$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft File: nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft (raw, json) Hash identifier: 4fBZofR/ttVz20y14iu+q6v5poMrKjA0XhvSzgr8oew= Subject key identifier: 5C:F4:00:97:93:EB:34:DB:FA:B5:BA:13:2A:67:C9:0D:12:7A:8A:A2 Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Certificate serial: 01976997A869A700FA6774E3772BDE97285C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft Manifest number: 1591 Signing time: Fri 13 Jun 2025 14:00:36 +0000 Manifest this update: Fri 13 Jun 2025 14:00:36 +0000 Manifest next update: Sat 14 Jun 2025 14:00:36 +0000 Files and hashes: 1: 3vl8XIfuhRt73vGy6IwhrWPuLQI.roa (hash: q3Fh75KrQyoQfVHvtuNwmD855fGW6oB7xId9MSHUyb4=) 2: 6wuhUyQ6B8hcKFtpQPLF4a8xiLM.roa (hash: PVP/CIAq5vbBthYH2NgEEDe22Dw5jd7urf5cJiuVvXo=) 3: 9NNSEhajneEgbt66V0EkEE6XolA.roa (hash: xTgVQs+MsZfir4Ub3DiVbK1ClBqkcXuh9whyhrkEvAM=) 4: BzRg7cqbGCxPjaoZhAl0Moquf1Y.roa (hash: 6kEaZouendLfYXdknvUfHV20sm02LURoxyHpm7Wn7AY=) 5: G-7uTcKf4R76KSJdYf98itHFuPU.roa (hash: uB9gNVUlSjqGsS16y0z5ke/O0agEGAvuljoiA6PJrUM=) 6: QgQPTUqWSoJLC8pH1ZTpV9J6Spg.roa (hash: roAeP2l3vRUpAFpkZSsf9wX3WRLL0BI8ikMQ5kYqDxQ=) 7: ftQQpBrk0ZFia4n99q7-wX-5E0M.roa (hash: U0GhDpZiZ5saXJRfz3p+tKxwcbveFdHD/WbcCpSo+CQ=) 8: mUKuky3l-ZY5p-RPO9s2pPEyk78.roa (hash: ti7kzq8iHsvI0iGcqQO/PpqkoDoJf7orqrrfuhBfEKg=) 9: nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl (hash: +SYx/tfVouUBBwTKaWb+UeBvef/1glIsW4rqJqXhZHs=) 10: pp90XH9ku5igKr_7gjm59WVXVs4.roa (hash: bfssuNaaIGlZ7LKFXdiYHHy+DIw/jcyEOsfVzSQEBMQ=) 11: qFB-AfrzECXh6GN5dVSZvb0x6SI.roa (hash: GzIs503Dc0bsL2WCHQKf2MOheJQNWlvUYNrT8tj73vc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 13:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:69:97:a8:69:a7:00:fa:67:74:e3:77:2b:de:97:28:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Validity Not Before: Jun 13 14:00:36 2025 GMT Not After : Jun 14 14:00:36 2025 GMT Subject: CN=5cf4009793eb34dbfab5ba132a67c90d127a8aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:81:e0:29:4d:38:bf:15:56:fa:61:8a:e9:42: e7:52:b2:3a:c3:46:dc:f9:ca:44:5d:ce:24:49:38: cc:41:ef:92:fb:b8:cc:51:df:fc:78:76:b9:ba:ff: 65:ef:9e:46:73:9b:db:30:6e:8d:67:78:d3:dd:76: 69:7a:c0:c5:bb:e0:9f:0c:f4:39:e2:f2:ea:03:c0: 62:86:8e:71:3b:1c:11:34:bf:e8:f6:60:ae:40:22: c0:a2:75:86:21:b1:f2:28:01:60:a7:a7:93:36:07: f9:50:59:cc:fe:89:8e:9d:7a:bf:2a:25:bb:b2:2c: 02:4b:84:a5:21:e1:a6:3e:32:ed:25:77:38:68:04: 75:ca:f0:34:14:6e:6e:b6:71:37:d9:35:0f:76:7a: d7:bd:0a:ea:7b:16:8c:9a:15:6d:96:39:8d:7c:6c: c8:80:58:e3:c5:dc:13:91:76:b8:7e:e7:d2:88:23: bd:85:c8:20:21:f4:d4:7a:c2:d4:7c:00:46:e8:b3: 