$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft File: KX75vv0afiTAzJcpmH_AZda3Ey8.mft (raw, json) Hash identifier: kEkOH3xXyDKznsH+ts5wzMNYkQAjy/GybAFHzFl6gJA= Subject key identifier: 73:46:4C:7E:18:ED:6A:DC:C0:DA:9E:39:01:D6:C8:AE:92:8A:ED:58 Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Certificate serial: 01976C2B24D8FC654A66BF381948E9E17DFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft Manifest number: 0532 Signing time: Sat 14 Jun 2025 02:00:55 +0000 Manifest this update: Sat 14 Jun 2025 02:00:55 +0000 Manifest next update: Sun 15 Jun 2025 02:00:55 +0000 Files and hashes: 1: 413TV1AdZT-kI9M2OP25iHiJY68.roa (hash: LDQ1Fn8K0fnRnfM1ZyE6DskGDqI4UQtW0gSVk69iEPs=) 2: DC8CWnfWr0kQCJUXXP37JYlG3bs.roa (hash: hIJ82Bht26+DJ40TdTwMmY9/6cclogWpDkPQZ7x1T3M=) 3: KX75vv0afiTAzJcpmH_AZda3Ey8.crl (hash: j2i9tuNu9e1PCS+cweHBB+y4v/tYBNSbXvIEykuaeus=) 4: Ow6xOfingvBCtHoNkaHGobxC5yY.roa (hash: NhFSRa+v/S1zW+iyQy+gxANBr6Bnqty2hhUOwum97Kc=) 5: QChegxRLNPsgM4aZ3Xr6VhdLIWc.roa (hash: bRcFRsu1/yeWRw6CVou2c0H6TdcYO6U68qWIBkemHjQ=) 6: V0aRJCOG2a9twiI1SK4HfmRChII.roa (hash: xPnpahcVRHcbxfnhq7t0F7epLdK24cqdjPN51uTlfmE=) 7: hGfJtXirv_T6lir1KXCyNzVXM7c.roa (hash: /luhB0eZkPviHFm9uxrYVp34Y+VHr9iED+Nm9m69zEQ=) 8: hKRvEPMVo2ukUILwmPta9_N3Dm4.roa (hash: qTgr935WkDSGh45Ek2R2g/eV9pnfadByRLqS2Wh5HdI=) 9: nendNgfVYn3Er_Jx5FR9_K0MhAI.roa (hash: Zo4nTYqJK3HMiwWvWWXaOyWIMzLwcZzzdn6p7ZMhRf0=) 10: nmJABDvfuOFv5rLDwlXnJrYAKfA.roa (hash: yu+JnwJ2ZdAZBsZsQOEV9MutU4KWGdZDxP69diYDCo4=) 11: rrgsKOzotuX_T9JtkCjsuwuT608.roa (hash: nbQl5tRFzUGsdMI8eU6ZprMteK4jRGohNhPIbe7S4Js=) 12: vft2JBQBkVTDag9j9_M4P-Fcw3g.roa (hash: AMXmsAdT9NymEMaDmBecmwNW9bgGXQhfsXH0M5Vxt5A=) 13: ws65NnH7cc5LX3ZtkutF5lwgOTo.roa (hash: 3tggzgIge6V0BsIfvy+BLekh4WUZ+47Y39glMLBsTTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6c:2b:24:d8:fc:65:4a:66:bf:38:19:48:e9:e1:7d:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Validity Not Before: Jun 14 02:00:55 2025 GMT Not After : Jun 15 02:00:55 2025 GMT Subject: CN=73464c7e18ed6adcc0da9e3901d6c8ae928aed58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:62:51:75:66:9a:df:df:99:bb:fc:fb:ae:57: a3:72:18:99:6f:f7:6f:e9:e8:a4:fa:2a:1e:05:e3: 33:30:db:e4:d3:09:77:f1:f9:28:c6:94:f4:2f:07: b2:b3:b8:7b:68:39:85:8e:80:11:1e:17:61:b8:fd: a1:2c:c6:7d:4c:4d:d6:65:df:00:c1:b1:04:c1:07: dd:20:9c:6a:60:2d:da:9e:46:b8:40:7a:9a:ea:c1: d4:47:16:35:76:8a:36:fd:0e:ed:f0:10:62:22:f9: 29:28:80:07:39:b5:24:03:60:5a:bc:5b:07:ba:2f: dc:ec:f3:9c:6b:0f:db:a9:ca:d7:ae:9a:c0:b6:9e: 4b:fc:f4:0f:8e:2c:7d:5f:ed:7e:9a:13:03:ef:a0: 63:47:fa:54:99:67:65:80:d2:93:99:f5:b4:9d:f0: 