$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft File: 0H11c6rK6CHIfW02Qxz-SygBq0E.mft (raw, json) Hash identifier: j0IMHnwhvLtZvUr0doDFCEqIPagbYg+0JJKQ/upgMXQ= Subject key identifier: 89:1B:B3:EE:7D:E4:8F:A2:3A:65:E1:85:A4:45:A7:F1:01:61:A1:EF Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41 Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41 Certificate serial: 0196BF00FBD0E46E20F5EC26FC619FABB222 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft Manifest number: 1285 Signing time: Sun 11 May 2025 11:00:34 +0000 Manifest this update: Sun 11 May 2025 11:00:34 +0000 Manifest next update: Mon 12 May 2025 11:00:34 +0000 Files and hashes: 1: 0DF0N6re6QyjGkcELrZ2PayQLRE.roa (hash: +fZxWB3IhMVYTIeiKHbk18oRReT+PUmn1zDi+OPG/lg=) 2: 0H11c6rK6CHIfW02Qxz-SygBq0E.crl (hash: 9+ks7Vh96HQi6WxJAEswv3aWzmoPuLlT3qBeQMHomFc=) 3: 3CbIb4TEaRdsUuSnzyfjsAcJ8C0.roa (hash: FMM+Gvcvh1vM/fuebG47q1lgLXjSvweT88zfbPoCGg0=) 4: 9MuueRmthntuKlKTwnVM9LicLuc.roa (hash: Qhwg9BIR9qrwafAgYX5pDSZ8fHBJKbNXSHBKS3TOnUU=) 5: DIgxiDivQ3J12DTsz16bG9BGpKM.roa (hash: ipoR7K+Qag5vPNI/tEX1tA3BB9jHVP98Tf9P91MGtOo=) 6: DmJAcHNL5tv0DXlXvpBQPSj5sQo.roa (hash: qPorS5oIpI2apfp+WoMqcxuGrwSF4BiUmmhlYMQw5nA=) 7: GzD59DhVZl4_JB2c2p4bRwKVQNQ.roa (hash: 1OX4fQvpvyMmGHi3iHoSqU11msJNSVwpVls7uukVpCA=) 8: IjdCoPnpProHieFWFH4g3HsCPwQ.roa (hash: +qa0/bhFwN16S6m5JsKHh8Vu/jzfjw/IRYtVBQ1/3r8=) 9: KVofMQ5Iytj3taZ4zNX-3NiQ9A0.roa (hash: SkunsiqfbTLPDmA+1dTSXrSg8HMaos1bWjK4FJzMt/g=) 10: KvI_WlSyaYCbk3_UABhTDePguQI.roa (hash: rPhhKIHPKKRCk53KHCmBvd4JNG8dyNFleXKMwbsZEzU=) 11: LWzTa12ceS3uKfqTTkpFAx1rmBY.roa (hash: oZTmu9Ix2td6L1C/5xioSK5eHWyXVBQsY0hPLgTw194=) 12: QLIx02DBkJ8BTa1KHeMGeh-YdMk.roa (hash: as3RaXvY0zPD+Du6iZO6HneereP8PKXWFDoTrnCHtlI=) 13: _nPdD9NUXNyi6od6mzg3CTRXnXE.roa (hash: 5bWlSHwxWuQbZxvEnoPTlMwKBtuBAjLxH0RjCokO3O4=) 14: bnb74LoHijb6ReFXDA8dOSN40TY.roa (hash: pwFJIAxYs5XXfIXS9iTFUvVpEjtoEP1h/fTl5ckAITo=) 15: dRXssJ13yx35ENXgGitRyldcyQ0.roa (hash: GNYSRDBbtFSH98fHHAWFkKkpqHnJB5tc2K3fGmfA9Xk=) 16: flhmne3OCJjm1qjNcOG0Z5Lii9s.roa (hash: lQBWv0VaHVIzNxJpgK2TdUDo5audQQ5kwE3Uz5fgISE=) 17: lPhFxRT8GyHXdHQ9vuVVLBajUJ4.roa (hash: WLQY2DGtBY5JdQqEp0/I2cNJpPQIJM0e6a534AHtEdU=) 