$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: UU+itunjRIKKXiCXEQUjnTC9ZLHB9++jjf2Nc6f6Ukw= Subject key identifier: CE:77:05:5E:4A:F0:E6:61:2E:C2:C9:CB:18:3E:22:51:EE:CD:E8:72 Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 0196A954CBAFF60E296358B33613DFDAB10D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0B8E Signing time: Wed 07 May 2025 06:00:28 +0000 Manifest this update: Wed 07 May 2025 06:00:28 +0000 Manifest next update: Thu 08 May 2025 06:00:28 +0000 Files and hashes: 1: 249gTQMSJSpG-EMBCDNkFZo6KfY.roa (hash: FM2w6rRpmRNy4pkvq/ltjXR9cpyAy1qnATg+Or8+D7c=) 2: 6TauPTrrYu2XtkFKKlQ2u7VDDno.roa (hash: n6010YujWfquA7qOkV2BHT4bCszagBkp571M6qN6nZc=) 3: 790iVL4e4fee91oD970D0-w9Sb4.roa (hash: BsO1v80PoevYr29+BJ5jHFvk2e9qzzdheuF5aYuPG6s=) 4: 8iIYolCxGRxz8TNi8KfyB6eNhzo.roa (hash: qCapP64kycDhbf/1rZ0laRWKXpyjDof/0V3kjvsJoMk=) 5: Csnk3a3ep1Kuhq_uYIPFt9oEx54.roa (hash: pQI4ia2pZhXHZ1e6yhDMKY3ec6GDJA8BN0tKEQGAjHE=) 6: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: rj3rPrOg6u9+TOObvkks6kiMpv/hDOKzUBpH4Ab5rp4=) 7: DqIwBz09GVkZK_gZ5I10qjJf_ys.roa (hash: c0iRzQrUBzV64ZvugD7r5Tge4OFGYDIQjIm+fC8puK4=) 8: ECqrLMrFfD90pszf7knR2cpQyh0.roa (hash: Q3DUlwJygjUeoWaRH5s8fB7GS7FOmUc/yzv3gDOfLYQ=) 9: GDKqvDV3tg8euG7iA-40pDu81dg.roa (hash: DIPUgYEMtsUW2SsY0gpVq2Amy3DeiC7nGWJEdov3OAc=) 10: Gv5HrL2f33_QVcVgXo5CsM0Vaho.roa (hash: LEWORZbggYg+nZNcCLA8VUA/7SebS6hs8+TL4nNmjcg=) 11: Iz1cAsiOcE8UQ7RzBpd91jP9zfM.roa (hash: 7ncc7VVGK3EeSgfea7I75g/pz+C+ycZ/Uc4TtbaWC0s=) 12: Tfg3jqM-y4B9_0O830RjMgiNMwI.roa (hash: KhUTb4LC7xdbTloQRmriQdzEeWTgLwDx3/uTjpbvQFU=) 13: V2Ei32pldnvEfX7-MOV98CBbvqs.roa (hash: pkd2u2AiMIDj1vMjt09XptY7JsRn5R0rojUcZBXfHoY=) 14: a55ksyXQIpivD8Gjg-hOowj4guI.roa (hash: QSYDUfnNAcf2/9VpaYdVd8L7gvJcLWio5hJOW44x6Xs=) 15: aw9onhWyE0X_G2dqIAr21daa77Y.roa (hash: x+QX04yDVmZf+2LdMkeQARN3ELWJN+aDlPdYgim8Xno=) 16: bunFK9av8RfknnXIgouVNVSj7lg.roa (hash: oaHs1Qr4+X8d39BaWoE1d0HAMovpW6wQdYQeMQErL34=) 17: dYTB5uFARs2s4EvY2l6JyFsQr8s.roa (hash: GAn94IfRAoXkQ0mUCSIrD+5VLnBxIQTLNyCWkmlcU4o=) 18: e8JWpozjp2CQVeh0fKR2of1rmnU.roa (hash: cncyccKFGSSxuzQyK2QlQLGesHp6P7TKw/dYGMrOaLM=) 19: hmab6__F2XjPI4pz-S7ZDMsGfQ8.roa (hash: VKioes1rRTD3dBB9IXmj0I4YiJbzOl3bkffS8nKiVMw=) 20: kK9iFD86F2TbKF1-MK7LXjXrS2w.roa (hash: qP4mb8DT5u0ulqTppD9Fz+HOfaj4p6ZrC8wxXFNUrXI=) 21: lgBmfJ4pdpPhLUFGbohh0OwY1ME.roa (hash: x8hNwusXBAvn6wxypmaX2FEwzDRNl0nacxt9bBpq2Fc=) 22: nEtni_xbFe8uMKn7lNre_DGe-iI.roa (hash: H6QijqDmjL6blsOSOiprWmtN5FAUxeo34Tfbyral+Co=) 23: snhgZyKIl81SdGEMa8SNezN2B-8.roa (hash: q+Juob+GqX3pjwEyROSsOIkH/g4f1ysryJqAil4DeqU=) 24: t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa (hash: moTeQKGuQJjtOuH9bwQLJXR1uXdXDyAyV/k+LcsmXkU=) 25: uHW8s4So2LMq5MxaMXPpI-lhJfA.roa (hash: MnMGvcSAZicv0Yn3QAwx2n0+uUqytuFdlE7u+YN2W7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 May 2025 06:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a9:54:cb:af:f6:0e:29:63:58:b3:36:13:df:da:b1:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: May 7 06:00:28 2025 GMT Not After : May 8 06:00:28 2025 