$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: tTqifz1Wt/xTFhhSXQR/qgMdGgpfbJar7/JfLrwjT8I= Subject key identifier: 48:EF:1A:BC:9C:34:E0:FB:34:28:C4:42:37:BE:CB:DC:EB:BC:2F:D2 Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 01976CCF5BD6ED3C20175512C7D2E246A154 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 1327 Signing time: Sat 14 Jun 2025 05:00:18 +0000 Manifest this update: Sat 14 Jun 2025 05:00:18 +0000 Manifest next update: Sun 15 Jun 2025 05:00:18 +0000 Files and hashes: 1: 5WpWrypca4XGx0ISHtuZYRT_cno.roa (hash: R8ZoU8UZw1Z3gy7t3IJTFumdlDzgJjWSubPKAJkbvV0=) 2: 6Tq_leUsVpFgI85zp_wIyChN4WA.roa (hash: //rXy+p6IdrQ6jHZrRlFQGf563PHiLpmYBPTnbSHBxk=) 3: 8wA7Z8R93JqOIr4nUCX1S5SLIf0.roa (hash: 8DXy5Yj333BXczsMQt5oYuiRo4BwLMddhajfUUPGovk=) 4: ElpdsCAHWnrspf_BQqwQgScgsBo.roa (hash: qGJ7OM5aBe7dvyjzLtp4kDohE2tNL4nfvnY6+uLyiBw=) 5: JOBERo-vgg6dldBoWViTCfV7X-A.roa (hash: ce+d5taUPY+G9x5sjcA70ndAe38v7dhbZx0JrAG/CD4=) 6: RYSW4-JdkoBKfIznV9vyOBl6v0k.roa (hash: tfbM0g7bQsYb1raiS9o3/ZoSCJhkN7ErYxyrCWx4xjs=) 7: T1V76bxlhezLMl4Tzlvgqgk0pcg.roa (hash: Hk9kWyBSS3VZQ3ORtc2F2qsaXDclUxsqlus/HDJzLds=) 8: Z5phhVwVfpK6dkc5C1-vYmhcYUU.roa (hash: iIyIPk2NBxkdVR06TYJeH+vh01QOalQb+F2tpumtM+w=) 9: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: dR5idgwiiRimOGgzf406IuV5ma73JS049it8VWa8aqk=) 10: ezMLdhISIqr2PAqGoulAf-qQ6FY.roa (hash: MoVmtNQ9G0A/NJidABkGuBmF42AfIIukbBtAhp8lY68=) 11: mA4IEAHXR0LDJS0AO7AgvdyymfA.roa (hash: B62czMPy2pKQJ5FL2R2C5ZUZdywtpL+Cj+O5hZ16Rv4=) 12: qQMnV_AHkaoypfzXBStNqOIC8i4.roa (hash: 8/gHPP6AgbL3NuW+OG2JLB+jSLFsV5WrdZq7Of0LMpg=) 13: t-GC4kGf7lvSnOYAiTpgmlkKEL4.roa (hash: 9rNbslHDQxGg0Ew50MQa2Fk3HC4+vs4VNNeusuZLYr8=) 14: x9Pa4FjGFuSawk-SEv2Ok6k19yY.roa (hash: KV0RsDBtETgbugEI2r4ib263Vs08/yFDjc5KML8G+A0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6c:cf:5b:d6:ed:3c:20:17:55:12:c7:d2:e2:46:a1:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Jun 14 05:00:18 2025 GMT Not After : Jun 15 05:00:18 2025 GMT Subject: CN=48ef1abc9c34e0fb3428c44237becbdcebbc2fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3a:b1:90:c3:18:fd:3a:b7:4a:55:61:5e:23: ed:13:5b:0a:6d:76:e3:42:d2:05:9f:9a:a7:68:45: e7:72:25:f2:3b:43:0d:33:d4:b1:0c:97:db:d6:22: f1:f7:08:d0:38:c6:c5:20:57:df:cb:fd:40:d0:52: a0:f4:0b:f6:e1:ec:c8:82:ae:14:c6:58:87:76:ea: 6e:5c:20:4e:9c:3a:f2:e3:d8:92:2c:bd:2c:68:e9: 85:45:10:1d:10:20:08:bf:01:34:7e:8a:ed:4b:68: 36:47:08:29:46:23:08:79:14:f2:a9:82:13:1d:af: db:77:63:25:38:0e:a0:ae:01:38:a1:06:81:c5:c7: 