$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft File: zYMT5B5kagnNAeLm9HOdO9I2xP8.mft (raw, json) Hash identifier: oY5ewLecHEaqAqW4RlsC7vOzokPWq+pQ9TiQ4QudMzY= Subject key identifier: 39:88:69:DA:F6:89:8A:FF:5C:7C:07:BF:E1:1B:25:72:97:07:99:87 Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Certificate serial: 0196B0A0BB5F87B4314D096DAC0214482857 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft Manifest number: 153A Signing time: Thu 08 May 2025 16:00:45 +0000 Manifest this update: Thu 08 May 2025 16:00:45 +0000 Manifest next update: Fri 09 May 2025 16:00:45 +0000 Files and hashes: 1: 2PiS2J9-ItXkVvnefA7xUJmmHco.roa (hash: fm4Z7vvzHDMokg8lvCFW4L0Rre6/U9BEbHKtNsNHxxs=) 2: 9TwneljnoP6bcfYQvihrxla0RcI.roa (hash: Zr2Ui8lpKBSfU5vJuPYuh/1cm8NiWiUfV6M604x4ojg=) 3: HkTCrKZqDwa8EUL4YflDFIxvuSo.roa (hash: zO36rkW4iEPf0HW9ThqXz35RBy/UdvCTSm39AhOu1Wg=) 4: KcTcayFrsZLodbwf3DiREG7aMgQ.roa (hash: 8/vbDhWMe2EfxMGVicJi+/pUGnJZy6R4MjOjEjkxjUk=) 5: LsmwcIccA3zM4d7kxqt3XhLcSa0.roa (hash: 98WTFaz7XPqlrJj7+XyfBTJEw1Sf7UEiPzA9D8zWsIw=) 6: PneAThfusF70GWHWywmhFb0vzKg.roa (hash: 0kjnbKbpSjxRU2te032pdWFUGrUsCjxiyKJ48H1DPUU=) 7: QPCXSoVGqmo5YTCi73-CSDuyZ-M.roa (hash: BYlFE9CUTQ67gGcO7goW8z5RieIlu+Sp4h/7HCES0Bg=) 8: T-x5NWBWP7z0RtMavKGuf9lbyTk.roa (hash: 5meL33wuT4ICoWjsr5JwrdL6iizp93b+W5Vq2RQt4cs=) 9: YPhWBSPHGs5SvVUlaCiCKWmqFfE.roa (hash: 5GbYaE22J8Owy6TgFxnM856qPEXWo4AxIXtfMEPnMxs=) 10: Yqt3Kg8k1YJOv7s88RcINuiKaCE.roa (hash: nWZ5K8Cmhazakp99a9slUSDcrdtW/sXazmS+lE8qgb8=) 11: d-qZVEez3-tqSbLZHyKHdZ5qcJA.roa (hash: +81/qDkled7/tuehBezhqXR9TX8Qi/57Cwe4Hugu7Ps=) 12: e3hNMZozjl2a8wTj5jqUKt2netU.roa (hash: z65fVe11ggvNgyomVpHPZ3mT5uEYvV6n9cNO6WIVkOQ=) 13: jcSJxEfFuIOqv-vUuvBQckyf-ZI.roa (hash: V8+8ahCoa4BEtoKDRdWiWxQzrt5GRgWy4qkSi1g/uZs=) 14: lcN6tqSn03IPMO2AvpfpxpGgDQY.roa (hash: 8fvPqg+8qqIeW9Kd8tRNl8Xlys8MO8b9CTy9FA3u9tA=) 15: lzFclAiK-AKgH976Yl_uXg9r5wM.roa (hash: H/cy8Ymyjy+9oeeIlZQHYMPSRfjOx2uqFxTFGhSTiGE=) 16: oLt7xT_rHP-Hxh3lUeggtdVEvTs.roa (hash: hblIrYC6F95+wg2sH5P/uCfjsNRvIhmQ2s3oU6U1S/g=) 17: ogeSaiZjPO4Kd4PF4MmZ3E0M2dA.roa (hash: Y6nye2lCZkZiTnuBzh99LMq3fLt8LGMzc9QAvB3SwlM=) 18: p-aeeSEszU3aapQ0yEslN0bhQQ8.roa (hash: Mh/Q23651bJq9potJm5ecJKYPprCxzH57rPx/Ooy5iY=) 19: r40XtPdgr8Y3RxrHTUe0xVuomM0.roa (hash: t4ySxCeAxHkHkDK1q9KhuYpYVZshrBVi3KJ4uODs/8Q=) 20: rD4_vnlr510eZLzrr2aCnfyAvEE.roa (hash: dL+NP4nhH4zwWo5a+tL5dbCaIelO5RMTVy2uI8g69YI=) 21: rdclR5rmMPPiGdub64u9CAD4cr0.roa (hash: wXgXLOiDxEJK62XQ7DLJMuxi7/zXmFbGyGpgUuOv+8k=) 22: tNteV-bYipxacIdsneN2kRS27vI.roa (hash: DK40xOAWm2KZPWxZ02RGtb+aUbxm0wIjZBTHx/mZzWs=) 23: uzMFOnPKpMqU8CP0ss6Mpv56PiE.roa (hash: F8nsfvroSbli8FdaVZTheRyMCu5cUrtu6qwv9yns62A=) 24: zYMT5B5kagnNAeLm9HOdO9I2xP8.crl (hash: HDex7fQiBSqiIs9jjZ2pjDvYGXT3H/VeIxFM0nZfyos=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 15:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b0:a0:bb:5f:87:b4:31:4d:09:6d:ac:02:14:48:28:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Validity Not Before: May 8 16:00:45 2025 GMT Not After : May 9 16:00:45 2025 GMT Subject: CN=398869daf6898aff5c7c07bfe11b257297079987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6e:69:1c:ba:9e:df:b9:d9:80:dc:c5:f5:ad: 56:1a:05:79:c8:b0:31:8a:22:d8:40:70:a6:7f:a3: 18:ff:d8:8c:8b:77:96:7d:16:96:23:36:20:c5:07: 97:f7:21:a7:d5:a3:e4:2c:93:63:5b:91:ca:cd:ff: ee:39:36:9e:7f:6d:d3:de:c2:72:85:92:ae:08:0b: 83:cf:80:52:16:71:de:89:3d:fb:be:df:08:c0:0c: 42:16:79:2d:c8:59:18:f5:1c:32:44:7d:62:81:d8: a2:d3:04:92:51:da:f1:8b:ee:3d:95:75:07:f6:6b: 2f:dc:22:17:16:b9:ff:a9:d4:47:12:12:d9:bc:22: 49:98:18:1c:af:ec:4d:01:0a:a1:1d:95:25:f8:ce: 9c:54:cd:77:74:35:9f:36:b6:45:3f:dc:47:48:9e: 2d:96:43:bc:0f:cd:ff:14:9b:d8:48:e1:11:dc:5c: 01:ee:5f:54:9f:2d:21:40:4c:32:57:45:34:c2:d6: 5b:8f:6a:ca:6b:31:2f:c9:17:f8:ee:3f:ef:6e:f0: 16:91:c0:75:bb:9a:c4:15:51:7c:3a:dc:cd:ea:b5: ed:df:63:c0:2e:18:58:5c:0c:72:83:f1:38:4f:ec: 15:3b:8d:9e:70:9b:d7:ad:10:8b:71:d8:f8:e1:1d: b9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:88:69:DA:F6:89:8A:FF:5C:7C:07:BF:E1:1B:25:72:97:07:99:87 X509v3 Authority Key Identifier: keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:46:df:97:a8:4e:3b:52:b6:ff:2b:ca:9c:75:a1:a7:39:3a: 