$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft File: _TfMjxazxsvTNGqj7WF3Hz6DrJc.mft (raw, json) Hash identifier: XPsto4G69YN7tojm6FIRfF/oO87rXBKQQfFnGYB6pFo= Subject key identifier: 87:BC:D2:9F:40:A8:FB:B2:BE:53:34:ED:F7:7E:D7:E3:CD:E8:1A:A6 Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Certificate serial: 0196AE0D748A5F19FC638424117E05988BB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft Manifest number: 1586 Signing time: Thu 08 May 2025 04:00:39 +0000 Manifest this update: Thu 08 May 2025 04:00:39 +0000 Manifest next update: Fri 09 May 2025 04:00:39 +0000 Files and hashes: 1: 0HACyBUxgNOKSEcXcfPHI7LfmIg.roa (hash: wqTJepcUODfu+UsDaT3UCXuLJcUfFBmEBfdq4N3Rg18=) 2: 0SGQgnDHvljd8WswPS3Zor6FDL4.roa (hash: 6cEGIRuHIzEG7/ilcX3ol3tjHMExu8vRWtvJG3iihbQ=) 3: 52PmmGV3aXleWbX9-5QkD3T7G80.roa (hash: YUpifY1bSAdptUQTodCY1O+Ws4plwdNZWT5tmGKMklE=) 4: 8YFjhJllAvnuj7iLErGij7HrSXA.roa (hash: Jhl/M/KE8hoNx5Qk80x4cpNTjAEwV+xL9n1btN845EY=) 5: CkYxOCFcXglZibNQBz57XM7xS7k.roa (hash: tPE6/6y5+L8gtSA/0lIV1hRfNlGi7fzBLSET7NYUXhQ=) 6: L2ou3KYC7aOW9h4MkxvmRdF9-XM.roa (hash: HdnRHq9xsHsffUN6vf8PfjK/qp0rtSAt5eAQOAgASLA=) 7: ORny9zSgmvPNlHA0GSjf-fW7JAM.roa (hash: 2mt1E0mw+ncsqd4MDmo2JIYlDgVM2APWu07de1NTQyk=) 8: Qx6qMFrufEPZv8mWu9XgjLsLMB8.roa (hash: P/r3/JxO1CdcEUxJoGOxAQuq95icEB2m2qPK3qHqs10=) 9: TAdP0yKv9NpfjSbhNts0juEkm1U.roa (hash: dvn2DfwTU0n63QcUIMIBNntGEWr2G1UXma7Nhu8Iurs=) 10: WoZoEuE3OARNKqVJ9taXo2-Zt8M.roa (hash: Sn/ecsmLImTPn1yvBagjjq/XB8omW7tpmekWgI2yuFs=) 11: XdBKdwv6cTf-QnKldOeZvGt4D_Y.roa (hash: TxqV86SQTi0t4BbX6SVLNGYD/xhHt70JrJfSx9PYDmA=) 12: _TfMjxazxsvTNGqj7WF3Hz6DrJc.crl (hash: +eEndDTs+T9qS3w3UjvK05q3VH7EEUvy1MitQwJJO/8=) 13: bboBBp1tKqS0RC4vsgwoBCmEwqY.roa (hash: 74uXCligXDCEvZU13I/aaPCJJzSMTM22JuT1PuhmBlQ=) 14: cTcEU6BZVDHzKsGmYrYFuehVnmw.roa (hash: Wt8W9AEoHsxpxFYj5Y9GGKvIgV+LkMQs3tuB0PH0H4Q=) 15: peQXZljVycjXahMLHOgebWKzO6c.roa (hash: 6nDgFHnTrpxmQJyrmsK88oc050AwIyK1nEAS/RY/l94=) 16: xCt-3I4HSr25MhC8BMd2thevgVU.roa (hash: sZUNm0dz+rTstayb8zMPvmRuDI0MPNSTCMqD12A4Oww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 04:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:ae:0d:74:8a:5f:19:fc:63:84:24:11:7e:05:98:8b:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Validity Not Before: May 8 04:00:39 2025 GMT Not After : May 9 04:00:39 2025 GMT Subject: CN=87bcd29f40a8fbb2be5334edf77ed7e3cde81aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e6:20:c3:91:8c:6d:46:e2:6c:1c:5b:f6:a4: 22:03:b3:59:12:9b:3c:df:a2:4c:0b:dc:a4:6e:c7: 96:a4:42:1c:16:75:ba:82:ac:ac:9a:93:45:84:6a: e2:9c:ff:50:7e:1d:17:c0:ac:eb:af:c3:eb:af:b1: b1:c3:cc:00:96:10:0f:2e:32:34:95:c9:f3:36:a8: 60:67:6a:ca:23:28:05:2d:e0:a5:a4:21:da:83:93: ea:39:94:c6:25:3d:c5:0f:4d:ab:cd:34:57:16:89: ba:33:ca:62:1c:5b:5b:9b:98:bf:2c:16:b4:c1:70: 