$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft File: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft (raw, json) Hash identifier: m0591IBdqAfalfqBX1MdBCGk8BXicw3ucFBI+se4+54= Subject key identifier: 89:CF:3A:08:F1:0D:DA:39:F5:F8:9D:76:D0:FC:FD:E0:F7:B7:04:A0 Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 0196C126208AC567FF00416EA605212DCFD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft Manifest number: 08FE Signing time: Sun 11 May 2025 21:00:23 +0000 Manifest this update: Sun 11 May 2025 21:00:23 +0000 Manifest next update: Mon 12 May 2025 21:00:23 +0000 Files and hashes: 1: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl (hash: 4L56O7uyyK6WrXbHCiDGRWRrirccKFrRVLdkB3iD3a8=) 2: 5DnR59g0uDhlCeBnwu0_1-KUFeg.roa (hash: jAnqTMpaItG0GhBN/hjRVmkf1KAEsae1ohPc+vQL06Q=) 3: 8PxMQW8r6gNYx6cR3PMs2yrl5ew.roa (hash: GqHXtanVRqdO2QW4vR+6/WyxTi1dfx0DVX7E+ZRdtvU=) 4: DamwXsWqw-pNiIY7Y9gzUoz46SI.roa (hash: 1+3IDizWDcTViB++VKv1xbkAGlHPeiHczREvYVy1BEk=) 5: Dt-A1UKjqPAgnYkiz5oOF3KPif4.roa (hash: jW2Q0BDw92rsfiM8k0/wQ6GD7kmaBburgq62TnGU9aA=) 6: Kn_2eJGh3EcHDuB-OJ8l3E2w8hE.roa (hash: kQ83aGfbv2Iq481MBuTu7pjTHv3tFZPurvWLoY3PlVA=) 7: LAI14FhpOzU-rcfdJ6U9PG061Ec.roa (hash: avAt1L3mlV+2vo4CiZ8YrFs2RggnJV+Qj20+5tYBmII=) 8: LbrW0uU2svuMgCfEegCflkeiJNI.roa (hash: xicAKV+b+Rrkk93cgla0jRgvKkmUQRZcuO0wo+Vll1I=) 9: NH99_Parr6i87GqyKHm971OOvUA.roa (hash: ejRR3IxtFm+BdQE6JvQ7L16gCRkI9epYBVSx8aKoP8A=) 10: OOSnnzJCzwuc2Oreq9KoON2OJy4.roa (hash: 8ZWXugZrnN7Xp4F6Xn87sRk2TjB10Ze3ouSEvaxFbzM=) 11: Q820-mh3gTLx3r5yd43BKUrxxh8.roa (hash: koyxE8n/nkkyiE6UfVNmxydTa2BJ9VFKJe/4B3gcMPg=) 12: QRvqjOpbm1bsYYXVNYJCdsL2K9c.roa (hash: gbsaPykuhKfA/rXSneeYnuzsVzL0kGuorXD/sYaSjK8=) 13: STuoLQHHZBzK_Ldaz7xkxpSaBqY.roa (hash: ZzI62CUIffeXt6hPl33Fk7eNbx5SV7+e0g7j7C8NgSI=) 14: dPORcLPPy7vGPpK7YO0ZCdg3SLc.roa (hash: M8CeF8WcmPBFysMRz6rWQ9roOEfHfMbz/n6BV0QqyTM=) 15: ea2ONoTt3SySSjctEUa2mvxPlk0.roa (hash: aHDpbhU3poNDj7sgG29oLTuaOz779tw43LjPP8jq2GU=) 16: gPbim5HyI5_coGPfod5GORXHFJM.roa (hash: WqgzuFgOy6ZgR1XpLM/1W9uFliVDMHByx6+nWg3yG7Q=) 17: hV1kQUu8Pdq1hwLjpsPqwMqfj_U.roa (hash: N1eliwWO7Qtxwve5drBayNA7B9DMRJgSbxRNUu9dsfY=) 18: o1MTa_u6ng7YChqgqqMpF_EDHDo.roa (hash: medB94fc43SFhZiIXkS8L2CLIYdmUFnxbXmgm5u0RKM=) 19: pA-Fq_J6A5SNZJF98Uix7eSPlIg.roa (hash: 7lwAf6YG9+AyLk5HAGkoZYURCw6qLQhN2f3/kdNJO0w=) 20: v5F31cV6XBvE5243s4oHQBqQQDM.roa (hash: +2WzyiNTSNMZQ/+SFfQYAFWtFS/6Ce5PKrWiHjJlqng=) 21: xbbY79UbNbRYIgyXeBU4cy_zCmI.roa (hash: c0Ac2LrLggmLnLPt492ZZRPubOLwoYV4rcik5rRDaO0=) 22: zw1raLzJkOzuLdWVP5BWRU84p2o.roa (hash: XIzDwzNdh9cyZCy+DakAR8zEkFIdZM7IKTxs2TBKsWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 16:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c1:26:20:8a:c5:67:ff:00:41:6e:a6:05:21:2d:cf:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: May 11 21:00:23 2025 GMT Not After : May 12 21:00:23 2025 GMT Subject: CN=89cf3a08f10dda39f5f89d76d0fcfde0f7b704a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2d:08:9f:7a:79:86:1d:19:a7:da:fb:4f:4d: d7:ab:66:ae:8c:bd:9b:46:c6:cb:98:9b:c4:5b:50: 5b:f6:48:d7:45:cf:dc:c4:6d:81:f1:70:96:fa:0d: c1:e0:a2:1c:e9:a8:5d:58:cb:5b:a1:97:84:00:ca: f7:4d:73:5b:92:ff:ab:53:5e:e6:f3:5d:2d:91:c1: 92:dc:85:3f:24:da:42:41:ab:74:2e:75:ff:5f:fe: 81:74:a5:bf:a0:a2:3f:d6:f9:94:b2:a8:8c:db:46: 91:76:9f:cc:0a:1f:95:c6:b4:fd:38:7f:25:1a:f1: d0:91:10:cc:14:16:b9:0b:a1:92:05:5e:ec:0e:f9: 28:49:74:11:14:c8:97:68:d3:cb:9b:7a:82:05:4c: f8:73:05:c0:b8:96:5d:30:c1:de:81:5b:ae:c5:56: 60:23:e9:37:f5:76:0b:81:f0:67:47:6f:d9:9f:38: 0f:44:62:2e:8f:54:7c:96:32:61:79:10:3b:a3:79: b9:66:93:8d:2b:ae:dd:40:5b:c8:20:34:73:00:2f: b5:60:4b:a9:a6:68:da:fe:c9:a7:05:27:75:72:d3: e0:82:33:d3:91:73:0b:0c:db:40:08:1c:00:49:13: 95:f9:34:c2:51:15:55:67:df:e5:be:13:91:4c:07: 39:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CF:3A:08:F1:0D:DA:39:F5:F8:9D:76:D0:FC:FD:E0:F7:B7:04:A0 X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:b3:87:19:ef:b8:99:ff:6a:33:8c:0e:d5:d7:4d:54:17:19: 3e:4f:60:5d:7c:6c:32:3a:9c:3f:55:9a:b6:85:4b:4f:e6:83: 6e:5e:2e:28:53:3a:f2:26:fd:d2:a2:19:cd:e1:f5:a5:6c:7e: 55:90:27:93:f4:5c:b7:b4:6b:5b:d2:5a:e8:30:ea:61:7d:bc: ce:58:f3:5b:90:da:c6:57:ff:8e:50:0a:6b:da:f3:74:f2:b8: db:ce:d1:1c:fb:92:c7:80:5d:3c:d7:e6:65:00:0b:e7:10:b7: ca:be:58:25:44:9f:ec:16:fa:82:ea:cb:05:42:01:9b:25:4a: 96:02:7b:71:d1:49:5a:b0:94:c3:67:07:df:a4:48:6e:e2:c0: f3:69:fd:6f:a6:73:f7:83:ed:62:c4:dd:4c:2c:51:8a:87:ca: 85:ec:d7:55:b3:c0:a5:fb:e5:cc:26:60:b0:66:11:11:09:9a: dd:a8:8e:3e:bc:40:3f:83:31:2f:6f:c8:68:a8:b6:67:7b:a6: 94:3e:bd:df:f7:65:1d:03:e2:c0:c2:ab:bd:ce:34:fa:18:80: b0:ef:35:28:88:6e:3c:95:03:1d:be:18:a3:d5:1e:04:c1:e5: 02:7f:73:39:a2:df:05:bf:a3:9f:bb:c0:d0:59:5b:07:71:dc: 88:98:5d:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbBJiCKxWf/AEFupgUhLc/UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjUwNTExMjEwMDIzWhcNMjUwNTEyMjEwMDIzWjAzMTEwLwYDVQQD Eyg4OWNmM2EwOGYxMGRkYTM5ZjVmODlkNzZkMGZjZmRlMGY3YjcwNGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC0In3p5hh0Zp9r7T03Xq2aujL2b RsbLmJvEW1Bb9kjXRc/cxG2B8XCW+g3B4KIc6ahdWMtboZeEAMr3TXNbkv+rU17m 810tkcGS3IU/JNpCQat0LnX/X/6BdKW/oKI/1vmUsqiM20aRdp/MCh+VxrT9OH8l GvHQkRDMFBa5C6GSBV7sDvkoSXQRFMiXaNPLm3qCBUz4cwXAuJZdMMHegVuuxVZg I+k39XYLgfBnR2/ZnzgPRGIuj1R8ljJheRA7o3m5ZpONK67dQFvIIDRzAC+1YEup pmja/smnBSd1ctPggjPTkXMLDNtACBwASROV+TTCURVVZ9/lvhORTAc5lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInPOgjxDdo59fiddtD8/eD3twSgMB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLOHGe+4 mf9qM4wO1ddNVBcZPk9gXXxsMjqcP1WatoVLT+aDbl4uKFM68ib90qIZzeH1pWx+ VZAnk/Rct7RrW9Ja6DDqYX28zljzW5Daxlf/jlAKa9rzdPK4287RHPuSx4BdPNfm ZQAL5xC3yr5YJUSf7Bb6gurLBUIBmyVKlgJ7cdFJWrCUw2cH36RIbuLA82n9b6Zz 94PtYsTdTCxRiofKhezXVbPApfvlzCZgsGYREQma3aiOPrxAP4MxL2/IaKi2Z3um lD693/dlHQPiwMKrvc40+hiAsO81KIhuPJUDHb4Yo9UeBMHlAn9zOaLfBb+jn7vA 0FlbB3HciJhdxQ== -----END CERTIFICATE-----Generated at Mon May 12 01:52:54 2025 by rpki-client