$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft File: V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft (raw, json) Hash identifier: mp7JNbfWsB5XJ8xlMCAP4qZY0SbJpt2M8QEr96wOZfk= Subject key identifier: E7:7D:C8:1B:7C:A6:77:64:50:98:B3:15:06:30:20:94:7B:8C:DB:AB Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47 Certificate serial: 0196AA31753430B3E03F5C85C2B8436D589D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft Manifest number: 111A Signing time: Wed 07 May 2025 10:01:29 +0000 Manifest this update: Wed 07 May 2025 10:01:29 +0000 Manifest next update: Thu 08 May 2025 10:01:29 +0000 Files and hashes: 1: 1-2ze8RFqsfXiBAT11ime5104BjY.roa (hash: 1G/91kNwXr6Euhuawe1vb8XkKyyCivckcaN+MUB7G0c=) 2: 2Kp_9YpfYIQIxyL5CznhHnkIxfU.roa (hash: LYK8gdoVuDcWT2M8puwmkXBr6TS/IOAg3OaPmCBsVwI=) 3: 5lDpUUbHXzya0fMquFYbFulqqVs.roa (hash: f1hht89a/wconxQu5KNK8QHufJfhYi0HFOvBnekJIq0=) 4: FHAcQ1hSwnBkPa_1eYwrasvDBAI.roa (hash: UEqpRdrSw3UNWb3wNwi2VW+eLR/IeGW0ScqzLsmeYpU=) 5: FeD_-2NSvz_oTh1LHrP44NqzWIo.roa (hash: M0rfgf8nLa/Z7WmSdsaO8N+Wk6yxPhPTCcsAwupLmJk=) 6: G0XtWDoXmf3g4WPOe4oJBWwD53c.roa (hash: ah5ed8JgyczAK0ktQp/XfJNbJde2PQoHxbYeBWCDQq0=) 7: HlClfikOJrfktj0svDKphR0_6Ic.roa (hash: g1qw7C3eBB8cA1eir2ZaMGGhWvD9jq2Y2uAjecDMYHM=) 8: JHZeQoZfAbaLUlrZmCxtZ1ApkWo.roa (hash: +VPqWsWngmfKHIzBC3GFe6m9tn9RXpVp3jH9A+hxoC0=) 9: LXaOacmSywqNlfh5CO5J1YXXGmI.roa (hash: jtQHK2Bwk3+TO9AZet3mFNI8IuZDJg2fZaIIhEkYoQM=) 10: OXCR5eZAjAKFe_5_WqZvsLDsIGw.roa (hash: +dX5GIlPaHoX8hOklKsClO3JcTsDNTNWJiq3yrlcruo=) 11: SpYcE3S7smMV4xZjzIbw_3YgWQ8.roa (hash: r3TEKYZlZtxmxAKHk3aPSvesmIPuqj82Nxme4CHttjE=) 12: V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl (hash: znGKoPS1VNRZpDuj3G2miW76ODKaWxICq5kag/0GMSE=) 13: Xdc1GXsEPiQ6GE6eHjFDA0ZgS3w.roa (hash: OE+tVEQ0oQcFP5VxqAmEpxiSoF7RE792pp1YSKmB2O0=) 14: ctU4FIR-r7525NdQcQhV07S1InU.roa (hash: AU7Mc04mkVMs25EZU4CCsCrYPVp1VtWzfOi9wTwg8to=) 15: mgE4NAvl5a_fjijODt9d3QXoFWo.roa (hash: U49USPjZ5W98U1upDeeRKhUCJZwO5RTn5SJ+Rro+7ys=) 16: valOsPAluNa3RG5X659q6dsU_FA.roa (hash: fkBC+Rvf3Gv+oy6BC36LsnU6WeruMquhW06fi/seA5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 May 2025 08:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:aa:31:75:34:30:b3:e0:3f:5c:85:c2:b8:43:6d:58:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47 Validity Not Before: May 7 10:01:29 2025 GMT Not After : May 8 10:01:29 2025 GMT Subject: CN=e77dc81b7ca677645098b315063020947b8cdbab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:74:bb:f2:85:e5:29:35:08:49:46:1b:6f:d2: 08:b2:59:32:04:fb:d0:05:17:fd:a2:12:84:40:b4: bf:f8:70:e4:bb:70:45:7f:6b:07:76:f1:9e:91:02: b5:4e:e4:c7:a6:60:ec:94:fe:07:67:c0:8d:6e:c9: 18:3e:ab:c8:12:15:ef:1f:56:22:76:62:c1:49:be: e9:82:e7:51:16:8f:ab:f9:6c:b9:a0:22:92:b4:3d: 85:94:54:3e:43:44:f8:6e:8b:c9:40:ff:7e:b8:b5: 