$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json) Hash identifier: U2lEiHa9jo7E3Hc02UPpC68FiboN7YiuQsEXsFub8GM= Subject key identifier: 10:64:76:6C:41:D6:D0:AF:BE:BD:58:79:04:C8:15:4F:EA:9B:9A:93 Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 0196BDB7212EE57B758126814B8EF33B2495 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft Manifest number: 155D Signing time: Sun 11 May 2025 05:00:17 +0000 Manifest this update: Sun 11 May 2025 05:00:17 +0000 Manifest next update: Mon 12 May 2025 05:00:17 +0000 Files and hashes: 1: 5oD2HNqgzG_qOcF_21G9KLy5e2Y.roa (hash: RmXZv+Vqe5cI4h6ljtkED0qwtDL54/1oOSvgcLZr5dM=) 2: 6H0jPgZ40-qSdMrUIpXtjHxd2VA.roa (hash: bKX7Wm+km5brNebStx9trC9lQWDSYN+gli61DR2OFCc=) 3: 75sT-nwUqhGJrktdH6EqWa-q1mo.roa (hash: R1QtO6OQwY7O/dWJMCnCSA9mjsQZb+aGyr2mwiCWXM0=) 4: Bk5EEDboiWzloYLSbIprmQyOumI.roa (hash: Leabib+pYR396O62ZqXXAQ9RyIVRB2I7VcCKzRGI0Zw=) 5: FRe6auZzcSOVPtZ6Q5yvjDHlzS0.roa (hash: 2NaXdTlzJjkR6eXsQNd9ul22Iz8k3jyPNXeVsKS/++A=) 6: GEXA_gDFN_UI9pmu8MV3voaPJJw.roa (hash: dqAjGTOppVUexxUhNJnZSDJjjUoQVnH9/+S3XNxYfss=) 7: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: M7Tr+P1+ckyHE0P/45h5aSHtvAR76B3oTZTjqwyysnM=) 8: J0mrTDoDAe4tdcNY4ZTx8ruuu9g.roa (hash: SdkYwpw3qIRaB5VQaHi9AMXoPRVnXFJoZo9ChQzY2P8=) 9: QKd9v1TqhiMsVLAcOxJ22eYxs_g.roa (hash: HKu0bw+bkfxh/NhVSCdqzBjjysK0/agU+8z7cijegyY=) 10: WKhjscqZWdN-nuM8dfIBcstyH14.roa (hash: khUF0nyoDvCPGxtlsBxOqPz0aIco2pUZJy9sOWQaHzM=) 11: qMUUhW1iC-XMKPgcY2-u4nUNHXY.roa (hash: 8IGWcOXBDlPGcQOckJ+GtmlbDYmD6/HkpFAja/aKolM=) 12: tV8pY2AaFoThs7aSR_rVRKM4uZ8.roa (hash: 5JEjFQnGCc8ZZH1Nis0Dk3OW+MkzIr5bBwteIscBMNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 05:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bd:b7:21:2e:e5:7b:75:81:26:81:4b:8e:f3:3b:24:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: May 11 05:00:17 2025 GMT Not After : May 12 05:00:17 2025 GMT Subject: CN=1064766c41d6d0afbebd587904c8154fea9b9a93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8e:ed:21:cc:64:5a:0f:7a:d8:d1:cd:91:b5: 16:db:e6:7a:fe:b6:9d:1a:b9:6a:5c:5e:1d:5f:cd: a7:de:b0:65:ba:0d:a3:db:04:19:70:fa:e6:a3:f7: 1d:c7:87:2d:1b:18:ea:3a:35:47:1c:9e:20:fc:25: 71:62:c3:1c:24:34:52:72:d8:9b:7f:a0:f9:38:73: f4:06:3c:e7:cc:2b:80:35:ab:b9:d6:0d:eb:b0:e6: 6d:8b:60:fd:ec:20:b0:95:7b:8f:71:7b:2e:56:68: f6:12:2c:8c:f9:35:39:88:22:9f:6b:bf:fc:6f:53: ae:43:c2:d7:b2:eb:82:26:c9:69:b8:a6:e2:6d:3a: 77:ed:91:64:01:f0:37:96:c4:f8:b8:f7:ba:33:bc: fe:ce:c8:7a:7f:5e:30:89:dd:6b:2e:99:5a:da:d5: 37:3e:b0:7d:80:1c:a8:01:6b:53:2e:b3:39:f3:01: 26:73:9e:a4:7c:48:82:d8:a1:fb:5f:f5:76:f9:6a: f1:72:11:ae:fa:73:78:9c:9a:00:a5:b8:fc:4a:66: 56:0f:24:18:77:ed:05:da:99:89:c6:fa:ba:33:87: 3c:7b:24:49:8a:f2:7d:2f:40:d8:ed:19:69:32:c4: ff:5d:ef:73:ae:87:f0:59:c2:c5:26:11:d2:ac:bd: f4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:64:76:6C:41:D6:D0:AF:BE:BD:58:79:04:C8:15:4F:EA:9B:9A:93 X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:3e:62:9f:58:ac:c9:36:6d:b8:2e:b1:aa:5f:ba:ac:de:b9: d3:13:1f:8b:34:b1:d0:28:d9:52:75:04:a2:8f:99:23:cb:c9: 28:5a:e1:2a:5c:9a:55:ea:71:ae:5f:24:f0:12:c0:15:b6:01: 55:d7:eb:6b:52:97:f1:a0:19:81:b2:7c:33:32:6e:64:c1:b1: 34:3e:22:3a:8e:35:fa:35:7c:db:4d:f4:ab:6e:4b:e5:6d:5f: 75:97:ee:24:7a:bb:f8:24:cd:e2:d3:f1:bc:02:0d:3d:83:50: 8c:fa:35:4a:4a:3a:b4:5c:18:cd:f2:75:95:2a:75:d5:76:89: 6a:2f:41:ac:45:d7:96:db:64:67:f3:ce:85:29:bd:d2:f8:bd: 7f:d1:2e:f6:83:b5:b1:63:c1:c8:c8:2d:a0:18:91:b0:28:d9: b5:49:d2:ec:68:46:fc:1a:ae:7c:8b:bb:ec:59:0a:b2:7d:d3: 25:57:a4:b4:e0:f7:8a:93:b9:b5:2f:e2:47:bd:98:23:d6:3f: b5:d8:43:19:e0:d6:9c:9d:22:ea:3b:0f:86:43:ff:21:fd:a0: de:00:85:0d:0a:f7:9f:de:dd:5b:8a:6e:40:15:c1:8b:51:34: 1b:c5:c3:15:03:9f:15:95:9e:d9:1a:aa:c6:81:0c:a9:a9:5e: df:93:52:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa9tyEu5Xt1gSaBS47zOySVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjUwNTExMDUwMDE3WhcNMjUwNTEyMDUwMDE3WjAzMTEwLwYDVQQD EygxMDY0NzY2YzQxZDZkMGFmYmViZDU4NzkwNGM4MTU0ZmVhOWI5YTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY7tIcxkWg962NHNkbUW2+Z6/rad GrlqXF4dX82n3rBlug2j2wQZcPrmo/cdx4ctGxjqOjVHHJ4g/CVxYsMcJDRSctib f6D5OHP0BjznzCuANau51g3rsOZti2D97CCwlXuPcXsuVmj2EiyM+TU5iCKfa7/8 b1OuQ8LXsuuCJslpuKbibTp37ZFkAfA3lsT4uPe6M7z+zsh6f14wid1rLpla2tU3 PrB9gByoAWtTLrM58wEmc56kfEiC2KH7X/V2+WrxchGu+nN4nJoApbj8SmZWDyQY d+0F2pmJxvq6M4c8eyRJivJ9L0DY7RlpMsT/Xe9zrofwWcLFJhHSrL30twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBkdmxB1tCvvr1YeQTIFU/qm5qTMB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACT5in1is yTZtuC6xql+6rN650xMfizSx0CjZUnUEoo+ZI8vJKFrhKlyaVepxrl8k8BLAFbYB Vdfra1KX8aAZgbJ8MzJuZMGxND4iOo41+jV82030q25L5W1fdZfuJHq7+CTN4tPx vAINPYNQjPo1Sko6tFwYzfJ1lSp11XaJai9BrEXXlttkZ/POhSm90vi9f9Eu9oO1 sWPByMgtoBiRsCjZtUnS7GhG/BqufIu77FkKsn3TJVektOD3ipO5tS/iR72YI9Y/ tdhDGeDWnJ0i6jsPhkP/If2g3gCFDQr3n97dW4puQBXBi1E0G8XDFQOfFZWe2Rqq xoEMqale35NS2A== -----END CERTIFICATE-----Generated at Sun May 11 13:52:11 2025 by rpki-client