$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft File: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft (raw, json) Hash identifier: 2xbqYV53LCVHnTxLjV0qyr+nFP4Wbi/KNBLavUIp2FQ= Subject key identifier: 28:21:BC:D9:BE:84:5E:4C:4B:A5:6D:5D:FC:AC:2E:A7:0C:1F:71:50 Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 019775D2B54E4E71BFDAD18852588B52010E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft Manifest number: 126D Signing time: Sun 15 Jun 2025 23:00:32 +0000 Manifest this update: Sun 15 Jun 2025 23:00:32 +0000 Manifest next update: Mon 16 Jun 2025 23:00:32 +0000 Files and hashes: 1: 3MQ1Zm2jB8qgOjCAc_a0v-3nM_o.roa (hash: T4pVm2mU2N5el1g2HcnlglhN57e23NLVS7ny7NzSBL0=) 2: 4SEUaFHVUAL3abRJwnhpLcw21dk.roa (hash: Nz767QGxnFH79p/BW/8MOsNM3RviNN1Kvy4GgZgMyGs=) 3: FCFfx3p7hHCFHlKPZobVJyLJ5MI.roa (hash: 6JV0xEEqdwivRbZdMI4zo4Wpa9PWQK4gKoasAD6odWU=) 4: IYmUJK1vApyWT119wps-ukf2n9E.roa (hash: w1dWdBHD/FLi3tR98pk3iJlbhc1nR22X1Pwn/kqhO/0=) 5: KcuMI0SBvL5BPuYJm6BH3vJKAQ0.roa (hash: s0e2eWUrZQW14pJCqfjgMZ+ViTFNuU9345bizVg0sKY=) 6: MSrSUIwYGP5OzMFaA9dwr3mO4jY.roa (hash: OHzV5kP6uhO1eFoIB7t+WKfJjHs90j+a/iXQqOXuv30=) 7: N7C2a3H5ML3ydyNI5IDIoJ6m-6U.roa (hash: FJm0Nzs6ME/1+LojcQZMLdUu/cBqlxKE16Bs75fFFLw=) 8: Nf1rHETWcCnhWhR_uM_9B2P3jb8.roa (hash: pBdKIUwSvvQqLJChVbTbSEDRXa+Ll262+ax9ivbZD0o=) 9: OFTgwkdKspRJ_TvSv6vgx_ckdLQ.roa (hash: b7UPAbBCKcuRworqLaxy25e9Gx9nfc4PaZocWvp2h84=) 10: RzvDJbgMFFQ3RXZZowAtkGpvaYQ.roa (hash: pXgfU5zLGpdaPENK8y9IOVL5xtiIt9Fk8RRzx12JQUw=) 11: WToItz8al9Sw1IRtEOUm1ku1TzY.roa (hash: cD3Nf3okXGtPiYuFOkPnzfMJHgIYmW52aVmaOwxOEN0=) 12: dcAEUZ_ghRVpaUYo3WWA9zUPe9U.roa (hash: AsvsdGamYH2cSArWOQT5cvLOD/2t8gp5MEnt/aWjLII=) 13: m-VIT0LjtD9EzoMprh8uOjUFAXU.roa (hash: uPdvifi2Mse38dnV2nTzHEKQ8cRZMoEcUuAqy+pbA4Y=) 14: mIeBpS2n4kCr0BZmoszWNjvAQck.roa (hash: sgSJy89RWLefTDlUw+TWGE3cezazErlzXNR2nAjs6uU=) 15: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl (hash: FqG9kQmFmBKwcpSGPOFDIcDaIJ6vxHqifBgFGlnQjxU=) 16: sVCQlL9zy4ci5k4im_qh1UgQSao.roa (hash: tXiv/i4AXQDYnVQqrjLO82vwz0zcYS5lORUFrc1ytqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 20:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:75:d2:b5:4e:4e:71:bf:da:d1:88:52:58:8b:52:01:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Jun 15 23:00:32 2025 GMT Not After : Jun 16 23:00:32 2025 GMT Subject: CN=2821bcd9be845e4c4ba56d5dfcac2ea70c1f7150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c5:c6:be:74:0b:ad:5a:26:6f:9b:7e:7e:56: dc:0e:46:00:f8:02:99:aa:da:04:a1:d3:78:c8:bf: 05:c9:e7:69:c9:03:8d:79:15:41:ce:a1:1e:9a:5c: d7:c7:a2:53:db:02:49:eb:78:03:ec:76:2f:ec:07: 0b:55:e3:f4:24:c7:63:c3:d2:c4:d4:b1:9f:03:27: 1e:7d:8e:87:bf:72:db:0b:ba:21:74:11:02:50:3c: 