$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft File: h3e1s29m4TxDiMmTTaUHhWUV0HM.mft (raw, json) Hash identifier: ao+EGcaM8fV06Oyjotm1grrJyNlg/BhNbrGtKnG4PCs= Subject key identifier: 42:EE:F6:B6:44:B9:A8:5D:1B:75:60:EA:2F:EA:4B:B6:E7:7B:41:C4 Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073 Certificate serial: 0197711B2B91EF82A96F06ADB7070003882D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft Manifest number: 159E Signing time: Sun 15 Jun 2025 01:01:35 +0000 Manifest this update: Sun 15 Jun 2025 01:01:35 +0000 Manifest next update: Mon 16 Jun 2025 01:01:35 +0000 Files and hashes: 1: A6JGXr1SyvHwPS6KzQQ8jkJldSU.roa (hash: VUYWyhNS6ep9E7uE71FApUlIqX9LiZIrh4n1ahAsDso=) 2: TWqw0MHPHKoktRTg5xIAtx78yEM.roa (hash: PUFyi4vEY3nAKmSSQP1jmjE/95RjFLcOq0y69mlpJOM=) 3: V8TNai625jKsZmcQ_WZGrCSKrE4.roa (hash: vysxGoIRN63RAVmh7o1GuXI9idOSf2H3bNvDZcwjEdY=) 4: e6_LhXTjf-f7BeHN6H1yNQzFGts.roa (hash: li+C+e/TyH8gT/zIILB28hzFIhULplGnnZiYiHV9ZRc=) 5: gSW8bbfsJ2jQqNlN9dZhEGJFXP8.roa (hash: vU4Z2mH5UQmCsli4v0J2JenJSa7jKRcKq2cUWRszffQ=) 6: h3e1s29m4TxDiMmTTaUHhWUV0HM.crl (hash: 2CKUookvRWWkvXmy36e5VaUASeTBsetmVxgs03O9ZU0=) 7: i0jLZUHWlEbTjItngq0hMz6l6J0.roa (hash: +fs8xaq1rUOg67Y/1DC1FdTxOQepuB3UaDQqJ+epLzo=) 8: mYsvImsoUU3Ub9pNivjve1CZzdk.roa (hash: 6hty2hcbqDF/bBkU2gmepu7xCrLxFUdqyzgzAZcFQt8=) 9: mcMvNLDOLrmNQ78kKv9_JRA7DZE.roa (hash: VPPZszck1h4O1z0bSD4PbxyUsa9F/mGv1ZkFIvAMZag=) 10: rIHZb_5Mc64A87xwROb5WoKPTaQ.roa (hash: h28IpYVJGdPeChoNExuao8goV9hXIxbKmOle/GHbji8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 01:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:71:1b:2b:91:ef:82:a9:6f:06:ad:b7:07:00:03:88:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073 Validity Not Before: Jun 15 01:01:35 2025 GMT Not After : Jun 16 01:01:35 2025 GMT Subject: CN=42eef6b644b9a85d1b7560ea2fea4bb6e77b41c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:5a:65:ca:bd:3a:1f:54:08:3a:81:65:13:07: 7a:1e:60:d0:01:4e:75:87:bd:42:20:5a:aa:7c:12: 6b:3d:c9:21:29:77:51:c6:fb:95:2b:4d:fd:64:df: 7f:43:37:f6:0f:ea:77:0f:13:f1:0a:77:f5:fa:a1: 05:97:8c:bd:ca:70:b6:8a:04:b1:4d:f6:8d:ca:b2: 00:64:1c:f8:d1:2f:d8:9c:30:39:1e:c4:c3:81:e1: e0:c9:b7:c9:7b:4a:29:bf:40:99:fa:17:f9:2b:31: 76:4d:a6:42:56:e9:07:13:73:84:6f:b3:24:f4:fd: 94:1b:30:ee:ad:e7:24:81:f8:c7:17:79:74:79:49: af:1d:05:6d:7f:fb:7e:60:1e:86:d6:52:7a:a0:d1: 04:bd:b9:9e:77:8b:45:90:16:7d:b8:71:7d:35:bd: 7a:15:a4:12:47:83:fa:7a:e8:40:2b:0b:d9:51:d5: df:f4:ed:f7:5a:7d:31:0b:00:e2:b1:dc:b8:aa:38: 