$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft File: pa6KPYvaq_R2X9p51V7KjGnIvyw.mft (raw, json) Hash identifier: LdMHR9ozNErauwmIS71CUlps/25Nt0DHvi7EbUHrBNU= Subject key identifier: 6C:2F:0A:37:B2:0B:0A:33:BA:DA:77:F8:1B:63:23:95:48:C1:6A:8A Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 0196AB7A8CFCCE6782998CD1E3C7B66AD73F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft Manifest number: 0DAD Signing time: Wed 07 May 2025 16:00:57 +0000 Manifest this update: Wed 07 May 2025 16:00:57 +0000 Manifest next update: Thu 08 May 2025 16:00:57 +0000 Files and hashes: 1: 0dU4nqEloVTcpEFXy475oUdUoRM.roa (hash: +4pYEKPa/Azd7C288MxT6V8nhRo2gQ9C9f/LKpJ2E7E=) 2: 1-b1uUe7cDgUrt3O4cESXQzwLGQ.roa (hash: 9R4woCA7+AwuSB5OUnv/Zt0yVaohvWvZyAFjNEcFpfE=) 3: 3xG70OjpGDqTBtiV7J7ymcYWBFA.roa (hash: NM1Xt/iOH+RmW3xgH3e/zgM6erx/P3+UNPyWgezEG04=) 4: 52gqmyCs4CgJ8hxO4adVAhEf4YY.roa (hash: XpLF/BJt6KR+R9bnvQWMbSq818F5Y+BHu0O++mZbSiE=) 5: 6X2qxBTvsCu1KGgFjFHR9uizprw.roa (hash: THkA0uqanR753o/JOdPq3eCkVb6ZWxt+PiJvED7/Lgs=) 6: 8HW0T0gkjxuqP-_rFWA6XvZFszI.roa (hash: yvdGjJhxvncAn0kSWkYpvMzmOc86v5+R2cMLIZsxEfo=) 7: AqFQoZ5tMcenZVTjwiA7wb5NyGQ.roa (hash: mIDD2KzFcnMgCK/1kzPsCL33au7Vs9+ruXIfYWsMf4I=) 8: CuWsHbgT_C2B1MpCzl3Tcnh7qDA.roa (hash: FydU5iTLeGKnPVKpFCTWxei80LuqHywDP80pxMyuq9w=) 9: EV8C5U1nh3UWRVZyZWy4C7aXG3s.roa (hash: Q9qCtjkY6ZONgmktoZ06EQ20f3d6KCx1NRtILOVyIkI=) 10: IDk9MhfQceeWf9Aau-Lq0fZ-_CA.roa (hash: xOkvkF2fhOLphDe62JH2DeSLHq9CCUD041TbmVLDc04=) 11: I_zTEANA5HgNFK3xcWmr5JQSd4w.roa (hash: 8kt6pXomqbmYP20u6DRlj+fZL0R8g/8XjkQCzdnUfBs=) 12: K5PwPytOI_jcP9He1nt3G317eYI.roa (hash: cTDvsg09oLpiFvnjwcs0kSKetfHr8fv3r7qeLPsUP5A=) 13: LCvaB4WSKzttpqTMBERAKzTPkc0.roa (hash: efuSbUVkMb1LRDxLfq3t1vkJUtMph/K3Ly/MOMCQIYc=) 14: LvCg6ODOvz7fOcsn6wU3ngQnNXI.roa (hash: 2DJ8XZWQOJtfhwxPU+bThNRmPW5rZXIuxQU0nHhPZHo=) 15: M0UFmj8utuihy8ywzKYVtKAlOpA.roa (hash: GB4oTrIEAnIhwubWgjQhf6VSBwPU6R7tbEiE074YX9M=) 16: PtspP9NAMUf1vNrA5veAQs8D3JA.roa (hash: ulePbYZBa8BBx8Rf9110z7Z7LwUX7PcrfS6/GMQQI50=) 17: QnKLXYadCEK7EFhDz6MF7GYNjvI.roa (hash: rOJkJ3eVk06xoaQ0gvNi9t1WIsPI6NQJ4lEou7caFDk=) 18: T48pBsuhvbZxzuQikn6LHKfOwhk.roa (hash: riJSrEr8eklbL0fdBY3f1J6u/fO/qv2OeNqqUNUL/bI=) 19: XOx0VQXemWnE1_T_CbW1BF1yKGs.roa (hash: AVLDrE5Y2ydpWZbzqq6OGq4i3RC3l/nkGJBMXJVQobo=) 20: Yl2M3tHD9BpxXAF-8RCTakseDqA.roa (hash: SffwXpK1Th2HbQCicN1UUfkjL/i1kZCt1vfJ2FKzFtA=) 