$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft File: h74JMJcJfERX_1qj5Yk8jBVDJhI.mft (raw, json) Hash identifier: lHSnUmspspaY2vIsmGXrTPWgHBF6JKRfr2FAub9lH7c= Subject key identifier: 76:D9:10:16:A1:A0:A1:54:1A:FB:C4:AC:6A:90:9C:A1:7C:C0:9E:94 Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612 Certificate serial: 019777532DF096A997F0D8A9F8E90CA80DD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft Manifest number: 1224 Signing time: Mon 16 Jun 2025 06:00:29 +0000 Manifest this update: Mon 16 Jun 2025 06:00:29 +0000 Manifest next update: Tue 17 Jun 2025 06:00:29 +0000 Files and hashes: 1: 58EBygRjdS7517jE8ijFSPfVOH4.roa (hash: 7YP7WUOPsrK23qXejFg0a6c2K8s3GbzwWCeuhRLXrr4=) 2: 6gQb_YrXJIkOy1ffV5AywwaDFKA.roa (hash: YBUcx/W2YYWfTW+ZfLh5vpIiC6jkcxCKGBt0nojo2Ok=) 3: CjTW9-CUmuY1lxZ8OqndS2FXSrY.roa (hash: 9DQ0LnRbHYpMYq+dl7Z0Jfv0Jx2DrmotGXluT5sxbiI=) 4: UYD_ol6L79u8glgaI6wKUZit3aI.roa (hash: Gf9BtC+mpY9FQr0OFj9WV8BSFzyS8ChMq/mXIibBTC4=) 5: YxuPih3fAlXVoEE31gDs9iD2i1w.roa (hash: x8butTOJLg1TuADmdhNJfjqeOtty4tQbuYOKyeZNAJI=) 6: cgfWhp9nnNlIFwxwBmM9ufcXLT8.roa (hash: d9o/0tEnmxkRdMrExtvCAvZnhgV08vpjue2h9xSnd5M=) 7: h74JMJcJfERX_1qj5Yk8jBVDJhI.crl (hash: N5P/mQuQ2YUI3lnggA3Rx21Y2R3w1pHDENdm5cguLa0=) 8: jS9AN5oD9gr_onzGTzL8xf4_tCg.roa (hash: L5WRngdm8hXH1GtO9dblNyDW24uvtXBx7hO8Cv9i3R8=) 9: l73XbGk7c4j4MjyLCnCZ2AhSa5g.roa (hash: zN4KADzvP9RDaA1coLbTnlm7K8otMtISf3HRhyFdP4I=) 10: zDYhvUbelcRpqpslUbRSgUjh_fg.roa (hash: oMqhUHMRnzSTRY98vl61orkGgfrk9poSjKlRD++vvbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:77:53:2d:f0:96:a9:97:f0:d8:a9:f8:e9:0c:a8:0d:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612 Validity Not Before: Jun 16 06:00:29 2025 GMT Not After : Jun 17 06:00:29 2025 GMT Subject: CN=76d91016a1a0a1541afbc4ac6a909ca17cc09e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d6:6b:4a:48:b9:e9:d0:99:89:a4:5c:17:1c: da:fa:f9:44:cb:49:88:43:af:6a:ee:40:ab:f4:f1: d0:f8:b1:09:25:f2:a8:41:90:a8:3d:45:9c:be:3d: f4:97:ca:e0:11:3f:e1:61:37:a0:f8:47:f9:a2:38: 35:3e:da:78:ac:d1:78:02:17:1e:86:4d:4d:f1:fe: a1:3b:21:21:db:ea:b4:68:bc:3c:c0:eb:62:8b:a2: 47:e3:a5:d9:c0:19:b8:45:74:66:d1:3a:3b:92:ca: 7a:3a:79:87:77:d4:a9:f4:08:6f:38:79:77:6b:7b: 5d:ac:85:ad:f0:ca:e9:05:5f:14:40:b4:4e:6d:0d: c2:ca:fb:72:5b:62:2d:5d:56:60:ed:55:b3:97:52: a6:ef:e1:0d:ae:39:80:75:f4:60:fa:bc:28:1d:48: 03:d6:11:3a:a9:64:06:c5:b9:7a:ed:93:8d:45:d2: e6:99:7b:13:3b:5a:61:5f:60:b9:36:de:d3:49:88: e6:10:f1:e7:9e:23:05:9c:38:bb:ff:87:59:3b:b1: ba:bf:23:29:0b:2e:c9:93:45:fc:77:d8:7a:98:39: d3:bc:b0:85:aa:8c:5a:36:d3:b7:c7:37:9e:98:c1: 11:62:ef:da:71:5a:77:24:70:19:ff:3b:50:c0:73: d4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D9:10:16:A1:A0:A1:54:1A:FB:C4:AC:6A:90:9C:A1:7C:C0:9E:94 X509v3 Authority Key Identifier: keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a8:45:fb:b0:c2:d6:e6:64:1d:1c:ff:34:97:c4:da:7f:cb: 2f:94:01:5c:80:75:cb:78:57:04:36:07:14:59:91:88:0e:7a: 37:e5:25:fd:6a:f7:55:bc:64:58:3f:bb:46:ae:c5:04:20:30: 27:32:c4:f5:a3:63:c1:f1:b2:07:34:51:02:24:35:3c:40:f2: 8c:58:0e:ff:03:61:10:14:a5:5b:23:af:ce:71:7b:c8:50:14: 04:5b:3a:e5:02:29:b6:61:81:a4:76:8d:21:7a:3f:20:67:2b: 0e:f3:39:a4:6d:b4:dc:d0:02:9c:2d:ca:47:4c:94:af:eb:03: d0:61:26:7e:6b:13:da:cf:48:2a:b0:fc:91:e5:51:68:d0:20: 1c:7b:32:40:e7:cf:51:b7:1e:5a:78:e9:cc:1d:a5:17:3c:00: cf:43:4d:fd:28:43:29:b4:0a:09:0a:3f:5a:75:c5:bb:05:e8: e9:31:6d:f6:0a:ac:72:6a:39:e3:ec:8c:06:08:7b:5b:64:ec: ff:38:80:59:7f:7e:73:7a:8d:2e:f0:bb:49:ee:9c:93:47:59: bd:59:b0:04:06:ae:e8:c9:05:40:d9:c0:54:0d:c4:06:47:cb: e8:82:66:8f:34:d3:8f:5a:98:83:5b:27:b1:23:c4:e8:08:f9: 75:f6:93:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd3Uy3wlqmX8Nip+OkMqA3TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YmUwOTMwOTcwOTdjNDQ1N2ZmNWFhM2U1ODkzYzhjMTU0 MzI2MTIwHhcNMjUwNjE2MDYwMDI5WhcNMjUwNjE3MDYwMDI5WjAzMTEwLwYDVQQD Eyg3NmQ5MTAxNmExYTBhMTU0MWFmYmM0YWM2YTkwOWNhMTdjYzA5ZTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutZrSki56dCZiaRcFxza+vlEy0mI Q69q7kCr9PHQ+LEJJfKoQZCoPUWcvj30l8rgET/hYTeg+Ef5ojg1Ptp4rNF4Ahce hk1N8f6hOyEh2+q0aLw8wOtii6JH46XZwBm4RXRm0To7ksp6OnmHd9Sp9AhvOHl3 a3tdrIWt8MrpBV8UQLRObQ3CyvtyW2ItXVZg7VWzl1Km7+ENrjmAdfRg+rwoHUgD 1hE6qWQGxbl67ZONRdLmmXsTO1phX2C5Nt7TSYjmEPHnniMFnDi7/4dZO7G6vyMp Cy7Jk0X8d9h6mDnTvLCFqoxaNtO3xzeemMERYu/acVp3JHAZ/ztQwHPUewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbZEBahoKFUGvvErGqQnKF8wJ6UMB8GA1UdIwQY MBaAFIe+CTCXCXxEV/9ao+WJPIwVQyYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMt MmNkZTY1ZjMxMTJhLzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMtMmNkZTY1ZjMxMTJh LzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6hF+7DC 1uZkHRz/NJfE2n/LL5QBXIB1y3hXBDYHFFmRiA56N+Ul/Wr3VbxkWD+7Rq7FBCAw JzLE9aNjwfGyBzRRAiQ1PEDyjFgO/wNhEBSlWyOvznF7yFAUBFs65QIptmGBpHaN IXo/IGcrDvM5pG203NACnC3KR0yUr+sD0GEmfmsT2s9IKrD8keVRaNAgHHsyQOfP UbceWnjpzB2lFzwAz0NN/ShDKbQKCQo/WnXFuwXo6TFt9gqscmo54+yMBgh7W2Ts /ziAWX9+c3qNLvC7Se6ck0dZvVmwBAau6MkFQNnAVA3EBkfL6IJmjzTTj1qYg1sn sSPE6Aj5dfaT3w== -----END CERTIFICATE-----Generated at Mon Jun 16 09:12:15 2025 by rpki-client