$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft File: snJh1xU0i_1zzp27ckiGVpk7ovE.mft (raw, json) Hash identifier: ZGGGGyLdD26Lty3MuszMEADo3wzU3IUgC7xYWgeu5+I= Subject key identifier: DB:33:B6:D0:A0:E0:B4:FD:86:E2:76:3D:8F:F5:00:94:79:B0:E5:8F Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Certificate serial: 0197887D8B9724452AC580C1CC01CC41C464 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft Manifest number: 10CA Signing time: Thu 19 Jun 2025 14:00:18 +0000 Manifest this update: Thu 19 Jun 2025 14:00:18 +0000 Manifest next update: Fri 20 Jun 2025 14:00:18 +0000 Files and hashes: 1: 54iLRsUEYQSLlV8kHVTer9P4keA.roa (hash: Oib7LJlXh4bUMGiTPxF+59IQOdwF+fvCUOmQ1Sv5YqM=) 2: 83ZfI9Fyoy0-0Ed7XViCJUVWAUk.roa (hash: x5Erfp0LUGN9evcbs1ECyXblatyvnAhrnm8OrbCDB8k=) 3: DtWqKYrRCyGx6dsd9f2L7CKfIRc.roa (hash: O7NemdIlDZpd4quz6YecLMnjW1CyD/u06cKhcBOTRro=) 4: GrZCo-Pl-pKds5zmwg7ubalVFTA.roa (hash: XSM4rBpjvcsUyAb/r/u55Oo3ZCJqxZNIGwjYsJQ68bw=) 5: M80ufUXhkNHfa9K4zU6X6k_ofZQ.roa (hash: 4dQl+qST57nUFs67WwcEmlUV01oY2iEO29630JMqbwE=) 6: OcXOGlX2Gc26JEdm5iWVWnBYg58.roa (hash: /vGDKbgE4iZUS4BzIvVP16inipE2apdXrS0M45rcngw=) 7: QpucqboD9L8Uv9-I8wC2eqyytjM.roa (hash: QJ36JcAEae+tPmwoLHxsrKQ/qHkNlapv2iTQudy3nXg=) 8: VLrSYlONO7JZUvaeI6OzgjRksA0.roa (hash: LTkUIoLhvOTPKcASxWAtrGL8orynFjazuB3yg7c0ZYo=) 9: W95VCieFrYA-UWvQbNSL7N3Y2Cg.roa (hash: YvWvtJ9d+roXNfi60DzUNUYY7G9jfkQp1ZTCPAwbx+g=) 10: Yw4yz2qvg4rQujrK-dIx_KPixQM.roa (hash: rPOdhOXTd0LJkvjvgXHjpfcSX15w4WKfBaBl0s4PykM=) 11: mMdAkncXd62KSLEMH5-GZ2xifmI.roa (hash: BsiKxHj0OcEVg20ZYqrvGiqQgj+ynivI6054d313+QE=) 12: snJh1xU0i_1zzp27ckiGVpk7ovE.crl (hash: OX4OLbYBgOF09nNEWl7VQv6WcnusT4PeE2T/N8W77Kw=) 13: tXmj_lk4J_cxjq5mg9Y-DnR4g68.roa (hash: FkJnyg1Nbp4kUP6A2c71ys6CgKIoTjWwYiDec6OD1BY=) 14: x93oIxwN7f9CnY5MK-gEMFA9RCs.roa (hash: iUrM+UkqfotbOBAOD6sNrVDAFzEQJnu2I0F39zCKGjM=) 15: x_9TAtatN7OaJxTBmrfHpUlXZDA.roa (hash: 2gG4s/omQ5P0Lbi33p1Th/x4L/bao6YkNKtuc6UmamA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Jun 2025 10:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:88:7d:8b:97:24:45:2a:c5:80:c1:cc:01:cc:41:c4:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Validity Not Before: Jun 19 14:00:18 2025 GMT Not After : Jun 20 14:00:18 2025 GMT Subject: CN=db33b6d0a0e0b4fd86e2763d8ff5009479b0e58f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2e:de:03:4a:be:62:cf:ce:ec:8f:df:d2:75: b4:6f:54:21:6f:67:5a:af:e2:4e:a9:2a:14:79:c4: b1:71:62:c5:05:43:5a:25:e8:fb:2d:10:f6:2e:60: c9:33:45:a9:75:54:91:55:3f:4e:a4:9e:ba:a1:bb: 4f:31:9f:81:e4:96:4a:2a:fe:be:5b:b4:b4:7e:c2: d9:8a:dc:7b:cc:c3:fe:48:77:cc:6e:fb:3a:86:02: a5:1e:ca:05:45:0a:44:c7:87:e7:07:2c:b4:a1:21: fa:cc:29:67:fc:96:1e:5b:b5:42:2c:19:1e:e3:1e: cc:61:49:79:18:e0:ed:c4:cf:4e:45:2d:90:22:26: e9:89:fc:ee:04:36:12:aa:bc:4d:92:ce:db:37:a8: 