$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft File: crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json) Hash identifier: VyjnU13QubZzd0Y1vScNa30BU+bI5e9Kpgrj9pRmnkA= Subject key identifier: 9D:D7:11:34:F8:93:D1:C9:F9:D9:32:4B:D4:53:C2:40:5F:9E:74:6E Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 01969D87CF9FF4B4D6DDC4C05FCD4DCF4595 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft Manifest number: 15B7 Signing time: Sun 04 May 2025 23:00:45 +0000 Manifest this update: Sun 04 May 2025 23:00:45 +0000 Manifest next update: Mon 05 May 2025 23:00:45 +0000 Files and hashes: 1: 2bWjaCPUw-X9yUtaNeVHbtBR4RY.roa (hash: wUmEh6plZKTlbe1wgPAmlbbKo/l6BC2G8XZaRSw27eo=) 2: 58pgEzEV4itxzFdqyuzKp1koy9E.roa (hash: tH6QFOaJ/p4keTuKKE46gn/xyoU7W70E/+/4aSveeLE=) 3: AGmA39KwwTaMo71xV9rDHmreSZs.roa (hash: Ryun1mCIWyFFcbzTBG9eqylu4psXL7qEbax/r+ERVGA=) 4: BL8I68n0S5EatljR0k4XZsKHA24.roa (hash: iOoLcUwIbkzuVCDzFIpNedtLQogspd3V7HdfhJiPZWg=) 5: BaSPDYM6MErqXQc7hbonxO3hOP4.roa (hash: AgREuMxC9LWBmMGpuhqiDAzwfQdn2bSFaeGwQAYr9Ig=) 6: BxtsjwaylqDgyShxS785H67TnbY.roa (hash: tVOA9jGSji8cVYr6ivVtJAHBG6QSJ270Wt89fBmSzFA=) 7: DskJ3QKfzbRX76wY5Y62eU4erR4.roa (hash: Om0rFiAWDXCVX1P62G7M/6mKMjWs5VmA/8EV8q++G+4=) 8: FNeaupTearRlRLiEtSJaFFa0iWs.roa (hash: pl3eLKUBqVWjBd0NBa7tPGsPn/lDXcjdIewHvf3OYwc=) 9: InrDEGCfKU8jJed9KnH2vx-d78Y.roa (hash: NgTZkZMP5rtVotSPrvAaVc/98gXGQA3bDBX67D3E0+U=) 10: JgPouA_jmpHV5hDbLij9YLal33o.roa (hash: 7YwHFYuVdRf9mWnshpfvLYgyOJrwWP6qz4/AQwJWL+Y=) 11: JkkRBzU6KqC4iLmQvNFLg1pZbqQ.roa (hash: qQIWTHDKXS9dJmmc6TGCroCf2SQogHaE6HLb5eCxiv8=) 12: KrudkOICJ6o23J172JFVZgrTE8Q.roa (hash: LOElKXAo1zxfoDmHY1gKUaU9NBQHXV4qqyUFnydMwws=) 13: NcVlekWCiF1MqD0pMFbt8sBm4xk.roa (hash: zMGQInzAKzEgCcQ8IjKoVLyb75jlj1C6HwQ11XN+6E8=) 14: Q-cb4AjNFoWCznmTrkTd9_2MtQ8.roa (hash: 2USY3xNUmziDvmtALMRGKfhIKkZceNSRez2thcTQVsI=) 15: Q7A84Re88TEGuWZsIYTnNdLRtqQ.roa (hash: 62XanU5j/TVPu9hICaR497zqHzXQbEaOUBFnOheHiVs=) 16: U1dZiJQ-sCfZlcybNwHIMoVg7mU.roa (hash: V0t6ji4+oFj9qeofPxTRdRG8LndbBllIM0CiNf6vz94=) 17: Vb_RpJ-2VDeLhxtyu1EnKEq8cTI.roa (hash: H3HLjc2fYtCp8h81NRRKqe5UGP2PQxcS5tkL3rkueM8=) 18: Xd0NxuFWE7SrjCz2XQTm-U1qFF4.roa (hash: KWb4JfeZyHfW6hW0TUPUkEkeyeCxBn40dOa4ZcgMqfE=) 19: Y5ftqTR9TzbpNFX0jR_lEw_2cbw.roa (hash: