$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.mft File: orEujfOr1VWfnPloCvZd0WWJ3oY.mft (raw, json) Hash identifier: /Js7Jow7fwSM11Rz6jE7yWXMBmLFlakUIAwBbiYLyxg= Subject key identifier: 1D:EE:61:C4:0E:D0:0C:71:CA:07:46:D0:89:5D:49:48:DE:1A:D2:64 Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86 Certificate issuer: /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86 Certificate serial: 019770755C08EE37A3C45FB9561802378670 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.mft Manifest number: 159B Signing time: Sat 14 Jun 2025 22:00:28 +0000 Manifest this update: Sat 14 Jun 2025 22:00:28 +0000 Manifest next update: Sun 15 Jun 2025 22:00:28 +0000 Files and hashes: 1: 0i2nUtRKmB3lhZOxzG3njrwbmME.roa (hash: dpZHm/KEbm95HKs7W7IrS4dN/fteRpx/stGG7Xu0VS8=) 2: 8LCZXWDLyLv6eORFWTYufaqnXGc.roa (hash: zQH0a6PafBtBLKWrkMxsvyuhb/nC1Pe5AfvaGkWpLmk=) 3: Cyo0vgpJooRhhQGTNLDVrhTVpFE.roa (hash: LY9FHhGpeiEV0YSyhn8sqnrszg5NO3LFheQVRLdgaNI=) 4: GcB06A0joSaNqm1qjn8cqCLYdMs.roa (hash: SOrq0ErpDn8P+KeZvvit9W/GaDxPmKvV9O+Jo+aosIk=) 5: OcAvtCfGeHAKogvTrE4zVIYXhXs.roa (hash: ytTb8Vp57MsWC+qg8DRVK13nEW8nfvpJJgza5MGPgYA=) 6: U8DoEOYZwi3hFxDhI_ZeyEzAKWg.roa (hash: xYdDt5sefA9c3Do+dzsPZm4stlI6uY172Lao1mLLokc=) 7: UTD25HSfDCitfEF77H0gTbBbKYg.roa (hash: JlSU0P58p4ohrtWd9vf+kXPT1uTSHo3mBZt0nA+3jpA=) 8: aEWr6-EqtkKVBn1aiC7rHdjKt8Y.roa (hash: crXyg1I0M6v1iZUeG0Vpk1mS5J8AlR2ziEDMO6PLwNs=) 9: hnuqfuqQFfls7WsQI7eQEfSUik0.roa (hash: 4glBckXjWMe5XR/kJnErYQjsYivbggBDZAVbZrhZteQ=) 10: orEujfOr1VWfnPloCvZd0WWJ3oY.crl (hash: JK+0ovWshft9m9DxSSVM2WlwnLgPIu71WX3UfjW/zzA=) 11: qKhGSn-anlVBbLwa8kuLCuYeIg4.roa (hash: GMbSoeO7Bt68N/Bj/6mj7uVPJ/WZKmJE6Cg5RyuDqEs=) 12: xY8O1HQcthonbf03hVZUJttA-3k.roa (hash: VnV3WEcdTaUx8HFdXjrg5qMNEOniv+q8hPyCeb+p72M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.mft rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 19:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:70:75:5c:08:ee:37:a3:c4:5f:b9:56:18:02:37:86:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86 Validity Not Before: Jun 14 22:00:28 2025 GMT Not After : Jun 15 22:00:28 2025 GMT Subject: CN=1dee61c40ed00c71ca0746d0895d4948de1ad264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c3:ed:6f:a8:d6:9d:d7:f5:0b:8e:70:1f:2c: 37:a4:67:7a:9d:3d:17:4d:11:97:3b:2e:05:3d:08: b2:3c:ba:fd:d1:d1:e7:c0:a3:6e:72:20:e9:03:20: 19:08:94:dc:aa:e5:26:70:91:73:04:67:89:14:20: 36:d4:2e:8d:86:ed:04:5e:f7:03:7e:33:e0:8f:e3: 9f:bd:c5:af:99:b6:75:b7:7c:52:a5:5b:4e:71:86: 49:79:4f:23:90:33:1f:ef:54:1a:98:33:e1:c0:ee: 69:a1:59:cd:14:db:65:37:a4:30:43:eb:1c:da:8c: c6:21:d0:ed:36:84:0a:b1:15:d6:40:13:36:cd:67: bc:3c:ce:73:30:e0:e6:8d:50:80:86:af:ca:75:ef: 91:ea:14:3c:41:75:07:01:63:e7:d8:05:9b:d9:aa: 7d:61:7e:72:d5:15:6a:7f:57:b1:74:bf:b8:77:57: 67:9b:1a:ad:a0:59:63:ef:c0:a6:d2:fa:85:ce:52: 