$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft File: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft (raw, json) Hash identifier: bIXyIRWoyVJQ+pYFfWwzdEJQDHn/d65k6jL8Cv7ytEs= Subject key identifier: 03:C8:BB:2A:AB:D0:F2:77:83:EB:DB:95:1E:71:DD:61:5D:F9:11:BB Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 01969DF5C50EF76102577E03BF2096532D27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft Manifest number: 127A Signing time: Mon 05 May 2025 01:00:51 +0000 Manifest this update: Mon 05 May 2025 01:00:51 +0000 Manifest next update: Tue 06 May 2025 01:00:51 +0000 Files and hashes: 1: 0pSLjaK5jJNleu-R1-JaIUNyXTw.roa (hash: du8WDP9/QiGqQOMX+ttIn10kEatb/Zs0qVgMPU5RqcE=) 2: 1WhmCNdV46akTWjdNSLb7xvYYGY.roa (hash: YgT7som/aRyqXmNhgGt4xOXpluNZMOE49qj62NVQC/I=) 3: 47Db6II4VWguGq1fmON_zyxfDTw.roa (hash: EtXOL534BY7YerRgShjwEr47qYY33r1iCEI0u/06D0o=) 4: 7-GhubYtfN_LHVkFF6zgqVFEil8.roa (hash: nMY0AubUAwGxLZdATA5AGoarINwqSaBiO8weqjvyFYE=) 5: 9o1bJHIY2DKstOflrYyuB4_xDJU.roa (hash: v84lCLYd/0h8qh/tv6tRvbnV7bRzw3VazSaPX2e1ubo=) 6: BQ_7CRByLAUpF1evkSyLCrrovKE.roa (hash: uT3RGzji41/DL4m9M7hw+Zpz+kLpotb4EKSd9Zae5tA=) 7: CQSr_mSGvx_MO501tTIbCtodnJs.roa (hash: esowCKU64ui4/Ap6GOn6lU0uRgAnfvEQjSsW8NdABkY=) 8: GDi32Sl_OrQquHaF5eRnZJe-JNU.roa (hash: SiXuwxSrm46q0wZ0C2mDE4OXGGQ9n7xN1flM/SzNXRA=) 9: I8S2hVkDs5WQ9gotPSw5OhIE_XU.roa (hash: 5OhiLGp3GkkcRYzG4tfq1G76vW7BOIqKJjeoc64Pt4o=) 10: MhM8AdXgoCd4zrzFUNyYeB1JwVg.roa (hash: x8CsV2gfv0T+wUL+aorX982fUJ/l+SVnwH0Xs0/jba0=) 11: PBWz5FaEMqr9VnHaKiVhm-NVVl8.roa (hash: RIMrhXVWZgpA4EKCo1eJ1BqfdDBJ/tZAXJ7v1AtcQKI=) 12: TEmBttlqOql-6WlBVV0HWvswEQo.roa (hash: fN7yflsLhVlqg4R45jJbYQ9DskvVzHDmzUKU/2SCJrQ=) 13: bKDzGVLS3_6865mtln3Kw5WmywQ.roa (hash: 1z8bJ9Dv0gvS7Kzr3By8Hyv6gfSz5rRy8bS1g5sgkAA=) 14: bm3jAPSokNwmkDXJzC1yE4mlh8U.roa (hash: Ugi+oeIGdBF2ZuSWBZVXXcNVIbH2fno96x0J1auQtLQ=) 15: dGOEJpiLqXr1GxRQGfDAi5gIbkg.roa (hash: +wCypBByvXlOI7hJJjkhkxo33K/FrkpIIcsdMGYENyU=) 16: dU3qmUSa0GUKRhwNtqeBWyfdFgA.roa (hash: +1noky3lUg4Xw21sSrzlUFu5e24FajFmXh8kqpW0IH8=) 17: ieLYYEtxw8yorIFSAMUiUnhPzxc.roa (hash: zpEjE+0wqNe3063Xp+u8y1IQ6Fze1n5YSctd31AydZQ=) 18: kP7-2BrCdrR1vflyzN6bCG-bC4Y.roa (hash: uhNV7zf/NfCBx0RNf+uccZmVPDDvd1bgU3gAxdkEF5g=) 19: m-Q_Wn24gdJ-kqlu-siY_6OniFE.roa (hash: +f069Ignbpg0zmLTIqsmUaOuN5XLud0PtvHpBkikPfg=) 20: pubBNtMB3i07GYMPpVIhhyFOTo8.roa (hash: Mn01o/7jdUgPgTc66DieNIOLFHGdyMS6RTRjsWHR/O4=) 21: sucSe0eC1r3sihXi_iaR2SOp89U.roa (hash: /HwnUsqpfauRDshlfSmbLyvgIlTpLPydMX0GwSKwT/o=) 22: uGhxQuJoiydmGBCdoiTuE4rnskY.roa (hash: cp9F2KjzrCdyiwYgQ04s2rnpm15FpJSYgYYNO9VL9i4=) 23: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl (hash: 5QzsnAc3NC7Xq8Co8/a08zjz5QydJP7UEiCSk2WWaII=) 24: w35GeF1NRVWkdgYrM-D2oVh4XKk.roa (hash: 0xzHuhqUOoAiP/Y6/IovF7/iSmc6xQ7Xmuv7ej0uOJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 May 2025 22:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:9d:f5:c5:0e:f7:61:02:57:7e:03:bf:20:96:53:2d:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: May 5 01:00:51 2025 GMT Not After : May 6 01:00:51 