$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft File: zRCMIl8keM1CMBeYkNByhL4WNs0.mft (raw, json) Hash identifier: 7ktwn8Nvoutfnlrd7hfRxwLdEN53w1Ydm8OKKY48KqQ= Subject key identifier: 7C:94:B8:17:4B:C2:52:11:A6:A8:9F:CD:6C:65:C2:31:55:3C:68:5C Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 01977C9EE6690B7C7DDD0EBB4DBB7DAF4412 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft Manifest number: 0DEA Signing time: Tue 17 Jun 2025 06:41:17 +0000 Manifest this update: Tue 17 Jun 2025 06:41:17 +0000 Manifest next update: Wed 18 Jun 2025 06:41:17 +0000 Files and hashes: 1: 5WcQI-96O5FH1qX3Ok9ZLqqGV90.roa (hash: 6fOcHEhBTxH3iUZb4U4KYnoW42okdMilfcyFdKyUUCo=) 2: 6w6GslstW7dP-hGd9Y6a0xOTJ1Q.roa (hash: c/YkJLvVjnK6oPthfFlSxGHPywR+uY+AcXy43DN7bDA=) 3: 9pK-UIM-H6tNfktNjnY3n3eplHo.roa (hash: uVmuFNCMVIRszRB0UyxXgi1VNyC51j94Uds90LHBjSU=) 4: TrRa3mOQMzvIbozJzmyBJZ6tULw.roa (hash: d1WpoK6cobO04MOKczILPk89idxmBxtIOoIeGxHI9HI=) 5: WxkR99ND6hkg9zjVGX3QR8_P3Sg.roa (hash: kx4fWFzO9g7cyAxp6MdcGUoII+Luoha51Ph8bVepefA=) 6: bV7wiXISBEG2SHcG3dNKC6Wy_3Y.roa (hash: nmxCRUNayEJiwBjnfgLQZj2sJPp5WltkD5SdU2gQZ9k=) 7: bel6Fk2PBFF8iK4X4dPcB_YL-p8.roa (hash: whSoMvRfcwg1zlxaNwdPk6EU1wdOECDElkdNcqQV/CE=) 8: dguhelyeA7h-WKBbQzBkNq3_W40.roa (hash: xeizpLm1WM753pH0+O915Rj+oI7hkint9s/onXzL15U=) 9: hBKsbi06dqWQsHOJ9T-z_RIbUjA.roa (hash: uWUX6xGjuFBVk0pdcf+5Gpk/beOEbACzQvY2ZU/EXNs=) 10: m5uzTjKBj1YNxt9lmpL_W70mOs4.roa (hash: XT7e+1v3eFE6ptU9W+MrlhCJgipVPDN9P/6NNIsbxmg=) 11: uOq6i2-TnOYCsxAxwvHpJmAlTfg.roa (hash: 9inVtd7SVRI0UIGAJNZs9aNl1wsnYwDi5iWNfEOoDLM=) 12: yoNL7-5tCOlQ2k6SSzI3Bw-Kl9o.roa (hash: ZyshyOfvs12ZYQKuRmc4qW+/EYU6jHrxeUY751HiXsY=) 13: zRCMIl8keM1CMBeYkNByhL4WNs0.crl (hash: Fvc841iCs5a8lqCOb9KKqmT11GTMNa7+eeWcFl5fR0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 23:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:7c:9e:e6:69:0b:7c:7d:dd:0e:bb:4d:bb:7d:af:44:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Jun 17 06:41:17 2025 GMT Not After : Jun 18 06:41:17 2025 GMT Subject: CN=7c94b8174bc25211a6a89fcd6c65c231553c685c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:66:5f:2d:a5:34:c7:25:00:a5:74:f2:75:63: 19:21:ba:97:3d:55:4c:0b:80:aa:26:a3:99:20:0b: cb:a4:8b:45:fa:82:ea:34:54:56:0b:68:ad:d5:74: 01:f6:35:42:3e:5c:84:d3:84:8e:55:66:94:57:78: 82:eb:e8:d2:2a:f3:47:a2:33:f7:f4:ff:b3:f5:12: e2:fe:a3:fd:33:33:96:c1:2d:94:fd:0f:81:7f:65: 70:a4:22:f4:51:8f:d5:d1:9a:f8:f6:78:05:22:83: ee:de:e3:de:da:82:fd:9c:23:12:55:73:dc:df:c4: 72:5f:5a:55:6f:c4:66:fc:f1:fb:d8:d9:fa:33:7d: 