$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft File: 5llvGxY8qwxFqE7rEyYbZfGiKWI.mft (raw, json) Hash identifier: uF2ok4SYTzKjf4kJav2PnVafQR6TF1lQdLm5OIhhshM= Subject key identifier: 72:1C:3A:99:03:12:9C:12:B9:C5:F6:9A:F9:3F:9C:97:6E:1B:43:8C Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62 Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962 Certificate serial: 01976F2BCD48F96AEA0949B8EE0D29209092 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft Manifest number: 15A3 Signing time: Sat 14 Jun 2025 16:00:30 +0000 Manifest this update: Sat 14 Jun 2025 16:00:30 +0000 Manifest next update: Sun 15 Jun 2025 16:00:30 +0000 Files and hashes: 1: 5llvGxY8qwxFqE7rEyYbZfGiKWI.crl (hash: xDMiHJQ6RZBUtOQ/k/X/PMZ7LwHQ0yI9pC1BqUgIlHg=) 2: EPrKtO_Wui_AIcoB1IjnBBpjTA0.roa (hash: Ns7k+bsMT28IYTUvIKM9gdNIwjEuXm0xT0/L3x28CpU=) 3: GSrzoMsqdrffXvz8XfRbb06cdoU.roa (hash: qO16W1LJUB1Sf5kzJO7kSt5JrIHbHWcZRaQOTtkSO+c=) 4: UY47b1nKTBymo-_2aL9oMC7vX38.roa (hash: bK73SZPBKj3iAjuEKmNGnIADIWNE9D/9YsMH7QmUlZ0=) 5: c9pIRKumzJnPv6L0_0S99z5-7Pw.roa (hash: JszoDngQwRDEsojUMs8/qjNo60rDhfYCdak0Z9nn2Bg=) 6: ffZavXQaQNIwwKVW84vxnOTS_2k.roa (hash: oA0RmBJXJ8Iaj/uIUokVdX89kZuQ0WJjVTCDBbmztv8=) 7: g7knCJ57jgLAS24rI4X3btb-M4c.roa (hash: 3UFtXY+vf3X8W6kWA8FvJJwhkGk4KqYw38fo24s58Sk=) 8: gFreThJqNlHPvyHQ79dnfJgTPWo.roa (hash: L3hMFyzcKxYUiA62qUifu4SJz3107QolnvNpa2edIOo=) 9: iwjx0AhvwxAf6vZnR0V70CNSj3k.roa (hash: s4vyo2AL6KEF6yGbsgdcSILxp1qahFdr2Um6ni3Nsz4=) 10: qZ2rbeeUwV9WnVFloyx-2WLLaic.roa (hash: PyKdiPPGb3idbj43k0xja1+Mj7fQbqPrKGkBwHfZq1c=) 11: tCNgCc7S1ewGtgMhWiXaNGTqwZ8.roa (hash: 0ar853JOpvsnmzIOleciC89u2nN3g3yWX8hEwIiz39U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6f:2b:cd:48:f9:6a:ea:09:49:b8:ee:0d:29:20:90:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962 Validity Not Before: Jun 14 16:00:30 2025 GMT Not After : Jun 15 16:00:30 2025 GMT Subject: CN=721c3a9903129c12b9c5f69af93f9c976e1b438c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8f:e0:ca:f6:ab:a7:2d:f5:80:fa:27:e4:b7: 08:3b:ee:e4:26:13:1a:90:08:92:60:e1:e8:9c:06: be:47:c8:41:15:35:ab:1a:ff:a5:58:31:f8:01:28: bd:9a:be:35:00:3b:a6:8d:e7:9e:95:02:56:c0:0e: 7a:00:3d:2b:d7:be:e8:26:40:14:6d:63:d5:de:e0: 30:f0:45:45:45:53:4a:6f:25:8d:cf:08:d5:1a:4a: 43:37:d9:76:0f:c6:20:f2:1d:4d:92:80:78:79:6b: 60:6e:66:bc:f0:a8:2e:61:de:ec:c4:0d:f3:5d:42: 3a:6f:a0:4d:f7:b6:e4:0c:2b:57:96:d0:72:c0:3b: f1:d6:49:24:d1:6d:da:4e:96:e3:ed:c5:40:1a:72: 83:0c:f7:af:b4:ff:47:44:2d:2e:36:b6:7e:fa:94: fd:c8:20:a9:d7:af:1d:66:15:ff:01:fb:cd:1b:b1: b4:0a:36:d8:cb:9c:1d:cb:d8:42:f8:dc:43:51:4b: 