$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft File: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft (raw, json) Hash identifier: UJmmL4puEgHod5cHeQtLKP8bf+w/85h9pQb2S7z8xAA= Subject key identifier: 00:94:67:96:6B:A4:1B:82:46:5A:B2:A2:F4:1D:79:C6:A3:ED:49:4A Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 01976EF4AC6DD8F34F8874D880A52ECE9EFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft Manifest number: 0958 Signing time: Sat 14 Jun 2025 15:00:17 +0000 Manifest this update: Sat 14 Jun 2025 15:00:17 +0000 Manifest next update: Sun 15 Jun 2025 15:00:17 +0000 Files and hashes: 1: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl (hash: WET0Wx02blcbTY6z6J3hA8AO+Ir+jS5rxGzETf91+j4=) 2: 5DnR59g0uDhlCeBnwu0_1-KUFeg.roa (hash: jAnqTMpaItG0GhBN/hjRVmkf1KAEsae1ohPc+vQL06Q=) 3: 8PxMQW8r6gNYx6cR3PMs2yrl5ew.roa (hash: GqHXtanVRqdO2QW4vR+6/WyxTi1dfx0DVX7E+ZRdtvU=) 4: DamwXsWqw-pNiIY7Y9gzUoz46SI.roa (hash: 1+3IDizWDcTViB++VKv1xbkAGlHPeiHczREvYVy1BEk=) 5: Dt-A1UKjqPAgnYkiz5oOF3KPif4.roa (hash: jW2Q0BDw92rsfiM8k0/wQ6GD7kmaBburgq62TnGU9aA=) 6: Kn_2eJGh3EcHDuB-OJ8l3E2w8hE.roa (hash: kQ83aGfbv2Iq481MBuTu7pjTHv3tFZPurvWLoY3PlVA=) 7: LAI14FhpOzU-rcfdJ6U9PG061Ec.roa (hash: avAt1L3mlV+2vo4CiZ8YrFs2RggnJV+Qj20+5tYBmII=) 8: LbrW0uU2svuMgCfEegCflkeiJNI.roa (hash: xicAKV+b+Rrkk93cgla0jRgvKkmUQRZcuO0wo+Vll1I=) 9: NH99_Parr6i87GqyKHm971OOvUA.roa (hash: ejRR3IxtFm+BdQE6JvQ7L16gCRkI9epYBVSx8aKoP8A=) 10: OOSnnzJCzwuc2Oreq9KoON2OJy4.roa (hash: 8ZWXugZrnN7Xp4F6Xn87sRk2TjB10Ze3ouSEvaxFbzM=) 11: Q820-mh3gTLx3r5yd43BKUrxxh8.roa (hash: koyxE8n/nkkyiE6UfVNmxydTa2BJ9VFKJe/4B3gcMPg=) 12: QRvqjOpbm1bsYYXVNYJCdsL2K9c.roa (hash: gbsaPykuhKfA/rXSneeYnuzsVzL0kGuorXD/sYaSjK8=) 13: STuoLQHHZBzK_Ldaz7xkxpSaBqY.roa (hash: ZzI62CUIffeXt6hPl33Fk7eNbx5SV7+e0g7j7C8NgSI=) 14: dPORcLPPy7vGPpK7YO0ZCdg3SLc.roa (hash: M8CeF8WcmPBFysMRz6rWQ9roOEfHfMbz/n6BV0QqyTM=) 15: ea2ONoTt3SySSjctEUa2mvxPlk0.roa (hash: aHDpbhU3poNDj7sgG29oLTuaOz779tw43LjPP8jq2GU=) 16: gPbim5HyI5_coGPfod5GORXHFJM.roa (hash: WqgzuFgOy6ZgR1XpLM/1W9uFliVDMHByx6+nWg3yG7Q=) 17: hV1kQUu8Pdq1hwLjpsPqwMqfj_U.roa (hash: N1eliwWO7Qtxwve5drBayNA7B9DMRJgSbxRNUu9dsfY=) 18: o1MTa_u6ng7YChqgqqMpF_EDHDo.roa (hash: medB94fc43SFhZiIXkS8L2CLIYdmUFnxbXmgm5u0RKM=) 19: pA-Fq_J6A5SNZJF98Uix7eSPlIg.roa (hash: 7lwAf6YG9+AyLk5HAGkoZYURCw6qLQhN2f3/kdNJO0w=) 20: v5F31cV6XBvE5243s4oHQBqQQDM.roa (hash: +2WzyiNTSNMZQ/+SFfQYAFWtFS/6Ce5PKrWiHjJlqng=) 21: xbbY79UbNbRYIgyXeBU4cy_zCmI.roa (hash: c0Ac2LrLggmLnLPt492ZZRPubOLwoYV4rcik5rRDaO0=) 22: zw1raLzJkOzuLdWVP5BWRU84p2o.roa (hash: XIzDwzNdh9cyZCy+DakAR8zEkFIdZM7IKTxs2TBKsWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6e:f4:ac:6d:d8:f3:4f:88:74:d8:80:a5:2e:ce:9e:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Jun 14 15:00:17 2025 GMT Not After : Jun 15 15:00:17 2025 GMT Subject: CN=009467966ba41b82465ab2a2f41d79c6a3ed494a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0b:fd:95:83:30:fd:2d:dd:82:93:4c:bf:0c: 