$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft File: jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json) Hash identifier: fsD9yMI26fbM1AsqqwLSz0Jwsn6E/Cv2L62UxQvzmuw= Subject key identifier: B3:02:D5:B6:F3:38:47:57:9A:DD:C7:A5:9F:2E:9F:28:AB:98:C6:32 Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Certificate serial: 019768BC2BAF966CD0ACC82593C02ECB6AF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft Manifest number: 152C Signing time: Fri 13 Jun 2025 10:00:51 +0000 Manifest this update: Fri 13 Jun 2025 10:00:51 +0000 Manifest next update: Sat 14 Jun 2025 10:00:51 +0000 Files and hashes: 1: A3slZgyg9eemzONzeM4ZjQZOkQA.roa (hash: X0hOJW7H3OQv8gNe/Scffw0tX7rp3lfITg3c2bDp62I=) 2: Dyi32KlOskocQHPe6FUF7ELQs5U.roa (hash: D3EF+UreJY6p0ckzuksgWXVvYetF6sITxKDGv/w2L0k=) 3: FJEFcX2c3QiytgwJXtBXdfXF7AQ.roa (hash: wDOQFjMrdpmJOwUI55qSC810FFGrsaY4QPcOoJKWykM=) 4: G_noKzntiWHLaHSdta1FputJESM.roa (hash: 76HBYH18Q5+wfRzE5ydGp21BC62rcsuS2tSvCzBrWp8=) 5: K9IKE8UzWzIlRqgdm5DBscj4DXI.roa (hash: TmNOvsKyJxclTHoJrrP+Wz2lJl3QKp06vZRtwf2Wkwo=) 6: Orf0-crrS-m0d2xw75OekVLRhcU.roa (hash: NyC6YqKt0FNmC1unp3jevt47/gr2Ss5dzqvXJGD2AjU=) 7: THZGRo10wjMlm6DbRUy7KjrwfkM.roa (hash: 9FjGohVB5WEFkwBSNZEgEcooaudVJnnxxDK2Jy9/LgI=) 8: VmEKVuU_uT-v34QUxuvTEoMoaug.roa (hash: lCfgs7Wts05rdP9N+OaYxsLVxOabAGR5SUtGArrm95M=) 9: Vxz_brs8mMP8pyfBjMG6SqLCoLA.roa (hash: InPdcQtGkZTGLva52kv6ADnfkbCulTXgK4jOcLs8G7M=) 10: Xmin5XG-kRl49Vt7ZEcTgSLDhDM.roa (hash: DHMC7YXYfDSAA2x6JnOvMwJT1zdpAymlypp6F1bKmgY=) 11: Yfzph1m23vmbClyvIoORpS1CW-E.roa (hash: SuwU2G9eYZ/n+GS6xB/GEsh3UziEYPdyi1WD5kRpjAo=) 12: _vcj5hH5PQmqE-mf4-B7kcWGpfg.roa (hash: ReLlnYnzQbiQ5Pk/0fIjBSPY1fpdoMBMJpSnkiSreWk=) 13: d-sWN4azI8sU7mlb0U-920Rsmtc.roa (hash: eiusVr40X1jFuIAj+CFi96eXy2bKXAQXnB20dKkv/70=) 14: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: /gQq3TM4cRTD6ftdGcrEkvzIkVxQxyrw4W40uXypxBE=) 15: mwm5rC4rfoUfkUGj1keywZQhhGw.roa (hash: dDwtNYt9WubuetSqef0LQakniH0rgBVhQK32OI1f1fU=) 16: nyxtNnWsxM3-5IIVvMZ44cQVEYU.roa (hash: ub8VtVKtgWVEPS0rlKsjT0ZjeuiFnfLTw/tC6ZpW/Vo=) 17: v5kzcztD_Zc4DwbwnN4YfKR9YoA.roa (hash: 33e8kQ++AVlCN79vtcp+1+C+oGUNBxplYHYOGaRMl58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 10:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:68:bc:2b:af:96:6c:d0:ac:c8:25:93:c0:2e:cb:6a:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Validity Not Before: Jun 13 10:00:51 2025 GMT Not After : Jun 14 10:00:51 2025 GMT Subject: CN=b302d5b6f33847579addc7a59f2e9f28ab98c632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fd:20:18:35:13:3e:70:28:e0:e7:91:00:2b: 17:7f:90:4e:d8:c9:e6:e5:10:de:e0:af:50:3d:03: 10:9d:b9:ee:f0:fa:4e:c3:0e:08:85:ba:5d:57:f5: 21:a7:ca:fe:6a:bd:d1:50:8a:a4:72:e7:c2:3c:4e: 25:a9:e4:98:87:31:c4:a2:be:8b:92:27:53:4a:3e: 7f:52:77:57:33:5b:97:54:16:41:a3:b9:30:e4:f6: 