$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft File: b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft (raw, json) Hash identifier: tEL20mrWXTZWCHQESov3T+HR/3KNVkn9QjQtu8eknlc= Subject key identifier: FD:0D:8B:63:F8:C9:C0:45:CB:18:99:34:2E:59:C1:1E:D3:0C:B4:60 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 0196A12D7A54439C9C959739FA4247D0DCF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft Manifest number: 167E Signing time: Mon 05 May 2025 16:00:34 +0000 Manifest this update: Mon 05 May 2025 16:00:34 +0000 Manifest next update: Tue 06 May 2025 16:00:34 +0000 Files and hashes: 1: 0lZ4WwipJ-KvsXe4ZGys9NACiUg.roa (hash: QrFmzpIm4MczSEVI5hA5LdZ2rdAAM8rVP77wt/9ZMEs=) 2: 1-acserkdaRwKD1ZOt9mnNNr_tGk.roa (hash: 6hEtVWrVnbgrhSvEQ68FfjrHt5WP9Jfl8fiwkMXiUDI=) 3: 1LQXa4ANpgHvslxHuyyEm5vxexk.roa (hash: /ybmozrmNmuywWy78ep333r3HhF5M6Ci5OTVu5NmZgw=) 4: 2NzLzMOeFuBmYcrjiyDs5_DFYgI.roa (hash: UjwWdB8k577gYTCkJHn1rSTdVabHuDeCfYMOytlfWbk=) 5: 5ZZSm_Fa_pFTl_cyAdVd2h8Ixgc.roa (hash: BkNNieru96Ok0gqv++x1NXt1ZiRd17b/+Pd802cp/Gk=) 6: 6IiDiISjYrNpR4mQkAdEju6JQSY.roa (hash: Cnl7r+OgkvrIBS1Qn33bZFCdLCcP2h9Q8sTKzfG52Tc=) 7: ADGW21X--XpG2WBIYj5kIM1Z0-g.roa (hash: 9A8sa2id1+8ByNAMewXe7FMcF817DiqS5V9Qri3bdTE=) 8: B-IjjR9tvyjopcA-sdYLHSmRZwI.roa (hash: c2r6B4PS5EL7VowbuTt5EAkwtbWLcnpUd26TEegjNtU=) 9: BScWdljv0AQRTZyIvglOZ0oFBE0.roa (hash: S79FUTXfJV4hESBGmFYG1R6KYPNaNufbRNEZRwYtCR0=) 10: BjGl9Q72g_Ec259If-Jk56BpizQ.roa (hash: ZmMAA1yu7c6D1XkjZod31MG9U+mujHQhvFcz7QsWW3s=) 11: HT9n5XGxiSRGbixWv-3kz0mWWh4.roa (hash: iHpx3TCWPvIoST4OBGoxr/waO+FYhNZeiOZuEYotXaU=) 12: JW8AyJFJPkQ1ZGONgpNYjy_UapU.roa (hash: 7j/1BSk7JznLZDNSRYDx/seCvE0WvECGanSxETBdFRU=) 13: Jo9_8piUxg2wee4-7hJARk5rotE.roa (hash: vqLLjwPcKVEzxJ3q8XfOQ/ryqpCfo/jKRQDYOnt6bJ4=) 14: KNlAoqyQzi7-1u-gk423fXd-fqk.roa (hash: d0CymcnZWf6Tqsq8jUmID0nMStCCIzwj424+Qb4S5/Q=) 15: KvaEQEmYbbYuHslL-MGtAyo-m2o.roa (hash: X5W6uO0llg8M0/nBFAkOWtE1oQ1OqXNWwnS/1SvBYmU=) 16: MAtFsiCs-1F-523L9frydALwyy4.roa (hash: 2oSZs+/2GJf0TVw2qN8JKhmCjL7EV9WGTizvjqbOhwQ=) 17: RSdOaSCVA6ogR36fNmSEfGUHdAQ.roa (hash: IUUzQDet8SkqHV+8ZTZJqpqrDR0834YedORjDV1jlUQ=) 18: RjTJ2EaIZfE051tXU0vuScbwBZk.roa (hash: TowX0WWdHApvFSISjmRiH2FsG9LnVvVrELSSI98m3So=) 19: S41Cd1AR9Z2hLvzGr_WeJ_4qMlU.roa (hash: GjF5x01fdvJu7nYuxxfVRo6MwcjIthDWhsqgii6EbWo=) 20: Yed44AUAbqpY6pzy3aMkteNGQ_g.roa (hash: FZrMifpRX5lyJO47EzwgH+UZbzIMubq2K2YsFTZ5WZI=) 21: _8ZQWuUaGZ9feBTbscjwZbx48pM.roa (hash: TNfC23AEZS88V+zreqHVoePX0RM2CaFufz271/b9FGE=) 22: a50NC_KbZ3PAjC1mndgRcsuXyn8.roa (hash: s97CymR7q1YMF5NI8Qg8aTQzotgVHDsGx5ZdFa/dmDM=) 23: b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl (hash: l4vYMCu5LVuvi/fKRM/3ChI3M8kUxIZB59uZTRHEZCo=) 24: cKm65Eb_WOsg0rJgahrGEn-QzNM.roa (hash: pkezS3MrD2s+itmukvNwqj5ekac2E5fRWqLx+Gd03qs=) 25: hcWCxsNXJ9yg5Hoze1tY7q8fcf0.roa (hash: Cm/pymKAKLUiskldZpXb8kvJL0aycJOlWqVALOBQDjg=) 26: ho1k2yRdFnPmCNRpB2Tg5O2wzJ4.roa (hash: ZebGpLK3Trfbb3V8wN+nAw9FGpAAWr9NeNzXmkfHzVM=) 27: l5eLjRRQiofbgCfgGWC1ESLA0cI.roa (hash: A6wsuiAvc2IMJwsxkxrsjHGVGqfe958bhgt4EvG4y/o=) 28: oyOwytjNRcSSmC0Uz56t5B0Pn0U.roa (hash: bjJY96goKiZV3xFO6+9vadLGgV/G2i2Ywu0z1Lu4FeE=) 29: uBiCjzsr4xU25o2Q9uEI8pAvGi0.roa (hash: ndWd7SzVAqTlN/7xiWhTaXhcDTar2hjRQoFL1p1qfwY=) 30: ufMb6wR3-E5RmET7A1j_kyC98yE.roa (hash: gPkP6buBoCpAzxv7wA4Pk1Ot4AuhRIDOHg0XqkcOCyE=) 31: wetz4Acd1bvXKIw0IFEa3Tku2us.roa (hash: jIOF2ZXxvaNxLYX3vf9U9rZ9v1QfPJU/tvXtAQtnoDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 May 2025 16:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a1:2d:7a:54:43:9c:9c:95:97:39:fa:42:47:d0:dc:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: May 5 16:00:34 2025 GMT Not After : May 6 16:00:34 2025 GMT Subject: CN=fd0d8b63f8c9c045cb1899342e59c11ed30cb460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:30:24:81:00:b0:63:83:bf:f8:f1:ba:df:57: f9:88:c6:ec:80:3e:ac:4b:0c:54:a7:cb:c3:dd:ba: 0a:8b:d2:8e:54:b0:46:1b:f4:bb:07:40:24:7e:6a: a4:86:5b:1b:5c:d0:64:79:3c:3e:0b:a9:c3:c0:e8: 49:b0:e4:01:45:89:00:25:dc:a4:20:f0:15:b8:28: 54:3c:81:2e:31:2c:db:27:69:e6:b1:49:2c:78:27: 26:79:24:20:21:a5:09:7e:10:09:16:6a:2f:11:d7: db:45:be:89:ce:ea:36:b9:72:49:a9:30:bc:6a:f9: ba:32:32:ba:bf:38:a5:3a:bf:c5:12:e7:7c:d3:cd: 7a:74:78:fa:d9:d5:3e:ed:e7:ae:5d:d3:c8:c3:10: 35:71:d3:d3:0d:51:88:48:dc:9b:bb:ab:e4:1c:61: 99:55:ae:05:86:e5:e3:ae:7b:c1:0d:b5:8a:01:2b: 4a:01:10:94:52:90:d8:64:dd:5b:31:bf:be:d2:09: af:9b:11:73:44:1f:af:9d:51:03:ab:a9:77:26:b4: 4c:ec:85:d6:80:78:1c:21:57:68:9a:71:09:71:01: 