77:63:15:01:d6:1f:1e:29:eb:ab:f4:07:93:a9:3b: 29:e2:92:cc:2f:29:72:aa:30:15:71:c1:a0:d6:43: 5d:5d:0a:4e:dd:06:95:12:01:90:d7:23:93:2a:7e: ac:86:bb:c5:ac:d9:3d:13:30:fb:d5:66:bc:48:f6: 1b:b2:6c:fe:44:2b:a6:4a:35:2d:59:4d:7a:86:d6: ba:d1:7b:cd:ce:cb:f3:9f:85:43:36:3f:b0:d7:dc: 80:b6:da:66:90:65:a2:24:41:cc:57:55:32:cf:94: 14:cd:b9:43:39:55:bb:c1:3c:bc:56:a3:b1:10:f6: 94:0c:8f:22:cd:51:30:d7:e0:ea:9c:e0:8c:80:1e: e2:c8:9c:13:d1:b0:da:7f:c5:da:78:d0:ca:d0:36: 5f:2d:71:f7:a0:c1:ee:5a:3b:f5:34:4e:bc:4d:7c: 87:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:21:BC:D9:BE:84:5E:4C:4B:A5:6D:5D:FC:AC:2E:A7:0C:1F:71:50 X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:01:3c:f0:47:e2:1a:c2:6d:80:e3:90:80:aa:42:32:7c:9c: 85:d6:2d:71:7e:d7:0b:e9:c0:ef:70:3b:7c:f3:44:20:b5:75: f2:a1:54:00:f7:f8:66:37:00:25:90:d3:b1:ad:26:2d:58:b5: fe:3e:ca:ee:89:2d:ba:58:af:86:a9:37:42:8a:83:fd:c4:70: e4:1d:8c:7c:fc:b1:d4:62:4f:fc:bd:e5:80:30:4c:65:84:74: 06:91:22:8b:6e:fc:d2:31:ff:18:eb:34:18:47:bf:fb:06:46: a9:d0:04:20:be:a8:6a:78:24:d3:f0:ae:58:88:08:c4:67:a9: 7a:8e:a3:ba:6e:b2:89:38:03:59:59:22:8d:82:21:25:fd:b6: d0:9b:18:a7:46:2e:37:ac:b0:e1:25:25:a9:1f:7f:64:68:7d: 08:15:aa:de:ff:3e:7e:ee:78:ff:d5:ab:e3:25:9f:d9:5b:d2: 6d:62:04:07:7d:e3:27:0f:3a:02:42:5f:39:4f:7f:af:bb:3f: 1a:4d:95:00:9c:32:82:72:b3:70:67:1b:b3:c8:53:bc:d8:73: 99:e6:e1:c4:d3:14:0d:ae:e6:f3:9f:b2:63:5c:40:b8:e7:0b: fd:ea:05:0f:36:9b:6f:1a:34:f0:2d:2c:f4:5e:1e:88:3c:ca: 40:2c:de:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd10rVOTnG/2tGIUliLUgEOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjUwNjE1MjMwMDMyWhcNMjUwNjE2MjMwMDMyWjAzMTEwLwYDVQQD EygyODIxYmNkOWJlODQ1ZTRjNGJhNTZkNWRmY2FjMmVhNzBjMWY3MTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8XGvnQLrVomb5t+flbcDkYA+AKZ qtoEodN4yL8FyedpyQONeRVBzqEemlzXx6JT2wJJ63gD7HYv7AcLVeP0JMdjw9LE 1LGfAycefY6Hv3LbC7ohdBECUDx3YxUB1h8eKeur9AeTqTsp4pLMLylyqjAVccGg 1kNdXQpO3QaVEgGQ1yOTKn6shrvFrNk9EzD71Wa8SPYbsmz+RCumSjUtWU16hta6 0XvNzsvzn4VDNj+w19yAttpmkGWiJEHMV1Uyz5QUzblDOVW7wTy8VqOxEPaUDI8i zVEw1+DqnOCMgB7iyJwT0bDaf8XaeNDK0DZfLXH3oMHuWjv1NE68TXyH0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCghvNm+hF5MS6VtXfysLqcMH3FQMB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATwE88Efi GsJtgOOQgKpCMnychdYtcX7XC+nA73A7fPNEILV18qFUAPf4ZjcAJZDTsa0mLVi1 /j7K7oktulivhqk3QoqD/cRw5B2MfPyx1GJP/L3lgDBMZYR0BpEii2780jH/GOs0 GEe/+wZGqdAEIL6oangk0/CuWIgIxGepeo6jum6yiTgDWVkijYIhJf220JsYp0Yu N6yw4SUlqR9/ZGh9CBWq3v8+fu54/9Wr4yWf2VvSbWIEB33jJw86AkJfOU9/r7s/ Gk2VAJwygnKzcGcbs8hTvNhzmebhxNMUDa7m85+yY1xAuOcL/eoFDzabbxo08C0s 9F4eiDzKQCzeDw== -----END CERTIFICATE-----Generated at Mon Jun 16 01:28:35 2025 by rpki-client