$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft File: sLWoCnEG4KS4VFyBULtyxpn8yaA.mft (raw, json) Hash identifier: ZLVxHawXhczqv/r6zG4LSbPzklvd2y1yJVBbDKpQnkY= Subject key identifier: 82:D0:A5:66:E6:CF:0E:47:6C:F0:B6:4E:90:BF:87:6E:FA:69:54:A2 Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0 Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0 Certificate serial: 0197801F6004A65E8D7CBC712582133B087B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft Manifest number: 15B6 Signing time: Tue 17 Jun 2025 23:00:29 +0000 Manifest this update: Tue 17 Jun 2025 23:00:29 +0000 Manifest next update: Wed 18 Jun 2025 23:00:29 +0000 Files and hashes: 1: 60jG5Ay8pKNRLAaYiabGAbMAWcU.roa (hash: mGDjXdclRD6cM00fzezmu8njPZGu0i86EMmzQCWdsaI=) 2: 8NknCKB4mqEufbZ6UbHgAa8xKGk.roa (hash: +VuXhmjH2zdhVZOeQIf+1XfhIBEvtUJA5CNUFP6jbIc=) 3: Cwb1KDzjyZP06ERQCkOqE8eDn-Q.roa (hash: qEbiLSfggbr/wcV1CfVb4G8sOcwZPVPdEo2xFZT7GWw=) 4: M4GvrNf8uqUm8NINVMsgeY-dZpg.roa (hash: JFzR2ZsY7nrJvXYkxcf00jQkDAoE9ASXG53ZH1eILBw=) 5: XXx0PZbW0VSnHcKqWvct0KGeX5o.roa (hash: fg2kYbNMaJFsDmSVzEYMa+3owPgOnqiysynI+fCXGgg=) 6: XqyfpygCBb8Q3tIPPqdoPK94M0A.roa (hash: 2VTgMTAP00AWrF9/qszpE/dPLTmJ6fjO0h7TyCaHdtE=) 7: d5wYN4sqYmgKKKUN9X-8jp9PKTs.roa (hash: /7Xb7BgMP/VziPk4Q/U+uMUdmAyttT7O93i5sL6urDU=) 8: i1CU3OfnjKON64QGCajnRU5gSS0.roa (hash: YY36Gemk4OiepX/UrPW7HzLvQewBOeW3gkIiItZgQz8=) 9: jU-enqBlwHSK5LFQUkQMv3mnQ3c.roa (hash: XGjlZdDrp7Q05Es+vT4dQhjxGrAgZ9KHZykl/3VpHuk=) 10: rgPd-lPBT_KjoGNurNCPr8-tYLM.roa (hash: 7UFfmlghHed6gv5YUhlj2bi7/Km6EbVr9jqYqXUYH8o=) 11: sLWoCnEG4KS4VFyBULtyxpn8yaA.crl (hash: MZ+XLbuFZiTu/2to/yrq3zU7+8R4TNQXwDGmDCBnNkw=) 12: uYQNZGrXH6jilfHVW7M6-uKjZF8.roa (hash: K7dbhIw3GKL8CpYsfdoECZtVDjcGxNIlpZxMSzxg0fc=) 13: zad7TKoNmHhoc0CyHOzgSXKr6f4.roa (hash: LQ6zogTRTgGoz9vqyWdA5yZND4PDb2ytjo7mWtS7rF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 18 Jun 2025 22:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:80:1f:60:04:a6:5e:8d:7c:bc:71:25:82:13:3b:08:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0 Validity Not Before: Jun 17 23:00:29 2025 GMT Not After : Jun 18 23:00:29 2025 GMT Subject: CN=82d0a566e6cf0e476cf0b64e90bf876efa6954a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9a:1e:c7:df:db:83:ca:74:8d:89:c0:65:18: 1d:07:19:32:84:aa:93:ad:0a:d8:93:b1:3b:53:a4: c6:ec:e1:dc:b3:9a:4f:e9:f6:83:32:8d:3f:f9:c7: 91:b3:a6:9f:3c:13:9b:9e:14:30:3e:9c:95:03:3f: 25:66:c1:68:2b:7e:3e:da:2e:6a:29:a5:6b:5a:0c: f7:cf:ca:e6:a2:5f:7f:fc:d3:f0:17:60:1b:20:26: 2c:d0:a5:de:d7:59:d7:0a:3a:97:de:b3:41:20:03: d7:9f:7b:0a:63:c7:8a:d9:3c:f1:67:93:6d:b7:b0: cf:bc:e6:31:59:14:68:d8:55:7d:fe:1f:fa:dd:28: b9:d7:8f:22:b7:a8:a6:a5:59:63:8d:1f:9b:04:f8: d0:af:f1:4e:df:f8:68:45:57:cf:e5:0f:65:b6:d3: 