23:03:3e:f2:29:12:ef:92:c2:94:54:81:68:09:20: b6:7e:fd:10:58:92:54:84:33:9e:c4:19:f4:f1:92: f5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0D:8B:63:F8:C9:C0:45:CB:18:99:34:2E:59:C1:1E:D3:0C:B4:60 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:09:5b:83:ae:c6:bc:f1:4a:a3:d1:ba:73:ff:3d:0a:f9:cb: 67:ca:1c:ae:45:63:5a:e6:c3:6f:80:bc:73:61:58:0b:35:fe: a6:47:8e:e9:14:87:74:25:79:ea:30:2d:84:94:75:0f:8d:fd: 3a:f8:3e:57:d3:b8:9d:42:97:28:00:83:f9:d1:b1:c1:73:0f: bb:f9:99:65:ca:96:0b:34:6f:52:7f:f6:43:d0:74:04:e6:e8: 6d:ba:67:1b:b1:42:cf:b6:f5:e8:6c:c1:5d:0b:dc:3e:7d:83: 6e:6c:f9:91:84:c8:07:01:23:e1:0e:2e:30:1c:33:20:57:e0: 3c:cf:17:53:89:1a:8c:b7:dc:b4:ed:34:e6:31:bf:1a:ec:57: 05:e3:f5:28:9d:e1:05:50:0d:ea:27:ab:0f:c1:5b:c7:48:7c: 47:c1:b2:87:af:bd:d6:85:68:de:c9:d9:49:eb:d7:f1:e3:d4: b2:04:fd:65:40:c9:b7:c3:32:a3:2c:53:d5:7f:66:18:7d:72: a9:8a:0b:05:fe:34:4c:68:f3:32:34:b7:05:79:3e:ca:ee:85: ac:43:94:e8:85:99:97:42:58:bd:da:d9:d1:07:20:ae:6f:b1: 12:5a:36:52:ab:d2:e6:cb:c6:29:0a:35:ee:12:61:67:3d:b2: 72:7a:19:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZahLXpUQ5yclZc5+kJH0Nz2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUwNTA1MTYwMDM0WhcNMjUwNTA2MTYwMDM0WjAzMTEwLwYDVQQD EyhmZDBkOGI2M2Y4YzljMDQ1Y2IxODk5MzQyZTU5YzExZWQzMGNiNDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDAkgQCwY4O/+PG631f5iMbsgD6s SwxUp8vD3boKi9KOVLBGG/S7B0AkfmqkhlsbXNBkeTw+C6nDwOhJsOQBRYkAJdyk IPAVuChUPIEuMSzbJ2nmsUkseCcmeSQgIaUJfhAJFmovEdfbRb6Jzuo2uXJJqTC8 avm6MjK6vzilOr/FEud80816dHj62dU+7eeuXdPIwxA1cdPTDVGISNybu6vkHGGZ Va4FhuXjrnvBDbWKAStKARCUUpDYZN1bMb++0gmvmxFzRB+vnVEDq6l3JrRM7IXW gHgcIVdomnEJcQEjAz7yKRLvksKUVIFoCSC2fv0QWJJUhDOexBn08ZL1mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0Ni2P4ycBFyxiZNC5ZwR7TDLRgMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPwlbg67G vPFKo9G6c/89CvnLZ8ocrkVjWubDb4C8c2FYCzX+pkeO6RSHdCV56jAthJR1D439 Ovg+V9O4nUKXKACD+dGxwXMPu/mZZcqWCzRvUn/2Q9B0BObobbpnG7FCz7b16GzB XQvcPn2Dbmz5kYTIBwEj4Q4uMBwzIFfgPM8XU4kajLfctO005jG/GuxXBeP1KJ3h BVAN6ierD8Fbx0h8R8Gyh6+91oVo3snZSevX8ePUsgT9ZUDJt8MyoyxT1X9mGH1y qYoLBf40TGjzMjS3BXk+yu6FrEOU6IWZl0JYvdrZ0Qcgrm+xElo2UqvS5svGKQo1 7hJhZz2ycnoZlw== -----END CERTIFICATE-----Generated at Mon May 5 23:52:38 2025 by rpki-client