$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft File: UtycIYtRDAe8Zlmwn70yr-aKv9I.mft (raw, json) Hash identifier: iQdA/QBasLqlGIcsSmbxXO0s6qP76RyjB7O+9RA9AbQ= Subject key identifier: F4:48:41:2B:AF:BE:DA:96:66:EE:B5:C3:9F:3A:E4:50:B8:AB:2F:0E Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Certificate serial: 019768BBDF1DE72004A01BBCCEC697721E69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft Manifest number: 1446 Signing time: Fri 13 Jun 2025 10:00:32 +0000 Manifest this update: Fri 13 Jun 2025 10:00:32 +0000 Manifest next update: Sat 14 Jun 2025 10:00:32 +0000 Files and hashes: 1: 6MBDcuhfmEWVptjguMTmf9iInNA.roa (hash: ymivKpyMNbe7aJ1PuJXw7gwW1NiqWvyizlFzmK9d/qY=) 2: ASEl7JqkqClmtX95ZbF2n_f_sMc.roa (hash: ml87fD1oXz3GGfpvMxIZMFvwwbtQeqmI4KZWPfbpWPA=) 3: FtX2scKMFKjrlX1-jGtQnQQTwEk.roa (hash: kMq1Imts+/ufR0HSWw6rQ0w6zUFocDzOGoNnOCcrl1Y=) 4: HSnWcSNOZ4OY_CttGpyQfNSZAZs.roa (hash: CcLUNhxOoVn4MfFa9d/eD1RrOw7AjPt46Gfl/NCHsbA=) 5: IpHtDFjEB_RXTZiNG6lT--ks0Ig.roa (hash: HxwuSEEfngriOWjFBxSRTVt8Bh+JF8Q1YRC9y08+mY4=) 6: NCn2lq5cktD_7ygfHIEl8kG0BGw.roa (hash: QVkLVYRylQrSQOKAeM/S18wN4GiAOMJzthGR51UDN7s=) 7: UtycIYtRDAe8Zlmwn70yr-aKv9I.crl (hash: 9jApKNM1qeDNAIU6JPLRAALs32+uLoI6ZtdfNJzun94=) 8: lbrPEbSuq8MGiugfDCfuWsxoHWM.roa (hash: aEziOZhVwJ11tjsb9rfj1shhPuYeS1ripLduKA6Erwo=) 9: lkKfm_f_wEEUNGQ-mYrqpjp6pn0.roa (hash: 1IEa2ddZDnV+Za6fAq2QN5r69jM42zaWvCVu/tVx9UM=) 10: ppkwZSnQe_B1w9UhP5ke1_jD4Vk.roa (hash: hVKC9oxQ4TOks3wr3lJFJ2Whe3zItAMI4ja6SGb5ZM4=) 11: uRkfgF_A6CqJRrBsGaN5ZRsc3pQ.roa (hash: U64dqyheSLqIXH63bjPi11po8JDmbOls6AydyTR+Q/k=) 12: wQQ_d2GjHPxfeuZhiPq0NlQrsUc.roa (hash: X6PXX89iZwx82Sdz6LkQl0Ci0LO6DvoxlhCySztAfS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 10:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:68:bb:df:1d:e7:20:04:a0:1b:bc:ce:c6:97:72:1e:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Validity Not Before: Jun 13 10:00:32 2025 GMT Not After : Jun 14 10:00:32 2025 GMT Subject: CN=f448412bafbeda9666eeb5c39f3ae450b8ab2f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b1:02:03:c3:3a:5f:90:91:1f:3e:1d:98:60: 3e:28:68:e2:a8:03:9f:06:8e:57:72:85:50:9f:9c: 2a:53:2b:3d:43:95:2c:13:d4:40:b4:4a:08:37:02: e8:01:29:96:f0:2d:af:5e:23:6b:a5:02:d5:50:13: bf:92:f5:5b:58:66:f3:34:f8:6e:f5:f2:bc:cf:ef: 48:05:23:31:be:2e:31:13:b6:9e:85:23:2b:95:63: 7f:17:c3:95:1a:ac:a4:ab:c9:1b:6d:6f:78:32:2c: 3f:97:66:56:71:9b:f0:13:8f:07:cc:38:98:c3:e1: 59:0b:5c:1d:f8:81:0f:ef:3e:15:15:1f:7d:7d:5e: 82:f7:e1:6d:98:61:ae:98:10:c4:55:12:e9:a3:54: 08:4c:9f:d2:21:0d:ff:c6:52:64:1d:5c:0a:c7:d7: dc:47:c0:79:70:41:3e:be:b2:2c:b9:cf:16:0e:74: 