4c:c3:6c:08:1b:c4:47:f3:81:86:38:21:3a:81:e3: b1:25:58:31:71:32:23:00:4d:60:0d:63:d0:7d:ec: a1:7e:56:36:fa:f8:b0:76:61:cd:c0:9b:ed:5c:29: 2f:1c:28:1c:18:17:20:4c:c6:95:0f:3c:31:68:fa: 8b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1C:3A:99:03:12:9C:12:B9:C5:F6:9A:F9:3F:9C:97:6E:1B:43:8C X509v3 Authority Key Identifier: keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d2:fd:c9:fe:3e:e9:1c:d3:08:13:d6:46:c4:93:43:1b:51: 56:77:3e:7f:a1:29:a3:24:ff:81:33:81:f2:58:a0:90:49:a8: 51:07:3c:29:8b:ac:ae:33:01:44:3d:04:b0:5d:d0:79:b9:fe: a6:b4:e9:7d:6a:4b:40:58:0e:92:08:57:a2:47:3e:36:5f:a8: 09:54:d1:f1:7b:19:42:34:75:ef:4f:28:77:44:88:58:05:d7: b9:ad:99:39:68:8c:38:27:70:5c:33:75:9f:60:e3:a8:d0:57: 96:3c:10:0d:4f:99:16:88:a9:18:8b:08:07:df:65:08:30:0b: 29:f2:a6:23:2f:f7:f0:66:f9:7b:0d:dc:de:30:df:3e:c7:21: 68:37:b0:31:7d:21:6b:19:1f:a6:28:1a:fb:8e:22:08:0b:ff: c6:b0:4b:7b:71:4a:33:d5:e9:b4:b2:a6:fd:1f:fa:77:b7:e5: 0f:df:f6:3a:12:40:b0:01:93:96:f9:e5:99:21:29:a3:67:b9: 34:91:1f:dc:39:7a:fe:74:b9:fd:bc:9a:35:a5:21:3b:f1:0c: 67:07:59:32:67:c0:ff:79:b7:87:ca:4d:4f:c9:9c:db:9f:8c: 42:50:52:80:2b:d8:fd:00:50:94:f0:66:b1:52:5b:05:d1:41: a8:87:44:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdvK81I+WrqCUm47g0pIJCSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NTk2ZjFiMTYzY2FiMGM0NWE4NGVlYjEzMjYxYjY1ZjFh MjI5NjIwHhcNMjUwNjE0MTYwMDMwWhcNMjUwNjE1MTYwMDMwWjAzMTEwLwYDVQQD Eyg3MjFjM2E5OTAzMTI5YzEyYjljNWY2OWFmOTNmOWM5NzZlMWI0MzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY/gyvarpy31gPon5LcIO+7kJhMa kAiSYOHonAa+R8hBFTWrGv+lWDH4ASi9mr41ADumjeeelQJWwA56AD0r177oJkAU bWPV3uAw8EVFRVNKbyWNzwjVGkpDN9l2D8Yg8h1NkoB4eWtgbma88KguYd7sxA3z XUI6b6BN97bkDCtXltBywDvx1kkk0W3aTpbj7cVAGnKDDPevtP9HRC0uNrZ++pT9 yCCp168dZhX/AfvNG7G0CjbYy5wdy9hC+NxDUUtMw2wIG8RH84GGOCE6geOxJVgx cTIjAE1gDWPQfeyhflY2+viwdmHNwJvtXCkvHCgcGBcgTMaVDzwxaPqLUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHIcOpkDEpwSucX2mvk/nJduG0OMMB8GA1UdIwQY MBaAFOZZbxsWPKsMRahO6xMmG2XxoiliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMt ZTA1MzRlMjM4NTliLzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMtZTA1MzRlMjM4NTli LzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa9L9yf4+ 6RzTCBPWRsSTQxtRVnc+f6EpoyT/gTOB8ligkEmoUQc8KYusrjMBRD0EsF3Qebn+ prTpfWpLQFgOkghXokc+Nl+oCVTR8XsZQjR1708od0SIWAXXua2ZOWiMOCdwXDN1 n2DjqNBXljwQDU+ZFoipGIsIB99lCDALKfKmIy/38Gb5ew3c3jDfPschaDewMX0h axkfpiga+44iCAv/xrBLe3FKM9XptLKm/R/6d7flD9/2OhJAsAGTlvnlmSEpo2e5 NJEf3Dl6/nS5/byaNaUhO/EMZwdZMmfA/3m3h8pNT8mc25+MQlBSgCvY/QBQlPBm sVJbBdFBqIdE/A== -----END CERTIFICATE-----Generated at Sat Jun 14 23:52:57 2025 by rpki-client