08:a0:ba:c2:c1:ed:37:97:cc:12:f3:93:98:37:57: 84:cd:21:56:23:63:f3:0c:94:48:0a:79:cd:58:ca: c5:35:65:a5:b1:a7:8c:0c:17:a1:03:ce:8f:25:9b: 45:12:a3:53:24:91:7f:a2:e2:20:fb:56:91:1e:b0: ce:47:c9:f4:1c:9f:cc:e0:55:5b:d1:31:51:ea:1f: c6:d6:7d:ff:c9:48:30:01:0f:f3:6d:b3:87:59:ab: 7a:32:7f:cb:f1:e2:5e:95:00:3c:19:0b:f0:6c:5b: 63:cc:82:7f:1c:58:e8:e9:f0:53:c2:f3:e9:a0:59: 54:83:51:b0:b2:e2:7f:81:ba:a2:22:f7:db:c5:1e: 37:c7:3b:86:04:17:23:8c:f2:f9:4b:12:39:f9:75: f9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:7D:C8:1B:7C:A6:77:64:50:98:B3:15:06:30:20:94:7B:8C:DB:AB X509v3 Authority Key Identifier: keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:eb:c0:b9:94:09:91:70:77:64:1c:3b:68:b7:4d:26:4d:9a: 12:5b:d9:6a:65:63:4f:03:27:61:e9:c3:f4:80:3e:fa:f5:3b: b4:e1:e2:c1:bd:50:64:01:f2:7a:ab:75:e2:56:8d:7e:39:9f: c5:3d:36:3e:a0:78:ff:2d:9a:89:d9:84:01:b4:5e:de:51:40: de:36:43:b4:57:70:f9:ec:1e:e4:31:9c:79:de:21:bd:1d:fe: 2e:e2:b1:c6:df:25:cc:24:82:c7:a3:1d:46:28:b9:c4:b9:39: ee:a3:b9:1d:74:b1:6c:47:d1:a5:92:60:e2:bb:ff:43:6d:bc: ed:c2:e9:d5:f0:1e:d8:9e:32:38:b5:d3:d6:04:57:8b:4c:4d: 05:db:7a:db:f7:7c:87:17:37:a4:02:6b:e2:01:19:08:a6:6c: 79:59:3c:2b:5f:11:01:dd:30:aa:26:39:3e:e0:fa:84:ed:55: cb:84:9e:2b:71:33:af:b4:c9:b9:0a:b6:50:1f:97:70:d2:67: 92:76:37:d2:2e:5c:9c:4e:27:6a:8d:16:2c:eb:a8:a9:5d:72: 65:95:86:00:6a:c2:3d:76:fb:99:e5:a7:d1:00:1d:db:a3:1d: d7:4c:4b:d0:0f:ba:ec:12:63:d3:b8:c4:01:14:44:5f:96:91: 4a:50:86:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaqMXU0MLPgP1yFwrhDbVidMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1 MzhkNDcwHhcNMjUwNTA3MTAwMTI5WhcNMjUwNTA4MTAwMTI5WjAzMTEwLwYDVQQD EyhlNzdkYzgxYjdjYTY3NzY0NTA5OGIzMTUwNjMwMjA5NDdiOGNkYmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXS78oXlKTUISUYbb9IIslkyBPvQ BRf9ohKEQLS/+HDku3BFf2sHdvGekQK1TuTHpmDslP4HZ8CNbskYPqvIEhXvH1Yi dmLBSb7pgudRFo+r+Wy5oCKStD2FlFQ+Q0T4bovJQP9+uLUIoLrCwe03l8wS85OY N1eEzSFWI2PzDJRICnnNWMrFNWWlsaeMDBehA86PJZtFEqNTJJF/ouIg+1aRHrDO R8n0HJ/M4FVb0TFR6h/G1n3/yUgwAQ/zbbOHWat6Mn/L8eJelQA8GQvwbFtjzIJ/ HFjo6fBTwvPpoFlUg1GwsuJ/gbqiIvfbxR43xzuGBBcjjPL5SxI5+XX5OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOd9yBt8pndkUJizFQYwIJR7jNurMB8GA1UdIwQY MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It MWVkMTA5NTRiZDk2LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2 LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAROvAuZQJ kXB3ZBw7aLdNJk2aElvZamVjTwMnYenD9IA++vU7tOHiwb1QZAHyeqt14laNfjmf xT02PqB4/y2aidmEAbRe3lFA3jZDtFdw+ewe5DGced4hvR3+LuKxxt8lzCSCx6Md Rii5xLk57qO5HXSxbEfRpZJg4rv/Q2287cLp1fAe2J4yOLXT1gRXi0xNBdt62/d8 hxc3pAJr4gEZCKZseVk8K18RAd0wqiY5PuD6hO1Vy4SeK3Ezr7TJuQq2UB+XcNJn knY30i5cnE4nao0WLOuoqV1yZZWGAGrCPXb7meWn0QAd26Md10xL0A+67BJj07jE ARREX5aRSlCG5g== -----END CERTIFICATE-----Generated at Wed May 7 13:45:41 2025 by rpki-client