$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft File: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json) Hash identifier: 7PcFVcOthjFyTGVjOr886CGWY4IX+7z94HglHN49CgE= Subject key identifier: 7E:27:A7:4C:F0:D9:A8:E5:DA:D8:81:24:E3:92:DD:F1:7D:75:A7:EC Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Certificate serial: 0196BE9303DBB4D614E64D4F7956F47FB25A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft Manifest number: 0E28 Signing time: Sun 11 May 2025 09:00:27 +0000 Manifest this update: Sun 11 May 2025 09:00:27 +0000 Manifest next update: Mon 12 May 2025 09:00:27 +0000 Files and hashes: 1: 0-YPkmULAfXnz-x8O4HjpPXrRgc.roa (hash: 4hkO4QjkvJDhiXFvv5DxoiJEgtCK4O1iDNeqMzaTU3Y=) 2: 1-_faHefIQXiAFnH3LNhBjrPU09I.roa (hash: 7InTaPWZ/MJFW8mHuJCEltHrQe/oJd/TwCKtlJ9uvvg=) 3: 2TU9zRlg4BupLvfFfZ7nbqZ_3fY.roa (hash: Q+LzT1EBZiXr+my5xIMRRPF6wrKo64s9mQmOfTnOJXc=) 4: 3cmiag-OFPHODxLb1KMirqc2FN4.roa (hash: di5HoeNyYyjDjq7zRaZtas9CEUZ0AIaTVNE5BqvZ7NU=) 5: 3r_fS2iqTHTpqVrmAdmmLy8h5Uo.roa (hash: 0H+5GAjDMQaP4P2zWWWPVnZ5P/dbumJ+SDOD0JaXOts=) 6: BSzGMTPMq-wN-qGAx5X2D1S9LyA.roa (hash: BvSVSe8mZx3zsVFBrO0OJZXXGEEERCM53ZjLPIwFvwo=) 7: CTV38ZT_kPdUbW8ChEbSmJ6D_xY.roa (hash: yntCphEUvGZYiNPfiCzzcsgLL+fxDyvsgRdAxblWwLU=) 8: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: BxwhKNMkdp4sY7bX7pFo7EzbG2llcabTkODZZeDMwD8=) 9: FWQETtkN_oL4od4Al2G3UDgEL5c.roa (hash: xaM2HH/7hc4DXnOzRecNa3benIQdBaCSuVr3xBWruxw=) 10: I3HMzg_QmJAYWZSbsxJu7-jY00E.roa (hash: GSyQIbiBxY1fX31ira1MjHAesY8aGG/De+BRbgOx2qc=) 11: J1hhtf3gTs8cmUIBfj_g7V7c5qk.roa (hash: Str6Vmr/NRskfnPMQpbp4pXOuly0BQP6BEJAk+C3Jm4=) 12: NmY3Cr2hTmLmrJ4cFR4Mbk6O2f8.roa (hash: 3vnVC3SAIOmJWTDh9HP/nluckKtdf1CaP0omwy3IFuI=) 13: OKEgLmB_4ei0G0uw28caa8G3iPw.roa (hash: w8AbZTm+uTbT/9sxDIvDozMxX1t2Mfifb772t5Mh9zE=) 14: R10kzlmrHw9WAyAvK8-iRqbaBaA.roa (hash: XqcsBbYv+/IKS1qiI7jigpCKSJFXUkDBvTdSLdA8/XI=) 15: Y8BxdOG4E83LClpFnmkd0iyca1M.roa (hash: Ho2liFzRTVRlfVeCSm6qtB/bpgcQQigB8GNzfsMibJM=) 16: a2k-bxYcmm3kHfce2aU5FLKv-4E.roa (hash: Idu0EAICE2kNK56b/YbhSusdo/ak8Y2nDki9I5fmt4o=) 17: c_BvljorzCC91xKN9SXmWQ8PZtY.roa (hash: tm7MMwTrRhcL2zqzjy3kf+lPaC41oVQy/y652O4EMmQ=) 18: dfRwLnd7H7w_OVSLP8kz-J08HvU.roa (hash: FPuBb8+13HSQLJU9CpclAE8hKmqwuolZDcDf1PJudFQ=) 19: dtKVxUHGrAkfKqCobm6KXtRp0E8.roa (hash: 83vvkJxmaytP0GLHWBg53bMWqx3mr1WoGbL8xTTfoKE=) 20: eobitmCPSS93nZyZrt6H4tzwfb0.roa (hash: LnX7b8s+/yLhrNscuvO3jZ4nog0puSgY6ARRzJz2m78=) 21: ivaRRc1DWzJYCrjzmD7SPHajmck.roa (hash: fbqrU3gLkOHm9Lw9w1LVFyGxETrg/SyMnPOPP5yhyR0=) 22: jI6_drTo1PWnufC4oiNHSu223XA.roa (hash: Ni1IeOuPqg+nIvkmnYu+vOs52S50BNNNPDhfXtty6xU=) 23: mGwtUKTp1lrZYeXsHRygkPmeOjs.roa (hash: IXq7ynhykZbaN/EO7syj+TvBCLuqP/D/GJNTwgfgRF4=) 24: sbxNn528r3_zzXNbv7r2uOHDqfE.roa (hash: qSGnUn/ItuImBIisLX01AnYKn5TPmOvO3e69Iv0XU/o=) 25: t1LshJm8xEx-87XbFhNq7UZM0do.roa (hash: qxpyfe2Q7y0I+2bbmEdIUUqvN7x6u3MnxvZPf3Uv5NQ=) 26: tYTCXjdd6a-Lr6S2LTPv_OpkXmc.roa (hash: GHmsgW330iSp8of0BZELcAg4KzkX+Jd8lu+4iluVCwo=) 27: xNs_MXSsSqQhb7POy7D96jrbBfE.roa (hash: Kqde4DiWfgPpGL5KKhrxdr3e5I5JwanO0Au/BQUqUf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 07:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:be:93:03:db:b4:d6:14:e6:4d:4f:79:56:f4:7f:b2:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Validity Not Before: May 11 09:00:27 2025 GMT Not After : May 12 09:00:27 2025 GMT Subject: CN=7e27a74cf0d9a8e5dad88124e392ddf17d75a7ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f9:31:0a:47:73:ca:8c:31:05:f6:d2:d1:17: ce:42:97:41:e7:84:81:42:59:8c:be:1f:b9:1c:e0: e6:e5:36:33:d4:a6:da:11:4a:09:db:78:6c:9e:61: 89:6d:0f:b9:7a:a2:d9:fe:30:b6:b8:4e:2f:b0:cd: eb:76:bb:c6:39:28:9e:6c:d2:c1:a9:8e:9c:c4:5c: 1f:0b:4b:76:8c:f1:4e:93:1d:27:d7:69:49:e4:55: 1d:ab:dc:fe:e8:23:a3:2d:5a:69:ff:62:89:59:26: d0:47:6b:78:5b:11:94:15:2b:16:37:54:13:00:c5: da:0c:3b:fa:39:5b:57:2c:00:eb:eb:14:94:ac:97: 0f:9d:b2:8f:e0:26:b3:65:6c:d2:29:ea:89:4b:79: b5:a1:7b:57:d5:d4:3d:96:9c:90:0a:b4:96:bd:0d: 0c:67:b8:3c:6d:d8:fe:11:22:08:71:fd:2e:17:66: 8a:22:bb:f2:46:d2:3b:25:36:32:78:7e:b2:3e:2d: 32:22:18:f1:a8:55:cb:02:2e:9c:39:a1:4d:db:de: 46:29:53:12:ef:66:f1:bf:97:34:e6:ee:56:c5:71: 30:72:6a:8c:08:ab:db:63:bf:4e:fc:7e:da:3e:b8: 87:0e:d9:e2:b3:fc:1a:3e:39:c8:4b:b5:fd:6b:f1: 0b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:27:A7:4C:F0:D9:A8:E5:DA:D8:81:24:E3:92:DD:F1:7D:75:A7:EC X509v3 Authority Key Identifier: keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:a7:75:05:cf:7c:b4:33:35:3a:de:27:03:c7:db:cb:1e:a0: 06:b7:7e:01:58:53:ce:a4:c0:0c:ad:49:5f:e7:90:32:ea:87: fb:42:c0:23:a5:49:6e:42:16:35:a3:fc:fb:ef:89:29:c8:df: f9:21:d0:31:ac:ed:88:18:fb:55:42:bd:06:50:78:04:63:22: 24:65:78:8b:a6:32:4d:07:6c:c1:cc:a5:42:5a:78:72:c7:0f: 47:27:37:97:31:15:c2:d9:48:35:81:b5:a6:19:b3:5b:44:39: fb:1c:76:b8:e9:49:62:c1:32:94:bd:a6:9e:aa:ad:30:2b:e0: b9:4c:fd:d4:e8:e3:10:22:ea:a5:22:9b:fd:da:d4:89:e0:fe: 7d:ab:28:70:ef:55:91:c1:80:01:fc:71:78:bb:eb:5a:a2:f8: 09:89:98:68:86:b3:96:9d:94:93:37:18:fc:8e:c3:b3:f9:a2: 53:d6:91:dc:bd:0b:cc:0b:12:cd:fe:d0:1e:4d:00:7d:8b:e3: 6c:99:08:5c:f8:54:cb:9a:a0:f9:7e:c8:c7:7d:5b:88:8b:2e: 0b:df:7e:22:cf:19:9b:dd:b6:66:79:46:7b:8e:bb:f2:06:95: 00:ca:2f:b4:2d:c0:4e:ca:f6:f2:fd:f1:6f:fb:63:45:2a:8f: b0:17:69:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa+kwPbtNYU5k1PeVb0f7JaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl NzM2NjQwHhcNMjUwNTExMDkwMDI3WhcNMjUwNTEyMDkwMDI3WjAzMTEwLwYDVQQD Eyg3ZTI3YTc0Y2YwZDlhOGU1ZGFkODgxMjRlMzkyZGRmMTdkNzVhN2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvkxCkdzyowxBfbS0RfOQpdB54SB QlmMvh+5HODm5TYz1KbaEUoJ23hsnmGJbQ+5eqLZ/jC2uE4vsM3rdrvGOSiebNLB qY6cxFwfC0t2jPFOkx0n12lJ5FUdq9z+6COjLVpp/2KJWSbQR2t4WxGUFSsWN1QT AMXaDDv6OVtXLADr6xSUrJcPnbKP4CazZWzSKeqJS3m1oXtX1dQ9lpyQCrSWvQ0M Z7g8bdj+ESIIcf0uF2aKIrvyRtI7JTYyeH6yPi0yIhjxqFXLAi6cOaFN295GKVMS 72bxv5c05u5WxXEwcmqMCKvbY79O/H7aPriHDtnis/waPjnIS7X9a/ELqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4np0zw2ajl2tiBJOOS3fF9dafsMB8GA1UdIwQY MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt OGMxNTM5NjViYWM5LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5 LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKKd1Bc98 tDM1Ot4nA8fbyx6gBrd+AVhTzqTADK1JX+eQMuqH+0LAI6VJbkIWNaP8+++JKcjf +SHQMaztiBj7VUK9BlB4BGMiJGV4i6YyTQdswcylQlp4cscPRyc3lzEVwtlINYG1 phmzW0Q5+xx2uOlJYsEylL2mnqqtMCvguUz91OjjECLqpSKb/drUieD+fasocO9V kcGAAfxxeLvrWqL4CYmYaIazlp2UkzcY/I7Ds/miU9aR3L0LzAsSzf7QHk0AfYvj bJkIXPhUy5qg+X7Ix31biIsuC99+Is8Zm922ZnlGe4678gaVAMovtC3ATsr28v3x b/tjRSqPsBdp8A== -----END CERTIFICATE-----Generated at Sun May 11 15:25:28 2025 by rpki-client