18: liShckzg-y_pGqAmNFUsqPtV5XQ.roa (hash: CRdqFfzJj5q7aSo/eK5J7uVd+II8YpWMcc93sOlwTJc=) 19: owZB8ZzNInvz4qCAZczHr5i6TGQ.roa (hash: OFzte6Bxug1J1ywVmmkhfG0SiDFNDSFv051ZgTkzliw=) 20: p5Mg10zCIfRA7UUdSdLMSBXFn7Y.roa (hash: BUS0bw1TX/ZhcEDLxDt7zaEn0n8CiilgUb2ODoWryJc=) 21: pwGmEYbuZcQZsOR6KNT3jM32lkY.roa (hash: 5UfKqqEXju1N6ARaCHouu2g7PjryinRZ9Cc7bxq100I=) 22: t0oYcll8PI4dP_5gDrpVqJ6D9bo.roa (hash: ZFjxOlyDciCJjlrX2W0RSeB3N5wBNwxTEiHBjcHtR6s=) 23: w3B_b_hTCziVeuO8PCcq3YSHu2s.roa (hash: EH81W2RkfUjm0/Q5QNi5AYaveemQwHLB03yQgBEX+AM=) 24: wbzeMwPRyxIqE7rdL232Kbv3lo0.roa (hash: 0MwHWZD4yNGfOW35B+nQ/M0uW3knCev0pCMd/qtwBR0=) 25: wcgFMyvWhqJvffO8wVrnzqPEWeA.roa (hash: 9GrvaL4luNKVJdLGRZ5R+2Y+tPlz5Om1wQcUI9dS5Ck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 11:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bf:00:fb:d0:e4:6e:20:f5:ec:26:fc:61:9f:ab:b2:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41 Validity Not Before: May 11 11:00:34 2025 GMT Not After : May 12 11:00:34 2025 GMT Subject: CN=891bb3ee7de48fa23a65e185a445a7f10161a1ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5e:f2:ec:0d:5d:2f:6a:c8:e5:b1:1c:b7:33: e5:b6:d6:12:50:a4:d2:17:cc:d7:3b:4a:b7:af:b3: bd:26:63:a6:54:1a:7b:a1:48:c8:eb:4b:bc:80:43: 9d:61:1c:78:a5:f7:02:67:a3:82:8f:bd:77:26:95: b4:01:a4:76:f6:6d:58:df:be:e3:7d:e9:f8:e1:16: 0b:38:78:61:53:c1:b7:b3:f6:ab:63:84:bb:f6:41: b8:fb:ec:92:29:0c:8f:a1:f9:13:32:5d:4f:8e:bb: d9:c4:4a:c9:ce:4c:ec:7d:37:ae:95:e4:ad:f1:ea: 65:41:29:9d:f9:fa:1b:f1:04:1d:1c:e1:9d:74:8a: be:49:71:4d:c6:dc:fa:e5:61:80:a1:d7:5f:98:8a: a0:ba:8a:d2:34:27:75:f8:71:e7:ff:91:13:8a:6e: d3:bc:07:13:f2:e5:d2:a8:37:91:6c:26:96:69:de: b5:00:c6:f6:26:9d:3f:34:23:db:f0:0c:13:ef:6e: 01:48:d6:ae:a6:3a:aa:51:01:5b:a0:c6:a7:3a:4a: 50:98:e3:1d:98:e1:b6:a6:dc:f3:92:57:2b:4a:44: df:ce:ab:10:36:cc:ff:48:19:3f:03:18:a9:98:ae: 6f:53:51:1e:15:0a:14:63:b8:4b:b3:96:a7:12:fe: 8d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:1B:B3:EE:7D:E4:8F:A2:3A:65:E1:85:A4:45:A7:F1:01:61:A1:EF X509v3 Authority Key Identifier: keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:8c:45:a5:be:31:67:e5:c5:2e:f4:13:99:77:29:62:06:25: 