2025 GMT Subject: CN=03c8bb2aabd0f27783ebdb951e71dd615df911bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:29:26:a2:5e:5a:1f:16:b6:9f:b9:9c:7a:81: 67:62:07:9a:20:0f:80:a8:9c:c7:5b:55:10:d4:72: fc:a6:5d:8a:27:74:52:e6:8d:f0:d4:0d:b8:d9:c2: 71:fa:e9:d6:fa:39:f4:d1:16:67:f0:89:ab:02:08: b4:24:e9:3d:15:18:ac:8f:e5:93:83:78:c5:36:69: 21:bb:39:ff:77:4e:96:8b:ad:56:0c:0d:3b:bc:60: 59:f2:c8:c0:cf:67:39:03:cf:fa:20:39:43:7e:1c: 06:7a:91:2a:8b:08:ca:8e:d2:b6:36:d5:44:bf:77: 88:ad:9d:bc:da:13:13:e0:0f:b4:44:21:17:2b:bc: f2:aa:7d:34:6e:69:fc:1f:b2:a3:54:44:39:f7:3b: 25:0e:37:0c:42:9b:fd:e9:a7:ca:fa:c3:7c:c2:d3: c8:3f:50:1a:5f:13:04:c0:62:49:83:4c:5f:07:3f: cf:66:bd:95:16:93:93:d6:0c:fa:61:ca:cc:ad:1c: 53:32:06:8c:8e:ee:63:b9:17:d5:60:75:bf:d8:b4: 7a:f7:be:8d:ec:32:89:01:d5:e3:2f:77:48:9f:bd: ac:d8:bb:8a:56:ae:e9:cc:6c:b9:9e:81:24:e0:24: c4:f9:62:95:7e:db:91:3d:84:c4:49:af:41:52:bd: fc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C8:BB:2A:AB:D0:F2:77:83:EB:DB:95:1E:71:DD:61:5D:F9:11:BB X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:4c:27:a6:6c:68:fa:c6:b4:e7:d1:ed:83:3f:8f:40:f5:0a: 08:61:9b:d1:59:9e:be:d3:a1:84:80:a0:ee:1e:2b:6a:90:c3: 0d:2e:64:cf:1d:10:cd:52:b0:56:23:d6:5b:d2:1b:9e:58:1b: 14:26:93:43:09:0d:59:6f:de:e9:4b:4f:c5:a4:29:9d:c7:8b: ca:16:13:4a:e1:64:66:d7:50:f8:eb:b3:50:54:2e:40:a6:6f: 57:ae:1b:ce:d6:bf:9c:4e:0e:ea:a0:85:f1:ba:69:9d:c1:b0: ac:23:33:10:81:bc:08:95:a6:2c:bc:5c:67:c4:9b:66:13:9d: e2:b5:5b:0f:8e:65:3d:51:c0:e7:02:3a:72:35:e3:f9:a2:d2: d2:b9:6a:ab:a2:53:94:29:5d:de:76:00:8f:e0:c7:63:4a:0f: 32:8b:8f:b4:c1:5d:68:2e:d4:62:59:a6:8d:9b:36:a5:9b:01: 2c:d9:d4:0e:49:54:08:33:36:80:cf:a8:7f:de:3d:00:7e:be: 0a:dd:5d:2e:e3:75:af:9f:c3:fa:9f:72:ea:35:0b:88:aa:89: 3a:04:a3:b0:0f:3a:93:6a:f7:20:f8:d7:eb:c1:14:f8:ff:45: d1:b3:bd:47:01:4d:5f:40:42:a8:55:d4:c4:96:ce:52:55:76: 2b:40:11:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZad9cUO92ECV34DvyCWUy0nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjUwNTA1MDEwMDUxWhcNMjUwNTA2MDEwMDUxWjAzMTEwLwYDVQQD EygwM2M4YmIyYWFiZDBmMjc3ODNlYmRiOTUxZTcxZGQ2MTVkZjkxMWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwykmol5aHxa2n7mceoFnYgeaIA+A qJzHW1UQ1HL8pl2KJ3RS5o3w1A242cJx+unW+jn00RZn8ImrAgi0JOk9FRisj+WT g3jFNmkhuzn/d06Wi61WDA07vGBZ8sjAz2c5A8/6IDlDfhwGepEqiwjKjtK2NtVE v3eIrZ282hMT4A+0RCEXK7zyqn00bmn8H7KjVEQ59zslDjcMQpv96afK+sN8wtPI P1AaXxMEwGJJg0xfBz/PZr2VFpOT1gz6YcrMrRxTMgaMju5juRfVYHW/2LR6976N 7DKJAdXjL3dIn72s2LuKVq7pzGy5noEk4CTE+WKVftuRPYTESa9BUr38OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPIuyqr0PJ3g+vblR5x3WFd+RG7MB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0wnpmxo +sa059Htgz+PQPUKCGGb0VmevtOhhICg7h4rapDDDS5kzx0QzVKwViPWW9Ibnlgb FCaTQwkNWW/e6UtPxaQpnceLyhYTSuFkZtdQ+OuzUFQuQKZvV64bzta/nE4O6qCF 8bppncGwrCMzEIG8CJWmLLxcZ8SbZhOd4rVbD45lPVHA5wI6cjXj+aLS0rlqq6JT lCld3nYAj+DHY0oPMouPtMFdaC7UYlmmjZs2pZsBLNnUDklUCDM2gM+of949AH6+ Ct1dLuN1r5/D+p9y6jULiKqJOgSjsA86k2r3IPjX68EU+P9F0bO9RwFNX0BCqFXU xJbOUlV2K0ARTQ== -----END CERTIFICATE-----Generated at Mon May 5 06:00:49 2025 by rpki-client