$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft File: VbryaWdRCzxS5G0dxZOWfN8p-ck.mft (raw, json) Hash identifier: KSDJFgZngbMC5JJusjHg4iQMd6S19VGLXFRY3vdakNU= Subject key identifier: 64:1C:FB:96:F1:6B:66:A1:35:AA:F2:79:13:B8:E7:CD:F3:D7:50:FA Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 0196AFC47FBCB180DE18A783102129990565 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft Manifest number: 0113 Signing time: Thu 08 May 2025 12:00:12 +0000 Manifest this update: Thu 08 May 2025 12:00:12 +0000 Manifest next update: Fri 09 May 2025 12:00:12 +0000 Files and hashes: 1: 4XDgKO79XmXOb4-G5xTONVrvgW0.roa (hash: tGjUxZ/kXi8ihM39nHigT0xXtfrY2RyKK9rqdogl5Ys=) 2: 5f-dp7zmm1xpqS35G4SxPyQsKzU.roa (hash: /VV17LXXYckmyZ3LkMVCcWjEWZ1t6Ui72lZHti3idJI=) 3: 6Kmf8SLIDhtvY0o72b-e_ez1gvA.roa (hash: j3CAl37tBzlpnx387FdZVM64alBCKbR8QlCCeFxtnL8=) 4: AhuxnBjbqBUXwIP5b21tGbis2HQ.roa (hash: tJKtPN8U0xHa3FJB8TQyW4B4Oecnb0IEKnN/jQHiCqc=) 5: BP6xc-GRow7em9LhzOxLgjKVYus.roa (hash: Hcth0RRyL3wBd/0xMlJH2ABMLkNBsFaEBwo7Oa2dz60=) 6: BmRc3vRXaWW56t-nNSSPweNCiMs.roa (hash: 2GH6+StvR4rGLXfNXO4fC1fEOLCOQlhsSaL6sBf6AhI=) 7: E_5JhM-xpqv89i8OslGQvDkCWqw.roa (hash: HFIiQD19t++eqD0i+eSTfWrtLIMDnOjLs8bKyGFVyww=) 8: FM5BR3fy8jLa_aS_duxaLPD1zS0.roa (hash: E3RNJGjOtbojon2Sppjcze5zlMUeT+F/SdNiHT4AD/A=) 9: N1nl601Hr6wJILJL_hgwD9Q0g2I.roa (hash: pIuSTy4n0CatQtYZ3CMUWwjxxWlZD8T/OaYfEUfURDo=) 10: UpdorckKAviPtXnc3P5_vHsstcQ.roa (hash: ooJMnGz+B+dPJaGV/iALnmX71ASJ7bqGcQilmTah56E=) 11: VbryaWdRCzxS5G0dxZOWfN8p-ck.crl (hash: axF33C15j9ZlYUZuFFfa7QmlhTGrLU52vmpH4nbVzMM=) 12: adfSrjz8zMQzfk6RQgh0psxTHR0.roa (hash: m6kWVuP71bRqpA1w6ImUyPJpL3NVhQk9W2DY/Q8Wxoc=) 13: doYvufKMi4jm03VH6RLq3eZewAA.roa (hash: EhJBbYf1isS2uAf8HQUnHDQB/+isJncCcXILIMluQQ4=) 14: eJAfN54IVDM9zxmQ8ilO1hvAK9Y.roa (hash: vXrGP/zoPi072poUBvOCivcX7v6J3n6jY3oSSpibSQ0=) 15: jrgMSskhT0megkHs6B0DtWXkMyw.roa (hash: KC6QUuGpGxoExz21SCbzEH1LAyNK0e/ekmIFKAWbsMk=) 16: l7z9gRq1cnQs_wN6y_k94oBYE1w.roa (hash: cA4fD7YFoUALJX+r2CwONaKqktMmrC06jt+qqYXcbRM=) 17: ofbszTn0i-YSIBGbdtRQO-HAngw.roa (hash: +Yij66+the4UDsOblrHzuVkVOxLhBPgs2jttAsdE6SE=) 18: pHZpiMb5Vq0up-6CeO0nMIW4Mwo.roa (hash: ErsQAE7yFJ1utzq5R5esTRBd9mERh0Hyf1eb2KuKw/U=) 19: zw-kUDcbEKKAoEKFIvfrhCjyI8I.roa (hash: P5pYbU9sXA2DQAtR7bal+wc0XMJxzotl3qbzVMc73xU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:af:c4:7f:bc:b1:80:de:18:a7:83:10:21:29:99:05:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: May 8 12:00:12 2025 GMT Not After : May 9 12:00:12 2025 GMT Subject: CN=641cfb96f16b66a135aaf27913b8e7cdf3d750fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:66:30:8f:6d:9e:50:25:dd:60:8f:d6:6e:0f: 5a:4d:08:1f:98:05:59:70:dc:b4:e3:9f:57:56:b9: 45:90:0f:e1:30:0b:95:e6:f0:75:2d:e3:39:03:77: 7f:e6:bf:e0:19:9b:c6:23:e4:aa:63:8a:9d:97:d6: 