08:1e:ba:bd:ef:48:b0:8d:87:2a:c9:c1:bc:8a:30: 9d:24:30:b4:bf:ed:2e:07:8c:5b:e7:1d:61:ea:2a: f4:50:72:22:ac:7c:cf:76:f6:13:4a:d9:ee:f4:56: 12:a3:85:35:18:15:b1:00:e4:ab:d9:3b:6b:4c:2c: d8:d5:7a:26:7e:bf:d0:94:c5:30:60:86:7e:e9:b6: f4:22:97:28:a4:08:1e:6c:98:db:f6:3a:3e:73:0d: 81:34:38:35:de:5e:3d:cc:14:2f:c8:d9:71:db:84: 62:0b:16:81:2b:f4:5d:08:90:91:c1:f2:e6:e9:4c: a2:2f:91:ef:ee:a9:c9:db:c1:5e:2c:2a:b9:28:b4: 35:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BC:D2:9F:40:A8:FB:B2:BE:53:34:ED:F7:7E:D7:E3:CD:E8:1A:A6 X509v3 Authority Key Identifier: keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e2:1f:3e:21:bb:97:6d:eb:65:59:1d:ad:e4:c5:b2:7a:d7: dd:53:ed:27:95:2b:6c:ba:b2:7b:e4:e8:8f:9d:47:1c:ec:5e: 0c:84:c9:c2:8d:7d:4a:99:d2:cb:2c:dd:37:c7:c0:77:52:f6: f8:d7:54:43:b3:f0:62:d2:9c:a8:61:3f:5e:60:f0:45:f6:56: 82:4b:a0:b9:6c:01:15:59:ab:10:2f:69:6e:5e:24:87:31:7f: 13:db:20:1a:6f:93:f6:98:6b:d2:01:70:18:1e:50:29:3a:f5: 5b:6c:9f:43:b2:b0:73:57:c7:c5:8f:c1:fb:2c:9c:3e:66:db: 9c:9a:9c:f6:b7:f8:c2:7c:33:07:01:75:73:23:ca:62:97:77: cd:57:7f:bd:4b:5c:4e:53:c8:50:57:82:b0:b2:a2:1a:cf:2b: 47:87:6f:54:5c:21:58:39:65:24:09:27:92:4f:f0:1f:67:20: 11:24:6e:7f:64:c7:82:cd:56:89:4e:f2:33:73:0b:73:41:d8: 06:ec:74:34:fa:c7:e1:fb:16:40:e3:ff:eb:13:15:75:3a:4a: f3:d3:b9:fa:ba:69:26:86:c2:c1:7f:19:5c:71:1c:53:01:c7: 10:a7:24:81:29:dd:ff:ee:70:f2:37:db:ca:7b:cf:0c:9a:df: 0c:12:e9:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZauDXSKXxn8Y4QkEX4FmIu4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4 M2FjOTcwHhcNMjUwNTA4MDQwMDM5WhcNMjUwNTA5MDQwMDM5WjAzMTEwLwYDVQQD Eyg4N2JjZDI5ZjQwYThmYmIyYmU1MzM0ZWRmNzdlZDdlM2NkZTgxYWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruYgw5GMbUbibBxb9qQiA7NZEps8 36JMC9ykbseWpEIcFnW6gqysmpNFhGrinP9Qfh0XwKzrr8Prr7Gxw8wAlhAPLjI0 lcnzNqhgZ2rKIygFLeClpCHag5PqOZTGJT3FD02rzTRXFom6M8piHFtbm5i/LBa0 wXAIHrq970iwjYcqycG8ijCdJDC0v+0uB4xb5x1h6ir0UHIirHzPdvYTStnu9FYS o4U1GBWxAOSr2TtrTCzY1Xomfr/QlMUwYIZ+6bb0IpcopAgebJjb9jo+cw2BNDg1 3l49zBQvyNlx24RiCxaBK/RdCJCRwfLm6UyiL5Hv7qnJ28FeLCq5KLQ1LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIe80p9AqPuyvlM07fd+1+PN6BqmMB8GA1UdIwQY MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt N2UwNWFiNDFiNmU0LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0 LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKuIfPiG7 l23rZVkdreTFsnrX3VPtJ5UrbLqye+Toj51HHOxeDITJwo19SpnSyyzdN8fAd1L2 +NdUQ7PwYtKcqGE/XmDwRfZWgkuguWwBFVmrEC9pbl4khzF/E9sgGm+T9phr0gFw GB5QKTr1W2yfQ7Kwc1fHxY/B+yycPmbbnJqc9rf4wnwzBwF1cyPKYpd3zVd/vUtc TlPIUFeCsLKiGs8rR4dvVFwhWDllJAknkk/wH2cgESRuf2THgs1WiU7yM3MLc0HY Bux0NPrH4fsWQOP/6xMVdTpK89O5+rppJobCwX8ZXHEcUwHHEKckgSnd/+5w8jfb ynvPDJrfDBLpLQ== -----END CERTIFICATE-----Generated at Thu May 8 10:04:18 2025 by rpki-client