$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft File: 1DdYFDRN8L9tAXczrNxIjwAmMbI.mft (raw, json) Hash identifier: da5eqfDDGuhcFvW88ACCfvQ5h9ip9fPkb/ajbRAAh5s= Subject key identifier: 7E:87:9C:A3:54:43:A3:AA:CC:7E:0E:0E:FB:3B:BD:73:A4:1C:D1:25 Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2 Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2 Certificate serial: 01976EBDCF5D1BB5E365E67873CB40030CD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft Manifest number: 15AB Signing time: Sat 14 Jun 2025 14:00:22 +0000 Manifest this update: Sat 14 Jun 2025 14:00:22 +0000 Manifest next update: Sun 15 Jun 2025 14:00:22 +0000 Files and hashes: 1: 1DdYFDRN8L9tAXczrNxIjwAmMbI.crl (hash: Pu5Q+TG8TVv2n4NSF1GN07HXTlPG8su3VcwntvTrEAE=) 2: Dx5FhBrZZELGzOEoOYjOQgEtqO0.roa (hash: KCgCEgctUS7Rpr5Y2lyKXbnXeeBrDbnuOsvXdWPfJZo=) 3: KQPVZjd8uXoJ_0dV4AjDeWiqQQI.roa (hash: 9hWXYGll9zn/YFmZU7mBxZ+s82nTPV++un3qIDJzhn0=) 4: LO-lQuCqbX-vzrEDWaS2yzD8HPo.roa (hash: 2Ab5VCBVIHwbJUy5TszPUSkoTaAoMm4DE4cVzWjji7Y=) 5: RNIC7mCPENX0iBKXNTIzci3mkX4.roa (hash: A50pnUKiWPzKeEOP7HAPInfDXRQ8D20n1h9JK0jOgX4=) 6: atn5vU-LUDLVuG9_jCJwAEGbEYc.roa (hash: Se1mBbI1MkbJDFobm6H8aQSyPPadkVuTf7O6JGFke8o=) 7: brY4nnZyBTnIJY3z6C6ymKubOY0.roa (hash: pc5OYc6oXnHxBvDdnE06MSd2CPJ6fIkq22aelBFfNl8=) 8: e6SEtk0abHJpIIPSZrkKDZg95R0.roa (hash: kM/7bJruXzijo8AO7ozJ/bVJBpuUfOvwamojNF2t4fk=) 9: seE_QBv0ygPjzgaL3rSesYLY_0A.roa (hash: a0LlQt6AmApHnlV4lK2J/7kzRpmbLO4Rryqmz0kEEGc=) 10: smSXSjOqkSm8yhu8ksysc8GRhzQ.roa (hash: Jq/+rwvgSdEvWUi01IBzdtKDZwEjK2lpfqbnsHzjr3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6e:bd:cf:5d:1b:b5:e3:65:e6:78:73:cb:40:03:0c:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2 Validity Not Before: Jun 14 14:00:22 2025 GMT Not After : Jun 15 14:00:22 2025 GMT Subject: CN=7e879ca35443a3aacc7e0e0efb3bbd73a41cd125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f9:95:27:e2:9b:88:ed:ee:ee:d5:91:4a:b0: 49:ea:4e:ff:7f:d6:fa:11:ca:80:86:70:21:ac:d7: 04:e7:51:f7:ec:c3:24:13:a0:28:c7:f9:26:17:8a: cf:90:03:e4:3a:42:34:c6:32:58:b4:3f:a1:22:ed: c3:5c:ad:b6:72:9f:b1:1e:1f:e3:47:e9:9e:a4:36: af:51:42:89:ac:eb:ba:d3:3e:e3:67:17:0c:e9:59: 6f:fe:00:30:84:ab:a9:98:b6:62:6f:45:eb:f4:88: 24:46:70:af:73:85:81:a3:04:c6:eb:22:11:5b:f0: 31:37:91:37:d7:41:d2:59:32:f5:f8:12:e9:42:38: 3d:35:a0:78:57:e6:25:bd:12:49:46:26:78:8b:7c: 73:a3:69:17:a7:dc:0b:57:95:00:7c:34:ce:f1:71: ed:18:ad:4f:0b:6a:67:12:dd:0e:e6:c9:ac:8a:d1: 8b:85:98:f8:14:8f:eb:60:32:f1:54:77:28:2d:e7: 7b:71:28:32:63:d4:f1:5f:d7:04:06:40:5b:cf:e9: e5:d7:ab:4e:57:47:9c:63:0d:ad:9c:39:32:ca:7c: 