$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft File: q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft (raw, json) Hash identifier: ob2J260Ykw76y0fMkJjBwmD6mgUck+EySyo49gTJ5QI= Subject key identifier: 29:03:F4:82:9B:AA:37:CE:0F:24:44:23:10:9C:EE:10:14:26:9B:89 Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Certificate serial: 0196C4273E0CAD557E9A402D4641981AE0B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft Manifest number: 158B Signing time: Mon 12 May 2025 11:00:28 +0000 Manifest this update: Mon 12 May 2025 11:00:28 +0000 Manifest next update: Tue 13 May 2025 11:00:28 +0000 Files and hashes: 1: 3rSRd0RZU7FekSH23KpB4AjQvCA.roa (hash: dHJ5VK5jy4AG5zWMS9JzXCYfEPP9KtWlYIJ17BPZ8p4=) 2: 79SKiAPGItgSBiSdHsbiPNmxzdA.roa (hash: bp4Hzk1UysrE74qZJaWtC8IolTv/126MWUfJ4dgAP+w=) 3: 8CD_BDNohDu7BFPue0FAVtqeSKE.roa (hash: MBbBcYx0OZxz+xXv93fCUqPEHeogAGDOWRTI0SELjnU=) 4: DLGzg4PXXfMLLz9uU9Jb8GzjTYQ.roa (hash: UyDgyJqrwARZHVBt5A9PQUxwD+TJu3qnXyFQy1aEp9I=) 5: FmNEfzs-SRSfbomfiiNIeqQS1sk.roa (hash: DZqchwYxSvfrNSJm9BmQA3cTvM8eHMT7t5woC6TuhyE=) 6: Qdu0d9QLtNBsD5iH6QjOkHOjfR0.roa (hash: WIh4dCuUbUKwr5ezCX9dxWL5StxMpA6ugd95qMzqKA4=) 7: U3lA_e0y8319DjoZ7X8Ks2r2M7w.roa (hash: fqverKbNHsV3jVuR9y0WWha056JePZs0l3+H4zjSxfA=) 8: W4bkJ6IHGpMDnc-eERRMgLecaRY.roa (hash: f8DGWIOVKEtO1y7kX/yc0GrbmCyQ2M3bGkc6cPKnJfo=) 9: XWgY9IE5WPWEYKpZb_DdJSKgmNk.roa (hash: RjaBA1nT0ZNCp2uF/Bf1faWMk5+nUdGucIKvPd+4FJg=) 10: afCUdciEL8e1tl5gYWrtb0HNTsk.roa (hash: 5NoCDBuBZUGC39cg06n8OGy1uzMRcXZWmjT1H17s8qs=) 11: eeDfIlNHz-MS84Jn8ZaBvfv9TTY.roa (hash: Nuu5BDy0CuOnKoHwa87Nw4BNQ/P69UXEmPo5SaswqxY=) 12: ic4TzeBOLx46VAxZ0kBOyLnL-aA.roa (hash: o/eumNvuz+9CmmVOqXWqv98TZutXQn/8mhjgfl+DMUM=) 13: jEkIkDjyHf0Y5CHlkh_SAYrLMi8.roa (hash: nK+7va5r0DKn11vhjaj1KeeLmtO5MjFetghK5DI3nyo=) 14: k1o7H-5eEgCdvmr2Au7FXonmUIc.roa (hash: cPZnlWd1NF/fLPFMgOLyjHXmXf8GfrHrU0SBnmHDHvY=) 15: lSOxZN--Nv76VTwU3O8Fys07u2M.roa (hash: KF0YUVuZrHgrWuxvGjcknBz1cOoRQsrm28h1CM9VPOI=) 16: oRojqrF2upd4qpGF9qwuvKkB85M.roa (hash: rI1ZvEDD5nBz4EJV2sl7C1HlZDCYTwKf5IAxKcbibxk=) 17: q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl (hash: ibJ3iAwisFiuMGKDlwf/AOYpKK+hGaAuGKpPlzlNoBs=) 18: rbJzreDbHp60Zc3UJ6AODADth8g.roa (hash: BpjTDuP8RPY+luxryeSysWVMte9pS4i/E17bDx01jBk=) 19: rq4z53nTY235oXOYEJGf8J9hSBk.roa (hash: ALoDf8xPedv7a4y1Cobi6nNzEhORdIhw3weFRomPawE=) 20: wWbDK40S4dgNgIeoUbg-t_w6Qx0.roa (hash: SQUX4nOmlr/84KlBRvNtQfHH9k/9TOfWpMlz56zCIZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 May 2025 11:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c4:27:3e:0c:ad:55:7e:9a:40:2d:46:41:98:1a:e0:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Validity Not Before: May 12 11:00:28 2025 GMT Not After : May 13 11:00:28 2025 GMT Subject: CN=2903f4829baa37ce0f244423109cee1014269b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1f:e6:07:06:78:7c:30:79:80:7c:4d:ae:92: ec:99:51:4a:ad:3c:43:39:42:5a:4a:83:02:47:d8: 9a:12:e4:fc:18:ee:e7:8d:5f:7e:02:49:ed:9e:83: 6f:d9:a9:1d:f1:0c:15:e3:10:7f:af:f1:70:0b:80: 