$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft File: ayM9dVCLToXMz0Q0mny3AxmNHSY.mft (raw, json) Hash identifier: l3rB6xkb7190qckvgKDgA7Sb81QZim8cxqPNn1Iw64Q= Subject key identifier: 56:13:C8:D7:A1:7D:8F:65:70:BC:C7:76:00:2E:F3:13:57:8E:1D:E6 Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Certificate serial: 0196B710817D1471D227C2FB74985C8A7785 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft Manifest number: 128E Signing time: Fri 09 May 2025 22:00:34 +0000 Manifest this update: Fri 09 May 2025 22:00:34 +0000 Manifest next update: Sat 10 May 2025 22:00:34 +0000 Files and hashes: 1: 2cIKXah99bs326V7_K2_ATU1wCc.roa (hash: 8U7vy7F8tH1dtIEl5RJoquiwlVH7Dw2C2urkmS/8Z1s=) 2: AjBp57cbFRBUIwIaXhNlUU4xc9Y.roa (hash: ZV9AX+FvWa4YVP0u/DD5byIthcNtHTveftQNUrL/KbI=) 3: MWVrNJSe74q7kEhW6qS8QXcSrrc.roa (hash: SMPMCny2Jv5HoImrcf2XEmoMCaHU3khczb0z6CCQ9uc=) 4: UeaUMTENz6rEtOnCBMfG9gC-gkA.roa (hash: Gae4+Xp55CQ/qfOEbOd8MSojTwvPkhhJCtVDf0XS3FE=) 5: ZkxRUMGE9CQRvySfgcJj3kHytZg.roa (hash: UKRx7jBVZPPDl6SgbH7t7Qygyz8pBsSIfl7nu9h+mgg=) 6: aB6sxL1ZlKSQNpa4jL29xIkPi_I.roa (hash: zA0AFONbK9br9fZoJVU4SW6cugn1tuIJBYSB1Nl3/G8=) 7: ayM9dVCLToXMz0Q0mny3AxmNHSY.crl (hash: Osfj7sJOZx5gnQ2dfnAQo0tLADGS1h1oD3ghl9OuAq8=) 8: fZeNbyH5ujZlgqfP9AgorOMXohA.roa (hash: Dn0aZqCRGKt2adMmUTTsiPmw4Pp+E7zhFHoCHO312UY=) 9: fb3lzsKRuT3DqmRVbbR-BGF4wXU.roa (hash: pxuBhHoXzqbakdVTx6L5TNOxX98HDl41yiAFcXSWT3Q=) 10: gYds0JITWToRAWO6EmM06xkOA-g.roa (hash: jtWYGOQZO5pMtNPGec2KrPh/oTve8btfCfcQpgZ5xYs=) 11: hQLzZNiEWPuf32qSABpOeATMW6E.roa (hash: tcNlvM0ivCHwuGCFeJnRMeoVP9hfxeNRmguV/9iTXJc=) 12: hUM0lQ0ODj8Qil7w4D2sZvQVB4w.roa (hash: 8bKnMQhqygeFZmPwESYE+kESImBLAc2qmeTscpnWZ2s=) 13: hZs6PbiV1FHRQvgoNjIWkApb1x4.roa (hash: slbvJPVch+dH2HvE/UBBZulZ2jCavWoY4Ccie6OcAiU=) 14: itqdYmGsrfepmyYSKCd1c5R77js.roa (hash: W2/G8eoM3IFmeLBvMWU5XzC6g/z37f1zNFuZs/37yXE=) 15: nPdGgeG-9wHMZBn1oHFY2TrIyd4.roa (hash: ixNDdEbsReVkHb4nZt1NyyQNAMSP0+ayTT4IyJE76/4=) 16: np9eNjgoLA0jYeMYnFqjApZ6K1s.roa (hash: rFv0HF9ou+nHz2ggvRQ0cKKf/+Wgihlq0XkCRw5GtV4=) 17: oxL_IFbrM6mz0m9aIFRfMqrCT6w.roa (hash: NXHU7sEwINGkL2J1XfrQuCQ6rExfJTOfXcqE64zJiN8=) 18: pSa6Cl1GXo7foAyFrHXmLJZlt1c.roa (hash: UNi09k+Bt5G9PMcC124mrj3Hl9EaVAVyKXxcinPAiXY=) 19: tNnILJcglaIoGnh4ByFK7f0QO7U.roa (hash: GbTAbJ4kIEJFmwGtZm3TBKso2cSpLsB0cIHVOq3zelw=) 20: u5pfngYD-0MqXeQ11DbdTP8EwmU.roa (hash: xtu5m2bHnGuokc2D/B489MeQCUa3PeUYpTlbCBj8908=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b7:10:81:7d:14:71:d2:27:c2:fb:74:98:5c:8a:77:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Validity Not Before: May 9 22:00:34 2025 GMT Not After : May 10 22:00:34 2025 GMT Subject: CN=5613c8d7a17d8f6570bcc776002ef313578e1de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:30:ca:75:c9:b4:c5:f1:2e:7f:04:a5:ed:84: 26:8f:fc:0a:0a:6f:1a:42:33:e8:2b:21:9c:20:b7: 19:3b:11:66:73:af:e0:06:8c:bb:66:49:89:2b:cd: bb:84:bc:90:cf:d2:65:3b:14:18:91:60:73:cd:87: