$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft File: hszgbnDflw2Qq_48vn-ogvRnseQ.mft (raw, json) Hash identifier: 4CE3EKx9Uhy/4BEXq3VQbCdAZXNLKybksPejkjJiyVY= Subject key identifier: 77:FB:5B:47:3A:FE:D4:64:D3:D3:BC:36:70:98:A5:45:7A:07:AE:CB Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Certificate serial: 0196CFF49B64BB0EB5D46AC33C9500FAE1F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft Manifest number: 0D8B Signing time: Wed 14 May 2025 18:00:36 +0000 Manifest this update: Wed 14 May 2025 18:00:36 +0000 Manifest next update: Thu 15 May 2025 18:00:36 +0000 Files and hashes: 1: 0YUh1AndNjqdItbk6JV01KdXxE0.roa (hash: FsVZUIPlXudd2momzEEJnW+6aN3T6GQVWkVqMF0Kz9Y=) 2: 1KrHnSgllq_k9B2wst0bYaC6fyo.roa (hash: lStApswe2/6Ekqa6XmoUoNcd7HO52b9jBs5I4vOK1gc=) 3: 2r2GG3Z2qTTT4g4Y8XqO_XMC7Eo.roa (hash: 3OHcEZapfFHtZllJ50Vm5hOAGU/4QJA5k3QT//j1G5g=) 4: 4ONine07eIhpJhI9ECOeUP9WFQg.roa (hash: MmJtgZmAq2o+Sq5m0y3r9fQ0BH94PpmL5fYIQg/FZYc=) 5: 5T2bu1MZznUR1RN9nzIhUN9ndjo.roa (hash: 0dmLTT5O4LwcX1oD39PZYRT1M5ADWkC9hV3kx2Ypkhk=) 6: 7m4fpAGLnYeYzw_LpbbgUyrtkQ4.roa (hash: QCn0wSKzzt7ZbsRCL3R6XrUlE4vfiZ5prjFMeQ+ZRnk=) 7: 8es5WUjCpzbWEQdLdvRmhiI4IP8.roa (hash: wfsLBNN2brN6rPEMEn93CKElPjRpjXrU86X4tDSQcxs=) 8: Bu5OSyuwBUvGyz_EW5xEisOkNPE.roa (hash: floFuiP5W+ix524d77mDjkmOxeUI0BamBhf6MRMbiKo=) 9: ERVdycpY4bKVWQxSzavqyLO77UA.roa (hash: KjnUBMfnbY2dTYCqn8dXExC2kP5qWbontZX2wFEns5A=) 10: FRwc3NIwLMg85xs9oKQE8y-aSsE.roa (hash: 4ntKtlA4N2n8X73E8ZF+yd2Me5uBBOuZ+BWHkgFL6/M=) 11: GgheZMui_9obLhlNhZVy8uWvs5U.roa (hash: 7NB7RYWksH/wQuJ5gKOAyFQPxId7nbq3caWrTZFbMUE=) 12: ITVTbhXITtbbCNEqCEfxFbgqvU8.roa (hash: kInBZjCzyjFvEkmWMFFIjkVHO0pi6G0oNQxZMoLPtU4=) 13: KA4LwOR0SFFzggv9RjQOIamBBDw.roa (hash: o1AhNBlTNTdw9m6UEzikO/p4j6hDFJ/Wvyqei8f5SQY=) 14: KNg_TScubKiJ2WSk1PndDHXafcs.roa (hash: OLVAzv3WRT7v8ayDj8gM91zwzw+fJVhu8S1Dv4NJlCY=) 15: LyVym4UPK98Ng-1a9OLHRZHLRmw.roa (hash: /EWVi2VWVGQ7yEZI1vDOB6bTXscAFP3frjxwug5o7DE=) 16: MTfhoMhVaa2jvLpWsCmafYAY7JA.roa (hash: 3m+kRkEl2wmWqDNlaY4ekeMfluU4hnJDaRCFsllksbo=) 17: Nu6zijQv-DL_hfJdU699EWekTRg.roa (hash: 771rwm16NJYUQ87KCX/qmM+TkgZCBwyWJcoh2RVWoMM=) 18: PKHsjOvOcdlc_y5mG_drpwxHdbc.roa (hash: hbdJYigmCoIQhg2/iQ5VMHWL3khykxXVYtz+M1XpOF0=) 19: WDKIHrVYkHEP-_jHo4nENWRIc38.roa (hash: eRiMu2gAszaQ29h+cDiGSbBxDr/jEEiSq3+mBGq95KQ=) 20: WcNfc2ebH1nabssdIAaljgMAMvI.roa (hash: gIeR1+oo2boP6Zw5hratvRw93AbF/Ul3dA94pgz+zkM=) 21: XAkX5rregKOAZ6goJ5wx9HQsoXA.roa (hash: 