$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft File: xm2dULO4nVHIqiST5-9HAdYlHa0.mft (raw, json) Hash identifier: i9eX5im/D/N0LRqChgy8Rf3lLBXPkma490Y+keYBfm0= Subject key identifier: 31:94:5A:21:63:75:99:00:FF:42:C9:89:3F:D7:02:61:71:7C:9F:31 Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 01969C74ECD3F3A97528FC2035A99DF3DFC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft Manifest number: 152C Signing time: Sun 04 May 2025 18:00:30 +0000 Manifest this update: Sun 04 May 2025 18:00:30 +0000 Manifest next update: Mon 05 May 2025 18:00:30 +0000 Files and hashes: 1: 0nCCSC3jIA4FtUJpFXhtsrFG7Qg.roa (hash: 5DaOp8ZEA0DdA9vlG0RLC+R1LA0L0gjUqxRcz3w4hyE=) 2: 1-et3egkL66ACcB8XxsgEBnm6VII.roa (hash: 4ZZwKzLoU0lcA0OohX7bJJeDfSc2RrBHj0/VmzWrgQ8=) 3: 1PQvYvTM-0mR2uhRrTfqzRzMCZQ.roa (hash: 57vgEzjnfLTeN7idUdr0XJ8FMClFRQnBo8Ax2ADKNVY=) 4: 37NN_qFZ9oT5ulT_0M_9BF1YCCs.roa (hash: SNkWXgQ1nsWscthwB0+O68nLlOKJ5rDLzgKc8BQLFNE=) 5: 4emO2JW9OCEuV19QBkuS5-P0s4k.roa (hash: 7Nh1o+zzoXalioorL0iJcHjWDslCqg4c5QQSS4+kcTk=) 6: 5lROaiYign0Tncsnuf4DpK7LKpU.roa (hash: CaZKfeoWB0BVzdzVhDocsLIaQtNRrZrO2kmI6Ik5mVY=) 7: 7vSowqY3zLVHcKRQmKhaSah-tyY.roa (hash: GDJHFB+LVsf5zCvLRtIdAUjiaeVjh1VRpfPOoUeuJ3c=) 8: 84fRK7OwW7YBpBtUSGSy4bB1f8A.roa (hash: F0BZ2PiOSrSxrlUmn6WrV3u4aEEX/cL0H6Lud+66Cn4=) 9: 9k6Qv6Q1Icyly4BTu9TZOCUpUxI.roa (hash: 2gkAVJuBXl904G9xnDFvD8OEhhRxc1cTHhIMjnLEM2U=) 10: BUNDUMts4ESalMK-ljVnP9FAnRQ.roa (hash: oy9sVfZrNWTnfu5PH2ylBjau+cF2gxb98XThyI6lOdc=) 11: DpaFmJAPai0xaXP7QAreQeSbrjY.roa (hash: FyuIYwr801YWvdCNbt/J8XAVUeBVWYj34IWltEFHHsg=) 12: KHWXU61nbuAvt9t1WCNbKv5_l0w.roa (hash: E9nPdxldKDh3yJv85Wm4ujXcG5a7CsMNQgxdzW3WyPM=) 13: KZxZSP8zxqhzvH1RhiZOsKLojdc.roa (hash: 79Za4ffHNm/35yqEIEXZzJt7VPi1r5OHEywYNdUL3rQ=) 14: Ka96-7xmUJHL1P83ddZSPTnIito.roa (hash: A3j4nr1SyHQHtFJaNRlAwCyTXlwC3Gmo5Vos/lZDRjc=) 15: KkImKUZdYZWJYDwbNERgasrkJc0.roa (hash: bs/AoWrd4lGD/71ZJV0smb7S6wL5e7xHFDUbooXuK/U=) 16: L9eXoOzloyfByegWKWMIHSuYWXU.roa (hash: 0VEFznzUQQMlCk6q903xJ+gBbGsXZIaen1RH1RLLoj0=) 17: NaoxUETI4MRfs7Ku7ZS618oGav8.roa (hash: wQywEtha5ohZA/lDc9TGZQNBlHs8Tphdixu2SYdW/FQ=) 18: OJ1S0TSC0ulKkFQoexZdeyDj_Vo.roa (hash: K+mGf5tAj8Awh18X2x44DzS5EhLS9o2grru1GE/6gKU=) 19: PGOlAJ2_UbtZt1cjsWcX5kaxtE4.roa (hash: yllK3pne9YzRUhTjD6bVU9YW7N3Ndf4gfPLt+eRd9lg=) 20: QfJGcICUs9Ej1AUv1rRUZ8Xctk0.roa (hash: 7q04UG21qkwmFM+hFjcJQPmY1tVuJ6d7O9TElKsVV9M=) 21: Rv-Y6rHAhSJPoQHdCJLNBVXc--w.roa (hash: M7l/qsGDZqsfsCy3P3qXjnQMiv57RlRkHNf7JU+oLbI=) 22: S-w0HsGwAZFQF2Ks8Sg-IkujD2k.roa (hash: 97QhOeDn2Ynbz47Ce+Ud4P3JM4AhVHpCC+sCishuJQw=) 23: SIN-EqwjuVJ_uVTDZcaFfYV-2y0.roa (hash: 69ilVtRvoLW9898G/5j1Gs/FnTheitxDGDBUUK5AC2s=) 24: TydRWxXZQOtNWFnr_XG63P2ou-E.roa (hash: PU14BhgBvKt9TLPY169A5YplJZtkio02RHMWbiyDjpo=) 25: UVTZDoEjk1YI37FQ_IvaaRHJnnQ.roa (hash: NOafG/qLvJxLyZs2q5FGTZ54IzUEYlZgdrCLQIm1dW8=) 26: X3T4KMvuCFlcstKpa1Pxb7curP0.roa (hash: LoC0jPPER3qkcRvKhWoTxxMuuQdxUgg0flbHYv5ApjA=) 27: Y-Hi5v4w9rmIrRykzYfMnnMw0Rk.roa (hash: UAOni9fizzaasLtiSWgBxbS1fhAciTYBxVO8KzIk04s=) 28: ZvCU0K83780pIZIKt_iuhN7EffU.roa (hash: I105+Qqc4XVe/r+SKIg5LTvj890qAzeBPOv1IQSm4eo=) 29: annF-tYuzdXS1ALv0qyj5X5E7jY.roa (hash: +ABYTVUrAak8XwcnVULCGoDqh2JX0sMrrBCuyRBlGCU=) 30: cQDUoTmzh16X21EUYU6Rst7gwN4.roa (hash: VpP4wKEnD3uBwSFEK90HjJtm7jaN6/opZLM04PiBqsA=) 31: ehHUOC-KsrDs_gMWHwxvz1die_o.roa (hash: arhLlL/LUAyqmujoO8sDxt+ZiBPHa89NZpvX92KozrM=) 32: kQmgrAanOZoOdA-4PbXWYAS9_Cc.roa (hash: OvdkZzlx4GDhrRDRIhoTB0lqGB519lq0sYMZBqzO8uc=) 33: mv8me-CMOrietHYR0QyeHWpK0fY.roa (hash: h7ZeS8a6te+lDUFZmSGqV6CiQhkMVqKUNLmw+yYraS0=) 34: sxEAKY_aMKRnBM4SpkFRvHo38bo.roa (hash: KqW5nF7IvFVgFNat1NgasvPrULkuuJOyrjf1tgys6gg=) 35: vkUX9hV92VQst5LelEku-jzjmDI.roa (hash: 6t7C3jSP4Jkwuk3y3tOASPT2+HZn8Zja5tWF03TT/f0=) 36: xm2dULO4nVHIqiST5-9HAdYlHa0.crl (hash: wMXUxx045bCwKrTi+Ya9YJ+5sNs6T6/oZcXmwOxrWN0=) 37: z-YOtG9p5k4OlqtEFKy2WK9ixms.roa (hash: iNo3KEz5ULECFwTpK+2HmaVlQM7jtAD9hPXyoY/n1Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 May 2025 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:9c:74:ec:d3:f3:a9:75:28:fc:20:35:a9:9d:f3:df:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: May 4 18:00:30 2025 GMT Not After : May 5 18:00:30 2025 GMT Subject: CN=31945a2163759900ff42c9893fd70261717c9f31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7a:c9:21:d3:7d:19:d3:47:af:73:a3:15:9c: e5:8b:d9:e5:6b:67:e3:d9:37:d2:b4:33:b8:3c:74: df:34:87:fb:89:a9:26:49:9a:a7:0b:14:1d:bf:9c: d4:69:35:dc:87:e9:93:d4:d6:f5:75:9f:61:42:c8: 2b:21:2c:36:06:cf:b5:98:6b:47:e7:4f:e7:f0:f2: e7:f0:47:4d:9d:4f:60:38:23:74:d7:d4:5e:30:93: e8:16:6e:2e:8f:bc:1a:85:c5:40:f9:7f:17:3e:dc: d3:99:fb:6f:98:ac:f9:d8:79:94:22:40:0c:ff:96: ed:7b:e2:0f:c3:3d:3a:a0:b8:d7:24:8a:ff:96:f9: 89:09:ab:23:b8:1e:30:96:1c:f4:2d:bb:f0:49:34: 0e:b2:09:3b:6e:b8:41:23:64:e6:70:55:26:55:38: e7:b1:07:2f:27:bd:13:6f:06:b2:7f:68:d7:2b:be: 