$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft File: P-3YXB7Mtf9LqTARenMpCZwP8us.mft (raw, json) Hash identifier: V/w00xxn+eqF4xzxDrXqhlv9XPgSjh3Z2fIPrImYiUA= Subject key identifier: 45:94:4D:90:B3:CE:15:BE:C1:EC:87:35:0E:ED:F5:9C:03:A2:54:41 Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Certificate serial: 0197782EE68DDF8A4E53B86079323BA57D11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft Manifest number: 15BA Signing time: Mon 16 Jun 2025 10:00:29 +0000 Manifest this update: Mon 16 Jun 2025 10:00:29 +0000 Manifest next update: Tue 17 Jun 2025 10:00:29 +0000 Files and hashes: 1: 4SyAKG9FRt1gAFJy5VgH5PwxTRA.roa (hash: jTSIiH7dSb5EybAsEY+n22bAiKvGllq/AuPJ12+ncpM=) 2: BPvvMmPw0v2RXdpWWHfCuRUXY28.roa (hash: xZBsJjBvf0lTF+79AIT0zRbookilcef0qHIZ5VPCKjo=) 3: BZv8sGCcNALUX5pRivC_EjiidAY.roa (hash: h2vpw3fwMWMbbCOrxK6C72hr7+aeGxdeLm1OT0QOTJY=) 4: DGiTictajwWlIqV1Y3gB4SABHrM.roa (hash: Id5c1uksWgHuNXSqMulTJtxTXfw1/TAJk3AEd7b9YRQ=) 5: Mk65rzu_RkrceH34hYZR24Obsg0.roa (hash: rTzdbjg2prHl5GqIGFCWtd1Ib91ETCuwTrOfSPbAKbI=) 6: P-3YXB7Mtf9LqTARenMpCZwP8us.crl (hash: YvGNlhcWbDhQ9K60DUwDHptRgq/TplBBHbEIPtCkP5s=) 7: Q7Kremg5Fgj0SfkKKXdi8FJc68I.roa (hash: wwhqLnVWip/tEomt2waPsqqsK0Xf41SfYznp1QkJ0BM=) 8: VB2zjyzRbVcAI7qwybUzZhlXV-U.roa (hash: cbrJc/4RT0HiKhNiv2HtCVB5MjAEHV6aPZtCJF7/HaM=) 9: fScTC-RTAL4AeGIUFDXeFWgxNOU.roa (hash: LpQDvJVc9hMoS+6x9uoQSz8d+i8pdM/6GrU1p5QPkoU=) 10: gjV1b6nl-2sIdV0OViEWc13VOgw.roa (hash: YJxg+E5odCH0e5CDjaGL8I+42oC/IlpXfOKgoo/xCo4=) 11: i_vdOGwxPt-bikrKCsCq4vU6o1Y.roa (hash: Oi88txSdII7ssSiwm/zvR3/xE/bpdarLSDiFGBrNlqs=) 12: jLM5t3eg01fijHX5BZDxTUjpEGU.roa (hash: zlqEOh5qlKElj+/BR3gY6unzfRt8ygL6XM3lywwcPBU=) 13: jt3cdzogC_GhOHVIdQu1LfkbDrM.roa (hash: 4TbqHgl6LIIhOvKU0Ma8NpMAoh5pYOvW9g1cZnc89eY=) 14: mv1h37MzImfXhXtotGH2l6nUD-c.roa (hash: jma1UU++sReZAO/OYU5m4FrNNXuoRuTByWXR/ZHh5qk=) 15: pPSUgW-kch1wzV-mL74GjoJRYas.roa (hash: 14IsY2Pcu5B3SjJ5ycOJDXddH4w35As15arfEbi1nXc=) 16: sVq7ykDogd7cCsDF--hBK9DnjT4.roa (hash: yntzoQcvzBrX+tVilVNDQYJnh1oAW90RlNAXUQi35Kc=) 17: yUsdU2ULQpT4CaBLrnJG--v6B4k.roa (hash: nFPDGUe2wiSsXpmHy1xpSDCHB5E3thvkbalz4PA2+qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:78:2e:e6:8d:df:8a:4e:53:b8:60:79:32:3b:a5:7d:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Validity Not Before: Jun 16 10:00:29 2025 GMT Not After : Jun 17 10:00:29 2025 GMT Subject: CN=45944d90b3ce15bec1ec87350eedf59c03a25441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:94:d1:9e:70:63:a6:96:60:17:39:f1:11:1a: 4f:60:5e:be:82:c2:13:c4:99:37:b7:7a:2e:fb:df: d7:20:ad:ab:95:c2:40:6c:ec:fc:af:d3:61:7b:01: 05:89:45:ec:95:51:44:28:7d:3f:b2:8d:30:4d:d2: d4:6c:62:c8:a7:ab:84:30:14:dc:7f:6b:ff:3e:03: 71:af:28:1f:0d:31:a1:6a:10:57:04:ab:4a:69:ad: fd:bb:b0:97:8e:84:3d:1b:06:cd:cb:48:8e:c1:3a: c1:6a:3d:aa:b2:61:d5:3f:97:57:0b:84:e9:bd:23: 8a:ee:10:3f:f4:c9:cb:b2:24:c7:64:83:0f:af:db: 32:36:ca:77:a0:7c:09:12:cf:94:49:d1:14:11:dd: 9b:00:07:b7:14:b4:39:0a:7e:92:be:b3:cc:b2:df: 53:f6:a7:b7:1d:fd:f8:b1:cb:d2:18:2b:14:e3:11: 4f:de:79:4f:71:6d:bb:ce:8e:a4:94:b4:cc:91:cc: 3a:3b:3e:75:66:0e:a7:ad:d1:a0:f4:ae:1d:81:80: a9:ad:a3:80:65:43:d7:c7:2a:95:33:70:00:0b:0f: a0:f2:f0:8f:e1:34:3d:56:81:f3:58:ac:01:4b:b5: 69:4d:e5:8d:b1:16:57:5e:ed:ae:0c:95:ff:d3:c9: 69:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:94:4D:90:B3:CE:15:BE:C1:EC:87:35:0E:ED:F5:9C:03:A2:54:41 X509v3 Authority Key Identifier: keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:52:72:29:1b:d3:2c:f4:91:68:23:43:b8:48:16:df:21:ab: 30:30:2e:c3:f4:44:f4:39:4c:51:3a:2e:c3:b3:2b:96:3d:2a: 9f:97:95:21:ee:2b:ac:43:c9:64:ad:99:27:86:85:4e:4f:61: d5:ea:f5:d2:87:86:65:84:74:35:bf:0d:a7:c2:53:69:75:cd: ab:ca:0c:e5:45:58:2e:16:44:31:83:a7:21:4c:81:60:09:76: 3f:92:85:23:e0:1f:15:1c:b5:27:35:51:9b:0b:6a:17:db:46: 59:de:c8:4b:65:c5:68:75:2e:65:47:a7:3a:d8:8f:d9:4a:aa: 0a:62:93:f8:34:04:54:c7:91:a4:4a:45:38:58:c9:45:b9:9a: fb:95:cd:67:68:c7:95:0a:f8:fa:6f:ec:1c:99:07:3e:ae:11: 3b:74:31:08:67:fa:11:29:36:cc:91:28:b7:c3:65:33:e1:2b: af:fa:07:14:8b:2c:bc:18:fd:a3:79:22:ac:35:3a:60:1a:8d: 90:54:69:29:8a:8b:c6:b4:02:88:7b:49:34:cc:db:36:1f:9a: 16:20:12:67:c4:e4:21:8f:50:bd:e8:9f:d0:af:e8:a1:98:d5: 91:58:2c:f3:88:a7:53:39:c2:98:18:a3:c2:39:4b:3f:8e:fd: e0:1d:8e:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd4LuaN34pOU7hgeTI7pX0RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw ZmYyZWIwHhcNMjUwNjE2MTAwMDI5WhcNMjUwNjE3MTAwMDI5WjAzMTEwLwYDVQQD Eyg0NTk0NGQ5MGIzY2UxNWJlYzFlYzg3MzUwZWVkZjU5YzAzYTI1NDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZTRnnBjppZgFznxERpPYF6+gsIT xJk3t3ou+9/XIK2rlcJAbOz8r9NhewEFiUXslVFEKH0/so0wTdLUbGLIp6uEMBTc f2v/PgNxrygfDTGhahBXBKtKaa39u7CXjoQ9GwbNy0iOwTrBaj2qsmHVP5dXC4Tp vSOK7hA/9MnLsiTHZIMPr9syNsp3oHwJEs+USdEUEd2bAAe3FLQ5Cn6SvrPMst9T 9qe3Hf34scvSGCsU4xFP3nlPcW27zo6klLTMkcw6Oz51Zg6nrdGg9K4dgYCpraOA ZUPXxyqVM3AACw+g8vCP4TQ9VoHzWKwBS7VpTeWNsRZXXu2uDJX/08lpVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWUTZCzzhW+weyHNQ7t9ZwDolRBMB8GA1UdIwQY MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt ZTJiNTI3NzI4ZTk2LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2 LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1JyKRvT LPSRaCNDuEgW3yGrMDAuw/RE9DlMUTouw7Mrlj0qn5eVIe4rrEPJZK2ZJ4aFTk9h 1er10oeGZYR0Nb8Np8JTaXXNq8oM5UVYLhZEMYOnIUyBYAl2P5KFI+AfFRy1JzVR mwtqF9tGWd7IS2XFaHUuZUenOtiP2UqqCmKT+DQEVMeRpEpFOFjJRbma+5XNZ2jH lQr4+m/sHJkHPq4RO3QxCGf6ESk2zJEot8NlM+Err/oHFIssvBj9o3kirDU6YBqN kFRpKYqLxrQCiHtJNMzbNh+aFiASZ8TkIY9Qveif0K/ooZjVkVgs84inUznCmBij wjlLP4794B2OKw== -----END CERTIFICATE-----Generated at Mon Jun 16 14:55:08 2025 by rpki-client