$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft File: jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json) Hash identifier: 8u6M6GL3uUzjMHKWWlFsM/kea6TqqtUiLmtUVSDEzqY= Subject key identifier: E1:76:F4:3B:F5:52:48:45:93:07:0C:44:35:F6:A0:01:4E:CA:8C:01 Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Certificate serial: 0196B8FEFE4081ECD3077B96DCD989116288 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft Manifest number: 14D1 Signing time: Sat 10 May 2025 07:00:41 +0000 Manifest this update: Sat 10 May 2025 07:00:41 +0000 Manifest next update: Sun 11 May 2025 07:00:41 +0000 Files and hashes: 1: A3slZgyg9eemzONzeM4ZjQZOkQA.roa (hash: X0hOJW7H3OQv8gNe/Scffw0tX7rp3lfITg3c2bDp62I=) 2: Dyi32KlOskocQHPe6FUF7ELQs5U.roa (hash: D3EF+UreJY6p0ckzuksgWXVvYetF6sITxKDGv/w2L0k=) 3: FJEFcX2c3QiytgwJXtBXdfXF7AQ.roa (hash: wDOQFjMrdpmJOwUI55qSC810FFGrsaY4QPcOoJKWykM=) 4: G_noKzntiWHLaHSdta1FputJESM.roa (hash: 76HBYH18Q5+wfRzE5ydGp21BC62rcsuS2tSvCzBrWp8=) 5: K9IKE8UzWzIlRqgdm5DBscj4DXI.roa (hash: TmNOvsKyJxclTHoJrrP+Wz2lJl3QKp06vZRtwf2Wkwo=) 6: Orf0-crrS-m0d2xw75OekVLRhcU.roa (hash: NyC6YqKt0FNmC1unp3jevt47/gr2Ss5dzqvXJGD2AjU=) 7: THZGRo10wjMlm6DbRUy7KjrwfkM.roa (hash: 9FjGohVB5WEFkwBSNZEgEcooaudVJnnxxDK2Jy9/LgI=) 8: VmEKVuU_uT-v34QUxuvTEoMoaug.roa (hash: lCfgs7Wts05rdP9N+OaYxsLVxOabAGR5SUtGArrm95M=) 9: Vxz_brs8mMP8pyfBjMG6SqLCoLA.roa (hash: InPdcQtGkZTGLva52kv6ADnfkbCulTXgK4jOcLs8G7M=) 10: Xmin5XG-kRl49Vt7ZEcTgSLDhDM.roa (hash: DHMC7YXYfDSAA2x6JnOvMwJT1zdpAymlypp6F1bKmgY=) 11: Yfzph1m23vmbClyvIoORpS1CW-E.roa (hash: SuwU2G9eYZ/n+GS6xB/GEsh3UziEYPdyi1WD5kRpjAo=) 12: _vcj5hH5PQmqE-mf4-B7kcWGpfg.roa (hash: ReLlnYnzQbiQ5Pk/0fIjBSPY1fpdoMBMJpSnkiSreWk=) 13: d-sWN4azI8sU7mlb0U-920Rsmtc.roa (hash: eiusVr40X1jFuIAj+CFi96eXy2bKXAQXnB20dKkv/70=) 14: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: nQ7qWRE1NaFLvib4twXsh0l1r3XoYMQL05wqWhCYgHc=) 15: mwm5rC4rfoUfkUGj1keywZQhhGw.roa (hash: dDwtNYt9WubuetSqef0LQakniH0rgBVhQK32OI1f1fU=) 16: nyxtNnWsxM3-5IIVvMZ44cQVEYU.roa (hash: ub8VtVKtgWVEPS0rlKsjT0ZjeuiFnfLTw/tC6ZpW/Vo=) 17: v5kzcztD_Zc4DwbwnN4YfKR9YoA.roa (hash: 33e8kQ++AVlCN79vtcp+1+C+oGUNBxplYHYOGaRMl58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 07:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b8:fe:fe:40:81:ec:d3:07:7b:96:dc:d9:89:11:62:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Validity Not Before: May 10 07:00:41 2025 GMT Not After : May 11 07:00:41 2025 GMT Subject: CN=e176f43bf552484593070c4435f6a0014eca8c01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f8:90:fc:bd:23:80:de:4f:d4:38:7b:93:c3: ab:72:16:57:78:4b:22:12:60:a7:ba:56:bd:40:d2: af:c7:ee:31:42:61:d9:af:fc:97:f7:ab:31:03:64: fa:87:ea:91:e9:ac:05:54:d2:74:86:99:3d:49:87: aa:f0:8b:ff:76:c4:91:3e:ae:54:fd:6a:13:ad:43: 46:d8:f6:83:a5:de:69:4e:6a:34:fb:8e:93:a2:b0: 