$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft File: dGNlNVtmVWSiEMNYxooBF7f765o.mft (raw, json) Hash identifier: YZWlOTNnuV0qumeW/6ZEj65mhN1SGWzY2qHVy2obFtE= Subject key identifier: A0:D2:DE:03:8E:82:4E:51:CF:5E:BB:B5:CC:90:F1:DE:FA:5B:C5:A7 Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a Certificate serial: 0196B3341C017F28FCADD86BFDFE0CF61395 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft Manifest number: 1595 Signing time: Fri 09 May 2025 04:00:58 +0000 Manifest this update: Fri 09 May 2025 04:00:58 +0000 Manifest next update: Sat 10 May 2025 04:00:58 +0000 Files and hashes: 1: 0Z8yTYlKjkqvKh6kY-kM6OXYfz8.roa (hash: fwm0Gtt1RFKV50/Ms+CgVe/rwlPJ9Q3VLzTFIW1v2aw=) 2: 1i1h10HKuKMLFRXN4cBGZ2mRyJM.roa (hash: 7JEI6UNI/BK6+fsUZu0VQIRD6uiIejb022WVzNTlPqI=) 3: 4AhKQoLmAk1YQIBQspZfyfaiu0s.roa (hash: 1kEaOXNNkPEAuTvrZqrQmCGg/Uu08f1ofkHwiva1rBk=) 4: 8xmePB-pGcDcrQ-prX4UP_SBy78.roa (hash: OO9rzem914ccJuV3c6Pdstzz47bnogLMsoJtrFTJhQo=) 5: 9nwJkf06ywYV97ycnHX8xephiLw.roa (hash: E/N+tJSxegWf0b+66cYXz6Gw0s8y/7JfEZqjs9iWYvA=) 6: DyQ9EAiN0eniPyiox4aO244F9E4.roa (hash: bvLcpK55XH5/x9SBXkmzsY2x244oXbWNkS01fsXCohs=) 7: G1nDGEYcV0zuKzKuOXzDx75r3GI.roa (hash: 41u/KL+MWJdDf84HJGznj8QmpQB0mJMrGBzkwlxjtIc=) 8: HtGtnD1WG-uR4lNZ5h-A8-pjUrU.roa (hash: JiGHlI4PQlUWbSzc2TBFb2wXm1bs25OSgaV13SVkmqE=) 9: PQouGTOckW4W12cc4d-xjaematA.roa (hash: Kckr0tsSpm5YRyOoyFHZZMP1JYibeLXzK7UoR9DsQbM=) 10: PVKwdeX3NyiQmgk2A2820t7cOqs.roa (hash: 26tO2fkoICp4JASDnIMTpkdHS90b8zIixKpW6hSIQzc=) 11: TQNP6hoAf66GZWfHy5k78DAiiCU.roa (hash: uABddS+djXpmQc7iz2KFGbyJ5oeYnTC/ey9Ec918mow=) 12: UMHCyN1PhpnvoYUbs1CT_48YLGk.roa (hash: i765qk64qL4Uog5FTQxpy5y2jivRwNCYq0ub5NcQaLk=) 13: V51fQsmdOucWQLFJANFvs_Ma2i0.roa (hash: mhzDbXcVW4r5ZjsZqcqDKjjyLnY5MIVjnfy6m1yWpyc=) 14: V5HLYQX7OEpLFK_MH5_sUYR0JBQ.roa (hash: 6cm5gNEppEG5XD2KabFv9dmbCHQEnB7rCQFwcW30ZWM=) 15: WWDr2Um8NXXwWukbK6cj1BF3t7Q.roa (hash: KB4bFVPkGqmvCaRGbBdpA1si7s9CexKnU66M/mHt/0s=) 16: XZET7dFa5OoJqf73WGd1UHo9Trs.roa (hash: FbxqvpbDfsQRYaW0n//PgGX2T+UQY1wiBpKlSWUYJQg=) 17: dGNlNVtmVWSiEMNYxooBF7f765o.crl (hash: JxeoVYTT6B6/wiR4Z+8cQNK/7FTMEwzR6sDw3Aq2C/U=) 18: dc2g-kIH50S7LA2o26AVsv4LItA.roa (hash: anV8AfiZnJM+uW7z2xYGvooxLoCl6L/cGFCY34WgBTU=) 19: g3gXDyn1r3CKRtOkIamh9XiFNXQ.roa (hash: bsh/frVfpWjiiUA/IVdx5lj5UBB7HEuHeERH5RVXbJU=) 20: hbkDGu-27NQwuA34KKvsthuBpoc.roa (hash: gs4QclFDIW6OH3AQHoXwFFecYQ+OpwQ25vhb21IUnck=) 