$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft File: X32laK0Ce54knBPiI9MidpiBop8.mft (raw, json) Hash identifier: WVcX+i8F+mCeNGZW14Hw2325i+2npUQI3Z61bajTSwc= Subject key identifier: 09:3C:82:4B:0B:6F:22:15:8C:C8:0D:9B:D6:EA:DA:0E:85:7B:13:B2 Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f Certificate serial: 01976C61FDAA21F821EB8C28B42A6582D895 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft Manifest number: 0B06 Signing time: Sat 14 Jun 2025 03:00:50 +0000 Manifest this update: Sat 14 Jun 2025 03:00:50 +0000 Manifest next update: Sun 15 Jun 2025 03:00:50 +0000 Files and hashes: 1: Dhg938LLNxihNYriqStR3oqs6Jg.roa (hash: Aj+6lvIDsodEZ6I55Us8ZFj5GtVjSmfFFjL8I/MfYqo=) 2: FuntCXoBht24QvgtEtbVZEuCdp0.roa (hash: JUPlc/PvxJjzfETFQC1BU7Iej8ynSg/XdYSUf902Tpo=) 3: OSozPCauqZRrj5FYZCZShQYan60.roa (hash: gJTuyuPcePva2Pf/4Z3V1y7VTQjYV+P6FusXSLPZfSw=) 4: X32laK0Ce54knBPiI9MidpiBop8.crl (hash: zJunOgkZibZPYhsEJT9ce7B6ecNVL0OxYmOKmD7axCs=) 5: XjVu2IyXljFzhSvYma_h3-clfVU.roa (hash: nT21YokFB5zQvbm3JPkkRJDjEHGU38C24xQDpQHQGAI=) 6: ZkkDzXmdTsLG1oQnHCXCpjMrN0c.roa (hash: vhxQZdTakyknsbSaFbQwA3rjVR03VcM9s8jNMsMZ03E=) 7: jUQ_fZXFaYGd4zaZnSgAlOdWse0.roa (hash: TxGng+dp5AKM1yJ/Crw7UDMDcGHP31uzC9AJJeqBDMA=) 8: oSGRjgd5g7uxmIyMg55GeDp1lcQ.roa (hash: yVVI9w+n8DQ5LZ0pU0EZPfP/S8D3Imwu6pg6ds8XII0=) 9: s84uwW_-i_SHLp2X5wNbbXCbos0.roa (hash: XmZwP1Dphpy/OpROhUP0RXS2PeMw5xbgxdsjXIheFhc=) 10: ztzJ9WkVuGW2KUZ-NYOffXMn-mU.roa (hash: 0aNwIJcWE8BWdRRapb0b1h0he6NRcvrOvXa3hI/Nxv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6c:61:fd:aa:21:f8:21:eb:8c:28:b4:2a:65:82:d8:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f Validity Not Before: Jun 14 03:00:50 2025 GMT Not After : Jun 15 03:00:50 2025 GMT Subject: CN=093c824b0b6f22158cc80d9bd6eada0e857b13b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a5:4c:46:ec:f4:6c:0f:e1:b0:2e:8b:ac:80: 55:95:b4:4f:a2:5c:eb:9c:62:8b:08:0c:2a:1d:a5: 18:59:7a:c1:df:ac:7f:74:3b:71:c0:bb:47:73:09: 93:08:ac:d7:1a:43:07:69:14:59:45:af:f6:0f:db: 85:ff:8d:26:86:ef:a3:c8:1d:7e:00:a8:5a:ae:de: 71:26:ef:30:37:53:06:1a:ee:28:a3:dd:ed:ed:3b: 85:41:e4:67:39:8f:93:c2:39:12:a4:80:db:e5:8a: dc:f6:12:9b:37:93:18:90:ff:d7:ad:30:78:fd:92: a6:95:83:5d:f6:fe:b3:70:fa:59:f1:99:f2:e1:3c: b2:ae:78:58:bb:1c:87:83:ec:49:40:12:7c:74:93: 20:26:a2:49:1e:0f:97:db:4a:a5:fa:cc:c5:8a:97: 84:86:2e:ec:77:ea:76:ea:8d:5c:34:30:6b:3e:92: 71:26:9f:8e:e3:d0:99:b0:9a:88:4f:ef:61:02:45: 8b:00:45:c3:9b:79:a3:0d:3d:c4:da:13:02:63:c0: 01:9d:70:35:a9:30:ce:c0:fa:d1:c0:ee:eb:95:bf: f7:92:0b:ca:be:cf:01:53:a1:de:43:69:78:e3:62: e7:40:9c:10:05:fb:0c:d3:37:14:b3:36:49:23:6a: 66:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3C:82:4B:0B:6F:22:15:8C:C8:0D:9B:D6:EA:DA:0E:85:7B:13:B2 X509v3 Authority Key Identifier: keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:3e:c4:03:72:b2:e5:71:8c:f8:c9:92:be:65:1c:9a:0a:f4: 39:03:09:ca:5a:c8:c1:10:26:61:75:f4:0a:eb:0d:b8:44:9e: ec:8b:c4:25:71:d7:e0:89:c6:6c:7a:26:8f:b7:c2:49:41:37: 74:24:2f:3e:18:5d:ae:f4:35:b2:8e:7d:54:3a:26:73:13:00: 27:0f:f1:0c:57:bd:ef:3d:d5:58:fb:17:a6:13:7a:7b:db:6d: 6a:8b:da:03:04:f5:eb:e2:da:25:8e:b3:fd:81:3b:2d:7b:23: 79:50:88:42:18:e9:57:b4:4a:49:bf:45:c2:aa:1d:09:39:46: 05:f1:75:0c:d1:c9:88:2f:bd:45:f7:3b:62:02:9c:82:69:f3: df:88:0d:42:fb:fb:25:90:17:65:21:35:9d:f0:fe:d7:5c:70: db:b8:37:c2:ed:9a:86:cb:3e:fa:c3:f1:17:80:af:f4:3d:49: 6d:f0:40:89:1a:ae:e0:ea:a0:a5:99:4b:d9:46:f0:47:16:c4: 05:92:7e:94:10:c8:ea:64:8e:91:4f:78:a9:23:a4:ca:a0:75: 52:85:99:19:bb:78:dd:50:43:ab:7b:bf:1c:40:ac:72:25:87: 5e:f5:b1:52:71:6f:ef:e6:5a:93:83:5b:c6:9f:5b:08:52:48: 22:55:3d:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdsYf2qIfgh64wotCplgtiVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmN2RhNTY4YWQwMjdiOWUyNDljMTNlMjIzZDMyMjc2OTg4 MWEyOWYwHhcNMjUwNjE0MDMwMDUwWhcNMjUwNjE1MDMwMDUwWjAzMTEwLwYDVQQD EygwOTNjODI0YjBiNmYyMjE1OGNjODBkOWJkNmVhZGEwZTg1N2IxM2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqVMRuz0bA/hsC6LrIBVlbRPolzr nGKLCAwqHaUYWXrB36x/dDtxwLtHcwmTCKzXGkMHaRRZRa/2D9uF/40mhu+jyB1+ AKhart5xJu8wN1MGGu4oo93t7TuFQeRnOY+TwjkSpIDb5Yrc9hKbN5MYkP/XrTB4 /ZKmlYNd9v6zcPpZ8Zny4TyyrnhYuxyHg+xJQBJ8dJMgJqJJHg+X20ql+szFipeE hi7sd+p26o1cNDBrPpJxJp+O49CZsJqIT+9hAkWLAEXDm3mjDT3E2hMCY8ABnXA1 qTDOwPrRwO7rlb/3kgvKvs8BU6HeQ2l442LnQJwQBfsM0zcUszZJI2pmeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAk8gksLbyIVjMgNm9bq2g6FexOyMB8GA1UdIwQY MBaAFF99pWitAnueJJwT4iPTInaYgaKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUt Mzc1NzUzOWMyYWM5LzEvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUtMzc1NzUzOWMyYWM5 LzEvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACT7EA3Ky 5XGM+MmSvmUcmgr0OQMJylrIwRAmYXX0CusNuESe7IvEJXHX4InGbHomj7fCSUE3 dCQvPhhdrvQ1so59VDomcxMAJw/xDFe97z3VWPsXphN6e9ttaovaAwT16+LaJY6z /YE7LXsjeVCIQhjpV7RKSb9FwqodCTlGBfF1DNHJiC+9Rfc7YgKcgmnz34gNQvv7 JZAXZSE1nfD+11xw27g3wu2ahss++sPxF4Cv9D1JbfBAiRqu4OqgpZlL2UbwRxbE BZJ+lBDI6mSOkU94qSOkyqB1UoWZGbt43VBDq3u/HECsciWHXvWxUnFv7+Zak4Nb xp9bCFJIIlU9Dw== -----END CERTIFICATE-----Generated at Sat Jun 14 12:18:48 2025 by rpki-client