$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft File: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft (raw, json) Hash identifier: yxqrvjIkk03BBoPSpuOiBJo31Ha+WIuRdWhER+suOLM= Subject key identifier: A1:B5:C4:72:4A:11:F0:F4:37:79:AA:74:70:83:C3:F6:BA:78:1A:52 Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Certificate serial: 0196BFDCEE186985800240EC1EBC4CD82072 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft Manifest number: 0EDC Signing time: Sun 11 May 2025 15:00:49 +0000 Manifest this update: Sun 11 May 2025 15:00:49 +0000 Manifest next update: Mon 12 May 2025 15:00:49 +0000 Files and hashes: 1: 7InXKoGXPyPmSkShdNo1bN5BHPE.roa (hash: p0vQNoVwsgdCf98zXzcil2JDwtIbKg4o52YVuAX43Qg=) 2: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl (hash: sxpxfFRH+uUc4nF9C1AHCPmjuvBh6rjXgQInXgbVPuM=) 3: G7eTk3jqB-BdA_Wy3K2E2YFtyTA.roa (hash: OtseOoY4gfu7tKjqn1wIwpg1/zv9XoIf0fx8DQ1CUfM=) 4: ISNHkwTdIse1R5eVAbZVrpNzf7I.roa (hash: aWcNBCaUk6iVQl/ljrkexa0tplOypXs9VyEvekzMA3M=) 5: L0ujmwzkJ6RRH45eugAjMYC2Zhg.roa (hash: ZYuGlloJDpR2SY2TTczc6v50q6dosW6j6YAj25G96Pg=) 6: LII7hRC3tP9UTUOEbD-OlE2YLz0.roa (hash: 2G0IT+KoXJQxpXp8HjaK3udKnKhR8XLas866IuV7Mj4=) 7: MGAJtndIL2Zkck_RVFiKK_Egp5c.roa (hash: 3Dl+p66+/Z3qtyr+Z1rkPfMp8vG5nBq1fl9w3qHRGM4=) 8: QlkzD36W5v0AxlNSx0z4hSk7uFU.roa (hash: uYqo04qiRW99BRZNiigYBH7mOhV3UNP+jPgusIVov/k=) 9: VTdQuPLguO6Ibw0Th9ypJCxyOf8.roa (hash: ipcRPToVDEN7EVH1AfqkAeCn3ymsz/f4y1+i87V66wQ=) 10: _nLYAZC-VddX97JjR5Q6LKKqBQ4.roa (hash: ndREz8aC1hd1w5pe58qePL+6kw9PyDSZ6Q1HeOlC7Rc=) 11: d1Mc0OsWnepemmVerPa7kdZl1N8.roa (hash: JRdvIEtlRj7j9yeTQYkXzcTmst5QyvuiftJaDhMJ8Og=) 12: gZtcQ4r6Woqv34G6dpT_HEC-DoY.roa (hash: FjGgXSzWLOa8xqz/zgnt2HT+YvKm/u5bq1IXo4VHelQ=) 13: k_9bhWj2JcQnyMq-FPfEv0otOUw.roa (hash: Zs3oxA2HTYXtiE5lUDi8OJy4SVF/+vQT5qkuzqaf+ew=) 14: o4_pEwPipmYi6C3PXNhpC7by3MA.roa (hash: HbprNAxeP8NoQY7jwdw1Rs3l1Tj/TI85puQfPIX124c=) 15: qjxC3CMWMpiM1TpibiIWl8s1Se0.roa (hash: vL7m0foCqcx4qZwFUYV1ieilxVwO5UgoFDNdvDch1DE=) 16: t0gWV72zLQLExI3pDHKlUQNMCLg.roa (hash: sZqkeiCyvYuQZJfxR8h/KOL8f5qWehA/zicZawvNouA=) 17: wj2VxfuvQPp_y-B-S4cBoG4no9E.roa (hash: NUb/774hisZdKkcNsYbowzixlPdgcgSeN+DazRzxjeU=) 18: yKoxV-6M6xkebvfJ-LK1Pi2FfE4.roa (hash: BokFvMbsrr4nAc7qB6GIDJeX4FQmEPo1VOjQtgLqvj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 15:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bf:dc:ee:18:69:85:80:02:40:ec:1e:bc:4c:d8:20:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Validity Not Before: May 11 15:00:49 2025 GMT Not After : May 12 15:00:49 2025 GMT Subject: CN=a1b5c4724a11f0f43779aa747083c3f6ba781a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fa:2b:06:b7:93:e2:bc:7e:f9:5b:28:03:01: 1a:2f:e3:54:48:70:21:91:f3:76:7d:c3:20:f9:46: 8d:68:a2:32:e5:92:24:7f:6a:b3:fc:aa:72:a1:3b: b2:24:15:16:6e:27:7c:4a:bc:46:d8:57:ed:ee:3d: 3a:c6:cd:58:b3:57:11:6e:9d:d9:f2:50:03:51:ed: 