$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft File: yE1hzRftkuVLszl_HlprOQSsbwU.mft (raw, json) Hash identifier: e4vVA8ovgUSKnUymrj7TnOXqCbjFalmg5QRK1riZfqg= Subject key identifier: 55:63:60:75:FF:F7:4E:A5:4A:09:3F:95:35:31:FF:AC:2E:82:AE:84 Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05 Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05 Certificate serial: 0197827BF2A6A72A47D2B255C33CA77C4BC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft Manifest number: 15A4 Signing time: Wed 18 Jun 2025 10:00:50 +0000 Manifest this update: Wed 18 Jun 2025 10:00:50 +0000 Manifest next update: Thu 19 Jun 2025 10:00:50 +0000 Files and hashes: 1: 7lgq0ctAzIlTDcpOLaQGdaGThZk.roa (hash: e5z2Mfd4VCKCw2JmNleVEdAAScHXO8Xd9p2GShP5Y6E=) 2: IGLb7JdpoxpYlnFXvXAzGRRfnEo.roa (hash: 0HJkbHEqR9KGOAfONOEGNISfFQwVd9M/ZUhb0aiOuaQ=) 3: L_lziZvf0rcW2nhVL69U2cxHt5E.roa (hash: pANePALmK/hOXRwbvUEA/qtpc0qlGhfdWdBBREZqc1k=) 4: YtSu06eBvsaI_VOFmqz1IslXnNc.roa (hash: 0dn7VD8ICYAbfWAEObXxBVJEjbsCWfJ8U7nwROGAGsU=) 5: ckan5dvz7J1ZSK30Drxlo4PWhMs.roa (hash: F1BRb89WpgPtx0JUztwDXeDnh4+IrOFx75odNR04usQ=) 6: dLz_hs_QORbsBLSIa-GqwYxnFoY.roa (hash: +fTN+O03RfwmbM+R0hQdMI6NFyRIvlQwmN4JSANhNh0=) 7: flXkvhrZJ0ZeBKtpmmtVGzFsQKI.roa (hash: Y9UGCFlpeU/Vq7d3cJo997/pq2lWNIQ3AFJn/rIco44=) 8: ikN4SSSIJdpATfbTuF1aqPVQm8w.roa (hash: gunzQ7zSHNaZSvXp8QC6wdbsRU0gF2fXQubVjTHi9K8=) 9: nBGnunXHIlzfqmh1yvjBYc2bnwI.roa (hash: AE0YoKWgcnhxm5wM19OntmREG6LsPgDjKTOjRjiZyzs=) 10: yE1hzRftkuVLszl_HlprOQSsbwU.crl (hash: fz2Sz8Mr49U/dON+YjWnB5GIOhQl7Ra9apOg0a3SGzU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 19 Jun 2025 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:82:7b:f2:a6:a7:2a:47:d2:b2:55:c3:3c:a7:7c:4b:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05 Validity Not Before: Jun 18 10:00:50 2025 GMT Not After : Jun 19 10:00:50 2025 GMT Subject: CN=55636075fff74ea54a093f953531ffac2e82ae84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a1:ba:3d:de:77:43:f0:76:66:f5:69:64:fd: 2d:50:3f:d8:bf:ec:62:83:c9:6a:3c:c1:a5:dc:d0: c2:ac:da:b8:9b:7e:36:84:cc:e3:e1:fa:e3:84:55: 34:88:20:5b:c6:34:32:70:ca:01:cd:05:2a:ab:91: ca:2e:eb:d5:55:76:ba:b9:f7:39:87:11:0f:63:04: 78:79:8f:21:e0:b5:66:55:f5:a4:9b:05:51:99:16: 16:1f:1d:44:8e:2f:d7:ed:86:76:05:d2:d3:e0:ec: 90:33:cb:a2:e0:c5:9b:4a:1d:c9:4e:d3:3f:18:eb: 91:73:28:f4:0c:b5:68:77:44:e9:98:dc:e6:c9:57: a0:80:92:36:0a:3d:11:90:70:5a:c0:9d:05:fc:d0: a3:4e:6f:3b:7b:ba:81:0b:30:13:a9:b2:29:e1:6b: 2a:cf:32:c4:42:d5:be:bc:9a:19:c7:9d:72:d7:20: 6b:84:05:a0:fb:b8:bf:79:c9:f9:19:ee:ce:67:42: 87:fc:b2:7c:e8:33:55:78:35:81:43:ad:dc:14:46: