$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft File: mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft (raw, json) Hash identifier: o8Mxxi0KlO3EZw2vKr5Zs8+cssjNaE83w8l7owCNX+k= Subject key identifier: 02:F1:57:35:51:15:BC:F5:31:A6:8E:07:59:A7:87:E5:D6:32:06:2A Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 0196A42E973E06BE3B075911B0A002902C22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft Manifest number: 15F5 Signing time: Tue 06 May 2025 06:00:38 +0000 Manifest this update: Tue 06 May 2025 06:00:38 +0000 Manifest next update: Wed 07 May 2025 06:00:38 +0000 Files and hashes: 1: 1-W8fXv0jttdWKlzJAXVxxYtpRug.roa (hash: gpIh638+Fcd1tAei50b0+8GVpPlev9wrd/g4gdASdjg=) 2: 1UWB6DiO5XdV3re-o8rnuoqA6Ms.roa (hash: acQwekWVQZ/8nvJFITjzBnRus/D8fEtyc11Q6KELe7w=) 3: 21_l98tMuuHtah8-s1GQ4s9w80o.roa (hash: kBh4jdwY3MGZ4Pq8reV1XfNIfs+7zVu2WLUGJ+5lgvc=) 4: 4w30D5KawwaEKeLXCLppZs-985Y.roa (hash: D2Lwmoer5qGID/4i5fsaA6M5CcgJmrhikqoV9diBlTk=) 5: 86PqxVW6kwg2uAh7WbBcKHdg2nI.roa (hash: CuXGZytdc0z3bOivO1qPbLT67lDlFMigmbZjCs37dqk=) 6: Brhkd2-auvvZmCyvxy5ORhHeQ6E.roa (hash: g8WF2m4nW9TPwqD2pE0ddCjVXs1fr0m/MHPrZ/Qj2HI=) 7: CnHjgZKNSNMP8dJ_BtYZ7Xo4ZrM.roa (hash: FqQbIRpVOThM0L1uy/AMjORSqSUsS/5+snA6mZqlQAA=) 8: GfEJ2k33_VAN4eURlQBejqU172g.roa (hash: Zb6Q3T1NQyYfh4p1sNv+Mcf+eglvzLCaJ0QkXatHMFA=) 9: GvKIQgl1iO-dugbsKuhw7FNxuHs.roa (hash: TqaFs/yLAnRS9/gxois1dNbWL2jGhaiFgXhDothuXww=) 10: IrnlAQa6M1A96HHiDasRUfVGqbQ.roa (hash: xgq5FcKSqvltS9tf8414o9TbLoeW+VIxwonV5uaPruw=) 11: LOKrZEDDVhVnSlJWlOLgQ5nPcM0.roa (hash: 2CeUB6HU9O6IboYshEwLG/p+jYhiKQ64ZtA5Y3idzrs=) 12: LbbsmkI3GqawDuN3XH6acheMxPw.roa (hash: BqWA3SYDAKLfoYVuIlyCld31iNDXkXCl/KtIv69jNUw=) 13: OOYkNDqqDn1Unj3M-yrjf_S9VlU.roa (hash: oCGvjVeC4FC9ueufaA6bhsrNhxHd2pd306IA0XGXLfs=) 14: QJvPeNzFvPANqEbfkIc8-3zDQLs.roa (hash: felyBGjLHZhYiBLtOS5vAZwi9iqRNucwfxHrWgkMpWA=) 15: SWbtiDhJekAGKrMxaIr0DPXQOzg.roa (hash: xUg9JN0E8iV/LnVbnu54/5qiJiwqupilOIRHtpvUcCQ=) 16: UlqMdzKNjKKz7GVAWhNQ0GeC6iE.roa (hash: vyjrNuYYOAehZPhyITO+Q5uPp2e1fJC2nVGYypgHEhg=) 17: YseId6w-wK5VfWBLdiAj4d6boZY.roa (hash: wh8Vov3CNC6MsCQsUCMvToUSrtlM+qEzITIJ9QcG8fc=) 18: azJgsmdTDF3ELk-I19mAROWoKeE.roa (hash: oh/dgWtIFhqfW7S9fR3cOqTRk0csYkiTH2ALt2aoNhQ=) 19: eChAGDbdQGMbx-CgEa8ktTddF6A.roa (hash: WaY78nyI3A8kBY4pFd0TG8ZJI0s+NCkhF+OV6SV5Crw=) 