$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json) Hash identifier: gRcePRq/kpTbeYYKOFXUnJ9GcEtbA7LEO0dtdSvdO6A= Subject key identifier: 28:D6:A2:6E:C5:9F:F7:F6:E9:BD:8B:6B:C4:20:A7:24:B1:78:85:DA Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 01976997B4C3EA0B03261C668B7913E00C7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft Manifest number: 15B6 Signing time: Fri 13 Jun 2025 14:00:39 +0000 Manifest this update: Fri 13 Jun 2025 14:00:39 +0000 Manifest next update: Sat 14 Jun 2025 14:00:39 +0000 Files and hashes: 1: 5oD2HNqgzG_qOcF_21G9KLy5e2Y.roa (hash: RmXZv+Vqe5cI4h6ljtkED0qwtDL54/1oOSvgcLZr5dM=) 2: 6H0jPgZ40-qSdMrUIpXtjHxd2VA.roa (hash: bKX7Wm+km5brNebStx9trC9lQWDSYN+gli61DR2OFCc=) 3: 75sT-nwUqhGJrktdH6EqWa-q1mo.roa (hash: R1QtO6OQwY7O/dWJMCnCSA9mjsQZb+aGyr2mwiCWXM0=) 4: Bk5EEDboiWzloYLSbIprmQyOumI.roa (hash: Leabib+pYR396O62ZqXXAQ9RyIVRB2I7VcCKzRGI0Zw=) 5: FRe6auZzcSOVPtZ6Q5yvjDHlzS0.roa (hash: 2NaXdTlzJjkR6eXsQNd9ul22Iz8k3jyPNXeVsKS/++A=) 6: GEXA_gDFN_UI9pmu8MV3voaPJJw.roa (hash: dqAjGTOppVUexxUhNJnZSDJjjUoQVnH9/+S3XNxYfss=) 7: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: i9347vlsXkrrskKm7VK1Sqx19li+E3N3yLM0gVfu0kM=) 8: J0mrTDoDAe4tdcNY4ZTx8ruuu9g.roa (hash: SdkYwpw3qIRaB5VQaHi9AMXoPRVnXFJoZo9ChQzY2P8=) 9: QKd9v1TqhiMsVLAcOxJ22eYxs_g.roa (hash: HKu0bw+bkfxh/NhVSCdqzBjjysK0/agU+8z7cijegyY=) 10: WKhjscqZWdN-nuM8dfIBcstyH14.roa (hash: khUF0nyoDvCPGxtlsBxOqPz0aIco2pUZJy9sOWQaHzM=) 11: qMUUhW1iC-XMKPgcY2-u4nUNHXY.roa (hash: 8IGWcOXBDlPGcQOckJ+GtmlbDYmD6/HkpFAja/aKolM=) 12: tV8pY2AaFoThs7aSR_rVRKM4uZ8.roa (hash: 5JEjFQnGCc8ZZH1Nis0Dk3OW+MkzIr5bBwteIscBMNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 13:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:69:97:b4:c3:ea:0b:03:26:1c:66:8b:79:13:e0:0c:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: Jun 13 14:00:39 2025 GMT Not After : Jun 14 14:00:39 2025 GMT Subject: CN=28d6a26ec59ff7f6e9bd8b6bc420a724b17885da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:74:73:9d:1d:15:58:d1:af:38:9e:cf:13:5b: 6f:0a:1e:01:6a:3a:59:c3:04:74:95:3b:5c:46:74: ae:af:76:c7:4b:90:71:63:24:a1:94:4b:23:ef:0b: 79:bd:fb:e1:0b:29:df:c9:81:3c:c6:0a:a6:41:f6: 3a:08:a3:ed:a7:b1:95:0a:d6:13:a1:57:dd:ec:3e: 4d:a5:e0:69:a9:4d:cd:32:6e:2d:ca:48:0c:de:6c: 4c:0a:00:77:73:ed:3e:60:1c:cc:3b:88:b5:0e:91: 2f:20:3c:37:9b:a3:8a:2d:a6:66:e4:4a:40:5e:41: 82:64:4c:45:98:ce:2f:ef:f3:14:04:d9:ac:47:de: 8c:02:e6:90:9a:1e:3e:2e:57:2f:d8:5e:c5:d4:c9: