$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft File: OroRckcuqAJl0SmCln3gqLC8WQE.mft (raw, json) Hash identifier: kDBMdf8oECWZwiyiW0r1mTMDN6eVolxJDYshaPok/S8= Subject key identifier: 46:31:5B:E3:16:45:B2:75:21:C2:0D:A8:37:D6:E3:FF:36:38:80:7F Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901 Certificate serial: 0196CE3CDC8547156AEEB54A735DB5F4C7F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft Manifest number: 1563 Signing time: Wed 14 May 2025 10:00:17 +0000 Manifest this update: Wed 14 May 2025 10:00:17 +0000 Manifest next update: Thu 15 May 2025 10:00:17 +0000 Files and hashes: 1: 6BTZ5AaOEQekUYjUxJjubDiWWfg.roa (hash: Eh6waq+vwtUrAUXpLnHirNMkZ/QKST4EehD+sMDaTTU=) 2: 900joE2kII87-kVZQYJE9AVHaUE.roa (hash: 0o1fmx1wkON/yzQU3eDlgv0XvPCaxuqScr/6FHEDSAU=) 3: Aen1ptkAkBXaq1czhGP-DVw8RvQ.roa (hash: 8EPbflQikNMAMGUCzGjmJV+qRBy9a9YNzod2d9hjXyA=) 4: F7JXtoqYAnfTjuecjcOTuo1qCkw.roa (hash: OEFPqG5xW1fNzTGExyHBZVtQ+HvaVdHh6rDRxCBiNXc=) 5: FXMeaT7mqLaeoQKo6gjW0hUo-Kg.roa (hash: ai3NnXxTZaMRdq2X8gaZ6slmnlshdaCfmTM1E9B0TBc=) 6: JIOTHuHxMtqBMx5mXgc6EZ3pd2k.roa (hash: DCxRs8r4ffmbTDh+ON4DjiCp8BK/u4NKeBfbW9CrT2I=) 7: JLwtTQi8VNVHhaVDu0kN5D34KjI.roa (hash: 8veoK+i1W9Fs1rw5NS+3eYVP4YbxUV5xVG3SSE+qpqo=) 8: LWbif0B1GjIE18I7vwELt-c9l-w.roa (hash: d8IrvYkKiZyuhb8k6fQb7RXqEUdNoQvoKy7SfXCWzdQ=) 9: Ln8QlB3P0RX7C0x_g97ovwG-MN4.roa (hash: 8wye3Q/ZQvQqLzNWOjfsPRuB58YYCzfOe1zTV5GvyPs=) 10: OroRckcuqAJl0SmCln3gqLC8WQE.crl (hash: UmptzyvynZi4nbsTuahPUhufe+VqFgVElq0VqFCtu4c=) 11: bpV8b7AtbhXdGFm5LUSeu0J87Js.roa (hash: dlLYGpRMWUx9YdT08Q5m5VPvbiMJH/5+liPq9p5+8YQ=) 12: dfVrorkgDXq-b3-QlttQA8sgW4w.roa (hash: 5H66iIzqCMGoksSoQLOuKiVcrRxOIQ4J1jOJkX6At50=) 13: hs3PS0PRyRLIwptbOrxYgVXbpUk.roa (hash: EMDVPaUHTTvlVBnvbCHPVNncgqYud935PafdYG6UmCo=) 14: k44Mpa9GcJ6dnuXPl0nYSwqip6I.roa (hash: pwXmLZKe7pdmF7xytwQTGPruNvJ7hi4Xv4R9xq2KjQc=) 15: kW066m9DXa5QVOUSyinFWrQGR_k.roa (hash: qDkdXP2dueHR9dJeUVzMjqaWnTwJkS158Rm7QFLdZvQ=) 16: ljrsKkBLXJvYvcdZuX8JWasQFe4.roa (hash: vBmx7C2e8PSmXtfZdupHaynZdSjLgLaFpSb8R62FCP0=) 17: nPqUpg1aR7hnc6HTlLtA9BuMCTE.roa (hash: KwhXJO05kwAc7WcWDrPEDKsnvptXZGJFAiZEMHkerdU=) 18: nfdXz1IG7b_z6nn3ZM-dFbFrj0o.roa (hash: 16xUnfqni5W44fEXrAqCEswn3RFCkRKYxijUqdQX43o=) 19: nkeXVKF6zzQCYL4BHAHTb24meB8.roa (hash: pcIicCRvZsHCwkYq5WwVoVzOQXOI/E6R317Mea33uac=) 20: w5_xzg68siU1xwo2TRNx9ptuZUg.roa (hash: dz0710YGDAoK//WB0wD9yVfkTEtuo0ioNy/ODQjxKRM=) 21: wBcVnV6GV1PLpN1_UQhROd-ziWs.roa (hash: 8tEjzzagR6kqOzcrllrUMEcovJGqHcmFHZF+QG9fdx0=) 22: zMLH0Z0n_ZfTiWpxjWDNCBm8FP0.roa (hash: 1zSkkqDH7rhfTGP6CblxxApp8yosaiHxrLIiFpb9d40=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 May 2025 08:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:ce:3c:dc:85:47:15:6a:ee:b5:4a:73:5d:b5:f4:c7:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901 Validity Not Before: May 14 10:00:17 2025 GMT Not After : May 15 10:00:17 2025 GMT Subject: CN=46315be31645b27521c20da837d6e3ff3638807f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:00:9b:a9:ba:be:1e:d5:5f:2a:54:5b:3a:4a: 