$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft File: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft (raw, json) Hash identifier: +mThLbeDmRocyqnsL+3C3ID6LjFFZpqucCj6AaT5xH4= Subject key identifier: 4F:D1:1B:68:77:96:A0:79:3C:95:FC:74:BE:32:5C:51:82:F2:43:79 Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7 Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7 Certificate serial: 0197692A02D8FF224456EA644E17C823F999 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft Manifest number: 102C Signing time: Fri 13 Jun 2025 12:00:50 +0000 Manifest this update: Fri 13 Jun 2025 12:00:50 +0000 Manifest next update: Sat 14 Jun 2025 12:00:50 +0000 Files and hashes: 1: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl (hash: VjP+qx534d4JRKDwGzVdue6VNtA9GTyFcgvWruBo+lU=) 2: FmBFQOhNzhtYDdGU28d2mOWYxkg.roa (hash: AVAVJ+z2q5E9uU0vpHh6beNWBbBTBuDWNk3vwtJ8KHM=) 3: a8dfbuD_49og8AJXwHhNJcwaxsI.roa (hash: W1ipPbq868Ly393rgOf3eds1bM0F3aTAdVR1mM1YvM4=) 4: ebI6lo6FFyrxH7BnniqczSoCpEU.roa (hash: VWIQku3g+eu08iWePk/+zF+lAvowuzYaw8AhxuX9/iY=) 5: iEjwphsnsCkTvYcagBPKufnt2-g.roa (hash: exQmAtQ6POft9PaSsq76nVkrM+e0e7z6aqVk5GRVWO8=) 6: mYlPJBjSVo-nMdiARP-4qGUEks0.roa (hash: jq8esI3cAJrQeZlA/zKhC8wm74GcNEo/R1+l+csXuU4=) 7: n11ZJorlH1hZHcOrMkN5woOVejs.roa (hash: qO1znHdZkcnjjGqE4Hx9Dgh/NFBxbtAoTeajvo0zDfk=) 8: rhaUzcqQYW4tC3EdQCdaNLWOPbA.roa (hash: PvCUNKVTR3gGQiqq6yWqtNwJ314FXo4VLynnYKTFbJo=) 9: uEehilTaJNTK6wTZHHdxxqFauYo.roa (hash: tRIraXpN8mX3nJ3uL7fIgHQ/edV3rhiXldnw6ddpk0I=) 10: x6Fr-1VeTypvMg38CuYZL6Aoelo.roa (hash: ajAlNUJcOgM2msZH/aiPOA3cqagu5/2Oq4Xgzqwcm3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:69:2a:02:d8:ff:22:44:56:ea:64:4e:17:c8:23:f9:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7 Validity Not Before: Jun 13 12:00:50 2025 GMT Not After : Jun 14 12:00:50 2025 GMT Subject: CN=4fd11b687796a0793c95fc74be325c5182f24379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:97:47:9d:c8:e3:d0:89:c0:76:0e:12:39:4b: 88:7e:60:f6:4f:09:30:6a:ef:d9:3a:ea:6d:47:c1: dc:45:e3:95:b9:c8:6d:66:14:4d:8c:3f:4e:fd:5d: 10:ca:43:59:d8:d0:47:9d:01:26:57:4b:5b:59:a6: 9a:f1:2b:9e:38:00:ca:bd:9e:d8:0f:e5:79:de:1b: b2:ac:8e:70:b3:d7:2d:df:d2:ca:88:d3:a3:88:43: 8f:db:31:86:49:ff:29:7c:b5:16:47:d9:39:b9:26: 96:2a:e6:6d:10:ab:80:de:33:ce:7e:a3:5c:fb:2c: 73:57:1e:12:54:47:f6:ba:50:1b:98:06:2f:53:00: 8e:f4:7e:e4:aa:4e:50:96:a3:ee:17:36:57:67:ab: 0d:05:36:de:0b:1c:7d:d5:cf:2b:a5:b1:40:ce:75: 7c:4b:fb:d2:82:2d:b5:67:20:62:64:d4:52:a4:6b: 70:44:ee:90:0b:06:12:e8:58:8e:57:0e:7e:fe:7a: a1:54:8f:0a:24:1f:a0:8a:4b:4c:7b:b8:76:be:ff: 