be:73:f5:83:99:7c:d3:ea:71:38:80:95:55:51:ee: 6c:9b:6a:c8:1a:53:ff:ae:dd:89:85:2e:70:2f:35: d2:f4:39:04:48:a6:ae:6f:9d:a2:80:4d:d4:7c:55: 17:d3:df:13:a0:45:ab:25:35:63:3f:17:3b:eb:de: 02:5d:1e:da:0f:31:ec:20:c3:fd:d9:bc:e1:6b:b9: fc:44:7d:05:72:dc:2a:cd:e7:a7:c9:b1:c4:6d:f0: 37:be:9e:a1:ec:c9:8c:22:02:3f:cc:08:be:25:68: 69:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D6:A2:6E:C5:9F:F7:F6:E9:BD:8B:6B:C4:20:A7:24:B1:78:85:DA X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:d7:ca:f3:af:81:01:fe:11:ca:62:f7:8b:16:18:f1:bd:c6: 64:e2:d1:6b:e7:61:b3:90:ea:77:bf:8f:36:45:d3:65:be:ce: b0:9b:41:10:7b:b8:25:cb:12:ce:6b:61:ed:57:72:ba:67:15: 67:03:f6:81:2b:a8:83:ae:d4:57:01:86:b0:67:6e:e6:33:76: 40:1a:39:3d:32:91:8e:c6:28:ab:7e:41:d9:92:bc:16:05:16: df:03:9a:e2:42:42:51:42:64:c8:d7:31:1d:ab:b2:f4:5f:76: 69:a6:57:3a:c1:d1:54:5c:58:a5:c9:18:36:b8:f8:88:cd:e3: 02:46:23:c1:09:b8:7c:5f:c1:21:aa:b4:ae:fa:3c:c8:39:09: 84:59:c5:d0:c3:52:01:02:25:8f:1d:cd:38:25:ca:fd:5e:be: a8:d1:7e:70:3d:26:2a:80:2c:11:4a:49:3f:d9:94:67:6a:e2: 49:18:df:9d:4e:06:87:ae:29:8c:1b:1d:fd:05:e5:54:70:48: 20:29:62:dd:b0:b8:b8:c4:31:65:54:bc:6e:99:82:aa:1d:d7: d6:a9:13:a9:09:3b:e4:8c:85:8a:07:d9:f2:d8:b5:e3:cd:75: 76:1c:1d:75:eb:0c:d6:ee:f9:e8:6d:8a:e3:0f:e7:06:99:f0: 7c:c2:2e:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdpl7TD6gsDJhxmi3kT4Ax7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjUwNjEzMTQwMDM5WhcNMjUwNjE0MTQwMDM5WjAzMTEwLwYDVQQD EygyOGQ2YTI2ZWM1OWZmN2Y2ZTliZDhiNmJjNDIwYTcyNGIxNzg4NWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HRznR0VWNGvOJ7PE1tvCh4BajpZ wwR0lTtcRnSur3bHS5BxYyShlEsj7wt5vfvhCynfyYE8xgqmQfY6CKPtp7GVCtYT oVfd7D5NpeBpqU3NMm4tykgM3mxMCgB3c+0+YBzMO4i1DpEvIDw3m6OKLaZm5EpA XkGCZExFmM4v7/MUBNmsR96MAuaQmh4+Llcv2F7F1Mm+c/WDmXzT6nE4gJVVUe5s m2rIGlP/rt2JhS5wLzXS9DkESKaub52igE3UfFUX098ToEWrJTVjPxc7694CXR7a DzHsIMP92bzha7n8RH0FctwqzeenybHEbfA3vp6h7MmMIgI/zAi+JWhp1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjWom7Fn/f26b2La8QgpySxeIXaMB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgdfK86+B Af4RymL3ixYY8b3GZOLRa+dhs5Dqd7+PNkXTZb7OsJtBEHu4JcsSzmth7VdyumcV ZwP2gSuog67UVwGGsGdu5jN2QBo5PTKRjsYoq35B2ZK8FgUW3wOa4kJCUUJkyNcx Hauy9F92aaZXOsHRVFxYpckYNrj4iM3jAkYjwQm4fF/BIaq0rvo8yDkJhFnF0MNS AQIljx3NOCXK/V6+qNF+cD0mKoAsEUpJP9mUZ2riSRjfnU4Gh64pjBsd/QXlVHBI ICli3bC4uMQxZVS8bpmCqh3X1qkTqQk75IyFigfZ8ti14811dhwddesM1u756G2K 4w/nBpnwfMIurQ== -----END CERTIFICATE-----Generated at Fri Jun 13 19:43:04 2025 by rpki-client