21: gaylLdxDyQb8sels7s5ku7UtfkU.roa (hash: U1UfdjYQAukjcg29y8zD3MFVpeQLO0fB9T/k1AE2BIc=) 22: hPYLx_9mBj_Ye24Y1_2lQPvsrq4.roa (hash: vQ4lqUvsFgblBgv4IH3pH1VZWDEVfeUus2uMPqiXEdM=) 23: i-XH3WsMULykHW1y-BG3UdFVuxk.roa (hash: VJILQeKFY+tCpv/VALS6QQ/A8bjqBJ9CpKPAXcs36qg=) 24: lxacDbK0eMnuXnpxPVHxYt8h8A4.roa (hash: rsXevB7T0iAAuzzWpzZrb3jX78EQxi4+Xjb6q3I67TY=) 25: o0unYtOvK0ypo95RgHxsLRbSEI0.roa (hash: /Kszii2RBvuT+vSDoTo/zRmMb8Q32yFP1SEkPKjGPyg=) 26: oBhyptF6QE4JF_exwsXWUGhFPFA.roa (hash: 3hvM7M438cadgQ4g9HhgILZgXMpg0ZtzDaSbf/K5RFE=) 27: oxqqJb6s3Y9_xl6qI2Z76gczjAE.roa (hash: 3Mi3svCpiZUvbXpx9Bao9teVj53BNUZ6cGIpnDn9NXg=) 28: oyokzIn026-PrXoWkL2twkIzg5c.roa (hash: vnYvn1vfv3V6OKUsd9n/C+ZJyouWqYiCJWFXAmzYfwA=) 29: pa6KPYvaq_R2X9p51V7KjGnIvyw.crl (hash: IjZIzx75m8qhnV3InjEMr42eAc7A92mxlTWani2rGok=) 30: pakgoJm1JHH02EFn_cluKwwBgfw.roa (hash: 9psJh/g+q6UomADY1AKlNBezhzkIM0njclurAr2L1G8=) 31: qyVuEE_iZxUcQNKHUqVvNbUSd5Q.roa (hash: yJBmopjTpiGvBLTxepISwc4Bu7mb8teVZwXirlkcbTI=) 32: rMButntV5GnO7W7_TuF_ZPA6g1Q.roa (hash: QKYvOeC5NwDMQzqYncxkm8rqO0746QVz/H7okZ5iBmI=) 33: ti0W6fjaL6Z8NJz1MH9rdtxIt7Q.roa (hash: eexhvPXToWxtG+Ffy16JfuC8/yelu2NCnq6+i2y5ma4=) 34: uV6pu-rvAp4G68o2AgVK7vbBPX8.roa (hash: ykD9UesXzEoyDyDfGqtntVW1hYElb551gS1dPJQBUlo=) 35: wifLocMxfpz5rpj13UULY6xFWiA.roa (hash: zSAQgyK21VbhaQRoZfBOovQi13W5eH/UHapg2UUnRmI=) 36: wv61e77oscUDJBn9VYlTu_3AbRM.roa (hash: WF74l5Tv59hxzHDkv3UDIsUfaTD5KoMxhkr5geA0BW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 May 2025 13:31:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:ab:7a:8c:fc:ce:67:82:99:8c:d1:e3:c7:b6:6a:d7:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: May 7 16:00:57 2025 GMT Not After : May 8 16:00:57 2025 GMT Subject: CN=6c2f0a37b20b0a33bada77f81b63239548c16a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e5:ae:18:f4:bd:e4:9d:fc:b2:1d:6b:10:3f: 97:d0:c4:7c:8e:46:66:0c:b9:0b:ac:18:14:02:ec: 2f:71:52:b9:4c:99:9c:66:57:52:36:20:4e:1b:aa: 5b:0e:de:9a:2e:ba:a6:c8:a1:ff:e8:08:34:eb:54: ff:be:c9:7b:4f:7a:5b:7a:1f:ba:f4:c2:79:6c:6f: c8:f0:09:08:36:e4:2c:5b:24:0e:22:b1:48:eb:31: 82:6b:f5:0b:8d:c1:f5:0c:03:37:2d:a9:79:8d:31: 6b:2a:b2:1e:08:d0:3c:c2:8b:b4:37:62:a7:56:7a: b2:4e:10:97:29:aa:8c:a0:4d:13:0c:6e:b8:f4:43: 32:df:7e:b0:a1:12:dc:12:81:c7:91:f6:22:91:5d: 96:f4:8d:8d:53:0d:11:f5:8a:60:14:64:5e:eb:34: 4e:33:0d:7b:30:bf:bf:40:36:bb:0a:de:cc:e0:42: 