04:89:a1:a3:47:16:f3:0b:9a:dd:84:53:82:c8:b3: 02:00:8c:6b:87:79:5b:85:0e:b4:ad:67:6a:f2:a7: b1:b5:ca:07:db:ea:83:ab:79:cb:eb:02:99:c6:16: 0e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D1:1B:68:77:96:A0:79:3C:95:FC:74:BE:32:5C:51:82:F2:43:79 X509v3 Authority Key Identifier: keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:18:2e:90:c0:5e:fe:15:c2:c7:3a:7d:25:48:52:23:90:e9: ef:67:b8:be:74:cb:f5:fb:fa:9b:32:69:b1:53:2b:97:76:47: 42:f0:51:dd:a5:3f:12:d4:2d:c9:ba:55:c2:d6:ac:26:99:5d: 72:5f:ef:93:c9:37:f1:4c:b5:b9:c6:18:d0:89:95:ad:63:12: cb:9d:16:1b:75:5c:08:01:c1:40:18:a3:db:9d:1d:41:d5:63: 06:aa:f0:5c:97:7b:c5:a0:62:1b:9f:b9:4c:56:6a:4d:01:4d: dd:14:21:f1:81:6f:1b:79:74:56:0b:1d:c0:54:1d:34:e2:f7: 32:4b:9d:b2:46:53:34:05:68:6e:b5:48:6b:c9:ce:42:66:f8: e3:93:a9:9f:3f:e2:87:3a:f4:00:33:f4:c0:4d:08:8e:02:61: ae:52:dc:c6:b4:be:7b:1c:7f:db:1d:9b:4e:9d:8e:8a:fe:0a: ba:50:34:f8:95:a5:80:3c:7a:80:1b:0f:6a:8d:ef:dc:22:af: c0:15:00:04:d8:1d:2e:bb:f5:13:fb:27:21:69:95:85:65:34: 5e:f8:d9:51:09:bb:db:8f:bc:4b:6c:b2:05:a6:42:3f:de:c7: 8c:ec:06:29:37:31:2a:8a:50:15:8d:e0:bb:f3:b2:35:4a:2b: 79:e6:57:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdpKgLY/yJEVupkThfII/mZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkYmU2ZTBhZGFlOGJiNDc4MzkzYWFiMTc1YjYzODY0NGM3 NGNjYjcwHhcNMjUwNjEzMTIwMDUwWhcNMjUwNjE0MTIwMDUwWjAzMTEwLwYDVQQD Eyg0ZmQxMWI2ODc3OTZhMDc5M2M5NWZjNzRiZTMyNWM1MTgyZjI0Mzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JdHncjj0InAdg4SOUuIfmD2Twkw au/ZOuptR8HcReOVuchtZhRNjD9O/V0QykNZ2NBHnQEmV0tbWaaa8SueOADKvZ7Y D+V53huyrI5ws9ct39LKiNOjiEOP2zGGSf8pfLUWR9k5uSaWKuZtEKuA3jPOfqNc +yxzVx4SVEf2ulAbmAYvUwCO9H7kqk5QlqPuFzZXZ6sNBTbeCxx91c8rpbFAznV8 S/vSgi21ZyBiZNRSpGtwRO6QCwYS6FiOVw5+/nqhVI8KJB+giktMe7h2vv8EiaGj RxbzC5rdhFOCyLMCAIxrh3lbhQ60rWdq8qextcoH2+qDq3nL6wKZxhYOGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/RG2h3lqB5PJX8dL4yXFGC8kN5MB8GA1UdIwQY MBaAFN2+bgra6LtHg5OqsXW2OGRMdMy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjkt NmJhYTNiNTQ4ZDIzLzEvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjktNmJhYTNiNTQ4ZDIz LzEvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgxgukMBe /hXCxzp9JUhSI5Dp72e4vnTL9fv6mzJpsVMrl3ZHQvBR3aU/EtQtybpVwtasJpld cl/vk8k38Uy1ucYY0ImVrWMSy50WG3VcCAHBQBij250dQdVjBqrwXJd7xaBiG5+5 TFZqTQFN3RQh8YFvG3l0VgsdwFQdNOL3MkudskZTNAVobrVIa8nOQmb445Opnz/i hzr0ADP0wE0IjgJhrlLcxrS+exx/2x2bTp2Oiv4KulA0+JWlgDx6gBsPao3v3CKv wBUABNgdLrv1E/snIWmVhWU0XvjZUQm724+8S2yyBaZCP97HjOwGKTcxKopQFY3g u/OyNUoreeZX4Q== -----END CERTIFICATE-----Generated at Fri Jun 13 19:03:31 2025 by rpki-client