4c:56:5a:e2:ab:47:5e:9e:06:4a:0d:66:f5:83:43: 0b:68:51:c7:12:e6:ab:1b:95:1f:55:ac:7c:f2:2e: 51:a9:74:70:bd:25:df:82:ec:96:b6:b6:e0:ec:01: a9:d3:51:d3:9e:c7:5d:d7:1d:4a:31:17:e7:86:27: 3a:ff:a4:0a:74:07:38:ba:69:17:0c:ae:61:f2:10: 3b:25:bf:48:37:6b:f3:27:80:07:31:05:79:37:97: 9c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D0:A5:66:E6:CF:0E:47:6C:F0:B6:4E:90:BF:87:6E:FA:69:54:A2 X509v3 Authority Key Identifier: keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:85:0f:d8:c0:e8:be:08:8d:c0:5f:8e:59:71:54:9b:9a:16: 32:ec:d2:1d:2b:85:70:d6:78:65:81:c6:3c:0d:91:ae:79:be: 44:f3:19:e0:19:00:71:24:c5:02:95:be:fc:b3:f5:f1:ea:c7: e0:53:a4:47:7f:d2:dc:81:7f:eb:b8:5e:23:25:c0:3b:18:4a: 8c:28:7b:52:4a:4e:3f:05:b2:47:99:32:c5:20:3b:bd:d5:be: 79:e4:72:4f:41:e4:97:5e:ba:7d:d1:10:67:b6:e3:86:58:bb: 57:a3:ce:6a:c9:8a:94:f8:b0:3f:8f:d8:39:4b:73:1e:fe:31: cb:90:bc:1a:07:b0:b6:5c:a1:9c:e8:5b:60:00:a1:52:02:3b: 75:9b:4f:61:d2:89:63:10:7c:f6:8c:8a:8b:48:d9:b5:69:7f: df:87:de:7e:f9:3d:92:e4:ff:7d:52:46:6e:fe:ce:cc:62:da: 93:36:fb:0e:2e:a7:5e:22:66:ae:95:e6:0c:b1:43:7e:7b:af: 1b:d3:fb:39:ec:62:c5:bc:5b:c3:03:aa:e9:0c:fd:68:59:44: 62:c7:df:dd:19:ad:66:aa:5b:83:bb:83:65:95:bf:01:57:87: df:be:0e:e9:c4:83:39:24:98:cc:3c:bb:6d:c9:6a:46:14:60: 4e:a9:c7:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZeAH2AEpl6NfLxxJYITOwh7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYjVhODBhNzEwNmUwYTRiODU0NWM4MTUwYmI3MmM2OTlm Y2M5YTAwHhcNMjUwNjE3MjMwMDI5WhcNMjUwNjE4MjMwMDI5WjAzMTEwLwYDVQQD Eyg4MmQwYTU2NmU2Y2YwZTQ3NmNmMGI2NGU5MGJmODc2ZWZhNjk1NGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJoex9/bg8p0jYnAZRgdBxkyhKqT rQrYk7E7U6TG7OHcs5pP6faDMo0/+ceRs6afPBObnhQwPpyVAz8lZsFoK34+2i5q KaVrWgz3z8rmol9//NPwF2AbICYs0KXe11nXCjqX3rNBIAPXn3sKY8eK2TzxZ5Nt t7DPvOYxWRRo2FV9/h/63Si5148it6impVljjR+bBPjQr/FO3/hoRVfP5Q9lttNM Vlriq0dengZKDWb1g0MLaFHHEuarG5UfVax88i5RqXRwvSXfguyWtrbg7AGp01HT nsdd1x1KMRfnhic6/6QKdAc4umkXDK5h8hA7Jb9IN2vzJ4AHMQV5N5ec1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILQpWbmzw5HbPC2TpC/h276aVSiMB8GA1UdIwQY MBaAFLC1qApxBuCkuFRcgVC7csaZ/MmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDIt NzQ1ZTA4ZmU1OGM2LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDItNzQ1ZTA4ZmU1OGM2 LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApoUP2MDo vgiNwF+OWXFUm5oWMuzSHSuFcNZ4ZYHGPA2Rrnm+RPMZ4BkAcSTFApW+/LP18erH 4FOkR3/S3IF/67heIyXAOxhKjCh7UkpOPwWyR5kyxSA7vdW+eeRyT0Hkl166fdEQ Z7bjhli7V6POasmKlPiwP4/YOUtzHv4xy5C8GgewtlyhnOhbYAChUgI7dZtPYdKJ YxB89oyKi0jZtWl/34fefvk9kuT/fVJGbv7OzGLakzb7Di6nXiJmrpXmDLFDfnuv G9P7OexixbxbwwOq6Qz9aFlEYsff3RmtZqpbg7uDZZW/AVeH374O6cSDOSSYzDy7 bclqRhRgTqnHjw== -----END CERTIFICATE-----Generated at Wed Jun 18 02:36:44 2025 by rpki-client