$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft File: XaQypOw7CsTKTk7OwOn01GtJevA.mft (raw, json) Hash identifier: 14xu6V4SEs/T9pwMRxLpUbnGWDP3wxPd2zNzu19+584= Subject key identifier: 7D:20:0F:6C:DE:7B:04:B3:0E:EB:37:76:F1:47:E5:93:1E:6C:26:8B Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0 Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0 Certificate serial: 019779E69203D8CE36026744A4C43600ABCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft Manifest number: 15AC Signing time: Mon 16 Jun 2025 18:00:43 +0000 Manifest this update: Mon 16 Jun 2025 18:00:43 +0000 Manifest next update: Tue 17 Jun 2025 18:00:43 +0000 Files and hashes: 1: 0Je5Z-nMCx0Zkd418v5HueEhd54.roa (hash: pEX7Z7nPaiJOWyIs9b/nPIQ3gi19xivW2mZ533J3DJo=) 2: 14hghSYuKbF7DLMEPWygMHVGP7A.roa (hash: +lIfYCGzEu7fKfBEKYs45/U/OMBrFfQnzzBOsngrbkg=) 3: 7wCIILVV_KizMvEXiqEvvxC6Jr4.roa (hash: QBaOmpq6h8G9bZnJd7hH6tV1LQuldiouVWbU53bSAF8=) 4: NX-lJMVuq0hFJuXhiTDNigiTMiI.roa (hash: 32i5zz/HrQnOcYVXyjhBgA5WXVmw5qyUgDPkRo/rTuU=) 5: PCD0p_UNZon9aCxoq1egSeAnxBA.roa (hash: i0uT3nEejd+UeJVQ6gjyXxFUUCw66ysdAWzGYAGx+Mk=) 6: PYemKJWEUk-HkJO5Mj9UiDiPJ_4.roa (hash: QhKEDEG5e1WSPoJeyCcT8wLZHkvtF03JkUepmJw6Zxw=) 7: Rr0zbCWANGdldNBvrAd88RpS1U4.roa (hash: 9No9czOGF999cDISmqzMXCL5W1XMeYJzBnZLfRLwac4=) 8: Vl_3r99z42NwQ-24ZhXRiYXhqjY.roa (hash: GXmfSPtN6tufP5/kLCHIzO4q0RbIH3Sr/fl4Xj29EAo=) 9: WZNFgwpO480t4avTSei-zYnVVOY.roa (hash: 373H0BKFYtzTiKGrZaryv56z6bhznrJd/cnBel6rbT0=) 10: XaQypOw7CsTKTk7OwOn01GtJevA.crl (hash: rGNftWkP3D4A2O+/gNv1u+RSxgE4shs5wuJoJQKJT8E=) 11: _uatClMcwC0uM9W8YXO5Qitmm-A.roa (hash: k5ie8fXmVl+ckXH05aUk9WqiZ3RnKPMqOUpy2XuoG7w=) 12: aHlGWauXADsFIjPBDWSnc29nHv8.roa (hash: y3CvDF1nTLBg2ldBPSyHCPUtAaI+qzww7+4uWAz8ztY=) 13: ea0vEI_fGMyg1jPZV-hKH8IC-2Q.roa (hash: lMsvTL1IJXE7hi4D1D2VQP7nQy14aHmJmR8i7R04mRU=) 14: sZ40szF_81b8iZ343Q6aVpk7QZc.roa (hash: ieSiCVj+T4ruST7AZXMVQI1ECh5LKhbuRyks+nO6HIc=) 15: xf4c83s9BhHDRES5-deoHo90fx8.roa (hash: Nc+I2Laa6OeGUM7r8e6LlLMHSt+btJK/FMAVLnkCxPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 18:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:79:e6:92:03:d8:ce:36:02:67:44:a4:c4:36:00:ab:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0 Validity Not Before: Jun 16 18:00:43 2025 GMT Not After : Jun 17 18:00:43 2025 GMT Subject: CN=7d200f6cde7b04b30eeb3776f147e5931e6c268b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:67:ec:d3:93:93:9d:20:d5:c1:1f:28:0d:84: 8e:39:b1:66:3a:59:03:f3:ff:f3:1e:09:c6:4a:57: 18:42:f1:28:69:d4:f5:26:b9:3f:3c:27:56:a7:2f: 70:0a:8c:06:b2:38:75:e5:8a:21:7a:e7:85:6c:a0: 62:40:6d:b5:ba:e6:65:7c:f2:27:94:57:95:ba:ea: 3b:31:f7:e9:7f:93:0e:36:75:9e:99:56:8f:89:7d: 06:a2:76:ad:dd:2b:50:f1:b2:6c:11:fb:26:41:56: c3:61:7f:7a:e3:39:cb:09:67:c1:26:38:91:43:11: b8:20:c5:84:79:98:ce:84:7b:81:da:3b:df:0e:bc: cf:c2:6e:c6:ac:0e:2f:ab:30:62:0a:03:67:5f:94: 