$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft File: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft (raw, json) Hash identifier: nZhHK0vKIYuYUerGrWParsjwVr/8CVx+k78840vDW7c= Subject key identifier: 78:D3:46:89:B1:52:E6:CB:F0:04:24:5C:EB:49:7D:A9:D5:2F:28:BB Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Certificate serial: 019771BFA5975AEDB99C3987E3558E1637DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft Manifest number: 03BC Signing time: Sun 15 Jun 2025 04:01:14 +0000 Manifest this update: Sun 15 Jun 2025 04:01:14 +0000 Manifest next update: Mon 16 Jun 2025 04:01:14 +0000 Files and hashes: 1: 1-WZZnjR8DlZqLUibcRUcYzm0QDU.roa (hash: /lrkBjM9dGMr6D7JGPVc5syjsFBtCzanEGLfhb4dKM0=) 2: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl (hash: P8JRCG7IPurLb0obtUj/1EjBNz1wUNfUWTz83GwVGLo=) 3: 3jZyUpaNiuxwzYQ21tChGVq7yOY.roa (hash: rlRJ/UNIhVQKGyw4Wr/cDFs+VO81jRk6SUephZD3g4o=) 4: 5khyx2A9d0Q0e3huYGosj5KCOlo.roa (hash: m/iIxHfeWDlWWpGAIqzgFb7iOcTekZb0i9Y2aBX+dy4=) 5: 7cUCY2EysYK09Y_F1tsMsp_B8MU.roa (hash: el4sZWuoJZOOcj14KO5Yq16IPPIz+c0KckgEteIx4YM=) 6: ILbeank0F3xhLsgBl0NZfpBZFig.roa (hash: 8RlSwtQK5lhGbhOtyX4cacpgfYuG3exGirW2aa5+FLI=) 7: KBQWtgPCMeq_IbONzoF64FnlzwE.roa (hash: EZ3seNeYjAQFpAfGwhXlV+Wya2vQO7lfYcVB84EkqA4=) 8: PBiom43THD1F1SBGVmDFN9WwnMo.roa (hash: EVRLL8Mxobz8XRwc26H2JAHWkuwMiYakvll8d/79CJQ=) 9: TnqWiZSrJP5FZLgDlXk-iaFi5k8.roa (hash: 8gjKeaSL9Im1mKl/CKczQDSLzI2OEBo3YD5qQoY5RT0=) 10: VXGu7cRy3TUPyfgbIf2vopAF1Lc.roa (hash: 40vRMPsPFPCFnDUP/ikEgH9v+gi1iVOQkLoxtLSkOqE=) 11: ZaSQVTZm2f4ebc71HIkhrpqqsuk.roa (hash: X8/L0T6q0bM6s++7u2MQIu4RlHWQNdJcKAvE7bH3VP4=) 12: jldP_NkgEKrLmFaYQtB6TuhGzRs.roa (hash: Cz3xmiLxKccg4wAv608JqhvYxIHIutFBcyhT8Ond0Zs=) 13: oQk2rT9-TmTMiTawX34MBI0QTrc.roa (hash: 6J7fvMBzz5wnq8Q655iOLvmHY5jKT0LznvTL3IrQ8Xw=) 14: unsmmkYBpbXrCubGO7XS6N7I7QM.roa (hash: /TaQOoUPP+hWic0pvVLJBHflkZLzIc8T4AFkDEL7yKk=) 15: w9Z-5nLehvUlBeOI2h5dSoEBLSw.roa (hash: dyC69X2s5yoLrmCLq7pBQHExLj0vbp1A/uwW5wlqEug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 04:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:71:bf:a5:97:5a:ed:b9:9c:39:87:e3:55:8e:16:37:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Validity Not Before: Jun 15 04:01:14 2025 GMT Not After : Jun 16 04:01:14 2025 GMT Subject: CN=78d34689b152e6cbf004245ceb497da9d52f28bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a8:87:20:e2:6d:99:95:f6:13:27:53:c5:be: 94:0e:66:2c:1d:55:9e:80:0d:4a:3e:b1:14:16:f7: 77:47:21:a3:f4:69:c9:54:c6:be:8e:8a:48:87:88: f8:34:66:0d:a7:11:1c:23:11:cc:34:9e:d5:17:3e: fa:6c:26:26:96:c2:96:27:a1:72:a3:80:c0:a6:ac: 01:18:72:20:e0:d9:5e:26:54:2a:8b:4a:40:19:03: ff:53:f2:e2:04:de:a4:f9:a8:29:08:39:8a:e5:01: 