$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: YvG8I6fCMj8XRTW7D+OSo5umuX/GUZI9X5eMDCjIv3Q= Subject key identifier: 15:DB:BD:00:FB:AC:E1:AA:4D:65:B0:A7:65:13:F7:D4:95:DB:1A:49 Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 01976F998233ECA3E5D52511D4E118F4DA32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 15F9 Signing time: Sat 14 Jun 2025 18:00:20 +0000 Manifest this update: Sat 14 Jun 2025 18:00:20 +0000 Manifest next update: Sun 15 Jun 2025 18:00:20 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: Hku1pvhAwtfclfjjJLSILw/TVtHPiWvw5wwWWOxdBAQ=) 2: 0httGqgqnBD-cyBZkV5zP0LpIO4.roa (hash: e5sFUpuEkPspxdtpRMty2JvPNTXvUGFt57BwVt8wTQk=) 3: 20w83vHPyYnLSWr2qqWCmD2gZNY.roa (hash: ClK+X58yEmA5ygXK0mo1ANs6qUTT/V8TWnwZD7Tusy4=) 4: 2s4ghGsMJ4UjziczDpj7_nBo6GE.roa (hash: jn5a6RlzlWn5orrS4JyYzumT++ei7+4zrAsQWhkhOUE=) 5: A54XMgeqXZ28KgXVcDWv9oxGE0E.roa (hash: NnXzMVLfhy1fVfKaWA1h1cuB453trnHm0ShhBdMttbA=) 6: BBOySe2ApZYQpT0wPGJ7zV8XzsA.roa (hash: N6DdRHz14Xr18smaWB+L/0EFbg9FmP8IrnnkdfkP5sA=) 7: BjUAlonCB1CjmbTY52apZdHRGFk.roa (hash: vBVzlWqlUuZ7F5qeBjljk7LIKAFRXIaJSFWC4T698rw=) 8: DRLbJL7meHAnOmMNiiVi2VhOOMc.roa (hash: Lp9UgdizeLrJK6Zry0u6HD2WAPxw4E+r1wzuyfdMmtU=) 9: EXfTHtw-3BJt59JkT36dPstORFo.roa (hash: MhW4Yoiges2mvr+KewFgpAREQV0Mu5obgGNxi9eeOQc=) 10: FRvZFyOxFoddRwR8NWy2iDyogY8.roa (hash: bzSWZTj+o0faBM1dsh+8mBoLaK0jcFLNse7M1DVkpUs=) 11: G8jjrx8EZbysXI_Z13e_0NqYZdU.roa (hash: GPSkTNwl/L8vVjia7LOR9ahqlqqIZvGFNcWIGIi/vHw=) 12: Ib_gkG0OXaC9YGgBGzmQj28oy6Y.roa (hash: Dfa7w0wU+Mwe8FRxusOe5J5w207sEqOGP3MEUAezXaw=) 13: Jp0UMtlRd8ZwvCOhqfD_ADrBKLI.roa (hash: mR/skrtMXmYrNl0WIwSjaGFdp8tWtvYO7SMbQmVqf6A=) 14: MguR744HGmOoEMdrlIzPUQQNYfs.roa (hash: Ve4h+6FdNbKYu9bYvRE5Dbmxn7BK8VvZ01cl79qxeJc=) 15: PcsvqoFss2sjt8KP5dE_s9b5R94.roa (hash: 2VnZlh9WN/gvQzrunwflGg0cw7Ym2P+YsV38lpVH0Gs=) 16: RySOnwd5yNUvkpOdlWzbq8gD58I.roa (hash: pMm1Q5jN9tu+9MZBtGXjdw1riel86JfdVWVMRs8pgEY=) 17: UNh6P6o5iukKyngJ923OKln6euE.roa (hash: N5ex54TauXC69hfaRmQEjxuyvZMfnOJEFnqZWvxkb8A=) 18: XXSSAkKxHIvFb1XDuVgAK48p7oI.roa (hash: p4mx1wVBI5jfCHEyW7RDH/AavCZwfWlBpFNbLCutJY0=) 19: Y5c3qkFCpv03-ICNcuAXdHgS3cY.roa (hash: XJDCD20D/hEgr09ZL/gnt/32UJp0okrjk8WR5CoxVyQ=) 20: Y6R9BZ4jbo-SeP4MKzTkUzdRmEs.roa (hash: T03e4fff7Y/zXUb0yVVk+lWsYWaY+JCxTDBS+p8Hygw=) 