$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft File: zV45ZYo-9vE8ohzBGk4z682UZwI.mft (raw, json) Hash identifier: yKnvXtNb2DzhBX0KQv/B2SpJuwD22uXjmYfJDvaGGuA= Subject key identifier: 92:9F:CF:77:A2:BD:13:8B:EC:88:A1:1C:6E:AB:9D:87:A1:83:55:B5 Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 0196B6A2E035A9A8ED397FFE92A078472147 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft Manifest number: 1653 Signing time: Fri 09 May 2025 20:00:49 +0000 Manifest this update: Fri 09 May 2025 20:00:49 +0000 Manifest next update: Sat 10 May 2025 20:00:49 +0000 Files and hashes: 1: 1C6A6LTtabBa0epCI4ajIA8lQm0.roa (hash: 0YG5kYaHQz+kPqSGDVtRfMOTa6MMpN/M9J+snpbMWz4=) 2: 56T6zW4aSWrMfRdHfPjh6ZGGSao.roa (hash: HRvdtCYIZPbv0zIOCx8/BNQolO+td6Hg8jXPnt+D8yc=) 3: 5n_YcLg3YQQNFYTwhU5huai3ZJI.roa (hash: 9mpciFsp3Kugx6pov8E04ElUzgFox7xfMS6pjLwC4Qg=) 4: ECT8clfNxElQsbNgWf5MSMBQJBw.roa (hash: OHKduQ+nBMz5yKr3Tz8KQLq2T4SUqaXm2BJrDDuQUCc=) 5: Eg5cB0gFbZt-mtb2g5DlnYfptYU.roa (hash: N8GnHFT4fRhNM3nodSxCZOH18KkVNRyweY1llmfoJHs=) 6: GCq3OcvhsVssgyhwVftlmv2qS0g.roa (hash: amGc7yYYdNqbzEM6/ZudOs3K3qKn0m9v09EM2kwWv7M=) 7: It_f8Sf2FfhB_S0DbfQKa-2JOPY.roa (hash: QAc5gHOaQXt39S4LjrikuPGmP8en9wsKvBleiEYuYHU=) 8: JnUDLpnSNZdUPTciH_SImfiQNPg.roa (hash: phKmDfTKEa4M5M2wLFu2WomQfhRDPt24TZJyLDqWijI=) 9: KCCAvsdFABptcdWkmYzNnQ9RL6E.roa (hash: DSZuLAxhdSWLE0DFN+BFigCnq9IYv1dV5jCeoEQh9rg=) 10: SeBDGoUZsUtOUZx02IQlwMJ27mU.roa (hash: c6tFykgM8su9GyncwABr6lgk4O/lhzLOVTR6XdjeoGk=) 11: dlMgTA37PYjMj29gw-38SqdkU3Y.roa (hash: 1Uz3Ku2WqM/b08F/1HFeZ9d7LLkvQOmfAokOdqGf3nA=) 12: eHOgLTcKFTQCb9pEoV1RpO9Ob6A.roa (hash: RcgTIJu/NwqSqC/vmr9OYFdwRt2Fz/3jLy3D9rjl+1A=) 13: gRGDjjLT48vk7uk37lX43qmpguM.roa (hash: r1CGQBpwekmoJBDyj4suW0g94HtAtdOyi9owjr8gV84=) 14: pYYheMngH9PrFAWYb7D0Rnwh3Rc.roa (hash: Kusa3kjA5UvOGnNhZkPG36CpyMnLT1XxrIsJiFszyIE=) 15: ro5M-dHEvoHU0Wp1W7KVNXTJRB0.roa (hash: XLpdig1yngTdqxo047wSxCKu12A/eL61KXVLCkHmUrU=) 16: tY_SBiXlNsyr5MWGvZwrQKokaZY.roa (hash: kjGrN/I53C88kyyVw+9gflWs7bJ3X6mbRrf1jGUgHG8=) 17: uBPI4Rs7rRPQGCWlNIMKuX7PU7k.roa (hash: jFkWBUBLmZ3TDstxedf2WQQANWt19wC/I1ODOLEnI/k=) 18: v4CBgLv9j2JeRIvOJQdKbNxvJTA.roa (hash: Ttid+kREmc6Upy79hRBO9XMBfRE+dqbNAYWtSZGV6ag=) 19: vS_G30kRmF5yTvVCZuLriQbTalI.roa (hash: jpLTyi2oD569vb7nR4qsqTlGyMLcUPoGbyflTszDmns=) 20: yxb4qAopfVWx9tbVX2D9X8-NDPo.roa (hash: SCjFOGOJpyW+e/90L6KJ17UwdzCSiXn/XxCg01egwec=) 21: z5USRWL1xokOYfBSwUf22d4RSgs.roa (hash: +k9eJkOqlZwo2Ca8utkijZ5ya8drgkfsi12poSw6dDo=) 22: zV45ZYo-9vE8ohzBGk4z682UZwI.crl (hash: DeygzMDjk6AIns8V15otAC8VaOUinKL9rEF0m44W6os=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 17:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b6:a2:e0:35:a9:a8:ed:39:7f:fe:92:a0:78:47:21:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: May 9 20:00:49 2025 GMT Not After : May 10 20:00:49 2025 GMT Subject: CN=929fcf77a2bd138bec88a11c6eab9d87a18355b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7a:99:27:02:42:1d:ef:6c:22:f7:9d:28:14: 