$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft File: I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json) Hash identifier: Vp+C0h+Ep5uaO6PXrzE9LR210iAszhZ25ZQtXQFNa9g= Subject key identifier: 60:10:26:9C:07:22:0F:56:31:B3:B0:27:1A:C3:12:35:23:6D:C9:68 Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 01976D06A96F50B0E2DA2ADB8004A227F5A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft Manifest number: 0BCF Signing time: Sat 14 Jun 2025 06:00:42 +0000 Manifest this update: Sat 14 Jun 2025 06:00:42 +0000 Manifest next update: Sun 15 Jun 2025 06:00:42 +0000 Files and hashes: 1: 2tV1T5SBsSkKar1qXX5FYlQ_B9Q.roa (hash: mGLI3Jd52qgMG50087Vl0ag+Rgi85Yfd8348tK3nJlQ=) 2: 9CjEL92KVQbBIKjAH6PWgI9d9kA.roa (hash: CxlINazLO+svbCxijVW6/kRGdkNG420xQ9K3jp5I7bo=) 3: 9Q-K0yA0D9jdkGXn7ifhVh2hLe4.roa (hash: BhOE66QanPWqjjysyWqBU6hcSToV2kkgkpmWedK9Plo=) 4: BKpPZ6YhMA786wWelQvZ2FdIeg0.roa (hash: CY94cVx1ALq/cp1lEiwu3JzO7Vk53LXHozpiwU2ifHA=) 5: Gg5xBTPmG5wIfgvjDfofedqUN2I.roa (hash: 44BexOUoVzM2f1vahHLSGVHdqnL6HKMPG3ed5PmM4sw=) 6: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: mYH3CEco+fTuexfvs+GSK6yq0Xkr1rtPYLhxeUEt+ak=) 7: KfWHlYFQnzVI2dPuoiLZqsly00A.roa (hash: hXW7e+AyYxT2PE5t8wRUT3atz/+WaH8gt4XQgdBp/mU=) 8: LtctFlc4GRCf3PIlxO5Sz70Upcc.roa (hash: 9oaNZGvrfQP+yRIBwwcg5U7jui8/sOP7Dz6ZLTuPIgM=) 9: LxwAd59gPAFiSwQsp6U5bWHTUIA.roa (hash: sV/jv6UM3eB6Fepo8zmoDeIxV8A3Cp94EBt2zbiu7+M=) 10: M73NPvrSZwGhIOTA9SbUvHl1x90.roa (hash: ijksxiMRPCxOAqaVav7odzv/IiE5tQUZQM4rRqWGT00=) 11: P4Ngmm4fscIJdjrtcZXwEWC6af0.roa (hash: Dgr4uE36WEf5Xw9kH8tw5qMQ+ewLeqeUvdPupgorbKg=) 12: gspg21PC-Bi6SGHc2DwZhP3SxPE.roa (hash: za152yl/mt+IWnj6LxRFIHIPMleLO2z2bWoNpUAX6js=) 13: nppvTips8XGcmj9VgC_a0xkLzT8.roa (hash: +FXbEH/4T1tplmkgWcOzmoIVkqvQhGApNb34NJo2CWU=) 14: o99Nup4psTKMh8kJYocwkh14uKQ.roa (hash: lhz5Qy+hcNJDmky6RtlI26JguzX0YUJj3nMqDKA0YLM=) 15: y9rvtnyXZQSaHcISGufCbgd9oMg.roa (hash: YtKgQZ+a37E4WaxSPAYmpHW8Z8QKRoCD8fhZcaauCRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6d:06:a9:6f:50:b0:e2:da:2a:db:80:04:a2:27:f5:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Jun 14 06:00:42 2025 GMT Not After : Jun 15 06:00:42 2025 GMT Subject: CN=6010269c07220f5631b3b0271ac31235236dc968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:81:ca:f1:ec:e4:27:b5:c0:5c:86:80:4d:f0: fa:ce:79:3f:dd:61:3b:54:19:e2:0e:29:69:4a:76: 40:1b:67:3c:cc:81:4f:2f:14:c0:b7:a3:8f:8e:26: 50:09:8f:bb:c4:af:fb:45:fd:f3:e7:e7:59:5d:fc: 6d:0c:05:05:dd:7d:0f:d4:a7:06:4f:47:5d:52:a5: 8f:8d:0c:1f:9f:a8:db:9b:2b:35:bb:d9:41:1b:6d: 47:7b:13:01:eb:fe:3a:ec:1f:4a:bb:50:cf:e8:1a: c6:b2:70:90:bb:30:3b:8f:0e:53:44:c4:06:fd:a1: cc:2f:c0:af:4a:af:9e:9d:75:c1:b8:46:bb:98:fb: fb:9f:f3:9b:d7:ec:8a:1a:06:bf:f0:f9:16:17:c9: c7:7f:7e:c9:fb:c0:a4:f5:b7:7d:c4:5c:79:50:65: cc:c2:ff:4c:3b:5b:f4:9d:bd:b1:2d:62:72:be:b1: 86:02:35:02:32:a2:88:ce:d4:ec:1a:d1:a1:e6:f9: 1c:c9:b3:66:8d:68:25:ac:a7:61:88:42:ee:bc:31: d7:d9:d9:90:b7:72:4a:33:a3:b8:27:61:94:cd:60: 1c:75:2e:69:08:22:57:e7:88:61:cb:5e:29:9e:0c: 96:03:1f:1e:6a:38:7d:20:61:7a:6f:ac:9f:db:0a: 0a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:10:26:9C:07:22:0F:56:31:B3:B0:27:1A:C3:12:35:23:6D:C9:68 X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:72:24:a6:c3:84:dc:cb:2f:d2:6a:ba:f3:b4:fd:35:5e:3f: 74:76:70:27:3e:4d:73:96:ae:3e:86:c6:fe:df:81:3d:37:e4: 54:4a:5e:30:da:b4:ff:e8:aa:55:70:6e:9c:aa:52:1a:0b:90: a1:82:8e:07:90:ea:e2:0e:25:7c:d1:73:24:05:5f:14:a0:39: 05:46:91:8f:51:ce:12:03:4b:d4:1d:26:8d:42:78:06:96:b6: bb:6e:c4:ab:6b:38:3f:e8:5c:a7:c5:c5:7b:e6:88:0c:91:48: e3:ba:7f:a3:94:23:9b:95:ed:fc:6c:14:2b:70:3c:5f:10:94: 96:e9:40:f8:f8:08:38:73:d3:8f:5e:5f:42:2e:a5:6c:66:74: c4:8e:7a:c4:79:30:bf:18:1b:24:b1:f6:19:fe:1d:f4:8d:ea: 3a:f0:4d:bc:0d:7d:bc:82:80:56:35:55:95:1c:c2:e9:3e:9a: b1:95:d1:21:e2:a6:36:95:10:a0:58:11:48:1f:0a:f7:5e:6f: ad:ab:60:8d:6b:c9:ed:31:a8:70:43:57:02:94:8c:ed:04:77: ea:63:33:c1:6b:24:6b:e1:96:42:fc:2b:3a:87:9b:19:e0:af: 3a:3b:66:f0:74:69:3d:0d:3d:d4:cf:80:ae:6a:37:d3:d0:34: 0d:29:f3:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdtBqlvULDi2irbgASiJ/WkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjUwNjE0MDYwMDQyWhcNMjUwNjE1MDYwMDQyWjAzMTEwLwYDVQQD Eyg2MDEwMjY5YzA3MjIwZjU2MzFiM2IwMjcxYWMzMTIzNTIzNmRjOTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4HK8ezkJ7XAXIaATfD6znk/3WE7 VBniDilpSnZAG2c8zIFPLxTAt6OPjiZQCY+7xK/7Rf3z5+dZXfxtDAUF3X0P1KcG T0ddUqWPjQwfn6jbmys1u9lBG21HexMB6/467B9Ku1DP6BrGsnCQuzA7jw5TRMQG /aHML8CvSq+enXXBuEa7mPv7n/Ob1+yKGga/8PkWF8nHf37J+8Ck9bd9xFx5UGXM wv9MO1v0nb2xLWJyvrGGAjUCMqKIztTsGtGh5vkcybNmjWglrKdhiELuvDHX2dmQ t3JKM6O4J2GUzWAcdS5pCCJX54hhy14pngyWAx8eajh9IGF6b6yf2woKpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGAQJpwHIg9WMbOwJxrDEjUjbcloMB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3IkpsOE 3Msv0mq687T9NV4/dHZwJz5Nc5auPobG/t+BPTfkVEpeMNq0/+iqVXBunKpSGguQ oYKOB5Dq4g4lfNFzJAVfFKA5BUaRj1HOEgNL1B0mjUJ4Bpa2u27Eq2s4P+hcp8XF e+aIDJFI47p/o5Qjm5Xt/GwUK3A8XxCUlulA+PgIOHPTj15fQi6lbGZ0xI56xHkw vxgbJLH2Gf4d9I3qOvBNvA19vIKAVjVVlRzC6T6asZXRIeKmNpUQoFgRSB8K915v ratgjWvJ7TGocENXApSM7QR36mMzwWska+GWQvwrOoebGeCvOjtm8HRpPQ091M+A rmo309A0DSnzpQ== -----END CERTIFICATE-----Generated at Sat Jun 14 10:33:34 2025 by rpki-client