$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft File: KQn__NgaZryYtinUwFeSR2RfD-Q.mft (raw, json) Hash identifier: tQKbXnJumLoOhwkX953EFIafTHsbDLgpZZzlrANLfUM= Subject key identifier: 87:60:9A:08:9D:EF:4C:97:32:A7:DB:4C:7D:06:12:FF:46:CE:5B:92 Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4 Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4 Certificate serial: 0196C8DFFC80BE77048E7534F3053849DC74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft Manifest number: 155F Signing time: Tue 13 May 2025 09:00:44 +0000 Manifest this update: Tue 13 May 2025 09:00:44 +0000 Manifest next update: Wed 14 May 2025 09:00:44 +0000 Files and hashes: 1: 1-5Fi3WM50atp2DkB7673qszYGEU.roa (hash: kN65NB/E7sHscyK55wK1hzazTC32+9Bs5gcTM4gjKMo=) 2: 1bGM56MEcLFHsgzDo3baYK4aCMQ.roa (hash: oVXVqg3b1Z1hACKH4hIRJE0IPfCRY+hMDc2k4VQe4XU=) 3: 9qoftOkUQubHrr_5Y0O0OEB0jsk.roa (hash: NpXUbKfrAE82THRrSEt65m3odGmwe5q6Rv8hzF4EGTU=) 4: AFOcU_w_QN-XxQkkQfgesDtPy4Q.roa (hash: vuDPxy3QeT/X/Z21aASlCY+NXDSblPQKGqB5xLpgpdQ=) 5: Cdz1li8VqIIJV-m5kmfKj99Y7vo.roa (hash: Injt2qVEYstD1CFDA2RDhQ4n71XCzIHna09I/6r+g6s=) 6: ITP65m-ELAYrIziT1mqhAaKmFKI.roa (hash: TA6Lz6SPSkTI7bhEP+cVZ388px4lL7fPEARYK+dRI9A=) 7: KQn__NgaZryYtinUwFeSR2RfD-Q.crl (hash: dIIU6IbKhPK967EDY69WVjixbuhyLblVbBlP6+PeivY=) 8: M10xggNFEiYKiCOpaRSr9Q_E5jI.roa (hash: or9G2RnVnC9nrrlnpNuQsb0VwFoCXmXB+b6uwP7Zhns=) 9: OFoxo4tSb8S4WTnb9Arp2ooyRvw.roa (hash: RZrf7jypWJt6TvS7MztBYdDEvw+Yp5dHCbAbuiSrNfs=) 10: PxE0dP6xcqVNoXMtC1a5Dmb6n-s.roa (hash: Ybvp2SkTVaVfqhDzUmHlRC82UcW4sX3toG9HthgZ+Es=) 11: RFQq8CL00Iuq4i_jx3Jd0iwOLHI.roa (hash: +y+KD8Sa0MVn4eIucYiZ7dhXT2uIb+hoC3jKlQ4uUUg=) 12: TI9rtNLD66XYwxwHXpdPJetrLYc.roa (hash: ujb2Pqco4C4UTnNLYGJAf0pytP8/IiyRIp98qQq1a6Y=) 13: U8lnC6TG0pv6pWZXKVHzbslUv7Y.roa (hash: en2pnR7bb0v314EN8AtTeDNZJOdRSB9qKOFTcoTcCf0=) 14: ULfjtaXZKeO21K8lDdoLHe5Lbts.roa (hash: Ky4d9tu18NCNsNUD91GQmMhDdLCi4CgvFfPWYH5+Qp4=) 15: WUnk7TNpoMRbrcKaZRtURt3p4fo.roa (hash: PjPxGwGWGX727ceFQzedXW06Hv7b8nuKhbmV/9bEQCI=) 16: X8iQP860aal3YLOybxReqwSyPWU.roa (hash: 8p2TloT9N3iJXhSo+Uh11LexFFF6Vzvsu6ANvx+UWDA=) 17: XvUgOjjL99J51pC_sC90Y2oxW38.roa (hash: c2LYASTNBV0y11dbQezPYJYqj9am3X4y+DmSJidna/c=) 18: cT-m8k4SDtvWHlQKpD65GuRYzTQ.roa (hash: r6RkMNZjMfYtE9PPmCf0mAK1eFJX+kttY3BaDf/aAME=) 19: tvd71H71vKZmhl1lUI4Wfg7oqjo.roa (hash: e5ndVp+pna8lqdjnskWIAOqf7gaAH2YiQgOHVw4SZNM=) 20: vS5j-9f_l8NB8D0F1O7CDV1036U.roa (hash: R1R99GD9Fbi68eCqK84dzkbtSynzzus+WGLpYqyYhxQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 May 2025 08:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c8:df:fc:80:be:77:04:8e:75:34:f3:05:38:49:dc:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4 Validity Not Before: May 13 09:00:44 2025 GMT Not After : May 14 09:00:44 2025 GMT Subject: CN=87609a089def4c9732a7db4c7d0612ff46ce5b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cd:49:ef:b7:26:66:ec:07:71:39:6a:c3:8d: 7a:03:a2:7e:0b:ea:ee:8a:fa:3c:e8:28:ce:df:90: 0a:83:c2:96:96:b9:d8:ee:cc:a3:ed:e7:b0:f2:18: d4:aa:aa:54:08:5b:b9:ce:8c:63:8a:5e:05:4c:c8: b9:1a:56:cb:15:20:95:71:bc:0f:45:f9:11:99:03: 87:6b:a2:36:6b:e4:0e:5e:c6:57:d9:2c:07:fa:e4: 