1b:90:ab:81:e2:45:ee:fb:06:7a:c0:28:15:5a:08: e5:62:c6:ec:fd:0a:fe:c8:aa:1e:b8:28:02:eb:e1: 54:f5:bf:3f:cf:a4:57:2a:cb:0b:4c:d7:07:b3:df: ea:3f:7b:de:58:68:dd:88:7c:1d:09:3e:43:7f:d0: a2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:EE:F6:B6:44:B9:A8:5D:1B:75:60:EA:2F:EA:4B:B6:E7:7B:41:C4 X509v3 Authority Key Identifier: keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:f0:ed:43:9b:74:dc:e2:db:a0:c3:b2:2d:d5:d0:e6:be:bc: 1d:c7:f0:d4:43:07:40:eb:00:e6:cc:42:a0:eb:a0:e2:3a:3e: cd:5d:73:c5:44:4f:35:ab:ef:44:cc:c9:e7:6a:83:96:41:f0: 96:b3:a4:78:6f:27:5e:3d:ac:03:00:93:bd:ee:e7:d1:e6:e4: d6:63:5c:32:81:3b:cf:bc:96:4f:d8:90:4f:c2:93:db:95:30: 8a:12:76:23:be:f6:51:01:5b:d1:66:85:d4:86:59:53:77:64: 6b:f8:d1:13:b1:56:b6:cd:96:06:fe:a8:da:2a:6f:fa:e4:a6: 58:a9:5c:1d:f1:81:23:ff:2f:fe:7a:59:e7:6c:83:8b:87:0b: 00:67:54:8d:e2:ef:35:ad:73:42:01:3b:f0:4d:20:50:ae:69: 6b:55:7e:15:61:73:eb:75:bb:89:7b:9a:59:96:9e:47:c5:06: 78:65:77:24:70:e7:98:5b:73:f6:87:a0:b7:71:73:e3:73:14: e9:d6:d3:b5:c6:66:b0:c3:d1:e5:87:d8:94:12:b4:49:53:4f: ed:12:0d:44:f8:62:ed:0f:a3:5a:4f:74:82:8f:36:58:3c:9d: 9d:5c:20:1d:35:75:bb:88:9b:85:44:3a:3f:55:f8:59:06:fe: a5:a8:50:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdxGyuR74KpbwattwcAA4gtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx NWQwNzMwHhcNMjUwNjE1MDEwMTM1WhcNMjUwNjE2MDEwMTM1WjAzMTEwLwYDVQQD Eyg0MmVlZjZiNjQ0YjlhODVkMWI3NTYwZWEyZmVhNGJiNmU3N2I0MWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Fplyr06H1QIOoFlEwd6HmDQAU51 h71CIFqqfBJrPckhKXdRxvuVK039ZN9/Qzf2D+p3DxPxCnf1+qEFl4y9ynC2igSx TfaNyrIAZBz40S/YnDA5HsTDgeHgybfJe0opv0CZ+hf5KzF2TaZCVukHE3OEb7Mk 9P2UGzDureckgfjHF3l0eUmvHQVtf/t+YB6G1lJ6oNEEvbmed4tFkBZ9uHF9Nb16 FaQSR4P6euhAKwvZUdXf9O33Wn0xCwDisdy4qjgbkKuB4kXu+wZ6wCgVWgjlYsbs /Qr+yKoeuCgC6+FU9b8/z6RXKssLTNcHs9/qP3veWGjdiHwdCT5Df9CiWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELu9rZEuahdG3Vg6i/qS7bne0HEMB8GA1UdIwQY MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt ZWQxZjMwY2MxYzU3LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3 LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvDtQ5t0 3OLboMOyLdXQ5r68Hcfw1EMHQOsA5sxCoOug4jo+zV1zxURPNavvRMzJ52qDlkHw lrOkeG8nXj2sAwCTve7n0ebk1mNcMoE7z7yWT9iQT8KT25UwihJ2I772UQFb0WaF 1IZZU3dka/jRE7FWts2WBv6o2ipv+uSmWKlcHfGBI/8v/npZ52yDi4cLAGdUjeLv Na1zQgE78E0gUK5pa1V+FWFz63W7iXuaWZaeR8UGeGV3JHDnmFtz9oegt3Fz43MU 6dbTtcZmsMPR5YfYlBK0SVNP7RINRPhi7Q+jWk90go82WDydnVwgHTV1u4ibhUQ6 P1X4WQb+pahQJA== -----END CERTIFICATE-----Generated at Sun Jun 15 11:43:15 2025 by rpki-client