$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft File: iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json) Hash identifier: 1jn2tIx+BCRLiBhgjdIq6kmC87z4Iy2Sy/NWzK63+uI= Subject key identifier: 3C:D7:34:E2:20:76:8B:09:9D:67:6E:D5:ED:7E:A5:FF:13:42:C1:0F Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 0196A449A0264C2A7D83A4D86467F839313C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft Manifest number: 153B Signing time: Tue 06 May 2025 06:30:10 +0000 Manifest this update: Tue 06 May 2025 06:30:10 +0000 Manifest next update: Wed 07 May 2025 06:30:10 +0000 Files and hashes: 1: 0EefvGTe-CgGPi3LClLG8zkw2Bs.roa (hash: pQ8xUeInwth0hYwUoerBSXG2avCvXMU1nbOP1RalcsE=) 2: 1CEIIYZi1BNa3oTJqmH_tyPw6vM.roa (hash: F6BLpQ1sJ4914gt6UycenluwMGJ0KK1fHxsO2ar2skg=) 3: 5VtvZUZnOiWWHOq4Bzt3fR-Uvtk.roa (hash: 0aZFtVAEpAa0F5d0HclFHuicWqZJwsnLbj2r28DzGwE=) 4: BR0WpUqyVlLFgCU-al1zzwTeWvY.roa (hash: YHXk/Q5pzaU5vFP/0ClS3O8XoVVM2YYOGsR9O85YzI4=) 5: CSCVpnD9UZcOY9dh51GQDiQtUDY.roa (hash: HjUHDCqkZKlp4khp1k6PV1nRwKGQqNvxyYIzG+YWGAo=) 6: FUSDgc58t7U4fuucmEPuEjO5Yhg.roa (hash: aS1RV6Hjz0mszrBpJALZA+zpAxzsSz5luvIAMzBTdPk=) 7: SVFExGqmN2rWr0pdHn2EBcXlt5k.roa (hash: YNeTDKYu1kVI5UITAgJVP4E8+UH/BHxBF+QWa3NBqu4=) 8: SyMnl-k5UucfnTeo_SQYwZ82xYs.roa (hash: IFFK24iMwjJA7VBKRvD/UabtondGciIM3nxVgegj8qk=) 9: T3dYaQ_itGY8sg6N2piIETo4lNY.roa (hash: jr3iaS2h5oKJUS7JXvE4JXbV33q5i4nh8t/0oFzKNAE=) 10: UkcXR5GY1oJE8ql6EfUayHGo-5c.roa (hash: 7ieqNXiHBu4w3yGmh/1MmL46uIjoL27ZQaAgb0zIvtE=) 11: Ur9khRK7hCXitL3VAcUAYAEvce8.roa (hash: 9hx/PwnKPtBM0vXR/kqUYRApb3bCcTtpcvT1ZKRuh8g=) 12: UxCcWDIpfcmIxF4GEQqbNBWBqbU.roa (hash: d6xT2AVAtqIrXTNYslVlnC6liJTON2/El6rs3gVpHJw=) 13: ZNEy3K2T14RzRnaZT87Xby8zPg0.roa (hash: Z6txybaZLKHynJqOdkdyJnlPVvcmYHBvv/qyQ5MOK7Y=) 14: ZZ_S8bbdhWqNksgGcq7TK0C_O6o.roa (hash: cZSS45yPpwSAtlNorKOcZLYVgsI7c5iH/VGntyl+CPQ=) 15: gPum4DXKDMJ6BVlCRX41E_z1RtE.roa (hash: m+nmj8yFxwPSU4MC7F9QT+i5Cc+XxFDvykCgFkarI9g=) 16: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: QMIbyjMjE/ZNv1nh0BxLBfF7AeWS9gPAIsd8WOeQBC8=) 17: mY1ufwtGCljFF7lZ6CWRsYHr8SQ.roa (hash: g60/pAqTVBNRMpLoOtOl1CqOXpp6KEeIdA1Y9Rm5TG8=) 18: q0qjnVdpTQz5V4Wx6jtbrFMXBPM.roa (hash: ngAOffGRyvYQRrwPTGAOl5xDF8KPN9jghcxNAguGiMA=) 19: rTie_7PEv6-re-3-oCL-n4T2Vz8.roa (hash: k418fDoA6+KZQZvl5i4/4Kf1761FasBs1TWPOk46NN0=) 20: rupNQnzVXpHhZGo4k4orZsL9fsI.roa (hash: Sef19YxuD467IYWmHT5hBmXK8CI1St5Uce/fkYmJFrI=) 21: sjMZT67l8DT5c2OCQ0eZwsJvZOs.roa (hash: eE5iDtLrCkQogodNmuQSyO46uKWAFjSRZ5se0Gx5RvI=) 22: uMzAGcYGyFfYg0xRGgxEE1Lf-Og.roa (hash: RhGx8DQbnjV6ldE2V5DKIbOmTIylu6VhP3FkhLKG4ms=) 23: vpnzE36sGjGpThv2cGB-8JWt7A4.roa (hash: QD7ZgcH/2KUBCt+7GKIhMXGxia9FaAN7lUMkf7xzXUQ=) 24: wpVyG2veNXXiqvd9qbb56p6RhMY.roa (hash: A6UqxkMUpX9ZIGVbEYAfKZvH4lu0ByMng2y+/s3lvEU=) 25: yeb6qJrxDHxENE-5-YT0Ja7NZ40.roa (hash: oK8BFD89TrExTlZbJ/In7+i40KH2MurB9MBJtryRnzo=) 26: yjNjQum49zE8oaEbbGwNjU1csGk.roa (hash: a+ZHTvcXLlXULObWqZE5DGx1Uba0NvfCvm7QVFQB2fM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 04:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a4:49:a0:26:4c:2a:7d:83:a4:d8:64:67:f8:39:31:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: May 6 06:30:10 2025 GMT Not After : May 7 06:30:10 2025 GMT Subject: CN=3cd734e220768b099d676ed5ed7ea5ff1342c10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b4:21:5e:85:e0:cb:6f:da:8d:f1:5f:8e:f6: 98:d0:36:49:20:1f:a6:1c:53:fe:a2:27:e5:58:7b: f5:f4:c9:b9:9a:ee:3c:d7:25:6c:8f:52:69:06:42: 08:44:3e:0d:a8:a2:93:e7:b7:bd:c2:74:c0:1d:9d: ae:d9:cb:9f:01:d9:df:c8:4d:cc:af:f9:b1:84:6d: c2:35:61:1c:a6:84:34:4b:78:f4:82:28:ee:d4:34: 0a:ac:e2:ea:e1:10:75:29:97:80:64:38:d4:78:bb: 85:f6:08:6a:26:35:86:ae:02:91:18:fe:f8:16:96: a4:0c:3e:7b:47:13:ec:19:96:66:1c:0e:6f:75:6f: 03:e1:56:6d:4d:74:2e:57:fa:b1:a3:98:8f:03:27: eb:a3:58:63:bb:6d:b9:d9:cb:e7:3b:22:bd:02:74: ce:10:8c:8e:64:d6:0d:dd:22:1d:e3:e8:d7:19:c1: eb:84:e2:5f:48:9d:1c:e2:ec:fb:b1:bd:49:a2:76: d5:3d:b6:c2:39:80:bc:d9:98:82:65:4f:14:09:56: 3a:39:98:a7:19:ab:cb:eb:d6:a4:6f:7b:b3:46:84: f4:e5:a4:c5:b6:bd:94:10:1e:e5:ba:c7:59:fb:7c: e7:c3:e6:0f:f4:6d:12:82:86:ce:93:88:bc:a1:52: ec:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D7:34:E2:20:76:8B:09:9D:67:6E:D5:ED:7E:A5:FF:13:42:C1:0F