$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft File: dOPDNpcglLGowT1BgWhX0Zejquk.mft (raw, json) Hash identifier: bWgzpDNSWUc/YHzLXLtJpg1+XLSUSDmb50cp8sjAYqk= Subject key identifier: D0:BA:F6:E1:05:2D:78:5D:94:A7:69:0A:7D:C4:17:1B:C7:20:38:75 Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9 Certificate serial: 01976E50B0B4A2D33E10216755118737DCF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft Manifest number: 12AF Signing time: Sat 14 Jun 2025 12:01:11 +0000 Manifest this update: Sat 14 Jun 2025 12:01:11 +0000 Manifest next update: Sun 15 Jun 2025 12:01:11 +0000 Files and hashes: 1: 1jpCyAps9bajWpTTNjuuJqkvGNw.roa (hash: QdNF4dszmqN93C6OMT7lYcdmskEQt8kQtHTCFEeRLK4=) 2: B-IzhwSKXhHkz88nSETOGD9yRG4.roa (hash: YnLpp9fGmyMsduAjb3ebFR0Lsy/94n7A+dxRiyz9BXo=) 3: LfVA7yFSUE0qhq_HYTK38H6PAlY.roa (hash: Kppg3VjpkBzGqtZq9DRkl+9W1VehTNUgM7T4eg/Jh/E=) 4: UEcNqvrJ5SQl5H_s0LFUfwkR_hE.roa (hash: bIJXuRboJUOwUf77dVkGAbQtOlD1q8qNpaYp5FkD4+Y=) 5: UWwzSZwnxpR_r3Y4D6vttKdBBVs.roa (hash: 7svZa4xV7+uz3XJCftME26l72YGSUBkSe+OkDk5Vluk=) 6: VJ6MDr9v2VTJjopln-NK2ojxFwc.roa (hash: aCjSF+Bt+cDnTvcdibhV9s05hQuvY9LCYp3eMrgD2Ks=) 7: YOcpXFVJRTJW2caFAPTppkNQBuk.roa (hash: bsMm8G8+2Vegzn+c1SqEObi1wuYbeOXaQ994ZEYf674=) 8: a1U9llCdwrEqU4GkcwBsuwGny80.roa (hash: x9+7kA4QQzpZS4+gdNTWeXV2Ehq7i5FwV0w3Ws0zS7A=) 9: bilxvgHa_ortWdZiJoCPu9q2EO4.roa (hash: l/1X47j3OP5z+Rp05LuTXjyl7yZpgOm/aXT90ziTHDc=) 10: btX-zAe_zEJQ3ltM7sZKTKWNtzU.roa (hash: FXQNguGpvehosedHQRjCf06rJkvh5KY35ySN2Wig1dE=) 11: dOPDNpcglLGowT1BgWhX0Zejquk.crl (hash: donpYAI8fKr985QFkKXbXy+Koshy88k4A6ys2peqVf8=) 12: leLN7dUwqNQXTkicjPodaPNaHrA.roa (hash: /TZBYmyqPdbIBcWc+Ubi8mL2e3Sg1zgKUo/8XZMZsK8=) 13: ltEUPJ59iMmxTdNEYLGbM1Yq6jY.roa (hash: 4OyHOUV/gpG2mHKMCDQGjjKuCFHSFtOInlqympBF1Os=) 14: pzyfVcqGqM8oIh9yspKnplAOyo4.roa (hash: hsiUYyCYakxAYsQctvaT1faoOH457ARGeeeeMVZVUZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 10:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6e:50:b0:b4:a2:d3:3e:10:21:67:55:11:87:37:dc:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9 Validity Not Before: Jun 14 12:01:11 2025 GMT Not After : Jun 15 12:01:11 2025 GMT Subject: CN=d0baf6e1052d785d94a7690a7dc4171bc7203875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:af:7a:2e:0a:66:a2:52:fb:2e:d1:05:eb:c8: 90:bd:46:07:f5:24:cf:8a:66:d8:6e:e4:5f:55:5f: 51:2e:30:9f:51:11:d4:55:45:78:79:bb:a1:2e:2f: 35:39:33:a3:61:84:d0:e7:bf:ff:e6:a6:b2:fa:0d: 4b:36:a0:f6:42:ae:7c:88:d3:fc:bd:50:7a:49:84: 3e:bc:7e:82:f3:d6:5f:05:bc:9d:3c:2e:f7:2d:96: b9:50:84:24:6a:25:f6:f1:e3:8a:9b:bc:24:df:b3: 81:71:0f:ec:06:a7:61:33:44:2e:6d:5b:9d:a1:00: e2:93:b1:d1:82:fb:80:5a:5d:8f:1d:57:84:05:be: 8c:6c:5b:fa:fc:d4:65:07:59:c3:8d:45:09:1f:28: a3:42:c5:7a:82:6d:63:50:50:c8:8d:9c:54:ab:97: 96:cb:f1:42:dc:79:0b:22:7b:9e:73:93:15:9e:17: e0:60:d8:80:5c:ae:b3:85:1f:47:4d:ac:17:68:9d: 13:97:04:4c:ee:85:1d:93:ed:26:c5:9f:43:0d:bd: c8:cd:a9:ec:ff:12:d7:a0:fa:50:f0:f2:68:bf:1a: 31:c2:de:5b:86:10:73:f2:28:71:e9:d7:2b:1a:80: 22:e8:f3:4c:88:19:cc:ea:2c:a4:ca:db:a4:8d:23: ac:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BA:F6:E1:05:2D:78:5D:94:A7:69:0A:7D:C4:17:1B:C7:20:38:75 X509v3 Authority Key Identifier: keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a5:bd:ea:6c:46:16:72:5e:cb:ce:6a:40:7f:e9:24:77:e1: f7:d8:e6:f2:df:61:9e:2c:ae:9c:55:de:f5:22:ab:f6:13:7f: a9:45:7d:1e:89:b2:d9:89:e9:f6:ba:7d:9b:5d:b5:36:2c:6e: 5f:0f:44:09:91:86:15:22:db:b3:18:2c:9f:b9:2e:1a:59:77: 54:ed:e8:ed:34:d8:84:60:6b:33:1b:69:1a:38:1d:0f:31:fc: aa:a7:96:8f:3b:fb:3f:9d:67:3e:67:c4:97:04:96:85:b7:9c: cf:b9:f4:4d:68:e0:7f:90:0a:81:f2:b2:64:84:92:02:aa:5e: 0a:9f:32:0f:fb:ee:b3:46:1d:2d:cc:8b:df:dd:1c:f3:6b:eb: 3b:83:0a:5f:da:c1:68:ef:d7:9f:2a:4a:fb:8b:b5:2b:f9:11: 60:e0:06:82:da:c4:f4:55:e5:6d:ad:72:24:d5:91:49:51:d1: e0:d9:31:83:4e:d1:18:b2:c8:b2:60:7d:68:cb:71:b4:2a:85: d3:8f:db:f0:9b:37:9b:44:19:39:4f:1a:79:1b:65:b3:be:98: 75:c0:dc:d6:ac:bb:27:b2:b2:da:64:15:27:eb:8e:f3:46:df: 33:92:d0:e0:54:12:a1:c1:e4:e4:9e:b6:ee:87:57:28:bd:84: 45:ad:d5:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZduULC0otM+ECFnVRGHN9z0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh M2FhZTkwHhcNMjUwNjE0MTIwMTExWhcNMjUwNjE1MTIwMTExWjAzMTEwLwYDVQQD EyhkMGJhZjZlMTA1MmQ3ODVkOTRhNzY5MGE3ZGM0MTcxYmM3MjAzODc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv696LgpmolL7LtEF68iQvUYH9STP imbYbuRfVV9RLjCfURHUVUV4ebuhLi81OTOjYYTQ57//5qay+g1LNqD2Qq58iNP8 vVB6SYQ+vH6C89ZfBbydPC73LZa5UIQkaiX28eOKm7wk37OBcQ/sBqdhM0QubVud oQDik7HRgvuAWl2PHVeEBb6MbFv6/NRlB1nDjUUJHyijQsV6gm1jUFDIjZxUq5eW y/FC3HkLInuec5MVnhfgYNiAXK6zhR9HTawXaJ0TlwRM7oUdk+0mxZ9DDb3Izans /xLXoPpQ8PJovxoxwt5bhhBz8ihx6dcrGoAi6PNMiBnM6iykytukjSOsywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNC69uEFLXhdlKdpCn3EFxvHIDh1MB8GA1UdIwQY MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt YTZjNDllYjI4Mjg3LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3 LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa6W96mxG FnJey85qQH/pJHfh99jm8t9hniyunFXe9SKr9hN/qUV9Homy2Ynp9rp9m121Nixu Xw9ECZGGFSLbsxgsn7kuGll3VO3o7TTYhGBrMxtpGjgdDzH8qqeWjzv7P51nPmfE lwSWhbecz7n0TWjgf5AKgfKyZISSAqpeCp8yD/vus0YdLcyL390c82vrO4MKX9rB aO/XnypK+4u1K/kRYOAGgtrE9FXlba1yJNWRSVHR4Nkxg07RGLLIsmB9aMtxtCqF 04/b8Js3m0QZOU8aeRtls76YdcDc1qy7J7Ky2mQVJ+uO80bfM5LQ4FQSocHk5J62 7odXKL2ERa3VSQ== -----END CERTIFICATE-----Generated at Sat Jun 14 20:13:04 2025 by rpki-client