$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft File: Hq9cLl7cGXg00H80WWKwdFvuZtc.mft (raw, json) Hash identifier: LsfanMb46VR0DHVTJayK9l7B9dnIxYfXofeQgL6McJc= Subject key identifier: 7E:83:92:2B:EB:2A:34:F9:4E:D6:35:C2:7D:BB:04:A7:CD:6A:40:59 Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Certificate serial: 0196C6837988FC3F18F6312AB93889BE0C68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft Manifest number: 1566 Signing time: Mon 12 May 2025 22:00:27 +0000 Manifest this update: Mon 12 May 2025 22:00:27 +0000 Manifest next update: Tue 13 May 2025 22:00:27 +0000 Files and hashes: 1: 02l3UdnmFD8L6C2sS1gUjkB5ucw.roa (hash: QsQsXBqvm2htoInMV6VpVWJWic+91/OE8UWDxR68Vpo=) 2: 06rc37d4ySiHH7U_G0pZ2A8ZWso.roa (hash: y488XmHmKUr06Gkib6kZv84Q3w6h48Qpmjga5mYEARE=) 3: 6ZjVieWDxISz7rcD_qo9tLO0fek.roa (hash: kas+ivVM4jPtwZ5MbfcKGIuzBhPqOhAN9LdaPiB1nkU=) 4: 8WcEwUSj2wOJng1zUkfEtZuaJZw.roa (hash: 2Hp2+onCzllg33moHxvy6+TiMwQM4+V4QjOVaEEgzAg=) 5: BFNHxMvu6o_pd190MA5kHo9K38o.roa (hash: FcPSU/d4/c62liqKr9vyijfDqdlxWMulLIte1dKOTFI=) 6: Clh59qbFk87HB1hStYjpCYPWYPk.roa (hash: SZP/GWHvVT/kBate2YzVVZAZXuTp21FWytFNyzKpByg=) 7: Hq9cLl7cGXg00H80WWKwdFvuZtc.crl (hash: gXz4zUBnBCwzsFM4m3s+r5HTdXCzsz2jWofgVKsl4KA=) 8: Jum2LObwkQGXSAGe0Bhp24xxifk.roa (hash: i6JO+szqd2rN4UR9UnF4hqy4JNlckwmqsLSffip4MY8=) 9: OuhlLkG2RW0EQdfJol0a6cxFtLA.roa (hash: dMQSaubmPLEo7nj/OCwJK0Yv/vyeNOmJhvUcFAo9JLg=) 10: Rgo9aXOlLE3TPMGLASt2uxQNqoA.roa (hash: wIpRRei7PG3Jt4hc0d1ub13vmuztDQLCyD4oxK8b+CQ=) 11: bSWONJ-E_8V9EUOTjVg8BkBBtqM.roa (hash: jmPCp6yXzxLJDYKrtXi4j0Nqwi74mWH6TllKsaF2WqU=) 12: e1ucky2gtRUWqjh2W_9-FUaDeco.roa (hash: IxT0Rnlu2Pa21xBI3whvhU3j8HT/Mxf3h/l6fQzZTt0=) 13: fTApxPH61hLGkJtBcFjZFwHkWlQ.roa (hash: 2GS0b0hG0UIwi13XUymC7ISdQiAg1d0yfTtxpcEKyIU=) 14: m76dCMrVWf_Z3SQkxAPw_dBRkjE.roa (hash: Ci4tpeEHKHcsYzrGJQHs0JHLKLh/EcoRDa2ngztjU6c=) 15: oKqU8tjo3Uny7cExpTu79CEQXs0.roa (hash: 6npitP1IZschN8M7amkfuQxbFmC+YxEdlFbbthwP1nQ=) 16: vCflLMx_V986blYmQXbzXttPM6Y.roa (hash: 4AWZ2XlYvyQnfq0suLYmaQ4e3hwFckiYu1Kg5cC3b9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 May 2025 22:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c6:83:79:88:fc:3f:18:f6:31:2a:b9:38:89:be:0c:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Validity Not Before: May 12 22:00:27 2025 GMT Not After : May 13 22:00:27 2025 GMT Subject: CN=7e83922beb2a34f94ed635c27dbb04a7cd6a4059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:06:51:a0:8d:4b:73:7a:dc:ee:d0:5c:d4:bc: c4:70:07:0c:84:d9:ea:e5:21:ba:6d:24:13:3d:48: 87:16:fe:32:02:a8:78:3f:1e:2e:44:be:7d:2f:c1: be:63:b8:71:a9:7c:e8:f1:69:25:be:3d:fe:37:ae: 03:58:91:72:64:ba:40:32:ef:ed:cb:6d:10:fd:37: ac:5f:92:66:96:74:ad:ec:42:6c:45:c7:86:a1:d3: 07:b7:aa:a0:ed:60:a9:d6:12:9c:e8:a9:69:74:92: f8:8d:27:e1:33:c2:f1:88:39:28:ae:4a:2a:0c:38: 33:09:04:87:cf:fd:ac:0e:74:ba:8e:a7:15:0e:f0: 