$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft File: HJY-PSKEfUZsJiwgh4wngNiEAAM.mft (raw, json) Hash identifier: bXVFXDuANw8245U3UaFUW1ejxrdwkBnfyndifToOi/M= Subject key identifier: EB:68:12:61:FA:55:78:26:44:1A:D8:85:66:49:62:EC:78:FB:5A:6E Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 0196BF6EDA761E0E6E99EFE5DFEA8D32F649 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft Manifest number: 04C9 Signing time: Sun 11 May 2025 13:00:35 +0000 Manifest this update: Sun 11 May 2025 13:00:35 +0000 Manifest next update: Mon 12 May 2025 13:00:35 +0000 Files and hashes: 1: 0v94mnKmrgYtt5y2MQGuDazjxjA.roa (hash: 3Fy3bWz7jcZoEFMt18MGzYWf/tfMkeytNpRPKao8d4A=) 2: 1-kb4hmxMAktf4yYaTtNVFR4VnGM.roa (hash: Is673hjFs+Vhwv7WU2gQiJKw7iusXjoS6iS4OthWLzs=) 3: 1EKmpmLrhgEWrPL4W3egou3tKhc.roa (hash: ut1VDOBCE4msMsHhztUxD5FDBOfdw81wBHRbz+SOmeA=) 4: 4hx7X-qAofbTlhwwVV-AQ6KXp_w.roa (hash: OBb8406LAIV4rFPWUu9hOe5P2joW2t0g3DbKGweRhoQ=) 5: 5z7umG_zBrgbe3GYmxGKIJqOjM4.roa (hash: T62gr2UGr68OuXzoBc51fpjhb+WTXZXR9z/BlT9xYrw=) 6: 7K_fXBgx0WXt0gGYJ6jjRgUKATo.roa (hash: UsnozRUQs3hkcM2EUwqVf37Hx3WFirrJkKfa3m5CS/M=) 7: 92fBnrq_mIGybZF5gsHPTbdH0y4.roa (hash: 3nqgv8gEoJk+mexG4q/tymckm8ICa7hlkNqJQ4qh8Tg=) 8: 9UIWvr1OfNDaGDV1NFy_9NnoTYM.roa (hash: tixaefTMG5hslITfoqhr1S/+epdx4nSuGQbGRhnUPxs=) 9: 9tE0dhjecz_vEPgQYKZazxJZpXs.roa (hash: ybs354Sqw4G0DipKA3jVjo1yJgYq86p+0PfMWE0k7zg=) 10: A8oZtym780vkooA0CDCTmVa_Uyg.roa (hash: JEJEnU4s8nB2zC1Zuwtfcc28Rv+NglRc6QVnMQ0CUAc=) 11: AR1U-o6oikG5S9IuxC8ZAQe4Zy0.roa (hash: QXquCj99CRvUb5NM604UTbelj6b0eQb4VIYnFIQyC8w=) 12: B3hYI-yFzUsfLaXXcmpVXDtm1FA.roa (hash: l103Ybv4lweW1usLLXjIO7Qt2UGlUxgwH75Nm0FO+Vs=) 13: CBUmi1Sy-4OHlm4dqLE_fNMsxkQ.roa (hash: sD732gCP9DEw8s9H4wJkzWgViHWbKEY1xx697cAAzh8=) 14: DFllakhYeoutBATf4MzktTkzMHA.roa (hash: GuxDJWqtKXhEqBdraQY6S/n1UWX945Zxw/dwDjpnHZI=) 15: DRAzDA2vgEaiM5RUOX074m9AtAk.roa (hash: b17cUe8b1KGzAYHt+JmGZn90RCYEfEgnyjtke4m04uI=) 16: GwY7aqP6WD1VZfdUMWD5hpn3Gtw.roa (hash: KM8VeZyBdq/62P9d/7r/Yu9hFrPIddN1gV8lL3yUSfg=) 17: HJY-PSKEfUZsJiwgh4wngNiEAAM.crl (hash: kAHNGd1qBpiFi5a3PRx7WUWlPKzIfxLrcMkUqM9cu2s=) 18: HKoBlx4Ki-nzxCw9aEz-oTGTS5s.roa (hash: FQAxLC3PSJc2T88Euwq7LFUYTEkvVvSw9fr3e7bH7tM=) 19: KL_oocCv4khkyRa25dlbyITRdjc.roa (hash: 4wKDO2i1BeDNJh2oVpIy70ysxuQo2aRiUjHzNsE7zKM=) 20: KOI25PzdTkm-0xZVhCT_xtTg5-s.roa (hash: 1o0QY37vh42XXWTJhB6P/HZwmg8ud9LsKS5XYNkdPhE=) 21: NtsNx1ln9VTnlxvb3DnHe3HxX6M.roa (hash: 62MHE/ObSNCgKCi9O4CSEdldJK0WNMREIvL73UuyahQ=) 22: PCrnzM27m_gargGZ9ylIhhzHvSE.roa (hash: 