$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft File: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json) Hash identifier: Yc4j2V7NQzl2LEWKxErtUGyrZcxNmCnajpMl6+q6tcI= Subject key identifier: 91:E7:A1:E9:45:1D:47:E9:77:99:33:BD:3F:A2:00:71:D3:00:20:E4 Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Certificate serial: 0196B36A90094370E596A43559C559E2331F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft Manifest number: 153C Signing time: Fri 09 May 2025 05:00:27 +0000 Manifest this update: Fri 09 May 2025 05:00:27 +0000 Manifest next update: Sat 10 May 2025 05:00:27 +0000 Files and hashes: 1: 0qAbgoW4LJAElFdWt9cFuw-rgn8.roa (hash: L8maPhEmT2n7X8a6uusm8vsVOaPlCBJtXIkemnm/t10=) 2: MTxciv5mcC6g5MkOWJ_PCLUtcGw.roa (hash: sgzh4uhlDpWhAHL+IAu4cgWAxT/K2/Pct3jSfOVM8NQ=) 3: W4Pp1uZLNY6O8zypTnIooV8OKUw.roa (hash: sz2YvKmGzTepzQeb00hlOadIcmBeFimSpx3Uqur21uI=) 4: Y1uBCw2ID0YyZ99v-Z_lyCH99eg.roa (hash: cjULbx6P7MvMK4WANKsBKAVbb7nETAlX3DivVasETiQ=) 5: bCiizil2Ey8Pvh56RnqDgTk8X7Q.roa (hash: phspsqh/4y98JzmGzw3HpShtGGUJNNv7gxCq93gvxKo=) 6: gyBoR0Pr1cH4RPdcxzglRlFRHBw.roa (hash: 3pblEbuyEQGeT8WjyqKPo8c9UE3z9FtuOT2bJKOYqhg=) 7: kj7kinsfLRhL_IoV619KJi8FFL8.roa (hash: PZmgxN8/Rtu6BsEbQsN7jkEXwA4RX6FBccLjt1dXYy4=) 8: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: UNb8htcEqdB7cmP8VwU8Tw6y9WwFY/W5rn+vki9lau8=) 9: ntJH0KRoZucW8VNuwTIHrnSnlKg.roa (hash: 09HbUbUgEiRqWzx65FOtxruuV31mRSjgz3dJWoNx5nA=) 10: pgkZmq53mdBn0axql3jHx0EQjb0.roa (hash: aQFrLEqXJ0R769ANrMlsyVSYn8plE/Z1heUQyyK64EM=) 11: rQI6zOSTMPr-5aSxylwS7FyovQ4.roa (hash: rfEafPW5O0SAZQwvAq0I4Fkx0LFGcfF/mHD1nsLYnQk=) 12: sjrvDPQwhWQPqwn6TmRlTLKuFYg.roa (hash: 1WK8IPxCTeSex8E0rLqfFDPE1ENBltlsB6VMf3gJcZY=) 13: u4G1_yF4TBBumrIYzOwiYZxivvM.roa (hash: KXapgrZ9J9YmS63vQiCaKhL0YwTkps2tWnrl3xdYLX4=) 14: uMHNQRmfBxlbvZLGtjT4gp4kg2M.roa (hash: F+fAKBuQq3PLDBu2sHTyZl1ELbNuh34xu5t/W6OjOpg=) 15: xsJAozXR7v9AsPhf1mj9KmkoElI.roa (hash: bwRmsijzLqvxhnnm3OlUPJ7DrTUMyMg1dyJZUOOqeKk=) 16: ywFfsakzP6gwg7h7Z-Y4enCkXVs.roa (hash: zQ4r7S3Ps9QMhK/S8Db/JFo0flSN41hhML8fbJu8SJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b3:6a:90:09:43:70:e5:96:a4:35:59:c5:59:e2:33:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Validity Not Before: May 9 05:00:27 2025 GMT Not After : May 10 05:00:27 2025 GMT Subject: CN=91e7a1e9451d47e9779933bd3fa20071d30020e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1b:69:bb:90:ba:9d:bc:df:ff:09:30:1d:32: d8:9c:ba:a2:24:b4:4a:86:08:c1:c5:dc:64:c9:ef: 62:11:8c:38:fd:d4:98:29:cd:ae:72:c1:e5:27:f1: e1:17:3c:db:54:93:ac:c1:9d:9d:ad:bd:00:5f:b2: b4:6d:43:6b:c8:af:7f:58:4a:50:ee:8e:a6:17:4b: 8b:2a:bf:d3:bd:28:20:d7:fb:ad:06:29:4e:6f:51: ed:e6:1a:46:e6:a3:46:22:1c:e1:c9:b0:03:83:98: 