$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft File: 4tDEmg6X4NXzztO3trn3LKDLU9Y.mft (raw, json) Hash identifier: 1NR1p5pAWilCjUQtwY2KELAuu6dR8wxQcRJK4YWmUVw= Subject key identifier: E2:20:9D:BF:A3:5C:48:4B:19:1B:D2:64:BE:DC:5B:0F:12:F9:8B:A0 Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Certificate serial: 0196BEC9F86D2F44EC572E8740499A0EDBDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft Manifest number: 122B Signing time: Sun 11 May 2025 10:00:29 +0000 Manifest this update: Sun 11 May 2025 10:00:29 +0000 Manifest next update: Mon 12 May 2025 10:00:29 +0000 Files and hashes: 1: 1-xvBLiVIr5eO0ojnuxuHIDpGNj0.roa (hash: aK7ZmDyAzamzfU5scYPlW3gVBsMwISXT9xd5u5skngQ=) 2: 2BXalnRCdxlKBucFyUnY3v8NXIE.roa (hash: qbascniAVekJiZabGEHd3VuxY6P4azJ4yMUjYrzFjJo=) 3: 4gUeII5uNOSsk7ig0e6KHlG6BHA.roa (hash: xRGa4dvp0FYk/JLyi3pQEJ/XtveeLwqm3x3hfczzGhM=) 4: 4oFgbvjivonc75j6oWwkurpCHuo.roa (hash: wfNIhptalUUsPvpgzrp9sVZFBDTSEW8d7lJfHh/ba4k=) 5: 4tDEmg6X4NXzztO3trn3LKDLU9Y.crl (hash: KN7vPgcydrE3oMHR+zQmtMhOLuEPiNmG4DOmsx9/jRw=) 6: 5pnldwPETCzwQT8iJkyiSoWD3_k.roa (hash: oJntOrxxRhN9f3IdHJXmdQbwUKQGLcIDOqq/1tPI4PI=) 7: 6uM9geMN5E_JocXQTslv41Eocx8.roa (hash: Dlfx02PXvOyh1z3EkOuN2tEacNYqoH0GaOFD4WRWv7M=) 8: FBdxjOu8SX4p5g9e-XxmzyShdHQ.roa (hash: mngc3R66oJgb9rQ/5d73AA7n7b16oOQZDw1SHYqnhTA=) 9: HglCnD55qDv-Q0rgVR2_h-nRZkY.roa (hash: Qc4gkZG+SuNlsvP0f5FqX4UkqgAGysqsANOz/SQ42AI=) 10: HtZ57OBsmdXhe-F5g-lmzijNxck.roa (hash: P0xwVuTg9ir4CIbwZxsA+9nWaNItfve6TrNuKY2zqxM=) 11: PeZtOK6XcrYqlf82Nopp1BFWAXQ.roa (hash: y6xfqENV86+DxwWiv0cIANxmFCLNJHi4fntVAOoYQLI=) 12: RlHI2VPMUxz4vWMxsz_aSP7Y58A.roa (hash: o2Eco/oz0OjYhDyp8QR2quUuINLwT9HDpRtnEqaVUfg=) 13: SMigdfBEZBCpmCAUQemz1HzXzsY.roa (hash: rYoGdgZTMvC2OSoASCQvWU0g5tSPQxjtZ99HNktE1UI=) 14: _DswbRpVkPXQzJnopc-2rpO7ck0.roa (hash: sOdG0gaxCyeQh9EtJRGptli2IEmCGrHJQ/h1DmBq1IQ=) 15: dkbWTo4bq_yPPRqYmeLtAion_fk.roa (hash: DMCPEeMn/42xBYmE/TT+llc8dW4AkHYEj+Bu1a5chCg=) 16: f8wMF_0nYOjBC4T-3T9maTV9XOg.roa (hash: HH9Xx2RMXttctrpMSPb7lv2kW9EcD2NdHUms9yLQH2E=) 17: p_QYv0L6aYK512B3fR5CFvOoznk.roa (hash: aDfS/bDbCsW3S/qJ7SubMpjp1TuE7mqqhF55UFptL5k=) 18: sP_P89Gjqv0cRXNUr9_pv6JCftE.roa (hash: V9LKomJ1OLCr/vLBTnJjw6UPEUZRVYDPDN8HoyzesJg=) 19: slG7etJhHMxEF_RaKXpH3iT7Jqo.roa (hash: Jw4LSw8veeGAScSQy+xbjepFLappzSdTU9yGBS4At04=) 20: wMpCtJuJnMKH9PZbiphThxb5p3I.roa (hash: ho1eRYtOPimdRyr4aEbAZG/GlZlHUFROWz250IKu38c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 07:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:be:c9:f8:6d:2f:44:ec:57:2e:87:40:49:9a:0e:db:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Validity Not Before: May 11 10:00:29 2025 GMT Not After : May 12 10:00:29 2025 GMT Subject: CN=e2209dbfa35c484b191bd264bedc5b0f12f98ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:78:29:80:9f:f3:8f:31:60:55:f8:55:b8:88: 45:59:12:cb:95:d2:db:79:fa:4f:c7:b1:1b:ad:de: 41:13:40:83:bf:18:53:35:28:b9:78:94:30:a8:27: 