$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft File: 6AHyPOghwmTWdydTbsGDU3WUxfI.mft (raw, json) Hash identifier: qRPnjkc1c0Yge7eYMyodIviMo7VrUZHI+KeqV4xPqKw= Subject key identifier: C3:E0:A4:FD:B0:0D:D0:0F:9A:07:67:07:B6:88:FE:81:1F:0B:65:3A Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2 Certificate serial: 0196BE9330FA0270854EB402F1765135CBB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft Manifest number: 153E Signing time: Sun 11 May 2025 09:00:39 +0000 Manifest this update: Sun 11 May 2025 09:00:39 +0000 Manifest next update: Mon 12 May 2025 09:00:39 +0000 Files and hashes: 1: 1AY-3wX89pHsKMEMJWGHTHsJ8gI.roa (hash: isIoAb0bdzc9Cbbslo3RKCKles0GJe6/bSmHAxkyj+A=) 2: 21W9uhOLCfGBSLMK8xlCrH8tOg4.roa (hash: AjEuF2+0cRLXo4E2JHpp6w+dtVFDkzA5bZ7j4AtGGgA=) 3: 2nB34LVBbtl74aGRyrgO8R7Ndlc.roa (hash: vcU/vsmwMZU339dKKRVuUgWsl3f587fyzQ0cKDXFwYs=) 4: 36o_asZrpJckrJYtCQ_3cyS6VxI.roa (hash: n+NrjdHAcQK/VqsswfVMbQbVU4jqmrrdhbmTvGV91ts=) 5: 4YclLAlicy2DcCNHws_6seOTF_o.roa (hash: MDIYzRbkjVFgI1Ats/352Yqa0tN/SB9gbJGmZv6PQg0=) 6: 6AHyPOghwmTWdydTbsGDU3WUxfI.crl (hash: 5hPZj9gxGRzmD1LM+gGcMZ2VmlexaiqTJLY0gkg/6jU=) 7: 7QqVIV8LUR5c1jRBC94m2154ry8.roa (hash: TrmmIYdBlXXb3FxJhiLUTMljo4lEhT6KOCibHbFmEAg=) 8: 9K0UiUtwMeDGLO07jN4cphQ0NhA.roa (hash: iD28nbSB8h3AMCMtfL1dVEifxVKaj30VOiCxNvUpdlc=) 9: FQAhyrS0gBW9SqtuZi6NPEvhgvs.roa (hash: b2xzO3i1ZOAXGwMPX7/Wy40sppb1tn8N9pURrf2iaI0=) 10: GIbN6bPur810JuGuHTYh5u7F5NM.roa (hash: Oikl7sXMAHs0Y+UGW9FTy+uNhN71zF966LLlZ+ZYmZI=) 11: Gyz6a3KXlcszmeD4XP7JYSSJB98.roa (hash: AzG7hu1mJnSnaE2NJTDYkswyaDmFnEmOHi9jFFpjg7U=) 12: I5CoNuYa1QHmdQ9Kc75dGAMDAcM.roa (hash: k45LeIb2ZuFIg9nv2VIXeMwWDcrg/6igPHCTVBEmt7c=) 13: KDbreFm6qa86qVWPbMSXjiRJb_s.roa (hash: 1MEUcBOj0QBk1+QfUlYD7XLcRWpZwRWbbrAL7ZihjGM=) 14: ZT5okXQpCE1L_UFUxKGgKpmWveI.roa (hash: ApTwm5XOwO8lK1KOUvV88VBx+9bwwdRBzVYLDFE5Eqo=) 15: dlTZMeVOmH-sGjLKfnpWqcWWk2s.roa (hash: DB9sfDl87OFpyZ/nDL1JNomcxUe0WBEVSpKL3sB9cVU=) 16: dxiJRbb0rG53Lq98f0i5g1Diw3E.roa (hash: 9/nhvqiEnr8fAWmfTM/kuetnXqSQzx8yP5QO3uiQqGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 07:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:be:93:30:fa:02:70:85:4e:b4:02:f1:76:51:35:cb:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2 Validity Not Before: May 11 09:00:39 2025 GMT Not After : May 12 09:00:39 2025 GMT Subject: CN=c3e0a4fdb00dd00f9a076707b688fe811f0b653a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:aa:d9:62:f7:fa:f0:05:a0:bb:0b:55:e2:72: f6:1b:b1:c9:d7:49:46:9e:2c:49:44:a7:b0:ab:8c: 3d:59:65:34:80:95:19:65:4e:ed:09:ab:d1:47:a2: 18:59:09:7c:43:f2:af:3e:e9:6b:22:84:cc:ee:91: 29:4c:1f:9f:6c:5d:76:6e:e5:73:f7:a9:c9:0a:66: 15:5e:8b:bd:83:7a:3e:69:13:5b:64:91:3f:b6:7f: fb:06:d9:5f:20:52:89:74:15:7f:e4:57:6b:b9:fc: 02:1a:ca:5f:c1:de:e2:ba:18:09:87:5d:72:03:7d: 5c:fb:07:51:a6:34:4f:e4:f2:61:cc:e4:74:be:ef: f1:f2:20:5a:50:06:99:b9:9c:9e:a5:09:a2:70:74: 0f:49:d2:67:de:de:76:db:cc:9d:f3:05:67:ea:04: fc:4a:35:6b:f7:bb:3a:0e:35:fc:30:f8:3a:12:84: d8:00:ef:32:d1:13:27:c6:c8:b1:38:72:dd:2a:e5: 25:f2:03:91:55:64:2f:af:de:f4:24:50:fe:df:9f: 25:c7:27:77:13:81:35:40:f4:d4:fe:9c:34:da:2e: 3b:5a:9e:05:06:8d:d6:26:3a:1c:fb:d3:1a:51:ba: 45:34:24:70:0e:e9:94:f9:3d:95:48:0a:8e:11:36: 9b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E0:A4:FD:B0:0D:D0:0F:9A:07:67:07:B6:88:FE:81:1F:0B:65:3A X509v3 Authority Key Identifier: keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:c6:7f:41:95:9a:d4:ba:68:78:71:f2:cf:47:66:21:ce:92: 50:a5:cb:92:fa:ef:48:d4:43:4d:41:ff:ce:25:10:c9:1b:ca: 1b:00:f4:44:7d:94:27:e6:cf:94:36:9e:6b:a7:23:85:f4:60: e6:27:41:08:08:d2:f0:14:49:0d:60:be:41:b7:08:55:3c:79: 85:f4:f9:df:68:6f:9e:fa:81:82:50:c7:46:1c:2a:9d:76:5e: c5:17:7c:b3:ad:eb:9c:09:dc:0b:96:47:76:a1:6d:1b:1e:6a: 60:83:2e:32:1f:d8:d3:aa:92:52:f7:57:ac:cf:66:ad:0a:44: c6:df:59:36:e9:78:9a:80:ed:21:d4:e6:33:f8:9f:78:ee:36: a9:85:8d:80:ff:27:b7:90:6c:ab:90:bb:6f:af:05:45:fd:e5: 0a:b5:eb:b4:cf:06:3f:41:21:7a:40:7a:fb:8e:7b:97:18:f3: 0c:af:37:c3:41:e9:8a:9f:74:5f:17:17:4c:89:88:92:fa:35: 54:1f:4d:dc:22:44:3a:b9:6b:c5:dd:57:17:f9:75:78:59:e8: 3f:7e:31:01:e4:0c:11:34:68:9b:c1:6c:27:44:43:78:dd:cc: ad:87:20:5f:99:4f:a8:fe:43:8c:e2:1e:e9:38:c7:f8:f2:ff: ef:0c:ae:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa+kzD6AnCFTrQC8XZRNcu2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MDFmMjNjZTgyMWMyNjRkNjc3Mjc1MzZlYzE4MzUzNzU5 NGM1ZjIwHhcNMjUwNTExMDkwMDM5WhcNMjUwNTEyMDkwMDM5WjAzMTEwLwYDVQQD EyhjM2UwYTRmZGIwMGRkMDBmOWEwNzY3MDdiNjg4ZmU4MTFmMGI2NTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKrZYvf68AWguwtV4nL2G7HJ10lG nixJRKewq4w9WWU0gJUZZU7tCavRR6IYWQl8Q/KvPulrIoTM7pEpTB+fbF12buVz 96nJCmYVXou9g3o+aRNbZJE/tn/7BtlfIFKJdBV/5FdrufwCGspfwd7iuhgJh11y A31c+wdRpjRP5PJhzOR0vu/x8iBaUAaZuZyepQmicHQPSdJn3t5228yd8wVn6gT8 SjVr97s6DjX8MPg6EoTYAO8y0RMnxsixOHLdKuUl8gORVWQvr970JFD+358lxyd3 E4E1QPTU/pw02i47Wp4FBo3WJjoc+9MaUbpFNCRwDumU+T2VSAqOETabiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPgpP2wDdAPmgdnB7aI/oEfC2U6MB8GA1UdIwQY MBaAFOgB8jzoIcJk1ncnU27Bg1N1lMXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAt NDY0ZWIxODNiNTY4LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAtNDY0ZWIxODNiNTY4 LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm8Z/QZWa 1LpoeHHyz0dmIc6SUKXLkvrvSNRDTUH/ziUQyRvKGwD0RH2UJ+bPlDaea6cjhfRg 5idBCAjS8BRJDWC+QbcIVTx5hfT532hvnvqBglDHRhwqnXZexRd8s63rnAncC5ZH dqFtGx5qYIMuMh/Y06qSUvdXrM9mrQpExt9ZNul4moDtIdTmM/ifeO42qYWNgP8n t5Bsq5C7b68FRf3lCrXrtM8GP0EhekB6+457lxjzDK83w0Hpip90XxcXTImIkvo1 VB9N3CJEOrlrxd1XF/l1eFnoP34xAeQMETRom8FsJ0RDeN3MrYcgX5lPqP5DjOIe 6TjH+PL/7wyu8Q== -----END CERTIFICATE-----Generated at Sun May 11 12:40:41 2025 by rpki-client