$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft File: pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft (raw, json) Hash identifier: P0kwMEa1g2VzLqxKju1YE3hH2d4vx7GxZENI6xZMj/U= Subject key identifier: 2F:69:91:E2:DC:FB:A9:20:EA:FD:D0:D0:77:D6:0A:6A:C1:F6:44:01 Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Certificate serial: 019788B507FE77BF31ED60145574ECFFF3FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft Manifest number: 15A1 Signing time: Thu 19 Jun 2025 15:00:54 +0000 Manifest this update: Thu 19 Jun 2025 15:00:54 +0000 Manifest next update: Fri 20 Jun 2025 15:00:54 +0000 Files and hashes: 1: 2HkBnlanOdUzmWf9Hl_U6GG-UuE.roa (hash: 1Wufa6HiHvWpFQaG3Xl8fTsSYIf48lD7RqqgQlltU14=) 2: 5WrJ_uE8kyfBBg-3rwJlJ6xmp_8.roa (hash: akdPzsnTgH7KtcZBNqPU1osdDy68HWzdp9bPm2mowoQ=) 3: BNK50FDIwLul7LRBqtaICEr9khw.roa (hash: ShN2ExZBctzcXHciSMYpuLHy7sMW4gajHqdp4SmGKwY=) 4: Igsn8_GzxEpyZvyNiTStn1VsWkE.roa (hash: cE10F5ee4Fxy6sxZfixjPiEnOAJr26pMrzQhtmiwXq0=) 5: KkXUwS_4I3ayhd69cP94FHMIKt8.roa (hash: LxyBIOit8HMNZzSJZEvDwuJO4yhxg3p4QU3YOVadKu8=) 6: NkCEdq2ndobm6VmDQa-IZfuAZDY.roa (hash: qOcbuXOI6PfGqV0fypc3sx8Dz5dzMIOt/A/FbNV5s0s=) 7: VO04moXAuIXDmP-FmAZqJ4sbq3E.roa (hash: 1XK9VHT2ZgrrEZxAyHMR/9/4dzcq7U5D/O87NBOUp3A=) 8: YUWzsfvcGYX0_uMBwsz_UtSEvoQ.roa (hash: I2+ZceVVB5u+gR2ocAD4lll8BHqWUKoQ7I2fsyabCm4=) 9: cPX1rLru3EhLpPPW1MnKD3WDdJU.roa (hash: FlPB3PisSixKS60KrufI9cZqpGdplL3+VEjQPrfxXDw=) 10: dP7R-pLAHJv2fxQ8stLMnaNCaIU.roa (hash: ttCIQ6x9upS1QYi3S99yjmOdJpA4nSRRgEVZ9+6A5jo=) 11: gMOwF2mtPRPPpZ-NEq9tmTPMYvM.roa (hash: 9I06ya03N63sQNTiVWhF2hYWAac083jSJyEUOO+Wtd8=) 12: kC3rNl_UHdn-CNb6aCHsLrxS98Q.roa (hash: 1HQePVd4oj57DlYrJg866ZwBO3ttz1hacWXVoenAvOE=) 13: nf8wv6xh5ICDlagRQQtQeDyX7AI.roa (hash: IeriVdC3WPiFlh9qajSZSa5F78gurX6jx9EVck9sDTQ=) 14: pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl (hash: wm5wlpgYl3OIhKgP4hYtio5nucC50gAsqLvt3hvGh7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Jun 2025 10:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:88:b5:07:fe:77:bf:31:ed:60:14:55:74:ec:ff:f3:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Validity Not Before: Jun 19 15:00:54 2025 GMT Not After : Jun 20 15:00:54 2025 GMT Subject: CN=2f6991e2dcfba920eafdd0d077d60a6ac1f64401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7d:21:9d:0d:b4:07:61:7a:ba:a3:2f:49:27: 68:07:fa:e6:f9:32:73:b6:73:b9:cf:a8:d9:69:39: 40:f6:1f:6c:8e:cb:93:be:7b:76:fc:f1:6c:47:7b: db:18:e7:56:b0:eb:3c:bb:c9:4c:cb:88:e8:26:f5: 59:64:34:6e:27:1f:0b:21:91:b9:9e:04:e4:c6:5b: 09:e1:01:ea:2e:4f:51:f8:8d:e7:8a:b9:ea:ae:60: 82:6b:1f:09:a1:cc:10:cb:43:e1:4e:cc:fc:16:0a: 0c:c7:d4:f2:7e:27:20:ba:f5:13:9d:65:1a:ff:06: 05:ce:e6:d1:c8:61:a3:b2:64:25:4e:66:22:f0:a3: b9:d0:f0:fc:8d:14:67:4e:8d:1e:fe:83:72:d0:8a: a4:76:99:23:11:02:4d:d4:ec:60:a7:ba:81:38:73: a1:01:d1:dd:56:d6:6e:75:c2:a1:b1:9f:c1:9b:bb: 2f:a3:44:5f:9c:c3:46:83:28:06:db:24:8b:52:c0: 82:f0:7f:22:f9:a6:e4:44:4f:27:99:8f:6b:cb:4c: 57:c9:d0:0b:29:71:f1:0a:7b:25:9e:ee:fe:89:86: c1:de:40:92:12:48:f6:fa:6c:2a:37:02:1a:1e:0d: b7:51:6c:11:a1:49:2a:4a:1e:05:ad:4b:22:0c:b2: 86:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:69:91:E2:DC:FB:A9:20:EA:FD:D0:D0:77:D6:0A:6A:C1:F6:44:01 X509v3 Authority Key Identifier: keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:64:40:1d:e2:8f:33:99:8a:8e:37:37:b0:18:dd:c2:1a:77: 31:b0:90:e5:93:e9:33:bc:3e:d2:d9:87:fc:a8:b1:61:3e:76: cc:6c:3c:c2:b1:97:55:71:6c:5e:c8:6c:c9:ff:f0:d4:ca:4b: 33:85:17:c5:a9:f1:cb:fe:79:cc:c3:74:dc:8c:15:44:10:93: a8:1d:2a:3d:0c:cb:3b:7f:d5:db:78:42:29:0d:fd:51:66:19: 1e:71:bb:e8:ab:93:7d:72:e7:75:99:e5:90:08:0c:64:63:21: 4b:dc:07:e8:b3:47:3e:1e:eb:0b:fe:d6:dd:f7:29:b9:b4:9a: 85:51:e9:05:b3:a8:d8:71:9e:f7:df:af:86:6e:e2:f4:e9:de: 69:56:08:da:00:91:d8:8b:1f:05:7b:42:d6:f7:d9:3f:c2:21: 5a:75:a0:0d:04:0b:e6:62:84:97:12:b7:27:55:53:9e:b9:a7: e0:67:8e:67:8a:39:4b:77:83:86:fb:15:2e:92:47:f9:a5:54: d1:68:e9:32:09:78:fc:ce:cb:2f:f6:09:e9:01:3e:09:37:de: 10:4a:c0:d4:64:e5:98:4e:ec:82:57:67:92:1b:b7:fe:dd:66: 74:64:49:0e:3b:eb:16:8c:82:60:6c:98:16:9b:80:9f:61:8d: 05:4c:24:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZeItQf+d78x7WAUVXTs//P9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YmNjMTJhZmE0ZjA1NzM5ZjQ1ZjYwNWUyMjFjNjRjM2Mw ZDJlZDYwHhcNMjUwNjE5MTUwMDU0WhcNMjUwNjIwMTUwMDU0WjAzMTEwLwYDVQQD EygyZjY5OTFlMmRjZmJhOTIwZWFmZGQwZDA3N2Q2MGE2YWMxZjY0NDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq30hnQ20B2F6uqMvSSdoB/rm+TJz tnO5z6jZaTlA9h9sjsuTvnt2/PFsR3vbGOdWsOs8u8lMy4joJvVZZDRuJx8LIZG5 ngTkxlsJ4QHqLk9R+I3nirnqrmCCax8JocwQy0PhTsz8FgoMx9TyficguvUTnWUa /wYFzubRyGGjsmQlTmYi8KO50PD8jRRnTo0e/oNy0IqkdpkjEQJN1Oxgp7qBOHOh AdHdVtZudcKhsZ/Bm7svo0RfnMNGgygG2ySLUsCC8H8i+abkRE8nmY9ry0xXydAL KXHxCnslnu7+iYbB3kCSEkj2+mwqNwIaHg23UWwRoUkqSh4FrUsiDLKGaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9pkeLc+6kg6v3Q0HfWCmrB9kQBMB8GA1UdIwQY MBaAFKS8wSr6TwVzn0X2BeIhxkw8DS7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2Mt ODhiMDE2YmJkNTgxLzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2MtODhiMDE2YmJkNTgx LzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2RAHeKP M5mKjjc3sBjdwhp3MbCQ5ZPpM7w+0tmH/KixYT52zGw8wrGXVXFsXshsyf/w1MpL M4UXxanxy/55zMN03IwVRBCTqB0qPQzLO3/V23hCKQ39UWYZHnG76KuTfXLndZnl kAgMZGMhS9wH6LNHPh7rC/7W3fcpubSahVHpBbOo2HGe99+vhm7i9OneaVYI2gCR 2IsfBXtC1vfZP8IhWnWgDQQL5mKElxK3J1VTnrmn4GeOZ4o5S3eDhvsVLpJH+aVU 0WjpMgl4/M7LL/YJ6QE+CTfeEErA1GTlmE7sgldnkhu3/t1mdGRJDjvrFoyCYGyY FpuAn2GNBUwkZg== -----END CERTIFICATE-----Generated at Thu Jun 19 17:46:51 2025 by rpki-client