$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft File: fRSfYkR4U2icEvsoiv62toHP68E.mft (raw, json) Hash identifier: UFlTnycHHb1bhP7b/8cfJzT988p5cs6K/gm6EDYOKy4= Subject key identifier: C2:1A:8E:C6:40:C2:F3:1D:7A:E2:F3:C8:71:E5:FE:9B:31:89:3D:27 Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1 Certificate serial: 01976D067A6682870EE9A626FF800ABF61E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft Manifest number: 152D Signing time: Sat 14 Jun 2025 06:00:30 +0000 Manifest this update: Sat 14 Jun 2025 06:00:30 +0000 Manifest next update: Sun 15 Jun 2025 06:00:30 +0000 Files and hashes: 1: 2CeWoGzDWl6UkY36SIUH1OhgWjI.roa (hash: SpuPtcO5oh6qYeICaLjHEnb1AyuNec5O8bsGPbWlXR0=) 2: 2OyaFSjBRoREDHEMRffL3EbO-HE.roa (hash: nXI4OkiYa5c+MjdVzqLFFZ3ZGswBHizjRFddCRvE7B8=) 3: 3wwIi79zg2SGivGdrN-g0LB5ULQ.roa (hash: RzCIbHY1nS76gIylPt0Y25UbcEOAlA6M3aFOCeIxSG4=) 4: 7gAx1Pyx4u0TcyoGJm-7xTCnp00.roa (hash: gAGdIZGspYyJlvskZ74rsTfXVPxswIlGbLI3PkYprvU=) 5: EUICRwNR8sR91Lfm3GIv3mdVr9k.roa (hash: ua1xjRnUek2cLwApq/HW3bjCZKfJsqGGvp16wgKp8P0=) 6: HYkelKhWY7NiPV2rIoXC5vMsggM.roa (hash: 8m611pZGVk4ujPG9J04iZxFPYTUOzYbyGd2fDqvqZP4=) 7: Jhq91rxsv2WDUPAoN1fbsyaCM6g.roa (hash: nybfHNUP7zn/KmMoeiwkEEs96tiChMxH1OSoiBocUXI=) 8: Melq7PLQcz-P184ktmpNOP2H3e4.roa (hash: bGaw09MG/JnAsEfDppYWkhFJuztc0B+a9Nz0AQOqrUY=) 9: Q4BLVnTtEyoC8eHyhkcteKoeJ6A.roa (hash: edQEuSj12spKEsnnwc1oyC8FT8MhVl13a4ooOoJq0ys=) 10: RWf3DVveZH4QLyKGQca82kY-7Qw.roa (hash: V22GqObY+hDoy85YYLCgPS5lAieuM7VmlAbZz3/L7ZM=) 11: fRSfYkR4U2icEvsoiv62toHP68E.crl (hash: w7k8PtIt+FbBF8GHRlJbxBYLECywjkEq9YJ2nfz9YZ4=) 12: jbUG9pTk9em_fTHbjoEIhua3pK0.roa (hash: 4tGn3tkK46T9dFOLGdw2zw9ukjnxUtA/PXFwlS5np88=) 13: l63ezx_M0iAM5dKGQZtcWd8xPmQ.roa (hash: qf8bDHKpJxynQt1q7hXqJrXbCZfUxZZ7MBpbrfJkMcU=) 14: lkgJ8Vsd8ocb4eicMkQ6N3ZL26E.roa (hash: 9Yz4K7Z8z/hwTeoXB4iHYgi23xVHLoum6nVhNj0Tjmc=) 15: o1JVWuEuZPta2YEvpJ2jdJYR8K8.roa (hash: qNV/P5sCJuhJ/7lvmy6L/P1vDN6QSvQRrwuS+5DqKkg=) 16: txxKQQE40wffgCtcTH6E5WrYYhY.roa (hash: td5UTouO1Nf7RuKTOrzSb6h5NfM7Vvfby16oyueCQko=) 17: zBonQZgEPDvj1nGNR_bu7NzMU0U.roa (hash: s94OjMSrqoWnsXwDlW8kAk2CQ0Z0teuNflnJXhN+I6g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6d:06:7a:66:82:87:0e:e9:a6:26:ff:80:0a:bf:61:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1 Validity Not Before: Jun 14 06:00:30 2025 GMT Not After : Jun 15 06:00:30 2025 GMT Subject: CN=c21a8ec640c2f31d7ae2f3c871e5fe9b31893d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f1:68:a7:ad:b3:df:58:63:b2:77:f1:fd:c2: f8:6d:b9:20:10:a5:f7:7d:03:d7:6e:2f:3f:1c:63: 15:d5:51:e4:96:95:10:22:e7:cb:51:45:e0:d9:87: a3:d6:ae:c7:0d:51:5d:f2:f6:80:ef:8a:03:2c:e3: de:cf:2d:3c:07:da:b9:f6:71:17:65:38:6e:6b:26: 07:7c:b3:c2:4a:f4:d6:f3:d3:62:11:c8:d0:cb:34: 4f:2c:3b:cf:af:b9:eb:24:57:3d:d8:c7:04:c4:3f: 0c:9d:c2:65:9f:a9:c6:f9:45:79:db:a3:2f:32:c3: 