21: _Ja5VSGfVwaP_RssqzUEn4YMRnM.roa (hash: IopLtmpqrddq1TLUa3ph8Vkd8Gg6tUuEa1Mf8B120SY=) 22: dSIvoRbcXmjEhaD-HdyHYcdmt90.roa (hash: JqFQVPXSWhIrd/AlZzo80JSKjqGLV5nybtYrZ/HoQns=) 23: fW0mZX2qVdA0eoUEboZhAE59bUE.roa (hash: stVjqf6xlyz/MOhoo6Rt330zmsp7vd4IC5S2fUEJ5WM=) 24: hVK512RaS7Wqoko0eCeNgWu9miM.roa (hash: tpa1Mpq3iNlKpncPJwo9VA05AS/nxDYqEa9TqaOOX08=) 25: kqDz7smZzEggwnOtTZ91wrlBE4c.roa (hash: OteTjZY0hrzoBDeoZG9laIbeOhFIt32mklvyy1YBT38=) 26: m9Q0QpkVO1rZKT8wIA-lB6ceYcg.roa (hash: yW9VuP+7IZqfB9uY1adWMtzwRUiSlhz/2UYbCN1BQSU=) 27: oqSgizr5ODUUGjBb8_Wzxokx-xk.roa (hash: Kl53NJDKPjecKCh1ZqXsoFCQIzYfPyjvOORgLlse+gY=) 28: qlt-CjR0Oi0L3lo2PS7A4jbvIUg.roa (hash: iydTkBpS1P6s3+CKe74qws4olK3ajXbhwYqoUw/uhBk=) 29: tdzsaKxsamCWBVwoUkqT8RggY6A.roa (hash: Fv0PNntXjBHiuO1Z367HBdmxJtFfh7CR44dwT354/lw=) 30: vFNkivgTExOsjU64HiM4VzsQFiw.roa (hash: DXIqZ5v2rgtSNx+D9s1xP6RBmK/3bmgJ3j5QKRP0qEA=) 31: wMbP2rODQDC-jcOXAyW7ktyAwFs.roa (hash: 9dxgb9cFX2rvzK0yUiEPPHMObwlTuLCycMbvyIulqKU=) 32: yNK_se_8Y1MH-IyQZOfpZj_aArA.roa (hash: Y/8odYpFkGDQCB6ybQitBRTCfwLFaWn7M7svPHhRrhA=) 33: z4dbT2rdI1MPHPzn2a4SSpvkt3E.roa (hash: pftbqIKgzEeVO9sl0LAVO5XHYPxIgJ6YwaN9JqNCTzk=) 34: zOEcpqc4Lmql0YgdzvWYJWByYls.roa (hash: vPKZMRU6d6wwmA0Kz8rV4xNxNMM+TmRV1+QZn0m8hZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 18:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6f:99:82:33:ec:a3:e5:d5:25:11:d4:e1:18:f4:da:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Jun 14 18:00:20 2025 GMT Not After : Jun 15 18:00:20 2025 GMT Subject: CN=15dbbd00fbace1aa4d65b0a76513f7d495db1a49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ea:10:e1:61:85:29:24:5c:01:42:ec:4d:41: d2:24:47:6f:55:7c:7a:0d:12:59:77:61:09:6f:cf: da:0d:06:31:9b:1c:5d:71:02:60:b7:aa:7d:94:1c: 56:19:66:bc:74:51:c1:9b:eb:04:61:be:c9:be:8c: 3e:a1:76:f4:1e:fd:4b:12:8a:31:db:00:86:7b:15: 4c:86:d4:47:30:fa:59:81:26:21:b8:3f:1c:fc:3e: 81:97:f4:e7:cb:a4:50:15:e0:be:92:f9:6b:a1:32: c7:9d:77:7a:b8:90:b7:3f:70:bc:f6:22:50:d0:e5: 43:15:a0:fc:74:70:5f:b1:00:45:d5:92:d3:6b:84: e1:59:b5:fa:46:ff:c1:9c:61:90:a1:7a:60:28:7c: d5:96:aa:ea:9c:bb:f2:61:01:69:71:e1:a2:91:39: 22:f4:e7:c6:f9:75:10:0f:7c:b1:77:56:a0:5c:66: 0e:3e:f2:94:e3:8d:dc:fd:d4:30:f0:2e:f0:0f:12: d8:58:17:de:ac:00:bd:92:32:c8:7a:8b:3d:54:dc: 