$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft File: jRrIPuOj-WjWatL99GFue7Hk0dc.mft (raw, json) Hash identifier: nkJedRcPz38ZJLuZlXo0d5DyLF2hEcllIeAzqrjRrWk= Subject key identifier: BD:5D:F5:76:14:0F:28:2C:DD:17:EB:04:E7:8B:14:DD:8F:D2:24:DE Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Certificate serial: 01976F2BF97C95E98D0C726F307363BCDD56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft Manifest number: 0B15 Signing time: Sat 14 Jun 2025 16:00:42 +0000 Manifest this update: Sat 14 Jun 2025 16:00:42 +0000 Manifest next update: Sun 15 Jun 2025 16:00:42 +0000 Files and hashes: 1: 0hcYkFvLnPnX3tJPZIl-Uhot1i0.roa (hash: 6/eHz/J+k5SuDY5b5eslxHZpd3P/l7+bfENiu84Xo/Y=) 2: 2MTjWcnAZaBZxr6B57_xkNelCyo.roa (hash: LwS+Lia49xksIy+sqAnEnU2btZ36QZE/qsN4N2FlYK8=) 3: A3vCnLdcCAHsjG0TKS7PepEiSRQ.roa (hash: 8/8TxF0wXw7stYTcBeXGRpf0HZpKR5xHMrhdKNPhjb4=) 4: Eb3nQCsubyrRRwgtef25b2tcJbQ.roa (hash: sgX7PEOSSTdMVUw2kIAqvpDSoV+TN56cGW37Ykizvek=) 5: FQFiaH-Uhznyo9tuv-39hg1SgIc.roa (hash: AaAgvoQWwsBdEDlzs9JJLKseENMJxUCvDZ1+feCaadI=) 6: JtkTsuHPsoBKn0hRChOrC4JXTN4.roa (hash: M9uGhnRBSZAnmB8BCT/jdRx465I3Ctf37Vtgm+Jt4nc=) 7: LNIAH1MylX8WQQ-W8xfPHTlOsW0.roa (hash: GFXXpakvt3mJ4yGbBFawI3+WVF7sKNF14A1lgtziIek=) 8: Lxv8RdYN9P2vj1nZyAjFF9lNkU8.roa (hash: xMtpILHpW8icGyga3EnNkKUNmrRxGITTuJWIIZqDxDI=) 9: MudRzNeUk2R859eEP09GJeDExf0.roa (hash: 2o3NbfW7AkgEJtAc91HUgnIB/5KesUMTjVvuVU09fp4=) 10: RTZYU-7DG4fUoipBd0qSh8BirjI.roa (hash: 3eo6AFVTXAYcIIpYV9OFjF0R4DRTO3nfrXKCxpb3Q8c=) 11: XO5629FFpWYFF8ZRrD5XKcMM2vo.roa (hash: wKy5dCiE9pBzbJNPaAeHBHoxO/6aKqqjDAe2f2qYl60=) 12: bHY9-snRvY8g2YGDDEk5RertPnQ.roa (hash: siOTZA8gaSdAHWVwUxkSIsgjUIgGQ3iVG6FyFikgHEE=) 13: jRrIPuOj-WjWatL99GFue7Hk0dc.crl (hash: 2w1MmoLqvvDrkpi60F3CkEoLUJBh0dEWGFFnHC6AMsM=) 14: koWcD6_YJsplq6MpdAuoeyxurzM.roa (hash: 2bTDDvlz5M3JHeYmPpa6SlfroaAlw505uc1zw7/pXCU=) 15: lO8z4PUnAAW_FQZ30LG2G_SaC34.roa (hash: TP4CK9avYURoeZBLUriM0sZhHgj7m8xB680P8/Q/778=) 16: ptIzMM5pGR32qdt6NWym3eUNiak.roa (hash: bSsM8QyZGEjlRqx/UPAoekl3qkyD03EUapHU3WIbdX4=) 17: tesrxSIX8wDOD0usavdzlelTyC8.roa (hash: 2mw6qDJEVPvk2SB5Frfa2IZ+DHf6Rgtla+C91qwtmwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 10:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6f:2b:f9:7c:95:e9:8d:0c:72:6f:30:73:63:bc:dd:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Validity Not Before: Jun 14 16:00:42 2025 GMT Not After : Jun 15 16:00:42 2025 GMT Subject: CN=bd5df576140f282cdd17eb04e78b14dd8fd224de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:32:9e:ad:67:10:0d:e2:33:39:3d:e4:ff:48: 4a:bc:82:17:ba:6a:c1:22:ba:dd:f0:96:e6:91:3b: e8:8e:eb:95:85:60:83:9b:a9:5f:63:b9:21:b1:7a: a9:4d:ae:bb:37:03:88:2a:c1:5b:af:8e:d6:d2:ed: 87:d7:b2:7f:ba:a8:16:91:44:0c:0b:4e:55:0e:2d: 50:36:26:09:5c:17:1e:cf:83:f8:97:0d:47:2b:2f: