$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft File: dTm3oSNBeqcZMllGqong8wqwygk.mft (raw, json) Hash identifier: WTSFOfcimQCoSS60cjCQzAFTqJ356nUG4AFH8ogvLjE= Subject key identifier: 86:1C:16:69:4D:B1:49:4E:65:C3:C9:A9:28:66:CA:EF:E9:73:0F:02 Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09 Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09 Certificate serial: 01977FE94DD74CB163C1867A2C55F6A5EF7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft Manifest number: 15A9 Signing time: Tue 17 Jun 2025 22:01:25 +0000 Manifest this update: Tue 17 Jun 2025 22:01:25 +0000 Manifest next update: Wed 18 Jun 2025 22:01:25 +0000 Files and hashes: 1: 6DEouzxjjNK_68sFR-t4CPN-SS8.roa (hash: Oi8D+F91F2i7lr20xSQLbZgZOtgMLQbrK5SvQlzaitc=) 2: DIuSabtBbR2nQm3WZSy9ze7IVZg.roa (hash: 2rVX0GGpPvWmCFxQ7xML0aabrAFCH5UZoizKMnJ47/I=) 3: GcwznvOYgf-O_ItmFmcLriyXzrs.roa (hash: GxJFlw75s4yOkIPA50toNBLYc/0teNDfXWriesa0E04=) 4: HyUq2HM4kVyO5I9xjv23WW5w1ic.roa (hash: OoUZqAFbwPuNe3DMemRAFjc9wb0LotNFxJCnVpSwfHc=) 5: LYviAp3PxmjO3NYT62eUwATXCDA.roa (hash: cNgFyZaC7ifnpFT8pGCK7760nWd6v3gVDQo7PYoFJbc=) 6: MEvLBKznYJtmItKD78ssXi4mzoQ.roa (hash: pEF4lHoNxgZxriIYsg2W9oGgnigGshpc2ELBfuOnvBk=) 7: QL3J5aUF7REcuSuGJkHRh-T_Mlk.roa (hash: NRo/K62fCGXaYZyQldEoQlP95+Ec/K3+eWLflyYVYMA=) 8: Saq3VYHlza0IcEZF1whMhjsSAlA.roa (hash: iAqLC/j/inixhiy0KGKP177bZAzmIcZH/0FDe0WAUeQ=) 9: VOSDfxHvYjtBiBTe909ZadJMtPA.roa (hash: dQcuzaMdOD+0BiceMsluO5RG0GYGErSY43MYPGJaOdo=) 10: VVGAKlexZnslyaxsj979p9-1tLc.roa (hash: zSg/YLF7G2TzXt0TnTqPgj/B+dgWPQfBczFUSMDRTig=) 11: YWpo66YDW4G278af10SMQAtiOHo.roa (hash: Y9X0J6r0SDlIe4fmcLli4bcOvBDBEcbJdPc8zKihBto=) 12: dTm3oSNBeqcZMllGqong8wqwygk.crl (hash: 0Na+Cfyv2F2MfUVD6snPWRYuReDplsRvxiJ7h/WlfLU=) 13: kV6R2Ovdk9Hj-oCFXECnloFy2r4.roa (hash: PiaTCFnxlB3VR92lDDt5EbEtyX7/8S00PG5z/8wHps0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 18 Jun 2025 22:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:7f:e9:4d:d7:4c:b1:63:c1:86:7a:2c:55:f6:a5:ef:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09 Validity Not Before: Jun 17 22:01:25 2025 GMT Not After : Jun 18 22:01:25 2025 GMT Subject: CN=861c16694db1494e65c3c9a92866caefe9730f02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:28:8a:ad:c6:48:51:c2:c1:e6:04:bd:b3:bd: 3f:0b:4e:1a:cb:c3:01:bb:ac:68:4a:74:ef:eb:eb: 85:ea:61:86:c5:3e:d2:90:7e:88:8f:a5:27:4d:f9: 49:b9:ce:9d:bd:22:c2:22:b4:e7:38:42:2e:d1:03: 39:15:d0:aa:c2:77:10:a6:ed:5d:6b:73:a0:a0:bc: d3:62:04:4d:e5:ed:81:a1:42:d9:31:cb:58:84:61: 26:4e:f9:b9:81:86:8b:a6:7c:e8:1f:6c:49:28:99: 24:af:49:cd:73:ef:ff:70:67:f4:b6:8e:80:2c:4d: 45:fa:b3:b6:9a:ec:19:64:7a:fd:45:b0:b6:a8:46: 14:8d:fe:92:85:eb:60:90:03:67:8a:f5:79:52:07: 25:af:95:e5:11:50:f3:b8:b7:89:d7:a4:a9:a1:34: f9:ea:08:79:8c:3c:0f:19:b2:f7:c9:e9:3e:9a:f9: 60:35:74:b6:8c:ea:a5:7b:42:c3:2d:e3:e5:75:65: 97:b7:02:8a:62:7a:f1:72:54:ac:63:90:9b:9d:58: 63:16:44:4f:d0:d5:d0:d3:47:4f:a1:cc:df:71:cf: 6b:0c:92:8f:32:02:97:ff:76:d9:b1:ed:fc:86:3c: ba:4b:ba:0b:8b:dd:b8:57:29:8f:e2:7d:db:18:a8: f0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1C:16:69:4D:B1:49:4E:65:C3:C9:A9:28:66:CA:EF:E9:73:0F:02 X509v3 Authority Key Identifier: keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:cf:bd:21:a5:86:35:a6:a6:4b:66:36:0a:53:29:79:00:76: c3:46:6f:31:51:6f:41:a2:60:33:62:cc:2c:2a:6a:5b:1b:fc: c4:1d:00:9c:51:f4:47:98:81:3e:e3:5c:38:93:03:9a:39:1a: f5:3e:6d:6b:aa:54:74:c6:74:db:cf:50:81:7a:72:8b:81:57: 2a:1d:b0:0e:18:e5:9f:f1:54:55:56:fc:3a:f6:31:cf:b4:c1: 85:56:e6:25:6e:17:49:26:c7:cf:b4:a6:e5:65:4c:f7:5c:be: 41:ad:78:4a:8c:49:7f:2b:96:a4:d5:69:8a:13:d8:14:87:02: 1b:d5:79:19:17:af:0a:af:64:d7:e2:a8:71:00:b2:00:88:bd: 9c:17:c5:f6:65:6a:23:51:77:85:e4:6a:d4:79:6a:7b:bc:25: df:4b:90:fd:17:e9:3e:aa:17:a2:43:21:31:88:75:05:d7:f7: 4a:9d:09:db:51:28:66:58:03:6a:3c:09:b1:d0:26:8d:b3:2a: 84:77:61:c1:81:47:81:c0:14:75:9a:2a:e5:a7:8a:06:ad:6e: be:e9:c3:10:5f:9d:ed:5e:5b:58:ed:07:6b:f9:c1:a5:7a:75: 60:d5:8b:2b:0a:d5:bd:76:be:21:2c:3e:02:b3:db:f8:43:21: 86:02:9c:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd/6U3XTLFjwYZ6LFX2pe98MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MzliN2ExMjM0MTdhYTcxOTMyNTk0NmFhODllMGYzMGFi MGNhMDkwHhcNMjUwNjE3MjIwMTI1WhcNMjUwNjE4MjIwMTI1WjAzMTEwLwYDVQQD Eyg4NjFjMTY2OTRkYjE0OTRlNjVjM2M5YTkyODY2Y2FlZmU5NzMwZjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyiKrcZIUcLB5gS9s70/C04ay8MB u6xoSnTv6+uF6mGGxT7SkH6Ij6UnTflJuc6dvSLCIrTnOEIu0QM5FdCqwncQpu1d a3OgoLzTYgRN5e2BoULZMctYhGEmTvm5gYaLpnzoH2xJKJkkr0nNc+//cGf0to6A LE1F+rO2muwZZHr9RbC2qEYUjf6ShetgkANnivV5Ugclr5XlEVDzuLeJ16SpoTT5 6gh5jDwPGbL3yek+mvlgNXS2jOqle0LDLePldWWXtwKKYnrxclSsY5CbnVhjFkRP 0NXQ00dPoczfcc9rDJKPMgKX/3bZse38hjy6S7oLi924VymP4n3bGKjwcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYcFmlNsUlOZcPJqShmyu/pcw8CMB8GA1UdIwQY MBaAFHU5t6EjQXqnGTJZRqqJ4PMKsMoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjct NWI1ZTMzY2U3MGFkLzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjctNWI1ZTMzY2U3MGFk LzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAks+9IaWG NaamS2Y2ClMpeQB2w0ZvMVFvQaJgM2LMLCpqWxv8xB0AnFH0R5iBPuNcOJMDmjka 9T5ta6pUdMZ0289QgXpyi4FXKh2wDhjln/FUVVb8OvYxz7TBhVbmJW4XSSbHz7Sm 5WVM91y+Qa14SoxJfyuWpNVpihPYFIcCG9V5GRevCq9k1+KocQCyAIi9nBfF9mVq I1F3heRq1Hlqe7wl30uQ/RfpPqoXokMhMYh1Bdf3Sp0J21EoZlgDajwJsdAmjbMq hHdhwYFHgcAUdZoq5aeKBq1uvunDEF+d7V5bWO0Ha/nBpXp1YNWLKwrVvXa+ISw+ ArPb+EMhhgKc2w== -----END CERTIFICATE-----Generated at Wed Jun 18 06:54:01 2025 by rpki-client