$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft File: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft (raw, json) Hash identifier: 5eO723DPwyikVsyCgorJsqhQnHrvPfqI11BNlG+TmfY= Subject key identifier: DB:E1:D1:6E:4B:C6:C5:81:81:C4:E4:63:E7:91:B8:B1:9F:84:20:A3 Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2 Certificate serial: 01976C98A499B1CAA2E8F360BD663F1B902F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft Manifest number: 159C Signing time: Sat 14 Jun 2025 04:00:32 +0000 Manifest this update: Sat 14 Jun 2025 04:00:32 +0000 Manifest next update: Sun 15 Jun 2025 04:00:32 +0000 Files and hashes: 1: 0bSG1GbQSr3JP2M9BW2A6zWEmWQ.roa (hash: m8/KEzPrRo4PqG3DFfILeyvmSqlK6Zrphut5P8ccG8c=) 2: 9lwL98-HDVBrZzYLRCpSdOAFXpo.roa (hash: Za/9eX9VNb3FiSxJk6MAE/CpFGWxRO5mjghE1elRivc=) 3: B0iUIhkwv2ZZdyXRyu9yUh7Z61o.roa (hash: F6O6OkDRyyyGqFimHsLztSYsh0AUNFPNkRW3jSPwvEw=) 4: I1EoUAseUd3MHO-sI_txqICBiwc.roa (hash: khM+HdjIw9WozXCqEk/wtCOtMrpNfxWXErjSXn8BT5M=) 5: KQ7nGqqdl8DwDw35UdDbOJPZhfY.roa (hash: 8pIf1gsysAeCO62ayw5k2bU+b1g8t0mrR6+zNCtTibQ=) 6: LS_oKjOyENRZwn9y786G7x_fDEc.roa (hash: qwrjawF9Z67WE+ivjm8mPIl3xqaLReHxca9+SNnwKPE=) 7: Pvub5ztTS47f0XG6tBZE9ngX8Rw.roa (hash: euQ5dqT6xwCfoTsPu9P7kfQ9UGdbPzkkEJWSyFwCBTw=) 8: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl (hash: oNMBjaVxU2FXCQFkYCuu4hqiBPJW9J/+M6WGdE9z1Pg=) 9: lqxGizsVmZbvi7xpd3yzs2I4ILw.roa (hash: aTi4SECMvkjegR9/FyzL9HTmeGkM0AsiVgyipWCsYrY=) 10: sFnlwbiQ75y8_114DKwn3kP_iWc.roa (hash: dkHr9wKemXLLSQfaJK2+kCvWwELtA6u+nMBynz2rXgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6c:98:a4:99:b1:ca:a2:e8:f3:60:bd:66:3f:1b:90:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2 Validity Not Before: Jun 14 04:00:32 2025 GMT Not After : Jun 15 04:00:32 2025 GMT Subject: CN=dbe1d16e4bc6c58181c4e463e791b8b19f8420a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1f:7d:3a:b6:9e:9b:67:62:30:d3:a1:8e:82: ba:0c:fc:b1:1c:5c:bf:e7:e1:42:09:1a:71:48:bc: 38:3c:63:60:d5:17:0d:8b:27:94:45:79:5f:f5:27: e3:95:71:b2:f8:41:3c:9c:8d:44:6a:49:86:1f:7e: 67:58:5e:14:f1:0c:44:08:7c:6e:5d:fe:c5:0a:81: b7:e1:3b:d0:04:fa:1e:a3:4c:94:a6:eb:7e:9c:ca: 28:68:d3:f7:6e:c1:8c:79:a0:ba:56:a1:64:4c:b7: 64:e0:48:47:2b:9d:a5:1c:9b:9d:10:a5:6f:3c:fb: 43:0a:83:ae:5a:52:97:a3:92:21:3a:73:6b:20:a7: 56:b5:81:8d:32:ec:88:e8:11:a4:54:1e:6a:da:be: 71:c7:75:80:7d:5a:02:60:fa:80:71:ce:01:1b:5e: dc:21:f9:63:f9:7e:18:50:1d:fc:d8:a9:c0:55:d2: eb:df:e0:9b:49:a4:b2:19:0d:44:23:78:e4:b6:f9: bb:89:b5:9d:43:ea:ac:76:17:f8:cb:4f:b8:6e:95: 91:ba:3d:ee:62:b4:b1:37:e2:2c:2e:30:41:87:79: 32:9c:65:df:95:c1:77:a2:e6:35:47:01:2a:ea:f7: 48:ca:b6:a0:2e:20:1c:12:7c:c5:63:20:7a:f9:03: c4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E1:D1:6E:4B:C6:C5:81:81:C4:E4:63:E7:91:B8:B1:9F:84:20:A3 X509v3 Authority Key Identifier: keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:80:83:f5:4b:9a:62:66:c5:ad:6a:47:25:24:98:96:b4:cb: 0a:1f:fe:2d:21:a3:3f:19:8c:f6:25:95:3e:60:d4:4d:be:13: f0:53:8c:7f:45:06:41:d6:98:77:0c:03:fb:09:b0:6d:0a:9c: 1e:e4:be:02:59:be:77:14:40:ee:8b:8a:58:01:a3:51:0e:aa: f3:2e:15:f7:d3:4a:ce:1d:c4:ac:7a:6a:ba:af:f8:c8:1e:30: a4:fc:11:52:fa:ee:20:e4:39:f6:37:bf:1b:de:e4:0d:12:23: 37:2e:ac:02:64:39:c2:65:c4:9b:25:05:2b:27:d4:19:d0:db: 62:30:fe:70:d2:ab:0f:c3:7b:1d:89:b7:24:0d:b4:ab:06:4e: 39:24:31:52:2c:dc:0b:f9:9a:24:8e:c3:03:a9:57:78:59:96: a1:eb:90:31:18:58:61:45:79:42:c2:48:25:6d:a7:c0:f3:f2: c2:cb:fd:1d:9d:19:6f:d5:27:2e:75:f1:03:29:05:a9:79:2c: bd:f9:87:02:65:40:80:85:14:1c:90:17:21:3b:77:7a:e8:e7: c6:b5:af:74:1b:8c:d1:2d:16:e1:e2:e0:32:4e:6d:73:1a:87: 9d:59:24:d4:13:45:69:0b:ba:6b:2f:a6:75:bd:37:ec:b6:cc: 03:7e:e5:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdsmKSZscqi6PNgvWY/G5AvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy MWZjZjIwHhcNMjUwNjE0MDQwMDMyWhcNMjUwNjE1MDQwMDMyWjAzMTEwLwYDVQQD EyhkYmUxZDE2ZTRiYzZjNTgxODFjNGU0NjNlNzkxYjhiMTlmODQyMGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB99Oraem2diMNOhjoK6DPyxHFy/ 5+FCCRpxSLw4PGNg1RcNiyeURXlf9SfjlXGy+EE8nI1EakmGH35nWF4U8QxECHxu Xf7FCoG34TvQBPoeo0yUput+nMooaNP3bsGMeaC6VqFkTLdk4EhHK52lHJudEKVv PPtDCoOuWlKXo5IhOnNrIKdWtYGNMuyI6BGkVB5q2r5xx3WAfVoCYPqAcc4BG17c Iflj+X4YUB382KnAVdLr3+CbSaSyGQ1EI3jktvm7ibWdQ+qsdhf4y0+4bpWRuj3u YrSxN+IsLjBBh3kynGXflcF3ouY1RwEq6vdIyragLiAcEnzFYyB6+QPEuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvh0W5LxsWBgcTkY+eRuLGfhCCjMB8GA1UdIwQY MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt Mzk1NTk1OWVhZjgxLzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgICD9Uua YmbFrWpHJSSYlrTLCh/+LSGjPxmM9iWVPmDUTb4T8FOMf0UGQdaYdwwD+wmwbQqc HuS+Alm+dxRA7ouKWAGjUQ6q8y4V99NKzh3ErHpquq/4yB4wpPwRUvruIOQ59je/ G97kDRIjNy6sAmQ5wmXEmyUFKyfUGdDbYjD+cNKrD8N7HYm3JA20qwZOOSQxUizc C/maJI7DA6lXeFmWoeuQMRhYYUV5QsJIJW2nwPPywsv9HZ0Zb9UnLnXxAykFqXks vfmHAmVAgIUUHJAXITt3eujnxrWvdBuM0S0W4eLgMk5tcxqHnVkk1BNFaQu6ay+m db037LbMA37lhw== -----END CERTIFICATE-----Generated at Sat Jun 14 10:18:38 2025 by rpki-client