GMT Subject: CN=ce77055e4af0e6612ec2c9cb183e2251eecde872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8d:e9:28:69:b9:61:31:08:0c:e9:5e:48:ec: fb:67:23:94:8c:2c:2f:05:e3:a4:87:fc:c7:f8:50: 08:c9:9e:67:10:01:c3:dc:33:85:d5:bb:c8:7c:1d: ef:1f:b7:9f:0f:66:de:6c:40:d1:29:4b:01:6e:07: 5f:ba:98:9a:39:a9:d4:76:1a:32:2c:cd:2f:ae:3d: 99:63:3c:8d:97:4c:b0:d5:42:ea:7a:09:ae:be:d9: 97:5a:40:94:59:61:68:cb:14:41:1d:9f:b1:f9:b7: 59:8d:f1:56:0d:6c:1c:cf:af:85:9f:3e:7d:b8:78: c0:e7:ba:53:83:5d:79:db:16:f7:5e:64:ee:40:9e: b1:1d:00:3e:03:e9:4a:d8:d8:79:e3:15:90:3c:a0: 05:32:be:2f:0c:57:b4:f5:f4:b8:63:46:ea:b0:ab: c5:9b:e9:6c:86:d1:d1:db:03:37:15:6a:c9:83:9b: 97:ab:dc:57:e6:a1:dd:ac:3c:7b:06:67:f3:88:63: 35:ab:6b:e7:20:1f:82:aa:92:b1:98:cb:ae:96:42: 33:dc:9d:b0:45:07:4d:e8:17:ef:54:c5:a3:d7:be: 22:b1:9b:f2:92:aa:8f:fc:cb:b6:92:60:f2:a9:5e: 04:8a:e6:fc:55:fa:82:5a:8c:72:1e:5f:ca:8c:04: a1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:77:05:5E:4A:F0:E6:61:2E:C2:C9:CB:18:3E:22:51:EE:CD:E8:72 X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:de:9c:2e:3b:c5:cc:a5:e7:9c:22:66:c9:bb:6a:61:08:64: 85:b2:62:d2:d0:3d:fa:53:50:7f:7c:95:43:96:a2:89:1f:0c: ad:16:d2:e3:6f:10:69:d6:b9:24:e9:55:6b:2b:1c:48:50:28: 74:da:67:b6:01:2f:47:30:d5:bb:f1:f9:44:7c:99:e0:c0:55: ff:8c:a2:0d:0f:4a:25:3c:e1:a6:b9:42:7a:0a:1b:bf:64:8a: 9a:a9:03:99:08:31:6d:52:61:d9:df:e5:6c:a0:c9:f1:1a:5a: 84:6a:fb:b5:9e:34:cd:18:e3:73:c6:26:ec:c3:15:79:bf:dd: 45:69:f1:b3:b7:4d:ac:4d:fd:36:df:fb:f3:fb:d6:4c:3e:5c: 33:aa:9f:97:fb:21:8f:b6:8b:26:31:bd:a8:cf:e3:3a:7b:0f: b6:66:b3:69:96:28:70:26:07:f8:7f:f2:b8:b7:f8:fa:a3:84: 49:0f:35:2f:2b:98:19:8e:90:06:59:42:2d:58:72:5e:05:6c: 06:15:8d:c6:1b:14:53:20:0f:ac:79:da:5e:61:3e:ec:87:84: 40:23:71:14:46:ab:90:a3:e5:72:40:d2:e3:5d:d0:3d:a1:f9: a8:05:e6:e8:15:59:b9:49:43:0a:5d:88:82:1f:88:0a:bd:34: 03:29:ba:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZapVMuv9g4pY1izNhPf2rENMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjUwNTA3MDYwMDI4WhcNMjUwNTA4MDYwMDI4WjAzMTEwLwYDVQQD EyhjZTc3MDU1ZTRhZjBlNjYxMmVjMmM5Y2IxODNlMjI1MWVlY2RlODcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu43pKGm5YTEIDOleSOz7ZyOUjCwv BeOkh/zH+FAIyZ5nEAHD3DOF1bvIfB3vH7efD2bebEDRKUsBbgdfupiaOanUdhoy LM0vrj2ZYzyNl0yw1ULqegmuvtmXWkCUWWFoyxRBHZ+x+bdZjfFWDWwcz6+Fnz59 uHjA57pTg1152xb3XmTuQJ6xHQA+A+lK2Nh54xWQPKAFMr4vDFe09fS4Y0bqsKvF m+lshtHR2wM3FWrJg5uXq9xX5qHdrDx7BmfziGM1q2vnIB+CqpKxmMuulkIz3J2w RQdN6BfvVMWj174isZvykqqP/Mu2kmDyqV4Eiub8VfqCWoxyHl/KjAShjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM53BV5K8OZhLsLJyxg+IlHuzehyMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYd6cLjvF zKXnnCJmybtqYQhkhbJi0tA9+lNQf3yVQ5aiiR8MrRbS428Qada5JOlVayscSFAo dNpntgEvRzDVu/H5RHyZ4MBV/4yiDQ9KJTzhprlCegobv2SKmqkDmQgxbVJh2d/l bKDJ8RpahGr7tZ40zRjjc8Ym7MMVeb/dRWnxs7dNrE39Nt/78/vWTD5cM6qfl/sh j7aLJjG9qM/jOnsPtmazaZYocCYH+H/yuLf4+qOESQ81LyuYGY6QBllCLVhyXgVs BhWNxhsUUyAPrHnaXmE+7IeEQCNxFEarkKPlckDS413QPaH5qAXm6BVZuUlDCl2I gh+ICr00Aym6TQ== -----END CERTIFICATE-----Generated at Wed May 7 13:45:52 2025 by rpki-client