X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:a8:eb:2e:c8:7c:b1:73:0b:23:ba:a8:97:71:7a:86:fe:a3: 44:70:3f:b5:4a:be:f4:93:17:79:bb:7e:7b:92:05:a5:0b:d6: b2:75:36:47:a6:90:59:b6:19:38:70:7b:f0:46:3b:ba:f6:21: 7c:71:b1:c5:32:4e:d3:2f:c6:77:4c:87:46:c8:c6:47:4e:c6: 85:08:16:4a:39:f8:03:ec:33:7a:2f:f6:fa:30:b5:0c:1e:9a: 02:9f:76:1c:2f:63:24:ec:d4:c4:6f:f9:40:8f:10:cd:c0:c6: 34:1e:85:c2:91:d5:2d:51:53:23:87:a7:e5:ad:1a:49:51:ed: e3:aa:6c:02:53:57:f5:6e:a7:71:92:2a:99:3e:a3:95:20:a6: 58:e0:9a:05:52:4d:d6:0e:22:af:8f:6b:b7:0c:c0:64:c1:53: 31:af:e8:62:7f:83:75:27:84:bf:57:41:04:d1:3a:56:90:c8: d2:7f:26:86:81:2b:74:fc:51:c7:95:f6:02:e4:86:3f:a7:bd: c4:6b:1e:7a:99:3f:fe:88:e9:1f:7b:7d:10:51:c3:07:fe:d6: 42:d8:88:4b:5b:1a:0b:3f:95:13:d6:24:8a:5a:5e:36:6d:1c: 21:00:c0:2f:26:74:4f:90:18:75:6b:b1:b2:07:b4:0d:69:fb: 89:56:27:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZakSaAmTCp9g6TYZGf4OTE8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjUwNTA2MDYzMDEwWhcNMjUwNTA3MDYzMDEwWjAzMTEwLwYDVQQD EygzY2Q3MzRlMjIwNzY4YjA5OWQ2NzZlZDVlZDdlYTVmZjEzNDJjMTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbQhXoXgy2/ajfFfjvaY0DZJIB+m HFP+oiflWHv19Mm5mu481yVsj1JpBkIIRD4NqKKT57e9wnTAHZ2u2cufAdnfyE3M r/mxhG3CNWEcpoQ0S3j0giju1DQKrOLq4RB1KZeAZDjUeLuF9ghqJjWGrgKRGP74 FpakDD57RxPsGZZmHA5vdW8D4VZtTXQuV/qxo5iPAyfro1hju2252cvnOyK9AnTO EIyOZNYN3SId4+jXGcHrhOJfSJ0c4uz7sb1JonbVPbbCOYC82ZiCZU8UCVY6OZin GavL69akb3uzRoT05aTFtr2UEB7lusdZ+3znw+YP9G0SgobOk4i8oVLskQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzXNOIgdosJnWdu1e1+pf8TQsEPMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeajrLsh8 sXMLI7qol3F6hv6jRHA/tUq+9JMXebt+e5IFpQvWsnU2R6aQWbYZOHB78EY7uvYh fHGxxTJO0y/Gd0yHRsjGR07GhQgWSjn4A+wzei/2+jC1DB6aAp92HC9jJOzUxG/5 QI8QzcDGNB6FwpHVLVFTI4en5a0aSVHt46psAlNX9W6ncZIqmT6jlSCmWOCaBVJN 1g4ir49rtwzAZMFTMa/oYn+DdSeEv1dBBNE6VpDI0n8mhoErdPxRx5X2AuSGP6e9 xGseepk//ojpH3t9EFHDB/7WQtiIS1saCz+VE9YkilpeNm0cIQDALyZ0T5AYdWux sge0DWn7iVYnFg== -----END CERTIFICATE-----Generated at Tue May 6 09:46:11 2025 by rpki-client