBnaccpHmcue4AWY=) 46: vJD-DSmwOkOOJFuZzauASqUSruo.roa (hash: auuNNDBDYVXVMGfixRK8lih+GV92mCYSoacO6fybksg=) 47: vQ8X3oy-JWRk4AKB_VuuP5BjlYM.roa (hash: 5j5FVAZ4CeKUoBwfFPNsI7WH45FNyhDbv1/sr4ayZcY=) 48: wha7fcogtd47YRJWz6jr2K_oy9M.roa (hash: 7bzvo+VMMMPCXskKWF1nzlRo2MigQF9srzUNxlr/2Hg=) 49: zzDzNokLDw5fB_iBSLdcgwToZfI.roa (hash: 9Ii575Yb0QHWdHvqaclZEqxxCr5HLB5JkEBBY/yv0gw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:7c:4d:5c:2d:d2:7f:96:4a:d5:c6:b3:e2:7f:16:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Jun 28 17:01:06 2025 GMT Not After : Jun 29 17:01:06 2025 GMT Subject: CN=a9691f4623d395d1fa61a7a948a123d301349a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:be:d8:f3:ea:6d:50:c0:a6:82:d1:b9:b8:80: b9:a7:f4:e3:35:df:c4:c8:9e:63:46:98:b7:de:4f: a7:91:35:33:49:61:25:c4:02:b4:a2:14:d0:56:a5: 35:69:66:b5:dc:c9:e5:f7:58:bd:91:fc:a4:15:1a: 1e:f8:73:5a:31:dc:bc:e8:41:13:02:ba:be:37:60: e3:01:06:fd:3f:ef:37:c9:6a:ab:af:30:a7:29:aa: 03:f3:34:fe:e0:1e:68:64:dc:9e:6c:f4:81:39:a2: 7a:c8:1a:84:91:b0:27:27:a8:90:c2:4f:43:b4:d4: d5:e3:50:49:aa:11:58:9b:52:c9:a0:ec:13:bb:a6: ab:3f:1f:cd:13:46:c4:07:2d:52:e2:0d:66:d0:44: 72:82:39:a7:bf:e4:68:b7:eb:3e:5c:4f:50:59:c3: 81:34:dd:ac:71:fd:13:c9:9d:b8:03:ed:91:cf:e0: bb:f9:ad:22:ed:83:f2:93:db:31:82:19:bb:cb:8b: 0e:fc:57:0f:5d:74:14:32:f6:c3:97:3a:fe:d6:fc: 1c:66:f4:c1:d8:b7:80:0f:09:3c:87:45:bb:e1:8a: 96:2f:4d:1e:9b:a7:60:01:33:15:58:af:a9:ae:f3: 57:12:48:fa:7f:cb:73:ec:f3:f5:55:ac:35:b4:a8: 1f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:69:1F:46:23:D3:95:D1:FA:61:A7:A9:48:A1:23:D3:01:34:9A:88 X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:7f:22:6b:aa:f2:a7:03:20:93:fa:f5:53:e7:d7:8d:cf:03: 17:6a:7e:99:3c:a9:18:79:5f:38:88:61:b7:09:05:60:b7:96: d9:87:b6:73:01:17:9b:31:80:2a:d7:d7:76:69:26:23:ba:40: a6:b0:27:d6:58:76:b1:10:38:38:5b:f8:52:30:8b:6e:6d:4d: b6:63:64:df:c5:d3:25:ce:48:54:d0:81:b0:7f:d8:6c:ed:a5: 31:bf:a7:65:bd:14:6e:64:c8:32:21:f5:13:81:6b:5c:85:43: 87:e3:99:7a:08:9e:44:9c:74:dc:a0:7c:65:2c:2a:63:eb:79: 44:44:ca:aa:0c:1d:8e:89:79:0c:3c:61:fd:23:46:7b:70:69: 41:53:40:c5:b7:94:14:e4:d5:20:0b:97:f0:67:38:19:b6:aa: e1:ac:b1:ea:83:9d:f4:38:b0:5d:a1:7c:26:0f:cd:c8:8b:91: 5f:b0:8d:76:43:6d:81:31:9f:94:40:84:44:7f:e5:b1:49:45: 35:9a:0a:b5:2a:1d:67:bd:a0:86:16:10:b7:ef:6c:f7:2d:50: dc:7f:34:6f:ab:89:be:b0:82:f3:dc:e0:34:14:4a:37:93:36: 1d:1d:06:ee:81:78:5b:45:71:2f:b9:b4:a9:85:da:a3:af:08: 56:3b:ef:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3fE1cLdJ/lkrVxrPifxbfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjUwNjI4MTcwMTA2WhcNMjUwNjI5MTcwMTA2WjAzMTEwLwYDVQQD EyhhOTY5MWY0NjIzZDM5NWQxZmE2MWE3YTk0OGExMjNkMzAxMzQ5YTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkr7Y8+ptUMCmgtG5uIC5p/TjNd/E yJ5jRpi33k+nkTUzSWElxAK0ohTQVqU1aWa13Mnl91i9kfykFRoe+HNaMdy86EET Arq+N2DjAQb9P+83yWqrrzCnKaoD8zT+4B5oZNyebPSBOaJ6yBqEkbAnJ6iQwk9D tNTV41BJqhFYm1LJoOwTu6arPx/NE0bEBy1S4g1m0ERygjmnv+Rot+s+XE9QWcOB NN2scf0TyZ24A+2Rz+C7+a0i7YPyk9sxghm7y4sO/FcPXXQUMvbDlzr+1vwcZvTB 2LeADwk8h0W74YqWL00em6dgATMVWK+prvNXEkj6f8tz7PP1Vaw1tKgf9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlpH0Yj05XR+mGnqUihI9MBNJqIMB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxX8ia6ry pwMgk/r1U+fXjc8DF2p+mTypGHlfOIhhtwkFYLeW2Ye2cwEXmzGAKtfXdmkmI7pA prAn1lh2sRA4OFv4UjCLbm1NtmNk38XTJc5IVNCBsH/YbO2lMb+nZb0UbmTIMiH1 E4FrXIVDh+OZegieRJx03KB8ZSwqY+t5RETKqgwdjol5DDxh/SNGe3BpQVNAxbeU FOTVIAuX8Gc4Gbaq4ayx6oOd9DiwXaF8Jg/NyIuRX7CNdkNtgTGflECERH/lsUlF NZoKtSodZ72ghhYQt+9s9y1Q3H80b6uJvrCC89zgNBRKN5M2HR0G7oF4W0VxL7m0 qYXao68IVjvv6A== -----END CERTIFICATE-----Generated at Sat Jun 28 19:17:11 2025 by rpki-client