$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft File: C1Vqy187lhtcwkoplfNO6R953BY.mft (raw, json) Hash identifier: PZkpfEVXqxtjk0MM+J4/sH5cajiLm5ZT3C9LVr2/0k8= Subject key identifier: B9:0D:63:E6:34:94:09:AB:68:6C:18:5A:AF:72:FB:1E:0D:95:46:9A Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Certificate serial: 0197854638EC65A9532A17CED533A4DC9AA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft Manifest number: 15BA Signing time: Wed 18 Jun 2025 23:01:01 +0000 Manifest this update: Wed 18 Jun 2025 23:01:01 +0000 Manifest next update: Thu 19 Jun 2025 23:01:01 +0000 Files and hashes: 1: 1-Ss8y57Ehk6R15I50N_Ja4NuZFg.roa (hash: E3Xe56Uq6qf9xoMjHrb8Tp1z8LD2YFv8nmr/lvS0Ysc=) 2: 7AEnLXSB1YaAfgMGKA-kT_KobA0.roa (hash: 5AKbmZJGLK7UnAttUygeGitl8Ob/t23TtR2u6flJg/c=) 3: C1Vqy187lhtcwkoplfNO6R953BY.crl (hash: wWJgAQEeun6FlTwxM+1Q33nTZ+4momMpdBykPoJn/jo=) 4: QmJcakWH1CARNak1a46tlM2ytyE.roa (hash: v8cGIzbtBdgrBgCJGkJKF+awirm33gkAmHePtYlNHWc=) 5: Ufuhf0_wn9lleED4LQKhcdXKZLY.roa (hash: f4Ng8ktmuEshcdJiOHZjPJAwq7/nitwlptaYvO0/DHU=) 6: XFCPjaaIP04nEp4Rlitk1zUJ8nA.roa (hash: 9Hrw22EfwJiPVEvx9iOeq1/U32N9ujjXKgQDN7kPNnY=) 7: bzDr7kn2LfhqjYsoZQLZ-uHwvQI.roa (hash: ETCcL6Lmgpdi6iyG4gf+W9Umfg+Mzqif1q2dVBD62g4=) 8: e38Kg8iCKqOVcGx8ZyJTu1IrTwc.roa (hash: yWG15kNG/dsh9zB22D/eO5GMJKGaRyWMaUm0mhvs7uI=) 9: irmafOolxajIUAAu4T-WCDDYGuE.roa (hash: B2dN9t4bHqneaqFXcxWnKXREXDW4ZcJ7+Z7DVVfobpU=) 10: n7XNxY-sa2O-8oAFuyK34I07FxU.roa (hash: 7HgkBdxidw6ZJ5Ks5cBFOnu0xmnIR/zyHKV2JfMTPLM=) 11: nikI6XTmNMIUEKKUIOhaKpaRfTY.roa (hash: 3OTWr1t7MNgVLjxLDAQClENVYG0IMxrFr2dhuyh8iLU=) 12: pkcx_-V9HNVC8HzviAJSCvzoxJg.roa (hash: V4tEVQoUWw/5eT8C/Z8qztjVCTQ8kgfSRy2bETB0V2w=) 13: wq6Oybyru5PjGYeKDTrdRRIxOok.roa (hash: +NxS5vTeW/Lv7n0fJHcbikUT3d8Gb7EPQOKgAIeQnGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 19 Jun 2025 16:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:85:46:38:ec:65:a9:53:2a:17:ce:d5:33:a4:dc:9a:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Validity Not Before: Jun 18 23:01:01 2025 GMT Not After : Jun 19 23:01:01 2025 GMT Subject: CN=b90d63e6349409ab686c185aaf72fb1e0d95469a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:af:95:f4:3d:77:ff:4f:24:18:36:09:cf:40: 72:b6:ef:36:6b:8e:17:91:f5:35:bc:f5:1e:2b:29: b4:8c:b3:e4:5d:00:5d:60:f1:ce:c8:bf:05:46:2b: 79:3f:f4:0f:a2:43:7c:b1:5d:7e:fd:7a:1f:d8:23: 6e:c3:9d:63:14:e5:87:28:2e:84:96:a8:4e:60:e8: a8:25:a7:db:29:7b:cd:c5:f6:83:d1:ec:7a:ba:23: 3a:e0:42:09:08:ac:93:e5:66:d1:77:8f:9e:de:61: 1a:b2:1b:2f:1b:d3:e7:ac:48:f6:2f:32:b0:db:74: 8d:bd:be:4e:36:84:f3:39:ff:17:cf:0f:d7:aa:87: 2e:e0:6b:85:83:b1:24:65:92:58:07:bb:2d:4e:90: 00:d9:1a:ae:50:f3:12:e7:a7:1d:31:cf:c8:5c:3a: f5:d2:12:de:df:14:f2:68:60:e6:22:83:60:7e:82: 81:2a:2a:4a:08:54:b4:11:b0:9d:f4:72:ba:66:2b: 3e:14:69:1c:03:52:05:cd:51:d0:25:77:1d:49:3a: e2:42:72:d6:d9:59:f9:83:96:59:9f:a8:cb:14:f5: fb:56:2e:16:d6:c0:25:e9:15:3b:b3:c9:b3:d1:fa: e3:dd:f7:90:fd:68:d9:7c:73:aa:bc:f2:f0:93:72: 82:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0D:63:E6:34:94:09:AB:68:6C:18:5A:AF:72:FB:1E:0D:95:46:9A X509v3 Authority Key Identifier: keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:1c:3a:ad:38:9a:e3:06:94:7d:6c:23:ae:f4:f7:58:73:a9: 36:a4:b1:df:ec:34:e1:71:51:4e:23:8e:2f:11:f7:79:a7:b1: 11:5d:ef:6b:79:84:98:6a:3b:7e:41:5d:4f:35:45:38:ce:a9: 23:5e:83:0c:f9:b2:95:5f:99:3e:1e:70:0f:f0:a2:40:3b:10: 34:01:ab:4e:0e:6a:5b:4d:6e:b8:f6:2f:2f:d7:27:79:11:42: 26:f4:d0:9a:20:98:ae:8b:84:2a:e5:2a:c6:ed:b8:ad:34:ef: 9a:fa:a3:2d:b9:19:f9:e5:32:35:88:a7:25:ed:9a:71:79:e1: 36:0a:26:99:4d:8d:ac:8e:ed:0a:91:e7:6c:cc:0a:25:56:08: 97:33:13:3f:7f:84:d3:4d:4a:5b:4e:6a:b7:2c:5c:79:d8:7a: 97:cb:47:37:10:44:76:ac:1a:90:f3:e8:03:73:32:39:ba:dd: 9b:7e:9a:20:f8:94:32:d1:d3:80:02:88:2f:10:d1:3d:04:ef: 13:bc:70:75:cb:f1:70:87:1e:8d:75:4d:01:aa:ee:90:08:28: 2d:26:8b:5d:34:96:4e:ce:13:21:d3:f5:38:62:b4:f9:d2:20: 49:3b:fb:b2:34:53:20:8b:20:db:47:98:64:ac:5b:97:43:ae: ba:4e:8c:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZeFRjjsZalTKhfO1TOk3JqpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNTU2YWNiNWYzYjk2MWI1Y2MyNGEyOTk1ZjM0ZWU5MWY3 OWRjMTYwHhcNMjUwNjE4MjMwMTAxWhcNMjUwNjE5MjMwMTAxWjAzMTEwLwYDVQQD EyhiOTBkNjNlNjM0OTQwOWFiNjg2YzE4NWFhZjcyZmIxZTBkOTU0NjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2a+V9D13/08kGDYJz0Bytu82a44X kfU1vPUeKym0jLPkXQBdYPHOyL8FRit5P/QPokN8sV1+/Xof2CNuw51jFOWHKC6E lqhOYOioJafbKXvNxfaD0ex6uiM64EIJCKyT5WbRd4+e3mEashsvG9PnrEj2LzKw 23SNvb5ONoTzOf8Xzw/Xqocu4GuFg7EkZZJYB7stTpAA2RquUPMS56cdMc/IXDr1 0hLe3xTyaGDmIoNgfoKBKipKCFS0EbCd9HK6Zis+FGkcA1IFzVHQJXcdSTriQnLW 2Vn5g5ZZn6jLFPX7Vi4W1sAl6RU7s8mz0frj3feQ/WjZfHOqvPLwk3KC9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkNY+Y0lAmraGwYWq9y+x4NlUaaMB8GA1UdIwQY MBaAFAtVastfO5YbXMJKKZXzTukfedwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEt ZDJiYmYzN2RhYmI0LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEtZDJiYmYzN2RhYmI0 LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchw6rTia 4waUfWwjrvT3WHOpNqSx3+w04XFRTiOOLxH3eaexEV3va3mEmGo7fkFdTzVFOM6p I16DDPmylV+ZPh5wD/CiQDsQNAGrTg5qW01uuPYvL9cneRFCJvTQmiCYrouEKuUq xu24rTTvmvqjLbkZ+eUyNYinJe2acXnhNgommU2NrI7tCpHnbMwKJVYIlzMTP3+E 001KW05qtyxcedh6l8tHNxBEdqwakPPoA3MyObrdm36aIPiUMtHTgAKILxDRPQTv E7xwdcvxcIcejXVNAarukAgoLSaLXTSWTs4TIdP1OGK0+dIgSTv7sjRTIIsg20eY ZKxbl0Ouuk6MyQ== -----END CERTIFICATE-----Generated at Thu Jun 19 01:55:31 2025 by rpki-client