$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft File: 9RNpzL-GsehOGutG5tM20591Kuc.mft (raw, json) Hash identifier: f2myDfow1VcokewCwIBySy2ohF08UqH/wJwaKiiZIag= Subject key identifier: E2:BF:40:75:D9:84:3E:AC:49:57:FB:42:61:D6:9E:29:12:45:D9:6D Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Certificate serial: 0197778AA77453552AD29DBE97A4194825B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft Manifest number: 15D4 Signing time: Mon 16 Jun 2025 07:01:04 +0000 Manifest this update: Mon 16 Jun 2025 07:01:04 +0000 Manifest next update: Tue 17 Jun 2025 07:01:04 +0000 Files and hashes: 1: 2It_I9J9BgRnnQT5C-V712e3yx4.roa (hash: ESMa8M4XpFdW7jSu8zHJhrebxwQNF93LMCKBGt+hLE4=) 2: 9RNpzL-GsehOGutG5tM20591Kuc.crl (hash: s88LtNk3KPJ2AuJ1AD466BpCpzvfVloAXwWd0njxTHM=) 3: KnjyYVOU3YLigPxZRgN4AIoHUvQ.roa (hash: RKZNdSizbytDBkbsChEKMTDt0/k1bzP9vgLbksKhVuw=) 4: PueZ2Saibe_grnff0WyfuKxQBLM.roa (hash: ASz9qPcsScVDhnrxdRTZGa/ifE1te7I/3UbW2qncNLQ=) 5: V7pzudrBvKtyWxKZWO0x6f4_reQ.roa (hash: ad12O7f2C5d8aoYSLL5ymITCCLpvSolDNgnwjYiuMkk=) 6: bIOnLPyVT4HMkOF207Y-bxFgW_o.roa (hash: sgHv3RFNqOpH2R7wPkXbngTzHaihOut0tmB1GHo2cvM=) 7: iNeJPd86ukMD5LJRKI03IcI4aR8.roa (hash: zF30P8QynaOrv8qAmVAHNi6YCjV5/lmN6BVFSTJGcBU=) 8: julraPqS2QSJ2CA0Adqt_PgJx0U.roa (hash: NxlNqXL0wqzFcIItDSgkJqkpdEhcleIRL/5cK6P63CI=) 9: mYwzdqAY7_S9Fk60kMnWASIug-A.roa (hash: 52FaK7zJCUXQtBsYKmcDyOdvm3LIQVlGj6112gPSUr8=) 10: rSXDYdDhtGY6mAhj2Yx5dAMm9XY.roa (hash: FCFQH85pPvPZL6nivkLqilRYIo7O5H0KAY3npTX/SAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:77:8a:a7:74:53:55:2a:d2:9d:be:97:a4:19:48:25:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Validity Not Before: Jun 16 07:01:04 2025 GMT Not After : Jun 17 07:01:04 2025 GMT Subject: CN=e2bf4075d9843eac4957fb4261d69e291245d96d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:1d:5a:6a:ea:ca:86:d2:2d:9d:58:af:7c:df: 12:45:80:91:1b:32:35:be:d4:1b:ba:ae:79:b6:c2: d3:2e:ed:16:d3:bc:48:66:1c:54:0d:5f:df:a7:78: 8f:42:d8:f3:b3:49:5c:9b:9a:85:00:00:3f:f2:bb: 9d:a2:23:84:c2:dc:b1:5a:31:02:98:05:7e:a7:17: a9:ef:91:49:32:05:f6:ab:63:d5:34:1a:c5:e0:02: 44:12:0f:2c:e1:98:29:e2:fd:a4:b8:fd:87:c8:55: 01:cc:57:c0:df:d0:53:38:1a:87:3c:70:32:ca:dc: c7:58:cc:1a:a6:f6:f8:dd:6a:af:58:35:48:2b:aa: 30:5e:47:96:a8:fe:7e:74:6a:f8:f6:ee:d1:f7:13: 2f:b3:18:27:9b:5f:65:c3:7a:b0:9f:f9:b3:59:f4: 61:15:20:2e:6b:e6:c0:2f:8b:e3:a9:3d:6b:16:98: ca:92:17:b3:64:86:6e:5c:a8:ab:f4:8e:16:49:e8: d4:ed:19:9c:62:6f:46:20:0d:f6:8b:b1:bb:66:1b: 90:44:cd:19:fe:f7:82:6e:fa:10:55:37:82:d6:6e: 