$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft File: dGNlNVtmVWSiEMNYxooBF7f765o.mft (raw, json) Hash identifier: Q9cfD+q36BDRS4JKRQoIwXUogjvOdG6F2BXBwozLgr4= Subject key identifier: 8C:C9:A6:E0:78:B6:B8:77:7E:63:EE:7D:8A:5B:63:0F:E3:33:32:DD Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a Certificate serial: 019771882ABCE4B62474193E8EBCD780EB01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft Manifest number: 15F9 Signing time: Sun 15 Jun 2025 03:00:38 +0000 Manifest this update: Sun 15 Jun 2025 03:00:38 +0000 Manifest next update: Mon 16 Jun 2025 03:00:38 +0000 Files and hashes: 1: 0Z8yTYlKjkqvKh6kY-kM6OXYfz8.roa (hash: fwm0Gtt1RFKV50/Ms+CgVe/rwlPJ9Q3VLzTFIW1v2aw=) 2: 1i1h10HKuKMLFRXN4cBGZ2mRyJM.roa (hash: 7JEI6UNI/BK6+fsUZu0VQIRD6uiIejb022WVzNTlPqI=) 3: 4AhKQoLmAk1YQIBQspZfyfaiu0s.roa (hash: 1kEaOXNNkPEAuTvrZqrQmCGg/Uu08f1ofkHwiva1rBk=) 4: 4VJyAeGVgAs2ysdZRw_rlOWdRTY.roa (hash: Xd7f6Is8VkQ7huxtuAE7hUXnUe/NIXlF2TbPODpbZHk=) 5: 8xmePB-pGcDcrQ-prX4UP_SBy78.roa (hash: OO9rzem914ccJuV3c6Pdstzz47bnogLMsoJtrFTJhQo=) 6: 9nwJkf06ywYV97ycnHX8xephiLw.roa (hash: E/N+tJSxegWf0b+66cYXz6Gw0s8y/7JfEZqjs9iWYvA=) 7: G1nDGEYcV0zuKzKuOXzDx75r3GI.roa (hash: 41u/KL+MWJdDf84HJGznj8QmpQB0mJMrGBzkwlxjtIc=) 8: HtGtnD1WG-uR4lNZ5h-A8-pjUrU.roa (hash: JiGHlI4PQlUWbSzc2TBFb2wXm1bs25OSgaV13SVkmqE=) 9: PQouGTOckW4W12cc4d-xjaematA.roa (hash: Kckr0tsSpm5YRyOoyFHZZMP1JYibeLXzK7UoR9DsQbM=) 10: PVKwdeX3NyiQmgk2A2820t7cOqs.roa (hash: 26tO2fkoICp4JASDnIMTpkdHS90b8zIixKpW6hSIQzc=) 11: TQNP6hoAf66GZWfHy5k78DAiiCU.roa (hash: uABddS+djXpmQc7iz2KFGbyJ5oeYnTC/ey9Ec918mow=) 12: UMHCyN1PhpnvoYUbs1CT_48YLGk.roa (hash: i765qk64qL4Uog5FTQxpy5y2jivRwNCYq0ub5NcQaLk=) 13: V51fQsmdOucWQLFJANFvs_Ma2i0.roa (hash: mhzDbXcVW4r5ZjsZqcqDKjjyLnY5MIVjnfy6m1yWpyc=) 14: V5HLYQX7OEpLFK_MH5_sUYR0JBQ.roa (hash: 6cm5gNEppEG5XD2KabFv9dmbCHQEnB7rCQFwcW30ZWM=) 15: WWDr2Um8NXXwWukbK6cj1BF3t7Q.roa (hash: KB4bFVPkGqmvCaRGbBdpA1si7s9CexKnU66M/mHt/0s=) 16: XZET7dFa5OoJqf73WGd1UHo9Trs.roa (hash: FbxqvpbDfsQRYaW0n//PgGX2T+UQY1wiBpKlSWUYJQg=) 17: dGNlNVtmVWSiEMNYxooBF7f765o.crl (hash: mtW08YghVuJW1/D1D70DOMsyng0SJj5T11lvh2JVa+U=) 18: dc2g-kIH50S7LA2o26AVsv4LItA.roa (hash: anV8AfiZnJM+uW7z2xYGvooxLoCl6L/cGFCY34WgBTU=) 19: g3gXDyn1r3CKRtOkIamh9XiFNXQ.roa (hash: bsh/frVfpWjiiUA/IVdx5lj5UBB7HEuHeERH5RVXbJU=) 20: hbkDGu-27NQwuA34KKvsthuBpoc.roa (hash: gs4QclFDIW6OH3AQHoXwFFecYQ+OpwQ25vhb21IUnck=) 21: iHslhtFiuKaugZuIjgDSTM4F6Sk.roa (hash: 43DehRvyD4BSrfqUpPUdy+zsjmfPk1hQcSdYylB1zpo=) 22: jmqPtt5Ns_W-iBFLphm9TOPqcBk.roa (hash: Q0XLFkj7/QEzPnBRybOs7B/q1S4uk4+SdVBsy+OCL8U=) 23: kMJn1HheqQ9Rsacjsd3PZ6CXhTk.roa (hash: QHx3y/n5TxjTD6iBbFsTYJr5O+YrfK0OyTuVkyzqTiI=) 24: lkYJ-_nXwt_j8sYXcXEPI8XjVSs.roa (hash: H5A3LLoCNjemShwdfzZoOLg2oRcQfw/qyX1Up4Fug7w=) 25: m095Z-7KR0K5gXucbWhKiz12Uqg.roa (hash: pKKUCvxcyqiDYUVY3jhLgvu4uMJ7RTYnDW2HPLpWkkY=) 26: nMVuUhhQLd_p2MmIFg0uk6oN0DA.roa (hash: VPC3QfM3Xk9o/TFr02RnouDa7yDlwB8VvuZ6tJbURMA=) 27: nyslHXPfyz0FM3udFOE-7tndyMk.roa (hash: gPoCAQJEwCTv4wbyGKoKpT/fwNV2im1/jc8HR0EwRAo=) 28: oEbBV7xx5_jwLtoklKva4-Dg2v8.roa (hash: i+aaCmiUXCVg0OPcM0SwO92pJsKLDZGoxx/fXdMrMgQ=) 29: oQY8Ggs-WHGozgLdlzn62PGvTmo.roa (hash: Rm3b27WZnppZmsClSvXbSesr4c+ogRwCEVrSLNbiwvA=) 30: ohR12qV3YhwWzvyvvRFfjsTfW3I.roa (hash: /Itg9xPIRRo/oOwoFitB3haSxIqbmv1Hy1qpYEx48YA=) 31: r-97pPvj-RimUl1469wxiEjOXHw.roa (hash: BJihjsrYYxzSHh3xQ0PZJNW0AKvTbj8ZG/b/oUaGZaU=) 32: sTAcEeIlslVpuXMYkyeJBskGwEo.roa (hash: sDqLs0eEA0fKuxXHljiO7Zt9np/B1YWaKWKNaP6grbA=) 33: si-h3EMZPum7ZeFVKrM-JgEvS5s.roa (hash: e6RNF3nCZ80GPAqffnrYJBWzKtbs1gbwLTkQ6jY31gw=) 34: t2bPxtc37O7_UaSx43VqFjBQeQ8.roa (hash: TQAVmYhnwd2Kv49WbSb4VDqVmwGOcSo0dPabg2IvysA=) 35: yTFqO5xiaIDSCJNJ_ZUqbKSypdQ.roa (hash: zRFFAOZDcEueQQ2liuDNq8EtejJKoUyry9Flbp6zROU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 03:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:71:88:2a:bc:e4:b6:24:74:19:3e:8e:bc:d7:80:eb:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a Validity Not Before: Jun 15 03:00:38 2025 GMT Not After : Jun 16 03:00:38 2025 GMT Subject: CN=8cc9a6e078b6b8777e63ee7d8a5b630fe33332dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:29:01:81:5b:5c:d4:fe:e6:68:70:84:fa:4e: 69:bf:37:b3:d3:54:de:b5:86:68:07:3a:81:dc:e8: 48:de:95:3f:64:a4:cc:b3:c2:6d:fa:84:0f:e6:4c: 34:8c:24:01:1e:73:e6:78:4f:cf:88:4e:3f:f9:56: 94:e2:de:20:f0:e6:29:4b:ce:7d:34:46:a4:60:51: e7:5a:97:33:dc:ab:52:6e:57:00:0e:8b:d7:ac:0c: f7:0b:bd:f6:01:72:c8:6c:b5:dd:15:ab:35:e7:c9: bf:c8:b5:9c:f3:4d:9f:ef:40:1b:33:f3:03:09:4a: d8:b7:02:0a:eb:92:c6:65:5a:08:d8:bd:5d:4e:6c: 0b:16:a8:1a:fd:23:51:09:c8:b4:4d:29:f7:8f:8d: dd:ed:df:0f:fe:b8:f5:1b:0d:ca:14:2f:e5:f7:92: 76:0a:02:24:af:3b:1a:fa:66:c3:eb:16:40:2c:c2: 85:93:3e:f4:35:69:28:bd:50:31:2d:07:8a:73:b4: 2f:4c:9e:4c:e9:06:25:68:56:4c:07:6f:36:89:3b: 66:fd:91:24:da:8e:df:82:93:e1:08:14:ba:be:14: b2:1b:aa:71:a4:71:5f:c2:de:1c:5c:95:79:d6:06: e1:33:d4:ff:a5:31:af:48:b6:f2:fc:52:23:18:53: 06:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C9:A6:E0:78:B6:B8:77:7E:63:EE:7D:8A:5B:63:0F:E3:33:32:DD X509v3 Authority Key Identifier: keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:19:c9:8c:a8:05:ee:a7:62:70:a2:05:71:ea:76:b1:ba:df: 9b:7c:5a:31:3e:ec:18:98:f7:e0:d7:e8:35:43:11:6d:a5:5e: f8:25:c7:24:69:e6:b2:f6:8a:4f:28:4d:b7:b9:d6:cf:7c:49: 2b:d9:75:4a:0f:97:fe:98:40:17:1d:35:0d:90:26:f9:df:6d: 15:d2:2c:1f:e5:ba:8b:09:88:20:23:cf:fe:09:93:86:25:dd: 0d:d4:d8:15:e3:21:6e:76:b6:6e:ae:7a:a9:09:9d:0b:8e:ac: d4:27:06:34:15:b4:5d:d1:22:c6:c5:a3:bc:4a:96:af:a7:db: 7a:33:89:3e:35:a2:d4:7c:66:f9:77:f6:bd:af:01:62:7a:f5: 3b:bf:90:e9:3c:a4:70:0a:02:52:d4:17:07:52:ac:32:eb:c0: 2f:8b:06:26:b1:2b:a5:2d:54:fa:bf:b4:15:c9:42:da:b1:35: 36:bb:70:4d:55:f6:dc:d7:78:f6:25:e8:15:eb:08:53:65:df: 15:84:0c:dd:49:b7:2c:d4:30:53:18:7f:91:ef:97:75:bf:d6: 4d:63:7c:46:c7:7a:1d:30:87:9a:d8:d4:9f:7b:3a:29:69:e2: 7f:fb:a7:2f:d9:88:6f:84:5f:e6:0d:a6:5e:ee:dd:61:53:8c: af:b8:66:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdxiCq85LYkdBk+jrzXgOsBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm YmViOWEwHhcNMjUwNjE1MDMwMDM4WhcNMjUwNjE2MDMwMDM4WjAzMTEwLwYDVQQD Eyg4Y2M5YTZlMDc4YjZiODc3N2U2M2VlN2Q4YTViNjMwZmUzMzMzMmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSkBgVtc1P7maHCE+k5pvzez01Te tYZoBzqB3OhI3pU/ZKTMs8Jt+oQP5kw0jCQBHnPmeE/PiE4/+VaU4t4g8OYpS859 NEakYFHnWpcz3KtSblcADovXrAz3C732AXLIbLXdFas158m/yLWc802f70AbM/MD CUrYtwIK65LGZVoI2L1dTmwLFqga/SNRCci0TSn3j43d7d8P/rj1Gw3KFC/l95J2 CgIkrzsa+mbD6xZALMKFkz70NWkovVAxLQeKc7QvTJ5M6QYlaFZMB282iTtm/ZEk 2o7fgpPhCBS6vhSyG6pxpHFfwt4cXJV51gbhM9T/pTGvSLby/FIjGFMGrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzJpuB4trh3fmPufYpbYw/jMzLdMB8GA1UdIwQY MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt NmE0ZWNhZjhiM2IxLzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApRnJjKgF 7qdicKIFcep2sbrfm3xaMT7sGJj34NfoNUMRbaVe+CXHJGnmsvaKTyhNt7nWz3xJ K9l1Sg+X/phAFx01DZAm+d9tFdIsH+W6iwmIICPP/gmThiXdDdTYFeMhbna2bq56 qQmdC46s1CcGNBW0XdEixsWjvEqWr6fbejOJPjWi1Hxm+Xf2va8BYnr1O7+Q6Tyk cAoCUtQXB1KsMuvAL4sGJrErpS1U+r+0FclC2rE1NrtwTVX23Nd49iXoFesIU2Xf FYQM3Um3LNQwUxh/ke+Xdb/WTWN8Rsd6HTCHmtjUn3s6KWnif/unL9mIb4Rf5g2m Xu7dYVOMr7hmsQ== -----END CERTIFICATE-----Generated at Sun Jun 15 13:11:50 2025 by rpki-client