57:d0:b9:4a:db:7d:84:11:f7:6c:d6:16:54:27:81: db:20:ba:eb:e0:04:24:a0:1f:cd:1e:d4:82:e5:36: d8:d7:62:25:09:e3:ed:ec:7e:a8:e3:71:33:c1:39: d7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:DB:BD:00:FB:AC:E1:AA:4D:65:B0:A7:65:13:F7:D4:95:DB:1A:49 X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:8c:4a:50:b2:09:8f:03:f9:01:82:e8:20:5b:4a:68:ae:39: 62:7b:54:8f:08:e1:64:1e:00:34:50:a0:91:4a:b5:ad:0b:59: 6d:6c:7b:d6:df:a3:6c:3d:0d:f9:90:e5:41:51:ef:4e:8e:fc: 06:32:02:9a:2c:25:12:ac:03:5a:7b:03:3b:4d:91:43:e2:67: 78:b2:f4:71:6a:a7:d8:77:0a:7d:b3:3e:e7:cc:f6:01:3c:55: 65:aa:9d:02:2c:9d:16:76:a4:b0:f9:a7:72:72:b7:88:f6:d2: b5:6a:ed:c5:63:cd:2e:c6:14:b7:15:29:29:5c:04:5c:fc:5c: c8:8d:f4:fd:5b:f2:2b:7a:1e:8b:46:05:ed:ce:07:5b:48:4b: 0a:a9:10:da:50:f4:df:b6:de:7b:5c:2e:ce:3a:af:28:ef:2a: fa:ca:16:26:6e:fd:7f:7a:15:11:96:7e:98:b3:63:11:52:33: 77:68:9a:57:39:d0:b1:6b:7f:be:df:19:5e:5e:42:bd:4d:68: a3:cc:5a:ba:ac:ee:76:44:87:a6:2f:c4:f1:7b:02:25:5f:b4: da:40:4a:5e:58:9e:ce:8b:49:ce:40:99:4c:da:dd:31:d8:55: 0a:16:bd:8a:28:f6:6b:a0:cf:ff:55:cb:16:2f:11:47:3c:46: 71:46:15:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdvmYIz7KPl1SUR1OEY9NoyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjUwNjE0MTgwMDIwWhcNMjUwNjE1MTgwMDIwWjAzMTEwLwYDVQQD EygxNWRiYmQwMGZiYWNlMWFhNGQ2NWIwYTc2NTEzZjdkNDk1ZGIxYTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOoQ4WGFKSRcAULsTUHSJEdvVXx6 DRJZd2EJb8/aDQYxmxxdcQJgt6p9lBxWGWa8dFHBm+sEYb7Jvow+oXb0Hv1LEoox 2wCGexVMhtRHMPpZgSYhuD8c/D6Bl/Tny6RQFeC+kvlroTLHnXd6uJC3P3C89iJQ 0OVDFaD8dHBfsQBF1ZLTa4ThWbX6Rv/BnGGQoXpgKHzVlqrqnLvyYQFpceGikTki 9OfG+XUQD3yxd1agXGYOPvKU443c/dQw8C7wDxLYWBferAC9kjLIeos9VNxX0LlK 232EEfds1hZUJ4HbILrr4AQkoB/NHtSC5TbY12IlCePt7H6o43EzwTnXiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXbvQD7rOGqTWWwp2UT99SV2xpJMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAoxKULIJ jwP5AYLoIFtKaK45YntUjwjhZB4ANFCgkUq1rQtZbWx71t+jbD0N+ZDlQVHvTo78 BjICmiwlEqwDWnsDO02RQ+JneLL0cWqn2HcKfbM+58z2ATxVZaqdAiydFnaksPmn cnK3iPbStWrtxWPNLsYUtxUpKVwEXPxcyI30/VvyK3oei0YF7c4HW0hLCqkQ2lD0 37bee1wuzjqvKO8q+soWJm79f3oVEZZ+mLNjEVIzd2iaVznQsWt/vt8ZXl5CvU1o o8xauqzudkSHpi/E8XsCJV+02kBKXliezotJzkCZTNrdMdhVCha9iij2a6DP/1XL Fi8RRzxGcUYVgg== -----END CERTIFICATE-----Generated at Sun Jun 15 00:32:45 2025 by rpki-client