21: iHslhtFiuKaugZuIjgDSTM4F6Sk.roa (hash: 43DehRvyD4BSrfqUpPUdy+zsjmfPk1hQcSdYylB1zpo=) 22: jmqPtt5Ns_W-iBFLphm9TOPqcBk.roa (hash: Q0XLFkj7/QEzPnBRybOs7B/q1S4uk4+SdVBsy+OCL8U=) 23: lkYJ-_nXwt_j8sYXcXEPI8XjVSs.roa (hash: H5A3LLoCNjemShwdfzZoOLg2oRcQfw/qyX1Up4Fug7w=) 24: m095Z-7KR0K5gXucbWhKiz12Uqg.roa (hash: pKKUCvxcyqiDYUVY3jhLgvu4uMJ7RTYnDW2HPLpWkkY=) 25: nMVuUhhQLd_p2MmIFg0uk6oN0DA.roa (hash: VPC3QfM3Xk9o/TFr02RnouDa7yDlwB8VvuZ6tJbURMA=) 26: na93BrU5ShpCOO3gSaEqJY-3lT4.roa (hash: jsEtQ0ZWxD7UTjfus61ic0m3WTlswJgMUxwjfxzFL4E=) 27: oEbBV7xx5_jwLtoklKva4-Dg2v8.roa (hash: i+aaCmiUXCVg0OPcM0SwO92pJsKLDZGoxx/fXdMrMgQ=) 28: oQY8Ggs-WHGozgLdlzn62PGvTmo.roa (hash: Rm3b27WZnppZmsClSvXbSesr4c+ogRwCEVrSLNbiwvA=) 29: pxlKKbY5iFrGDh2EplDOpH6i83c.roa (hash: NzuvlzBZxwuFwdNVVQbFAXj9HW/JV+FHbP6jYRM1epA=) 30: r-97pPvj-RimUl1469wxiEjOXHw.roa (hash: BJihjsrYYxzSHh3xQ0PZJNW0AKvTbj8ZG/b/oUaGZaU=) 31: sTAcEeIlslVpuXMYkyeJBskGwEo.roa (hash: sDqLs0eEA0fKuxXHljiO7Zt9np/B1YWaKWKNaP6grbA=) 32: si-h3EMZPum7ZeFVKrM-JgEvS5s.roa (hash: e6RNF3nCZ80GPAqffnrYJBWzKtbs1gbwLTkQ6jY31gw=) 33: t2bPxtc37O7_UaSx43VqFjBQeQ8.roa (hash: TQAVmYhnwd2Kv49WbSb4VDqVmwGOcSo0dPabg2IvysA=) 34: yQrQFduK0DtQ87ggKb7Q-woZC_g.roa (hash: JZkejbipvDPpwEzOuopgf48bMCeYE8xwPOaWUFT0b6w=) 35: yTFqO5xiaIDSCJNJ_ZUqbKSypdQ.roa (hash: zRFFAOZDcEueQQ2liuDNq8EtejJKoUyry9Flbp6zROU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b3:34:1c:01:7f:28:fc:ad:d8:6b:fd:fe:0c:f6:13:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a Validity Not Before: May 9 04:00:58 2025 GMT Not After : May 10 04:00:58 2025 GMT Subject: CN=a0d2de038e824e51cf5ebbb5cc90f1defa5bc5a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:35:c1:92:30:97:74:88:65:1d:5e:38:02:e0: ae:f3:dc:a4:0a:07:bb:a6:b3:40:98:2d:fe:d3:4a: f4:4b:e4:8b:a5:96:db:2b:e7:af:05:53:27:c1:c9: 86:39:3e:96:63:8c:58:21:91:f9:c3:48:4a:e9:19: 8d:1a:e4:d8:e4:74:9d:de:b1:75:c9:45:15:b5:2b: 77:50:85:4c:4e:dc:87:e2:73:d2:4f:7a:c8:7d:37: fc:3f:d5:9e:29:f7:3f:58:5f:74:f5:e4:36:3f:8a: 06:b4:9d:10:d1:5e:cb:e4:cf:62:81:6c:bf:79:cf: 21:df:55:e1:d4:72:61:f5:c7:58:67:eb:4c:9c:de: eb:57:c6:fe:91:8b:01:dc:1c:f5:e9:32:b0:69:51: a8:50:d0:6a:36:e7:f3:70:34:c8:23:15:a0:33:6d: b3:f3:ee:37:f0:2d:1f:44:3c:58:da:22:a5:79:3d: af:bd:99:23:bc:d7:dd:d2:11:9e:84:38:59:bc:ff: 4a:f9:3f:29:4a:8a:08:8a:04:93:8e:64:2d:2a:84: 95:36:f9:de:8f:2d:d0:b1:dc:05:91:b7:b3:04:29: 