0c:d0:e5:ea:43:51:95:d8:aa:e6:30:cd:ba:73:a5: 85:99:fb:20:bb:c9:07:f9:be:eb:2b:f5:f5:bb:de: 1d:98:84:83:3d:54:a8:dc:f3:e9:e8:e8:50:c5:7e: 37:35:2e:55:b0:bc:67:81:23:72:a0:e4:c3:77:7b: 69:d2:58:54:15:57:65:f0:93:53:5d:8d:c6:3b:15: bc:03:5d:9b:b5:d0:1b:04:64:d1:89:41:a0:3c:40: df:30:6b:6b:b8:be:7a:ea:96:35:db:38:fa:2d:5a: 40:5b:b7:fa:fe:57:0a:89:86:55:49:50:b3:a7:05: f6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:EF:1A:BC:9C:34:E0:FB:34:28:C4:42:37:BE:CB:DC:EB:BC:2F:D2 X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:0c:65:fc:27:33:ea:a6:18:d2:a4:e2:c1:06:11:2a:01:dd: 68:23:8f:2f:2d:64:51:b0:1d:38:53:32:f6:23:a2:9d:e9:3d: 6c:be:6a:48:de:6e:47:16:54:06:f5:de:2b:88:dd:bc:07:6b: 02:3e:24:c0:13:cd:60:45:b3:b9:01:8e:c0:9a:ed:9f:e1:cd: 5f:91:66:e4:e6:2d:1e:0a:c7:4c:ec:9b:92:4c:26:80:5b:73: 44:8d:09:17:22:93:b7:7f:c3:ce:19:bf:14:33:9f:ea:2c:06: 7b:1e:c7:37:34:ad:8b:bc:f3:36:4f:30:3a:33:43:ff:79:42: 33:f4:ea:2d:ca:b2:1d:da:bf:3e:6c:ca:9b:45:27:5e:3b:e5: c0:20:0b:6a:ac:9d:72:1e:dc:7d:62:fa:f1:d4:6b:cf:56:3c: b1:b6:df:4c:f4:74:c9:70:c4:30:9e:1f:fa:a2:2f:1a:a4:34: f5:82:76:a3:c9:5f:24:02:64:8c:9a:65:78:3b:53:f1:df:8f: d7:cd:2b:42:ad:df:42:fa:85:9f:bc:f3:cc:29:fa:03:31:77: f9:81:21:76:fe:be:12:a0:c1:5d:a4:37:ef:2c:cf:a4:dd:83: 43:fd:e2:86:44:7e:53:b8:6d:92:93:c8:ec:7f:8d:ff:96:8b: cd:d4:ff:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdsz1vW7TwgF1USx9LiRqFUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjUwNjE0MDUwMDE4WhcNMjUwNjE1MDUwMDE4WjAzMTEwLwYDVQQD Eyg0OGVmMWFiYzljMzRlMGZiMzQyOGM0NDIzN2JlY2JkY2ViYmMyZmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujqxkMMY/Tq3SlVhXiPtE1sKbXbj QtIFn5qnaEXnciXyO0MNM9SxDJfb1iLx9wjQOMbFIFffy/1A0FKg9Av24ezIgq4U xliHdupuXCBOnDry49iSLL0saOmFRRAdECAIvwE0fortS2g2RwgpRiMIeRTyqYIT Ha/bd2MlOA6grgE4oQaBxccM0OXqQ1GV2KrmMM26c6WFmfsgu8kH+b7rK/X1u94d mISDPVSo3PPp6OhQxX43NS5VsLxngSNyoOTDd3tp0lhUFVdl8JNTXY3GOxW8A12b tdAbBGTRiUGgPEDfMGtruL566pY12zj6LVpAW7f6/lcKiYZVSVCzpwX2owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjvGrycNOD7NCjEQje+y9zrvC/SMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQxl/Ccz 6qYY0qTiwQYRKgHdaCOPLy1kUbAdOFMy9iOinek9bL5qSN5uRxZUBvXeK4jdvAdr Aj4kwBPNYEWzuQGOwJrtn+HNX5Fm5OYtHgrHTOybkkwmgFtzRI0JFyKTt3/Dzhm/ FDOf6iwGex7HNzSti7zzNk8wOjND/3lCM/TqLcqyHdq/PmzKm0UnXjvlwCALaqyd ch7cfWL68dRrz1Y8sbbfTPR0yXDEMJ4f+qIvGqQ09YJ2o8lfJAJkjJpleDtT8d+P 180rQq3fQvqFn7zzzCn6AzF3+YEhdv6+EqDBXaQ37yzPpN2DQ/3ihkR+U7htkpPI 7H+N/5aLzdT/kA== -----END CERTIFICATE-----Generated at Sat Jun 14 09:08:34 2025 by rpki-client