$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft File: 6i0QK2ESsNmouO66xLl8gZ-XxgY.mft (raw, json) Hash identifier: hX5ZgrO9LPzCzA7FZj40VsksnmBpRDkY5Ae6+oTABt4= Subject key identifier: 12:55:2C:E6:0B:B1:D6:D7:7B:CD:44:69:8E:F9:67:B1:76:21:51:E1 Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Certificate serial: 0197857CB855B551739CF76B52B9237F6313 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft Manifest number: 15A2 Signing time: Thu 19 Jun 2025 00:00:32 +0000 Manifest this update: Thu 19 Jun 2025 00:00:32 +0000 Manifest next update: Fri 20 Jun 2025 00:00:32 +0000 Files and hashes: 1: 2Jzb6w4oYzNJE4bGcrmSl7n0CO4.roa (hash: 8etDRQmlSGkqycZzchAQWOixmXQimMYOT2fju9p36fk=) 2: 425pG85CvD-WqD7G4q_XQGIKAqg.roa (hash: A277nuuzcfZvxdezgnYr9eoNlhLje+Mf+PFtPMVmfws=) 3: 6i0QK2ESsNmouO66xLl8gZ-XxgY.crl (hash: SpEnKZcyLYPPDkRm24X37kgt11GC/V7sZQnTQoraxGM=) 4: 6xhDMjLWegiTNxnVw5JYv0_kcfM.roa (hash: rSZUF0buOyvvO3wABYCztQlwFfnFNw3uLkpmp4vM9pw=) 5: 7918jeDcIeSJXbD16xxGwzri6_4.roa (hash: OQCYlsdbEYMUMcdfr++Yt7VINvKQ1QgUov/whsjb0xQ=) 6: 7dXC-hkge0H4SOrjlCk1xFHWw8U.roa (hash: Fv3L9KsADEPnVWxrZ7KT3btIpKM9bZT63ylJbPal16k=) 7: B_U0Thd2hek7c5TP5isgn3nFY38.roa (hash: oQ6pviFf5arQiDT+3KFkPtsqKciLEZWlSeEkqGt55/c=) 8: IJoxcEd7VggD3on9VNdBwQ2ai4M.roa (hash: l1C0lwy47+vk4Lvd7mWl9lGXam1kddh45sEhzv6D1cA=) 9: Li9WS8jXFR2-r4mTOoCwgP_Ts9o.roa (hash: yRVJgK21z7DKohg/kc7sh2OmWee+mkk6rOMmBxFGPjU=) 10: YJZNgRJlEy3RdWs3RjwaLO4bvJA.roa (hash: 0UFTkDt8H+rkJYm49DfFVoTWb/FfDGLtDdWOpr/Q0pQ=) 11: acU8LPcjjnuwpEGnrC28mxzfjkI.roa (hash: LwbfB5h8UeIfjkLBn8DXzcf/70aOb76OSwOezLnK2PU=) 12: cYJ91ITuYXoj33vFG-jF0Fh-ajc.roa (hash: Z/p5QOfcesLJQjsnSA/ia08r7lvPlhHAViiVlSC49cw=) 13: i-v6d3wc-sdUkH9r6qlkOFcqDf0.roa (hash: pAwH7XsKC3usAyUBQbyxSsEwXZk/zTFKfD5sKnbUUxQ=) 14: kP8WpbmlofJTdUaCmUWW68Yu-Rw.roa (hash: z9cTYSYhBDpdjPlGOiBqYli4fbEBwTaVHKlbVFfEd+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 19 Jun 2025 23:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:85:7c:b8:55:b5:51:73:9c:f7:6b:52:b9:23:7f:63:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Validity Not Before: Jun 19 00:00:32 2025 GMT Not After : Jun 20 00:00:32 2025 GMT Subject: CN=12552ce60bb1d6d77bcd44698ef967b1762151e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:58:25:e2:4e:66:ca:a6:81:2f:09:80:3d:23: 95:fd:d1:0e:73:c4:17:6a:64:aa:f2:f7:13:64:e1: 75:28:c6:9f:60:59:f3:b8:44:1b:a0:94:13:de:f7: 8f:2c:31:11:90:1b:b8:01:c6:ed:a8:2a:af:12:ab: 7e:ba:06:7a:83:63:55:cd:e2:52:47:b6:f4:45:30: 18:53:12:d9:e9:11:ea:61:1e:bf:5c:1f:7f:dc:ac: 02:5b:6b:ac:5c:50:eb:b1:38:4e:5c:c9:16:67:9e: 10:8c:51:05:1d:13:20:f8:9c:c1:14:6c:d4:db:c0: 8f:89:63:29:28:15:f0:91:80:d3:76:b9:ab:fd:ad: 95:84:11:1e:13:48:1f:2c:ba:52:7b:e3:79:53:01: ad:87:48:1a:45:f9:d2:b4:db:ca:c7:bd:94:d4:58: 63:d5:3f:27:a9:c2:9e:b3:a2:be:40:5d:a6:61:30: f1:16:1b:4d:d1:e9:82:fc:0f:be:04:96:d6:73:c4: 15:7d:1d:05:76:9c:97:d7:4e:8e:e3:6b:df:c4:48: 73:3d:d7:ed:1e:dd:58:ab:be:b0:1f:76:26:c9:2c: e5:a9:00:96:f5:38:66:2d:e8:85:8f:50:f0:20:1e: 6b:b7:8f:a7:48:2e:66:e1:37:d2:02:db:79:46:88: e3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:55:2C:E6:0B:B1:D6:D7:7B:CD:44:69:8E:F9:67:B1:76:21:51:E1 X509v3 Authority Key Identifier: keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:fa:8e:d8:0a:2e:58:a9:77:3b:51:22:74:2e:f8:1b:72:86: 24:f9:de:d1:e9:b4:bf:51:c9:f2:05:c6:a6:92:75:e6:81:ee: 5a:fa:dd:a5:20:53:f7:5d:f3:d1:7c:3c:1e:91:74:68:15:c9: 60:a8:80:17:5f:78:9d:b0:a6:7b:68:be:55:83:18:af:69:e6: dc:46:d8:e1:8b:e8:20:a1:71:d3:cf:f0:5b:68:33:0e:60:7a: 94:32:9d:73:d8:b1:7d:10:d5:2d:a7:47:5d:44:86:39:31:84: 3b:06:e7:14:a1:ae:34:a4:1d:a7:2f:e3:dc:7e:b4:ac:44:c5: 5f:70:63:30:f9:17:58:e8:12:da:46:74:a5:9f:68:79:d5:2b: 9d:ad:a4:4b:0d:b0:34:12:db:2b:d6:24:58:19:76:b4:f5:59: 47:72:b7:e0:01:54:74:5b:4f:c5:64:34:ed:64:9c:20:6e:6d: 4b:9a:f6:39:fa:2a:6a:9e:12:7e:ff:da:bf:bc:61:79:58:ae: dd:4c:c6:ac:da:a4:50:b2:c5:03:35:0f:ca:25:f0:90:c3:93: 60:c3:53:27:6f:c0:a6:aa:68:00:9e:a1:b4:d3:46:92:76:2a: ff:44:09:bd:26:9b:68:25:e9:c2:f6:ae:d6:d5:5f:51:91:4a: 80:53:6f:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZeFfLhVtVFznPdrUrkjf2MTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMmQxMDJiNjExMmIwZDlhOGI4ZWViYWM0Yjk3YzgxOWY5 N2M2MDYwHhcNMjUwNjE5MDAwMDMyWhcNMjUwNjIwMDAwMDMyWjAzMTEwLwYDVQQD EygxMjU1MmNlNjBiYjFkNmQ3N2JjZDQ0Njk4ZWY5NjdiMTc2MjE1MWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1gl4k5myqaBLwmAPSOV/dEOc8QX amSq8vcTZOF1KMafYFnzuEQboJQT3vePLDERkBu4AcbtqCqvEqt+ugZ6g2NVzeJS R7b0RTAYUxLZ6RHqYR6/XB9/3KwCW2usXFDrsThOXMkWZ54QjFEFHRMg+JzBFGzU 28CPiWMpKBXwkYDTdrmr/a2VhBEeE0gfLLpSe+N5UwGth0gaRfnStNvKx72U1Fhj 1T8nqcKes6K+QF2mYTDxFhtN0emC/A++BJbWc8QVfR0FdpyX106O42vfxEhzPdft Ht1Yq76wH3YmySzlqQCW9ThmLeiFj1DwIB5rt4+nSC5m4TfSAtt5RojjVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJVLOYLsdbXe81EaY75Z7F2IVHhMB8GA1UdIwQY MBaAFOotECthErDZqLjuusS5fIGfl8YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEt YjgyOWNjNDAxMDMxLzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEtYjgyOWNjNDAxMDMx LzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvqO2Aou WKl3O1EidC74G3KGJPne0em0v1HJ8gXGppJ15oHuWvrdpSBT913z0Xw8HpF0aBXJ YKiAF194nbCme2i+VYMYr2nm3EbY4YvoIKFx08/wW2gzDmB6lDKdc9ixfRDVLadH XUSGOTGEOwbnFKGuNKQdpy/j3H60rETFX3BjMPkXWOgS2kZ0pZ9oedUrna2kSw2w NBLbK9YkWBl2tPVZR3K34AFUdFtPxWQ07WScIG5tS5r2Ofoqap4Sfv/av7xheViu 3UzGrNqkULLFAzUPyiXwkMOTYMNTJ2/ApqpoAJ6htNNGknYq/0QJvSabaCXpwvau 1tVfUZFKgFNvxA== -----END CERTIFICATE-----Generated at Thu Jun 19 04:36:04 2025 by rpki-client