$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft File: VXsKwQuGQqJ909dO1ste4EXme5c.mft (raw, json) Hash identifier: ucCRmrqJGCwEa/u+9uXzwg3m7FaPP8I+a2d0WsC9lI8= Subject key identifier: 41:60:43:BF:00:1C:67:13:26:0E:C6:CC:42:C4:25:6E:BB:F0:3A:2D Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Certificate serial: 01976F63038AF45DECCF6FBD6D131D477C8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft Manifest number: 09E7 Signing time: Sat 14 Jun 2025 17:00:49 +0000 Manifest this update: Sat 14 Jun 2025 17:00:49 +0000 Manifest next update: Sun 15 Jun 2025 17:00:49 +0000 Files and hashes: 1: 21k07trihuOq_p0d1xoi4bxuPZA.roa (hash: 7OFU6XWsgxZjBgc5/9Z26TjwR0mC8/oQG4kPqRbf13g=) 2: 4iaJi_OBKAE3o8h175iBu_IZyfI.roa (hash: lDCEAMXE0clsOMjNyholsrUDxhoIrjK4k3xcCfxPkUY=) 3: 5BopT6zWN2-PdGYdxH2aUB0jmhg.roa (hash: /mHqZKMlZJCdgH7Kawl3aGGRgWwqt/sVMAcpLcw5mXU=) 4: Geel9OdOaQ9FlrEzFHKlpiWE30U.roa (hash: mEBGWZVn+mmpTlkiNI5Af3AFG/t42zkx+akYj/Nw/0M=) 5: JWpMTh79Cpipv8z2TiqFetsx4Z0.roa (hash: EeuLpYtgLdl6hvIb6vNrTtAuFpAgpCnIwfpYkuwZmkQ=) 6: ORkWSvHyz7xVlACj3J643SMA1t4.roa (hash: 9HyAWLxiFAOsSF7hRfVc73gtPaqofO7sI7vq8SdYSfA=) 7: Tg1n5Fp1pJd7zBO6W_NcYtcUcjs.roa (hash: 2JSaIkit5yVDVUZV0/gM1VkpGy+fdm5Z9IWeQFjGnCA=) 8: VXsKwQuGQqJ909dO1ste4EXme5c.crl (hash: rPE25IoGUJfE3xMmLuSoMvOgQppagB89BoCEnHdfIM8=) 9: eEIU-7XZaVcC-f6y_l8FbyGXkYs.roa (hash: ccjF0pRALTvlsj4nghUXMFhD4eJgmm2vuAU1GU9bybw=) 10: gk0o9JIYrdgKiCEVnFxYDFCmm6g.roa (hash: U5lgDtUaYRY5Jq/t8D2zh/ImkX7ABdChH50k3iWkRSA=) 11: isVEUZfOAYWgwQz8Wasb0pXP9-c.roa (hash: KMpoK0MvGBO62nHjsAV0aozmo8+TgCC0xqPegTe+AGU=) 12: plBE2K-1jhmKq6eM8fW4KaXWZeQ.roa (hash: Fhmhnyiel4/Ua1E2ksX/40TvHfAVYkZD+dMm3wF8AAw=) 13: q5iwhkLWHaHzrsMDMRUmBmBn11k.roa (hash: 2neeMv5dtKfWXLBDuxY5lIZ8bbDinZSWs3Ol+x9qe8Y=) 14: qGHwRT5XaADoYIFvBSiB_qBc8VI.roa (hash: 1jerdKXo29tvZCLipnWCYRKXmzqu+SKDN+L+wjo2w8c=) 15: qSnacK2T8IuqCW3tI5c1Sj5K99M.roa (hash: WK1c1s6zKzUYTVUxjbT3jBDMbmv6j/g+GMi3AvdtgQY=) 16: rCp1o_nOqwsF2hOj4c5kBCN-sNQ.roa (hash: hkXBdU7Mx+s+1UvYnZlcv2/hPwhLGz/FrQNM7+jLYxI=) 17: uNvKhwe5KEaAzLU0ACWU9sZ7Bm4.roa (hash: jacfmgDqnbUtNbN3r/NGjMzBlVkGGEbKEgbjHG7ah6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 17:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6f:63:03:8a:f4:5d:ec:cf:6f:bd:6d:13:1d:47:7c:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Validity Not Before: Jun 14 17:00:49 2025 GMT Not After : Jun 15 17:00:49 2025 GMT Subject: CN=416043bf001c6713260ec6cc42c4256ebbf03a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:07:b0:0d:01:90:15:bc:6e:52:f3:6c:e2:3d: b9:1a:be:07:14:5b:fd:bf:4e:0c:dd:cc:f6:12:01: 66:ab:93:5e:c5:ad:e2:5d:83:ca:1e:93:b7:08:38: a4:e5:9f:04:1e:04:6d:ab:d6:3a:21:6f:5f:1b:13: e6:ff:29:84:de:a6:55:88:83:86:e2:56:a7:9f:c2: 36:e4:d4:ef:80:dc:0f:b8:96:fa:86:22:d5:65:0e: 9d:a6:ef:92:ca:ad:06:a0:96:e3:1c:fa:ef:72:53: d7:bd:ff:c7:4a:7f:80:5b:f6:d8:9a:2e:84:e1:2c: 