$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft File: ORnyrZFYS6_wRnRHusj7l40fndM.mft (raw, json) Hash identifier: kBVN3keK507bSpPRVAXOeYCALjpcJIik3r+ga7y+mUw= Subject key identifier: 66:92:23:7E:B6:32:45:0E:56:5D:5C:C8:71:A2:2F:65:87:F2:F8:36 Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Certificate serial: 0197703E99A6465568B2DC9FFDC56F253E41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft Manifest number: 15B6 Signing time: Sat 14 Jun 2025 21:00:40 +0000 Manifest this update: Sat 14 Jun 2025 21:00:40 +0000 Manifest next update: Sun 15 Jun 2025 21:00:40 +0000 Files and hashes: 1: 3Xkfgsy5F0IowNcy1PedAB3Q6w0.roa (hash: iyJL5cuUJjZvE75tBtKfcWvyK2dmPiVKM7BX3wZGQos=) 2: 4EDvDSCIPe0YYvYx7Str0IpAPeM.roa (hash: A9xeZgyOfSqqIMRvaPEIhp5b1RhtdrlitB+v147UkT4=) 3: 5pue0s9j8lhdVuO6m6E92d4GwDU.roa (hash: CSkd5pFYexGISl0uc2qVJpocMMmmGw3Zguf0ypv5Owk=) 4: M5hYRJhvdGCKvhvMAGC4jWTJSXA.roa (hash: VGkxa4pTyEqZCbbcRS6HnlUuOo2QmctHYBT+vvYYBDg=) 5: ORnyrZFYS6_wRnRHusj7l40fndM.crl (hash: 5OCa/EsMv368vHWXwNbz5VIY4gxJw7wfzEdEsrWrsDY=) 6: UfCPGY0KJE6274iAqACixLj9Gmw.roa (hash: DEe7CtPUt0XEDknWoFEE8OaasnbG+ag0I4mAzR/inaE=) 7: WBerlCoyvzWnSx7AM9uVxy9XUro.roa (hash: FyOYZU8Lcu6m3tCIEh8spxjddiJiAmITHkAJjSq/GW0=) 8: hWosbOoApl7V_Bhpe5UlA20sERA.roa (hash: PkJmNJ/LtXuQwtW6f6gFggLl9YMZJgAspupTTJw2DD0=) 9: m-oD5AGGiKc-qI8F9BHOsqfUhwQ.roa (hash: ZivLa2r1rkIhgA7nnzvSrie3rkSLQvNS6UhWQpi2o50=) 10: r4CnQQx_zbdBDGpIsGGdqEuowRg.roa (hash: Cf3KdUglzAXq3AND0kUcTnVm0D52NG4w3f87gIFdSQg=) 11: uot90FkBP8Y3Y-x6-7brjjoB-rU.roa (hash: 0JXXSAl/uFfrD7KxeCsCoDWgeiNKlIuga4IDFWQXH2c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 19:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:70:3e:99:a6:46:55:68:b2:dc:9f:fd:c5:6f:25:3e:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Validity Not Before: Jun 14 21:00:40 2025 GMT Not After : Jun 15 21:00:40 2025 GMT Subject: CN=6692237eb632450e565d5cc871a22f6587f2f836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b4:e7:8a:cd:ef:48:4d:4c:19:e3:0f:1f:f2: c3:c6:51:d9:7a:4d:0a:d7:c9:2c:d8:20:61:c2:29: 9f:2f:a1:8e:32:9b:d5:38:8f:93:d7:98:ef:45:09: 5f:bc:b9:69:2e:39:9e:05:4f:cb:69:38:4b:a7:0b: 77:16:3d:b2:f8:35:1b:6f:8b:70:d1:b0:73:5d:c9: ef:66:4e:07:b6:27:1f:40:5a:67:c6:8e:91:b9:9f: 41:7e:d4:de:e6:bd:74:83:87:20:70:17:6d:db:f0: c2:ea:28:cc:47:bc:7b:d4:13:c6:c4:65:34:5c:ec: 64:1e:07:6c:44:13:3c:e9:0b:7f:2a:f1:3c:9d:f8: 47:07:fd:fa:13:bb:8f:a2:51:9d:7b:e4:62:46:42: bb:e7:15:e4:5e:e4:59:c7:76:37:d0:5f:f1:2e:94: 40:f0:35:4a:52:29:a1:26:f7:dc:1e:d9:a2:b5:e5: cf:b9:82:1a:57:bd:42:c6:1c:37:b8:5d:e5:45:ad: 