11:8c:91:c9:cf:cc:e3:fa:15:c2:47:f6:ee:4b:84: 71:3b:27:d8:34:3a:80:93:6c:b3:de:ef:58:eb:fd: cc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:BF:40:75:D9:84:3E:AC:49:57:FB:42:61:D6:9E:29:12:45:D9:6D X509v3 Authority Key Identifier: keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:6f:f2:2b:d6:d1:f7:9c:5b:3b:46:b8:ac:67:6e:dd:6a:eb: d8:7e:1f:af:6f:b3:b3:1c:23:98:01:0a:1c:11:43:d1:4c:b9: 92:e9:e5:7c:c8:79:59:b9:26:0b:09:29:4e:52:f8:6f:32:ab: e5:6f:16:70:3c:44:f2:dd:90:5f:ee:6d:da:99:ac:15:1c:8f: 12:9d:76:13:71:c3:50:e3:06:db:62:6b:4e:6a:63:f5:11:09: 51:10:da:17:40:47:24:66:bb:8d:0a:1f:83:2b:da:88:67:7a: fa:dc:5d:3a:8d:c0:dc:f3:c2:16:ae:8a:53:e2:bb:d6:4f:ac: a3:38:ee:a0:b1:e4:75:17:4c:40:44:1b:a6:d7:e6:c8:3e:ba: d1:8d:84:8d:75:4f:93:9a:7f:f6:96:ad:20:dd:77:c9:c1:1f: d2:de:a5:1d:81:c1:dd:5c:f9:f5:d3:00:89:1b:04:0c:82:e6: 75:8e:11:47:5d:3c:cd:4c:c6:c0:ae:ae:e2:a2:39:cd:3d:5f: e9:66:57:b5:39:c1:46:06:53:48:d2:76:da:b8:1a:05:10:09: dd:01:4c:e7:6d:7f:6d:70:01:fd:ab:67:45:45:fe:12:11:d7: d9:d9:6f:87:5c:d1:2c:fb:0f:fa:14:a5:af:c4:8b:cf:8f:8a: 5e:9c:d6:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd3iqd0U1Uq0p2+l6QZSCWwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MTM2OWNjYmY4NmIxZTg0ZTFhZWI0NmU2ZDMzNmQzOWY3 NTJhZTcwHhcNMjUwNjE2MDcwMTA0WhcNMjUwNjE3MDcwMTA0WjAzMTEwLwYDVQQD EyhlMmJmNDA3NWQ5ODQzZWFjNDk1N2ZiNDI2MWQ2OWUyOTEyNDVkOTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+h1aaurKhtItnVivfN8SRYCRGzI1 vtQbuq55tsLTLu0W07xIZhxUDV/fp3iPQtjzs0lcm5qFAAA/8rudoiOEwtyxWjEC mAV+pxep75FJMgX2q2PVNBrF4AJEEg8s4Zgp4v2kuP2HyFUBzFfA39BTOBqHPHAy ytzHWMwapvb43WqvWDVIK6owXkeWqP5+dGr49u7R9xMvsxgnm19lw3qwn/mzWfRh FSAua+bAL4vjqT1rFpjKkhezZIZuXKir9I4WSejU7RmcYm9GIA32i7G7ZhuQRM0Z /veCbvoQVTeC1m4RjJHJz8zj+hXCR/buS4RxOyfYNDqAk2yz3u9Y6/3MLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOK/QHXZhD6sSVf7QmHWnikSRdltMB8GA1UdIwQY MBaAFPUTacy/hrHoThrrRubTNtOfdSrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUt MmI5MjBiZGUzOTkwLzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUtMmI5MjBiZGUzOTkw LzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhG/yK9bR 95xbO0a4rGdu3Wrr2H4fr2+zsxwjmAEKHBFD0Uy5kunlfMh5WbkmCwkpTlL4bzKr 5W8WcDxE8t2QX+5t2pmsFRyPEp12E3HDUOMG22JrTmpj9REJURDaF0BHJGa7jQof gyvaiGd6+txdOo3A3PPCFq6KU+K71k+sozjuoLHkdRdMQEQbptfmyD660Y2EjXVP k5p/9patIN13ycEf0t6lHYHB3Vz59dMAiRsEDILmdY4RR108zUzGwK6u4qI5zT1f 6WZXtTnBRgZTSNJ22rgaBRAJ3QFM521/bXAB/atnRUX+EhHX2dlvh1zRLPsP+hSl r8SLz4+KXpzWsQ== -----END CERTIFICATE-----Generated at Mon Jun 16 12:28:52 2025 by rpki-client