$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft File: nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json) Hash identifier: Ld19MvDlOjIpv6OTNaVB5H9NKt98uW/6gbIX8LpHcuU= Subject key identifier: 23:C0:27:61:F8:8C:32:A8:DF:57:DA:3D:1D:0C:79:F4:DD:97:AA:5F Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 01977188D9A15EC100A901CE5B168BA6A271 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft Manifest number: 0F5E Signing time: Sun 15 Jun 2025 03:01:23 +0000 Manifest this update: Sun 15 Jun 2025 03:01:23 +0000 Manifest next update: Mon 16 Jun 2025 03:01:23 +0000 Files and hashes: 1: 5twkGWnpZ3caWcoF0F7nZ3MnxRQ.roa (hash: Hj9ctK8yUmftQlZpCOc5gcL4pBH+76rKw29EPYTV1fY=) 2: 6t_-rwl5vkceJUl9xfuErIgk5XQ.roa (hash: UgA7/ParQEm4RUB+nS1eICM0VcT/VJB2T/2XjYuyjiU=) 3: CcOTWwBfhnDK4i-Cl6vgTQ1Ne6Q.roa (hash: 0gfOeo67IeexaN6S4XXz6/wYaUsrA1sXsSwqEGJjGB8=) 4: Kkr4WQTbiLrBJjIFNHmfQjqdMFs.roa (hash: AX2E33mALAyiSH2uL+jaoucILuyqIMUcyM5PTXw0LYA=) 5: XDROFBDLzXZk58Wa7Gj_bxIFP24.roa (hash: oEZB4Wy5f3UZqEPOPaZ8r51Wy4lzW93yWdCW8EWeAw0=) 6: fsRjNoJDy9POHF18ZkBOzQiMl94.roa (hash: pTBEz/UhwNCD7057vDv5QDiSVRnDRK75JX++XfB+B70=) 7: l0gHM8GvVK6QwtZ12bJdUWZyAgA.roa (hash: EQ1dP2YRTk2eZV0a40sNzCpIDgU0CGJQGOvWRKK6OaU=) 8: lIqtXZgZb6FK3xchEu_KzpPH9HY.roa (hash: EF/nDh6v7FHlrVK+Jno0NvRyT9dpjTxvni+KKTpPgho=) 9: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: dFXwgzkonI1LUXbwWyPz64RqYS5TqJXrZyfnrdYmIgY=) 10: uHCer9bSYtAYzAW97IkYAtxT0oY.roa (hash: pEZrL5HUVwpESwP8P9Avj4b8s7dLWZdI+MAnQfTy42g=) 11: zLYfKKvwZksRC-Mec9uQxezCf-I.roa (hash: 7jSn1GJtzfCE3yqBQcJd/SMTsqwM51FfYe/cCLi5Z4A=) 12: zS2PBrD2vmlXLTrGFHERr-Tg3sM.roa (hash: ZKfnpYOgYarKcHUc2HZAGzDoCt3IGKzpVqNwP6NLT/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 22:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:71:88:d9:a1:5e:c1:00:a9:01:ce:5b:16:8b:a6:a2:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Jun 15 03:01:23 2025 GMT Not After : Jun 16 03:01:23 2025 GMT Subject: CN=23c02761f88c32a8df57da3d1d0c79f4dd97aa5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:90:41:95:2e:3c:2d:85:78:99:58:2b:ee:01: bd:5c:20:ea:c2:5a:ec:75:71:92:bb:0d:ca:ea:b8: 4d:01:4d:64:9b:c8:06:3f:25:f6:30:0d:07:f9:3f: 76:e8:04:23:28:3f:0f:9b:97:f3:d3:df:b1:53:9a: fb:46:1f:a2:b9:58:90:d3:c9:c0:7d:a0:84:4a:28: ac:c3:13:5c:6d:90:75:4f:5f:1f:9a:c6:78:d8:d5: eb:ba:0a:c8:c0:86:8a:85:d5:c2:35:79:36:ba:13: b1:1c:ca:ea:62:af:4f:a3:3b:b3:7c:46:ed:16:eb: cd:9c:c2:ea:4e:26:60:a7:3e:bd:3d:96:47:aa:9d: f0:a5:9f:37:a3:53:b6:f9:09:35:d6:5a:f5:0f:6b: 72:ae:11:07:2d:10:f3:ed:06:2f:3c:1c:5d:ea:3d: 50:8f:27:b0:f6:4a:16:c7:b4:a6:77:80:77:04:18: f5:f8:4b:03:50:e6:29:68:a1:d7:12:6d:c7:96:11: 34:7a:83:51:62:88:01:e5:b0:de:c0:6b:01:d4:18: 7a:5d:16:1c:6b:1c:5b:b8:07:c1:96:bf:19:b6:64: 0c:23:82:df:b9:6c:8e:54:e2:b0:b1:7d:1b:fb:4f: f4:69:d3:20:be:ab:ba:fa:1b:b8:54:91:4d:1a:60: 80:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C0:27:61:F8:8C:32:A8:DF:57:DA:3D:1D:0C:79:F4:DD:97:AA:5F X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:25:77:73:74:2e:de:48:73:eb:e8:64:91:21:0b:5c:0e:69: d9:49:0f:2e:be:d8:92:bb:7c:65:e8:51:a1:33:e3:84:19:82: f1:66:30:14:d7:4e:ef:80:8f:f6:19:ce:86:54:ff:0f:ed:6c: 92:98:29:fe:c4:a9:ad:80:2c:15:5f:6c:28:93:c5:54:da:e7: a5:ed:77:27:c3:b7:23:0f:9d:9d:ab:e5:29:f6:e7:ef:9b:99: b0:41:da:b8:aa:d5:da:83:5e:dd:44:3a:70:ec:e8:96:5c:8e: a6:4d:22:aa:0c:e4:b7:46:9a:28:b8:9c:c5:80:87:d7:ad:d9: 19:b8:7e:8b:e8:d9:fc:c5:31:1e:3a:80:a1:63:e8:14:7e:9c: d6:ac:02:ed:ab:08:72:83:46:c5:db:d0:d9:9b:f2:fb:1e:0c: f8:90:ef:d0:42:0c:13:f4:c2:d3:d0:76:1d:73:f7:34:d1:59: 29:e6:d0:e0:60:7f:90:e4:d9:c9:15:ed:c8:68:93:99:6f:85: b1:73:6f:eb:1f:04:04:43:3a:b7:3d:4d:5e:da:d6:43:2f:bc: 05:b9:08:66:e0:bb:25:9c:9f:45:af:40:a9:a0:c9:b6:70:66: 08:4e:13:88:04:f7:01:33:5e:a4:2b:7d:a6:e0:71:28:9e:32: 40:c2:cb:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdxiNmhXsEAqQHOWxaLpqJxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjUwNjE1MDMwMTIzWhcNMjUwNjE2MDMwMTIzWjAzMTEwLwYDVQQD EygyM2MwMjc2MWY4OGMzMmE4ZGY1N2RhM2QxZDBjNzlmNGRkOTdhYTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5BBlS48LYV4mVgr7gG9XCDqwlrs dXGSuw3K6rhNAU1km8gGPyX2MA0H+T926AQjKD8Pm5fz09+xU5r7Rh+iuViQ08nA faCESiiswxNcbZB1T18fmsZ42NXrugrIwIaKhdXCNXk2uhOxHMrqYq9PozuzfEbt FuvNnMLqTiZgpz69PZZHqp3wpZ83o1O2+Qk11lr1D2tyrhEHLRDz7QYvPBxd6j1Q jyew9koWx7Smd4B3BBj1+EsDUOYpaKHXEm3HlhE0eoNRYogB5bDewGsB1Bh6XRYc axxbuAfBlr8ZtmQMI4LfuWyOVOKwsX0b+0/0adMgvqu6+hu4VJFNGmCAuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPAJ2H4jDKo31faPR0MefTdl6pfMB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYyV3c3Qu 3khz6+hkkSELXA5p2UkPLr7Ykrt8ZehRoTPjhBmC8WYwFNdO74CP9hnOhlT/D+1s kpgp/sSprYAsFV9sKJPFVNrnpe13J8O3Iw+dnavlKfbn75uZsEHauKrV2oNe3UQ6 cOzollyOpk0iqgzkt0aaKLicxYCH163ZGbh+i+jZ/MUxHjqAoWPoFH6c1qwC7asI coNGxdvQ2Zvy+x4M+JDv0EIME/TC09B2HXP3NNFZKebQ4GB/kOTZyRXtyGiTmW+F sXNv6x8EBEM6tz1NXtrWQy+8BbkIZuC7JZyfRa9AqaDJtnBmCE4TiAT3ATNepCt9 puBxKJ4yQMLLcQ== -----END CERTIFICATE-----Generated at Sun Jun 15 07:44:39 2025 by rpki-client