04:6c:2d:66:59:48:5a:2d:ae:45:f9:a8:a0:5b:17: 0d:0b:e6:d2:db:b3:c3:80:ec:a1:c7:7a:6f:67:d2: 3e:52:cf:0a:ba:76:65:4e:d6:63:a4:40:31:17:dd: bd:08:ac:4a:86:79:fd:2a:ad:57:87:d0:e1:d2:d0: 7e:96:68:aa:a0:e6:f4:61:10:77:a9:a7:9d:fa:ec: 25:11:df:93:e0:17:cc:91:d6:bb:e5:b1:6e:f4:e0: a7:fb:2a:8c:76:8b:2a:a4:b8:fd:e9:c2:52:72:83: bd:6b:10:93:6e:65:c6:7b:7a:d1:77:18:25:42:61: 0a:c4:86:f7:44:fa:58:98:57:a8:36:1d:ae:ab:cb: 3b:0a:64:1a:22:d0:fa:a5:a6:cc:d2:14:41:7d:ac: 6b:28:9a:f3:d2:72:86:d6:5a:ab:4b:e7:f2:c4:4a: c2:e9:0d:66:7a:fc:52:65:0d:8b:cf:12:c9:4c:03: 14:90:05:3f:0d:80:eb:98:9d:cc:72:4f:98:58:06: a4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:03:F4:82:9B:AA:37:CE:0F:24:44:23:10:9C:EE:10:14:26:9B:89 X509v3 Authority Key Identifier: keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:97:fe:19:1a:a5:d5:3a:17:3e:f6:82:52:4b:18:cd:e5:b0: 29:9c:7e:6c:b4:f9:d8:cd:a7:38:a9:01:8d:31:f9:61:de:02: ff:c1:78:3a:ea:44:d5:29:83:79:88:0b:fc:96:3e:07:a7:8e: 34:ec:69:a3:97:f1:0f:59:94:a3:55:10:37:8d:25:e7:86:4b: 66:85:12:e4:1f:b8:8e:eb:4f:13:53:57:31:4f:d1:d5:81:e4: 52:2a:ec:42:1b:cf:f6:1e:a2:f8:ab:58:75:fd:65:20:1f:30: f9:6e:82:d3:49:3d:27:0c:1e:3f:0d:4a:83:b3:dd:b2:e8:ad: 2b:f6:60:ce:d5:22:2b:f0:94:70:52:14:71:8b:61:95:6f:1e: e5:db:32:78:d0:73:31:52:46:0b:46:10:a9:27:0c:dd:96:46: 3b:cc:1c:5b:5f:4b:be:cf:29:1d:93:35:4d:f8:fd:68:b5:16: 21:b6:6e:88:6d:5c:e0:fa:f7:cc:f0:2e:34:86:64:57:21:29: e0:e1:f5:9c:3c:83:67:b3:6e:e3:2c:ae:cf:c1:f2:94:f7:91: 1f:d0:5c:76:63:71:62:3a:6f:61:0b:d1:86:2a:53:aa:0f:13: d2:c9:7a:88:86:39:da:04:fa:21:b5:3d:7f:17:c9:c2:00:7d: 30:50:67:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbEJz4MrVV+mkAtRkGYGuCxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzhkYmU1MjA4M2FkMzM1YzlmMWZkZTYwMTZlYzhiNDky OTMxNDAwHhcNMjUwNTEyMTEwMDI4WhcNMjUwNTEzMTEwMDI4WjAzMTEwLwYDVQQD EygyOTAzZjQ4MjliYWEzN2NlMGYyNDQ0MjMxMDljZWUxMDE0MjY5Yjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR/mBwZ4fDB5gHxNrpLsmVFKrTxD OUJaSoMCR9iaEuT8GO7njV9+AkntnoNv2akd8QwV4xB/r/FwC4AEbC1mWUhaLa5F +aigWxcNC+bS27PDgOyhx3pvZ9I+Us8KunZlTtZjpEAxF929CKxKhnn9Kq1Xh9Dh 0tB+lmiqoOb0YRB3qaed+uwlEd+T4BfMkda75bFu9OCn+yqMdosqpLj96cJScoO9 axCTbmXGe3rRdxglQmEKxIb3RPpYmFeoNh2uq8s7CmQaItD6pabM0hRBfaxrKJrz 0nKG1lqrS+fyxErC6Q1mevxSZQ2LzxLJTAMUkAU/DYDrmJ3Mck+YWAakrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkD9IKbqjfODyREIxCc7hAUJpuJMB8GA1UdIwQY MBaAFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2Qt MzA1NmFmOWEzMzVlLzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2QtMzA1NmFmOWEzMzVl LzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZf+GRql 1ToXPvaCUksYzeWwKZx+bLT52M2nOKkBjTH5Yd4C/8F4OupE1SmDeYgL/JY+B6eO NOxpo5fxD1mUo1UQN40l54ZLZoUS5B+4jutPE1NXMU/R1YHkUirsQhvP9h6i+KtY df1lIB8w+W6C00k9JwwePw1Kg7PdsuitK/ZgztUiK/CUcFIUcYthlW8e5dsyeNBz MVJGC0YQqScM3ZZGO8wcW19Lvs8pHZM1Tfj9aLUWIbZuiG1c4Pr3zPAuNIZkVyEp 4OH1nDyDZ7Nu4yyuz8HylPeRH9BcdmNxYjpvYQvRhipTqg8T0sl6iIY52gT6IbU9 fxfJwgB9MFBnlQ== -----END CERTIFICATE-----Generated at Mon May 12 19:37:57 2025 by rpki-client