6f:0c:d6:c0:6a:d7:81:08:a3:4e:54:3f:a8:c5:dd: 30:1d:e1:b9:4f:14:10:29:bf:57:d5:f2:e1:84:f5: a3:b8:67:9b:9b:af:72:40:af:f7:ed:09:f2:a4:ca: 17:f2:05:77:e5:17:ca:62:6a:28:03:b6:6f:ea:52: 1e:88:4a:51:7f:b4:f8:ea:a6:52:31:e5:09:ac:f2: dd:54:45:bd:77:a9:a0:13:cd:a7:4d:a9:52:09:b5: 13:e2:e9:65:c2:cb:b7:44:bb:be:98:0b:2a:e6:49: 5f:04:b0:f3:68:76:3d:8c:09:36:16:b0:25:ab:14: c3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:83:92:2B:EB:2A:34:F9:4E:D6:35:C2:7D:BB:04:A7:CD:6A:40:59 X509v3 Authority Key Identifier: keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:22:d4:ac:99:5a:65:ff:11:62:93:93:0a:67:70:02:e1:6b: 49:e7:da:13:08:09:4e:2c:ea:86:c2:29:86:d3:7e:e2:a8:c1: 1b:b3:94:3e:62:65:40:01:17:e0:ab:e8:38:6a:21:15:c2:b5: d6:61:9f:a6:45:fb:6f:25:b4:9e:2f:5b:14:08:e0:94:5d:6b: 20:6b:39:a2:1f:1e:cb:7a:57:0d:18:93:0c:9c:7f:b5:7a:e1: 84:94:24:33:a6:f0:63:43:13:f2:38:08:ba:b3:9a:83:cf:2c: de:c4:94:d5:4b:f2:f3:26:17:78:26:37:43:e5:4a:10:cf:d0: 65:1e:81:4b:f5:9e:81:2c:79:35:e7:8b:08:f3:d8:84:da:6a: 25:65:91:58:dc:b3:0f:79:52:7c:a7:c8:52:65:9f:17:a4:e8: f1:2d:9c:af:d2:1d:98:d3:5f:d6:0b:15:a3:15:1f:49:a5:78: 96:c7:0b:f1:71:6e:cc:0d:40:2e:cc:57:8b:27:76:27:08:0f: 21:a1:15:0b:34:15:67:58:c3:e8:e1:ea:77:bf:0b:6d:c0:fa: 8b:e6:14:d6:a7:5e:6e:1e:42:e8:ac:8d:ee:2a:48:54:36:c4: 80:91:c9:c1:a8:a9:f3:ef:e3:76:b3:7e:96:d6:86:e1:2b:04: ae:9d:37:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbGg3mI/D8Y9jEquTiJvgxoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYWY1YzJlNWVkYzE5NzgzNGQwN2YzNDU5NjJiMDc0NWJl ZTY2ZDcwHhcNMjUwNTEyMjIwMDI3WhcNMjUwNTEzMjIwMDI3WjAzMTEwLwYDVQQD Eyg3ZTgzOTIyYmViMmEzNGY5NGVkNjM1YzI3ZGJiMDRhN2NkNmE0MDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgZRoI1Lc3rc7tBc1LzEcAcMhNnq 5SG6bSQTPUiHFv4yAqh4Px4uRL59L8G+Y7hxqXzo8Wklvj3+N64DWJFyZLpAMu/t y20Q/TesX5JmlnSt7EJsRceGodMHt6qg7WCp1hKc6KlpdJL4jSfhM8LxiDkorkoq DDgzCQSHz/2sDnS6jqcVDvBvDNbAateBCKNOVD+oxd0wHeG5TxQQKb9X1fLhhPWj uGebm69yQK/37QnypMoX8gV35RfKYmooA7Zv6lIeiEpRf7T46qZSMeUJrPLdVEW9 d6mgE82nTalSCbUT4ullwsu3RLu+mAsq5klfBLDzaHY9jAk2FrAlqxTDeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6DkivrKjT5TtY1wn27BKfNakBZMB8GA1UdIwQY MBaAFB6vXC5e3Bl4NNB/NFlisHRb7mbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODIt NGEzNGMxYmJhYjJiLzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODItNGEzNGMxYmJhYjJi LzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMyLUrJla Zf8RYpOTCmdwAuFrSefaEwgJTizqhsIphtN+4qjBG7OUPmJlQAEX4KvoOGohFcK1 1mGfpkX7byW0ni9bFAjglF1rIGs5oh8ey3pXDRiTDJx/tXrhhJQkM6bwY0MT8jgI urOag88s3sSU1Uvy8yYXeCY3Q+VKEM/QZR6BS/WegSx5NeeLCPPYhNpqJWWRWNyz D3lSfKfIUmWfF6To8S2cr9IdmNNf1gsVoxUfSaV4lscL8XFuzA1ALsxXiyd2JwgP IaEVCzQVZ1jD6OHqd78LbcD6i+YU1qdebh5C6KyN7ipIVDbEgJHJwaip8+/jdrN+ ltaG4SsErp03Hg== -----END CERTIFICATE-----Generated at Tue May 13 06:23:57 2025 by rpki-client