1a:42:6e:23:d1:8b:07:35:fb:5c:75:48:2b:70:2a: 2f:08:72:13:33:00:7c:b5:22:86:aa:d1:8c:85:5f: 0d:b6:1c:f4:39:2b:aa:cc:17:6e:dc:da:b7:cc:08: 57:7d:8d:0c:d5:ce:f6:ad:e2:03:91:53:85:b2:8b: 60:a0:1d:1a:42:be:50:77:d9:12:4c:87:b8:7d:e7: 5f:72:21:b2:bf:d9:40:a3:58:40:c8:ae:1d:38:75: 65:66:50:a7:62:ab:2f:70:ab:38:62:ce:0d:88:e4: ae:23:09:26:0e:85:f5:49:2c:dc:f1:de:00:61:6f: c7:a5:8c:5d:20:35:73:76:65:d5:e2:2c:ff:18:7c: 5f:aa:bf:86:ad:a9:11:ae:0c:97:76:ff:2b:c2:e0: 7f:83:08:33:67:c9:77:36:c7:f4:95:c6:e1:a0:18: ab:59:a4:33:26:38:80:74:01:98:fc:1c:34:8a:71: 17:e2:7d:2e:8e:2a:e1:ed:64:59:4a:7d:b4:96:88: 08:dd:3c:8b:44:00:7a:61:e2:23:8d:ad:8b:df:a3: a7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:20:9D:BF:A3:5C:48:4B:19:1B:D2:64:BE:DC:5B:0F:12:F9:8B:A0 X509v3 Authority Key Identifier: keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:fb:4d:69:18:31:31:e2:5d:5c:b3:08:13:82:a7:1c:8b:eb: 1f:64:ba:1d:4d:8d:6e:e8:5b:20:24:86:3d:fb:91:33:8a:3d: 22:88:de:27:d5:8a:18:1b:6b:78:4b:6b:49:2c:81:ab:18:37: db:b9:69:71:7a:28:0e:dd:1b:c5:60:8e:7c:b3:6b:10:db:24: b9:18:35:ad:23:cb:01:86:62:e6:28:f5:61:de:83:c8:04:e7: 71:1a:cd:28:3e:f9:58:2e:92:81:55:03:9c:b2:de:e6:32:ee: 79:a3:df:36:07:55:49:c9:01:7b:86:5c:a2:7c:f6:7d:e7:13: 46:0c:b6:39:55:00:00:4c:6b:e6:ae:ef:98:56:88:18:4b:61: ae:43:2a:d0:c9:ea:2b:53:e1:59:8f:fe:83:c0:d6:3d:f3:c8: fc:07:67:1e:31:a9:0d:82:60:ed:1c:02:a9:38:bb:01:0e:7a: e8:74:d0:1f:4d:be:a2:33:33:f0:d1:44:fc:82:dc:ee:43:3b: 9f:3c:27:72:fb:b0:a1:c1:97:4d:62:ed:4d:eb:61:68:fb:da: 10:85:05:83:e8:df:36:69:a7:fa:0e:85:82:f6:56:f6:a5:85: a6:a2:7c:80:cf:5c:4b:2c:55:35:82:89:f6:96:10:fc:34:6f: 13:e0:49:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa+yfhtL0TsVy6HQEmaDtvdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj YjUzZDYwHhcNMjUwNTExMTAwMDI5WhcNMjUwNTEyMTAwMDI5WjAzMTEwLwYDVQQD EyhlMjIwOWRiZmEzNWM0ODRiMTkxYmQyNjRiZWRjNWIwZjEyZjk4YmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmngpgJ/zjzFgVfhVuIhFWRLLldLb efpPx7Ebrd5BE0CDvxhTNSi5eJQwqCcaQm4j0YsHNftcdUgrcCovCHITMwB8tSKG qtGMhV8Nthz0OSuqzBdu3Nq3zAhXfY0M1c72reIDkVOFsotgoB0aQr5Qd9kSTIe4 fedfciGyv9lAo1hAyK4dOHVlZlCnYqsvcKs4Ys4NiOSuIwkmDoX1SSzc8d4AYW/H pYxdIDVzdmXV4iz/GHxfqr+GrakRrgyXdv8rwuB/gwgzZ8l3Nsf0lcbhoBirWaQz JjiAdAGY/Bw0inEX4n0ujirh7WRZSn20logI3TyLRAB6YeIjja2L36OnIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIgnb+jXEhLGRvSZL7cWw8S+YugMB8GA1UdIwQY MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt NDY5MGEwMDcxNDFmLzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbPtNaRgx MeJdXLMIE4KnHIvrH2S6HU2NbuhbICSGPfuRM4o9IojeJ9WKGBtreEtrSSyBqxg3 27lpcXooDt0bxWCOfLNrENskuRg1rSPLAYZi5ij1Yd6DyATncRrNKD75WC6SgVUD nLLe5jLueaPfNgdVSckBe4Zconz2fecTRgy2OVUAAExr5q7vmFaIGEthrkMq0Mnq K1PhWY/+g8DWPfPI/AdnHjGpDYJg7RwCqTi7AQ566HTQH02+ojMz8NFE/ILc7kM7 nzwncvuwocGXTWLtTethaPvaEIUFg+jfNmmn+g6FgvZW9qWFpqJ8gM9cSyxVNYKJ 9pYQ/DRvE+BJvg== -----END CERTIFICATE-----Generated at Sun May 11 15:03:43 2025 by rpki-client