1b:13:e4:a2:4a:d3:d4:de:72:d1:82:82:47:b3:d1: e1:07:2c:55:06:20:f3:af:79:85:4c:a0:a0:1a:14: 97:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D2:DE:03:8E:82:4E:51:CF:5E:BB:B5:CC:90:F1:DE:FA:5B:C5:A7 X509v3 Authority Key Identifier: keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:9d:de:41:89:1b:8d:db:35:df:00:b7:72:ba:a1:f1:f6:36: 18:97:0b:89:23:1f:2a:a4:d5:01:e9:09:ca:d0:90:fe:98:f3: ae:36:fb:7f:2b:2a:68:ed:37:df:79:94:e7:f5:d4:44:08:d2: 1d:52:21:42:5a:a6:53:d5:e4:1d:d1:ce:a9:eb:b7:af:b5:da: 75:b9:43:2e:53:5d:d0:be:19:0c:4e:34:b4:55:70:15:ea:71: b2:fe:58:29:2f:c0:5c:42:48:4c:0e:df:e8:cb:b5:f0:17:90: fd:04:09:d8:f9:96:14:f2:c6:b9:d2:e9:f6:37:72:68:09:bb: 75:95:c8:10:97:ec:6e:d0:2a:d8:3f:0f:07:e7:1f:2d:26:9f: 96:5a:69:59:9a:bd:bb:55:fe:75:c3:85:46:90:5e:21:a0:d7: b1:7d:9d:a8:c7:c0:58:16:0a:05:b4:43:aa:b3:8a:15:c0:50: 15:bd:dc:a5:a1:53:c3:c6:b5:78:1e:34:a5:5c:08:27:8e:28: ef:bc:4a:e6:ee:8f:3b:30:bc:52:5a:f8:ab:8a:34:87:15:ce: 9f:92:e6:3b:88:fa:98:a6:6c:07:b0:81:62:2f:62:be:0b:fc: 9d:f2:f4:3f:46:c4:ef:c6:77:c3:3d:20:67:ea:a2:28:ba:bf: f3:73:c7:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZazNBwBfyj8rdhr/f4M9hOVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm YmViOWEwHhcNMjUwNTA5MDQwMDU4WhcNMjUwNTEwMDQwMDU4WjAzMTEwLwYDVQQD EyhhMGQyZGUwMzhlODI0ZTUxY2Y1ZWJiYjVjYzkwZjFkZWZhNWJjNWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDXBkjCXdIhlHV44AuCu89ykCge7 prNAmC3+00r0S+SLpZbbK+evBVMnwcmGOT6WY4xYIZH5w0hK6RmNGuTY5HSd3rF1 yUUVtSt3UIVMTtyH4nPST3rIfTf8P9WeKfc/WF909eQ2P4oGtJ0Q0V7L5M9igWy/ ec8h31Xh1HJh9cdYZ+tMnN7rV8b+kYsB3Bz16TKwaVGoUNBqNufzcDTIIxWgM22z 8+438C0fRDxY2iKleT2vvZkjvNfd0hGehDhZvP9K+T8pSooIigSTjmQtKoSVNvne jy3QsdwFkbezBCkbE+SiStPU3nLRgoJHs9HhByxVBiDzr3mFTKCgGhSXAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDS3gOOgk5Rz167tcyQ8d76W8WnMB8GA1UdIwQY MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt NmE0ZWNhZjhiM2IxLzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZ3eQYkb jds13wC3crqh8fY2GJcLiSMfKqTVAekJytCQ/pjzrjb7fysqaO0333mU5/XURAjS HVIhQlqmU9XkHdHOqeu3r7XadblDLlNd0L4ZDE40tFVwFepxsv5YKS/AXEJITA7f 6Mu18BeQ/QQJ2PmWFPLGudLp9jdyaAm7dZXIEJfsbtAq2D8PB+cfLSafllppWZq9 u1X+dcOFRpBeIaDXsX2dqMfAWBYKBbRDqrOKFcBQFb3cpaFTw8a1eB40pVwIJ44o 77xK5u6POzC8Ulr4q4o0hxXOn5LmO4j6mKZsB7CBYi9ivgv8nfL0P0bE78Z3wz0g Z+qiKLq/83PH0Q== -----END CERTIFICATE-----Generated at Fri May 9 05:06:39 2025 by rpki-client