$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft File: S0BcqrNLv95rjuZsYAhgxs6W8ys.mft (raw, json) Hash identifier: Fb/Hy72isHi0UI9/IsFwLUqQmNmhZRRzwFgpMxWjsKE= Subject key identifier: 0D:A6:D4:71:C0:39:94:D9:1E:53:A5:50:37:5E:C2:0A:6A:15:8E:68 Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b Certificate serial: 019788EB7CF68DC08628379BE1A798CB289E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft Manifest number: 15A4 Signing time: Thu 19 Jun 2025 16:00:23 +0000 Manifest this update: Thu 19 Jun 2025 16:00:23 +0000 Manifest next update: Fri 20 Jun 2025 16:00:23 +0000 Files and hashes: 1: 11HD7yYKcpDp91MDnZ2qx4f7DA4.roa (hash: I82O47jamEqwRmGn3/G2hhZ8d3EhBnYIg9JLsYyDdcE=) 2: EVFSBas9Aq_MdNVwUd8bGuaA3Ws.roa (hash: BhtgRPsHAejHOiiDvH3HRPbC4SYTxdKvHTv4FGSpdUs=) 3: EwIzZdJ1IhMaFw8VKQftgylzjgE.roa (hash: TssNiQ/Zpv1pzvYDHFFLNu5wfEVQ4u0fKOIDHY91aqk=) 4: LVgdGGp1BXM3wqsV9OwWixTAngw.roa (hash: yASeozzYpGQSF5fg0wPLHaGxwKLjvcatKKCkqykA4I8=) 5: MJIbLhSmNC8a874fA2nbq57HEtg.roa (hash: WaRYM9CvEVYhUP+ZoiflR5McAGOB5Og+0p9cf3/LEak=) 6: P1A1BXCqCADzQosrk4MwUKPYxTk.roa (hash: LXH4t2ODNhUtfiB03lL7Y51z/AGbNaW0Y11NO+KNqsc=) 7: QHWMs-MZjDSwChSISEL6Gl0q8mw.roa (hash: MTwg/6CPgLRHHoER9F5LK/UDna9Vp7Lok94EKexAIUI=) 8: S0BcqrNLv95rjuZsYAhgxs6W8ys.crl (hash: 8fDPc47reKZIUFciYAYIsTHzF19+jAVWWxd/ixL+P1g=) 9: Xdvj43KnSMHPF5yK-nfEWq4KZoY.roa (hash: 0KUoHz1/LcxNxADlsv04gqLb680zAS0Z8MaiKDomgYY=) 10: foffFzsX_C0XZVackxzc9TT3Ql0.roa (hash: v5tw1DCZvp0dZORs+mozhjde3hmTpwW0Pvc0v2NmjrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Jun 2025 10:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:88:eb:7c:f6:8d:c0:86:28:37:9b:e1:a7:98:cb:28:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b Validity Not Before: Jun 19 16:00:23 2025 GMT Not After : Jun 20 16:00:23 2025 GMT Subject: CN=0da6d471c03994d91e53a550375ec20a6a158e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:84:81:d8:cd:ce:d8:74:fa:a2:0d:f3:ee:3d: d6:e7:58:fd:d6:25:fa:59:b0:d7:b9:8d:90:28:8e: 22:45:73:e0:2f:08:86:06:97:e0:a0:89:ac:fc:e8: a2:8c:34:f1:83:56:da:41:b7:5b:80:77:45:04:d8: b2:6b:a0:a8:13:f5:22:5f:84:12:3e:94:d4:39:46: 35:2c:4b:c0:3b:c9:59:87:e4:6e:f3:dc:9e:5f:3b: f6:6b:dc:fd:ea:4a:19:c8:4f:20:94:57:c3:67:5f: 8e:65:5a:10:5b:04:8a:88:7c:7d:3b:db:30:c1:08: 75:47:6a:e5:2f:38:2d:3b:ba:3c:83:49:0c:65:a9: 29:0e:6e:c3:1e:6b:d2:c6:6c:d7:3f:92:7f:c7:6b: 33:3e:cd:7f:fb:b1:39:b9:27:73:85:fa:60:0c:57: 41:f3:a1:92:6c:46:e3:85:78:aa:c1:03:76:e7:c7: 64:1e:77:83:48:ef:37:fa:7e:fe:77:6c:c6:f1:a2: a0:e7:95:f5:dd:15:59:2d:61:2d:97:65:5c:65:65: 1e:2a:4c:bb:eb:26:da:7c:13:d7:9d:71:80:40:f3: b5:28:f0:bf:f4:49:58:82:4f:20:a1:96:c2:ce:52: 37:13:ad:4a:8f:0c:dd:26:92:30:49:5d:cb:16:45: 11:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A6:D4:71:C0:39:94:D9:1E:53:A5:50:37:5E:C2:0A:6A:15:8E:68 X509v3 Authority Key Identifier: keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:75:95:d7:25:54:e4:25:4c:bd:56:20:02:bb:9a:be:cc:5a: ef:66:75:d5:6c:b4:8c:6e:8a:36:14:38:2a:4c:ff:8a:6e:9f: dc:88:5b:bf:45:f2:b9:67:4d:46:aa:f2:be:b4:18:ec:42:c7: 1c:c1:33:25:d9:f3:8c:aa:e9:80:d1:e9:39:71:59:ea:d4:bf: 0c:02:d0:ea:34:3b:d5:fc:f7:16:7b:01:69:3f:cd:81:f3:fc: 82:00:5b:f4:29:81:34:a2:a0:f4:6b:0b:d8:75:34:54:8e:e8: b3:3e:5e:48:50:42:98:99:e0:73:f3:3a:94:d3:0b:86:4f:42: 93:f9:0f:1c:51:d9:83:a5:ec:29:ae:bb:30:2b:ee:e5:52:7e: 9c:48:be:ad:de:6f:97:2b:8e:f1:78:f2:44:db:89:d7:40:80: 5b:d6:63:5e:c2:d4:67:5e:46:5a:ee:d6:b2:09:ae:3c:85:78: e5:d3:0a:0f:b8:21:f7:d9:e9:30:c4:2a:68:07:99:96:16:d4: 3c:e2:ac:9a:91:5e:c6:01:51:18:13:e2:ec:2e:b8:38:b0:6b: 9d:f4:c6:4b:45:7e:06:dd:16:cb:9e:7f:be:73:2a:1c:18:08: 38:20:89:1a:91:bc:63:6c:48:b9:14:ed:50:75:e2:41:8a:85: 87:ae:91:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZeI63z2jcCGKDeb4aeYyyieMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNDA1Y2FhYjM0YmJmZGU2YjhlZTY2YzYwMDg2MGM2Y2U5 NmYzMmIwHhcNMjUwNjE5MTYwMDIzWhcNMjUwNjIwMTYwMDIzWjAzMTEwLwYDVQQD EygwZGE2ZDQ3MWMwMzk5NGQ5MWU1M2E1NTAzNzVlYzIwYTZhMTU4ZTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnISB2M3O2HT6og3z7j3W51j91iX6 WbDXuY2QKI4iRXPgLwiGBpfgoIms/OiijDTxg1baQbdbgHdFBNiya6CoE/UiX4QS PpTUOUY1LEvAO8lZh+Ru89yeXzv2a9z96koZyE8glFfDZ1+OZVoQWwSKiHx9O9sw wQh1R2rlLzgtO7o8g0kMZakpDm7DHmvSxmzXP5J/x2szPs1/+7E5uSdzhfpgDFdB 86GSbEbjhXiqwQN258dkHneDSO83+n7+d2zG8aKg55X13RVZLWEtl2VcZWUeKky7 6ybafBPXnXGAQPO1KPC/9ElYgk8goZbCzlI3E61KjwzdJpIwSV3LFkUR7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2m1HHAOZTZHlOlUDdewgpqFY5oMB8GA1UdIwQY MBaAFEtAXKqzS7/ea47mbGAIYMbOlvMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85MTRkMzktMzAyMC00Yjc5LWFkMjYt ZDg3YWZmYjhiYzYxLzEvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS85MTRkMzktMzAyMC00Yjc5LWFkMjYtZDg3YWZmYjhiYzYx LzEvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUnWV1yVU 5CVMvVYgAruavsxa72Z11Wy0jG6KNhQ4Kkz/im6f3Ihbv0XyuWdNRqryvrQY7ELH HMEzJdnzjKrpgNHpOXFZ6tS/DALQ6jQ71fz3FnsBaT/NgfP8ggBb9CmBNKKg9GsL 2HU0VI7osz5eSFBCmJngc/M6lNMLhk9Ck/kPHFHZg6XsKa67MCvu5VJ+nEi+rd5v lyuO8XjyRNuJ10CAW9ZjXsLUZ15GWu7WsgmuPIV45dMKD7gh99npMMQqaAeZlhbU POKsmpFexgFRGBPi7C64OLBrnfTGS0V+Bt0Wy55/vnMqHBgIOCCJGpG8Y2xIuRTt UHXiQYqFh66RQg== -----END CERTIFICATE-----Generated at Thu Jun 19 18:59:37 2025 by rpki-client