7b:4e:1a:2b:04:85:cf:48:0f:36:10:82:65:21:a4: f6:cb:bf:b8:2d:33:89:bc:95:c9:ee:54:22:01:2d: d8:6c:45:07:fc:96:dd:8a:6c:0e:f5:e9:e0:11:9c: 70:80:5f:10:7a:31:0b:ab:5d:6a:f8:12:b5:31:f5: 9d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:EE:61:C4:0E:D0:0C:71:CA:07:46:D0:89:5D:49:48:DE:1A:D2:64 X509v3 Authority Key Identifier: keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:c6:78:db:84:6c:06:5f:e1:e4:53:1e:4a:e7:9e:04:ea:aa: 36:86:6e:a3:d6:08:ff:47:8d:cd:73:b2:b0:53:55:5f:16:e9: 63:de:e4:aa:f1:e0:ca:6f:05:e9:29:e1:45:00:b4:4f:5c:67: f9:2d:5f:ea:d3:87:29:4f:eb:eb:ae:07:55:d5:49:3a:d2:31: 3c:4a:73:e7:9a:10:8d:50:84:35:de:e8:4b:6c:62:50:17:61: 1d:40:ea:c0:47:7d:d9:06:ab:f3:41:b5:30:2f:8c:7e:1a:ec: c9:71:93:e8:cc:a6:28:ac:f2:67:58:43:e5:a0:7a:45:92:e7: 89:78:cf:04:f3:de:e9:46:d8:a6:69:04:e0:91:71:3e:48:07: 6d:48:09:20:9c:ae:e1:b1:c3:08:17:d8:ed:c3:19:87:75:bf: 60:07:2c:98:7e:ab:90:45:98:72:07:6d:b9:9b:1e:8b:82:2c: 69:61:58:34:a8:45:5e:2c:f3:57:03:b5:c2:8e:ae:58:1a:4b: 21:23:55:d0:48:a8:7f:76:27:ff:6f:1f:6b:29:35:56:6b:c3: 2c:65:d8:4b:00:13:a9:ed:81:e3:71:5f:e5:ea:bc:20:26:8c: 98:83:af:8d:2c:62:01:2b:ba:66:24:e0:e4:cd:4c:7e:e5:cd: 28:6a:95:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdwdVwI7jejxF+5VhgCN4ZwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyYjEyZThkZjNhYmQ1NTU5ZjljZjk2ODBhZjY1ZGQxNjU4 OWRlODYwHhcNMjUwNjE0MjIwMDI4WhcNMjUwNjE1MjIwMDI4WjAzMTEwLwYDVQQD EygxZGVlNjFjNDBlZDAwYzcxY2EwNzQ2ZDA4OTVkNDk0OGRlMWFkMjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcPtb6jWndf1C45wHyw3pGd6nT0X TRGXOy4FPQiyPLr90dHnwKNuciDpAyAZCJTcquUmcJFzBGeJFCA21C6Nhu0EXvcD fjPgj+OfvcWvmbZ1t3xSpVtOcYZJeU8jkDMf71QamDPhwO5poVnNFNtlN6QwQ+sc 2ozGIdDtNoQKsRXWQBM2zWe8PM5zMODmjVCAhq/Kde+R6hQ8QXUHAWPn2AWb2ap9 YX5y1RVqf1exdL+4d1dnmxqtoFlj78Cm0vqFzlJ7ThorBIXPSA82EIJlIaT2y7+4 LTOJvJXJ7lQiAS3YbEUH/JbdimwO9engEZxwgF8QejELq11q+BK1MfWdTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3uYcQO0AxxygdG0IldSUjeGtJkMB8GA1UdIwQY MBaAFKKxLo3zq9VVn5z5aAr2XdFlid6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3JFdWpmT3IxVldmblBsb0N2WmQwV1dKM29ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lYzQ0ZWEtZWY0My00YjNhLWE2OWEt YjRjYjYzN2RhOGMzLzEvb3JFdWpmT3IxVldmblBsb0N2WmQwV1dKM29ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9lYzQ0ZWEtZWY0My00YjNhLWE2OWEtYjRjYjYzN2RhOGMz LzEvb3JFdWpmT3IxVldmblBsb0N2WmQwV1dKM29ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc8Z424Rs Bl/h5FMeSueeBOqqNoZuo9YI/0eNzXOysFNVXxbpY97kqvHgym8F6SnhRQC0T1xn +S1f6tOHKU/r664HVdVJOtIxPEpz55oQjVCENd7oS2xiUBdhHUDqwEd92Qar80G1 MC+MfhrsyXGT6MymKKzyZ1hD5aB6RZLniXjPBPPe6UbYpmkE4JFxPkgHbUgJIJyu 4bHDCBfY7cMZh3W/YAcsmH6rkEWYcgdtuZsei4IsaWFYNKhFXizzVwO1wo6uWBpL ISNV0Eiof3Yn/28fayk1VmvDLGXYSwATqe2B43Ff5eq8ICaMmIOvjSxiASu6ZiTg 5M1MfuXNKGqVVA== -----END CERTIFICATE-----Generated at Sun Jun 15 04:52:39 2025 by rpki-client