uZQd1l561DGTXpFyA9bvh0eURkUHs50E2fAXnc2P9cU=) 20: YMY8SkwxP4m-8h-3OwtOnhDx180.roa (hash: PqKx3y2u4bSihph2gbhVet/cNiHB7Rg66rh7uA+7Zwk=) 21: Z3imJD5C2mxpSzOVHM29bAYX1wQ.roa (hash: moH5xKYZJc8UlbCB5NGLSkdO+EeL9UBqJaguHu9lcVE=) 22: acgWZk7QsmW2aj_bCsaJjnM5BPc.roa (hash: HUCf1r1zAbFUe3WPNLagsH4LPR/2P6TikCHZR4iIaH0=) 23: bmqkA80pr4vo9LBw5jf9WENmXyM.roa (hash: GfCiAUJS2zYIKRhmR2J5s7yCccX26jfET5bMvpXh8wA=) 24: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: vOevnv9iEv/ecXTPcxtC5XOF3oYhXurNyroQs0FprX0=) 25: hHcyNgOmxrhkn3DhNfaigHX94g8.roa (hash: B65e/+ApHFBG2pXE/i7USQDriRyCgT5A9AG/tPBTPh8=) 26: jugdXM50p84S508xVnjdWqlj1es.roa (hash: Q0qyJpXVGFh9bCDmBScB3eycR9QiedIjxHWP9H+ZuBs=) 27: mFTOVg0gctQNNx0jyIBOYgUT6fg.roa (hash: k28x1ZIzqND1Svau80gR07/HyKpYAy94wpGkGRTlP0U=) 28: mJ-PnuZffkBvMXhplb_lo8QtEyc.roa (hash: cnmwpchuXHms2rojiNGzRDXyf/+oMqIEDUIf1Odq2us=) 29: qpXqPI2Lm4U2S7PWScdAxzqLkns.roa (hash: Bzilqha0faSvo6uHWLbDknjpYoOKZ5PiVLmh9/Jq3LE=) 30: uyXQtDlM4ZwnqdZAtXrlk36c7e4.roa (hash: YXJ2U0awsdiqeieBuuyLP082uokuubFdWDICnN4d+bI=) 31: zAHjS8tPU8HEmTCCDINtaHrVJIM.roa (hash: 0QsNUBchy9W2sgLs15kxSXqG8C8jBUSbYSVE7+dh+t0=) 32: zDVyzwRVn1CT-RP9xlaFiJNPMHE.roa (hash: OeT1n7LBHt2BLA6NJKyqqdEda9ZFBBnrzNwADjp7exA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 May 2025 23:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:9d:87:cf:9f:f4:b4:d6:dd:c4:c0:5f:cd:4d:cf:45:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: May 4 23:00:45 2025 GMT Not After : May 5 23:00:45 2025 GMT Subject: CN=9dd71134f893d1c9f9d9324bd453c2405f9e746e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7a:69:17:07:ef:83:ea:a7:b3:38:4e:f1:4b: fd:44:31:c5:78:3c:71:a5:0b:b8:db:0f:15:66:23: 2b:f7:a7:08:1e:e6:de:3f:a4:46:c9:31:f8:f5:b7: c9:d6:3e:34:d8:a9:a1:85:07:2c:f4:96:b4:f0:b3: b3:f7:d7:44:22:c8:88:9a:05:e2:8b:ae:56:97:d0: 89:a9:f4:f0:7b:1b:7e:0b:81:3f:7c:d1:79:59:bc: d1:f3:ff:9b:4e:41:08:ef:66:6c:c4:ea:82:61:ca: ac:7b:6a:2c:43:eb:86:c5:99:34:4b:e3:84:29:60: d2:87:49:da:3a:ec:15:64:46:53:79:93:79:86:02: 46:e9:49:38:83:72:50:f8:d1:57:5c:61:9e:8e:b0: e3:e7:1c:22:40:b9:ab:73:3e:ea:0f:82:ac:4d:fa: fc:08:ef:23:ce:53:71:eb:bf:9d:3e:93:b4:21:3f: 30:27:60:62:d3:4f:ba:af:c7:e5:f2:71:cd:6a:cc: 79:93:70:ce:e1:3e:00:e4:88:79:c7:8a:d6:35:1c: 