2tvW+4GQcYwWdY3d9omkAom+BcKhq65s61hMNNvk19g=) 22: YK43wUlx-m3H_C6o-5_fkIZ3XlU.roa (hash: lZmput/l72Qqm+vzyffdMdSg9aLUuGTEYh4bDbHWmNw=) 23: YkSDoKYOtMCdRX_GWKoH7bN9Qog.roa (hash: i72ku+f2KHytCtL8AK60yC0CuhLhud/m7lirtjbMIIQ=) 24: aqMlRyXFF3MZq_HuCgUUi65uKJg.roa (hash: LyUxXMbv9DIW0MA/p9uc9iCcmc5wGZs1xeaJCZat7fw=) 25: hszgbnDflw2Qq_48vn-ogvRnseQ.crl (hash: DgTjVL+SoG3XIK6OnwnRF/IYZagDrxQVbPM3D+rPPvs=) 26: jZYs0dzIvS25J4lteuVc561ZAY4.roa (hash: rfSaNujzpLss3LyIOfVGL5ba21k4OmOMHbD7Qk5vT8Y=) 27: jqtV_uax1l_jcMRVSpaIyiZ162M.roa (hash: Y4HN1NVU+4Ighjr+8NWHfgFsJcgMLxBPTCdLXtE0n+Q=) 28: nJtWVAK4rVZ-QksjyqcUPdq2E-0.roa (hash: fPIupekHjPTLOUuEW0SI4UjXbZKLCETnBj5TxkygoP8=) 29: nnu54qaAmQ6pvabzFz6Up-pPH0I.roa (hash: kBmeew+tYf4WAQZ+Fc361sy82Oa/VLosP5CcZUUWBvc=) 30: riibS-9jCOUuRel1tsYcRpIOKLU.roa (hash: EeskdcNck3dqR0K/qsMzHAoOdtdVX+0gjJ2l/1tSnr4=) 31: t_NEg6wAORA2z6iY5tzozpqnVeQ.roa (hash: t2U+jSzM9nfj8HCTrMEEUxEUZzl9OlK4KTd8PiWngec=) 32: x1qi7vT6XlkpDqHOF8EBAKymy_8.roa (hash: wBFn1pbZFU8rbNr/Rh62ylE2f+RYhtW7iwkEa54rtdg=) 33: xh90gjkdUREP6u7CqXiyIEvYxEA.roa (hash: iJRqmCsgsCfQh0p+dtT91CErS4lAajKkC3AlO0Q/BlI=) 34: y-q4QvIjOXXAb6phQmiwxEr2T44.roa (hash: Fy91hg1vS4tIXtpEC6wT1knLe6VIcGMT2+6MAUeo8ig=) 35: ynxoqLNGRfbAQl1csrIqvWu2om8.roa (hash: 02FpxfF5rw0ZP5XHvGYcpaVTPQJddG9K1OzX9QimBYM=) 36: zUEFatqyx1IZKzX2t06sZD8CpVU.roa (hash: QXwL/UriFGOH6USTOmoWPAfbRYkVx/Bvm5SJbZHfQXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 May 2025 14:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:cf:f4:9b:64:bb:0e:b5:d4:6a:c3:3c:95:00:fa:e1:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Validity Not Before: May 14 18:00:36 2025 GMT Not After : May 15 18:00:36 2025 GMT Subject: CN=77fb5b473afed464d3d3bc367098a5457a07aecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5b:1b:09:6e:54:52:91:c4:2d:7e:df:af:45: c8:b3:e4:cb:6c:00:a4:3e:26:ba:98:14:46:61:e8: 65:60:f0:44:c3:d2:7b:8c:ad:0d:c6:d0:32:04:db: 82:0f:f2:a5:51:3a:29:73:cc:97:12:bc:1d:b4:b7: d3:1e:e5:00:84:8e:85:d1:90:24:ef:43:48:89:b6: c7:09:ab:c4:20:ff:6e:a5:be:25:0b:5f:06:c9:b3: 3c:7a:bb:48:3b:16:be:54:db:a2:93:d7:d4:01:4e: 70:fb:cb:f6:93:ff:3d:31:50:b1:5b:24:dc:1e:fc: 34:c7:e9:bd:f4:db:95:f1:cd:df:eb:37:3f:d7:cb: a5:08:06:a8:18:db:2d:79:72:cb:e3:25:a0:81:a0: 14:bc:d8:75:b4:40:d8:2f:f0:25:75:76:67:f8:a9: cb:38:59:e0:1c:86:4a:0f:0a:cd:99:2d:6b:2e:0f: 81:d1:a6:34:b7:bb:77:fe:82:37:58:df:1c:3a:b4: 29:4f:89:24:2b:6f:29:65:bc:75:f6:ab:87:ca:b0: 26:a8:b7:d9:c2:6d:1a:ed:52:83:90:06:26:b5:3d: f5:30:c3:da:52:fb:d5:4b:4e:59:c2:fe:54:7e:cd: 5c:91:26:ce:03:67:53:18:38:ad:25:35:6c:9a:45: a8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:FB:5B:47:3A:FE:D4:64:D3:D3:BC:36:70:98:A5:45:7A:07:AE:CB X509v3 Authority Key Identifier: keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:cf:a4:dc:63:b0:28:ec:dc:02:90:40:0d:29:8b:70:65:19: 15:01:3f:54:cd:a7:97:ae:aa:49:5e:62:50:0d:bc:aa:91:5b: 47:17:a3:0b:7c:f0:52:bd:0d:2e:6b:bf:09:44:1a:b4:fb:f9: 2e:39:ea:03:64:45:4c:08:37:92:32:0c:82:2b:ca:08:d4:17: 14:0a:5a:a0:be:fa:62:98:78:22:c5:08:7d:84:0c:21:ab:ac: ba:5c:d0:74:2f:28:13:1a:12:39:4c:81:3a:66:bf:01:9f:13: 88:42:5c:ad:7f:9a:dc:dd:84:5a:87:d2:65:ec:79:95:e9:db: 01:85:cf:7e:67:a1:63:d1:6d:9d:ef:fb:7b:52:e8:f7:50:fb: d8:23:e7:11:ff:35:17:55:68:a1:c6:e6:8c:4c:c8:0d:19:5e: 0c:16:7d:67:e7:57:66:7b:24:06:db:fd:9e:67:11:7c:ca:4f: 27:9d:dd:5b:e3:59:02:1f:8b:4c:4b:82:c5:0b:4f:9c:fe:52: 85:f0:51:b7:06:cf:bd:55:ed:4c:76:a7:57:bc:a8:f6:50:4c: 49:63:ef:7e:55:ad:9c:2b:6e:7e:87:21:83:73:84:e3:07:b5: 1a:33:e1:52:a4:82:95:06:16:9c:77:1b:08:24:83:3e:9c:d0: dd:f3:26:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbP9Jtkuw611GrDPJUA+uH1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2 N2IxZTQwHhcNMjUwNTE0MTgwMDM2WhcNMjUwNTE1MTgwMDM2WjAzMTEwLwYDVQQD Eyg3N2ZiNWI0NzNhZmVkNDY0ZDNkM2JjMzY3MDk4YTU0NTdhMDdhZWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lsbCW5UUpHELX7fr0XIs+TLbACk Pia6mBRGYehlYPBEw9J7jK0NxtAyBNuCD/KlUTopc8yXErwdtLfTHuUAhI6F0ZAk 70NIibbHCavEIP9upb4lC18GybM8ertIOxa+VNuik9fUAU5w+8v2k/89MVCxWyTc Hvw0x+m99NuV8c3f6zc/18ulCAaoGNsteXLL4yWggaAUvNh1tEDYL/AldXZn+KnL OFngHIZKDwrNmS1rLg+B0aY0t7t3/oI3WN8cOrQpT4kkK28pZbx19quHyrAmqLfZ wm0a7VKDkAYmtT31MMPaUvvVS05Zwv5Ufs1ckSbOA2dTGDitJTVsmkWo1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHf7W0c6/tRk09O8NnCYpUV6B67LMB8GA1UdIwQY MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut ODk3MTRhN2U4ZDU4LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4 LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJc+k3GOw KOzcApBADSmLcGUZFQE/VM2nl66qSV5iUA28qpFbRxejC3zwUr0NLmu/CUQatPv5 LjnqA2RFTAg3kjIMgivKCNQXFApaoL76Yph4IsUIfYQMIausulzQdC8oExoSOUyB Oma/AZ8TiEJcrX+a3N2EWofSZex5lenbAYXPfmehY9Ftne/7e1Lo91D72CPnEf81 F1VoocbmjEzIDRleDBZ9Z+dXZnskBtv9nmcRfMpPJ53dW+NZAh+LTEuCxQtPnP5S hfBRtwbPvVXtTHanV7yo9lBMSWPvflWtnCtufochg3OE4we1GjPhUqSClQYWnHcb CCSDPpzQ3fMmwg== -----END CERTIFICATE-----Generated at Wed May 14 22:59:20 2025 by rpki-client