$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft File: 5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft (raw, json) Hash identifier: yghxLm6UAAlS8/vuLQAQhOBbmyzIfDSrW+NhjfVW01M= Subject key identifier: E4:80:8B:A6:DB:10:74:5D:FF:53:21:30:BE:7C:F9:FA:D7:57:A9:2A Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e Certificate serial: 01969F3F1B717C9D00168FC50D97A4C2EEE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft Manifest number: 152E Signing time: Mon 05 May 2025 07:00:35 +0000 Manifest this update: Mon 05 May 2025 07:00:35 +0000 Manifest next update: Tue 06 May 2025 07:00:35 +0000 Files and hashes: 1: 03T6Ckg3bpc-p5cm7cOlm-zySj4.roa (hash: GaU7qAyWTpaD6XW2vb7eV2GbZlXe5YPckflNVF6042I=) 2: 53Sw43oc54bFdYl3J8aYgPuTq1A.roa (hash: F/vDAf5IclENw5iT+CZVjqI+jpZyrwkuo7GV9LGXD0M=) 3: 5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl (hash: A+4Lr97JVu2j84Qko5s0p+3Njdz0gEMBP70Kgp2/aqQ=) 4: 9Xnf0_RPB7rW94Ti4f7tLJoLt5Y.roa (hash: 6HzGHL3rDmh0KnGoCjxpw3uQutKsEpK/x9u0157VNyI=) 5: KDN_6FFPENk8-bDnIrfpP21-8VE.roa (hash: RLkioT2IjSMiI+bndKsLWNSNLlPwCFxgUoWcDB4O4GA=) 6: L9WBYojbvLbnk987LNP8zQZEzQg.roa (hash: 2vRXimXnDZGXHdopycsq1UqK3u4zkQKmcrWliNbOkFI=) 7: _KM3VWtbdBYw-7ONqWep42LzJbM.roa (hash: e0kdHEeKs2calKvQRylwRCnRtRK5mFt57DwvVj7HLtU=) 8: cVKkCDaARUtvYDXoV4X9N2Ey2ZE.roa (hash: QIVK0slO8PFSnaXnlK3EvRckSMInnvVoSayFBWoxzeo=) 9: d1deXM4xRbSP2UhrLzN0Mx2NRgs.roa (hash: qhm+RjDaElbxGpexTe1+uIgmaSf6XCswUmT9fyMU4Nw=) 10: p3CfwknfntcJcKeXNwkBmQDTjRo.roa (hash: HQKyD96aQw0B1cae393pm4KC6jsUYb1IgbC2E55egQc=) 11: qepQI1x3-VZdN4tY2IgS2Qt0QxA.roa (hash: bg52ywo15jKHz/Ym+vNWwgmJcwLyfvK3SRvTyb5JixQ=) 12: uo3I45HXu40pb8JAg4x-iMt72NU.roa (hash: DCwRNzAYt7btk9pb3J4DQg/DLUtwWKO6Tv+fQC/dgO4=) 13: wf1azGdbs6KejpsvGDcmKSTTHpQ.roa (hash: q5SxtkKD9yNoBx9Nh1XxgTUv7m8d3XBZq8krtOYc6Wk=) 14: xLOovb_V_553mPyCa2MPaJ6AL4o.roa (hash: N6NgzmGF9X7Oq9bKLoPjt2ok22T8qTteZuv/qrOneTE=) 15: yQ-AQ94E1D9Tv3q18wm7Fve1ObI.roa (hash: H8VQOZeeUDRGGEzlonPzEMZCTDLV4o0msTIPImbqpx8=) 16: zmQcXGUtGhS1_tiNEBK-z0ub5Is.roa (hash: w9Y2nBHc4Olve6gCgm/MbgZTbOJSTsJeyEW3ubYEBD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 May 2025 07:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:9f:3f:1b:71:7c:9d:00:16:8f:c5:0d:97:a4:c2:ee:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e Validity Not Before: May 5 07:00:35 2025 GMT Not After : May 6 07:00:35 2025 GMT Subject: CN=e4808ba6db10745dff532130be7cf9fad757a92a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:12:3f:10:91:35:1f:7e:41:71:e0:8d:b7:d4: 7a:4c:c6:e8:57:cc:1f:bd:a7:de:bb:21:52:43:4f: 51:ca:29:1d:d2:5e:8b:a9:27:59:b4:4d:95:fa:8b: a0:7e:fb:4c:65:02:65:42:0e:71:fc:af:ca:fd:1b: 24:04:35:04:7b:f5:d0:64:4e:bc:0c:d3:b3:28:9d: 66:db:c8:9a:b2:4a:f0:f4:47:fe:59:fa:98:e0:aa: 9d:aa:29:9c:0e:fe:d4:9e:0c:25:65:90:3b:d1:11: 50:44:be:97:d2:05:fd:c5:70:64:4a:41:b7:9f:0a: 