20: gN00iWVZ4X9ImdixtPXeB88eR_k.roa (hash: DPVgneYPbYS00UaxJyd5C7zkqYJRRcPWgn4xBTn6bHk=) 21: gnHztlWIUEkbfP_VpJDgy1aZ-q8.roa (hash: 8IEq5Il4ymKT0XR1RNf3aEeBm7YPqbccSq4VWhr/cXU=) 22: mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl (hash: UXRmTdgLqPiSff6AffHqtRmc+Wwp9TVYenZU6qD3o4Q=) 23: owD2F5PTIfIuOH1ResHlD6bHqfw.roa (hash: FwwD5nwDxuakINFZYh01TzvwO9abW6HL7q42RgazHtQ=) 24: qjM14mHgk1Edy0idzb8PcMe4oBE.roa (hash: pcsI+0E79qmlWXPdLST7nM+67d24tKTfwvx2fxrvqMw=) 25: s5Ai9g5eYYL8Bgx7ZWiTovq-xxE.roa (hash: BtApyhPvW43mqLBFeRPcKdPRw6DTk5KYzme6TZtVXns=) 26: sW7iMiWbwjQZ4JTr9eqMstrH0fY.roa (hash: fl3fF4gUVsev8QdVZnLOIu5u/5rzRWGxzrZRrAPXabs=) 27: tdG4gwbiCDTl2DZU4EFrqi-57Fc.roa (hash: HXWAwqtUcnHFWl+ei5dmWCUQV5Bz5IiYmO9iAB6ydxI=) 28: w23_TR4dcsNa31LTX8HVMLWRN_w.roa (hash: rfdkH9NAgBWGbrUS8/d8Rmrz5XY4u8KepKOXwjiNknw=) 29: wC6DsFwXeb5eGnIgBiuuCnh9et4.roa (hash: sGsXZWDl7SypOrlv+5/efuocDxm8kzfpm5Fu/6yQLrA=) 30: wWRDfWHup1u0k3UjICPfUYIPuSY.roa (hash: yzH1M2v1GGWQRBkb4bWaRfefbh3n4eH1xoy+GhWge5A=) 31: wYxMdXSUEDjU1Cv3_j8xQDvi1yg.roa (hash: WyaQu0KrdFh/xZS6g5xHvbw77OL9Wai9qSXwo4Oty1g=) 32: xeXsIqRyNQ8tCJjLiS_SWkibat0.roa (hash: JByqNQHgtIum6mQVh/2h0Z7sUMkRsbp23RZvkf78Q8U=) 33: zA8L3Jvv9SEACC4CD6D8SPMP2Sk.roa (hash: Tngvw9PMaTEzEGc2VaqgRFM8azKZIG82ga5hio7GHN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 04:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a4:2e:97:3e:06:be:3b:07:59:11:b0:a0:02:90:2c:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: May 6 06:00:38 2025 GMT Not After : May 7 06:00:38 2025 GMT Subject: CN=02f157355115bcf531a68e0759a787e5d632062a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ca:0d:93:f6:dd:bf:be:17:6e:f4:0d:b9:af: 49:de:82:ef:70:05:18:03:9c:1a:cd:c0:8a:0d:af: 63:d0:68:ca:03:fc:a3:78:77:b6:da:e5:38:85:e2: 79:51:17:12:4e:87:71:35:9d:89:db:c3:53:2e:5e: c5:4d:77:6c:3e:6b:38:da:0a:6b:b9:8a:22:09:99: dc:20:8a:1e:6c:6c:21:ae:11:cb:03:2d:7c:b3:f6: 28:d5:b3:0b:ac:aa:c6:47:82:ee:af:9c:c1:9f:a1: 6d:e1:cf:03:4b:85:3b:bc:6f:4d:cc:59:a6:18:35: 24:6c:b8:09:99:69:98:18:90:6a:c2:fc:b8:d5:a2: 32:44:63:b8:ce:1d:fa:4b:ff:12:98:61:1f:91:63: 7a:02:79:ab:3d:15:66:df:81:67:38:16:ec:76:9c: 96:ca:56:56:9c:9a:3a:b3:11:b7:3a:16:ec:8b:b6: af:92:56:11:fe:dc:56:4f:28:28:b5:e9:45:9b:19: 66:48:da:fd:bd:0c:52:2f:d2:be:1c:c6:2b:aa:10: 