78:a2:db:4c:10:a9:80:4e:03:d5:c1:05:e4:72:67: 55:c7:63:37:48:b5:19:27:5d:80:d9:82:9e:8b:d1: 6b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:87:9C:A3:54:43:A3:AA:CC:7E:0E:0E:FB:3B:BD:73:A4:1C:D1:25 X509v3 Authority Key Identifier: keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:6b:98:69:58:e1:a3:0e:fe:60:48:f5:cb:df:7a:69:88:0d: 9f:db:96:b7:40:2c:21:fc:5c:1c:77:13:81:39:c9:db:40:10: 7e:fe:d9:ac:01:bb:d4:5e:c2:0f:f3:e8:61:f7:06:9c:50:df: 3e:9d:e0:e5:a1:1e:bd:d5:ae:b8:0a:ec:fe:3d:5d:36:12:e5: b7:c0:f4:d8:c3:aa:65:98:f0:9d:c2:fc:21:b3:42:46:5d:e8: c4:59:75:29:7b:d1:68:58:a9:f3:15:03:1c:db:70:01:ce:fd: ac:b0:c1:d5:9e:68:dc:b2:91:6e:78:12:11:55:fb:6b:40:68: 1e:1c:aa:af:3b:2d:be:7e:ee:00:ae:c4:63:9d:bf:9d:76:06: a5:a3:27:a5:c2:ad:04:da:88:51:b0:b9:91:78:eb:00:11:6a: 54:a5:e8:fd:c1:7c:c4:57:fc:80:7a:c6:1b:14:b6:1b:34:7c: 03:21:a4:c0:d5:d2:5d:99:9b:eb:0d:04:8e:7a:ab:b6:f2:d8: 31:a3:0b:60:56:a9:3c:60:a6:d8:cd:27:4c:c7:89:70:09:b2: b3:e3:43:39:1b:1f:c2:87:dd:ab:09:7f:20:f7:d7:ae:fb:ca: d2:8d:e0:93:92:bb:81:85:be:69:04:55:2b:15:8a:d4:30:81: 73:5e:f2:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZduvc9dG7XjZeZ4c8tAAwzZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Mzc1ODE0MzQ0ZGYwYmY2ZDAxNzczM2FjZGM0ODhmMDAy NjMxYjIwHhcNMjUwNjE0MTQwMDIyWhcNMjUwNjE1MTQwMDIyWjAzMTEwLwYDVQQD Eyg3ZTg3OWNhMzU0NDNhM2FhY2M3ZTBlMGVmYjNiYmQ3M2E0MWNkMTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/mVJ+KbiO3u7tWRSrBJ6k7/f9b6 EcqAhnAhrNcE51H37MMkE6Aox/kmF4rPkAPkOkI0xjJYtD+hIu3DXK22cp+xHh/j R+mepDavUUKJrOu60z7jZxcM6Vlv/gAwhKupmLZib0Xr9IgkRnCvc4WBowTG6yIR W/AxN5E310HSWTL1+BLpQjg9NaB4V+YlvRJJRiZ4i3xzo2kXp9wLV5UAfDTO8XHt GK1PC2pnEt0O5smsitGLhZj4FI/rYDLxVHcoLed7cSgyY9TxX9cEBkBbz+nl16tO V0ecYw2tnDkyynx4ottMEKmATgPVwQXkcmdVx2M3SLUZJ12A2YKei9FrgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6HnKNUQ6OqzH4ODvs7vXOkHNElMB8GA1UdIwQY MBaAFNQ3WBQ0TfC/bQF3M6zcSI8AJjGyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iMjRiMmQtMzUyMy00MjJlLTliY2Yt MzY3MWQ2N2ViOWY4LzEvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9iMjRiMmQtMzUyMy00MjJlLTliY2YtMzY3MWQ2N2ViOWY4 LzEvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmGuYaVjh ow7+YEj1y996aYgNn9uWt0AsIfxcHHcTgTnJ20AQfv7ZrAG71F7CD/PoYfcGnFDf Pp3g5aEevdWuuArs/j1dNhLlt8D02MOqZZjwncL8IbNCRl3oxFl1KXvRaFip8xUD HNtwAc79rLDB1Z5o3LKRbngSEVX7a0BoHhyqrzstvn7uAK7EY52/nXYGpaMnpcKt BNqIUbC5kXjrABFqVKXo/cF8xFf8gHrGGxS2GzR8AyGkwNXSXZmb6w0EjnqrtvLY MaMLYFapPGCm2M0nTMeJcAmys+NDORsfwofdqwl/IPfXrvvK0o3gk5K7gYW+aQRV KxWK1DCBc17yug== -----END CERTIFICATE-----Generated at Sat Jun 14 20:46:22 2025 by rpki-client