57:ad:9e:dd:c5:7f:2f:2f:9a:43:c5:aa:08:7a:53: 32:b9:05:74:80:e5:3a:17:35:27:00:f9:fb:96:d6: 54:75:12:ea:c6:69:46:30:b8:a6:07:29:f0:30:93: 5d:00:13:c3:6c:19:37:9d:5c:54:0f:4b:e9:07:6f: 00:e8:4a:67:f5:35:55:cc:5b:5c:4e:8f:75:4d:e4: 76:62:27:72:77:2f:47:ce:5d:b7:8a:69:df:1d:e8: 7f:a2:bd:d4:20:a1:1c:ce:64:4c:57:c4:d2:8a:57: 09:36:c8:84:37:69:57:8f:b7:a0:8d:71:cb:1f:54: f8:35:86:a8:3f:37:ce:b7:23:64:f4:f7:a0:54:43: ff:e3:65:f6:77:fb:97:dd:bc:81:25:3a:b0:1e:84: e5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D3:46:89:B1:52:E6:CB:F0:04:24:5C:EB:49:7D:A9:D5:2F:28:BB X509v3 Authority Key Identifier: keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:4b:1e:2b:6d:b4:be:60:23:f3:a9:e9:94:79:1a:f8:ab:79: 16:5b:82:98:b3:d5:4e:20:2e:44:f0:41:43:14:8a:8c:8a:b2: b3:9a:71:9f:74:fc:8e:49:bc:c5:57:76:46:56:b9:e8:e6:93: e4:b8:3f:a1:4c:7b:56:63:3e:b9:10:ac:6d:29:b8:eb:7d:61: a5:8a:e8:bc:75:17:f9:aa:16:91:36:b5:8b:52:48:d7:6a:28: d1:08:4c:49:11:d3:cf:98:13:b2:3a:23:c6:cb:b1:8b:38:30: 40:0c:9d:22:bc:9c:ed:1a:03:2b:80:af:84:d9:ae:c1:f4:dc: 00:2f:06:58:ec:f4:c4:57:1a:10:fb:b7:84:1e:71:84:ff:a8: 5f:04:8a:93:55:53:e4:4e:30:97:d7:06:11:06:99:a9:7a:df: 48:cb:cd:dd:6e:e5:64:b1:33:52:44:7b:47:4a:11:38:39:0a: 4b:60:25:52:8c:8b:b7:0e:e9:08:26:fe:f4:d5:e3:fb:35:7c: 40:fd:77:63:0d:f6:dd:1b:19:b0:10:09:7a:47:6f:fa:85:b8: 13:8f:35:d3:2a:29:08:09:3a:f5:a2:33:d7:b3:3d:e9:cd:8c: 5c:71:a5:c2:5f:2d:c1:43:57:de:4a:de:12:ad:53:57:ff:75: 05:b8:39:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdxv6WXWu25nDmH41WOFjffMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm MDIwMjAwHhcNMjUwNjE1MDQwMTE0WhcNMjUwNjE2MDQwMTE0WjAzMTEwLwYDVQQD Eyg3OGQzNDY4OWIxNTJlNmNiZjAwNDI0NWNlYjQ5N2RhOWQ1MmYyOGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKiHIOJtmZX2EydTxb6UDmYsHVWe gA1KPrEUFvd3RyGj9GnJVMa+jopIh4j4NGYNpxEcIxHMNJ7VFz76bCYmlsKWJ6Fy o4DApqwBGHIg4NleJlQqi0pAGQP/U/LiBN6k+agpCDmK5QFXrZ7dxX8vL5pDxaoI elMyuQV0gOU6FzUnAPn7ltZUdRLqxmlGMLimBynwMJNdABPDbBk3nVxUD0vpB28A 6Epn9TVVzFtcTo91TeR2Yidydy9Hzl23imnfHeh/or3UIKEczmRMV8TSilcJNsiE N2lXj7egjXHLH1T4NYaoPzfOtyNk9PegVEP/42X2d/uX3byBJTqwHoTlAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjTRomxUubL8AQkXOtJfanVLyi7MB8GA1UdIwQY MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt NGI2YzFjZjlmZTRmLzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApUseK220 vmAj86nplHka+Kt5FluCmLPVTiAuRPBBQxSKjIqys5pxn3T8jkm8xVd2Rla56OaT 5Lg/oUx7VmM+uRCsbSm4631hpYrovHUX+aoWkTa1i1JI12oo0QhMSRHTz5gTsjoj xsuxizgwQAydIryc7RoDK4CvhNmuwfTcAC8GWOz0xFcaEPu3hB5xhP+oXwSKk1VT 5E4wl9cGEQaZqXrfSMvN3W7lZLEzUkR7R0oRODkKS2AlUoyLtw7pCCb+9NXj+zV8 QP13Yw323RsZsBAJekdv+oW4E4810yopCAk69aIz17M96c2MXHGlwl8twUNX3kre Eq1TV/91Bbg5Pg== -----END CERTIFICATE-----Generated at Sun Jun 15 13:11:16 2025 by rpki-client