3a:57:54:a2:c2:b5:80:b9:71:af:bf:ed:6f:c6:51: ab:32:87:a1:3e:c3:c5:f0:6f:dc:fc:29:b2:dd:9a: d9:76:8e:08:5c:66:71:a7:d8:e9:61:21:21:cd:43: 6c:ca:3d:64:38:de:71:35:1b:b1:8d:31:db:2f:b7: 74:da:ec:5a:4d:2a:4f:2c:10:f6:18:5a:92:ac:a3: eb:e2:1a:4e:80:23:7f:1e:2c:89:f7:1c:d4:20:f2: 1b:15:c2:16:ef:1c:f4:e5:b8:ac:0c:5e:e8:9c:4c: b5:ef:cf:3b:82:90:1b:88:bc:2e:cf:7d:a8:3c:7b: f1:64:61:4c:a8:3d:f4:f6:64:d0:44:24:01:63:f6: ba:14:d3:1b:6a:57:75:c3:28:99:f0:93:4b:6f:2b: 31:ac:39:95:a6:68:a3:3a:7c:78:ab:fc:f1:c1:b6: a7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:76:F4:3B:F5:52:48:45:93:07:0C:44:35:F6:A0:01:4E:CA:8C:01 X509v3 Authority Key Identifier: keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:0f:71:63:a1:3b:e8:45:a6:92:df:c4:7d:f5:df:2a:b8:69: c4:ab:9d:6d:e3:a5:77:6e:81:cb:65:c0:c2:5f:18:e1:3a:e5: 14:9c:32:67:6e:a7:20:54:60:85:34:08:b6:e2:98:f0:c3:de: 44:d9:7b:da:35:75:a0:79:8f:9a:b7:7e:96:49:85:ce:4d:3e: 25:3c:29:2c:71:4a:8f:45:3d:aa:00:9c:77:35:4e:71:63:9d: 7d:0c:91:2f:28:e6:2a:3d:f6:7d:60:e7:9d:cd:90:fc:5d:57: 90:91:5e:cf:fb:0e:91:84:d6:65:e7:46:da:ca:e9:1a:f9:47: dd:b5:d5:29:ae:b9:1f:72:d5:76:83:56:3c:c6:9a:77:b6:64: 9d:a8:df:33:2b:18:c9:cf:9d:da:e2:a4:3c:3b:12:b1:a6:d7: 90:ff:69:9c:78:0e:96:05:a7:31:93:d4:74:cc:3e:f9:07:df: 52:91:0f:93:e2:fb:f9:ac:49:5b:d7:bf:07:51:13:04:ef:cb: 28:d7:04:de:b8:7b:f4:23:bf:27:d6:b4:a1:8c:59:f4:43:23: b9:bb:72:1c:33:2c:f6:39:3e:d8:22:8b:51:0c:5f:a9:d6:5f: 3b:92:a1:01:2d:05:38:63:b3:c8:bd:8c:a3:82:d4:64:cc:e6: 98:57:e0:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa4/v5AgezTB3uW3NmJEWKIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl NjNjMTMwHhcNMjUwNTEwMDcwMDQxWhcNMjUwNTExMDcwMDQxWjAzMTEwLwYDVQQD EyhlMTc2ZjQzYmY1NTI0ODQ1OTMwNzBjNDQzNWY2YTAwMTRlY2E4YzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofiQ/L0jgN5P1Dh7k8OrchZXeEsi EmCnula9QNKvx+4xQmHZr/yX96sxA2T6h+qR6awFVNJ0hpk9SYeq8Iv/dsSRPq5U /WoTrUNG2PaDpd5pTmo0+46TorA6V1SiwrWAuXGvv+1vxlGrMoehPsPF8G/c/Cmy 3ZrZdo4IXGZxp9jpYSEhzUNsyj1kON5xNRuxjTHbL7d02uxaTSpPLBD2GFqSrKPr 4hpOgCN/HiyJ9xzUIPIbFcIW7xz05bisDF7onEy17887gpAbiLwuz32oPHvxZGFM qD309mTQRCQBY/a6FNMbald1wyiZ8JNLbysxrDmVpmijOnx4q/zxwban4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOF29Dv1UkhFkwcMRDX2oAFOyowBMB8GA1UdIwQY MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt YmE3NzFmZmQyNjljLzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQ9xY6E7 6EWmkt/EffXfKrhpxKudbeOld26By2XAwl8Y4TrlFJwyZ26nIFRghTQItuKY8MPe RNl72jV1oHmPmrd+lkmFzk0+JTwpLHFKj0U9qgCcdzVOcWOdfQyRLyjmKj32fWDn nc2Q/F1XkJFez/sOkYTWZedG2srpGvlH3bXVKa65H3LVdoNWPMaad7ZknajfMysY yc+d2uKkPDsSsabXkP9pnHgOlgWnMZPUdMw++QffUpEPk+L7+axJW9e/B1ETBO/L KNcE3rh79CO/J9a0oYxZ9EMjubtyHDMs9jk+2CKLUQxfqdZfO5KhAS0FOGOzyL2M o4LUZMzmmFfgJw== -----END CERTIFICATE-----Generated at Sat May 10 16:50:34 2025 by rpki-client