84:b5:81:d9:87:de:7e:ff:1f:43:5f:3c:e5:90:33: 08:af:e8:a4:23:84:6f:d0:82:66:08:d8:98:b0:d6: 64:ff:28:ac:f6:f8:72:40:04:e0:5c:f4:4a:70:98: ae:1c:da:bb:f6:d6:e5:35:d0:a2:6b:48:14:e7:b1: a3:de:0a:13:dd:a7:13:f0:c5:a2:30:fc:2e:e0:4d: 7c:02:dd:73:f8:00:0f:2e:76:1b:72:e8:22:45:fb: 3b:6d:64:66:a6:b3:e4:04:57:cc:f8:f0:93:23:af: da:09:32:b9:9e:0a:23:82:bd:df:8a:13:88:1f:60: 7b:08:0b:9c:87:4a:1d:9f:39:b8:ef:12:40:42:7d: 1d:d9:d7:d4:d3:fe:d2:5c:bf:ad:96:c1:f8:3e:93: 69:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E7:A1:E9:45:1D:47:E9:77:99:33:BD:3F:A2:00:71:D3:00:20:E4 X509v3 Authority Key Identifier: keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a8:c6:d3:14:a4:15:c4:66:b4:af:9f:26:7e:ab:ce:98:a7: 60:0d:3b:64:64:f7:cd:f4:da:23:15:03:50:69:fe:db:6b:2b: 8f:40:72:58:9c:c2:32:a8:1b:3b:17:5b:89:b0:3f:c4:44:6f: 38:48:0c:36:72:f3:8f:c7:8c:14:4b:3c:b0:e9:4c:ed:aa:55: cd:05:55:47:a5:e2:fa:e6:6b:05:bc:61:84:2d:e0:da:68:7f: 84:8c:09:ad:8b:ad:01:5e:24:c8:7b:5b:1a:fa:f7:10:c9:b8: d5:2d:ac:84:c6:8a:e8:15:13:60:fa:60:36:81:bc:5a:04:76: 70:fb:b9:b0:da:0f:47:76:a7:f6:b0:cc:46:50:a2:2b:43:1c: dd:20:52:06:87:cb:5e:50:93:c0:38:26:dc:76:a1:e2:4a:7b: ba:8b:7d:bc:98:83:5c:56:d1:85:4e:7e:3c:56:b2:5e:16:5e: 3b:48:6e:b6:1e:c1:c0:0a:5a:35:37:a7:8e:58:b4:04:90:ca: 31:8c:05:ec:35:2b:b1:f4:0a:72:1b:77:05:fe:a8:26:25:73: e2:c3:96:56:db:38:26:d6:9b:e2:6d:8f:35:7f:9b:10:4b:c3: 5a:e7:f6:25:5c:eb:03:33:8f:fe:fe:af:ac:e9:90:e0:24:79: eb:d0:14:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZazapAJQ3DllqQ1WcVZ4jMfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1 NTEwNTUwHhcNMjUwNTA5MDUwMDI3WhcNMjUwNTEwMDUwMDI3WjAzMTEwLwYDVQQD Eyg5MWU3YTFlOTQ1MWQ0N2U5Nzc5OTMzYmQzZmEyMDA3MWQzMDAyMGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhtpu5C6nbzf/wkwHTLYnLqiJLRK hgjBxdxkye9iEYw4/dSYKc2ucsHlJ/HhFzzbVJOswZ2drb0AX7K0bUNryK9/WEpQ 7o6mF0uLKr/TvSgg1/utBilOb1Ht5hpG5qNGIhzhybADg5iEtYHZh95+/x9DXzzl kDMIr+ikI4Rv0IJmCNiYsNZk/yis9vhyQATgXPRKcJiuHNq79tblNdCia0gU57Gj 3goT3acT8MWiMPwu4E18At1z+AAPLnYbcugiRfs7bWRmprPkBFfM+PCTI6/aCTK5 ngojgr3fihOIH2B7CAuch0odnzm47xJAQn0d2dfU0/7SXL+tlsH4PpNp6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHnoelFHUfpd5kzvT+iAHHTACDkMB8GA1UdIwQY MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct YjUzZTMwZTE0MTJhLzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXajG0xSk FcRmtK+fJn6rzpinYA07ZGT3zfTaIxUDUGn+22srj0ByWJzCMqgbOxdbibA/xERv OEgMNnLzj8eMFEs8sOlM7apVzQVVR6Xi+uZrBbxhhC3g2mh/hIwJrYutAV4kyHtb Gvr3EMm41S2shMaK6BUTYPpgNoG8WgR2cPu5sNoPR3an9rDMRlCiK0Mc3SBSBofL XlCTwDgm3Hah4kp7uot9vJiDXFbRhU5+PFayXhZeO0huth7BwApaNTenjli0BJDK MYwF7DUrsfQKcht3Bf6oJiVz4sOWVts4Jtab4m2PNX+bEEvDWuf2JVzrAzOP/v6v rOmQ4CR569AU0w== -----END CERTIFICATE-----Generated at Fri May 9 08:34:40 2025 by rpki-client