63:a0:de:26:2f:ce:12:f5:60:85:ce:de:d5:19:1d: f4:c3:d3:69:5b:9e:7e:5b:3e:be:31:62:90:cb:b2: fb:43:e2:25:34:bc:30:70:a6:dc:10:2e:35:d0:a0: 1f:6b:dc:22:b8:d0:fc:59:91:89:58:0e:e0:28:10: 5e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:92:23:7E:B6:32:45:0E:56:5D:5C:C8:71:A2:2F:65:87:F2:F8:36 X509v3 Authority Key Identifier: keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:0e:ae:2e:d9:39:2c:a7:ca:40:10:82:b3:9a:9b:9e:76:87: f7:5d:8e:ed:12:22:ca:a4:aa:cc:00:63:4d:2a:cb:fb:6d:3a: 3e:3d:5f:a8:37:0f:34:fb:ad:36:2a:5c:12:96:8e:53:f3:ff: e2:22:19:cf:16:4e:45:8e:8f:c8:c3:c6:c4:e4:4c:1b:6f:7e: e3:71:b6:d0:b5:a0:e0:b8:d0:ea:7c:5a:a6:ae:08:54:bf:da: 0c:ae:eb:d0:bf:f3:2c:c8:18:41:f3:f0:77:e5:ab:be:3a:a5: bc:49:e6:93:73:cc:4e:9d:c6:56:7c:93:d7:e2:8d:9b:10:59: 1b:4d:b3:7f:63:f3:ef:08:80:d0:6b:c1:48:59:b2:9b:a9:10: d2:c9:a7:05:4d:fb:3e:a4:ba:e4:90:ca:06:d7:d6:bc:8f:e6: db:e1:0a:fb:b2:e2:bc:44:c9:a8:19:8c:9e:e1:ee:4c:08:89: a6:e4:e5:a4:76:87:f3:9f:69:b1:e6:66:7d:57:a1:46:f7:f2: 77:53:4b:3b:74:e8:4a:4b:51:47:05:88:53:bd:e7:c7:cd:07: 24:56:a2:96:9e:5e:8f:ed:9a:47:20:a6:92:a3:da:c7:74:f6: f3:08:df:1b:ca:de:f5:f1:4e:e0:07:39:4f:f1:b7:5c:d6:79: eb:52:9e:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdwPpmmRlVostyf/cVvJT5BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MTlmMmFkOTE1ODRiYWZmMDQ2NzQ0N2JhYzhmYjk3OGQx ZjlkZDMwHhcNMjUwNjE0MjEwMDQwWhcNMjUwNjE1MjEwMDQwWjAzMTEwLwYDVQQD Eyg2NjkyMjM3ZWI2MzI0NTBlNTY1ZDVjYzg3MWEyMmY2NTg3ZjJmODM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLTnis3vSE1MGeMPH/LDxlHZek0K 18ks2CBhwimfL6GOMpvVOI+T15jvRQlfvLlpLjmeBU/LaThLpwt3Fj2y+DUbb4tw 0bBzXcnvZk4HticfQFpnxo6RuZ9BftTe5r10g4cgcBdt2/DC6ijMR7x71BPGxGU0 XOxkHgdsRBM86Qt/KvE8nfhHB/36E7uPolGde+RiRkK75xXkXuRZx3Y30F/xLpRA 8DVKUimhJvfcHtmiteXPuYIaV71Cxhw3uF3lRa1joN4mL84S9WCFzt7VGR30w9Np W55+Wz6+MWKQy7L7Q+IlNLwwcKbcEC410KAfa9wiuND8WZGJWA7gKBBeOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGaSI362MkUOVl1cyHGiL2WH8vg2MB8GA1UdIwQY MBaAFDkZ8q2RWEuv8EZ0R7rI+5eNH53TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUt MzJhYTY3MzFjMjkxLzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUtMzJhYTY3MzFjMjkx LzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbw6uLtk5 LKfKQBCCs5qbnnaH912O7RIiyqSqzABjTSrL+206Pj1fqDcPNPutNipcEpaOU/P/ 4iIZzxZORY6PyMPGxORMG29+43G20LWg4LjQ6nxapq4IVL/aDK7r0L/zLMgYQfPw d+WrvjqlvEnmk3PMTp3GVnyT1+KNmxBZG02zf2Pz7wiA0GvBSFmym6kQ0smnBU37 PqS65JDKBtfWvI/m2+EK+7LivETJqBmMnuHuTAiJpuTlpHaH859pseZmfVehRvfy d1NLO3ToSktRRwWIU73nx80HJFailp5ej+2aRyCmkqPax3T28wjfG8re9fFO4Ac5 T/G3XNZ561Kejw== -----END CERTIFICATE-----Generated at Sun Jun 15 04:03:27 2025 by rpki-client