43:87:a9:04:6e:cc:8d:0f:a2:f1:b1:d2:65:c6:d1: cf:c7:dd:da:52:0c:31:41:ad:67:62:7f:fc:83:33: d5:24:90:d5:77:cd:5f:44:a4:fe:27:bf:5e:82:41: dd:4d:fa:62:de:f4:11:f2:78:b2:27:0e:fc:cb:72: ed:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F4:00:97:93:EB:34:DB:FA:B5:BA:13:2A:67:C9:0D:12:7A:8A:A2 X509v3 Authority Key Identifier: keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:2a:bf:15:38:ec:3b:be:a7:d8:fb:42:c2:68:9d:97:b0:b5: 9f:6f:b3:56:89:11:10:db:90:65:31:fe:09:f2:24:db:21:5c: 5c:65:63:22:7b:fa:e5:f6:19:80:9d:20:6c:1e:84:63:e4:ac: 3c:e9:3f:fc:41:cf:c1:91:3b:b0:13:e8:d0:79:03:07:a7:08: 3a:7b:b7:9a:7b:4c:30:21:47:82:42:0a:98:42:60:e0:7f:5f: a1:51:8f:ec:8d:cc:2a:ad:3d:c6:97:fb:59:80:a4:a7:02:df: 33:20:a0:f9:78:c9:74:e4:63:e5:2d:4c:8a:33:7d:c8:b2:d1: 70:4f:66:3c:e4:59:08:8e:55:ed:e1:1c:66:e1:15:a2:e3:9d: 45:0a:82:3a:0a:7e:25:8f:d6:6d:76:f8:93:d1:76:b6:24:c1: 56:bc:1c:f5:10:fb:f5:51:3a:71:94:72:d4:ec:c0:d5:d8:4b: 3f:43:f0:e7:21:5d:f4:61:89:93:d1:b6:2b:d9:d4:76:33:09: 0e:cd:36:46:69:be:2c:90:ae:8d:51:b6:b7:c6:da:07:79:2f: 6b:dd:ab:04:41:c4:40:3a:df:35:83:94:b3:3c:aa:32:e5:ec: 8c:97:cb:06:e2:18:0c:25:c3:2c:f0:80:da:ed:4f:5b:78:92: f3:54:f4:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdpl6hppwD6Z3TjdyvelyhcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNWRlNDkwZmY4NzRlOTY4OWNlY2Y3MjZjYmI0ZTJmNTFm NmM3MzEwHhcNMjUwNjEzMTQwMDM2WhcNMjUwNjE0MTQwMDM2WjAzMTEwLwYDVQQD Eyg1Y2Y0MDA5NzkzZWIzNGRiZmFiNWJhMTMyYTY3YzkwZDEyN2E4YWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYHgKU04vxVW+mGK6ULnUrI6w0bc +cpEXc4kSTjMQe+S+7jMUd/8eHa5uv9l755Gc5vbMG6NZ3jT3XZpesDFu+CfDPQ5 4vLqA8Biho5xOxwRNL/o9mCuQCLAonWGIbHyKAFgp6eTNgf5UFnM/omOnXq/KiW7 siwCS4SlIeGmPjLtJXc4aAR1yvA0FG5utnE32TUPdnrXvQrqexaMmhVtljmNfGzI gFjjxdwTkXa4fufSiCO9hcggIfTUesLUfABG6LNDh6kEbsyND6LxsdJlxtHPx93a UgwxQa1nYn/8gzPVJJDVd81fRKT+J79egkHdTfpi3vQR8niyJw78y3LtywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFz0AJeT6zTb+rW6EypnyQ0SeoqiMB8GA1UdIwQY MBaAFJ1d5JD/h06Wic7Pcmy7Ti9R9scxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUt Y2VjMzNiYTFiZGY1LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUtY2VjMzNiYTFiZGY1 LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALCq/FTjs O76n2PtCwmidl7C1n2+zVokRENuQZTH+CfIk2yFcXGVjInv65fYZgJ0gbB6EY+Ss POk//EHPwZE7sBPo0HkDB6cIOnu3mntMMCFHgkIKmEJg4H9foVGP7I3MKq09xpf7 WYCkpwLfMyCg+XjJdORj5S1MijN9yLLRcE9mPORZCI5V7eEcZuEVouOdRQqCOgp+ JY/WbXb4k9F2tiTBVrwc9RD79VE6cZRy1OzA1dhLP0Pw5yFd9GGJk9G2K9nUdjMJ Ds02Rmm+LJCujVG2t8baB3kva92rBEHEQDrfNYOUszyqMuXsjJfLBuIYDCXDLPCA 2u1PW3iS81T0CQ== -----END CERTIFICATE-----Generated at Fri Jun 13 19:32:01 2025 by rpki-client