$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft File: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft (raw, json) Hash identifier: /za/EcAoOAZM3eBmyk90jzzf2TmqBVz+Ptp/seYW2Dw= Subject key identifier: C2:16:E7:98:9F:58:11:FF:9C:6D:2F:6A:05:5E:79:E2:93:7B:90:86 Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Certificate serial: 019777C152E8FE249B3A5BFECF4A180F4E46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft Manifest number: 12A4 Signing time: Mon 16 Jun 2025 08:00:47 +0000 Manifest this update: Mon 16 Jun 2025 08:00:47 +0000 Manifest next update: Tue 17 Jun 2025 08:00:47 +0000 Files and hashes: 1: 8Fk9kDKNu_wHTuVpwQ1FTDYEEUM.roa (hash: R9lk1OKBJor+p6Fk8Cm9760Y52YkNlkiK4HwLBjauEw=) 2: LCMzGb8KK1XAn7ueElCREh4ehR0.roa (hash: 9Gw2b+IOeGIlGw5y7XNoxgCnQ7hXETrnIXJowIYGjqA=) 3: LShVVLJCwZTpOQVpRu4BHXCMY5o.roa (hash: qOW5Q7zU6W8XRrp7RUj6wZmvzkpmHb4NVAohhcOeaxY=) 4: bmuOfACYZiZOnCTz9ES9s06c_ac.roa (hash: kxF+XBYjW7ExfLjJidwuYPma+i/t1erJy7+ooTz+eSY=) 5: dqSVfYV4r9M8RMZopTNsSTKHeIY.roa (hash: XrN+1wwdRwyX8n7r+VHCtW4D45jLjIPlWVhNaBZnVwQ=) 6: h9mNIwplN3HJblv2au9Os6COmfk.roa (hash: MUN1yxszebSMcti0G9u7TeXrwfcHsFyRaIzpQnCM9XQ=) 7: mUZj0w-uWUstpfqo5cH06vK19uA.roa (hash: MzyNzzDoUFyK/QZw2a/+HQPhRLTClRfb/mdHjVRhByQ=) 8: r0mTEa6qt-IyELm4t03iQrSQvaU.roa (hash: 5O0ZRSkH9lwLC8LUcZsdLUDFOU7u/lNlnWwcFjFATOs=) 9: rHoYFPQ0T9Hef-z6s-pJ7i0yyQo.roa (hash: xQJ9yww4YSKaaEyQBdYXA5up0iEVqjr/At6e2xJMUB8=) 10: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl (hash: UAFIi8opAJfqqEQSYjlaQ2T1XkxePyinpAk3XNkqU8Q=) 11: vfYaTtc4brt0Ov1kx9oCUOHIJXI.roa (hash: eB+hXGbiqW76z1VHwcXpM+YfyI+lZHNYCy9KL7CJ5lM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:77:c1:52:e8:fe:24:9b:3a:5b:fe:cf:4a:18:0f:4e:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Validity Not Before: Jun 16 08:00:47 2025 GMT Not After : Jun 17 08:00:47 2025 GMT Subject: CN=c216e7989f5811ff9c6d2f6a055e79e2937b9086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:73:a3:93:b0:3e:a5:51:10:de:53:f0:07:5c: ca:e3:a7:92:0d:f7:21:82:bd:70:86:19:c1:79:bc: 7b:7e:65:b8:50:4f:42:8a:78:a0:1e:42:0b:42:b5: 08:4f:aa:90:98:79:88:44:0e:9e:d2:aa:79:ea:fc: 76:0d:da:bd:f7:3d:3b:17:ab:cf:06:cf:56:3a:e6: cd:dc:08:c7:65:4c:32:bf:d4:73:45:c3:0f:20:78: b0:f7:4e:fe:02:35:35:47:e4:77:fe:da:1e:99:b7: c3:b0:d0:65:21:39:bc:e0:b8:88:91:24:09:16:92: c3:2d:16:d8:16:c6:8d:76:dd:ef:3e:9b:be:f6:3a: 8d:8a:04:1d:2e:f6:9c:0e:5a:8e:e8:04:c8:78:08: 3a:e9:71:10:3f:eb:ac:f8:7c:24:d1:98:f0:3c:fc: 96:8c:dd:7e:2c:66:3f:ee:64:fd:8c:56:6e:87:2e: ae:07:81:b8:92:8a:69:59:30:52:c2:4a:27:33:f6: f8:6b:4f:dc:3e:46:19:91:b1:5b:7f:62:a2:e0:5c: 2e:2d:67:2c:8f:c7:a0:32:a3:9b:6b:e8:58:81:b0: 32:ca:35:50:8b:29:28:3a:ef:8b:7c:02:29:ca:47: 70:6d:18:71:77:b9:d5:54:bc:83:d4:a2:d1:89:c6: f1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:16:E7:98:9F:58:11:FF:9C:6D:2F:6A:05:5E:79:E2:93:7B:90:86 X509v3 Authority Key Identifier: keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:b2:16:6d:b0:16:d5:31:0f:6e:1e:41:21:b8:07:03:42:ca: 6b:fc:b2:19:42:64:ab:a3:07:fe:e6:e2:f4:11:a8:52:a9:cc: 95:bc:35:88:59:ec:72:07:45:33:da:ca:f2:a5:b3:0d:8b:33: 6f:06:90:a6:93:0b:b1:ca:05:2d:08:da:67:30:4d:d1:a5:85: 1b:bf:dc:7a:b7:ca:9b:00:9d:c7:97:a9:a6:5c:82:42:32:8e: b1:b1:d4:f5:5b:a6:00:31:4a:77:f5:b7:dd:df:ad:a8:73:e2: 7d:f3:e3:3e:0d:5d:09:39:da:39:bf:25:29:a3:00:09:7c:21: 15:bf:6d:f6:e8:a5:c6:7d:9a:38:d8:b7:be:08:5f:a1:f5:56: a1:03:51:8c:6d:72:96:a0:fd:55:10:6c:09:b7:3d:03:42:29: 73:28:e5:11:a4:cc:3f:a7:ee:e9:d2:2f:9d:d8:85:05:53:85: c6:c9:81:89:1f:b4:24:74:8e:14:a5:2a:8b:1f:ea:67:5f:17: 83:01:09:cc:f9:d3:ad:e3:ca:fd:73:12:3b:ba:1a:1f:57:c4: 1d:99:bb:b2:df:e4:5d:65:b7:3e:bf:61:5a:8a:25:c6:de:e5: ef:ed:6b:f0:a0:60:a3:43:47:e1:07:11:20:bf:80:17:6c:42: 30:b2:95:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd3wVLo/iSbOlv+z0oYD05GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj ZGM2NWMwHhcNMjUwNjE2MDgwMDQ3WhcNMjUwNjE3MDgwMDQ3WjAzMTEwLwYDVQQD EyhjMjE2ZTc5ODlmNTgxMWZmOWM2ZDJmNmEwNTVlNzllMjkzN2I5MDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HOjk7A+pVEQ3lPwB1zK46eSDfch gr1whhnBebx7fmW4UE9CinigHkILQrUIT6qQmHmIRA6e0qp56vx2Ddq99z07F6vP Bs9WOubN3AjHZUwyv9RzRcMPIHiw907+AjU1R+R3/toembfDsNBlITm84LiIkSQJ FpLDLRbYFsaNdt3vPpu+9jqNigQdLvacDlqO6ATIeAg66XEQP+us+Hwk0ZjwPPyW jN1+LGY/7mT9jFZuhy6uB4G4koppWTBSwkonM/b4a0/cPkYZkbFbf2Ki4FwuLWcs j8egMqOba+hYgbAyyjVQiykoOu+LfAIpykdwbRhxd7nVVLyD1KLRicbxWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIW55ifWBH/nG0vagVeeeKTe5CGMB8GA1UdIwQY MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct NjZlZGEyMjhmZWM3LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3 LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANrIWbbAW 1TEPbh5BIbgHA0LKa/yyGUJkq6MH/ubi9BGoUqnMlbw1iFnscgdFM9rK8qWzDYsz bwaQppMLscoFLQjaZzBN0aWFG7/cerfKmwCdx5epplyCQjKOsbHU9VumADFKd/W3 3d+tqHPiffPjPg1dCTnaOb8lKaMACXwhFb9t9uilxn2aONi3vghfofVWoQNRjG1y lqD9VRBsCbc9A0IpcyjlEaTMP6fu6dIvndiFBVOFxsmBiR+0JHSOFKUqix/qZ18X gwEJzPnTrePK/XMSO7oaH1fEHZm7st/kXWW3Pr9hWoolxt7l7+1r8KBgo0NH4QcR IL+AF2xCMLKVIg== -----END CERTIFICATE-----Generated at Mon Jun 16 13:07:14 2025 by rpki-client