$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: dNt7WGttHXQmvY4qlGJBpegKonoRreFLTI7MwygpEPA= Subject key identifier: 41:A1:6D:B1:9D:68:FE:35:18:F2:42:C3:D0:EF:D5:AB:E1:19:E0:F6 Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 0196B85A231AA75CC00F17231738A19C4477 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 0EFD Signing time: Sat 10 May 2025 04:00:37 +0000 Manifest this update: Sat 10 May 2025 04:00:37 +0000 Manifest next update: Sun 11 May 2025 04:00:37 +0000 Files and hashes: 1: 7K3k7b_VuVXreG4TZPCJYqZfF3E.roa (hash: Mlmhkf4jbq89VKvIVk+oiVN1ePN2hRV3HnX2uto8WJU=) 2: BrLyoPvlUaso46lX0KWb5vFGmM0.roa (hash: xL+T2GI69dhAcv4plVUHvDhKIEwvfeKCIn8Shgjm/i0=) 3: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: yMN2cv+5AgClyukfIVPGfC+KdVHjF0+uqGOdMcPAqis=) 4: ItkPtexNahvw3tDr3_bT8GEZfr8.roa (hash: SJn0U88NMdBnAS7glQzEzO/4h8XGSEZsIoQuSFWE8lQ=) 5: KPsZP5UxbVlCpzRsbOBIhy6z_pQ.roa (hash: kVAhbMyWoKA5VWa5Rhx+mEjaq4dPTfBEWmIzltLf7OA=) 6: O4hsLYqHDHOc5YtrhKrxfVw253c.roa (hash: ftP8M0zBEeWH13FQ0ROC4yQQqu5d0hiLyMqOEpuSB2s=) 7: S8NNzpYJ5i63QJglA0hS6lNTgN4.roa (hash: oQMGxS6aGqOdLfZr8vkFFrUapKMk/UebkSM9HMDYXqs=) 8: XHlN3RpeQmFr0S8d8kRmm2_r9Gw.roa (hash: 2CQIDqSJfPO5Zu/OEOhrMlJ6AbMdAt7LicT/EFEbIc8=) 9: XtPC-hLseHu-oNHb7iMp78D7fDc.roa (hash: hosi2cp2sXp7OezBXmUWbVNJewXZGC35mZTjc3/DqAc=) 10: bqCIwVZ2XpZx_IfIj7dYA8wJreY.roa (hash: i6u6U6/gyOnTl0MAd6o9UqfZD0C1nlK3nCbIBUXXrK4=) 11: qU-FNtg0qY4hJwKQMawgQqk-7hk.roa (hash: 13slz4AHZrhhHtsx3wRRPE08jfCa/LuOzvkrn3vV24A=) 12: rCxYI5Tulv7y1jiwSQxGMLIrGN8.roa (hash: +s5/7hhcPvTnv+J/E+7TIW4jm9Ttlavmle1UeAYMmYQ=) 13: ub_wuD6GrLRSFxkzvOcZq4Jo0u8.roa (hash: 7Un/Y+Kg84yVZqoJNW9xKfwZcI8pk00diQSKoBsgLzQ=) 14: wO5DmrwTSoyl76lHsJA2t5qAs9I.roa (hash: gFeojWx3JdvkiLn4u4KpLVd5bJnsp8Sl11CkVIEvvlw=) 15: yV5VAilxWOh0of_wXNotAN0Ules.roa (hash: okzmmgBoCtu74qSYeftTIK3U3j25WujMDAESaACQXMQ=) 16: zEVJ0_wf_uy6-Ifr09xIfyn08R0.roa (hash: Mx0lPSY3hw6TgVNilrBT17dSIAN0s4FyHxEYjNAbcQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 04:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b8:5a:23:1a:a7:5c:c0:0f:17:23:17:38:a1:9c:44:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: May 10 04:00:37 2025 GMT Not After : May 11 04:00:37 2025 GMT Subject: CN=41a16db19d68fe3518f242c3d0efd5abe119e0f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6f:fa:20:88:3f:f7:d5:37:ce:16:ce:fc:4c: 82:f4:d9:f2:99:4b:be:aa:4b:92:ea:9f:e6:fd:bf: 99:d2:56:bb:d3:c0:8c:ba:0c:11:33:67:28:ff:17: 00:7f:ba:d4:be:f6:66:4f:36:7b:4b:1f:04:ee:ea: c3:da:47:56:fd:90:e1:7a:db:05:14:35:0e:d5:55: d4:49:a6:2d:66:ec:f1:ef:9d:cb:16:47:a6:00:8c: a4:dd:3a:01:89:72:c7:78:63:82:09:7a:a2:b5:39: ea:62:d5:e5:88:b4:0d:50:e2:95:21:d9:8c:62:17: 08:6e:11:ba:a6:1b:6a:46:1a:a0:48:82:27:26:57: f5:b4:fc:90:94:13:76:ca:0c:32:01:6c:13:ce:b4: b5:e0:29:55:bf:fd:34:22:ef:14:46:2d:94:be:72: ce:46:9e:b3:63:ab:b3:dd:c5:f2:1f:99:e8:bd:da: 4d:8d:89:3b:f6:a7:3f:fb:0f:e1:44:5c:cc:9f:e4: f2:bc:c2:99:91:17:67:e7:c0:ae:82:35:9c:cc:15: 0a:fb:98:fd:a3:76:d1:f8:7d:91:1a:ad:93:b4:59: 10:34:ec:6d:ed:24:b1:21:22:6b:a8:e8:3d:00:27: 14:dd:ed:8d:43:dd:38:c6:a0:72:bc:86:c7:2f:3c: df:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A1:6D:B1:9D:68:FE:35:18:F2:42:C3:D0:EF:D5:AB:E1:19:E0:F6 X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:c2:a4:46:4d:fb:84:32:da:83:5f:96:00:d6:82:f7:19:95: fa:86:b7:01:42:f0:50:ce:db:98:89:cd:de:28:d3:44:fa:98: b2:7f:7a:f3:8b:16:a1:df:fa:5a:69:48:c9:c9:2e:1d:b8:50: 51:44:d6:57:4a:ca:b4:55:47:35:61:e1:6f:70:bf:81:35:a6: 12:ca:ae:67:d5:e8:64:ea:78:98:89:1e:16:0d:b1:6a:01:a8: 2b:97:e5:50:ce:0a:64:65:d7:ab:81:4c:c6:c5:18:25:64:69: 71:8d:d6:95:22:f5:1c:81:da:0c:14:42:ee:bd:19:77:ec:f6: bd:84:ea:7e:85:6a:62:95:6f:53:bf:4d:62:6d:ca:85:f4:37: 87:6f:af:bf:a0:1c:12:4c:f2:cf:f0:7c:5e:c7:2b:12:b1:34: f0:48:dd:11:a6:58:c7:fe:7f:5c:09:71:ef:44:01:87:df:c2: cb:91:c7:08:49:f3:11:42:9b:c9:08:ac:2a:83:89:7b:0d:76: d7:5e:0e:82:7a:29:d8:43:bf:6c:ab:58:a8:9c:ee:35:5b:ae: be:c8:4c:54:cf:f8:e6:fd:3a:a6:e5:1b:2e:07:fb:8b:d7:0e: 2d:28:d0:71:7c:cb:ac:eb:83:27:dd:43:a7:99:fd:8c:b7:7a: 81:18:22:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa4WiMap1zADxcjFzihnER3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjUwNTEwMDQwMDM3WhcNMjUwNTExMDQwMDM3WjAzMTEwLwYDVQQD Eyg0MWExNmRiMTlkNjhmZTM1MThmMjQyYzNkMGVmZDVhYmUxMTllMGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW/6IIg/99U3zhbO/EyC9NnymUu+ qkuS6p/m/b+Z0la708CMugwRM2co/xcAf7rUvvZmTzZ7Sx8E7urD2kdW/ZDhetsF FDUO1VXUSaYtZuzx753LFkemAIyk3ToBiXLHeGOCCXqitTnqYtXliLQNUOKVIdmM YhcIbhG6phtqRhqgSIInJlf1tPyQlBN2ygwyAWwTzrS14ClVv/00Iu8URi2UvnLO Rp6zY6uz3cXyH5novdpNjYk79qc/+w/hRFzMn+TyvMKZkRdn58CugjWczBUK+5j9 o3bR+H2RGq2TtFkQNOxt7SSxISJrqOg9ACcU3e2NQ904xqByvIbHLzzfDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGhbbGdaP41GPJCw9Dv1avhGeD2MB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4cKkRk37 hDLag1+WANaC9xmV+oa3AULwUM7bmInN3ijTRPqYsn9684sWod/6WmlIyckuHbhQ UUTWV0rKtFVHNWHhb3C/gTWmEsquZ9XoZOp4mIkeFg2xagGoK5flUM4KZGXXq4FM xsUYJWRpcY3WlSL1HIHaDBRC7r0Zd+z2vYTqfoVqYpVvU79NYm3KhfQ3h2+vv6Ac Ekzyz/B8XscrErE08EjdEaZYx/5/XAlx70QBh9/Cy5HHCEnzEUKbyQisKoOJew12 114Ognop2EO/bKtYqJzuNVuuvshMVM/45v06puUbLgf7i9cOLSjQcXzLrOuDJ91D p5n9jLd6gRgiGg== -----END CERTIFICATE-----Generated at Sat May 10 11:19:16 2025 by rpki-client