28:4b:22:de:a9:8a:fe:cc:9d:1d:3a:f2:c4:b6:0b: 6f:2b:e2:85:94:06:3f:f5:2f:d4:70:45:01:7b:44: aa:23:a2:5a:50:c7:af:dc:ba:54:00:04:8a:b6:23: 11:c9:d5:04:91:87:e8:21:d8:c5:04:65:6d:89:33: 68:e4:7f:8e:13:f4:47:46:56:d5:fe:ce:68:77:0d: 17:39:bb:ff:5b:2b:27:a9:d6:c4:4f:de:9e:80:90: 4d:82:9a:02:57:98:8b:41:b1:ca:a8:18:42:8e:ba: 76:cd:d7:ff:fa:90:34:f2:21:f3:31:dd:4b:6f:6d: 3a:3f:a5:62:77:39:d5:2f:11:d9:e3:6e:e0:d2:8d: 27:cb:a4:e5:66:57:c0:bc:3e:68:1f:4e:09:11:19: fe:a8:00:33:73:50:cf:99:4b:3a:08:44:da:ba:d6: 79:7f:1c:1e:f2:86:b7:f8:a4:20:91:82:12:49:a7: 9c:aa:ee:a7:5d:16:53:6c:26:5e:5d:cb:e4:44:1d: de:3d:98:f3:1f:c5:88:4e:cb:24:e5:b1:c0:46:eb: fc:f4:2f:08:fe:b4:84:91:0e:c6:ad:c4:23:65:e0: 3f:8a:96:8c:e1:6e:e2:bd:7d:75:96:f7:4a:f0:d1: 9e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:94:67:96:6B:A4:1B:82:46:5A:B2:A2:F4:1D:79:C6:A3:ED:49:4A X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:aa:0e:aa:fc:00:02:90:70:2d:a5:95:2f:39:19:c1:d5:5a: d2:38:75:74:93:1c:e8:f2:a1:ae:e5:93:71:8e:76:ae:12:11: b1:af:93:64:7c:1f:45:82:d8:5c:a1:fa:b7:87:a5:ce:69:4d: 98:b8:2d:d4:ae:07:57:d2:04:a0:82:12:00:da:94:7d:8e:34: 21:40:29:b6:3b:d2:7b:22:f7:46:7c:42:ad:95:41:18:5a:2a: d3:ec:35:10:59:09:83:02:13:bd:0b:64:7c:57:5c:54:bc:e3: 39:16:f6:e7:b9:b5:76:6d:88:c3:08:08:35:ff:c0:e3:2e:8b: 40:b0:12:e1:15:32:26:c1:bc:4c:94:b7:45:a8:21:35:cc:fc: 79:f4:c5:a9:23:cd:25:9c:06:78:ff:57:61:b4:ae:24:b5:54: 95:5b:7b:ef:45:1e:6c:3d:a3:eb:72:2b:20:0b:0e:25:49:0d: b3:46:af:b5:e1:65:d2:20:2e:da:a3:48:df:1b:3d:bf:4d:d8: 45:72:b8:6b:be:fa:39:1d:8a:ce:9c:44:64:19:4c:57:9a:a7: 9b:ee:ab:81:0b:5d:af:c1:d8:94:41:50:25:0f:b6:58:d4:d8: 09:ed:91:56:36:85:41:58:98:49:6b:9e:b6:84:d7:f7:98:38: 20:89:5d:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdu9Kxt2PNPiHTYgKUuzp7+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjUwNjE0MTUwMDE3WhcNMjUwNjE1MTUwMDE3WjAzMTEwLwYDVQQD EygwMDk0Njc5NjZiYTQxYjgyNDY1YWIyYTJmNDFkNzljNmEzZWQ0OTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Qv9lYMw/S3dgpNMvwwoSyLeqYr+ zJ0dOvLEtgtvK+KFlAY/9S/UcEUBe0SqI6JaUMev3LpUAASKtiMRydUEkYfoIdjF BGVtiTNo5H+OE/RHRlbV/s5odw0XObv/WysnqdbET96egJBNgpoCV5iLQbHKqBhC jrp2zdf/+pA08iHzMd1Lb206P6VidznVLxHZ427g0o0ny6TlZlfAvD5oH04JERn+ qAAzc1DPmUs6CETautZ5fxwe8oa3+KQgkYISSaecqu6nXRZTbCZeXcvkRB3ePZjz H8WITssk5bHARuv89C8I/rSEkQ7GrcQjZeA/ipaM4W7ivX11lvdK8NGexQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFACUZ5ZrpBuCRlqyovQdecaj7UlKMB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaKoOqvwA ApBwLaWVLzkZwdVa0jh1dJMc6PKhruWTcY52rhIRsa+TZHwfRYLYXKH6t4elzmlN mLgt1K4HV9IEoIISANqUfY40IUAptjvSeyL3RnxCrZVBGFoq0+w1EFkJgwITvQtk fFdcVLzjORb257m1dm2IwwgINf/A4y6LQLAS4RUyJsG8TJS3RaghNcz8efTFqSPN JZwGeP9XYbSuJLVUlVt770UebD2j63IrIAsOJUkNs0avteFl0iAu2qNI3xs9v03Y RXK4a776OR2KzpxEZBlMV5qnm+6rgQtdr8HYlEFQJQ+2WNTYCe2RVjaFQViYSWue toTX95g4IIldtw== -----END CERTIFICATE-----Generated at Sun Jun 15 01:04:06 2025 by rpki-client