$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft File: h3itgWjgnPktTgSYJX-OnOq_BpI.mft (raw, json) Hash identifier: wQLC3iVFZSFOkT8VJ+a27Fd7ALNtB+YS11THrRsvV0I= Subject key identifier: A2:1F:7B:64:E2:2C:A5:FC:3B:83:61:FC:69:06:7A:99:75:50:75:68 Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Certificate serial: 019774F7F46EC7808371F36FF7D68D090DE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft Manifest number: 15B0 Signing time: Sun 15 Jun 2025 19:01:36 +0000 Manifest this update: Sun 15 Jun 2025 19:01:36 +0000 Manifest next update: Mon 16 Jun 2025 19:01:36 +0000 Files and hashes: 1: 3VQFHIG_0NRiYGSMTzNDYelPmMs.roa (hash: T8N7lYcGBn0m7uBQBcevnqsWbvysQD6cxVHO1RDwUvg=) 2: 41kwTSa8H9b9pjrkUzwf85FQ470.roa (hash: 6DgsyUX2uyntOPFl8yDMIgTXXXs0mzyQ219673BzCzU=) 3: CdQNI5gcW0_1cf24cLvP-tL_omw.roa (hash: fyArCRfx7SbzhmzmpSevkzJflw0c7SkqK2TimwbjqzM=) 4: RXJMzhMtehSuCCi6uqljNw1_L-s.roa (hash: Xot9S/JUju+/cZl9baS7ZUR4Rh18U5S5qk4hiX6txpg=) 5: TpqMtUwJukfz53BZIUdbM-kP9dU.roa (hash: sJ+1FquCHUKBx1oFow8K9ca95AgoJ61IjnusPLlcDN8=) 6: WEKuOaRTTX2rTln9asflqP9Y2Os.roa (hash: EcqtEEKcbvmbmPvboEcXGauHM+e7HHmS4JSP0Le2t4o=) 7: XmOvv05xULfAWuDqrX7juNO-0qI.roa (hash: eJeMTOSpJLyqSZNQmSL2OZUvlINOSkmPnV9aTneLjHg=) 8: Xzib8AfEYqY2cHmuuM-ww_w5sW0.roa (hash: 6XHRFIs5VNl1aw2+x8Rz4IQniQIfYw9CyiplPPtk5bE=) 9: aMv6gEqWxpGKwwWm6t5nV_iaM3Q.roa (hash: +a48j1hsLG2vzEIY2MRVBswlr1+jm51V+Dk+4EhL/9Y=) 10: h3itgWjgnPktTgSYJX-OnOq_BpI.crl (hash: 7Uca5dNhp+/m7RLlIogNcP8h9xOtQ11Mwo4q6GSfCZ4=) 11: jF6aKXBNyHTawjaz9GVexS6_Vps.roa (hash: FiDTfOMoZak8gOhtJT/8yhL0tIdZjUn13AvzOxfMN0E=) 12: s6XbpS6zvG-OGcqP78qsGOOoOlQ.roa (hash: vai/46FuXyssCtnAk+MIcYY2mUqRBxwISqAf2lFmzsg=) 13: vsuobB7Q7M7H0d2b7icsBX46rF8.roa (hash: 7WzZ613I/LXa4Zefx9tEqY2ZhSRre3hj1QC98fA5RuY=) 14: xP11eIeQX9x-FJdxDPaYbALauGA.roa (hash: X/B/3lK+XxCa5BQgDlvPLTFtIiO9rYw/6L5OCGSXKQE=) 15: xT7aM3kUy4b46Qb4CAkkSam9t5g.roa (hash: Rfd0mKt9HyiAqh5+s2geHZ1SUFHa0fSNkwoTUgmAYpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 19:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:74:f7:f4:6e:c7:80:83:71:f3:6f:f7:d6:8d:09:0d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Validity Not Before: Jun 15 19:01:36 2025 GMT Not After : Jun 16 19:01:36 2025 GMT Subject: CN=a21f7b64e22ca5fc3b8361fc69067a9975507568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fb:d8:fb:8e:4d:8a:71:83:0c:ab:3e:b9:b7: a5:cc:8c:72:2c:fc:63:bf:52:ba:6b:ab:75:59:da: 88:e2:b6:f3:8e:72:56:13:0a:34:1f:d6:40:d8:fc: 23:ce:7f:3d:67:d7:76:4b:0d:96:e5:6e:08:14:12: 0b:ef:ad:81:80:b7:60:dd:ca:ab:a4:3a:fa:7b:52: a2:98:5a:3f:42:6d:91:2d:77:37:61:54:22:18:8a: 8e:9d:da:52:36:d6:f0:ed:d7:84:72:d2:19:cd:ba: 64:07:86:4e:61:dc:cb:9a:65:3f:99:30:6c:19:6f: bb:0d:4a:f8:77:55:0a:c6:ba:c5:bc:1a:17:3e:b1: 5d:86:24:b1:35:e1:a3:ce:7a:1c:2a:82:30:fc:08: 