43:7f:88:ac:72:f8:ef:7e:7e:13:89:41:17:bc:ad: 67:cd:58:3f:85:91:c5:f4:ed:50:f0:f4:7f:5c:ad: 6a:a3:b7:80:0c:24:60:07:7c:e5:70:25:b9:9a:ad: 20:1b:c5:ba:75:2d:f4:db:f0:46:fe:4a:56:d0:f3: 56:3a:5f:20:8b:10:d9:5c:b3:ec:30:97:5b:75:47: 77:51:00:49:ba:80:8c:88:06:c5:e5:3a:a8:20:c8: 7c:65:9f:6d:82:85:25:15:bc:c7:c8:24:35:d5:9c: 77:d3:3c:4b:b6:55:4d:08:a1:06:a0:6a:9a:98:7b: cd:23:42:43:5c:d3:25:1e:de:b0:3c:d7:b0:f7:5a: 40:8b:15:1c:b5:ff:63:4c:c4:cd:62:91:dd:67:f3: fc:06:70:c7:b5:3b:3d:f0:ce:62:12:43:fe:41:66: 1e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:60:9A:08:9D:EF:4C:97:32:A7:DB:4C:7D:06:12:FF:46:CE:5B:92 X509v3 Authority Key Identifier: keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:e7:61:e4:19:f4:f6:ee:f4:d7:95:fa:a6:f4:fd:2f:00:b5: 3a:e7:63:0c:ff:b4:d6:fe:ea:ed:d0:1f:88:dc:60:38:2d:e7: 8f:d5:72:6e:f7:ea:eb:82:93:51:8a:42:02:64:5a:76:1a:72: 6f:28:dc:98:62:fe:33:74:21:04:e5:74:05:5d:da:d7:38:f2: d3:88:79:75:9c:69:7e:d3:6c:68:46:e3:06:ab:7f:59:41:ef: b4:c1:0e:fe:14:62:e8:ff:1a:25:1a:e0:57:21:06:bf:82:b3: 54:a8:60:ac:fb:ed:ff:98:f0:df:65:84:a5:d3:b7:6c:3c:f0: 7d:4c:62:f0:1b:03:66:5d:06:09:ec:d7:df:f4:95:52:79:66: 2a:2f:24:e3:66:d8:03:ed:0b:11:34:30:6d:ef:79:86:8b:f3: 0a:66:11:b2:9e:4c:c4:fe:03:1f:08:3e:36:ae:7d:fc:6b:72: 63:d3:86:5e:36:6f:b9:4b:06:4f:ae:1d:9b:5e:15:71:9d:fd: fa:3d:e6:ab:3b:82:c7:89:2b:2e:c3:19:b6:cb:79:5e:e6:34: e8:d2:d6:10:4d:ab:ba:43:de:f9:37:21:f5:f1:47:61:99:bb: 91:10:e6:23:d8:b7:11:7c:0b:e2:fd:9f:bf:9d:ce:34:63:bc: 46:ae:90:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbI3/yAvncEjnU08wU4Sdx0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MDlmZmZjZDgxYTY2YmM5OGI2MjlkNGMwNTc5MjQ3NjQ1 ZjBmZTQwHhcNMjUwNTEzMDkwMDQ0WhcNMjUwNTE0MDkwMDQ0WjAzMTEwLwYDVQQD Eyg4NzYwOWEwODlkZWY0Yzk3MzJhN2RiNGM3ZDA2MTJmZjQ2Y2U1YjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM1J77cmZuwHcTlqw416A6J+C+ru ivo86CjO35AKg8KWlrnY7syj7eew8hjUqqpUCFu5zoxjil4FTMi5GlbLFSCVcbwP RfkRmQOHa6I2a+QOXsZX2SwH+uRDf4iscvjvfn4TiUEXvK1nzVg/hZHF9O1Q8PR/ XK1qo7eADCRgB3zlcCW5mq0gG8W6dS302/BG/kpW0PNWOl8gixDZXLPsMJdbdUd3 UQBJuoCMiAbF5TqoIMh8ZZ9tgoUlFbzHyCQ11Zx30zxLtlVNCKEGoGqamHvNI0JD XNMlHt6wPNew91pAixUctf9jTMTNYpHdZ/P8BnDHtTs98M5iEkP+QWYedwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdgmgid70yXMqfbTH0GEv9GzluSMB8GA1UdIwQY MBaAFCkJ//zYGma8mLYp1MBXkkdkXw/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1FuX19OZ2FacnlZdGluVXdGZVNSMlJmRC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9kZTMwNDEtOTUzNi00OTJlLWE5Y2Qt ZjJhZTdiYzdlY2M1LzEvS1FuX19OZ2FacnlZdGluVXdGZVNSMlJmRC1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9kZTMwNDEtOTUzNi00OTJlLWE5Y2QtZjJhZTdiYzdlY2M1 LzEvS1FuX19OZ2FacnlZdGluVXdGZVNSMlJmRC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOdh5Bn0 9u7015X6pvT9LwC1OudjDP+01v7q7dAfiNxgOC3nj9Vybvfq64KTUYpCAmRadhpy byjcmGL+M3QhBOV0BV3a1zjy04h5dZxpftNsaEbjBqt/WUHvtMEO/hRi6P8aJRrg VyEGv4KzVKhgrPvt/5jw32WEpdO3bDzwfUxi8BsDZl0GCezX3/SVUnlmKi8k42bY A+0LETQwbe95hovzCmYRsp5MxP4DHwg+Nq59/GtyY9OGXjZvuUsGT64dm14VcZ39 +j3mqzuCx4krLsMZtst5XuY06NLWEE2rukPe+Tch9fFHYZm7kRDmI9i3EXwL4v2f v53ONGO8Rq6Qrg== -----END CERTIFICATE-----Generated at Tue May 13 11:17:03 2025 by rpki-client