6s3SRX4vbA35QaqChMrHCzmBjK50KbRqLwu/jy5I+uw=) 23: R2R3dYwVExujkP_3YEzS5IWSFks.roa (hash: iCdIt4hjH3rsHPjbBwBDkiRUbawLUhZbiZd908W2whA=) 24: TxUte2UJ9SRYfI0Kkfto-EOhFA0.roa (hash: jgnG8ECsuht9mADq610Na72eHRyPpWoKaV58yYAI49E=) 25: TyejWy3JMbuHPbI-YINhRswkn6U.roa (hash: ddeTozCzeGdeH2UQO6NJHuZFd1z2I2vHOsvjsVc+KhU=) 26: UexI4Z2MHoKJX7UArvShMTnFH1s.roa (hash: OG+DMZt/nQN7JQoIC3moczIdzt0YyA+sScQJwQ63uLM=) 27: Vif29W-3fcIPPVlWCYw3gqQgj0U.roa (hash: mBKo6kBp5aKtDQrGaY+LTFtjbW2WOx4wgeIf4JrxaMQ=) 28: Y5YvAPglDjFhK1YMzDU1y1jJIlE.roa (hash: nOlX7buINhy7ODIRgajp3PMZ+ShNH0qVTw3tydvl1+c=) 29: b_esdvwuL7HMMRsaUDaWOqTlMVY.roa (hash: pwo77eC9fZ605tPPzC8qd5eRG6DFX9632hHdiz08KNM=) 30: cQGYII0oWa_it-a64CIhy86rZFM.roa (hash: K03Kz6lMXyDGjb7Z/vj8jbw4mEpgwq779RTg2IF0I6Q=) 31: clGGL9s85YgTAJ-RMjz5lCzOP5g.roa (hash: xPkxg9x/lb7QNTjqVIebB4jEI4Q8WiVxGZsDwX+/iUM=) 32: eeNIld-CwPVcfEVGzgUCMqVFpyY.roa (hash: uxo9SuC4/NypmA3tJNrIjhVovnUTOlUmyteCbIDqups=) 33: iDHKoOkn76ewvGMKtSvQ55oreVI.roa (hash: FdmrkxRsqXjJl6GApfB2yCowxyhEWG38nOt3Zk2IOgw=) 34: orZxC-53BDBk1U6uuSN8DRaau2c.roa (hash: HOGL1GzBKb2HP//0y1ozzX/F3kqSictn9tpzoAyDhSI=) 35: pteX_F18pKfY_J9Cs8K_KhX8xe8.roa (hash: m/yi1TVeKvstEX7vhie8NfbFmnVlI4Htbwkazoc2nMQ=) 36: u_xpoEFdMS4XphSvfLjhMqrSVCA.roa (hash: F/zktMNsr2weptvJLM+lhhTnzjBLxkGzNeypTL4hxZk=) 37: uhmFxnEKd2nWDe4y3QSW_tBBf5k.roa (hash: 3Bs+fdH+UE5EdQY+qhv9fnBOPcXhnzSeBJNZNfIjD6w=) 38: urVdPzAr5hcmUa_BCZWJpXPsm3s.roa (hash: q/f+k2J6pg2/lVHaao8qrOCAoWMApYxChxvdtUZ21VY=) 39: xpnbOWgAfiIJZmpjmdv34zXX7iA.roa (hash: hxYTr7x86gGFLz4Uj6fKUzE6Fc/CR0rrmrlRUyOVlSA=) 40: xuJYMqlUYpz7SNGCM4K_jvqIs20.roa (hash: d0TAOSbcF1oLLc0bjHz9EWzJ8DaW0Vbfqehz4TLqfCE=) 41: zAVxvux3Ij4Ln78b1yGsEJeiCfQ.roa (hash: 3NnVEWj3eRCtReW6v/aye01x2yi/QEBSea/+eiByuhc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 13:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bf:6e:da:76:1e:0e:6e:99:ef:e5:df:ea:8d:32:f6:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: May 11 13:00:35 2025 GMT Not After : May 12 13:00:35 2025 GMT Subject: CN=eb681261fa557826441ad885664962ec78fb5a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:53:7f:a7:07:91:a9:0c:bd:41:bf:08:d9:e0: d2:d2:d8:32:f8:d8:20:b0:f0:c3:6c:dc:8e:cb:7e: 57:71:84:0a:a7:ef:f7:80:26:33:fb:b3:95:ab:e7: dc:ca:b3:d5:84:f6:8c:74:f5:ad:4e:26:4f:2d:cd: 8f:51:76:49:b9:b8:cd:22:c5:17:6f:76:97:97:08: fa:ce:cc:de:4f:cb:70:4d:67:c9:30:1d:55:1c:4b: 0d:4f:db:a6:ea:8f:8e:d3:1b:8a:28:2e:1c:ee:49: b0:26:76:d6:1f:78:b1:c9:53:93:cb:94:93:59:25: 99:78:41:fe:7e:4e:12:6e:73:ac:f3:a8:95:86:30: 