$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft File: e6tsEdQRYtsDBoWPg-XmUSETKms.mft (raw, json) Hash identifier: BNl5psvnN9MEj6HkcaX1LY/AIBvHlOYO3hieJrglCxc= Subject key identifier: 9C:AD:F5:72:53:BC:C9:EB:06:F9:CA:F0:EC:8E:2B:43:84:8C:C9:00 Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b Certificate serial: 0196BEC9D27A2D024B83D4FBC752C9354195 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft Manifest number: 1251 Signing time: Sun 11 May 2025 10:00:19 +0000 Manifest this update: Sun 11 May 2025 10:00:19 +0000 Manifest next update: Mon 12 May 2025 10:00:19 +0000 Files and hashes: 1: 2d8VX1yVh54mGYkeHaHmzVPzhZo.roa (hash: cYGvSwaRPDVvS+Yq5KxRkZ+234/mFxXJD0RJHeKEEjQ=) 2: 6b7RGauO6Ww2qg1-Wbd88r4e3KY.roa (hash: BNLbnygG2YLNyjdpzyEOdm3sS9fiwqBzh1UyiyyKi+o=) 3: 7YhCJ28wSxD6190KY3LsL2-jFBY.roa (hash: TdMkcxbj/5amzDjgSgCV0/mP+NRcoQOnkj8hBKpX/xs=) 4: 7nwFZllPHib0qlQvTuec2CA4CFE.roa (hash: 6iCLCKodfg6yz/qGnLZGO0jH9QdQIo9q7VMD+L1L/38=) 5: DqWqWWUy5sm-gqrVg_icW_4BBuU.roa (hash: udwxBi6VLqH0wpPYZM7DDUViOUA0C7+6x2kGIlrfz08=) 6: OrQNPXkdwe2pNlw0XMXcSGXFk1U.roa (hash: rkSh/s+q1SivKdqDxSkXS4YbyDK7MKYmwkQaMtbR9jk=) 7: VIqwQa8sdjMY1fKlH4AVE9mX79Y.roa (hash: 26f1YQomtY0BiRJWIfpK3wiyYZ05du1tDa7jK3YouIs=) 8: WhRk9kZEyJiPe99DKK0ZIY2m2Yw.roa (hash: dZkGuR4JSyQqOAbFZVSVkGM0gVjd0Muk/GHy9vCkvbU=) 9: ZpHETbs_mb628Vvkity4w2NrOCU.roa (hash: urkAaKxvlWEgwM0Yu9Kvm1a0uJN5W0lCOvwAiki7CTA=) 10: awn21ccT2OEv9Rpfjh4DhmuTkhQ.roa (hash: 4BEd/kp3Xtbyx7WAgm3K/LeKVYfnYxJ84p9PC0RKbvE=) 11: e4ZdNT0b2vxOvlJIV_lJM64Zyro.roa (hash: 7puUfcu0W3Urnah55eUUcVEFPOq9IEAVasFR/gSe8IQ=) 12: e6tsEdQRYtsDBoWPg-XmUSETKms.crl (hash: RRrQyHT0sSP3MPFMc13I1TOmYU/OGYwuyXjcv0UUccc=) 13: njGgKFMMQYCCOcUQU9FLXyns41E.roa (hash: mOXzfRSGU/yibvLqtvjYzBQ5Qk8Adr7qWGYN92JzeoI=) 14: oH-KuzEBTT1Jj9jRIYSrJhWWDA0.roa (hash: OT0X0o4GJQ8rzCrOkZIscdAmjhqqaxADA5FmAXxEAv8=) 15: rtNgU16vRfGlfgaBLeA-LVfZYfk.roa (hash: 7272BB0beEnCZnBZky8uGVsVo4pWm3st4EyVIbuSPv4=) 16: sJY5TLcMj31ewK9GbQlhZPgo3bo.roa (hash: whJtUyjGYNm5NN1NGfkIMGWBSnbpfKeUHyqGZYB1kB8=) 17: uxodH0SAIfY7QfL1CFY1zsVKTTU.roa (hash: MFYf6i70IowcUu2vDq3Z87sRlyhGfcm0kqBV+8MGNH8=) 18: zM4hFOeWneXhfMX60yWm7dJXOqc.roa (hash: GFt3zcUn//9D4z2GQsOUfTRTmxcTyGZcc8EgQft8j9g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 07:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:be:c9:d2:7a:2d:02:4b:83:d4:fb:c7:52:c9:35:41:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b Validity Not Before: May 11 10:00:19 2025 GMT Not After : May 12 10:00:19 2025 GMT Subject: CN=9cadf57253bcc9eb06f9caf0ec8e2b43848cc900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:84:7b:d9:b6:23:af:bf:e2:4b:a2:21:c8:5f: 12:08:91:b7:2f:b0:c7:00:4a:50:72:c8:e2:18:69: ae:8c:d7:81:c7:96:03:72:df:e1:db:e1:09:36:21: 2d:66:b6:fa:0f:0f:31:bb:d6:e4:3b:b0:c8:08:8f: f1:17:5f:33:cd:5c:19:d9:69:96:7d:7e:1d:3d:14: 0f:45:cf:a0:2b:9c:49:63:cd:c1:f3:f0:5a:01:18: ce:44:52:af:c5:36:0c:e7:df:63:98:53:a4:d6:dd: 