$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft File: rtruqRF6HVzMMgIilVoJ-qB5j9k.mft (raw, json) Hash identifier: xJvItCB5fbHsiM1X7R6/oTq89fABMq3zbi70WWYvuTs= Subject key identifier: 52:C4:69:2A:46:20:5B:31:D3:26:A1:D5:E9:DA:1D:79:72:80:B7:A7 Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Certificate serial: 0196ADD689DE5528FE339A8E0B3C57C4BEE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft Manifest number: 153A Signing time: Thu 08 May 2025 03:00:40 +0000 Manifest this update: Thu 08 May 2025 03:00:40 +0000 Manifest next update: Fri 09 May 2025 03:00:40 +0000 Files and hashes: 1: 2J2zD3rTOO4ekhA-SPW7MGnbxGQ.roa (hash: ZDpaopgvjDrdBtYEwGx6CMJY/HeEIsJZYVpJsQWQQUY=) 2: 3mlxlqxxKeV1HcJ7bUJquBWrLPM.roa (hash: LdsNRL7zR8y++XszDkFJs9ezvrT1lTI0NjP093U5ljg=) 3: 4SdJi3BPt8-RDec3IP7ET9slx0Q.roa (hash: QGo99RDwnHzRGoxgfvvtNisf3X6cgnQ851GWbQCaLvs=) 4: 7bwXhpAggJ_eID4STuVsUUonWWE.roa (hash: jwAsf9XJ11Ai8DUGeYC8bRJZ9GOha8mucoK1IxHdfkY=) 5: CzaaDeOWHQ6kTwaAx_O9YkLSomg.roa (hash: GUI6ZQYLsnldTDNTDgycT5JJ61OE2lf64zAhH2MlHo0=) 6: F-IifLCSbkSEOgi4sKV1jV1DQV8.roa (hash: 7kKwPi2Jx1AhBc2lAsg83y6Ji6J7QPEIqmUmsdkgOP8=) 7: M9dXL-Oza0PNDTAVGMoUMD1-IlA.roa (hash: jhP7c0ubJpNShQl4AZbo7W8l+sNrqPUvkjw+552fAtk=) 8: N8yg-rsBIkNZqhIg3aIitQuuaUk.roa (hash: Vq9e+6B3g3tkLctdReugpY+B6dczna3y7yxghSqb1lg=) 9: Oac09hx3rqQddn6sXzqSQ66tEsk.roa (hash: 0YnaolK2p37HCU8XIKe9HEtLFbwrR1vF1VCsBkGV6VQ=) 10: QB06ZN3QBBlBCzXQ38Wxu-W0hTY.roa (hash: YOe7BlkRM3bRTDlXC12POtxs/G4SQHLEyUujJ2j8le4=) 11: QeLZg2QtCjiT_FgF9I_8vW-GdW8.roa (hash: SAeRikMKDg+ufTk9edjpL98DiGUmXizgEulF/oacLNQ=) 12: bETkyP80sy6hlRCzvEGmZeisxF4.roa (hash: +PMdRBV3+/H3Dapb4/ZootNYzjktYG8iASt1NgJq53A=) 13: dnVM1cVOQmo9o53eHsEv3eXfeEM.roa (hash: h/M7g6bSmmEmFXClXRgmZ/cbukURXTiejXMMoqawhio=) 14: o9IncMeHSMz3mrSJeF9aMdkFAcU.roa (hash: KamLMqMs7PVReutKf0aHBQwg2azCb9n4pFhxDQwK6vA=) 15: rtruqRF6HVzMMgIilVoJ-qB5j9k.crl (hash: j7dpRrUegzzqOX+shx1QsuqZMMs6P4nxaQXu9j/R4Vw=) 16: uFTtcjsPGnkaZVI5W5A8IkTF394.roa (hash: SZYFDFQluX6/of0g5ijROkb7a9Qa6zQP//c286jjxKM=) 17: w3UqKWnMOF5NaXpk2iA4PKS4_bM.roa (hash: u2j3jAMfurHPfPAg9hddmCUv1bl75zA9+z27+zKCwbI=) 18: xZ_023oKHQSUR6TwKwMkGIsy224.roa (hash: ifrv9R6haJqU4fA+SuKlYO2IqiC8qB9Zjz5Ablqp45M=) 19: y_VdrldyiOysCbP_n_SofIR2xM4.roa (hash: 3Y8+s1Vq2DoJJO2anwZwA2qsfUgRB7+A97MBZINmwUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 03:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:ad:d6:89:de:55:28:fe:33:9a:8e:0b:3c:57:c4:be:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Validity Not Before: May 8 03:00:40 2025 GMT Not After : May 9 03:00:40 2025 GMT Subject: CN=52c4692a46205b31d326a1d5e9da1d797280b7a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:cf:40:3d:4d:37:06:93:ea:36:e3:78:ad:cb: b3:ed:8e:9f:e5:ab:ea:a8:f3:9c:d8:e4:2f:42:b8: 05:33:c8:93:13:c9:d5:40:c2:92:3b:27:b9:56:b7: 92:1e:79:78:40:73:7d:08:36:d2:e0:b0:e2:61:7d: 