0f:b5:0f:ec:e5:ae:ce:b2:41:b8:b8:fc:e7:ed:cf: ae:2f:5a:7c:7d:98:1b:5b:f4:42:a6:03:60:13:48: 53:d4:b2:22:4e:2d:26:61:21:76:ab:49:9b:29:0c: 42:30:5c:1a:e4:48:05:f2:f0:cb:23:de:72:87:dd: 2a:36:78:f2:4f:e2:f9:c3:0d:f4:6c:08:96:a0:b8: fb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:2F:0A:37:B2:0B:0A:33:BA:DA:77:F8:1B:63:23:95:48:C1:6A:8A X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:25:bf:29:e8:42:09:15:3d:9a:e5:2d:c5:eb:cc:5b:cc:a0: e9:43:76:dd:a7:c0:f2:7a:7e:8c:84:e2:d6:af:96:41:cc:72: 4b:08:19:f0:2a:75:6a:4f:60:ab:4b:d5:e7:2d:22:0b:92:12: ef:77:a5:60:eb:13:a3:79:f1:58:c7:22:c6:55:46:e7:03:7a: ca:c6:2b:6b:30:00:0a:8a:d8:27:cb:f9:08:72:e5:cf:25:01: ec:53:e1:a5:3a:ca:99:4e:e6:96:ee:8c:ee:4c:9c:63:be:55: ba:b8:f6:8c:a7:5a:82:c0:f0:35:ac:59:3f:8c:32:24:a3:e3: ac:dc:62:ed:97:fe:7e:cd:7f:6a:6d:eb:1e:3a:a8:f4:fc:c5: 84:da:c3:24:8a:07:81:0a:6f:8b:ee:5a:4c:03:c1:6c:ff:1c: a0:d2:62:ca:25:c9:32:ce:75:3e:b1:15:ee:fc:de:c7:2b:43: a9:d7:32:aa:b7:28:8b:43:e5:cc:c9:c7:55:f7:3c:b3:9a:d7: 27:01:35:d9:21:4d:7d:84:1f:8a:ad:a9:86:dc:a9:15:b7:07: fd:d2:d2:5b:ca:bf:39:e3:71:4b:88:56:37:79:3a:3f:78:ad: 3b:d6:9d:7c:a3:4c:1f:a5:8d:23:74:cf:04:f9:95:e2:cf:5a: 6f:7f:5c:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZareoz8zmeCmYzR48e2atc/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjUwNTA3MTYwMDU3WhcNMjUwNTA4MTYwMDU3WjAzMTEwLwYDVQQD Eyg2YzJmMGEzN2IyMGIwYTMzYmFkYTc3ZjgxYjYzMjM5NTQ4YzE2YThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eWuGPS95J38sh1rED+X0MR8jkZm DLkLrBgUAuwvcVK5TJmcZldSNiBOG6pbDt6aLrqmyKH/6Ag061T/vsl7T3pbeh+6 9MJ5bG/I8AkINuQsWyQOIrFI6zGCa/ULjcH1DAM3Lal5jTFrKrIeCNA8wou0N2Kn VnqyThCXKaqMoE0TDG649EMy336woRLcEoHHkfYikV2W9I2NUw0R9YpgFGRe6zRO Mw17ML+/QDa7Ct7M4EIPtQ/s5a7OskG4uPzn7c+uL1p8fZgbW/RCpgNgE0hT1LIi Ti0mYSF2q0mbKQxCMFwa5EgF8vDLI95yh90qNnjyT+L5ww30bAiWoLj7UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGwvCjeyCwozutp3+BtjI5VIwWqKMB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEiW/KehC CRU9muUtxevMW8yg6UN23afA8np+jITi1q+WQcxySwgZ8Cp1ak9gq0vV5y0iC5IS 73elYOsTo3nxWMcixlVG5wN6ysYrazAACorYJ8v5CHLlzyUB7FPhpTrKmU7mlu6M 7kycY75Vurj2jKdagsDwNaxZP4wyJKPjrNxi7Zf+fs1/am3rHjqo9PzFhNrDJIoH gQpvi+5aTAPBbP8coNJiyiXJMs51PrEV7vzexytDqdcyqrcoi0PlzMnHVfc8s5rX JwE12SFNfYQfiq2phtypFbcH/dLSW8q/OeNxS4hWN3k6P3itO9adfKNMH6WNI3TP BPmV4s9ab39ccQ== -----END CERTIFICATE-----Generated at Wed May 7 18:39:20 2025 by rpki-client