5a:8c:4b:ee:23:2e:4e:60:45:c7:3f:ec:23:df:62: fe:39:e0:28:4a:7d:f3:ba:4f:ae:a0:aa:f7:4c:a7: 43:ab:9c:61:74:9e:4e:ed:0c:4e:6e:68:3e:25:47: 38:f1:03:55:1a:ac:7d:06:62:28:75:de:71:2d:d5: a6:b6:f1:9f:25:05:ca:82:33:8e:2a:44:64:d6:d4: 80:32:ac:59:87:62:41:75:9b:62:13:d8:eb:1f:6e: d6:da:fb:38:bb:79:83:c9:24:c0:f7:02:71:0d:87: 6a:9b:5d:eb:68:08:fd:f3:ad:91:58:dc:77:bb:fe: 4e:ec:a3:42:38:4a:25:e6:a7:b6:36:5c:4e:09:15: 98:06:89:47:5d:ef:d4:68:03:cf:52:ca:e5:3f:e1: ce:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AD:F5:72:53:BC:C9:EB:06:F9:CA:F0:EC:8E:2B:43:84:8C:C9:00 X509v3 Authority Key Identifier: keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:6e:ab:68:f1:cf:06:d9:16:bb:49:9e:16:ab:00:5d:5d:88: 9a:7f:28:f4:ec:60:4c:b8:13:67:51:ef:a5:6c:ee:d0:28:7f: 95:73:bd:46:13:09:56:f9:34:dd:d8:d0:f5:9e:b1:fa:31:3f: cf:ae:b0:10:47:68:40:d3:67:66:95:3d:8d:0b:1a:f0:5a:0d: a5:38:34:24:cb:0c:41:96:9a:8a:00:a1:f3:69:e3:aa:ce:3a: 85:7d:94:79:b3:a1:1f:4e:ed:ee:6a:82:f8:6c:ce:40:28:b4: fa:dd:e4:a1:b7:77:b0:ea:eb:a0:dc:0e:95:06:34:9f:41:81: 83:3a:5f:56:65:f4:b0:48:1d:b1:82:5b:86:95:d3:f1:09:1b: 36:b1:23:44:b1:df:32:5c:5b:1f:6f:21:cc:0d:12:8c:ed:62: 07:91:c0:9b:a7:26:63:06:c3:2a:32:17:2f:76:63:39:34:4c: c1:99:c6:98:29:50:57:c0:3e:ff:f0:e9:8c:9b:6b:37:38:5b: d4:30:8c:e0:b0:1c:db:3d:f8:61:46:74:f6:4a:8e:61:e8:52: 99:d9:2a:d7:6d:f6:e5:c3:5b:e3:f6:2a:f0:5c:0b:10:f2:44: c0:29:9f:07:53:f4:a5:66:bd:35:48:66:c3:43:d1:ef:f9:fa: e1:89:b6:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa+ydJ6LQJLg9T7x1LJNUGVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYWI2YzExZDQxMTYyZGIwMzA2ODU4ZjgzZTVlNjUxMjEx MzJhNmIwHhcNMjUwNTExMTAwMDE5WhcNMjUwNTEyMTAwMDE5WjAzMTEwLwYDVQQD Eyg5Y2FkZjU3MjUzYmNjOWViMDZmOWNhZjBlYzhlMmI0Mzg0OGNjOTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoR72bYjr7/iS6IhyF8SCJG3L7DH AEpQcsjiGGmujNeBx5YDct/h2+EJNiEtZrb6Dw8xu9bkO7DICI/xF18zzVwZ2WmW fX4dPRQPRc+gK5xJY83B8/BaARjORFKvxTYM599jmFOk1t1ajEvuIy5OYEXHP+wj 32L+OeAoSn3zuk+uoKr3TKdDq5xhdJ5O7QxObmg+JUc48QNVGqx9BmIodd5xLdWm tvGfJQXKgjOOKkRk1tSAMqxZh2JBdZtiE9jrH27W2vs4u3mDySTA9wJxDYdqm13r aAj9862RWNx3u/5O7KNCOEol5qe2NlxOCRWYBolHXe/UaAPPUsrlP+HO2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJyt9XJTvMnrBvnK8OyOK0OEjMkAMB8GA1UdIwQY MBaAFHurbBHUEWLbAwaFj4Pl5lEhEyprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kMzM0YWQtNTI0MC00ZGFhLWEwNTAt OWY1YmY3MzY3MjBlLzEvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9kMzM0YWQtNTI0MC00ZGFhLWEwNTAtOWY1YmY3MzY3MjBl LzEvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQW6raPHP BtkWu0meFqsAXV2Imn8o9OxgTLgTZ1HvpWzu0Ch/lXO9RhMJVvk03djQ9Z6x+jE/ z66wEEdoQNNnZpU9jQsa8FoNpTg0JMsMQZaaigCh82njqs46hX2UebOhH07t7mqC +GzOQCi0+t3kobd3sOrroNwOlQY0n0GBgzpfVmX0sEgdsYJbhpXT8QkbNrEjRLHf MlxbH28hzA0SjO1iB5HAm6cmYwbDKjIXL3ZjOTRMwZnGmClQV8A+//DpjJtrNzhb 1DCM4LAc2z34YUZ09kqOYehSmdkq12325cNb4/Yq8FwLEPJEwCmfB1P0pWa9NUhm w0PR7/n64Ym2Ug== -----END CERTIFICATE-----Generated at Sun May 11 12:33:27 2025 by rpki-client