$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft File: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft (raw, json) Hash identifier: VMdpyq3xwHY8qISm403gwHEMHZtKUS0XLA9WSW/A6l0= Subject key identifier: CB:9B:72:55:84:9A:3F:BF:E1:8B:23:C9:A8:EF:F9:12:28:D6:8D:60 Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Certificate serial: 0197684E1981D50C4004227BE4C6F9D70BAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft Manifest number: 14FF Signing time: Fri 13 Jun 2025 08:00:38 +0000 Manifest this update: Fri 13 Jun 2025 08:00:38 +0000 Manifest next update: Sat 14 Jun 2025 08:00:38 +0000 Files and hashes: 1: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl (hash: Jb9m2pWQFpJEggo9VaBgPXCQRZW2X+OzcEkVWtUnHWg=) 2: 41fVJkrPbHKQA079D4QVuoSoMHA.roa (hash: sr+TybZqUtIImaDgTqztSGD1XE6oloq4BZ2M4Xpg+u0=) 3: 4pf6JhZ2ZrbzDs3KIhxGjElBlaw.roa (hash: vXT1uBYUu9e7P+u/IiXkrVdl2Zw3UbzSeW2UWFK34Jw=) 4: 6klSWkjjUTbGuPtDfN8cALab9cs.roa (hash: sdgQjkXScGhQKnR4al8+skMwfxtoqagBTslhZkfSKNY=) 5: B3w7E9gvZEzFwMrG99Xq-T1MEBw.roa (hash: X2c/+qNKKXp5+FBng9aKxlFFZbDBWHiqkfhHgQbP6bg=) 6: C2H1BSmYMIrZggVB3V-MZ8CR5SY.roa (hash: MAmDjDLmFQyW+O4vZbG4q4tWTwrvQlayeoQlXr+Fu/8=) 7: DJ2HKm_1c1O48zC-cc12FURV1-w.roa (hash: odPYR1sTJx4nskAcxBKfAydZplTxWpbfAnjmQhPzJX8=) 8: GmlPqmYgpg61oCrtTG9RzmgTZRQ.roa (hash: lOFhsoN8S3GIIvzatAuS7mkyT16CCVPA77MjKa8aWWc=) 9: RZCNuFYkMVfet6khSeCWtqT4r3s.roa (hash: bz5sfARWaL0oWhzQTAMOexVtHrjfBeAF+vBi8eYpl/U=) 10: Sn1YHf-JTelJa8AbFEu9eCrJc-Y.roa (hash: 4RQ4/nSSdbUjaSMtOe+F2ienAydzSYTXwrbRmuUcEJY=) 11: UE3TFsD19f6wQr0gTHDaiwhGdqA.roa (hash: h9a9K3MMF0WQfDnzSvLb5P+n54cp7dIKew88pGDYldk=) 12: VicyF_0e_bvvcn0fKM8q40zu1n8.roa (hash: C5AQCG/2PEYP519Z6IOs4YDYOnLl0s41qulpvbJvJ4g=) 13: _HxOSGDLp42EFmYvwzkWMgsUDRc.roa (hash: ld3Ed4rdMoSUbT+R2+5BJt8zZUTSFFBqMJ22iFdBG+s=) 14: cHLxjuzlgoGDINIVaFsru4PZ9BE.roa (hash: o3eUI2kqgbIKISwJ6D+XZ6uUN50wRiiahX5yY1sTPn4=) 15: lknEfiAWsTgVxunxpJ4Cim6vi_Y.roa (hash: 9nT6QBaPn6YGSLcfszLUc2cPb60rXG8wS9MlLTeVBhw=) 16: mdB3D_zcc3ZMQewiv3J0UZ_sUlo.roa (hash: NsB59ITpkzoeK9pRuPozIMWrvt6Lae+60ChrUSCRg50=) 17: mjTSWLEuvIRJ-mDUVhSblHWE7N4.roa (hash: rmzWSKN3Yb/xA6p/q8UxEXQjDhun2rkoNnE76zOjZHo=) 18: pxtXnWk-oYZ7Qby89ddSCgu91ts.roa (hash: RB8UdezmP543bft1AFoJ1CEu6eopqGc7lCF9jSa1eTc=) 19: q74_W6xdG6goIDi1c08_8gJ6uTE.roa (hash: pxdR0KPAM6OXX14ayHaIWzZB+fjREFkJhs6uGstYGhI=) 20: r3Ck7fpoOKp57Mk1jJgw8XHWAxg.roa (hash: jDsvxvKf5uFW/4bW6b3NOwjRJy48sDgwtQTJJofZqGM=) 21: v99_kaWjoTKnpnOcBogb8Emjk4M.roa (hash: unshnZnS3tg5XPSrGj9Iy+gxnhESQoD/3z5Y8oIxogo=) 22: y38_fk_dl6De5uovg7WKuAzPolA.roa (hash: PsHTMj/SkJczqFC8znjT596YhybynG/bm1yXYsS6Cxs=) 23: z6d9djVL2RnXuevi6Ot8E8e62tc.roa (hash: o9Kh9fFp+5NbfQXFw6W0ABs1khVR+g751jXSLlxLU4c=) 24: zUeLco_9U8ifNR5PMJI3zpijW74.roa (hash: 3lduL1beP27BPGmbMBwONs6g5YeSTXx0lXyH1JulpN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 08:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:68:4e:19:81:d5:0c:40:04:22:7b:e4:c6:f9:d7:0b:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Validity Not Before: Jun 13 08:00:38 2025 GMT Not After : Jun 14 08:00:38 2025 GMT Subject: CN=cb9b7255849a3fbfe18b23c9a8eff91228d68d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c3:12:a8:ad:da:98:e8:32:86:05:03:b8:59: 7e:ba:b8:b1:ed:e0:a1:7e:f0:d2:10:32:8a:60:05: 16:67:df:30:0f:80:79:a0:d1:f5:11:56:83:5f:c2: e4:95:6d:7a:be:55:4d:00:59:72:fd:ed:4a:17:e7: f1:26:29:cb:98:fb:19:50:dc:ce:c3:ee:7e:a9:ad: f7:40:6f:8e:ed:f2:fe:cf:6e:60:89:99:3c:22:16: c7:65:b4:2f:f8:94:b6:0c:09:b2:43:f2:f4:58:4e: 2e:df:6d:1e:4d:37:1a:17:d0:db:71:f9:3f:a7:1e: 4a:78:f6:fc:06:90:87:39:bd:dc:b0:bf:e9:3b:6a: b1:af:b1:f6:61:a6:9e:a7:bf:ce:41:02:e6:4c:7e: b6:31:fd:f0:55:30:f1:f7:17:dd:81:8c:46:c8:84: 48:41:3d:e9:9b:3e:4f:0d:bc:73:16:c9:b4:42:2f: af:4a:db:1f:ac:68:cf:53:52:e1:ff:32:0e:bd:7d: 5c:72:d9:bb:50:10:fc:b7:bf:a0:08:e1:21:ac:67: 16:f7:3f:c9:04:0b:ca:47:ae:7c:94:62:e5:8a:41: cb:55:36:f8:af:d4:8f:e4:e6:10:ca:74:49:e9:37: a5:41:45:cf:f8:b2:41:b9:10:41:4c:65:07:c6:7a: 5a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:9B:72:55:84:9A:3F:BF:E1:8B:23:C9:A8:EF:F9:12:28:D6:8D:60 X509v3 Authority Key Identifier: keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:ca:44:81:ed:a6:55:b0:3a:65:52:99:f4:e5:5b:de:22:b9: ab:3a:4c:47:a7:cd:2f:40:44:f7:91:41:68:44:2b:5d:77:16: 6b:a0:4a:67:d1:a7:3e:1a:0e:33:ca:f0:26:94:b3:16:54:2d: 7b:28:ca:61:ef:d8:77:f5:1d:21:87:49:de:a5:10:06:28:4b: 61:f7:39:86:dc:da:12:59:40:fc:eb:ab:ac:00:35:38:06:5c: 30:66:04:41:e3:2b:6a:05:02:fe:43:83:b1:99:8d:de:7c:83: 4f:7a:ad:65:08:09:8c:8d:75:73:f6:d9:51:25:ce:91:a4:75: de:7e:6c:d0:0c:ac:28:0c:59:04:c5:6c:f0:a0:f3:2f:21:fd: 89:4e:64:88:14:d6:ee:d5:41:b7:da:3d:ce:fb:c3:40:93:d8: a5:d4:7f:08:a3:71:8a:bc:0e:9d:67:5b:24:dd:30:67:24:50: 0a:1e:7b:b1:f0:da:be:f3:ea:38:ad:2e:77:84:a3:45:18:e4: 52:48:16:20:1b:e1:80:79:34:fe:85:62:ef:0f:40:d0:e2:c5: ec:6c:41:c7:20:21:ce:9b:68:67:b5:c2:ca:85:ed:88:71:19: 14:a6:e4:df:be:9c:9f:4f:d1:c7:c4:65:65:85:cf:96:a1:6a: 3f:c0:19:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdoThmB1QxABCJ75Mb51wusMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3 YjQ1ODkwHhcNMjUwNjEzMDgwMDM4WhcNMjUwNjE0MDgwMDM4WjAzMTEwLwYDVQQD EyhjYjliNzI1NTg0OWEzZmJmZTE4YjIzYzlhOGVmZjkxMjI4ZDY4ZDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8MSqK3amOgyhgUDuFl+urix7eCh fvDSEDKKYAUWZ98wD4B5oNH1EVaDX8LklW16vlVNAFly/e1KF+fxJinLmPsZUNzO w+5+qa33QG+O7fL+z25giZk8IhbHZbQv+JS2DAmyQ/L0WE4u320eTTcaF9Dbcfk/ px5KePb8BpCHOb3csL/pO2qxr7H2Yaaep7/OQQLmTH62Mf3wVTDx9xfdgYxGyIRI QT3pmz5PDbxzFsm0Qi+vStsfrGjPU1Lh/zIOvX1cctm7UBD8t7+gCOEhrGcW9z/J BAvKR658lGLlikHLVTb4r9SP5OYQynRJ6TelQUXP+LJBuRBBTGUHxnpanQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMubclWEmj+/4Ysjyajv+RIo1o1gMB8GA1UdIwQY MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt MmVjZTA0ZTE4NWMyLzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaMpEge2m VbA6ZVKZ9OVb3iK5qzpMR6fNL0BE95FBaEQrXXcWa6BKZ9GnPhoOM8rwJpSzFlQt eyjKYe/Yd/UdIYdJ3qUQBihLYfc5htzaEllA/OurrAA1OAZcMGYEQeMragUC/kOD sZmN3nyDT3qtZQgJjI11c/bZUSXOkaR13n5s0AysKAxZBMVs8KDzLyH9iU5kiBTW 7tVBt9o9zvvDQJPYpdR/CKNxirwOnWdbJN0wZyRQCh57sfDavvPqOK0ud4SjRRjk UkgWIBvhgHk0/oVi7w9A0OLF7GxBxyAhzptoZ7XCyoXtiHEZFKbk376cn0/Rx8Rl ZYXPlqFqP8AZLw== -----END CERTIFICATE-----Generated at Fri Jun 13 19:20:09 2025 by rpki-client