$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft File: YGYXWM4zBiJHCjmujW70ogRPg8Q.mft (raw, json) Hash identifier: 8k8krfHKGJwUG9bqneqjgfZwKr0y5EGknSCAzltl+sI= Subject key identifier: B8:36:7B:66:FD:B1:8C:3E:7F:5A:71:DB:F2:16:68:1A:C1:C9:A4:83 Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Certificate serial: 0196A3F7C5DBAA26CCE10AAD5C23F5AB6157 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft Manifest number: 1557 Signing time: Tue 06 May 2025 05:00:46 +0000 Manifest this update: Tue 06 May 2025 05:00:46 +0000 Manifest next update: Wed 07 May 2025 05:00:46 +0000 Files and hashes: 1: 1jJgRYb9W4sURCICTmoLplbZHfs.roa (hash: qvyeOItWUbyQ2K5Z+KPy3O+0hoC+eVZj/p5eOsFLL2A=) 2: 2bitAWBYtHnJOfetAxEk1NWDm2Y.roa (hash: Ny4sMxLaEUhtST4+VmyAnyHZb/s80LG64s9z9X1sBRQ=) 3: AGurEqahuQXSYhB8cXum_Yv4Rd4.roa (hash: 9mstL9tbyGVVJbVNg56M6jiduKmLjfDZJdQ9Gx6+gkY=) 4: FzUBpaz-C-RxalVbWOkDzpE2yCM.roa (hash: T/pZcNXmahfhGqhyvuYT5Ve4BWsAYlUMonVIOR9Jwwc=) 5: GnpXllFnavAmEq5NxCew5FbUJHI.roa (hash: UrAOMyeUWJbJMwCGhOZ8xTwTpTiZsyt257TfGcy1E8E=) 6: JsNpDFVTIVYgUCJ1BB9Q_OSa1eI.roa (hash: WP14cmIm0lMtM89Vbr+2k9QFB+POLX7HRTX2iqF9kl8=) 7: Ru0qR7TRZaYr9H0bORVN2DKCxoI.roa (hash: 8HruGL7yjBEpznKxnMUFMkvUrJXEnuhg3el+Q45d0VY=) 8: YGYXWM4zBiJHCjmujW70ogRPg8Q.crl (hash: aFKhhrVxiEk6siEtSqOpuos4Oco/8tBo2ri0Z7YBZtk=) 9: ZGmf9YqAk4QzlnuTzaLSUF06ZmU.roa (hash: 4TTQ/eXadulSIhoVzB1gQqr9voOBbcYnz7UwH2X8rJI=) 10: aUwME-OEW2tfuy8IUz8xO9RJ9VA.roa (hash: TJpr115B55iHu7xXQQMd6VR9p+/zOYhE8FX2JwI2PiU=) 11: c3DCrLRFAJY72J3n3qrjNug2KJI.roa (hash: dR7zsNeMamp+bQYtYrwKTVfIZFLqO0MP1cdCrGnLSmE=) 12: cUEqkvOn3Or6KK_gteey-M1immw.roa (hash: NBFmDrlpaQLqY6RSKBmBrpZhLZbGW8F9pK5gAcvo2qA=) 13: k6TUAjq7IKBlApZOlbsqYXrEIx8.roa (hash: bC2yv2JOs11J0JF7qUwzq/8PnVIsXN9xT7P0dfHswKQ=) 14: kAyD-iamG8PuwFNIujY2KowQdcE.roa (hash: RV+R2SNYZWh3uXsxFcbw49NH++kmcr/RW695RLifrdU=) 15: ojVk8vkZ0BLY9GAaenbVqf3H9rc.roa (hash: Ba9QsIqkvrtmVCQkpDkO0vZ9nFVhfN+UrHpeojqVkNI=) 16: qQ7qZcsRXtjJvwERncTyOZfQz3Q.roa (hash: mqEcMXW4dbXayMYmxFVMUymF7f19p03bN3IauxDIgdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 04:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a3:f7:c5:db:aa:26:cc:e1:0a:ad:5c:23:f5:ab:61:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Validity Not Before: May 6 05:00:46 2025 GMT Not After : May 7 05:00:46 2025 GMT Subject: CN=b8367b66fdb18c3e7f5a71dbf216681ac1c9a483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:33:2f:14:c5:91:ac:3e:a8:b0:62:bd:d4:5a: f6:9a:dc:cb:54:ed:2c:ed:66:43:c0:47:b6:2a:d2: 95:99:28:45:16:aa:dc:ac:e9:ef:c2:8f:97:a6:2b: ad:12:4a:02:2c:ba:b5:a7:a5:3d:5f:49:0e:1e:71: aa:3a:f4:72:f9:46:26:20:07:46:d5:88:2d:b1:8a: b5:10:0e:2b:8e:28:20:78:b0:59:e9:a0:7b:0f:71: ec:d2:d3:51:87:64:5f:11:19:12:19:bf:c9:d2:48: b4:20:05:80:88:b3:e8:bc:c7:e3:78:57:5a:86:79: 53:1c:27:04:58:0c:e4:79:51:47:08:0a:6a:c9:ad: 9a:0c:df:8b:63:dc:36:4d:97:ac:01:ca:ed:24:e5: 9d:3a:ff:88:23:e9:8b:67:5c:1e:df:ba:07:43:d7: 9c:1a:66:c6:c3:f3:2e:bb:e3:52:a8:b3:4f:32:66: bb:86:34:7d:63:ee:9f:7d:4f:83:2f:00:ee:de:e1: 0a:b3:f4:8b:98:11:02:81:e8:da:53:36:15:38:6f: 96:81:3e:c6:f2:41:95:b1:b8:0d:f2:02:57:f8:07: dc:c1:e3:fc:8d:75:ea:b1:7e:30:27:03:89:15:78: 1a:2c:ac:71:26:17:21:38:6f:6c:3b:9c:c8:5d:30: 8f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:36:7B:66:FD:B1:8C:3E:7F:5A:71:DB:F2:16:68:1A:C1:C9:A4:83 X509v3 Authority Key Identifier: keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:54:ca:bf:8a:4f:0f:a1:97:22:49:9f:1f:1c:30:7e:fc:45: f5:33:79:2b:cf:55:a9:1f:77:dd:67:65:e8:8f:07:08:3c:06: 42:73:c0:2f:8f:f0:8f:a5:d2:ae:e4:84:99:7d:ec:11:d7:f0: 9b:0c:3d:33:4f:1e:0e:aa:2a:9b:40:6d:48:e1:b2:42:ff:d1: df:ef:29:3a:ae:f1:61:d3:44:52:76:69:c9:5a:b1:10:2e:73: 78:c0:7f:45:b9:20:21:36:40:68:8d:f0:0d:b6:d8:39:3a:f8: 5e:5b:1c:f5:35:8f:90:bf:d2:df:3e:03:e4:f2:9c:2c:7e:09: 7b:64:38:ec:f8:09:e1:20:ee:e8:c3:83:b2:d5:af:a5:7b:f7: 4b:63:96:01:5c:7e:cb:00:91:01:d4:1f:72:f6:06:c3:d0:f6: 34:70:ef:3d:ba:9c:64:b3:5f:32:fa:3c:69:70:38:82:dd:08: 05:04:f0:e3:95:51:ee:ab:e1:14:62:ae:32:b8:9f:57:01:39: 00:48:14:10:09:15:c7:4a:77:57:d4:79:c0:64:11:45:1a:c7: 1a:09:68:77:ce:95:00:05:69:17:e0:93:6a:fd:54:a7:f1:e8: d6:55:c0:58:41:4f:15:76:d6:4f:61:3e:00:fb:4c:8f:88:b8: 33:d7:64:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaj98XbqibM4QqtXCP1q2FXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0 ZjgzYzQwHhcNMjUwNTA2MDUwMDQ2WhcNMjUwNTA3MDUwMDQ2WjAzMTEwLwYDVQQD EyhiODM2N2I2NmZkYjE4YzNlN2Y1YTcxZGJmMjE2NjgxYWMxYzlhNDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTMvFMWRrD6osGK91Fr2mtzLVO0s 7WZDwEe2KtKVmShFFqrcrOnvwo+XpiutEkoCLLq1p6U9X0kOHnGqOvRy+UYmIAdG 1YgtsYq1EA4rjiggeLBZ6aB7D3Hs0tNRh2RfERkSGb/J0ki0IAWAiLPovMfjeFda hnlTHCcEWAzkeVFHCApqya2aDN+LY9w2TZesAcrtJOWdOv+II+mLZ1we37oHQ9ec GmbGw/Muu+NSqLNPMma7hjR9Y+6ffU+DLwDu3uEKs/SLmBECgejaUzYVOG+WgT7G 8kGVsbgN8gJX+AfcweP8jXXqsX4wJwOJFXgaLKxxJhchOG9sO5zIXTCP3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLg2e2b9sYw+f1px2/IWaBrByaSDMB8GA1UdIwQY MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut MWY4NzQ2OTQ1NDgzLzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1TKv4pP D6GXIkmfHxwwfvxF9TN5K89VqR933Wdl6I8HCDwGQnPAL4/wj6XSruSEmX3sEdfw mww9M08eDqoqm0BtSOGyQv/R3+8pOq7xYdNEUnZpyVqxEC5zeMB/RbkgITZAaI3w DbbYOTr4Xlsc9TWPkL/S3z4D5PKcLH4Je2Q47PgJ4SDu6MODstWvpXv3S2OWAVx+ ywCRAdQfcvYGw9D2NHDvPbqcZLNfMvo8aXA4gt0IBQTw45VR7qvhFGKuMrifVwE5 AEgUEAkVx0p3V9R5wGQRRRrHGglod86VAAVpF+CTav1Up/Ho1lXAWEFPFXbWT2E+ APtMj4i4M9dk6A== -----END CERTIFICATE-----Generated at Tue May 6 08:13:40 2025 by rpki-client