$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft File: bOl89NjQvBezrx1ixNcUiGYb0hI.mft (raw, json) Hash identifier: Jo0u6BTVkgn/LqtkyKbCPQ72Ei4e5HDHP4BTFQIyDiM= Subject key identifier: 01:42:50:4B:3F:F2:33:F9:99:CE:91:26:A9:73:83:DE:31:68:89:10 Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Certificate serial: 01976696F0FF04F60455B247C3BDC0822C6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft Manifest number: 1596 Signing time: Fri 13 Jun 2025 00:00:57 +0000 Manifest this update: Fri 13 Jun 2025 00:00:57 +0000 Manifest next update: Sat 14 Jun 2025 00:00:57 +0000 Files and hashes: 1: Af8LoP7Lc3Ri1EjEl2aPSimN8N8.roa (hash: K3jq+ZPDX3ZWFw5k3Zz+FhB98xNgrxje9TzL4q7xQ84=) 2: F2A4Y0MrgEztwlWitJZvMyHSYcU.roa (hash: w50mpPDFrcclMXuIaVxZ4+xtSUk5AU18fPWu5EoX+LA=) 3: HDwNTyOMXjdcFIbI5Dg8ZGceIPc.roa (hash: xGqkyX+qZQ75xb5Nb+DtuxrBcbMbXYywOv/jqNzFE9U=) 4: J1CKtsXx9r_LHHrlYsJGTJF509U.roa (hash: Wy6xl+FAMDx5u89yFxnteVYqnAsEeBLLKMZFfJdUW6I=) 5: Uh2lETEq8E5x-jAu-VnjQrM5VGg.roa (hash: SoBuut5hx6X/4eMmfxkxmJvGDUdRqdsnwXxbmDCgQsE=) 6: XJb3trIMR2o2CfWTOuYiqHcFzws.roa (hash: BRkLNlJqve/L2aNsuMJ+5pqTXL5/kYQCmhET9weR1yA=) 7: YY5vnq-WY3ttKAPBwWUwZDNoZ94.roa (hash: otf25hemgRYV3JPKjRYvJ8q5HrlB5I1ctES0TPSG1ck=) 8: Z48A1_I47mYSHVTo4XpKWd1w_wY.roa (hash: NvJ6V/CehduL5Zgko7xVcI92EacH0CBv0m1gyVIWLQM=) 9: _sq0c5GTAFHDkK0kB1xS-FJEkxE.roa (hash: 0/aQ7T6vcLRIStkXpDsfCFlQb8OkLcG1wf2/+Q//xZk=) 10: bOl89NjQvBezrx1ixNcUiGYb0hI.crl (hash: rcGOsfXhtNhEDKgusyXDv6qgtJMVQI2dk61kj6cyxmw=) 11: bgndW0CmBQuiHxQFDGV1p4kfQ0w.roa (hash: 69wNM6Nj33ysdv0n+TRiRf/aZRUnSe2bA4XmQXvr6Ug=) 12: nRXz0JWuVzTuqgJJowbVl480fPU.roa (hash: 8yilskVPxe2I/+785iQCSlJBQxLK7FQ+9fHJRaIbBIk=) 13: ok2coLlZfCNf012-KQnTYpk7lZE.roa (hash: jPQ1+YObpchvAlB5pc4INo3tzPPIYQQgACezxT56CVQ=) 14: whbNPX7xpImhIktrpipKoQzAFZo.roa (hash: Jtvnk0ncEqCQ/ZQ9F0sCk3O4UoG6D0dlD2s9B3IWjbk=) 15: y2chyLi0MiNw5kPgCGuG_lAJm6E.roa (hash: aBY4sS6r8TuI74TUuwhLmDR0B3e0KyzhgW6eBiCSGXY=) 16: yCCs4shbMfXFkRbB-dbVm3aK1dE.roa (hash: ERGKfWwqWpDoNIV4hNRq6bDPGoH2AztZvrPKQ4MnRxU=) 17: yqrbohxedJqZYRfOM_ZbeFgbUDk.roa (hash: 5D+jOOYzSjHZwRxIJ5GcJlLwrz/EOLrzaFXp3+Dosvg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Jun 2025 22:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:66:96:f0:ff:04:f6:04:55:b2:47:c3:bd:c0:82:2c:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Validity Not Before: Jun 13 00:00:57 2025 GMT Not After : Jun 14 00:00:57 2025 GMT Subject: CN=0142504b3ff233f999ce9126a97383de31688910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5b:76:42:4f:00:40:e5:65:3d:41:23:63:f8: 95:59:df:13:58:99:e2:41:e8:9c:5f:f8:7f:47:35: 08:af:91:37:bd:ce:5e:df:39:88:88:81:c4:44:15: 02:0b:af:08:3b:f0:16:5a:a7:22:fc:22:f0:7e:c3: ac:ff:c6:d2:67:b5:29:12:d6:23:ec:bb:a9:c0:86: 3a:c6:55:d0:a6:13:07:73:a2:c9:97:48:dd:6a:0f: f2:19:ed:83:4e:3c:15:d9:8b:98:59:40:d6:18:cd: f4:cf:25:a1:81:06:47:ab:31:a8:68:19:fd:b6:cd: