$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft File: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json) Hash identifier: qidfjk945ap6clK7EIohCB5PFDm8lV4I3QDFo/MoYzU= Subject key identifier: 50:E2:26:3C:A1:4E:E2:10:EC:8C:65:CF:4B:17:A7:F6:D4:19:3D:39 Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 01976929AD661341A60414C793BD1E4696D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft Manifest number: 043C Signing time: Fri 13 Jun 2025 12:00:28 +0000 Manifest this update: Fri 13 Jun 2025 12:00:28 +0000 Manifest next update: Sat 14 Jun 2025 12:00:28 +0000 Files and hashes: 1: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: 2Mp8TFm+rd6Exd7Ss/7t7Ktvz5UKHfYKd0cD7vrZ+Co=) 2: 3NKK36OzbyCVvAW6QnBXCk0vC-E.roa (hash: gHjjORGkqgV1v9V5gvG+Gu8C2uJp9VohURGk9hhqXCY=) 3: 8iXU5D7pqB0d57qygRs63MZknmk.roa (hash: XLxO/uwC+4ZlL0rXFqAajGUTAt+XMI9UYoDlUJW9JS8=) 4: DWnysDNu_v7yNNJ1aIjDqps-5LM.roa (hash: JPD53SzaSyMUMEmsWnAbUrfvGclz72WlfPM6q3RIsCk=) 5: SOWcqaYhZ7YX4OOHhJe96In9itw.roa (hash: UaSEArJ4Ty/99oB9k6ZnmXrGKJLGr0L+yE1xo+K6dEg=) 6: f7lR2qdNzNhMHZctwhySnx52rh8.roa (hash: uc/3dtcmzwA7XSJMfP+6pPiS8XT6tGwBC3iJr2Zlmhg=) 7: kcbMP36K9zR3OAqVvtstfD6Qc1E.roa (hash: kKzo7D93m1wQVJ52FPItkIqrFxN6fMh/dyqt/5KaXWw=) 8: lReJgbEl6ZGpxC1oXNpgchcsuUU.roa (hash: ju4SXMpDeMhKqzMFDCpltVvN/atldEeAdGL+HegT2Mo=) 9: p8WEIwXo7Clnw_lkUVuyGNIeOvM.roa (hash: Ur1mz6OTaNWSYai5Ah9bPYej/Ck8pv/XZW+9ZEpR3q8=) 10: qJyacpBlbWQwXSv5l4Lxk3gU7sA.roa (hash: A2lDMN5zFwbdpcFJxDl5a8uW8CFGyTpmaP19LpWfeHE=) 11: r9xTyNget5zcXlE9TLs7M3SNT04.roa (hash: AESrTW2Rp0Ova6EIN8mRWsiWri5RUSzYkj7e2h2UwnM=) 12: wBcaC1_PamN7lirmMN3fzCp6jH4.roa (hash: G/3j6WArnTAj7/DCB5dCgU40hqdUmgoP9O96RyuFd1M=) 13: wWRwvyrn-LAOgtkAhCo3MlchYWQ.roa (hash: Uba3h/vRuJ26W0MxcGsxkEurmXFyfeD+ONZVIUG7QEM=) 14: xQ1rwm6oO8jHA9kZhQvVDEfMToU.roa (hash: rR/azYUh2GUL8HTdYkb3GDWX8S5vRgxNHhornEovZ9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 12:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:69:29:ad:66:13:41:a6:04:14:c7:93:bd:1e:46:96:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Jun 13 12:00:28 2025 GMT Not After : Jun 14 12:00:28 2025 GMT Subject: CN=50e2263ca14ee210ec8c65cf4b17a7f6d4193d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:46:e4:d7:14:94:02:e7:22:25:a3:23:3e:7b: ae:62:7b:44:2c:25:15:b0:a5:17:d1:48:36:b8:65: 05:63:ef:9a:13:c0:db:cc:b8:9c:7f:b9:ef:ed:ce: e3:7c:a3:5b:9e:e6:14:57:8b:4a:72:9f:f5:bd:c7: 96:90:df:f0:b8:6e:8d:40:79:3e:f9:36:99:f6:ae: ca:b8:e9:96:1f:0e:03:a1:cb:f0:2d:dd:04:d1:df: 1d:53:93:e6:b1:ee:4c:d9:2f:25:b0:e3:db:01:5e: c7:1d:51:cd:7f:1a:dc:95:e7:77:d4:46:43:f9:33: b5:a0:47:b8:fc:c6:d6:bf:8c:fa:52:c5:de:39:21: bd:13:e7:85:25:dd:a3:0e:05:f4:d1:30:d8:a7:d7: 1a:24:67:64:65:2b:2e:ee:3b:b4:d1:bc:da:c0:18: 2c:c6:17:c2:d0:3f:20:15:0e:fe:4b:6d:45:94:3b: 1d:8d:5a:51:bc:78:b2:07:13:60:9b:a3:68:8e:aa: f2:92:ae:1c:64:db:ee:00:a6:a9:aa:3d:0a:d9:19: dd:cd:11:1c:29:60:7a:6b:a1:e2:e1:61:9c:66:a7: 78:89:c7:61:d9:fe:68:d2:6c:12:d5:76:f8:88:2b: 5d:50:f5:2e:da:48:58:8e:39:e8:24:58:93:90:cf: 43:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E2:26:3C:A1:4E:E2:10:EC:8C:65:CF:4B:17:A7:F6:D4:19:3D:39 X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:27:37:d7:be:1b:be:dc:68:0d:fc:4e:3c:f8:a6:7d:99:b8: b2:12:1c:ae:88:f5:87:62:49:aa:3d:b5:a7:9e:65:aa:71:60: 0b:c7:3c:50:81:ec:18:32:06:1c:66:62:5b:7a:6e:38:55:af: 4b:d4:96:23:db:7f:b9:96:0c:da:2a:10:1d:82:0d:17:ef:3e: 90:a0:70:66:37:14:cc:a6:d9:93:45:29:a2:8c:ee:6d:46:95: b7:ec:a4:44:a3:cb:e7:39:88:41:f0:16:1a:f4:cd:15:18:36: 7a:dc:f4:7b:20:8e:53:ff:7f:48:71:df:72:1e:85:62:34:0b: 12:d0:f6:d2:03:0e:56:48:51:c6:b2:f4:c5:71:06:ba:00:57: f8:b1:80:c5:0d:0a:57:8a:26:d3:0d:05:30:69:3b:d8:bf:be: b9:a8:c7:48:57:7a:af:90:0a:d6:ea:96:49:d2:8b:67:ce:c6: a9:98:84:e2:18:b7:b9:ae:70:ca:52:76:6a:5c:b9:6a:11:bc: 4a:04:04:66:ed:8f:eb:75:aa:18:79:2d:af:57:37:1b:f4:66: af:58:9c:43:98:74:14:fc:c4:f8:52:46:4e:63:96:57:05:ca: 2f:da:91:ec:a0:68:94:97:9a:30:dd:28:e8:44:3d:39:95:8b: 23:d8:75:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdpKa1mE0GmBBTHk70eRpbWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjUwNjEzMTIwMDI4WhcNMjUwNjE0MTIwMDI4WjAzMTEwLwYDVQQD Eyg1MGUyMjYzY2ExNGVlMjEwZWM4YzY1Y2Y0YjE3YTdmNmQ0MTkzZDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ebk1xSUAuciJaMjPnuuYntELCUV sKUX0Ug2uGUFY++aE8DbzLicf7nv7c7jfKNbnuYUV4tKcp/1vceWkN/wuG6NQHk+ +TaZ9q7KuOmWHw4DocvwLd0E0d8dU5Pmse5M2S8lsOPbAV7HHVHNfxrcled31EZD +TO1oEe4/MbWv4z6UsXeOSG9E+eFJd2jDgX00TDYp9caJGdkZSsu7ju00bzawBgs xhfC0D8gFQ7+S21FlDsdjVpRvHiyBxNgm6Nojqrykq4cZNvuAKapqj0K2RndzREc KWB6a6Hi4WGcZqd4icdh2f5o0mwS1Xb4iCtdUPUu2khYjjnoJFiTkM9DFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDiJjyhTuIQ7Ixlz0sXp/bUGT05MB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABCc3174b vtxoDfxOPPimfZm4shIcroj1h2JJqj21p55lqnFgC8c8UIHsGDIGHGZiW3puOFWv S9SWI9t/uZYM2ioQHYINF+8+kKBwZjcUzKbZk0UpoozubUaVt+ykRKPL5zmIQfAW GvTNFRg2etz0eyCOU/9/SHHfch6FYjQLEtD20gMOVkhRxrL0xXEGugBX+LGAxQ0K V4om0w0FMGk72L++uajHSFd6r5AK1uqWSdKLZ87GqZiE4hi3ua5wylJ2aly5ahG8 SgQEZu2P63WqGHktr1c3G/Rmr1icQ5h0FPzE+FJGTmOWVwXKL9qR7KBolJeaMN0o 6EQ9OZWLI9h1Cw== -----END CERTIFICATE-----Generated at Fri Jun 13 19:05:07 2025 by rpki-client