$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft File: zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json) Hash identifier: O60peh24+8kIDWjQl12QDFcdsJiYpWkl6zx4dWFxZr4= Subject key identifier: 25:EB:5C:82:D1:30:C0:8B:CF:D6:3A:4E:00:FC:BC:E0:0B:6F:60:F0 Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 01976BBD08224807E37F81ABB2BB396BDDE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft Manifest number: 1598 Signing time: Sat 14 Jun 2025 00:00:39 +0000 Manifest this update: Sat 14 Jun 2025 00:00:39 +0000 Manifest next update: Sun 15 Jun 2025 00:00:39 +0000 Files and hashes: 1: 6ve9ZdOx9-Jbfmi44W3M8-3fyYA.roa (hash: dVVun+kF/7beMen84cbPjTHH6kjQfKs3AUC1Xd2wQ2A=) 2: J2wVE-ysPom5E_5lF4tJldYNa-0.roa (hash: oUIFr0+ZyYlkYGUaUpe52i+2V6CsiaUkgkNDD+7+LeQ=) 3: UKCOK-W3ox3wQ-_xQp6Nu_DwCz4.roa (hash: gPrsrWnRzFL4kuQaY4M1gIUFgKd8cdPjv6qajYb7JnQ=) 4: YwzWinKJc46_U8FICjJOYyamFbE.roa (hash: 6RpEEVsTkHPSo1dAN1+8+s2LqtjPnGEmS34LuQumwbI=) 5: a5CofPxS02DnAUUS9BR-MfOlQu4.roa (hash: LylucOp1UfCFOp+5ipOtc4LcLveZAw9S3wnaBKPFnAA=) 6: aTxnMurrHnoJZlgUyPTNHT4Ir8Q.roa (hash: HeEFk1qtIJz6ps6s2w4DpyvOfJGSvhT8ioiircXVR2o=) 7: c_P4sr3Opke1mWU78BvJMlMDps8.roa (hash: epdNIDM+10/qxHg1G8njFcHs1LoWUpUQmmausYhNxGY=) 8: iI8DgizVWpbEfLLZJw23cwOMtao.roa (hash: gWEZpZ6NinOCicsU6XwwO/9pb7/TViv+n+2ETM0yooY=) 9: p1mSMR7xN9m1jztS6WxG27UANcc.roa (hash: 4Bmm+a1YgG6FugC5k/i8MnSCpfdQHkbijQGY6Yl+j+g=) 10: sYAfD4BV-6irRlKQSwMoXHjm0Mc.roa (hash: T1/WiR0D/YUKPRxlOtYq/pfY4c0SddtxyI4tXYaUGdg=) 11: wZigKiFSFg2jf4ybn-aNCM9AUoc.roa (hash: 7ZXKjf9bxY5hwxObMzg74iYfXa92Z7QeLKS7Y869myY=) 12: xuKZJebXbxs55nxOb7ZrfE7zGKE.roa (hash: Jt/lG0DwTTw8LOe3o8IYDXO60+0YpLwITYi+cEFQ4h0=) 13: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: uOJv8Y2nmeubdAgRIRoJpaCmmqDTZHOxQVuZWzvRsfg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 00:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6b:bd:08:22:48:07:e3:7f:81:ab:b2:bb:39:6b:dd:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: Jun 14 00:00:39 2025 GMT Not After : Jun 15 00:00:39 2025 GMT Subject: CN=25eb5c82d130c08bcfd63a4e00fcbce00b6f60f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e9:3c:21:15:96:a4:2f:76:84:ee:b4:53:c4: e5:1a:56:cd:2a:79:e1:19:16:12:b8:5b:20:bc:f3: 0b:7d:8a:9f:25:f8:8d:ab:70:25:6b:2c:f8:60:4a: 4b:15:6b:c6:48:53:8a:cd:d8:c2:b1:f3:9e:e4:42: 17:e8:e8:36:00:4e:22:92:e9:2d:49:62:9a:67:3a: 25:99:63:4b:db:9d:86:bf:46:e9:63:e0:02:af:80: f2:82:6b:f6:d0:e4:d0:07:0a:b3:04:c5:ad:86:d8: 60:b4:9b:cc:08:e1:20:e4:44:7d:6c:00:b8:df:d7: 17:96:28:68:93:b0:c6:e2:74:1f:35:10:61:63:54: ee:5c:c6:3d:67:cd:4b:3e:56:87:38:96:a6:35:f2: d4:70:9e:83:be:81:38:45:5a:06:aa:e7:72:25:83: 4b:6f:fe:41:d6:9a:0f:59:22:a8:06:70:b0:67:10: 2b:f5:d0:f2:f7:12:69:13:c5:e2:fd:b4:d7:01:bf: e7:2e:9b:e0:ce:39:ab:9a:7b:8b:c4:1b:b8:64:6c: af:ca:b8:47:e0:18:ad:47:d9:29:9d:da:af:a4:0f: c7:40:5a:d7:d5:c4:2d:0f:2c:c0:00:48:9d:72:f3: fd:5d:c1:54:55:da:38:71:da:87:57:2a:a4:a7:25: ef:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:EB:5C:82:D1:30:C0:8B:CF:D6:3A:4E:00:FC:BC:E0:0B:6F:60:F0 X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:d8:a2:26:07:ae:9f:86:3b:c6:06:17:51:79:ff:f5:d6:81: 44:44:c5:39:98:40:a6:6b:0e:b3:ee:57:47:e6:bb:e7:e3:c9: 0b:13:6c:74:5b:18:a5:53:7d:c4:de:22:d2:35:e7:49:79:cc: fe:e1:c0:61:f6:86:4c:7e:0f:3a:66:42:5b:f5:df:90:51:8f: 1b:66:ef:1d:7f:1b:20:d9:68:3c:62:02:91:79:2e:4e:ff:a6: 0a:88:ed:ee:cf:74:c3:c5:f1:c7:14:95:99:fa:a8:ca:72:c7: b4:12:2b:af:82:68:f8:f9:5a:0d:e0:c7:f7:a7:51:58:37:9c: 89:66:63:c9:de:73:86:f5:18:43:e1:d8:43:f2:d1:ed:b8:59: 78:a3:2d:91:34:a6:b5:b2:55:32:f4:3e:6c:0e:16:93:bb:99: 30:2d:22:0b:b8:a4:f9:3e:72:c3:bb:f5:29:33:18:26:79:94: ce:26:79:e0:fb:3c:51:9b:9a:07:51:b5:fd:f8:c0:a9:b2:36: c6:67:fe:7e:53:3e:0d:de:a3:54:ee:82:1d:7a:10:2c:c9:f8: 89:54:14:f7:7e:23:b6:81:e0:69:4b:47:fd:ac:4d:22:f8:17: 91:b4:6e:3e:e7:54:28:aa:91:43:00:23:7c:8a:a2:25:d5:54: d6:c4:e3:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdrvQgiSAfjf4Grsrs5a93iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjUwNjE0MDAwMDM5WhcNMjUwNjE1MDAwMDM5WjAzMTEwLwYDVQQD EygyNWViNWM4MmQxMzBjMDhiY2ZkNjNhNGUwMGZjYmNlMDBiNmY2MGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuk8IRWWpC92hO60U8TlGlbNKnnh GRYSuFsgvPMLfYqfJfiNq3Alayz4YEpLFWvGSFOKzdjCsfOe5EIX6Og2AE4ikukt SWKaZzolmWNL252Gv0bpY+ACr4Dygmv20OTQBwqzBMWththgtJvMCOEg5ER9bAC4 39cXlihok7DG4nQfNRBhY1TuXMY9Z81LPlaHOJamNfLUcJ6DvoE4RVoGqudyJYNL b/5B1poPWSKoBnCwZxAr9dDy9xJpE8Xi/bTXAb/nLpvgzjmrmnuLxBu4ZGyvyrhH 4BitR9kpndqvpA/HQFrX1cQtDyzAAEidcvP9XcFUVdo4cdqHVyqkpyXvVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXrXILRMMCLz9Y6TgD8vOALb2DwMB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsdiiJgeu n4Y7xgYXUXn/9daBRETFOZhApmsOs+5XR+a75+PJCxNsdFsYpVN9xN4i0jXnSXnM /uHAYfaGTH4POmZCW/XfkFGPG2bvHX8bINloPGICkXkuTv+mCojt7s90w8XxxxSV mfqoynLHtBIrr4Jo+PlaDeDH96dRWDeciWZjyd5zhvUYQ+HYQ/LR7bhZeKMtkTSm tbJVMvQ+bA4Wk7uZMC0iC7ik+T5yw7v1KTMYJnmUziZ54Ps8UZuaB1G1/fjAqbI2 xmf+flM+Dd6jVO6CHXoQLMn4iVQU934jtoHgaUtH/axNIvgXkbRuPudUKKqRQwAj fIqiJdVU1sTjDA== -----END CERTIFICATE-----Generated at Sat Jun 14 10:42:10 2025 by rpki-client