3c:57:f1:04:5d:3b:dd:37:0c:dd:a4:7a:19:e9:c6: 3c:73:7a:10:43:ba:c6:7d:02:9e:8c:b9:57:3d:5a: b5:a7:6d:b0:a9:30:02:61:c5:76:b2:13:3f:1c:09: 25:dd:f2:4a:34:ec:f2:53:22:8e:c4:c4:89:bf:38: 4d:8e:90:95:dc:42:35:27:c6:95:a3:c9:fc:98:eb: d6:ad:38:e4:42:fb:ee:84:bc:ad:39:f6:08:c6:e4: f9:7c:1d:3d:5a:39:b7:9c:4b:d6:3b:7d:ae:f6:02: b8:aa:16:c1:37:dc:b9:f6:37:dc:8f:7e:95:b9:8b: a8:ed:3e:cf:cb:e6:0e:c1:19:18:fd:5f:15:a8:b0: c5:1b:74:01:29:d9:de:a1:95:32:b3:5b:90:f0:bf: c7:2a:00:60:dc:df:e5:0c:80:dc:0c:94:12:68:6c: 96:24:41:54:ae:ad:61:71:01:e5:b0:13:18:73:28: 4c:2c:31:7e:ad:08:67:bc:4c:48:44:81:e2:6a:81: bc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C4:69:2A:46:20:5B:31:D3:26:A1:D5:E9:DA:1D:79:72:80:B7:A7 X509v3 Authority Key Identifier: keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:c5:de:0d:18:9f:62:9a:b2:eb:c7:c5:3a:8a:02:1d:76:94: 0f:bd:a8:37:f6:9a:47:1a:90:ee:76:82:3f:51:32:9f:d8:9f: 1f:60:ae:77:d2:13:62:88:a9:6b:6c:b2:34:6a:97:6c:6c:a0: c1:7b:99:b8:a6:07:bd:9d:db:6a:3a:54:cf:13:2d:03:22:00: 84:d7:b1:fa:f4:ea:6d:ab:17:79:fc:7e:8e:03:f3:fe:a2:17: b3:ff:90:78:de:07:02:f5:7a:97:3d:54:05:ff:b6:d8:8f:aa: a7:4a:99:44:77:50:f3:b7:b0:98:cf:70:fc:53:2a:fc:1b:50: 3d:62:6b:3e:ef:ce:67:37:42:dc:0d:d3:4a:64:39:0d:08:db: 27:5a:b3:8b:fe:b5:ef:e4:b2:63:c0:11:ca:3e:00:1d:08:06: d2:d9:ac:11:4d:2b:f0:ff:1f:34:ba:32:32:3a:8b:09:c0:95: 76:bd:51:97:82:10:c7:7f:3e:af:f1:6c:34:5e:e8:ca:9b:3d: 61:f7:98:38:66:44:f2:02:23:7c:1d:02:8e:da:af:57:00:9e: 82:09:7f:46:bd:f4:0e:8c:fa:a5:40:65:31:db:ba:1a:59:cb: f8:38:bf:13:a0:d0:ed:e9:a8:a4:c7:4c:76:05:d7:d9:92:c6: 14:16:04:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZat1oneVSj+M5qOCzxXxL7iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3 OThmZDkwHhcNMjUwNTA4MDMwMDQwWhcNMjUwNTA5MDMwMDQwWjAzMTEwLwYDVQQD Eyg1MmM0NjkyYTQ2MjA1YjMxZDMyNmExZDVlOWRhMWQ3OTcyODBiN2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA789APU03BpPqNuN4rcuz7Y6f5avq qPOc2OQvQrgFM8iTE8nVQMKSOye5VreSHnl4QHN9CDbS4LDiYX08V/EEXTvdNwzd pHoZ6cY8c3oQQ7rGfQKejLlXPVq1p22wqTACYcV2shM/HAkl3fJKNOzyUyKOxMSJ vzhNjpCV3EI1J8aVo8n8mOvWrTjkQvvuhLytOfYIxuT5fB09Wjm3nEvWO32u9gK4 qhbBN9y59jfcj36VuYuo7T7Py+YOwRkY/V8VqLDFG3QBKdneoZUys1uQ8L/HKgBg 3N/lDIDcDJQSaGyWJEFUrq1hcQHlsBMYcyhMLDF+rQhnvExIRIHiaoG82QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLEaSpGIFsx0yah1enaHXlygLenMB8GA1UdIwQY MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt OTk4NjhjNTEzMjlhLzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANcXeDRif Ypqy68fFOooCHXaUD72oN/aaRxqQ7naCP1Eyn9ifH2Cud9ITYoipa2yyNGqXbGyg wXuZuKYHvZ3bajpUzxMtAyIAhNex+vTqbasXefx+jgPz/qIXs/+QeN4HAvV6lz1U Bf+22I+qp0qZRHdQ87ewmM9w/FMq/BtQPWJrPu/OZzdC3A3TSmQ5DQjbJ1qzi/61 7+SyY8ARyj4AHQgG0tmsEU0r8P8fNLoyMjqLCcCVdr1Rl4IQx38+r/FsNF7oyps9 YfeYOGZE8gIjfB0CjtqvVwCeggl/Rr30Doz6pUBlMdu6GlnL+Di/E6DQ7emopMdM dgXX2ZLGFBYE4A== -----END CERTIFICATE-----Generated at Thu May 8 13:08:14 2025 by rpki-client