77:fd:1d:f6:6c:47:de:bd:c2:36:ee:5c:c7:a2:03: 06:9a:9e:e6:d0:95:fc:51:38:a4:db:70:54:e8:45: 2a:57:1f:d4:24:72:b5:63:2e:63:c2:b8:12:cb:86: 1a:f4:92:c5:1e:d5:df:7c:5a:7b:1f:c7:27:35:7f: f4:0b:f6:d6:9e:1c:6c:83:4a:13:0e:57:df:e4:22: d1:15:f3:eb:9d:6c:2a:e8:ac:7c:10:6e:c6:fa:c7: 57:dd:f6:47:7b:cb:94:6a:70:74:1c:e4:f7:0c:39: 57:29:eb:6e:41:ea:0b:2c:60:7f:f7:b1:a3:f6:77: 4d:9d:b8:d2:17:2f:0b:ac:e9:51:52:5c:f9:70:79: 2b:0a:93:e1:dc:48:cf:66:45:2f:70:d6:45:35:74: 4a:8e:b2:4f:7c:9d:83:e8:a7:bc:f2:1b:88:3a:20: e2:9c:a0:af:39:54:07:c2:ae:65:81:b0:6e:94:2d: a3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B5:C4:72:4A:11:F0:F4:37:79:AA:74:70:83:C3:F6:BA:78:1A:52 X509v3 Authority Key Identifier: keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e8:80:d0:0e:92:70:e1:9f:2d:df:dc:33:08:e6:7e:93:2a:55: 42:21:85:7d:89:53:b7:62:e0:37:53:c8:fb:51:1d:68:1f:bf: 8b:c4:c4:26:82:6a:20:89:2b:3d:d6:94:36:2b:19:44:84:37: 34:4f:c2:3a:1a:c0:db:79:3e:1b:34:db:23:57:c1:4e:dc:f3: 8f:d6:8e:37:bc:27:8f:ec:58:5c:aa:64:1d:d3:44:b9:68:73: db:2e:75:ac:61:98:9b:d8:e8:d9:12:0f:d4:45:9c:b2:1d:cc: fe:3c:77:0f:b1:67:1e:f4:ca:ce:d9:2d:3d:49:c5:be:3f:f2: 36:81:21:a8:d8:d7:31:cb:43:f7:a4:17:aa:4c:3a:57:3d:dc: 3d:be:ea:3c:51:6d:3e:3c:9c:2e:7f:32:51:cc:28:f6:a0:29: 0c:4c:a7:f3:0e:ab:a9:de:7d:6f:72:76:f1:3d:9b:95:f7:89: 91:ac:68:11:b9:0e:aa:d2:b1:5f:c2:b3:55:18:60:0f:54:f4: a1:94:e9:d8:31:c7:77:a1:e9:89:37:0d:04:fb:de:fb:02:f7: b5:7c:b1:73:c9:9e:de:a0:87:05:3a:69:c7:15:c4:b1:92:93: 37:bc:86:af:3c:22:53:85:ce:72:1d:bf:fd:1d:8d:5f:ed:2e: ee:db:e0:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa/3O4YaYWAAkDsHrxM2CByMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5 MTk3ZjIwHhcNMjUwNTExMTUwMDQ5WhcNMjUwNTEyMTUwMDQ5WjAzMTEwLwYDVQQD EyhhMWI1YzQ3MjRhMTFmMGY0Mzc3OWFhNzQ3MDgzYzNmNmJhNzgxYTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPorBreT4rx++VsoAwEaL+NUSHAh kfN2fcMg+UaNaKIy5ZIkf2qz/KpyoTuyJBUWbid8SrxG2Fft7j06xs1Ys1cRbp3Z 8lADUe13/R32bEfevcI27lzHogMGmp7m0JX8UTik23BU6EUqVx/UJHK1Yy5jwrgS y4Ya9JLFHtXffFp7H8cnNX/0C/bWnhxsg0oTDlff5CLRFfPrnWwq6Kx8EG7G+sdX 3fZHe8uUanB0HOT3DDlXKetuQeoLLGB/97Gj9ndNnbjSFy8LrOlRUlz5cHkrCpPh 3EjPZkUvcNZFNXRKjrJPfJ2D6Ke88huIOiDinKCvOVQHwq5lgbBulC2jvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKG1xHJKEfD0N3mqdHCDw/a6eBpSMB8GA1UdIwQY MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt MmQxNDNkN2I4NTNjLzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6IDQDpJw 4Z8t39wzCOZ+kypVQiGFfYlTt2LgN1PI+1EdaB+/i8TEJoJqIIkrPdaUNisZRIQ3 NE/COhrA23k+GzTbI1fBTtzzj9aON7wnj+xYXKpkHdNEuWhz2y51rGGYm9jo2RIP 1EWcsh3M/jx3D7FnHvTKztktPUnFvj/yNoEhqNjXMctD96QXqkw6Vz3cPb7qPFFt PjycLn8yUcwo9qApDEyn8w6rqd59b3J28T2blfeJkaxoEbkOqtKxX8KzVRhgD1T0 oZTp2DHHd6HpiTcNBPve+wL3tXyxc8me3qCHBTppxxXEsZKTN7yGrzwiU4XOch2/ /R2NX+0u7tvgog== -----END CERTIFICATE-----Generated at Sun May 11 22:40:31 2025 by rpki-client