5b:a3:a9:a2:19:ec:f7:36:97:3a:42:5d:13:f5:95: 54:70:fe:19:57:b2:5e:0e:3a:c3:17:56:0a:67:92: 84:8a:5b:c5:e8:ed:e6:b4:f6:df:55:2f:57:08:ae: 1f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D7:11:34:F8:93:D1:C9:F9:D9:32:4B:D4:53:C2:40:5F:9E:74:6E X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:31:8f:8f:49:ad:59:27:19:ca:a1:9f:ae:85:42:71:c4:35: 33:0b:73:23:6c:c1:0e:f0:09:dd:81:1a:02:53:ab:59:06:ff: eb:7e:1d:5f:46:ee:57:fc:a6:b6:9e:8d:47:22:3d:f1:9e:b7: 9b:d2:aa:ab:3e:a7:fe:2d:c2:78:ef:04:af:97:1b:51:ae:b7: 0a:34:8d:18:29:9f:cc:e0:3f:43:16:5c:fd:da:68:9f:17:26: b7:3e:98:0a:30:d9:db:2a:e6:0a:f1:0b:6f:f0:dd:f9:4a:d0: c7:a8:81:29:2c:43:2c:fb:ea:f2:fc:a3:d4:45:f8:4b:38:39: d0:d2:98:a5:38:c2:c5:ab:0e:c0:56:b1:20:ee:ad:04:c5:4b: 57:a1:e0:a2:4f:c7:e8:8a:04:1c:3c:d4:b0:69:22:df:fb:15: 06:df:f7:c4:87:1f:47:26:0c:80:c7:6a:3d:a9:de:bd:35:5b: fa:0b:69:c8:06:50:55:24:b9:41:e7:57:8a:25:d2:0d:5b:b4: 59:99:0e:94:1b:4c:2d:e9:7c:89:77:c7:ab:c3:7b:b1:22:d4: 55:3e:cf:63:37:2a:18:d6:c2:49:1e:02:42:58:6c:a6:29:ec: 3d:54:ad:b8:46:be:66:5a:89:dc:3c:81:43:f9:a3:24:61:ae: 56:c2:f6:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZadh8+f9LTW3cTAX81Nz0WVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjUwNTA0MjMwMDQ1WhcNMjUwNTA1MjMwMDQ1WjAzMTEwLwYDVQQD Eyg5ZGQ3MTEzNGY4OTNkMWM5ZjlkOTMyNGJkNDUzYzI0MDVmOWU3NDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnppFwfvg+qnszhO8Uv9RDHFeDxx pQu42w8VZiMr96cIHubeP6RGyTH49bfJ1j402KmhhQcs9Ja08LOz99dEIsiImgXi i65Wl9CJqfTwext+C4E/fNF5WbzR8/+bTkEI72ZsxOqCYcqse2osQ+uGxZk0S+OE KWDSh0naOuwVZEZTeZN5hgJG6Uk4g3JQ+NFXXGGejrDj5xwiQLmrcz7qD4KsTfr8 CO8jzlNx67+dPpO0IT8wJ2Bi00+6r8fl8nHNasx5k3DO4T4A5Ih5x4rWNRxbo6mi Gez3Npc6Ql0T9ZVUcP4ZV7JeDjrDF1YKZ5KEilvF6O3mtPbfVS9XCK4fxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3XETT4k9HJ+dkyS9RTwkBfnnRuMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnDGPj0mt WScZyqGfroVCccQ1MwtzI2zBDvAJ3YEaAlOrWQb/634dX0buV/ymtp6NRyI98Z63 m9Kqqz6n/i3CeO8Er5cbUa63CjSNGCmfzOA/QxZc/dponxcmtz6YCjDZ2yrmCvEL b/Dd+UrQx6iBKSxDLPvq8vyj1EX4Szg50NKYpTjCxasOwFaxIO6tBMVLV6Hgok/H 6IoEHDzUsGki3/sVBt/3xIcfRyYMgMdqPanevTVb+gtpyAZQVSS5QedXiiXSDVu0 WZkOlBtMLel8iXfHq8N7sSLUVT7PYzcqGNbCSR4CQlhspinsPVStuEa+ZlqJ3DyB Q/mjJGGuVsL28w== -----END CERTIFICATE-----Generated at Mon May 5 08:43:10 2025 by rpki-client