$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft File: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft (raw, json) Hash identifier: UG/ctheNMipp4q499Jo2hA2Pv5+TBg6+KFWIwQCIpnQ= Subject key identifier: A7:6A:4C:77:D0:B8:68:A9:2F:B7:4D:B2:A7:0F:5B:E8:12:50:2C:AD Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Certificate serial: 01976884EADB33F0B6CB9293E0B19F0B961A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft Manifest number: 0F93 Signing time: Fri 13 Jun 2025 09:00:30 +0000 Manifest this update: Fri 13 Jun 2025 09:00:30 +0000 Manifest next update: Sat 14 Jun 2025 09:00:30 +0000 Files and hashes: 1: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl (hash: SGUkdlrDORyJN8U9O95hyICE6NNulmPooNNOe0rve7M=) 2: 7KfLp6tWihAhdW_ZCJGaxH-KxhA.roa (hash: TNNFwSmMyWVi4jN+jvMQ3wmmO3p3q2BXU7y9CZpeBFo=) 3: 7MXqFmSDn9CysMo06FTHgJQ2_0c.roa (hash: pRJZ+O4KaYUVDmpuGbM8GWj2rTmrhgZ1My3xSIZT8Yk=) 4: 8GeGNNzjzZvJIEAAhJi9tW2bbrA.roa (hash: Eto9TySCaxnkkdyIGeX6PMXh8s89OGTNecNbv02FHmY=) 5: AqLYl2EEpDBKLe2KxdidB5eosFo.roa (hash: S1zKj5giVP11rpPOQyfM7On1gt71F+Z2ArRuS6GfdUA=) 6: BinZKeyg5gKkO8gwYJ0Ze8CeRxs.roa (hash: y9nENbUlBNsJYj+Cw11EQBzVD35m8OwMSWBUyRfdWao=) 7: CWwZKtjic8hgoUqW8Q2C2AbAOcg.roa (hash: kwrireSUCM8B5X7b/jFwe6owVISrGhqj47+KxFuhlXE=) 8: IEo8sRaltfiW8RiH-ZK4ayHgV4k.roa (hash: QI22bjJaEKnKFlLmf7Ahb8HfuSs1xMjqWqMhsfHybVI=) 9: JS3mwrKoM_bu1YlMg44SqBJyzi4.roa (hash: FctYPf15GQv8egu27KZUZZfAkIishBp5/PDkotJF9Wg=) 10: ZH0QvaHOPvJPYEbUbSGF-chYfuI.roa (hash: GNpLUKAR49JusHGuTxHkn0FssgkY3qDBV+p8eW6v2dA=) 11: biowetcg3ehch8_ZT-Bjgdr3xVQ.roa (hash: +3UkGpMA2we3DWKym0QAg124Kd/FTF+tUn4YLgIyHpE=) 12: gmGmlBXuT4XMadwFIMM_Ru7A8rY.roa (hash: C02/amx+lTSpWSc0IFfRlXGRMUsC7V5LK9TrUNGhpXk=) 13: j0duG-Ijddau9Fj9XQZGhj9d5E0.roa (hash: jAtA5pws2q4wQ+M2hNZZyClsEg5rjHmu2VOiOpDAE88=) 14: mP8Qz54E01SquciLEGB10XN2R-M.roa (hash: TdXFl7ZveLTgT4OrOlqkJ84pFNT0T+LUDZ5933YP0mE=) 15: suXcRzS6-_4AE_w0ZJlYPW8wMRM.roa (hash: +PBYO+10etR0ZMMQ1FwMVF/GjPtirIZFSfWGb9cD2rU=) 16: yRlATHfw4VPtk07WpZ6YJCL0ujk.roa (hash: qFhl3+M+zqPL0w/p5+UX5EFi+fLod6eaZpO9ZGTbXcw=) 17: yVFu2BG-2jPO42o54RBasvcduFQ.roa (hash: 6xPh274P2CTFpVhbpm7wdZ5x4IvYPBNr1EUV4XIfsgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:68:84:ea:db:33:f0:b6:cb:92:93:e0:b1:9f:0b:96:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Validity Not Before: Jun 13 09:00:30 2025 GMT Not After : Jun 14 09:00:30 2025 GMT Subject: CN=a76a4c77d0b868a92fb74db2a70f5be812502cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:55:07:39:c2:21:3f:77:80:1f:5a:c6:6c:bc: a8:ab:96:f3:07:7c:01:60:9e:1b:50:5e:a3:39:61: 04:e5:e0:2a:4c:8d:e1:7d:d5:84:3d:4a:65:11:a8: a5:b4:11:cd:f0:a1:ac:a2:e9:b7:23:eb:5d:a4:41: 73:dd:7b:69:a5:00:a3:4c:bf:06:01:31:ee:7f:b4: a8:58:61:51:ae:11:69:4c:f4:bf:14:9a:2d:d4:92: 