14:ff:b8:16:55:de:82:35:73:18:34:9c:d7:66:1f: e7:d1:69:0d:f6:52:90:00:1e:2e:57:1c:6e:d9:b0: d0:60:b4:18:6b:a9:ed:fd:38:e1:f2:0c:60:b3:cf: 9f:07:9d:05:9d:cb:07:b6:e7:55:0b:d1:f7:d7:7d: 91:e6:18:34:0a:08:e0:60:57:af:32:a0:a7:9a:49: 8f:53:52:75:74:6e:10:98:e5:0e:ef:9d:35:23:13: 2d:dd:9a:e3:51:c1:8b:8b:6a:94:3d:0a:a6:b5:40: 77:a1:d2:d4:ad:a2:65:ae:01:00:0a:ff:05:86:c3: 5b:b4:c9:41:dd:fa:83:e4:be:14:f2:5d:88:e6:ea: c5:67:df:e4:37:86:02:4a:5b:88:90:f2:05:d5:64: b3:e0:3d:74:d7:b1:63:6c:88:9b:89:05:24:58:58: 3f:44:d9:74:29:c9:5b:56:18:4a:d2:01:a8:47:24: c1:20:22:cc:cf:3d:35:b7:6c:20:cd:9d:aa:e6:fd: 1e:ef:95:e8:cf:14:db:e8:20:65:ca:b5:3b:63:d9: fa:c0:78:38:67:8d:2f:17:2d:79:bd:6a:5c:42:5c: 64:ba:8a:e4:0b:01:9a:3f:63:9e:ac:5c:72:2b:b6: 65:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:31:5B:E3:16:45:B2:75:21:C2:0D:A8:37:D6:E3:FF:36:38:80:7F X509v3 Authority Key Identifier: keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:cc:ba:45:1a:74:73:35:98:98:70:5e:79:08:71:36:82:cd: 98:38:f9:4b:e8:3c:24:b3:06:e0:41:af:87:dc:9b:05:74:fe: 47:31:cc:00:e8:24:cd:fb:fb:7a:c9:8a:99:74:7e:cf:dd:74: 5c:b7:5a:69:c6:83:69:a7:ea:3c:13:fd:79:c9:87:7e:91:fb: 26:00:ff:fb:52:9b:77:e4:e2:94:81:52:68:0f:c0:67:ab:a3: b3:16:ad:7c:0c:10:f6:e8:fd:fa:38:65:a5:6e:f4:45:b7:ff: 04:48:05:a9:c1:ac:e9:13:0e:e2:b5:5b:fd:e0:1b:3a:3a:0e: 40:60:d7:1f:8b:5c:1a:5a:40:74:05:f3:74:04:5b:36:e3:b1: 1a:05:97:56:d5:25:95:42:44:db:16:ce:1b:30:34:ae:72:51: 74:48:ef:4c:51:a9:b7:d5:6f:73:9a:39:ca:ad:10:0a:9e:e3: 07:0b:ae:7f:c4:0d:de:81:ac:6d:cc:75:ca:d3:ad:d9:a4:ec: 75:0e:3c:53:15:08:69:90:56:ee:db:0a:30:9e:74:18:dd:68: 7d:f7:59:46:08:03:5d:4d:a5:57:f7:59:ed:8c:ac:73:98:fe: d1:29:ed:2b:55:3f:83:2c:e4:a5:7c:15:a1:0d:a8:1f:6d:cd: 0a:7d:33:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbOPNyFRxVq7rVKc1219Mf4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi YzU5MDEwHhcNMjUwNTE0MTAwMDE3WhcNMjUwNTE1MTAwMDE3WjAzMTEwLwYDVQQD Eyg0NjMxNWJlMzE2NDViMjc1MjFjMjBkYTgzN2Q2ZTNmZjM2Mzg4MDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9wCbqbq+HtVfKlRbOkoU/7gWVd6C NXMYNJzXZh/n0WkN9lKQAB4uVxxu2bDQYLQYa6nt/Tjh8gxgs8+fB50FncsHtudV C9H3132R5hg0CgjgYFevMqCnmkmPU1J1dG4QmOUO7501IxMt3ZrjUcGLi2qUPQqm tUB3odLUraJlrgEACv8FhsNbtMlB3fqD5L4U8l2I5urFZ9/kN4YCSluIkPIF1WSz 4D1017FjbIibiQUkWFg/RNl0KclbVhhK0gGoRyTBICLMzz01t2wgzZ2q5v0e75Xo zxTb6CBlyrU7Y9n6wHg4Z40vFy15vWpcQlxkuorkCwGaP2OerFxyK7ZlaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEYxW+MWRbJ1IcINqDfW4/82OIB/MB8GA1UdIwQY MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt NGRkMDQzNDZhYmMzLzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPMy6RRp0 czWYmHBeeQhxNoLNmDj5S+g8JLMG4EGvh9ybBXT+RzHMAOgkzfv7esmKmXR+z910 XLdaacaDaafqPBP9ecmHfpH7JgD/+1Kbd+TilIFSaA/AZ6ujsxatfAwQ9uj9+jhl pW70Rbf/BEgFqcGs6RMO4rVb/eAbOjoOQGDXH4tcGlpAdAXzdARbNuOxGgWXVtUl lUJE2xbOGzA0rnJRdEjvTFGpt9Vvc5o5yq0QCp7jBwuuf8QN3oGsbcx1ytOt2aTs dQ48UxUIaZBW7tsKMJ50GN1offdZRggDXU2lV/dZ7Yysc5j+0SntK1U/gyzkpXwV oQ2oH23NCn0zGQ== -----END CERTIFICATE-----Generated at Wed May 14 12:54:28 2025 by rpki-client