44:95:a8:d0:a7:19:11:bc:cc:cd:8c:22:80:79:cd:e4:36:ad: df:f4:e2:1f:ee:cf:d5:ea:40:6a:9a:52:41:64:d9:3c:68:46: 3a:8a:73:5f:dd:20:9e:c9:6e:ec:35:d0:52:4e:76:f1:e9:69: dc:81:d8:de:90:bb:7c:22:d6:12:17:b6:ce:be:e4:8f:8f:d7: bc:6f:55:4a:d8:dd:24:b7:37:19:e7:2f:c2:ca:d6:61:59:ff: ee:92:54:97:c3:15:b2:4a:df:b8:46:99:64:4b:a5:cc:fe:7c: b4:f7:58:f8:e0:79:a6:db:0a:28:11:fa:2f:a9:fe:ac:a5:b7: 37:87:f4:a8:bb:30:41:96:b9:fd:27:be:d9:aa:a2:e0:44:58: 84:dc:75:93:8e:9b:49:87:a3:34:98:2d:24:d8:be:4f:64:f1: bb:f7:32:91:78:b6:58:77:5b:5e:db:62:9a:bd:37:57:4b:25: 52:fb:60:58:41:bb:18:68:5f:ad:37:9b:c4:2b:10:49:28:ed: 87:48:e0:f3:f7:28:09:c6:fb:ba:3a:2e:c4:fd:3b:86:55:9a: 74:0b:9d:71:73:a3:a6:0a:f2:84:3f:a7:8e:56:25:39:ad:87: a9:41:8a:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa/APvQ5G4g9ewm/GGfq7IiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwN2Q3NTczYWFjYWU4MjFjODdkNmQzNjQzMWNmZTRiMjgw MWFiNDEwHhcNMjUwNTExMTEwMDM0WhcNMjUwNTEyMTEwMDM0WjAzMTEwLwYDVQQD Eyg4OTFiYjNlZTdkZTQ4ZmEyM2E2NWUxODVhNDQ1YTdmMTAxNjFhMWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA417y7A1dL2rI5bEctzPlttYSUKTS F8zXO0q3r7O9JmOmVBp7oUjI60u8gEOdYRx4pfcCZ6OCj713JpW0AaR29m1Y377j fen44RYLOHhhU8G3s/arY4S79kG4++ySKQyPofkTMl1PjrvZxErJzkzsfTeuleSt 8eplQSmd+fob8QQdHOGddIq+SXFNxtz65WGAoddfmIqguorSNCd1+HHn/5ETim7T vAcT8uXSqDeRbCaWad61AMb2Jp0/NCPb8AwT724BSNaupjqqUQFboManOkpQmOMd mOG2ptzzklcrSkTfzqsQNsz/SBk/AxipmK5vU1EeFQoUY7hLs5anEv6NNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkbs+595I+iOmXhhaRFp/EBYaHvMB8GA1UdIwQY MBaAFNB9dXOqyughyH1tNkMc/ksoAatBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjIt Y2Y5ZGM1YmFhYTc5LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjItY2Y5ZGM1YmFhYTc5 LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeoxFpb4x Z+XFLvQTmXcpYgYlRJWo0KcZEbzMzYwigHnN5Dat3/TiH+7P1epAappSQWTZPGhG OopzX90gnslu7DXQUk528elp3IHY3pC7fCLWEhe2zr7kj4/XvG9VStjdJLc3Gecv wsrWYVn/7pJUl8MVskrfuEaZZEulzP58tPdY+OB5ptsKKBH6L6n+rKW3N4f0qLsw QZa5/Se+2aqi4ERYhNx1k46bSYejNJgtJNi+T2Txu/cykXi2WHdbXttimr03V0sl UvtgWEG7GGhfrTebxCsQSSjth0jg8/coCcb7ujouxP07hlWadAudcXOjpgryhD+n jlYlOa2HqUGKGA== -----END CERTIFICATE-----Generated at Sun May 11 20:09:38 2025 by rpki-client