26:04:bf:02:f2:61:16:e2:7d:57:6b:3f:3e:95:74: 78:10:17:b2:71:4c:f2:7a:ef:7a:d6:0d:80:05:bf: 2b:bc:57:9c:50:1f:04:1b:8f:2d:fc:1e:0d:d6:e8: bd:ee:4a:07:f2:a5:9e:ed:c0:da:1a:18:f9:ca:08: 59:47:bb:7c:71:db:51:23:90:65:91:a7:b7:0a:35: 68:fe:b0:5a:53:87:0e:72:6a:26:f4:f0:80:7a:4f: 00:9c:ef:d9:68:bf:52:31:ab:7e:7e:70:fb:b5:ed: fa:af:c2:ef:50:a4:76:db:f0:e4:34:a2:51:36:7e: eb:bc:ab:55:73:86:26:41:5a:b7:6f:05:09:a9:fb: 2f:fa:84:ae:54:e9:f1:b5:f7:48:15:fb:1a:e4:11: cc:b2:0b:91:d9:c1:93:90:3c:8f:a5:52:47:a1:27: 7b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6A:4C:77:D0:B8:68:A9:2F:B7:4D:B2:A7:0F:5B:E8:12:50:2C:AD X509v3 Authority Key Identifier: keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:ef:71:ac:3c:e2:e8:48:17:5e:95:73:ac:a7:20:40:79:0a: 9d:f1:07:11:88:75:2f:14:74:96:25:08:1a:6a:c9:04:c9:2d: c7:73:a7:1c:25:27:91:90:fb:b7:06:75:70:e9:49:cc:7b:42: 8b:26:bf:01:5a:56:50:9a:23:4c:1c:d5:57:29:17:8e:1f:2a: 80:3a:61:4b:bf:18:27:5c:16:aa:f3:14:75:12:b2:83:2c:a7: 7d:d1:8d:72:ee:aa:8f:88:7c:7a:30:9c:2c:e7:e2:14:1f:8b: e6:9b:a6:b1:91:34:bc:8a:69:d3:54:db:2a:c4:27:87:bd:4e: 26:64:40:43:41:d0:92:09:d2:08:3e:6c:10:9a:50:28:da:5b: 39:6e:56:74:dd:6a:05:a5:ba:58:dc:17:59:17:34:6f:5e:b7: dd:b4:81:2e:fe:8c:77:36:de:4d:71:aa:06:7c:4a:89:f9:f2: ef:25:3b:2c:36:c8:7f:4c:26:d6:c5:8a:6b:12:61:47:38:c6: de:3b:e2:c8:e1:95:ea:75:2e:92:27:3a:2d:b5:a1:c3:3c:a8: 16:c2:ca:af:bc:dd:11:4e:67:22:04:ed:64:41:d3:fd:fb:2f: 6d:f7:af:a4:bd:02:43:c0:9b:a5:fa:b3:36:8a:ec:9d:19:c8: bf:27:3b:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdohOrbM/C2y5KT4LGfC5YaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm NjljZGEwHhcNMjUwNjEzMDkwMDMwWhcNMjUwNjE0MDkwMDMwWjAzMTEwLwYDVQQD EyhhNzZhNGM3N2QwYjg2OGE5MmZiNzRkYjJhNzBmNWJlODEyNTAyY2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFUHOcIhP3eAH1rGbLyoq5bzB3wB YJ4bUF6jOWEE5eAqTI3hfdWEPUplEailtBHN8KGsoum3I+tdpEFz3XtppQCjTL8G ATHuf7SoWGFRrhFpTPS/FJot1JImBL8C8mEW4n1Xaz8+lXR4EBeycUzyeu961g2A Bb8rvFecUB8EG48t/B4N1ui97koH8qWe7cDaGhj5yghZR7t8cdtRI5Blkae3CjVo /rBaU4cOcmom9PCAek8AnO/ZaL9SMat+fnD7te36r8LvUKR22/DkNKJRNn7rvKtV c4YmQVq3bwUJqfsv+oSuVOnxtfdIFfsa5BHMsguR2cGTkDyPpVJHoSd7yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdqTHfQuGipL7dNsqcPW+gSUCytMB8GA1UdIwQY MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt ZGQyOTRjMzc4ZjZjLzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAae9xrDzi 6EgXXpVzrKcgQHkKnfEHEYh1LxR0liUIGmrJBMktx3OnHCUnkZD7twZ1cOlJzHtC iya/AVpWUJojTBzVVykXjh8qgDphS78YJ1wWqvMUdRKygyynfdGNcu6qj4h8ejCc LOfiFB+L5pumsZE0vIpp01TbKsQnh71OJmRAQ0HQkgnSCD5sEJpQKNpbOW5WdN1q BaW6WNwXWRc0b1633bSBLv6MdzbeTXGqBnxKifny7yU7LDbIf0wm1sWKaxJhRzjG 3jviyOGV6nUukic6LbWhwzyoFsLKr7zdEU5nIgTtZEHT/fsvbfevpL0CQ8Cbpfqz NorsnRnIvyc7UQ== -----END CERTIFICATE-----Generated at Fri Jun 13 18:54:30 2025 by rpki-client