81:41:90:53:3f:42:a1:b4:25:d1:85:9c:31:1c:c2: de:66:95:bd:e6:01:e3:cc:64:e9:b2:99:70:71:7d: 63:71:24:61:5a:15:03:7c:33:93:f1:5a:35:dd:1a: 1b:a7:87:eb:ec:c3:a4:b1:0b:99:ae:f4:3b:69:c8: 50:32:59:2c:cb:62:7b:53:27:49:e7:c9:68:44:0f: d2:6a:a1:bb:1a:bd:15:65:f0:54:8d:78:9f:0c:54: 14:33:4b:f7:5c:43:2c:b9:e0:e3:a9:89:d2:63:5f: 3a:7c:0c:77:20:1a:5a:7f:ce:44:11:27:2d:3d:93: e8:9a:64:a1:ee:3d:c3:5e:e6:f5:ae:f1:35:6d:93: 44:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1A:8E:C6:40:C2:F3:1D:7A:E2:F3:C8:71:E5:FE:9B:31:89:3D:27 X509v3 Authority Key Identifier: keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:e7:f5:03:f6:4e:1d:6b:f7:97:d7:5e:8a:1b:8b:6e:f5:ca: 64:4d:bd:ca:1b:07:c7:9c:bf:de:29:9f:ac:ca:ba:f9:b5:39: f3:22:79:ff:42:ee:52:1f:3f:86:b0:8d:c4:f5:eb:d9:8e:1a: 58:6f:e2:be:db:d4:ef:6b:38:41:bf:a4:07:67:40:d2:4c:ce: 28:3e:80:23:b8:5e:04:4e:a5:fe:f6:b1:20:a2:29:18:db:f0: 03:3b:2b:80:c5:1e:a3:dd:21:78:1a:3c:2e:1d:0e:35:3b:e8: 28:16:08:54:65:36:6e:0a:6e:ab:cf:5e:2f:64:a0:40:c3:17: 15:e5:65:f2:c7:b0:4b:86:ed:26:58:d5:15:15:49:00:9d:cc: e3:04:e9:02:4f:ff:3c:64:f7:e2:ed:33:b4:7b:66:c0:27:d1: 15:d7:2e:ee:2c:7d:41:18:dc:14:7c:1a:f4:da:88:a7:46:8b: 20:20:aa:07:cd:1d:ad:e5:19:d7:3c:d8:da:da:db:ff:8b:f0: b6:fd:29:ca:ad:e2:fa:7d:84:46:63:2b:9e:1f:f1:f3:04:76: 9d:54:97:1b:65:1b:6a:a3:5a:5a:2c:22:8b:a0:28:d4:2c:5b: 96:e4:78:4c:0e:da:61:4d:d1:4e:4b:0c:9b:02:87:6f:ad:d1: a1:01:c9:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdtBnpmgocO6aYm/4AKv2HoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMTQ5ZjYyNDQ3ODUzNjg5YzEyZmIyODhhZmViNmI2ODFj ZmViYzEwHhcNMjUwNjE0MDYwMDMwWhcNMjUwNjE1MDYwMDMwWjAzMTEwLwYDVQQD EyhjMjFhOGVjNjQwYzJmMzFkN2FlMmYzYzg3MWU1ZmU5YjMxODkzZDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfFop62z31hjsnfx/cL4bbkgEKX3 fQPXbi8/HGMV1VHklpUQIufLUUXg2Yej1q7HDVFd8vaA74oDLOPezy08B9q59nEX ZThuayYHfLPCSvTW89NiEcjQyzRPLDvPr7nrJFc92McExD8MncJln6nG+UV526Mv MsOBQZBTP0KhtCXRhZwxHMLeZpW95gHjzGTpsplwcX1jcSRhWhUDfDOT8Vo13Rob p4fr7MOksQuZrvQ7achQMlksy2J7UydJ58loRA/SaqG7Gr0VZfBUjXifDFQUM0v3 XEMsueDjqYnSY186fAx3IBpaf85EESctPZPommSh7j3DXub1rvE1bZNEywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIajsZAwvMdeuLzyHHl/psxiT0nMB8GA1UdIwQY MBaAFH0Un2JEeFNonBL7KIr+traBz+vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTct YWFiMGU0MTRjYzYzLzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTctYWFiMGU0MTRjYzYz LzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKOf1A/ZO HWv3l9deihuLbvXKZE29yhsHx5y/3imfrMq6+bU58yJ5/0LuUh8/hrCNxPXr2Y4a WG/ivtvU72s4Qb+kB2dA0kzOKD6AI7heBE6l/vaxIKIpGNvwAzsrgMUeo90heBo8 Lh0ONTvoKBYIVGU2bgpuq89eL2SgQMMXFeVl8sewS4btJljVFRVJAJ3M4wTpAk// PGT34u0ztHtmwCfRFdcu7ix9QRjcFHwa9NqIp0aLICCqB80dreUZ1zzY2trb/4vw tv0pyq3i+n2ERmMrnh/x8wR2nVSXG2UbaqNaWiwii6Ao1CxbluR4TA7aYU3RTksM mwKHb63RoQHJ/A== -----END CERTIFICATE-----Generated at Sat Jun 14 13:00:41 2025 by rpki-client