66:b0:b9:36:d7:7d:38:4c:64:f3:02:0c:62:97:cb: dc:e9:f5:38:15:22:57:53:27:ad:16:b3:8a:4b:cf: 97:de:63:08:49:ff:9f:b9:d9:ce:88:f3:ae:51:12: 21:64:7d:3e:6f:b1:82:32:f2:56:f7:1a:77:cb:55: 3f:df:47:65:bc:e6:d8:37:17:40:30:b8:aa:da:11: 43:cf:3f:b6:58:a5:60:68:0f:8f:5f:8c:34:16:c5: 80:8c:76:30:8d:af:d2:00:53:36:72:03:9d:1c:7a: 5d:c7:b8:a7:fa:e6:49:ce:19:e2:1d:62:ac:6e:49: 26:b1:43:b8:38:ee:40:fe:e5:f5:df:a2:39:f6:df: 01:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:60:43:BF:00:1C:67:13:26:0E:C6:CC:42:C4:25:6E:BB:F0:3A:2D X509v3 Authority Key Identifier: keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:4b:20:68:1a:f5:9b:7f:ec:59:83:48:bd:ec:42:ef:e6:85: 20:71:08:22:a7:5d:61:98:1a:f2:e0:70:66:c2:6a:1e:06:bc: 5d:e7:4e:1e:6c:82:c1:e8:1e:8e:b5:de:94:b4:eb:19:3e:2e: f2:87:39:8c:46:77:23:a4:58:db:83:ad:8c:b8:75:0d:17:3e: 16:24:78:08:ae:66:2a:65:37:a8:84:71:04:73:80:59:a3:05: 33:b1:26:c3:d7:48:b3:d2:af:4e:1c:11:f9:4d:4c:e0:8e:a5: 63:3d:7d:2b:69:45:83:7c:39:89:b9:bb:3c:0b:23:bb:14:0b: aa:d9:1b:30:b7:c4:10:55:52:d7:2b:0d:0d:29:05:1c:0b:64: 17:d4:42:0f:34:a4:4d:1c:f1:58:eb:3e:67:db:62:39:cb:cd: 48:0d:bf:fa:20:4e:cc:72:45:22:89:d6:96:3e:a1:d7:73:f1: e7:63:43:ca:56:02:c9:6b:e8:a4:86:f6:d6:e7:81:c0:a1:cf: e2:cf:c1:8c:b1:27:f4:c3:da:d0:90:2b:6e:98:59:0d:42:48: 86:2c:c3:d8:1e:48:e7:a0:c6:1d:f3:09:1b:f9:95:3d:bc:d7: c4:a4:c5:74:df:ca:a7:7c:bf:42:55:3b:0f:7b:df:4d:04:f1: bf:12:6a:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdvYwOK9F3sz2+9bRMdR3yLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1N2IwYWMxMGI4NjQyYTI3ZGQzZDc0ZWQ2Y2I1ZWUwNDVl NjdiOTcwHhcNMjUwNjE0MTcwMDQ5WhcNMjUwNjE1MTcwMDQ5WjAzMTEwLwYDVQQD Eyg0MTYwNDNiZjAwMWM2NzEzMjYwZWM2Y2M0MmM0MjU2ZWJiZjAzYTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAewDQGQFbxuUvNs4j25Gr4HFFv9 v04M3cz2EgFmq5Nexa3iXYPKHpO3CDik5Z8EHgRtq9Y6IW9fGxPm/ymE3qZViIOG 4lann8I25NTvgNwPuJb6hiLVZQ6dpu+Syq0GoJbjHPrvclPXvf/HSn+AW/bYmi6E 4SxmsLk21304TGTzAgxil8vc6fU4FSJXUyetFrOKS8+X3mMISf+fudnOiPOuURIh ZH0+b7GCMvJW9xp3y1U/30dlvObYNxdAMLiq2hFDzz+2WKVgaA+PX4w0FsWAjHYw ja/SAFM2cgOdHHpdx7in+uZJzhniHWKsbkkmsUO4OO5A/uX136I59t8BhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFgQ78AHGcTJg7GzELEJW678DotMB8GA1UdIwQY MBaAFFV7CsELhkKifdPXTtbLXuBF5nuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYt ZmJlMWEwZDBhYTk4LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYtZmJlMWEwZDBhYTk4 LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl0sgaBr1 m3/sWYNIvexC7+aFIHEIIqddYZga8uBwZsJqHga8XedOHmyCwegejrXelLTrGT4u 8oc5jEZ3I6RY24OtjLh1DRc+FiR4CK5mKmU3qIRxBHOAWaMFM7Emw9dIs9KvThwR +U1M4I6lYz19K2lFg3w5ibm7PAsjuxQLqtkbMLfEEFVS1ysNDSkFHAtkF9RCDzSk TRzxWOs+Z9tiOcvNSA2/+iBOzHJFIonWlj6h13Px52NDylYCyWvopIb21ueBwKHP 4s/BjLEn9MPa0JArbphZDUJIhizD2B5I56DGHfMJG/mVPbzXxKTFdN/Kp3y/QlU7 D3vfTQTxvxJqcg== -----END CERTIFICATE-----Generated at Sat Jun 14 23:57:51 2025 by rpki-client