$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft File: pjvMbSX3R2-7PsM_bbw-nurZIhI.mft (raw, json) Hash identifier: t4YV33Xps+QPs/CNxYNIDY9aaLlaJkleTpogNwRDlCo= Subject key identifier: 42:35:DF:9C:0B:E3:45:92:82:40:53:51:8E:7F:6A:71:0E:70:B5:09 Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Certificate serial: 01977564C47EF100C18EC59A1B01964E18D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft Manifest number: 08F4 Signing time: Sun 15 Jun 2025 21:00:27 +0000 Manifest this update: Sun 15 Jun 2025 21:00:27 +0000 Manifest next update: Mon 16 Jun 2025 21:00:27 +0000 Files and hashes: 1: 5NFcVQOlS2SfRA9_dseHho-9-mc.roa (hash: swfI8aXvx2sxn3YOzxRnlDU7qvwOILHJAwX26Y3ztqI=) 2: 719PZLmeHqbujtRsKmvo5771XIo.roa (hash: bsKRuhzJIveVWiHQvKvv+dLt6oNf3d66tNY6ht9/C3A=) 3: 8WUQrdzKsEZUNzZ9k3E9ajfkd5s.roa (hash: Ixz0hSpVqJJ/oAfsncTGxOv3fHWBSaH9gBGjqTv8vpQ=) 4: FHXWFrj4nreKJjXTfDKCc6Y16Is.roa (hash: PfuW04ELrwKUUeQD8qGy+/BFhBo8C5J05OWPOUMFx5w=) 5: Ho4pDAaaconFe5cZ7ygze1a44Xo.roa (hash: 1pC6hpICFpbgfqlZn7adq2AVfLKO5t0AC5KWofkjFSE=) 6: Kd5CFoG07kPDgqUGQpHj24zQka8.roa (hash: +2s4BraFjLJP4x9hMH6DgHfMWVkWCLxuz2cF8ghToGs=) 7: NYJYw1BTKJV56akoY5ZQRJna-MA.roa (hash: brwHoHz9mi1vg8NUkbqZqqePDdu1Ej44xmauCwQ9Qac=) 8: TLEdQvZiEPlpX35O8B6oknJfuyE.roa (hash: AdjCtV/JftiFEQtyk78ssQUWpqAhZBfMUWjoyo3BngI=) 9: fBfhsJw2d6Op2y70b533dv-T4j4.roa (hash: B8cZmEngTY2Ne9QwtzyJ6aeIrWSAdYH7Des5rTXKgP4=) 10: jjVj8ut3TAMijOjphvwLORhRrIA.roa (hash: Zp78cC77ysM5isjYxmd8XIzBwQe7MaRiddh0luAzMZA=) 11: pjvMbSX3R2-7PsM_bbw-nurZIhI.crl (hash: +fvamGnXQKaAh7NMr7mSjsqRu+Z6tSnStnX4e+NWxkE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 20:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:75:64:c4:7e:f1:00:c1:8e:c5:9a:1b:01:96:4e:18:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Validity Not Before: Jun 15 21:00:27 2025 GMT Not After : Jun 16 21:00:27 2025 GMT Subject: CN=4235df9c0be34592824053518e7f6a710e70b509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1e:e7:02:92:d0:72:5b:1f:08:e5:b3:ff:50: 32:0b:5b:82:ee:73:6d:74:ca:95:83:c8:49:e9:79: 0a:0d:4a:2b:73:25:ab:f0:76:3f:67:8c:e1:b5:cc: 8d:69:a6:c8:3b:ad:c0:e0:37:f4:00:7d:e6:6c:07: 02:b5:6b:73:25:4d:d7:e8:5e:28:58:3d:ab:4e:8e: 36:90:78:90:d1:38:a3:32:95:2a:90:d2:89:c9:be: a7:9c:ce:1c:b8:86:d8:4b:c9:a8:04:b1:1b:67:e4: 34:f9:3a:c5:49:17:ec:76:12:08:5e:f8:23:ff:7e: 70:cc:69:45:13:48:a9:ab:68:04:fa:ab:f3:59:21: 98:17:14:91:1a:63:dc:01:4c:59:c4:72:05:26:d4: f5:4e:ed:4a:34:dd:18:a0:36:7d:5b:bf:94:b0:51: cd:33:dd:35:0d:f3:a6:91:27:f7:05:6b:6b:04:16: 99:24:e9:40:4a:ae:4c:2a:81:fc:10:69:cd:f8:0b: 