92:46:b5:88:79:d9:56:bc:1c:b1:2b:f5:7d:a7:1a:48:91:16: 87:84:db:e9:92:9e:9e:6a:0e:e7:f8:8b:6d:ec:cd:42:7b:22: e1:d5:ba:5a:97:e5:17:d2:8e:11:be:3e:e8:b2:07:99:03:66: 0c:4e:4c:19:d7:f9:37:0d:4a:56:94:2b:94:3c:82:2f:4f:4e: 71:1d:8d:82:80:a8:25:a3:d5:0b:9c:1b:3d:02:d2:d7:90:f1: 13:18:0a:76:a5:a0:b0:e7:23:7b:e6:ec:4e:58:e2:c0:f5:3f: 18:b4:cd:7a:9a:e3:9e:0e:19:40:a1:11:05:ae:61:08:b0:32: f5:b3:1c:45:02:2d:e3:0a:83:a8:b6:71:89:49:98:7b:c8:60: 30:18:81:2c:b6:9a:21:ed:e0:00:d4:06:1c:ed:3d:cc:7d:ca: 90:fc:4d:ea:e2:fa:b7:4d:a0:bb:3f:88:b6:09:63:c7:b9:4a: f2:a1:77:3b:be:18:a8:e4:37:4d:c8:91:71:08:f6:a5:06:8a: 8d:54:2b:06:65:06:fe:b2:06:e1:08:24:cc:95:90:bf:f2:25: f5:a3:0b:06:ba:03:74:97:7d:2c:6b:0f:cc:87:e6:d0:a2:b0: 94:d6:c1:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZawoLtfh7QxTQltrAIUSChXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz NmM0ZmYwHhcNMjUwNTA4MTYwMDQ1WhcNMjUwNTA5MTYwMDQ1WjAzMTEwLwYDVQQD EygzOTg4NjlkYWY2ODk4YWZmNWM3YzA3YmZlMTFiMjU3Mjk3MDc5OTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3W5pHLqe37nZgNzF9a1WGgV5yLAx iiLYQHCmf6MY/9iMi3eWfRaWIzYgxQeX9yGn1aPkLJNjW5HKzf/uOTaef23T3sJy hZKuCAuDz4BSFnHeiT37vt8IwAxCFnktyFkY9RwyRH1igdii0wSSUdrxi+49lXUH 9msv3CIXFrn/qdRHEhLZvCJJmBgcr+xNAQqhHZUl+M6cVM13dDWfNrZFP9xHSJ4t lkO8D83/FJvYSOER3FwB7l9Uny0hQEwyV0U0wtZbj2rKazEvyRf47j/vbvAWkcB1 u5rEFVF8OtzN6rXt32PALhhYXAxyg/E4T+wVO42ecJvXrRCLcdj44R25bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmIadr2iYr/XHwHv+EbJXKXB5mHMB8GA1UdIwQY MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt ODg2MmI1MTczMTdjLzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfkbfl6hO O1K2/yvKnHWhpzk6kka1iHnZVrwcsSv1facaSJEWh4Tb6ZKenmoO5/iLbezNQnsi 4dW6WpflF9KOEb4+6LIHmQNmDE5MGdf5Nw1KVpQrlDyCL09OcR2NgoCoJaPVC5wb PQLS15DxExgKdqWgsOcje+bsTljiwPU/GLTNeprjng4ZQKERBa5hCLAy9bMcRQIt 4wqDqLZxiUmYe8hgMBiBLLaaIe3gANQGHO09zH3KkPxN6uL6t02guz+Itgljx7lK 8qF3O74YqOQ3TciRcQj2pQaKjVQrBmUG/rIG4QgkzJWQv/Il9aMLBroDdJd9LGsP zIfm0KKwlNbB2Q== -----END CERTIFICATE-----Generated at Thu May 8 22:02:10 2025 by rpki-client