d5:31:69:04:1e:fa:8b:cf:5d:7c:aa:83:54:e1:80: a3:72:ff:8f:07:b2:c2:01:04:66:e7:c8:38:2f:f0: 56:1f:1f:63:18:ef:41:87:33:4e:3f:0e:15:3c:02: 79:66:0c:4f:45:06:c6:b6:cc:74:0a:62:8a:43:bd: a3:5d:18:0f:cc:6a:a6:5b:ed:f1:12:90:4b:1c:b3: eb:4a:e4:dd:5f:99:e7:ab:d5:a9:a1:e0:2b:d3:54: 3b:21:24:4f:09:2a:ce:99:2e:0d:4b:43:8c:2a:c1: 33:47:75:d2:9d:05:c9:50:ac:85:21:3e:41:34:98: b9:88:d2:7f:e7:c4:7c:6d:43:32:ad:84:49:0b:3d: 18:50:94:81:ed:49:53:e0:6c:73:f9:ca:85:34:3d: 04:13:62:1a:73:6b:76:4d:fe:64:67:8a:8b:f1:9b: c4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:5D:F5:76:14:0F:28:2C:DD:17:EB:04:E7:8B:14:DD:8F:D2:24:DE X509v3 Authority Key Identifier: keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:64:ab:c9:2a:36:cf:7e:90:1f:83:ee:a0:79:c3:39:e5:4e: f0:3f:17:7e:ee:e7:e2:65:0b:58:25:78:ba:36:5e:87:ac:13: 8d:2e:eb:12:99:33:78:7e:86:d7:7a:9c:da:9a:26:f8:01:14: fb:41:56:2c:75:7c:33:23:1b:2a:2f:32:e0:12:e1:26:ab:70: 4d:97:97:92:42:a7:3e:e5:63:f2:20:1d:93:b5:13:26:62:73: cb:5a:7d:19:3f:11:d0:a5:1c:33:46:63:5c:5a:5c:63:8f:f9: fc:6a:34:6e:af:51:f8:a9:19:d6:90:07:39:48:a3:31:b8:d0: 22:6b:09:c8:23:9f:53:f1:e9:10:59:ad:c2:40:42:ae:01:1d: d3:d0:a4:ea:23:18:7e:8d:9c:95:b8:06:16:32:05:bc:fd:bf: 5c:64:ce:f1:64:ea:5f:36:03:6d:0e:d1:8d:85:4e:98:d9:c3: 6c:ab:ab:e8:0c:44:20:f6:73:fb:95:d4:29:6d:af:91:f1:ec: 9f:0e:60:02:b0:22:62:a1:77:40:22:cd:17:ab:27:bd:b7:52: 5a:e2:7c:78:bb:4c:7d:c8:a4:20:a6:f0:73:d6:bf:fc:38:8a: e5:d7:7c:83:b9:c4:c2:52:c3:b0:83:01:91:00:e9:71:3c:0b: b2:51:cf:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdvK/l8lemNDHJvMHNjvN1WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl NGQxZDcwHhcNMjUwNjE0MTYwMDQyWhcNMjUwNjE1MTYwMDQyWjAzMTEwLwYDVQQD EyhiZDVkZjU3NjE0MGYyODJjZGQxN2ViMDRlNzhiMTRkZDhmZDIyNGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTKerWcQDeIzOT3k/0hKvIIXumrB Irrd8JbmkTvojuuVhWCDm6lfY7khsXqpTa67NwOIKsFbr47W0u2H17J/uqgWkUQM C05VDi1QNiYJXBcez4P4lw1HKy/VMWkEHvqLz118qoNU4YCjcv+PB7LCAQRm58g4 L/BWHx9jGO9BhzNOPw4VPAJ5ZgxPRQbGtsx0CmKKQ72jXRgPzGqmW+3xEpBLHLPr SuTdX5nnq9WpoeAr01Q7ISRPCSrOmS4NS0OMKsEzR3XSnQXJUKyFIT5BNJi5iNJ/ 58R8bUMyrYRJCz0YUJSB7UlT4Gxz+cqFND0EE2Iac2t2Tf5kZ4qL8ZvEzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1d9XYUDygs3RfrBOeLFN2P0iTeMB8GA1UdIwQY MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt ZGRmNTY3ZWRlZDAzLzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2SrySo2 z36QH4PuoHnDOeVO8D8Xfu7n4mULWCV4ujZeh6wTjS7rEpkzeH6G13qc2pom+AEU +0FWLHV8MyMbKi8y4BLhJqtwTZeXkkKnPuVj8iAdk7UTJmJzy1p9GT8R0KUcM0Zj XFpcY4/5/Go0bq9R+KkZ1pAHOUijMbjQImsJyCOfU/HpEFmtwkBCrgEd09Ck6iMY fo2clbgGFjIFvP2/XGTO8WTqXzYDbQ7RjYVOmNnDbKur6AxEIPZz+5XUKW2vkfHs nw5gArAiYqF3QCLNF6snvbdSWuJ8eLtMfcikIKbwc9a//DiK5dd8g7nEwlLDsIMB kQDpcTwLslHPzg== -----END CERTIFICATE-----Generated at Sat Jun 14 18:36:33 2025 by rpki-client