$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft File: i4JDP_6UvzU2_sMnVD05YVggIHI.mft (raw, json) Hash identifier: SkvFcpWc4hF5+b4txR/rPJowmtyMzYlvhgmMQdKdoRM= Subject key identifier: 46:F6:4B:F6:E2:77:A4:E1:19:B8:20:2D:5E:D8:76:8F:6E:99:D9:A9 Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72 Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072 Certificate serial: 019775D2BA565AD3F753D40CA79FF18A8D74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft Manifest number: 0BAB Signing time: Sun 15 Jun 2025 23:00:33 +0000 Manifest this update: Sun 15 Jun 2025 23:00:33 +0000 Manifest next update: Mon 16 Jun 2025 23:00:33 +0000 Files and hashes: 1: 4fxQzx_8ByWwMKk9dyXM0XEaMys.roa (hash: /pQNDc4tCpOKVTxdQ/1sSXEuYSGaPkaAPaOzkIFfq/U=) 2: D0yJcu0JvPJ2IZ6qvrN_68RL81A.roa (hash: NXJKvgJ+KpYYxv4h48ZyQkogSfsaqjnCJ9F84sJ/8IA=) 3: W9TFdD94lkINNpe0yudKptP_VLs.roa (hash: cP06PmfxXfnVdgeDD5yGsXjPUheUvD8ffIUpVLl0OGI=) 4: fAdRVcLtp1Hdo62qAxJzNRyFLms.roa (hash: /9qm18tTMk3ZVKpb3SBqcWWsV0TFo0WtQqugq7BXDfU=) 5: fk9piBmxadoxJuP7Wx4UPTdBTGM.roa (hash: P0efcRRoA7jHUP2kLMx2ZKnIu/J2T6OthYnnV4Yj06A=) 6: gYA_rHJcDyZ1I8qy1R4L0zDW9qI.roa (hash: u5z8BQnf6PynI8NBRk8KSGbQCrjifEnXJWVptV9ywSs=) 7: i4JDP_6UvzU2_sMnVD05YVggIHI.crl (hash: 1wQAwHkXaeevq+S18aZPQ1EHmJtbqHRwLnbst12h76s=) 8: k_0zEMHxmfACdt3JyIQe32n-3UE.roa (hash: 1zpkXrC9Bl+aFyn5Yr4Xer+2HoYHjHajiHX7XweXMcg=) 9: xNtGHv1YLmz0baQ6fFAsVkQIQLw.roa (hash: glTrDTx+iBPrwn7/BNyzFNiZr9vyz3H84OvS4u/lrN4=) 10: yx9i8LZCbjvaDebLsn4vp_1QQsw.roa (hash: koRh5dNP2sZyFodyKIh0Iqwubeq7l02U0bZSoimi8yU=) 11: yyP9fmeZAYp1K1vaVu0uJv4Agws.roa (hash: egmTg6Tzum2/xFgjHv1aVGDhof0qC374Rh2lR+uVm0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 20:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:75:d2:ba:56:5a:d3:f7:53:d4:0c:a7:9f:f1:8a:8d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b82433ffe94bf3536fec327543d396158202072 Validity Not Before: Jun 15 23:00:33 2025 GMT Not After : Jun 16 23:00:33 2025 GMT Subject: CN=46f64bf6e277a4e119b8202d5ed8768f6e99d9a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:af:bf:d7:1b:f4:23:1d:87:28:70:0c:f0:84: fb:eb:d3:51:2d:6b:cd:f6:d9:de:f9:1b:99:3b:61: 54:bd:ad:3d:91:6f:9e:35:e2:1f:a8:9d:d3:f1:45: d0:fb:a2:9c:3a:46:c6:8e:e9:56:7a:d0:93:d0:8e: 6b:54:8f:2d:bb:14:37:83:14:f8:41:7e:45:6b:57: cc:de:45:11:e1:ed:06:e9:6e:a2:66:cb:78:1f:e3: 32:1e:e4:7f:e4:74:e9:71:fc:b0:d5:a6:4b:bd:ed: 0b:40:a0:f1:b7:b0:87:9e:c9:8c:6f:15:b3:c6:60: 87:0a:de:e4:d1:ec:5a:97:a1:17:0d:34:8b:90:01: b8:1c:92:7c:91:52:c2:95:16:fa:99:fc:d4:9b:56: 79:3f:ea:59:7b:f2:f6:fb:8e:d9:cc:82:c4:a4:72: d0:05:b8:1a:e5:77:c1:c0:3b:7a:89:1a:fb:fa:72: b3:cb:19:f3:fa:6c:58:aa:41:14:36:8c:75:48:71: a5:8e:d9:48:9d:e1:1d:39:16:33:1d:ce:fa:f5:eb: 51:86:12:8c:4c:80:45:2b:c9:c9:94:ce:c0:10:e5: 3f:81:fb:c9:ff:8e:e5:fb:02:99:32:9d:65:15:43: 24:55:63:0f:54:da:9f:87:bd:8d:0f:30:30:73:68: 09:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F6:4B:F6:E2:77:A4:E1:19:B8:20:2D:5E:D8:76:8F:6E:99:D9:A9 X509v3 Authority Key Identifier: keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:a1:6d:e6:70:8d:da:4e:79:89:b6:3a:44:04:bb:93:a4:e2: 9c:89:7a:fc:fc:6e:cd:de:f3:a0:c5:4e:b0:98:b2:b3:aa:0a: 22:bf:1b:7f:18:77:a6:73:cf:05:03:b6:f3:43:af:63:40:81: 67:9c:63:f1:cf:24:5d:ed:ef:d0:ce:be:73:a4:8f:5a:83:a8: 03:59:d5:e9:e8:50:54:0c:cd:54:84:28:b0:ba:4d:b3:74:5f: 0e:c8:5d:40:24:25:e0:bb:d3:e3:9b:f4:ce:a4:5b:07:f1:88: 15:e4:eb:6a:10:f1:6d:06:e1:b7:7a:c4:5d:5f:b5:04:7a:d6: a2:17:56:87:2c:2c:93:6b:71:ec:9d:c9:4c:53:72:9b:62:1b: 3d:04:bb:8b:da:19:08:5a:68:a5:93:d3:ca:0f:c9:2b:c9:78: c7:df:b3:43:7d:4a:4f:12:d3:46:64:46:d0:57:bf:5d:d8:60: be:b9:c9:7d:83:0d:c8:f9:58:44:b1:29:51:d8:98:76:ee:fc: 33:68:46:5b:27:3d:3c:21:39:f6:bb:e5:34:cb:ae:c6:36:06: 5b:e4:9d:39:80:c4:40:d5:e8:9a:8e:b7:b3:f8:91:37:1d:6c: d2:28:a2:8c:9e:bb:a5:10:49:a9:3a:95:57:57:75:00:47:b3: 80:88:b2:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd10rpWWtP3U9QMp5/xio10MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiODI0MzNmZmU5NGJmMzUzNmZlYzMyNzU0M2QzOTYxNTgy MDIwNzIwHhcNMjUwNjE1MjMwMDMzWhcNMjUwNjE2MjMwMDMzWjAzMTEwLwYDVQQD Eyg0NmY2NGJmNmUyNzdhNGUxMTliODIwMmQ1ZWQ4NzY4ZjZlOTlkOWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra+/1xv0Ix2HKHAM8IT769NRLWvN 9tne+RuZO2FUva09kW+eNeIfqJ3T8UXQ+6KcOkbGjulWetCT0I5rVI8tuxQ3gxT4 QX5Fa1fM3kUR4e0G6W6iZst4H+MyHuR/5HTpcfyw1aZLve0LQKDxt7CHnsmMbxWz xmCHCt7k0exal6EXDTSLkAG4HJJ8kVLClRb6mfzUm1Z5P+pZe/L2+47ZzILEpHLQ Bbga5XfBwDt6iRr7+nKzyxnz+mxYqkEUNox1SHGljtlIneEdORYzHc769etRhhKM TIBFK8nJlM7AEOU/gfvJ/47l+wKZMp1lFUMkVWMPVNqfh72NDzAwc2gJ6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEb2S/bid6ThGbggLV7Ydo9umdmpMB8GA1UdIwQY MBaAFIuCQz/+lL81Nv7DJ1Q9OWFYICByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYt MmRkNzg5MGRjNjg5LzEvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYtMmRkNzg5MGRjNjg5 LzEvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApqFt5nCN 2k55ibY6RAS7k6TinIl6/Pxuzd7zoMVOsJiys6oKIr8bfxh3pnPPBQO280OvY0CB Z5xj8c8kXe3v0M6+c6SPWoOoA1nV6ehQVAzNVIQosLpNs3RfDshdQCQl4LvT45v0 zqRbB/GIFeTrahDxbQbht3rEXV+1BHrWohdWhywsk2tx7J3JTFNym2IbPQS7i9oZ CFpopZPTyg/JK8l4x9+zQ31KTxLTRmRG0Fe/XdhgvrnJfYMNyPlYRLEpUdiYdu78 M2hGWyc9PCE59rvlNMuuxjYGW+SdOYDEQNXomo63s/iRNx1s0iiijJ67pRBJqTqV V1d1AEezgIiyQA== -----END CERTIFICATE-----Generated at Mon Jun 16 02:46:06 2025 by rpki-client