17:eb:b6:b5:fb:d9:10:cf:40:0a:f3:f5:67:19:81: e3:f0:83:53:69:61:9e:e2:aa:f0:3e:40:7a:1e:b7: 13:3a:fd:43:42:69:75:d7:b5:59:fc:5d:b9:af:96: c0:97:9e:66:29:77:87:a1:0a:5c:88:af:7c:5c:07: f3:b8:a4:55:cd:ca:10:e9:0b:c6:3c:c2:68:50:69: 81:c4:7c:e9:3d:e5:e1:cc:21:de:c4:b6:37:d8:ea: cb:82:fe:3e:10:a2:0e:ce:c7:34:0c:2d:08:cd:32: cb:2a:9c:8e:c8:75:cd:29:22:bb:d8:4d:64:8c:93: ce:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:68:12:61:FA:55:78:26:44:1A:D8:85:66:49:62:EC:78:FB:5A:6E X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:40:c5:23:b2:c2:2d:68:5c:6d:6e:ad:61:62:0f:97:df:03: 27:a2:25:58:0e:37:e7:f0:3b:54:1f:54:77:7f:71:ef:d7:2d: c4:ed:2f:0f:4f:14:66:90:8e:f1:c4:f4:e4:c2:f5:82:ff:e6: c0:a9:9c:5a:c6:60:ee:d6:46:ed:1b:e2:43:9e:d6:b7:58:b7: 7b:66:05:17:29:ac:07:16:6f:9d:8f:70:5f:f3:df:58:d5:44: 7d:4e:5b:ff:c2:84:e8:ae:d7:f6:49:1e:6f:12:1b:59:72:24: 0d:06:06:32:ae:76:6b:85:35:1f:19:db:ef:06:5b:cd:4f:8f: 05:23:38:7f:63:ba:e9:65:ac:2e:1e:00:85:5e:ba:bd:25:13: fa:af:45:9d:8e:7a:10:ae:eb:16:31:8a:7c:f0:10:cb:19:cd: fa:e5:3d:3c:b7:3c:63:17:41:db:e4:96:bf:6e:8b:83:75:f2: b3:87:b1:84:76:a6:24:1e:b6:b9:10:6f:75:b5:df:38:0f:b0: d1:3c:01:fe:d4:d3:f0:35:f9:3b:6f:fc:c0:ca:94:d0:94:18: 32:20:b0:34:57:c8:de:c6:ea:61:23:39:65:9c:29:ed:7e:40: a5:25:64:2f:bd:4d:c3:71:28:fd:a2:2e:75:f7:77:2a:7c:12: 04:8b:1c:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa/btp2Hg5ume/l3+qNMvZJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUwNTExMTMwMDM1WhcNMjUwNTEyMTMwMDM1WjAzMTEwLwYDVQQD EyhlYjY4MTI2MWZhNTU3ODI2NDQxYWQ4ODU2NjQ5NjJlYzc4ZmI1YTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlN/pweRqQy9Qb8I2eDS0tgy+Ngg sPDDbNyOy35XcYQKp+/3gCYz+7OVq+fcyrPVhPaMdPWtTiZPLc2PUXZJubjNIsUX b3aXlwj6zszeT8twTWfJMB1VHEsNT9um6o+O0xuKKC4c7kmwJnbWH3ixyVOTy5ST WSWZeEH+fk4SbnOs86iVhjAX67a1+9kQz0AK8/VnGYHj8INTaWGe4qrwPkB6HrcT Ov1DQml117VZ/F25r5bAl55mKXeHoQpciK98XAfzuKRVzcoQ6QvGPMJoUGmBxHzp PeXhzCHexLY32OrLgv4+EKIOzsc0DC0IzTLLKpyOyHXNKSK72E1kjJPOWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtoEmH6VXgmRBrYhWZJYux4+1puMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkDFI7LC LWhcbW6tYWIPl98DJ6IlWA435/A7VB9Ud39x79ctxO0vD08UZpCO8cT05ML1gv/m wKmcWsZg7tZG7RviQ57Wt1i3e2YFFymsBxZvnY9wX/PfWNVEfU5b/8KE6K7X9kke bxIbWXIkDQYGMq52a4U1Hxnb7wZbzU+PBSM4f2O66WWsLh4AhV66vSUT+q9FnY56 EK7rFjGKfPAQyxnN+uU9PLc8YxdB2+SWv26Lg3Xys4exhHamJB62uRBvdbXfOA+w 0TwB/tTT8DX5O2/8wMqU0JQYMiCwNFfI3sbqYSM5ZZwp7X5ApSVkL71Nw3Eo/aIu dfd3KnwSBIsc4g== -----END CERTIFICATE-----Generated at Sun May 11 21:58:24 2025 by rpki-client