53:95:13:be:cf:fc:14:e9:5e:ab:67:50:42:37:fb: c3:dc:e9:cc:03:28:3a:05:28:b1:ef:21:81:45:ea: 7e:54:eb:bc:fa:12:ea:ce:60:f0:71:37:35:68:35: 75:f2:14:fa:2b:da:d0:ca:08:03:f5:a0:29:a8:66: 04:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:35:DF:9C:0B:E3:45:92:82:40:53:51:8E:7F:6A:71:0E:70:B5:09 X509v3 Authority Key Identifier: keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:4d:e7:f7:b4:03:d3:20:e7:d2:e3:9f:2b:28:94:bf:86:f5: d3:3c:4a:9f:9d:fa:c7:66:2e:8d:72:91:9d:61:3f:1a:43:bf: 58:41:db:2e:7f:17:01:a6:3e:36:7e:1e:bc:e5:5d:99:7f:f6: 73:02:65:60:09:84:56:1b:a5:2d:1a:fe:f7:63:2c:5f:93:55: ca:4b:23:f4:9b:68:34:cd:00:7c:4f:18:0b:00:b8:f3:d6:ea: de:c0:cd:4f:e1:25:ed:17:c2:c6:57:6a:f2:f3:db:4d:4e:40: 0a:2c:49:80:3e:1c:9c:5c:28:b0:da:99:24:c7:2e:b2:f8:07: 13:ab:a5:30:b1:85:87:d1:0d:b3:02:64:ce:8c:9b:ac:e3:d2: e8:93:f5:11:18:09:af:ac:6c:04:2d:2d:d3:73:1a:72:b3:70: 2f:d6:e3:54:b7:03:fd:8d:99:5c:65:4c:6c:ca:e3:c3:4a:a2: 7f:4c:dc:87:5c:9d:3a:8a:89:84:b8:b4:58:7d:03:ab:2c:18: fb:db:30:4c:24:db:df:5e:e6:49:10:d9:2b:c1:96:f8:13:4f: 92:67:1d:d6:6d:7a:70:ce:bd:55:7c:1c:57:10:36:e5:69:58: dd:41:be:50:db:9d:54:bc:e0:cc:b4:ce:16:de:43:6d:0f:d5: ac:90:6a:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd1ZMR+8QDBjsWaGwGWThjSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2JjYzZkMjVmNzQ3NmZiYjNlYzMzZjZkYmMzZTllZWFk OTIyMTIwHhcNMjUwNjE1MjEwMDI3WhcNMjUwNjE2MjEwMDI3WjAzMTEwLwYDVQQD Eyg0MjM1ZGY5YzBiZTM0NTkyODI0MDUzNTE4ZTdmNmE3MTBlNzBiNTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2B7nApLQclsfCOWz/1AyC1uC7nNt dMqVg8hJ6XkKDUorcyWr8HY/Z4zhtcyNaabIO63A4Df0AH3mbAcCtWtzJU3X6F4o WD2rTo42kHiQ0TijMpUqkNKJyb6nnM4cuIbYS8moBLEbZ+Q0+TrFSRfsdhIIXvgj /35wzGlFE0ipq2gE+qvzWSGYFxSRGmPcAUxZxHIFJtT1Tu1KNN0YoDZ9W7+UsFHN M901DfOmkSf3BWtrBBaZJOlASq5MKoH8EGnN+AtTlRO+z/wU6V6rZ1BCN/vD3OnM Ayg6BSix7yGBRep+VOu8+hLqzmDwcTc1aDV18hT6K9rQyggD9aApqGYEmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEI135wL40WSgkBTUY5/anEOcLUJMB8GA1UdIwQY MBaAFKY7zG0l90dvuz7DP228Pp7q2SISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQt NDkyNGZhMDAwYjdjLzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQtNDkyNGZhMDAwYjdj LzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKk3n97QD 0yDn0uOfKyiUv4b10zxKn536x2YujXKRnWE/GkO/WEHbLn8XAaY+Nn4evOVdmX/2 cwJlYAmEVhulLRr+92MsX5NVyksj9JtoNM0AfE8YCwC489bq3sDNT+El7RfCxldq 8vPbTU5ACixJgD4cnFwosNqZJMcusvgHE6ulMLGFh9ENswJkzoybrOPS6JP1ERgJ r6xsBC0t03MacrNwL9bjVLcD/Y2ZXGVMbMrjw0qif0zch1ydOoqJhLi0WH0DqywY +9swTCTb317mSRDZK8GW+BNPkmcd1m16cM69VXwcVxA25WlY3UG+UNudVLzgzLTO Ft5DbQ/VrJBqRQ== -----END CERTIFICATE-----Generated at Mon Jun 16 06:15:59 2025 by rpki-client