75:50:dd:ac:42:d3:15:49:8a:04:56:e0:4c:67:1a: d1:1c:f8:fb:ab:46:b2:52:72:c9:e9:43:3d:f9:b2: f0:fa:b8:6e:9f:97:fb:d2:27:ff:7d:7b:b3:4a:eb: 90:67:5e:30:be:22:7c:71:b5:a5:a1:9f:82:d1:38: df:ea:d8:e6:72:4b:e9:96:7f:65:37:5c:4a:39:22: ed:47:1b:30:3e:8a:b2:55:bc:fd:4a:0a:95:24:a8: 81:ed:cb:58:18:fc:3a:95:f0:97:a1:b2:46:0f:f9: ec:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1F:7B:64:E2:2C:A5:FC:3B:83:61:FC:69:06:7A:99:75:50:75:68 X509v3 Authority Key Identifier: keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:bf:db:07:f2:d3:ff:2b:7d:fe:e7:42:39:fc:0f:e8:1f:ed: 07:17:2a:91:0b:19:e2:b4:4a:80:a7:a9:80:25:27:2b:96:02: 4a:d3:07:de:43:66:57:ff:eb:10:1d:7f:61:8d:e6:84:15:45: ef:b0:c1:03:d9:9e:f8:b9:5f:93:8f:5c:60:d3:31:fb:74:59: 21:cf:14:b6:a1:5a:f8:4e:30:d8:d3:51:90:67:b6:1d:d4:bc: 84:3a:6e:a2:ed:9b:96:9c:6d:d1:06:1d:f6:c7:f1:fe:7c:e4: 52:d5:5b:d9:bf:dc:75:6a:56:b8:be:82:06:40:93:57:c9:7e: 1c:f4:4e:6a:a9:1b:7e:2f:ec:2d:96:f7:9b:63:43:11:da:bc: ed:7d:c9:55:e8:7b:82:81:ca:16:dd:29:a8:7f:38:a2:43:56: ad:4d:e1:7d:c1:07:0a:64:80:17:6c:21:53:1a:f0:44:75:86: 6c:97:d4:6e:fa:ab:4d:85:6e:be:c2:6d:fd:8d:d2:25:ee:29: 0f:96:39:06:01:e9:87:00:af:63:21:1f:0f:01:4a:ee:47:16: 56:40:38:6f:c5:ed:40:e5:3f:06:e5:04:c2:2b:19:3e:76:43: 38:06:af:9d:9d:80:25:fa:4f:9e:e5:2c:f6:cb:b6:a4:55:23: 4b:e1:31:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd09/Rux4CDcfNv99aNCQ3mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzhhZDgxNjhlMDljZjkyZDRlMDQ5ODI1N2Y4ZTljZWFi ZjA2OTIwHhcNMjUwNjE1MTkwMTM2WhcNMjUwNjE2MTkwMTM2WjAzMTEwLwYDVQQD EyhhMjFmN2I2NGUyMmNhNWZjM2I4MzYxZmM2OTA2N2E5OTc1NTA3NTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvvY+45NinGDDKs+ubelzIxyLPxj v1K6a6t1WdqI4rbzjnJWEwo0H9ZA2Pwjzn89Z9d2Sw2W5W4IFBIL762BgLdg3cqr pDr6e1KimFo/Qm2RLXc3YVQiGIqOndpSNtbw7deEctIZzbpkB4ZOYdzLmmU/mTBs GW+7DUr4d1UKxrrFvBoXPrFdhiSxNeGjznocKoIw/Ah1UN2sQtMVSYoEVuBMZxrR HPj7q0ayUnLJ6UM9+bLw+rhun5f70if/fXuzSuuQZ14wviJ8cbWloZ+C0Tjf6tjm ckvpln9lN1xKOSLtRxswPoqyVbz9SgqVJKiB7ctYGPw6lfCXobJGD/ns5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIfe2TiLKX8O4Nh/GkGepl1UHVoMB8GA1UdIwQY MBaAFId4rYFo4Jz5LU4EmCV/jpzqvwaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAt YWE5ZDY5MTgxMWU3LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAtYWE5ZDY5MTgxMWU3 LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7/bB/LT /yt9/udCOfwP6B/tBxcqkQsZ4rRKgKepgCUnK5YCStMH3kNmV//rEB1/YY3mhBVF 77DBA9me+Llfk49cYNMx+3RZIc8UtqFa+E4w2NNRkGe2HdS8hDpuou2blpxt0QYd 9sfx/nzkUtVb2b/cdWpWuL6CBkCTV8l+HPROaqkbfi/sLZb3m2NDEdq87X3JVeh7 goHKFt0pqH84okNWrU3hfcEHCmSAF2whUxrwRHWGbJfUbvqrTYVuvsJt/Y3SJe4p D5Y5BgHphwCvYyEfDwFK7kcWVkA4b8XtQOU/BuUEwisZPnZDOAavnZ2AJfpPnuUs 9su2pFUjS+Ex3g== -----END CERTIFICATE-----Generated at Mon Jun 16 04:53:21 2025 by rpki-client