fb:d9:cc:fe:75:cb:0c:ef:17:6a:65:2c:85:28:1b: ca:d8:c3:51:29:ca:21:bb:55:fb:8e:4c:96:00:ae: 5a:18:3e:de:2e:3f:65:2e:09:7c:ba:0d:7e:dc:d1: 45:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:63:60:75:FF:F7:4E:A5:4A:09:3F:95:35:31:FF:AC:2E:82:AE:84 X509v3 Authority Key Identifier: keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:64:c7:cd:dc:24:c6:b9:2c:57:b8:fc:b6:e0:4e:ba:70:a1: 1e:13:01:bd:63:9c:81:f8:ee:80:e5:12:aa:ac:50:2d:2e:88: d6:93:6c:2a:79:db:09:bd:c6:38:b6:80:a4:5a:a8:49:81:92: 8a:4e:c6:48:2f:d2:55:63:70:4f:d5:b5:f1:2b:ef:fc:33:82: 59:d3:25:5d:76:23:de:8e:fb:78:41:ff:a9:a6:8f:ec:1b:00: 76:2d:d6:29:71:45:20:c7:cd:95:54:39:32:fe:00:48:ee:21: 0d:b8:9a:42:43:81:0e:41:54:fe:20:f5:3f:d1:cf:9c:d1:c8: d1:dc:57:e5:b2:e7:d8:43:90:72:cf:19:05:9a:b5:36:7e:71: 3e:5b:92:19:1c:6f:4d:49:51:65:d7:b6:07:65:be:1a:18:f0: 17:17:7b:b5:4c:15:34:98:c8:c9:e0:0b:d3:cd:97:97:46:b9: dd:4a:0a:73:61:a9:c0:6d:97:7e:ec:26:c1:98:f2:2d:a7:c5: 31:dc:26:5e:fa:ed:76:a5:5c:3a:6e:a7:9b:97:8e:fa:61:8e: 87:4a:8a:93:d8:48:44:fa:49:ca:81:6d:2b:c6:fd:b8:24:2d: 8a:b3:fc:56:24:cf:26:c4:b4:4f:a2:b5:68:b6:f0:bd:9d:39: 36:70:09:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZeCe/KmpypH0rJVwzynfEvFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NGQ2MWNkMTdlZDkyZTU0YmIzMzk3ZjFlNWE2YjM5MDRh YzZmMDUwHhcNMjUwNjE4MTAwMDUwWhcNMjUwNjE5MTAwMDUwWjAzMTEwLwYDVQQD Eyg1NTYzNjA3NWZmZjc0ZWE1NGEwOTNmOTUzNTMxZmZhYzJlODJhZTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqG6Pd53Q/B2ZvVpZP0tUD/Yv+xi g8lqPMGl3NDCrNq4m342hMzj4frjhFU0iCBbxjQycMoBzQUqq5HKLuvVVXa6ufc5 hxEPYwR4eY8h4LVmVfWkmwVRmRYWHx1Eji/X7YZ2BdLT4OyQM8ui4MWbSh3JTtM/ GOuRcyj0DLVod0TpmNzmyVeggJI2Cj0RkHBawJ0F/NCjTm87e7qBCzATqbIp4Wsq zzLEQtW+vJoZx51y1yBrhAWg+7i/ecn5Ge7OZ0KH/LJ86DNVeDWBQ63cFEb72cz+ dcsM7xdqZSyFKBvK2MNRKcohu1X7jkyWAK5aGD7eLj9lLgl8ug1+3NFF+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFVjYHX/906lSgk/lTUx/6wugq6EMB8GA1UdIwQY MBaAFMhNYc0X7ZLlS7M5fx5aazkErG8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGIt YzI1Nzc5MmRhZGM0LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGItYzI1Nzc5MmRhZGM0 LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnmTHzdwk xrksV7j8tuBOunChHhMBvWOcgfjugOUSqqxQLS6I1pNsKnnbCb3GOLaApFqoSYGS ik7GSC/SVWNwT9W18Svv/DOCWdMlXXYj3o77eEH/qaaP7BsAdi3WKXFFIMfNlVQ5 Mv4ASO4hDbiaQkOBDkFU/iD1P9HPnNHI0dxX5bLn2EOQcs8ZBZq1Nn5xPluSGRxv TUlRZde2B2W+GhjwFxd7tUwVNJjIyeAL082Xl0a53UoKc2GpwG2XfuwmwZjyLafF MdwmXvrtdqVcOm6nm5eO+mGOh0qKk9hIRPpJyoFtK8b9uCQtirP8ViTPJsS0T6K1 aLbwvZ05NnAJYQ== -----END CERTIFICATE-----Generated at Wed Jun 18 13:21:20 2025 by rpki-client