$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft File: 0d4STg-K2059lXbOrjJfZo3SJLE.mft (raw, json) Hash identifier: XeHQii2huPW6Q2TuNpR4liROdlHYe6bkkvm921/H5k4= Subject key identifier: DF:C2:35:9B:F7:FF:88:EA:9E:F0:EE:CD:C8:23:F8:E7:94:35:67:8E Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Certificate serial: 01976EF5119AE40673CEEFD34EE62BF24832 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft Manifest number: 10AF Signing time: Sat 14 Jun 2025 15:00:43 +0000 Manifest this update: Sat 14 Jun 2025 15:00:43 +0000 Manifest next update: Sun 15 Jun 2025 15:00:43 +0000 Files and hashes: 1: 0d4STg-K2059lXbOrjJfZo3SJLE.crl (hash: F0ijLJFaYS4jLtyZGkJJykiP9cI7rfnIhRIp7r7aKOM=) 2: 173-Kv1jDbMWH-4jzzP9yAxk8zA.roa (hash: RAtumuE7sBDLlYGFZheJtE3TDChYxfxrc7dviHDr/Y8=) 3: 21R7B0PZj4S2nfPcu6UWFcUKPgw.roa (hash: qB6ZX383pt5nIhJxyHETDpwIazDIAavubmmD8LzTgMY=) 4: 6caVUV-TGB9bU55p1ya71OWBwvg.roa (hash: c0tRExOUVeBF8+Pq6PhYarD4KHj6+N7f0p/w2jdUK80=) 5: NAlGVYpV8OEmdD2nIMiqn334k0M.roa (hash: XrkbVPgrR7sOnmYGzDR8m+MZN8NJUZRQwjZqOHkM5b8=) 6: dNqRqY6tmtgccI8cx_uJ4tWqiZA.roa (hash: g+K2hBhsL/swaozLRy4ek/JzzpG8kCplNhlD1lsyOeY=) 7: dm3YzK1xAmi2Sk5h8a3Khi5LGPM.roa (hash: p3jFvRhnZ5PWDigF+fLcdkZKduSSZASiccn7Ico+UoY=) 8: g8zmfO2HPSEN8YUDrAkY2r7Nlqw.roa (hash: uAg57JMTD8oD+ghOOtfACvdQoLeAHc5YjQ/CuCFoViY=) 9: hacEV-MoLT8z9KwMPWss3cGE7Ak.roa (hash: /ljDI2bMRna9vPYEiWkrDiOeR+IfW8BnSxXE9Vp7xXE=) 10: odu_cE6nPid9mTtdeynLn3Tm0LI.roa (hash: t/tnuabvUXprLV1nfI7C0+QM/zgYQu0v/clGVZKqTgc=) 11: qnoXcobTtJZawYccy6q_j_ktEjQ.roa (hash: YgqRq2TALdrM9up57j8hrsz1UPh0HBnD1px4pxGN8rs=) 12: xiZp6eivWb7x_d9W-WC8kwhVWsI.roa (hash: GvxU73beqXLMBxGmaGGngexgQ65uQMfsvmeuizGIl8o=) 13: yv08EH90nRPgnJ4aLVioWHP74iI.roa (hash: wfa+cbtIfXj/VcabZ84otkiskAuSmrS6+55fqOkIL+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6e:f5:11:9a:e4:06:73:ce:ef:d3:4e:e6:2b:f2:48:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Validity Not Before: Jun 14 15:00:43 2025 GMT Not After : Jun 15 15:00:43 2025 GMT Subject: CN=dfc2359bf7ff88ea9ef0eecdc823f8e79435678e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1f:98:98:7e:49:f8:06:c8:92:37:ad:92:5f: 30:bb:7a:31:79:e4:b5:05:a2:e7:d3:0d:5e:3b:fe: 2e:6e:ee:91:89:85:35:bb:2c:12:68:41:9d:1a:a3: f0:09:98:15:43:a7:5f:f1:b0:88:f4:83:db:fd:51: 23:54:b9:c2:78:14:8a:cf:38:44:27:d1:98:ce:3d: 92:85:52:50:81:4b:a8:3d:39:9b:3e:0a:71:ff:69: c0:2d:ca:a8:f2:0c:6c:e9:10:8b:d2:ef:9f:71:89: 6e:e7:cd:50:c8:e4:33:0d:76:68:76:76:14:b1:da: 01:6a:6b:8d:46:7b:61:79:18:b4:a2:d4:6d:f4:e8: 85:f9:6e:43:20:d2:ec:31:ac:c1:81:8a:de:68:33: 05:17:81:81:f6:df:2c:df:b1:16:fa:f8:a8:f3:d7: 66:62:cf:73:f0:9a:58:0c:49:2e:d8:eb:65:e6:56: e8:bb:aa:24:07:c3:6c:ee:c1:9b:a2:8e:cc:8c:b0: e7:39:7b:96:15:7d:51:0c:e6:0b:a0:0a:99:71:17: 1f:1e:b4:ce:97:26:9b:c1:32:92:31:28:86:7c:a7: 46:42:7b:c9:93:c1:bf:d6:de:8e:f2:09:94:06:8c: 86:66:29:e6:25:62:d5:71:4c:83:a7:1e:2c:a0:88: c0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C2:35:9B:F7:FF:88:EA:9E:F0:EE:CD:C8:23:F8:E7:94:35:67:8E X509v3 Authority Key Identifier: keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:ca:4f:0d:d8:ae:ef:a9:64:38:d9:87:59:61:07:27:f9:ab: 5e:6a:37:9f:90:88:d3:a2:86:90:82:03:a4:4d:0d:a9:d2:0b: 7d:4f:8f:d9:58:06:b6:e8:22:c7:78:54:12:37:dc:69:f8:65: 54:15:ce:8f:ec:7a:9d:31:72:68:1a:f2:51:02:23:5c:f1:73: 45:35:86:ad:ab:3b:75:98:26:1f:01:80:d9:5d:77:72:48:83: 51:ff:fb:41:a3:95:56:e8:44:90:e2:e3:bc:a2:24:b1:aa:a5: b1:60:73:dd:8d:b7:35:46:c8:c0:fc:6a:ac:68:73:bb:1b:26: 24:7a:27:ea:bf:0c:40:79:40:8d:b0:c4:55:8f:bd:06:0c:65: 45:a5:3f:f8:76:56:40:ae:ed:5b:93:65:2f:c2:aa:bf:e6:3f: 0c:3b:74:9d:44:00:a5:fe:0f:c3:08:cd:02:59:8f:5e:33:68: dd:ac:03:07:50:fd:39:ac:43:0d:11:7c:99:37:24:24:3a:98: df:06:87:e8:43:cd:8b:74:4a:c0:a9:bb:87:b7:3e:3b:5b:ee: 9b:a9:a8:5f:26:15:ac:ce:16:1e:77:c6:10:7b:58:98:48:6f: 32:f8:34:ba:0c:60:60:58:62:f8:16:f5:51:2e:d0:88:3f:b4: bc:36:83:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdu9RGa5AZzzu/TTuYr8kgyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZGUxMjRlMGY4YWRiNGU3ZDk1NzZjZWFlMzI1ZjY2OGRk MjI0YjEwHhcNMjUwNjE0MTUwMDQzWhcNMjUwNjE1MTUwMDQzWjAzMTEwLwYDVQQD EyhkZmMyMzU5YmY3ZmY4OGVhOWVmMGVlY2RjODIzZjhlNzk0MzU2NzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1R+YmH5J+AbIkjetkl8wu3oxeeS1 BaLn0w1eO/4ubu6RiYU1uywSaEGdGqPwCZgVQ6df8bCI9IPb/VEjVLnCeBSKzzhE J9GYzj2ShVJQgUuoPTmbPgpx/2nALcqo8gxs6RCL0u+fcYlu581QyOQzDXZodnYU sdoBamuNRntheRi0otRt9OiF+W5DINLsMazBgYreaDMFF4GB9t8s37EW+vio89dm Ys9z8JpYDEku2Otl5lbou6okB8Ns7sGboo7MjLDnOXuWFX1RDOYLoAqZcRcfHrTO lyabwTKSMSiGfKdGQnvJk8G/1t6O8gmUBoyGZinmJWLVcUyDpx4soIjAhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/CNZv3/4jqnvDuzcgj+OeUNWeOMB8GA1UdIwQY MBaAFNHeEk4PittOfZV2zq4yX2aN0iSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTct NGY0YzliMzQzZTkwLzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTctNGY0YzliMzQzZTkw LzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuMpPDdiu 76lkONmHWWEHJ/mrXmo3n5CI06KGkIIDpE0NqdILfU+P2VgGtugix3hUEjfcafhl VBXOj+x6nTFyaBryUQIjXPFzRTWGras7dZgmHwGA2V13ckiDUf/7QaOVVuhEkOLj vKIksaqlsWBz3Y23NUbIwPxqrGhzuxsmJHon6r8MQHlAjbDEVY+9BgxlRaU/+HZW QK7tW5NlL8Kqv+Y/DDt0nUQApf4PwwjNAlmPXjNo3awDB1D9OaxDDRF8mTckJDqY 3waH6EPNi3RKwKm7h7c+O1vum6moXyYVrM4WHnfGEHtYmEhvMvg0ugxgYFhi+Bb1 US7QiD+0vDaDNA== -----END CERTIFICATE-----Generated at Sat Jun 14 20:56:21 2025 by rpki-client