84:9d:79:5b:f7:fc:de:5e:d0:93:64:19:c8:24:ed: e1:1b:ec:ec:4e:0c:b1:13:4b:94:c7:15:a5:f7:33: 6a:14:a1:82:dc:e5:19:50:0a:85:2e:82:cf:26:57: 92:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F1:57:35:51:15:BC:F5:31:A6:8E:07:59:A7:87:E5:D6:32:06:2A X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:b3:e2:90:03:11:1d:d8:dc:d7:4d:79:8a:84:18:d4:ee:2d: 86:68:83:78:f9:0a:dd:3b:94:ce:c0:59:8f:07:41:44:09:5f: d6:06:7f:cc:a2:12:25:2f:e5:2b:e5:77:c8:46:dc:60:8c:c6: b5:cd:16:42:6a:c5:4f:0d:48:a1:33:71:13:7f:89:ee:2f:32: f9:6a:f6:e7:98:38:c0:eb:02:11:d0:31:7e:6c:3f:10:aa:f7: 20:f2:4b:05:f6:7c:47:a3:36:05:3b:da:46:26:5e:69:b0:53: b1:a7:8f:bb:2a:66:e1:e8:19:c6:85:70:35:7c:25:0b:c3:4d: 3e:98:d5:05:9d:91:2f:84:6a:93:85:01:dc:96:35:b7:80:59: 0c:b0:c1:80:79:21:ca:a5:6d:f7:d2:21:02:72:a2:38:28:83: 77:3c:43:ef:4c:c6:b9:2b:ab:26:72:4c:f4:2c:62:c0:9d:29: bd:2f:d7:9a:f0:84:ba:04:41:12:ed:65:62:d3:51:36:53:a0: 9c:6c:97:0b:b8:c2:54:6f:36:23:d4:da:f0:c9:df:1e:87:1e: 3c:37:c0:37:0d:de:4b:ef:95:c2:af:3d:d4:c1:04:8e:8a:d1: c0:bb:30:e3:16:8b:c5:74:52:c1:6b:63:dd:16:b7:80:82:a4: 26:2d:19:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZakLpc+Br47B1kRsKACkCwiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjUwNTA2MDYwMDM4WhcNMjUwNTA3MDYwMDM4WjAzMTEwLwYDVQQD EygwMmYxNTczNTUxMTViY2Y1MzFhNjhlMDc1OWE3ODdlNWQ2MzIwNjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsoNk/bdv74XbvQNua9J3oLvcAUY A5wazcCKDa9j0GjKA/yjeHe22uU4heJ5URcSTodxNZ2J28NTLl7FTXdsPms42gpr uYoiCZncIIoebGwhrhHLAy18s/Yo1bMLrKrGR4Lur5zBn6Ft4c8DS4U7vG9NzFmm GDUkbLgJmWmYGJBqwvy41aIyRGO4zh36S/8SmGEfkWN6AnmrPRVm34FnOBbsdpyW ylZWnJo6sxG3Ohbsi7avklYR/txWTygotelFmxlmSNr9vQxSL9K+HMYrqhCEnXlb 9/zeXtCTZBnIJO3hG+zsTgyxE0uUxxWl9zNqFKGC3OUZUAqFLoLPJleS8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALxVzVRFbz1MaaOB1mnh+XWMgYqMB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnLPikAMR Hdjc1015ioQY1O4thmiDePkK3TuUzsBZjwdBRAlf1gZ/zKISJS/lK+V3yEbcYIzG tc0WQmrFTw1IoTNxE3+J7i8y+Wr255g4wOsCEdAxfmw/EKr3IPJLBfZ8R6M2BTva RiZeabBTsaePuypm4egZxoVwNXwlC8NNPpjVBZ2RL4Rqk4UB3JY1t4BZDLDBgHkh yqVt99IhAnKiOCiDdzxD70zGuSurJnJM9CxiwJ0pvS/XmvCEugRBEu1lYtNRNlOg nGyXC7jCVG82I9Ta8MnfHocePDfANw3eS++Vwq891MEEjorRwLsw4xaLxXRSwWtj 3Ra3gIKkJi0ZqQ== -----END CERTIFICATE-----Generated at Tue May 6 08:11:28 2025 by rpki-client