07:d4:e6:d2:0a:e1:45:02:48:72:3b:99:a1:a8:ef: a1:70:6e:2f:1b:98:39:8d:11:a3:4c:66:1b:e4:bd: 89:1d:94:ba:f1:1e:4b:4f:e8:e6:25:3f:e1:cb:53: e8:38:7e:2f:f1:62:59:a7:46:c0:01:66:c4:87:b6: 62:a5:f4:03:fe:b9:9d:0f:26:4f:24:18:5e:b1:e9: 4d:af:8a:d7:5c:f7:41:e8:4b:b7:d6:eb:6c:b5:ba: 11:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:46:4C:7E:18:ED:6A:DC:C0:DA:9E:39:01:D6:C8:AE:92:8A:ED:58 X509v3 Authority Key Identifier: keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:86:08:4b:0c:ff:15:8c:11:23:a1:5d:71:76:ce:2b:68:54: f4:ba:b0:3a:2b:2e:0b:4f:49:29:8f:84:e7:f2:68:b2:34:5b: 89:1d:ca:a1:68:a0:63:15:f6:98:16:c8:98:e5:7d:e3:69:cc: c7:88:b3:e0:f4:6f:7d:83:f2:26:d9:10:01:d4:67:13:08:74: 67:f7:c5:cb:a9:05:71:a7:9b:65:04:b3:fb:e6:06:9e:d1:1b: f3:63:60:ad:87:4f:ea:76:5b:08:c2:6a:61:32:30:9b:06:d6: 89:5f:a2:bf:de:a9:63:c4:be:fa:14:68:9c:57:01:6b:40:e6: 43:07:6a:dc:2e:69:3e:db:bf:7c:b1:1a:fc:fe:d5:4d:e1:e9: ff:9b:61:2f:3d:51:69:81:f0:ec:08:36:26:af:91:9b:e7:db: ca:4d:1c:09:1b:d8:86:d8:73:cf:14:12:f3:b8:ac:48:99:a0: 1f:5d:8f:05:c2:69:18:ac:68:ee:ea:83:0d:92:ed:b4:b0:f6: 29:21:e8:c9:a0:68:cc:2b:ce:46:67:d7:48:45:2d:24:ff:d6: 4f:9b:90:79:b0:08:2f:07:fc:f4:17:7c:84:5d:b6:7c:70:a9: 80:7c:d0:3c:fe:57:41:00:ce:81:20:f5:f2:ca:db:a2:43:fa: 1e:54:75:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdsKyTY/GVKZr84GUjp4X38MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi NzEzMmYwHhcNMjUwNjE0MDIwMDU1WhcNMjUwNjE1MDIwMDU1WjAzMTEwLwYDVQQD Eyg3MzQ2NGM3ZTE4ZWQ2YWRjYzBkYTllMzkwMWQ2YzhhZTkyOGFlZDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGJRdWaa39+Zu/z7rlejchiZb/dv 6eik+ioeBeMzMNvk0wl38fkoxpT0Lweys7h7aDmFjoARHhdhuP2hLMZ9TE3WZd8A wbEEwQfdIJxqYC3anka4QHqa6sHURxY1doo2/Q7t8BBiIvkpKIAHObUkA2BavFsH ui/c7POcaw/bqcrXrprAtp5L/PQPjix9X+1+mhMD76BjR/pUmWdlgNKTmfW0nfAH 1ObSCuFFAkhyO5mhqO+hcG4vG5g5jRGjTGYb5L2JHZS68R5LT+jmJT/hy1PoOH4v 8WJZp0bAAWbEh7ZipfQD/rmdDyZPJBheselNr4rXXPdB6Eu31utstboRHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNGTH4Y7WrcwNqeOQHWyK6Siu1YMB8GA1UdIwQY MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt ZGVlNzY4NjAwMTNkLzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcoYISwz/ FYwRI6FdcXbOK2hU9LqwOisuC09JKY+E5/JosjRbiR3KoWigYxX2mBbImOV942nM x4iz4PRvfYPyJtkQAdRnEwh0Z/fFy6kFcaebZQSz++YGntEb82NgrYdP6nZbCMJq YTIwmwbWiV+iv96pY8S++hRonFcBa0DmQwdq3C5pPtu/fLEa/P7VTeHp/5thLz1R aYHw7Ag2Jq+Rm+fbyk0cCRvYhthzzxQS87isSJmgH12PBcJpGKxo7uqDDZLttLD2 KSHoyaBozCvORmfXSEUtJP/WT5uQebAILwf89Bd8hF22fHCpgHzQPP5XQQDOgSD1 8srbokP6HlR1Tg== -----END CERTIFICATE-----Generated at Sat Jun 14 09:24:03 2025 by rpki-client