4f:aa:ee:5c:58:8e:77:41:63:36:0b:75:9f:68:f2: 83:0a:5c:75:3d:c1:7d:85:93:67:28:7a:bc:0c:b8: 29:8e:72:fa:10:ce:aa:49:0e:98:31:1c:b7:39:56: f9:7f:db:10:d6:11:b5:84:f2:b2:e4:9b:cc:3f:cb: 52:dd:67:a0:7a:4f:29:c9:85:5d:cb:4c:d5:6e:cb: fb:0d:5c:dd:cc:f5:a5:8a:1a:ba:d8:50:1c:77:00: 5e:64:3c:ea:15:d8:40:57:a6:82:45:58:03:a9:59: 88:e7:13:7e:fd:fd:16:0d:a7:7a:fa:2a:41:c8:d8: 4a:19:ae:4f:e2:7a:34:10:3a:51:8d:17:75:48:59: a9:07:aa:50:d5:15:ac:c7:a4:3c:27:59:52:8e:01: 15:4a:a8:5e:37:76:ef:b3:d7:e3:2b:1d:38:3d:70: ef:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:02:D5:B6:F3:38:47:57:9A:DD:C7:A5:9F:2E:9F:28:AB:98:C6:32 X509v3 Authority Key Identifier: keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:fc:9c:2b:38:af:ee:be:8d:10:0b:e8:07:67:57:d7:40:0d: de:91:94:47:50:96:4b:f0:22:40:44:5a:c2:79:0e:0b:ca:63: 07:aa:eb:a4:73:4f:c2:c8:80:8b:51:95:15:3b:94:0d:de:0e: f7:38:13:20:47:a0:01:be:e7:98:e3:2a:12:7d:57:21:9e:04: 4a:2d:82:ee:77:c8:a4:56:c0:5e:55:06:d3:06:e8:39:78:26: cd:52:ae:08:5a:21:73:b0:10:3a:b7:10:b7:65:1c:e6:af:94: 86:d6:a0:44:74:b7:09:2d:c1:ce:c0:7b:7e:80:33:7a:e9:6a: 67:ba:17:bf:c0:a1:f5:98:fc:0a:ab:30:5d:a0:13:b7:6c:1d: b0:9f:af:5c:b4:1d:b8:40:b6:b3:3c:99:ac:0a:df:0b:79:ec: 3f:5a:e3:f6:3c:88:a1:8b:e2:89:ba:91:41:21:f4:5a:5a:86: 47:4c:c7:46:60:dc:88:6a:f7:24:f0:88:05:8d:3f:e3:20:31: a3:0c:10:d0:4b:2e:08:da:6c:99:d9:3e:3d:39:98:a5:ba:52: cd:24:cc:16:d4:a1:f3:c8:6d:84:9c:19:ac:71:f8:3b:5f:da: 8c:c8:ee:7c:06:7c:4a:15:c5:6b:31:4b:c6:9c:6e:81:2b:fe: 4d:c5:db:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdovCuvlmzQrMglk8Auy2rxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl NjNjMTMwHhcNMjUwNjEzMTAwMDUxWhcNMjUwNjE0MTAwMDUxWjAzMTEwLwYDVQQD EyhiMzAyZDViNmYzMzg0NzU3OWFkZGM3YTU5ZjJlOWYyOGFiOThjNjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP0gGDUTPnAo4OeRACsXf5BO2Mnm 5RDe4K9QPQMQnbnu8PpOww4IhbpdV/Uhp8r+ar3RUIqkcufCPE4lqeSYhzHEor6L kidTSj5/UndXM1uXVBZBo7kw5PZPqu5cWI53QWM2C3WfaPKDClx1PcF9hZNnKHq8 DLgpjnL6EM6qSQ6YMRy3OVb5f9sQ1hG1hPKy5JvMP8tS3Wegek8pyYVdy0zVbsv7 DVzdzPWlihq62FAcdwBeZDzqFdhAV6aCRVgDqVmI5xN+/f0WDad6+ipByNhKGa5P 4no0EDpRjRd1SFmpB6pQ1RWsx6Q8J1lSjgEVSqheN3bvs9fjKx04PXDvRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLMC1bbzOEdXmt3HpZ8unyirmMYyMB8GA1UdIwQY MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt YmE3NzFmZmQyNjljLzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqfycKziv 7r6NEAvoB2dX10AN3pGUR1CWS/AiQERawnkOC8pjB6rrpHNPwsiAi1GVFTuUDd4O 9zgTIEegAb7nmOMqEn1XIZ4ESi2C7nfIpFbAXlUG0wboOXgmzVKuCFohc7AQOrcQ t2Uc5q+UhtagRHS3CS3BzsB7foAzeulqZ7oXv8Ch9Zj8CqswXaATt2wdsJ+vXLQd uEC2szyZrArfC3nsP1rj9jyIoYviibqRQSH0WlqGR0zHRmDciGr3JPCIBY0/4yAx owwQ0EsuCNpsmdk+PTmYpbpSzSTMFtSh88hthJwZrHH4O1/ajMjufAZ8ShXFazFL xpxugSv+TcXbvg== -----END CERTIFICATE-----Generated at Fri Jun 13 19:36:08 2025 by rpki-client