$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft File: nFQvXfPBrLhX_VDusBbu0HOF_4w.mft (raw, json) Hash identifier: /wmKLDbCXLxJL3WitYykkFWbc0/A75SobcKr8yv+m00= Subject key identifier: 4E:33:B0:CF:F7:33:57:47:C0:7A:79:E6:53:D3:3C:FE:F3:C3:E2:C0 Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Certificate serial: 0196BE256D0E4D922755756CAA5D06316C81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft Manifest number: 094D Signing time: Sun 11 May 2025 07:00:45 +0000 Manifest this update: Sun 11 May 2025 07:00:45 +0000 Manifest next update: Mon 12 May 2025 07:00:45 +0000 Files and hashes: 1: 93UY4dqb05zYXsrBSgY_SUWy1OE.roa (hash: SWhjxZR4qmQCp7MeCgzZuMrb6QG5ysKe/Q0l50PE6Rk=) 2: BorusD87l5J2TYxre3Gw8ED14c0.roa (hash: xxXysVTbA/0WGCy4sb2ruRMVMBKnhW6YWf0n8anG8zk=) 3: EEKlI2T6FZUgLn4m9dFt2jmmjug.roa (hash: NhLG/JHJb6nBfntTyOXn48rJIGdq84bLDpAP5xe+ZAE=) 4: KnmFh3qNXzClOAnP3N3_zOdYRAo.roa (hash: +qqI3RCcMPzqW1FNd6qeiI1Hp+fo8ydp1FHu51Tncg4=) 5: MHNWn_bNBX1lqcEOD0mTT7wACrI.roa (hash: clLcaYzI7DQcX+Fv2rNG1C3Zllntv/UDtJxJ/vRXxoQ=) 6: Re_UifNbcWs-_GiyHAPPOm-yvBI.roa (hash: /7ri6bimyKdV62h18w2ONkdLybTnrpaymT5BH6L1jYA=) 7: VcO4qJxU40K9kxUnEeW--IFaX04.roa (hash: X/O0h17oYuRQs7Z/RvZag6iy4Bl2stwkspMMrvsPNYY=) 8: XbSJLVClFYLx347mvDQ0S5hsX4g.roa (hash: lybO1wHjq/XifCJ733TrvdLHgJspRMxJWxwTnG2IJ3k=) 9: _FIw_A5dt1xU03Zbhge-_m33JRg.roa (hash: detBPIO7UYh9KdSe2E/Nz7Rkxgy8iMeWzoXOu0ZPnXY=) 10: _eUdNns9K3pmktpDjbsJKL25mLM.roa (hash: H1epmYT39WpWPDkyNBRD00gVA4UMe6PA7lYf9t27Nt8=) 11: cRJHBNdmbpUyHqOEUpwKzTFuNCk.roa (hash: SS69vXe4PhGUYENzPrsqk18OCamPGc10AVGsVohBJGk=) 12: czgjqrf2lapbXeVYP9ODbikQ6sU.roa (hash: Sob92iox8FAuLbYC7O6yXinthlLYCpBjBKCErucg688=) 13: epelwHANh7OiGsK_9lXuxpfMg6A.roa (hash: cvIngfrBRq+miG7IEBZb12qk6qbFmlm6tUzWI+SSFws=) 14: exmtqeslQldhovSpOC-CSOrLj4s.roa (hash: IXHYJUqvNFWkYhESKi5QnQyfrtPde8hk0KEfvOUYiSw=) 15: f8sPYD1_ERQWqtoiJ9r8nmuqohM.roa (hash: PlyFIyn6Ktx6v1YDTiEOpjCU7XEpYkgWQS4fgop/Yp0=) 16: irT4DdDzgeP-65AGXrk0PHCAQVY.roa (hash: RsayR2J7jayb/ZHPN+8XPFdXktAjeGK/x5tQjIbG8/Y=) 17: nFQvXfPBrLhX_VDusBbu0HOF_4w.crl (hash: S88oZ/h40Qe9v9PgNfKGg0cctEwrrGe3UAj/Htl/zhg=) 18: uO1pFwRy8AJGX4SwnDjfNrYIKos.roa (hash: 2ZU1WLrzVVRfNgET3SFbUEMACq2+Y8CsJcuFHw7Rrv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 07:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:be:25:6d:0e:4d:92:27:55:75:6c:aa:5d:06:31:6c:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Validity Not Before: May 11 07:00:45 2025 GMT Not After : May 12 07:00:45 2025 GMT Subject: CN=4e33b0cff7335747c07a79e653d33cfef3c3e2c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fb:7a:c2:aa:3e:b8:f0:60:5d:0d:7d:a9:d0: 4e:b0:a6:fd:92:8d:b3:76:d7:ce:cb:28:da:f7:2f: f1:45:4f:cb:bd:d9:64:cc:87:da:bd:21:57:59:db: eb:5b:28:3c:83:82:be:e3:ed:b0:07:85:4f:42:42: 64:e7:10:f5:dd:a0:e2:31:b8:60:4e:4e:b5:44:0a: eb:0f:84:8e:a3:dc:40:2e:fb:81:13:70:6e:ea:46: c0:6f:a7:63:96:4e:53:3b:83:54:ac:53:5c:60:b8: d9:95:e0:83:07:16:91:37:8e:6a:5c:2d:cd:1f:fa: a7:73:cb:40:82:22:e2:de:4d:a7:a7:b2:86:87:1f: 92:c7:13:70:91:06:56:f1:bb:cc:48:5d:e7:85:2c: f9:1e:84:72:4a:59:a6:ec:8c:e4:09:28:d3:a4:df: 07:dc:9d:7a:45:4c:6e:c4:51:26:1a:a5:4d:98:f9: 3d:e1:e7:16:5a:27:0e:4c:48:e8:f1:24:e5:23:f4: c9:81:c4:28:4c:94:94:52:0d:7f:ef:aa:f2:a5:15: 90:93:ef:f1:04:b3:2f:06:27:5c:a0:2a:68:e0:15: 8e:a4:c0:ce:cf:d6:69:fe:b0:01:c5:10:25:34:ff: ed:7e:43:0c:32:64:3a:27:e8:38:71:ae:5c:e6:1f: 0d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:33:B0:CF:F7:33:57:47:C0:7A:79:E6:53:D3:3C:FE:F3:C3:E2:C0 X509v3 Authority Key Identifier: keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:69:2a:f5:33:14:4c:15:82:c3:da:39:2c:0c:f1:cd:2f:1e: 0b:e1:16:ca:73:5b:a3:84:88:f1:f3:c9:c5:08:6d:84:8d:1d: f6:1b:4e:d6:c0:9c:8b:27:f4:2d:30:f4:27:64:62:3c:eb:06: 95:7a:57:52:ed:25:0d:aa:eb:bb:da:5f:2a:89:48:74:44:18: ea:c7:98:c3:30:42:9f:60:d1:13:d7:16:5b:c1:08:52:52:40: 7f:0f:36:c2:6a:c2:a7:c9:cd:8e:1e:4c:0f:01:28:9c:61:ea: 62:85:33:32:a8:c8:3e:c0:b7:48:bc:99:9b:67:31:88:22:9b: c4:e9:02:b0:32:30:40:cb:fd:f3:90:6c:87:22:90:b5:83:72: 51:f0:35:8b:44:bf:52:9a:b2:85:c7:91:8b:14:2a:0e:eb:6a: ca:a8:72:26:cd:e5:54:32:12:b5:61:96:37:fa:47:51:25:5f: bb:70:b6:fd:0c:2b:52:ec:1c:3f:92:73:76:6a:01:f5:a2:c5: 5b:a7:eb:1a:1a:87:89:b4:3f:86:00:90:de:4f:8e:dd:58:08: b8:38:0d:31:3e:49:41:79:32:53:4a:9b:f1:32:4d:ac:27:81: b8:b4:19:cb:66:8c:8b:2b:ac:16:22:3a:2c:b4:6b:1e:30:d6: 72:9e:c8:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa+JW0OTZInVXVsql0GMWyBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTQyZjVkZjNjMWFjYjg1N2ZkNTBlZWIwMTZlZWQwNzM4 NWZmOGMwHhcNMjUwNTExMDcwMDQ1WhcNMjUwNTEyMDcwMDQ1WjAzMTEwLwYDVQQD Eyg0ZTMzYjBjZmY3MzM1NzQ3YzA3YTc5ZTY1M2QzM2NmZWYzYzNlMmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyft6wqo+uPBgXQ19qdBOsKb9ko2z dtfOyyja9y/xRU/LvdlkzIfavSFXWdvrWyg8g4K+4+2wB4VPQkJk5xD13aDiMbhg Tk61RArrD4SOo9xALvuBE3Bu6kbAb6djlk5TO4NUrFNcYLjZleCDBxaRN45qXC3N H/qnc8tAgiLi3k2np7KGhx+SxxNwkQZW8bvMSF3nhSz5HoRySlmm7IzkCSjTpN8H 3J16RUxuxFEmGqVNmPk94ecWWicOTEjo8STlI/TJgcQoTJSUUg1/76rypRWQk+/x BLMvBidcoCpo4BWOpMDOz9Zp/rABxRAlNP/tfkMMMmQ6J+g4ca5c5h8N8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4zsM/3M1dHwHp55lPTPP7zw+LAMB8GA1UdIwQY MBaAFJxUL13zway4V/1Q7rAW7tBzhf+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUt MjVkYmY0MzgwNGM1LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUtMjVkYmY0MzgwNGM1 LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPWkq9TMU TBWCw9o5LAzxzS8eC+EWynNbo4SI8fPJxQhthI0d9htO1sCciyf0LTD0J2RiPOsG lXpXUu0lDarru9pfKolIdEQY6seYwzBCn2DRE9cWW8EIUlJAfw82wmrCp8nNjh5M DwEonGHqYoUzMqjIPsC3SLyZm2cxiCKbxOkCsDIwQMv985BshyKQtYNyUfA1i0S/ UpqyhceRixQqDutqyqhyJs3lVDIStWGWN/pHUSVfu3C2/QwrUuwcP5JzdmoB9aLF W6frGhqHibQ/hgCQ3k+O3VgIuDgNMT5JQXkyU0qb8TJNrCeBuLQZy2aMiyusFiI6 LLRrHjDWcp7IYw== -----END CERTIFICATE-----Generated at Sun May 11 16:56:56 2025 by rpki-client