3e:33:99:7a:31:14:d4:6d:69:dc:8e:10:1c:41:ac: 4c:9c:7a:42:f9:58:33:cd:a5:a0:b5:5e:e4:63:39: 73:1b:31:03:d5:5f:95:04:09:40:56:61:e6:24:bf: 37:1d:a3:e3:7b:f5:47:9f:e2:fc:d4:41:65:5b:7f: 50:01:d0:6d:8a:2d:7b:eb:ae:71:0f:2e:e7:ca:e5: 95:04:a0:96:26:95:3e:12:2a:19:e4:80:75:53:6c: 4a:48:76:98:6c:45:11:ba:77:79:4e:1a:e2:81:2c: 23:f0:71:28:09:18:3f:ef:f2:e9:88:fa:dd:55:77: ed:09:94:83:fe:53:60:9d:d1:94:e6:1c:e7:12:fe: 9d:fd:bc:27:7d:99:4a:b0:f6:6a:c8:2d:6f:5b:e1: 13:85:0b:62:8e:b1:52:09:93:3b:1f:26:f0:9f:31: 59:ed:ec:3f:b0:a0:b5:01:d1:1b:80:ac:87:91:87: 8e:18:10:61:4a:b3:11:bb:01:59:8b:e1:2d:63:52: 3f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:1C:FB:96:F1:6B:66:A1:35:AA:F2:79:13:B8:E7:CD:F3:D7:50:FA X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:b7:43:0a:c8:eb:6e:1a:b5:f8:a3:ec:42:9c:de:da:fe:1e: f9:05:da:9f:ac:7a:a5:db:06:f8:31:85:4c:47:33:11:d7:5d: 2e:de:72:ea:9c:eb:d5:1b:65:20:b1:4b:c5:3a:36:74:c4:cf: 63:2b:87:52:d4:a7:27:ba:60:fd:e6:19:9f:0c:f2:04:0f:58: 75:da:f7:54:05:af:2f:23:99:3b:4f:34:fb:f3:a6:b7:8f:70: 7e:dd:41:61:d5:5f:5e:0b:ac:93:8d:cd:e2:dc:ae:50:7b:b4: ed:d9:4d:9a:6c:77:11:16:84:dd:bf:2f:a3:37:5a:49:dd:2e: 00:19:ec:06:ef:c1:bd:22:9a:3e:1f:be:46:b4:b6:a4:83:b3: 78:c2:40:48:0b:6c:ce:6c:12:b8:50:f7:d4:0f:2c:41:89:f0: 51:5f:cc:ba:6c:d2:80:e4:d9:e7:a6:ea:7d:2c:83:45:b7:99: ec:c1:1d:e7:ef:eb:74:1b:74:19:33:dd:55:59:f7:32:da:9a: 0c:b9:42:2a:e3:bc:f6:ae:4a:c9:b7:5e:7d:d8:87:8e:8e:a2: 75:84:2b:16:d9:c2:7a:4f:b6:d0:46:87:1e:96:ed:fd:6f:9a: ea:42:20:fa:bf:56:ee:5f:e8:62:ee:65:02:a1:76:7d:55:dc: 0f:68:59:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZavxH+8sYDeGKeDECEpmQVlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjUwNTA4MTIwMDEyWhcNMjUwNTA5MTIwMDEyWjAzMTEwLwYDVQQD Eyg2NDFjZmI5NmYxNmI2NmExMzVhYWYyNzkxM2I4ZTdjZGYzZDc1MGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmYwj22eUCXdYI/Wbg9aTQgfmAVZ cNy0459XVrlFkA/hMAuV5vB1LeM5A3d/5r/gGZvGI+SqY4qdl9Y+M5l6MRTUbWnc jhAcQaxMnHpC+VgzzaWgtV7kYzlzGzED1V+VBAlAVmHmJL83HaPje/VHn+L81EFl W39QAdBtii17665xDy7nyuWVBKCWJpU+EioZ5IB1U2xKSHaYbEURund5ThrigSwj 8HEoCRg/7/LpiPrdVXftCZSD/lNgndGU5hznEv6d/bwnfZlKsPZqyC1vW+EThQti jrFSCZM7HybwnzFZ7ew/sKC1AdEbgKyHkYeOGBBhSrMRuwFZi+EtY1I/PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQc+5bxa2ahNaryeRO4583z11D6MB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgLdDCsjr bhq1+KPsQpze2v4e+QXan6x6pdsG+DGFTEczEdddLt5y6pzr1RtlILFLxTo2dMTP YyuHUtSnJ7pg/eYZnwzyBA9Yddr3VAWvLyOZO080+/Omt49wft1BYdVfXgusk43N 4tyuUHu07dlNmmx3ERaE3b8vozdaSd0uABnsBu/BvSKaPh++RrS2pIOzeMJASAts zmwSuFD31A8sQYnwUV/MumzSgOTZ56bqfSyDRbeZ7MEd5+/rdBt0GTPdVVn3Mtqa DLlCKuO89q5KybdefdiHjo6idYQrFtnCek+20EaHHpbt/W+a6kIg+r9W7l/oYu5l AqF2fVXcD2hZ8A== -----END CERTIFICATE-----Generated at Thu May 8 20:43:09 2025 by rpki-client