eb:11:5e:e3:43:da:40:5f:ab:e9:9c:26:65:e3:1a: 61:34:5b:e3:cd:c1:7c:24:d7:d8:76:0a:89:6d:0d: 47:90:26:91:9c:f6:b6:fa:37:d7:f7:5c:2b:7d:f9: 2a:3c:5c:42:41:a6:5b:8e:b9:d0:3e:cc:39:fd:3f: b2:1e:a0:44:d3:0a:5c:9c:40:ae:c9:8c:41:c5:a4: 53:a0:b3:69:ff:73:45:f9:c8:ff:69:e5:cf:61:c1: 83:31:7f:fb:50:0c:69:97:56:29:f9:cd:97:95:03: 88:76:f6:da:95:ef:df:45:76:47:f4:15:32:59:a6: 14:76:da:f5:aa:a6:c1:68:5b:4b:51:9f:64:26:d4: 11:01:4b:c1:c6:ca:e1:72:36:5e:3a:af:53:f8:5a: 0d:b0:06:ca:cc:8c:cd:b1:26:a0:36:6c:ac:b0:ae: 28:cc:a0:11:6d:f2:35:4a:24:ce:10:c9:a3:51:a3: d5:fe:41:76:d0:d9:ca:8d:6d:1d:9f:b9:f6:10:f0: ab:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:13:C8:D7:A1:7D:8F:65:70:BC:C7:76:00:2E:F3:13:57:8E:1D:E6 X509v3 Authority Key Identifier: keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:c1:8b:4a:91:b5:d1:1a:50:44:ab:48:5d:a6:50:21:39:18: 4b:cf:fa:57:13:79:0f:db:4c:04:17:3e:97:6a:27:73:b1:94: eb:8e:53:5a:ef:4a:ba:ab:94:c2:b8:e3:32:f4:81:96:73:80: 5c:00:dc:4f:d7:48:5b:cd:09:46:a9:57:43:5c:dd:c4:e9:0c: c8:09:de:22:76:9a:93:d2:05:c7:cf:0e:06:73:ca:6c:81:66: 29:3b:55:80:0d:0a:a6:04:26:4c:be:54:26:55:49:45:0b:b0: ca:3e:dc:27:8c:4e:3e:65:93:06:01:00:f1:7c:7f:da:fb:b8: 51:10:26:ba:09:f5:a1:2e:e1:9b:76:42:5c:22:59:f1:48:48: 8a:e5:64:69:ca:7f:46:90:03:58:81:8a:c4:4e:71:fd:ef:c2: 3a:9c:4b:94:15:fc:92:69:46:96:96:15:40:1a:b0:c4:63:f7: 03:74:1b:34:98:8c:16:d1:4d:08:59:0c:23:a1:7c:87:74:4e: 24:b6:53:28:d4:42:1a:e7:53:cf:4c:27:8d:a9:c2:88:78:e2: 4e:d4:a5:72:5a:9b:28:af:da:43:b9:f1:1a:43:23:2d:80:65: 21:fe:27:3e:3e:e7:2e:10:0c:fb:00:ec:38:ea:69:a7:a9:85: 58:42:0f:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa3EIF9FHHSJ8L7dJhcineFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4 ZDFkMjYwHhcNMjUwNTA5MjIwMDM0WhcNMjUwNTEwMjIwMDM0WjAzMTEwLwYDVQQD Eyg1NjEzYzhkN2ExN2Q4ZjY1NzBiY2M3NzYwMDJlZjMxMzU3OGUxZGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTDKdcm0xfEufwSl7YQmj/wKCm8a QjPoKyGcILcZOxFmc6/gBoy7ZkmJK827hLyQz9JlOxQYkWBzzYfrEV7jQ9pAX6vp nCZl4xphNFvjzcF8JNfYdgqJbQ1HkCaRnPa2+jfX91wrffkqPFxCQaZbjrnQPsw5 /T+yHqBE0wpcnECuyYxBxaRToLNp/3NF+cj/aeXPYcGDMX/7UAxpl1Yp+c2XlQOI dvbale/fRXZH9BUyWaYUdtr1qqbBaFtLUZ9kJtQRAUvBxsrhcjZeOq9T+FoNsAbK zIzNsSagNmyssK4ozKARbfI1SiTOEMmjUaPV/kF20NnKjW0dn7n2EPCrSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFYTyNehfY9lcLzHdgAu8xNXjh3mMB8GA1UdIwQY MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt ZmE5Y2I1MWNkMGYxLzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGsGLSpG1 0RpQRKtIXaZQITkYS8/6VxN5D9tMBBc+l2onc7GU645TWu9KuquUwrjjMvSBlnOA XADcT9dIW80JRqlXQ1zdxOkMyAneInaak9IFx88OBnPKbIFmKTtVgA0KpgQmTL5U JlVJRQuwyj7cJ4xOPmWTBgEA8Xx/2vu4URAmugn1oS7hm3ZCXCJZ8UhIiuVkacp/ RpADWIGKxE5x/e/COpxLlBX8kmlGlpYVQBqwxGP3A3QbNJiMFtFNCFkMI6F8h3RO JLZTKNRCGudTz0wnjanCiHjiTtSlclqbKK/aQ7nxGkMjLYBlIf4nPj7nLhAM+wDs OOppp6mFWEIPow== -----END CERTIFICATE-----Generated at Sat May 10 07:54:37 2025 by rpki-client