40:9e:40:de:98:fd:f0:55:2f:a6:63:6c:3f:4a:8e: d8:77:3d:30:6f:03:c6:ac:b0:52:bb:4e:a1:c9:c2: 68:dc:36:72:20:bb:32:08:ec:bf:64:fa:34:64:ee: ef:e9:30:ad:24:75:39:9d:a9:ce:80:53:db:f0:8f: 43:0d:6f:f5:02:bc:79:c9:2c:0c:36:f7:3c:da:03: db:62:90:b2:63:e0:9a:17:a7:7f:92:bb:78:b4:83: dc:44:51:a1:33:a6:d7:54:5f:6a:fe:9e:b3:06:7e: f8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:20:0F:6C:DE:7B:04:B3:0E:EB:37:76:F1:47:E5:93:1E:6C:26:8B X509v3 Authority Key Identifier: keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:83:a7:f6:64:a6:2c:b0:7b:02:0f:30:5b:1a:d6:43:f7:89: 4c:52:26:a2:78:80:94:fa:dc:b9:fa:36:0c:a8:9d:b5:b4:c5: e7:18:ec:08:63:be:9e:04:a7:3c:33:b5:f3:de:b0:6d:5c:f8: 78:a0:36:dc:93:35:98:f9:d9:be:6b:28:5d:a6:5b:53:8e:83: 27:dc:47:f8:0b:ce:0f:6a:81:cf:27:76:dd:43:3c:30:05:46: 90:bd:25:23:3d:40:16:8d:09:51:1a:39:f1:4a:42:25:30:8c: 5b:6e:45:19:ea:70:85:1d:13:3e:8b:34:8f:2a:6b:04:4c:d8: 39:31:06:9f:ae:27:1d:1c:72:eb:01:5f:9f:d4:d8:a1:25:e8: 53:9e:61:d6:98:8b:8f:b4:5a:f7:ad:79:ce:e6:6c:ef:71:be: 38:aa:93:fa:6a:de:58:97:76:be:32:8f:fa:44:f1:c1:72:8f: 61:76:2e:cc:0a:a4:a7:76:48:5c:04:f7:16:aa:7d:35:87:49: 9c:c5:b6:57:25:5b:b1:dd:f2:de:bf:a2:8a:a3:b4:76:e6:7f: c5:bc:82:8a:fd:c0:3b:1d:3b:bc:7b:d5:ad:f7:70:7a:8e:d8: 59:ee:df:a2:62:9c:3f:bb:a6:05:78:87:98:68:93:59:91:17: e0:1c:ef:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd55pID2M42AmdEpMQ2AKvLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYTQzMmE0ZWMzYjBhYzRjYTRlNGVjZWMwZTlmNGQ0NmI0 OTdhZjAwHhcNMjUwNjE2MTgwMDQzWhcNMjUwNjE3MTgwMDQzWjAzMTEwLwYDVQQD Eyg3ZDIwMGY2Y2RlN2IwNGIzMGVlYjM3NzZmMTQ3ZTU5MzFlNmMyNjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mfs05OTnSDVwR8oDYSOObFmOlkD 8//zHgnGSlcYQvEoadT1Jrk/PCdWpy9wCowGsjh15YoheueFbKBiQG21uuZlfPIn lFeVuuo7Mffpf5MONnWemVaPiX0Gonat3StQ8bJsEfsmQVbDYX964znLCWfBJjiR QxG4IMWEeZjOhHuB2jvfDrzPwm7GrA4vqzBiCgNnX5RAnkDemP3wVS+mY2w/So7Y dz0wbwPGrLBSu06hycJo3DZyILsyCOy/ZPo0ZO7v6TCtJHU5nanOgFPb8I9DDW/1 Arx5ySwMNvc82gPbYpCyY+CaF6d/krt4tIPcRFGhM6bXVF9q/p6zBn74eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0gD2zeewSzDus3dvFH5ZMebCaLMB8GA1UdIwQY MBaAFF2kMqTsOwrEyk5OzsDp9NRrSXrwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85ZTg0N2YtNDE0Ni00NTY2LThjM2Ut MWJhNTQzZWVhZWQ3LzEvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85ZTg0N2YtNDE0Ni00NTY2LThjM2UtMWJhNTQzZWVhZWQ3 LzEvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf4On9mSm LLB7Ag8wWxrWQ/eJTFImoniAlPrcufo2DKidtbTF5xjsCGO+ngSnPDO1896wbVz4 eKA23JM1mPnZvmsoXaZbU46DJ9xH+AvOD2qBzyd23UM8MAVGkL0lIz1AFo0JURo5 8UpCJTCMW25FGepwhR0TPos0jyprBEzYOTEGn64nHRxy6wFfn9TYoSXoU55h1piL j7Ra9615zuZs73G+OKqT+mreWJd2vjKP+kTxwXKPYXYuzAqkp3ZIXAT3Fqp9NYdJ nMW2VyVbsd3y3r+iiqO0duZ/xbyCiv3AOx07vHvVrfdweo7YWe7fomKcP7umBXiH mGiTWZEX4Bzv4A== -----END CERTIFICATE-----Generated at Tue Jun 17 01:35:46 2025 by rpki-client