62:bf:fa:be:b5:dc:9d:cd:16:b9:58:4c:8a:19:2f: e7:21:aa:ca:e3:ba:de:9a:2b:54:e9:23:21:2f:42: dd:7f:89:7b:16:22:1b:c1:2a:b1:2e:6d:31:7a:e7: 9f:ce:f8:bc:ef:c3:74:3b:01:2a:28:93:c3:68:af: 22:ea:2c:8d:49:74:76:42:c7:64:43:7b:7d:17:d8: dd:70:a4:e5:3c:f1:4e:89:9e:2c:0b:cc:8b:59:bf: 1f:40:bd:e3:ca:36:44:49:2a:0f:ac:78:62:3a:93: 10:e7:02:ab:f6:c0:42:f8:98:47:45:7b:16:de:6d: ff:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:94:B8:17:4B:C2:52:11:A6:A8:9F:CD:6C:65:C2:31:55:3C:68:5C X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:bb:aa:8d:7e:55:47:fe:5a:a7:8b:b0:00:f5:4f:b2:f0:bc: ec:46:78:21:f2:36:83:08:ae:35:b4:b6:75:14:71:8a:74:0b: 59:8a:da:aa:57:62:ca:84:e8:7d:3d:74:16:60:dd:4e:68:7a: ec:54:fd:5b:e4:d2:3d:bb:d4:e4:ff:e2:73:e8:d3:a0:3b:03: 62:b8:b5:30:26:b5:29:bb:e8:f2:9a:5d:db:b4:f2:9f:4f:b3: e2:7f:bd:e4:b5:5a:33:32:6d:af:c2:e1:dd:cf:ff:be:d3:19: bc:70:df:04:16:fd:27:2d:63:c8:cc:d1:49:3d:1e:fa:55:63: e5:b0:2c:c7:9d:48:a2:31:57:a2:d7:f3:47:b2:14:bc:53:aa: 50:5f:e9:e3:94:5c:b0:01:81:98:89:d1:0e:6d:e2:47:b3:23: 6b:05:e3:ca:1e:db:da:f8:ed:b4:9f:7e:09:0f:9c:e3:2f:51: 7d:8e:db:f5:4c:8d:a7:29:64:fa:44:8c:69:3b:77:ec:5e:74: 16:ab:0c:1c:31:b6:3c:b5:41:af:41:dc:4b:1c:ee:c3:b1:92: 7c:68:bf:af:b8:be:d0:58:1e:59:55:44:b1:b2:23:3e:ad:36: 57:03:7e:b1:9c:d0:71:40:4d:bf:ce:72:56:bb:e4:06:79:7f: 93:7b:83:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd8nuZpC3x93Q67Tbt9r0QSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjUwNjE3MDY0MTE3WhcNMjUwNjE4MDY0MTE3WjAzMTEwLwYDVQQD Eyg3Yzk0YjgxNzRiYzI1MjExYTZhODlmY2Q2YzY1YzIzMTU1M2M2ODVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmZfLaU0xyUApXTydWMZIbqXPVVM C4CqJqOZIAvLpItF+oLqNFRWC2it1XQB9jVCPlyE04SOVWaUV3iC6+jSKvNHojP3 9P+z9RLi/qP9MzOWwS2U/Q+Bf2VwpCL0UY/V0Zr49ngFIoPu3uPe2oL9nCMSVXPc 38RyX1pVb8Rm/PH72Nn6M31iv/q+tdydzRa5WEyKGS/nIarK47remitU6SMhL0Ld f4l7FiIbwSqxLm0xeuefzvi878N0OwEqKJPDaK8i6iyNSXR2QsdkQ3t9F9jdcKTl PPFOiZ4sC8yLWb8fQL3jyjZESSoPrHhiOpMQ5wKr9sBC+JhHRXsW3m3/pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHyUuBdLwlIRpqifzWxlwjFVPGhcMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUruqjX5V R/5ap4uwAPVPsvC87EZ4IfI2gwiuNbS2dRRxinQLWYraqldiyoTofT10FmDdTmh6 7FT9W+TSPbvU5P/ic+jToDsDYri1MCa1Kbvo8ppd27Tyn0+z4n+95LVaMzJtr8Lh 3c//vtMZvHDfBBb9Jy1jyMzRST0e+lVj5bAsx51IojFXotfzR7IUvFOqUF/p45Rc sAGBmInRDm3iR7MjawXjyh7b2vjttJ9+CQ+c4y9RfY7b9UyNpylk+kSMaTt37F50 FqsMHDG2PLVBr0HcSxzuw7GSfGi/r7i+0FgeWVVEsbIjPq02VwN+sZzQcUBNv85y VrvkBnl/k3uDtw== -----END CERTIFICATE-----Generated at Tue Jun 17 09:00:53 2025 by rpki-client