91:ff:50:3a:a5:a3:34:12:5a:28:d9:7c:4d:16:4c: 7c:05:f7:4b:b5:a3:27:c2:8b:3c:ef:50:d2:6b:59: 77:91:e4:e5:06:ea:5f:b3:ce:a6:6c:a7:95:a1:40: a7:4b:c7:f7:0f:0e:b2:21:d2:d9:06:6d:d0:82:e5: 11:ea:11:78:fa:da:09:dc:4c:9e:79:62:97:a8:fe: 26:2a:88:c3:ee:a5:8d:d8:85:21:2c:46:b9:4c:bd: 03:b4:82:d5:a8:e5:a9:86:56:7e:89:a3:8f:f8:82: 6b:00:29:6f:ae:27:39:1f:45:8a:ba:fa:9c:15:07: d5:e6:0e:8d:38:0d:49:0b:d7:b2:37:a3:8a:46:db: cc:f9:e6:e8:17:bc:01:4d:c4:23:a5:a0:0d:0f:cf: e6:16:d1:5a:03:57:90:f8:6a:78:e0:a0:40:37:4f: f3:20:74:96:71:8f:93:78:c1:d6:61:97:de:4d:90: 08:20:80:e5:0c:3b:50:fe:37:81:17:bd:1b:cd:98: 92:b5:b7:c1:ce:0a:2a:78:2f:f0:37:53:b9:a2:74: ff:94:f2:e4:c5:cb:6e:d4:63:06:e2:fd:01:e0:b4: bd:a8:3a:41:e3:93:ed:84:97:65:42:50:17:05:0e: 47:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:9F:CF:77:A2:BD:13:8B:EC:88:A1:1C:6E:AB:9D:87:A1:83:55:B5 X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:fe:7f:0b:b9:ad:df:a8:b0:c4:24:15:03:85:ee:b0:e5:f6: 73:bd:c4:c4:be:25:35:55:f8:8e:3b:d2:18:7e:3e:f4:fe:f5: 1f:b8:68:3e:d3:84:1f:fe:cf:9b:d9:16:3c:7f:c5:84:78:4f: c9:4e:99:b8:2c:d8:5e:75:86:96:2a:72:a4:e9:32:a5:37:26: ff:ba:8d:4c:fb:01:ae:d6:e5:14:c1:98:3e:ad:e6:ac:ae:74: 16:d1:3a:34:d0:a4:e4:18:51:b1:66:20:e1:9e:ca:f6:1f:87: b6:88:b4:c0:f2:44:14:69:bd:86:96:b5:db:08:5b:3c:a2:8a: 41:95:83:19:2e:66:28:ee:52:e8:d4:9f:04:0e:6e:eb:29:6b: bf:50:7d:c0:ee:09:ec:ca:14:9e:5e:b2:20:62:5a:43:d9:6f: 88:73:67:ec:09:c7:9a:1c:a6:6a:25:e9:eb:3a:2f:90:01:4e: 1c:50:c4:50:04:44:b1:82:17:8e:a4:77:d1:a7:71:63:bc:fb: 01:e6:0a:0b:20:94:96:bf:33:10:18:ca:93:04:31:eb:79:ba: 22:9d:55:a3:87:12:db:b4:08:62:04:f8:ce:3c:d6:b3:aa:59: 24:a9:e1:93:5c:de:3e:99:63:fe:37:9e:09:4e:66:cb:3d:63: 75:a1:81:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa2ouA1qajtOX/+kqB4RyFHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjUwNTA5MjAwMDQ5WhcNMjUwNTEwMjAwMDQ5WjAzMTEwLwYDVQQD Eyg5MjlmY2Y3N2EyYmQxMzhiZWM4OGExMWM2ZWFiOWQ4N2ExODM1NWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnqZJwJCHe9sIvedKBSR/1A6paM0 Eloo2XxNFkx8BfdLtaMnwos871DSa1l3keTlBupfs86mbKeVoUCnS8f3Dw6yIdLZ Bm3QguUR6hF4+toJ3EyeeWKXqP4mKojD7qWN2IUhLEa5TL0DtILVqOWphlZ+iaOP +IJrAClvric5H0WKuvqcFQfV5g6NOA1JC9eyN6OKRtvM+eboF7wBTcQjpaAND8/m FtFaA1eQ+Gp44KBAN0/zIHSWcY+TeMHWYZfeTZAIIIDlDDtQ/jeBF70bzZiStbfB zgoqeC/wN1O5onT/lPLkxctu1GMG4v0B4LS9qDpB45PthJdlQlAXBQ5HXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKfz3eivROL7IihHG6rnYehg1W1MB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbv5/C7mt 36iwxCQVA4XusOX2c73ExL4lNVX4jjvSGH4+9P71H7hoPtOEH/7Pm9kWPH/FhHhP yU6ZuCzYXnWGlipypOkypTcm/7qNTPsBrtblFMGYPq3mrK50FtE6NNCk5BhRsWYg 4Z7K9h+Htoi0wPJEFGm9hpa12whbPKKKQZWDGS5mKO5S6NSfBA5u6ylrv1B9wO4J 7MoUnl6yIGJaQ9lviHNn7AnHmhymaiXp6zovkAFOHFDEUAREsYIXjqR30adxY7z7 AeYKCyCUlr8zEBjKkwQx63m6Ip1Vo4cS27QIYgT4zjzWs6pZJKnhk1zePplj/jee CU5myz1jdaGBAQ== -----END CERTIFICATE-----Generated at Fri May 9 22:13:25 2025 by rpki-client