0e:6a:f4:62:8f:89:df:bb:9b:60:2f:c8:41:7e:e2: 3c:e3:36:93:38:e8:f6:e7:6a:29:7f:d7:6f:3d:8a: b7:76:e3:42:a2:0b:e6:c6:f1:e2:a8:d2:c1:b8:23: df:b2:fb:aa:ef:e2:c8:5f:40:4d:23:27:c4:6c:96: 58:13:64:c7:a9:da:8f:3d:e8:35:6c:09:a2:fd:c1: 17:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:94:5A:21:63:75:99:00:FF:42:C9:89:3F:D7:02:61:71:7C:9F:31 X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:5a:21:8c:da:ea:2e:88:ef:79:07:5e:12:54:f5:e5:38:5d: da:1d:05:70:c4:2b:99:7c:84:2c:73:b7:bb:94:22:49:a6:e6: b8:1b:1b:5d:f1:8b:6e:4c:ab:c5:86:9b:4b:43:a2:47:5d:92: fe:3d:42:8a:81:39:e5:87:9e:d2:ad:aa:91:1f:32:fb:0f:17: 15:dd:58:6f:b0:d3:38:b7:dd:fc:fb:0f:93:48:57:79:3f:b7: 61:95:52:16:17:1b:89:d8:5f:81:d5:88:fa:14:75:07:35:d8: 88:be:66:ba:af:dc:2f:34:2b:7d:d2:fc:79:7e:9f:0f:3a:43: 60:78:0e:69:2d:e9:0b:28:2c:54:cd:c9:a9:f6:48:91:65:9f: 59:36:c9:53:55:36:49:d3:a5:76:53:2f:4d:75:fb:94:7d:16: a4:10:d7:7a:6a:f2:87:80:66:54:51:10:bf:03:a2:07:4d:e4: d6:16:f2:e3:cc:65:a8:1b:75:9e:04:d3:e6:9e:5c:fc:7e:a1: 76:be:7e:6c:44:38:81:5c:c7:b2:ed:4e:4a:a9:e6:0e:6a:8b: 8d:a5:72:61:6b:e9:53:ea:f4:f0:55:da:8e:ea:63:45:95:3d: a6:68:67:8f:a1:2a:a8:a0:39:6e:75:3c:89:99:d7:78:2f:c7: 90:7d:52:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZacdOzT86l1KPwgNamd89/AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjUwNTA0MTgwMDMwWhcNMjUwNTA1MTgwMDMwWjAzMTEwLwYDVQQD EygzMTk0NWEyMTYzNzU5OTAwZmY0MmM5ODkzZmQ3MDI2MTcxN2M5ZjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHrJIdN9GdNHr3OjFZzli9nla2fj 2TfStDO4PHTfNIf7iakmSZqnCxQdv5zUaTXch+mT1Nb1dZ9hQsgrISw2Bs+1mGtH 50/n8PLn8EdNnU9gOCN019ReMJPoFm4uj7wahcVA+X8XPtzTmftvmKz52HmUIkAM /5bte+IPwz06oLjXJIr/lvmJCasjuB4wlhz0LbvwSTQOsgk7brhBI2TmcFUmVTjn sQcvJ70Tbwayf2jXK74OavRij4nfu5tgL8hBfuI84zaTOOj252opf9dvPYq3duNC ogvmxvHiqNLBuCPfsvuq7+LIX0BNIyfEbJZYE2THqdqPPeg1bAmi/cEX9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGUWiFjdZkA/0LJiT/XAmFxfJ8xMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWFohjNrq LojveQdeElT15Thd2h0FcMQrmXyELHO3u5QiSabmuBsbXfGLbkyrxYabS0OiR12S /j1CioE55Yee0q2qkR8y+w8XFd1Yb7DTOLfd/PsPk0hXeT+3YZVSFhcbidhfgdWI +hR1BzXYiL5muq/cLzQrfdL8eX6fDzpDYHgOaS3pCygsVM3JqfZIkWWfWTbJU1U2 SdOldlMvTXX7lH0WpBDXemryh4BmVFEQvwOiB03k1hby48xlqBt1ngTT5p5c/H6h dr5+bEQ4gVzHsu1OSqnmDmqLjaVyYWvpU+r08FXajupjRZU9pmhnj6EqqKA5bnU8 iZnXeC/HkH1SJg== -----END CERTIFICATE-----Generated at Mon May 5 03:58:05 2025 by rpki-client