$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft File: AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft (raw, json) Hash identifier: CaitUpav+H/TLX6ZCb4s/k02+fDTmUXugVM+MDmhjFk= Subject key identifier: 42:F2:CB:79:4E:48:B0:69:37:77:A0:BB:F3:F9:0A:3E:E8:5F:D8:5B Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Certificate serial: 01976961A89B6CDF8766E44919FF754F4E95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft Manifest number: 1599 Signing time: Fri 13 Jun 2025 13:01:37 +0000 Manifest this update: Fri 13 Jun 2025 13:01:37 +0000 Manifest next update: Sat 14 Jun 2025 13:01:37 +0000 Files and hashes: 1: 2MTpcYnM1k7_eZxG4JM1vyDTgyk.roa (hash: ymmdwaUbb6XKWmKTfQm4pWw8ouzRa7gwqokbxv+gmWU=) 2: 3CW8ZrBicXZ-3Xo2rFwfHtSekAs.roa (hash: 7ay6ExNqGjacU7HN/bzX0dJI8r/LlyrNhedhAiFT9ik=) 3: 4MiALt5VQvZmZRNJbgiFndSZM4w.roa (hash: GJAf7lhefseebsxtLfvA2JkOrit3YnALqwfo2sORCvw=) 4: 7XLrZeKON3mi_Y8HbdkwhdOJHZM.roa (hash: uPZBCvQWdyX5oSW3u+GYq0zKOz3VqYp/42l/kQKgi6Y=) 5: AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl (hash: 5b0sAfyF/wZFVIsh54/jquxJwDbkuIovoK0X8Akecyw=) 6: Woo9uQ4ucTRYjMh9ah88cw5clxk.roa (hash: WrdAqZeK7ES2+LIoGcfX11G6G4YXGyd2qn4CZO/jQsA=) 7: Xih-EfVQ2lODpeM1Ya_8fjlb3e0.roa (hash: l4FttRaMYnWfbRGN1GiO7VFVJgCvU1nAC+1h/ttWafI=) 8: Z2PHW8LvacSdhO2HpcioR4D6P_g.roa (hash: kHWtIvwFttg31Y3IHOia+gnD127BKytZFvvHo2JKuAw=) 9: gbjyDe1jMzAx-GtGqvOl5rcNw2Y.roa (hash: bZY4frDqpa0VtHIgDLvz2UTVVluMMplhW24wn9Ofe38=) 10: kSocueKI3xqrxYrVlgp46XPJhoY.roa (hash: 38MoDqAostLgesLzGLlzSF6QuxV0tRHQ2WgTUcouUvI=) 11: zDn6BG65-N44C0uDlJe3RzkiUTs.roa (hash: EM6Uwy/Us+r0AtgVlMQcbmCbt0K/tS3jHqszI1mZVYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 13:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:69:61:a8:9b:6c:df:87:66:e4:49:19:ff:75:4f:4e:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Validity Not Before: Jun 13 13:01:37 2025 GMT Not After : Jun 14 13:01:37 2025 GMT Subject: CN=42f2cb794e48b0693777a0bbf3f90a3ee85fd85b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7e:7b:f6:c5:3f:0d:3d:02:be:ae:ec:05:13: 82:b4:46:a6:fb:e9:3a:40:13:87:44:7d:64:3c:6d: 3c:4a:fd:c7:6d:58:25:6d:7a:58:9b:45:f4:cb:12: c3:9c:ad:fa:9c:69:84:7f:3a:8b:c6:d7:56:1c:85: 1a:5d:31:c7:91:37:1f:1e:6d:9d:91:22:51:34:fa: fb:92:ec:41:0b:b6:f2:80:b7:d9:06:3b:8b:37:27: 76:a4:b7:31:00:f7:09:98:86:62:ac:43:56:4a:d6: 42:1a:f2:02:10:39:1a:90:fb:89:8c:6f:63:7d:c8: bc:a3:14:28:90:98:9f:e1:d1:4a:10:cf:26:61:d8: 86:80:38:ab:15:70:8f:34:5e:ce:59:60:f2:c1:42: 74:2e:d8:6c:31:ca:cd:42:aa:d7:9d:16:19:0c:db: ae:bc:c1:f4:11:d5:d1:c8:b9:6a:04:27:b4:f6:77: 4a:60:aa:0d:0b:4b:9e:ae:59:97:a0:bc:31:8d:3f: d3:ac:f8:be:83:1d:95:d7:39:b3:8d:42:d1:01:00: 80:6e:76:57:bd:9b:5d:2b:44:ed:e9:f0:26:8d:70: 15:2f:06:44:e2:71:d3:9f:da:07:02:f9:69:c1:b0: 25:c9:f3:09:ef:8f:2a:77:6c:d4:30:d4:a9:8b:b8: 62:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F2:CB:79:4E:48:B0:69:37:77:A0:BB:F3:F9:0A:3E:E8:5F:D8:5B X509v3 Authority Key Identifier: keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:24:73:56:30:63:d6:2b:ea:2f:25:39:94:20:a2:df:21:fa: 74:8a:ab:76:c5:7b:c7:ed:d4:63:48:40:6e:ae:80:6d:a6:60: bd:67:49:e8:b5:01:4a:08:0b:e9:a4:d8:4f:53:7c:99:0f:84: 7c:20:f9:a5:f7:34:6c:17:7b:fb:e6:22:0a:58:80:0f:3a:cf: 40:79:18:d0:c5:c7:4e:b7:77:ed:60:0a:39:2d:62:2a:fe:93: ab:2a:c8:37:d9:1f:f5:2b:5a:bc:5d:e0:ff:79:08:a7:1e:4e: 15:10:61:1f:bc:01:ea:b9:b5:3b:86:3c:bf:f2:5d:b5:11:2d: 15:97:56:e3:ce:6b:cb:70:0e:db:53:5e:6d:56:1c:b6:2c:eb: 7d:e9:3b:85:18:23:54:32:f1:90:68:23:5d:9d:cb:48:6e:52: 84:b8:33:92:34:49:1f:20:e4:ab:42:b6:80:2f:5d:5b:ab:79: 91:e6:0a:2b:14:06:4a:99:65:e1:73:e5:01:a0:22:3e:79:f0: ff:b0:e5:4d:95:21:e3:d2:65:ad:b2:25:4d:17:25:a8:63:27: 35:26:d3:db:d2:78:1b:0d:31:6d:d2:95:dd:b8:92:3e:bd:a7: 43:a1:b2:73:4f:0a:b7:1c:79:90:44:79:16:f1:b9:77:1e:dd: 61:4f:c4:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdpYaibbN+HZuRJGf91T06VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMzJhNGJmYjc3OTY0MDVhNTU2Yjc1OWYxZDE5M2U0YzRk MzcxMjkwHhcNMjUwNjEzMTMwMTM3WhcNMjUwNjE0MTMwMTM3WjAzMTEwLwYDVQQD Eyg0MmYyY2I3OTRlNDhiMDY5Mzc3N2EwYmJmM2Y5MGEzZWU4NWZkODViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3579sU/DT0Cvq7sBROCtEam++k6 QBOHRH1kPG08Sv3HbVglbXpYm0X0yxLDnK36nGmEfzqLxtdWHIUaXTHHkTcfHm2d kSJRNPr7kuxBC7bygLfZBjuLNyd2pLcxAPcJmIZirENWStZCGvICEDkakPuJjG9j fci8oxQokJif4dFKEM8mYdiGgDirFXCPNF7OWWDywUJ0LthsMcrNQqrXnRYZDNuu vMH0EdXRyLlqBCe09ndKYKoNC0uerlmXoLwxjT/TrPi+gx2V1zmzjULRAQCAbnZX vZtdK0Tt6fAmjXAVLwZE4nHTn9oHAvlpwbAlyfMJ748qd2zUMNSpi7hiJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELyy3lOSLBpN3egu/P5Cj7oX9hbMB8GA1UdIwQY MBaAFAIypL+3eWQFpVa3WfHRk+TE03EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEt M2JiNGQ2MjAwNTE4LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEtM2JiNGQ2MjAwNTE4 LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSRzVjBj 1ivqLyU5lCCi3yH6dIqrdsV7x+3UY0hAbq6AbaZgvWdJ6LUBSggL6aTYT1N8mQ+E fCD5pfc0bBd7++YiCliADzrPQHkY0MXHTrd37WAKOS1iKv6TqyrIN9kf9StavF3g /3kIpx5OFRBhH7wB6rm1O4Y8v/JdtREtFZdW485ry3AO21NebVYctizrfek7hRgj VDLxkGgjXZ3LSG5ShLgzkjRJHyDkq0K2gC9dW6t5keYKKxQGSpll4XPlAaAiPnnw /7DlTZUh49JlrbIlTRclqGMnNSbT29J4Gw0xbdKV3biSPr2nQ6Gyc08Ktxx5kER5 FvG5dx7dYU/Ebw== -----END CERTIFICATE-----Generated at Fri Jun 13 19:22:38 2025 by rpki-client