af:36:24:70:29:b5:f3:cd:22:7f:fc:37:49:07:ef: 44:10:a1:73:af:04:52:33:d5:37:55:aa:75:3a:35: dd:66:10:d5:de:7e:b8:ad:8c:ec:76:3a:fa:56:ae: e1:ea:5a:80:ed:fc:35:fe:60:a1:69:17:91:91:6a: d0:b7:fc:08:82:7d:74:fa:f8:0d:38:04:72:8e:84: 36:72:79:da:9f:b6:f5:12:3a:a2:75:9f:66:27:72: 6a:01:b4:dc:eb:cc:f2:80:16:7f:9e:f3:93:79:c6: 61:cf:05:03:a8:59:81:6e:9f:88:5d:1c:b0:48:af: 7e:06:52:44:34:0b:7d:b6:0d:ef:83:5e:5b:89:7a: c7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:42:50:4B:3F:F2:33:F9:99:CE:91:26:A9:73:83:DE:31:68:89:10 X509v3 Authority Key Identifier: keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:40:39:f0:04:d3:9d:59:2c:0c:37:e9:98:6f:20:55:ca:4e: 45:ed:96:16:cd:db:eb:50:44:c1:ec:5b:ea:aa:0e:71:27:e8: e3:78:f2:b2:ec:36:c3:e3:0e:1c:24:d2:70:b6:0f:61:64:b6: 3b:75:b1:c1:fe:ad:db:0d:80:1c:ca:23:40:e7:b4:ee:6a:da: ce:52:ac:f6:d4:35:40:af:4e:ea:e9:70:38:73:a8:a1:37:02: 6f:8d:4a:30:3f:39:e3:af:37:61:e1:0b:e1:ec:fb:58:ca:0b: d2:ba:f5:0e:43:55:d3:1e:12:2c:c8:88:34:25:3c:63:5a:17: 1f:9d:7a:4c:67:d4:e9:ed:b0:99:88:e5:15:70:c7:d4:48:b0: 51:81:2a:a1:66:35:b2:da:fa:fc:71:0a:2e:25:3d:e2:30:80: b4:f9:b0:4f:bb:a0:36:e8:33:fe:88:06:5c:69:22:20:b6:b7: c6:99:ef:a3:0a:13:25:b1:ed:73:72:5b:7b:00:f7:21:50:39: e8:2b:67:68:5a:e5:d4:c8:ff:81:f2:36:d1:29:da:ea:6a:16: b3:c4:b6:ac:18:47:cb:2a:53:9e:d8:c3:1e:df:0a:82:e6:69: 47:4e:aa:01:36:6f:c1:a5:db:1f:e3:ce:84:f2:3e:4b:da:ae: 5c:ab:df:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdmlvD/BPYEVbJHw73AgixqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZTk3Y2Y0ZDhkMGJjMTdiM2FmMWQ2MmM0ZDcxNDg4NjYx YmQyMTIwHhcNMjUwNjEzMDAwMDU3WhcNMjUwNjE0MDAwMDU3WjAzMTEwLwYDVQQD EygwMTQyNTA0YjNmZjIzM2Y5OTljZTkxMjZhOTczODNkZTMxNjg4OTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11t2Qk8AQOVlPUEjY/iVWd8TWJni QeicX/h/RzUIr5E3vc5e3zmIiIHERBUCC68IO/AWWqci/CLwfsOs/8bSZ7UpEtYj 7LupwIY6xlXQphMHc6LJl0jdag/yGe2DTjwV2YuYWUDWGM30zyWhgQZHqzGoaBn9 ts2vNiRwKbXzzSJ//DdJB+9EEKFzrwRSM9U3Vap1OjXdZhDV3n64rYzsdjr6Vq7h 6lqA7fw1/mChaReRkWrQt/wIgn10+vgNOARyjoQ2cnnan7b1EjqidZ9mJ3JqAbTc 68zygBZ/nvOTecZhzwUDqFmBbp+IXRywSK9+BlJENAt9tg3vg15biXrHRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFCUEs/8jP5mc6RJqlzg94xaIkQMB8GA1UdIwQY MBaAFGzpfPTY0LwXs68dYsTXFIhmG9ISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMt Mzk5M2FhMzI0ZTFmLzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMtMzk5M2FhMzI0ZTFm LzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARUA58ATT nVksDDfpmG8gVcpORe2WFs3b61BEwexb6qoOcSfo43jysuw2w+MOHCTScLYPYWS2 O3Wxwf6t2w2AHMojQOe07mrazlKs9tQ1QK9O6ulwOHOooTcCb41KMD854683YeEL 4ez7WMoL0rr1DkNV0x4SLMiINCU8Y1oXH516TGfU6e2wmYjlFXDH1EiwUYEqoWY1 str6/HEKLiU94jCAtPmwT7ugNugz/ogGXGkiILa3xpnvowoTJbHtc3JbewD3IVA5 6CtnaFrl1Mj/gfI20Sna6moWs8S2rBhHyypTntjDHt8KguZpR06qATZvwaXbH+PO hPI+S9quXKvfag== -----END CERTIFICATE-----Generated at Fri Jun 13 06:33:15 2025 by rpki-client