87:11:9d:a1:1e:92:25:00:74:dd:d5:fb:39:20:95: b9:99:0f:2c:bc:f4:a1:a1:75:6e:42:1c:d3:9f:d2: 27:a3:e8:73:f8:05:16:03:df:c5:f0:56:e0:f8:36: 2b:57:7d:d3:a3:65:a8:93:1a:37:ee:11:6b:8c:59: 9d:3d:2b:79:c3:96:71:bf:31:7b:62:ac:48:84:91: c6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:48:41:2B:AF:BE:DA:96:66:EE:B5:C3:9F:3A:E4:50:B8:AB:2F:0E X509v3 Authority Key Identifier: keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:1d:60:11:17:a7:00:0d:d5:55:81:4f:0b:57:1c:e1:6d:42: fe:4a:cb:a2:9e:a8:84:86:cc:20:dc:8a:6a:b9:54:0c:90:79: 82:d7:b0:72:d0:4c:5a:aa:0f:ba:af:0f:03:cb:9b:90:55:8e: 4a:1c:03:19:e7:72:50:a0:5a:ed:4b:81:7c:92:a4:01:b0:e0: e7:32:be:de:75:ba:98:42:a3:f5:e0:fa:92:17:d8:aa:85:ac: 78:6c:3e:97:fd:a7:18:8b:d2:df:4d:84:9f:37:a9:5e:fa:e3: 78:9b:41:da:8f:cc:06:e2:80:68:88:57:09:1a:2c:d1:5b:3e: 2c:aa:3f:63:12:43:e5:02:8b:64:e4:2f:5d:56:9a:a7:f4:8f: 62:51:c2:48:4d:42:f9:fc:88:53:cf:a8:ad:cc:5a:f8:7a:0f: 80:9a:71:f9:76:8b:3e:a7:ce:3f:fe:a0:f8:8c:18:7b:18:2b: d1:6a:1f:11:70:84:60:45:6e:b8:1b:c9:92:c0:bc:20:58:6b: 37:99:94:32:9b:a6:db:ea:3d:cc:08:6b:19:94:77:c1:18:06: 9b:98:96:d8:39:db:ed:88:61:78:c9:9a:17:f9:71:94:27:95: 35:44:1f:10:40:de:07:21:5a:a1:35:b2:e1:46:64:16:c1:d7: a1:be:ea:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdou98d5yAEoBu8zsaXch5pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZGM5YzIxOGI1MTBjMDdiYzY2NTliMDlmYmQzMmFmZTY4 YWJmZDIwHhcNMjUwNjEzMTAwMDMyWhcNMjUwNjE0MTAwMDMyWjAzMTEwLwYDVQQD EyhmNDQ4NDEyYmFmYmVkYTk2NjZlZWI1YzM5ZjNhZTQ1MGI4YWIyZjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLECA8M6X5CRHz4dmGA+KGjiqAOf Bo5XcoVQn5wqUys9Q5UsE9RAtEoINwLoASmW8C2vXiNrpQLVUBO/kvVbWGbzNPhu 9fK8z+9IBSMxvi4xE7aehSMrlWN/F8OVGqykq8kbbW94Miw/l2ZWcZvwE48HzDiY w+FZC1wd+IEP7z4VFR99fV6C9+FtmGGumBDEVRLpo1QITJ/SIQ3/xlJkHVwKx9fc R8B5cEE+vrIsuc8WDnSHEZ2hHpIlAHTd1fs5IJW5mQ8svPShoXVuQhzTn9Ino+hz +AUWA9/F8Fbg+DYrV33To2Wokxo37hFrjFmdPSt5w5ZxvzF7YqxIhJHGVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRIQSuvvtqWZu61w5865FC4qy8OMB8GA1UdIwQY MBaAFFLcnCGLUQwHvGZZsJ+9Mq/mir/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYt NTJmOTdiMjc3ZDFmLzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYtNTJmOTdiMjc3ZDFm LzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgB1gERen AA3VVYFPC1cc4W1C/krLop6ohIbMINyKarlUDJB5gtewctBMWqoPuq8PA8ubkFWO ShwDGedyUKBa7UuBfJKkAbDg5zK+3nW6mEKj9eD6khfYqoWseGw+l/2nGIvS302E nzepXvrjeJtB2o/MBuKAaIhXCRos0Vs+LKo/YxJD5QKLZOQvXVaap/SPYlHCSE1C +fyIU8+orcxa+HoPgJpx+XaLPqfOP/6g+IwYexgr0WofEXCEYEVuuBvJksC8IFhr N5mUMpum2+o9zAhrGZR3wRgGm5iW2Dnb7YhheMmaF/lxlCeVNUQfEEDeByFaoTWy 4UZkFsHXob7qUw== -----END CERTIFICATE-----Generated at Fri Jun 13 19:21:46 2025 by rpki-client