8a:36:da:92:66:e4:d3:c2:ab:c1:64:e4:cb:1c:73: 77:a3:29:c2:71:69:be:db:28:1e:7f:0b:7a:a0:8a: 97:f5:5c:5f:af:ea:0a:20:4b:50:c4:28:7b:d5:48: e6:7f:22:37:83:b0:56:dc:6f:ff:1f:0b:f0:47:d5: 69:28:ae:d2:06:90:09:2a:84:29:a3:ef:9d:b9:78: da:ad:5a:02:24:d1:94:64:81:87:cd:f8:62:b6:f2: 7a:0a:19:c9:11:11:a8:5e:59:ad:be:68:c8:b3:9b: 98:c3:a0:37:35:7f:48:8c:cb:f9:46:39:02:01:c4: 9a:43:78:0a:0f:27:59:7a:9c:b7:44:78:9b:70:76: 0a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:80:8B:A6:DB:10:74:5D:FF:53:21:30:BE:7C:F9:FA:D7:57:A9:2A X509v3 Authority Key Identifier: keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:16:8f:1b:8e:29:b6:64:70:4a:81:ee:fe:d5:0a:7b:34:b6: 23:a6:5a:2f:c7:50:a4:91:d3:a0:55:c5:56:e1:f0:08:53:c9: 4f:f4:89:12:71:d7:6d:b1:7c:c4:5f:e6:b1:8f:53:0b:2c:06: d2:9f:cc:12:f5:eb:e0:2c:3d:7e:8e:a3:f7:1d:41:3f:65:9e: 4f:e6:f8:de:75:32:25:28:db:8d:0b:61:9a:d2:82:19:09:5b: 05:7a:2a:e5:57:2e:cf:b9:98:0a:90:65:b9:ab:3c:36:ce:ea: 4c:1c:77:e8:f5:4e:56:e1:af:95:f9:92:f1:42:93:01:05:df: ae:2e:44:7f:ed:5a:9e:3b:42:30:e0:00:6b:09:0a:00:f6:f0: 7b:96:84:2e:e4:02:86:21:07:09:fa:5d:b6:1a:ab:f4:31:7a: e5:1d:bb:a1:92:4d:f7:f0:bb:20:13:7b:06:0f:d9:41:9d:39: 2d:20:95:29:6e:c9:e7:a5:88:56:36:a1:28:c0:3f:cd:ad:f1: 72:1f:61:10:ab:6e:c2:cb:ce:5c:ac:b6:ff:60:e2:25:d8:67: ce:06:6c:c7:de:8c:68:31:05:d5:d1:34:14:b3:40:21:a9:2b: eb:05:77:0d:8c:1a:a2:bc:3f:ab:16:35:2f:30:75:15:53:ab: 9f:ea:08:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZafPxtxfJ0AFo/FDZekwu7hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODAyNGI3MjlkOTlmMDUxMzNlYzZkMTQzOTBjNzNlYjM2 ZGI5OWUwHhcNMjUwNTA1MDcwMDM1WhcNMjUwNTA2MDcwMDM1WjAzMTEwLwYDVQQD EyhlNDgwOGJhNmRiMTA3NDVkZmY1MzIxMzBiZTdjZjlmYWQ3NTdhOTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RI/EJE1H35BceCNt9R6TMboV8wf vafeuyFSQ09Ryikd0l6LqSdZtE2V+ougfvtMZQJlQg5x/K/K/RskBDUEe/XQZE68 DNOzKJ1m28iaskrw9Ef+WfqY4KqdqimcDv7UngwlZZA70RFQRL6X0gX9xXBkSkG3 nwqKNtqSZuTTwqvBZOTLHHN3oynCcWm+2ygefwt6oIqX9Vxfr+oKIEtQxCh71Ujm fyI3g7BW3G//HwvwR9VpKK7SBpAJKoQpo++duXjarVoCJNGUZIGHzfhitvJ6ChnJ ERGoXlmtvmjIs5uYw6A3NX9IjMv5RjkCAcSaQ3gKDydZepy3RHibcHYKsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSAi6bbEHRd/1MhML58+frXV6kqMB8GA1UdIwQY MBaAFOWAJLcp2Z8FEz7G0UOQxz6zbbmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQt OTU2ZjZiNWM2MTcwLzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQtOTU2ZjZiNWM2MTcw LzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPBaPG44p tmRwSoHu/tUKezS2I6ZaL8dQpJHToFXFVuHwCFPJT/SJEnHXbbF8xF/msY9TCywG 0p/MEvXr4Cw9fo6j9x1BP2WeT+b43nUyJSjbjQthmtKCGQlbBXoq5Vcuz7mYCpBl uas8Ns7qTBx36PVOVuGvlfmS8UKTAQXfri5Ef+1anjtCMOAAawkKAPbwe5aELuQC hiEHCfpdthqr9DF65R27oZJN9/C7IBN7Bg/ZQZ05LSCVKW7J56WIVjahKMA/za3x ch9hEKtuwsvOXKy2/2DiJdhnzgZsx96MaDEF1dE0FLNAIakr6wV3DYwaorw/qxY1 LzB1FVOrn+oISw== -----END CERTIFICATE-----Generated at Mon May 5 14:51:44 2025 by rpki-client