61:68:53:3d:0d:f3:6c:0f:6d:37:ec:74:0b:00:96: 30:23:48:5c:9e:6e:f9:5e:a6:40:3e:f9:78:0e:36: 81:1a:2a:fa:fc:99:be:01:5f:c1:e1:16:a7:f3:be: 0c:3c:85:96:9f:16:ad:59:fc:2a:68:ce:c8:fa:8a: 61:00:cf:fd:2b:ca:3d:3b:7a:b8:a7:d5:df:23:a6: 26:14:f7:51:80:90:ec:53:b6:93:d2:92:bd:62:fc: a1:f4:0b:93:13:e5:e9:ed:f9:17:bc:c1:45:7e:df: 3c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:33:B6:D0:A0:E0:B4:FD:86:E2:76:3D:8F:F5:00:94:79:B0:E5:8F X509v3 Authority Key Identifier: keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:29:cc:32:e9:4e:69:0b:43:28:79:18:aa:fb:b3:47:f0:d1: ec:d5:d5:ac:b5:f8:02:00:d1:7f:10:ea:0e:47:0a:3a:f9:83: f9:3d:e0:6f:e2:d9:91:dc:c7:c4:d1:ab:5e:17:c7:28:10:24: 48:b6:82:97:bf:31:77:08:6a:bb:bb:3e:1f:2c:6e:ad:56:51: 40:82:29:83:27:39:82:6c:ba:09:36:e9:8b:27:ba:8b:91:9d: 77:0a:c1:41:aa:54:93:a4:75:2e:c4:27:34:d1:91:91:69:6a: 95:67:34:e8:f7:8e:3f:44:98:3e:a0:a4:73:bc:f8:53:9e:38: dd:52:3d:21:dd:60:02:cc:5d:18:11:77:cd:bc:38:0f:89:4f: 19:a4:24:64:06:5e:3c:68:b3:ee:3d:9a:46:09:d3:1e:70:47: 2c:1a:e7:dd:eb:20:a0:87:d9:6c:7b:c5:ca:42:9b:8f:0a:4f: a2:f7:16:fc:26:83:7b:f1:84:76:7c:13:19:01:bb:ad:4f:94: bd:93:17:41:34:8b:93:a6:2a:a9:78:05:d1:93:f0:16:c5:a3: 7b:be:ea:90:1e:1a:77:58:40:06:09:ca:0b:a9:a5:6c:14:e9: d6:a7:aa:b0:e3:23:4c:07:0d:70:ca:db:71:62:6f:4f:6d:ef: 1d:6f:a8:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZeIfYuXJEUqxYDBzAHMQcRkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNzI2MWQ3MTUzNDhiZmQ3M2NlOWRiYjcyNDg4NjU2OTkz YmEyZjEwHhcNMjUwNjE5MTQwMDE4WhcNMjUwNjIwMTQwMDE4WjAzMTEwLwYDVQQD EyhkYjMzYjZkMGEwZTBiNGZkODZlMjc2M2Q4ZmY1MDA5NDc5YjBlNThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS7eA0q+Ys/O7I/f0nW0b1Qhb2da r+JOqSoUecSxcWLFBUNaJej7LRD2LmDJM0WpdVSRVT9OpJ66obtPMZ+B5JZKKv6+ W7S0fsLZitx7zMP+SHfMbvs6hgKlHsoFRQpEx4fnByy0oSH6zCln/JYeW7VCLBke 4x7MYUl5GODtxM9ORS2QIibpifzuBDYSqrxNks7bN6hhaFM9DfNsD2037HQLAJYw I0hcnm75XqZAPvl4DjaBGir6/Jm+AV/B4Ran874MPIWWnxatWfwqaM7I+ophAM/9 K8o9O3q4p9XfI6YmFPdRgJDsU7aT0pK9Yvyh9AuTE+Xp7fkXvMFFft88wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNszttCg4LT9huJ2PY/1AJR5sOWPMB8GA1UdIwQY MBaAFLJyYdcVNIv9c86du3JIhlaZO6LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2Yt NTA0ZjI3NjY3NjBmLzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2YtNTA0ZjI3NjY3NjBm LzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACynMMulO aQtDKHkYqvuzR/DR7NXVrLX4AgDRfxDqDkcKOvmD+T3gb+LZkdzHxNGrXhfHKBAk SLaCl78xdwhqu7s+HyxurVZRQIIpgyc5gmy6CTbpiye6i5GddwrBQapUk6R1LsQn NNGRkWlqlWc06PeOP0SYPqCkc7z4U5443VI9Id1gAsxdGBF3zbw4D4lPGaQkZAZe PGiz7j2aRgnTHnBHLBrn3esgoIfZbHvFykKbjwpPovcW/CaDe/GEdnwTGQG7rU+U vZMXQTSLk6YqqXgF0ZPwFsWje77qkB4ad1hABgnKC6mlbBTp1qeqsOMjTAcNcMrb cWJvT23vHW+osg== -----END CERTIFICATE-----Generated at Thu Jun 19 20:07:54 2025 by rpki-client