$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft File: I0Rtp6cLznc-wrwWVarjDDwYQSw.mft (raw, json) Hash identifier: W1MOuWrO8B300vkmfhF6FygmtW+yuX1SaNnBqv5e5Wk= Subject key identifier: 4E:2F:04:6B:18:1C:D3:1C:80:F0:C6:FD:0A:42:4C:75:CB:B8:4F:98 Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c Certificate serial: 01976BBD0FAA3CBA0C65D5AAE15AF19C6FF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft Manifest number: 134E Signing time: Sat 14 Jun 2025 00:00:41 +0000 Manifest this update: Sat 14 Jun 2025 00:00:41 +0000 Manifest next update: Sun 15 Jun 2025 00:00:41 +0000 Files and hashes: 1: 1-DmgZ4SOp-NyMxLpBYaEtj39Pdc.roa (hash: moNVW0pEVWJfvkZEJ959J7HVzxYxrRxeZe7wePoILkM=) 2: 1-YvBQ0BXrsF-NI7ubQxbzvPVuzg.roa (hash: eYRmazTnlT6QkpTc8BcLL4cZu0o6zfLVuHBleuRca74=) 3: FwySP1jVKL7DmmlRNwZnvOJofjw.roa (hash: F8V8HLYupPXjwfMEbx0g1ieMP6WPPz1HmoVO8jTtRCg=) 4: I0Rtp6cLznc-wrwWVarjDDwYQSw.crl (hash: zUCuzf8Nqpu3htAG/+cG0MG0enCcyU1R5MENOHsYArM=) 5: Xu2K8fW-gQnYV7VE3ISwB8N68f8.roa (hash: NKQq6ePbr62hGHn3QtTkpNNxc85cdItsXJmI3/Mzf2w=) 6: bXcsNUMfdZBR3tv1r8dI-NGTxGI.roa (hash: nSyMcXVhj3Lt4TUfuUh042NUrc5IpwBc7m8EmxqlbJw=) 7: d_P2C7-8KzXEXKrYSD9DOI8LiWE.roa (hash: Yd4prnJa4gstJKWN3oZHIXfbfrVyLQkl2GQSNyCI7uQ=) 8: k5bIb9MZd-l_B-bxXKNoMlRDovA.roa (hash: bpuvw96upd8j55DJW2izTXwq0PIjcaMc/13PHw88j0I=) 9: leUb75eQIxyb-VxN49MBjH1YF7k.roa (hash: kyA2+f/9l+pKqkl9Or57N7CwCtWEqE5/Far2bCfSZ4I=) 10: pqM1u8SkS4zcFQvrBhQWpXPMYCA.roa (hash: ZvRrYdTYDz9FJEg1Ikh5qg9AfwzK1a1b92vZCCUcbys=) 11: qV9uaYW0EJ9RfJ2uJjNKqD5z7XA.roa (hash: 8zBVfYPjKnKjKryP+fVFU4l51KGHl1B5bpWFMv1A9Mk=) 12: sDrv6ds57QYfp4Z_4o5IpblURKI.roa (hash: Y8MxO27e+WV4vIqzW7fZxZuurHymmQUKVTNCec7B22g=) 13: wFX7xPpJ7yA033Ye7jyB7b5hfrY.roa (hash: cWLM1VzdX6e7FN9H2A5u+k5ZkEsPKCYG7CFbFvNUR/k=) 14: xxa6C-pa80quO5ROYbjP391EF1Y.roa (hash: kO5NzNIL7QO5wmPmlUrjQ/tzsh5UuDfcIRoRWEvLEF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6b:bd:0f:aa:3c:ba:0c:65:d5:aa:e1:5a:f1:9c:6f:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c Validity Not Before: Jun 14 00:00:41 2025 GMT Not After : Jun 15 00:00:41 2025 GMT Subject: CN=4e2f046b181cd31c80f0c6fd0a424c75cbb84f98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b2:da:4a:1e:72:e7:a9:f0:bc:c3:7d:f5:18: 77:4f:54:29:4f:c0:ba:9a:6d:3d:6c:d8:aa:b4:85: 91:46:d2:e9:da:47:8a:08:2d:f8:af:c9:4f:5c:38: 5a:28:91:58:60:db:ca:e4:99:50:c3:4a:ac:c2:54: b4:49:78:82:d8:07:2d:93:40:7e:57:5a:81:e1:10: d8:b2:7c:65:f9:de:ee:74:01:f8:37:c0:c3:02:3e: f0:bd:24:60:6e:cb:c2:53:f7:a2:cc:7b:07:36:43: ba:95:c5:3e:dc:ac:b9:67:15:5f:80:21:96:fd:78: 13:95:eb:a2:bd:e2:8d:04:24:4c:b4:0d:34:e0:55: e6:34:83:3c:a4:22:5b:8a:53:95:e3:ff:86:26:51: 6b:2a:a5:48:32:6a:c6:a7:2c:3f:a6:ff:d2:40:44: b0:99:7f:ea:49:ba:b1:3d:a9:a2:d6:dd:66:7a:db: 0c:05:6a:44:e4:b7:44:e8:4a:22:e7:68:fb:0a:e2: b0:c0:97:39:a6:b3:c3:ef:35:35:b0:f1:71:07:ed: 0e:70:d4:72:23:93:49:b9:4c:b3:31:f7:64:e7:f7: 00:a8:f5:4a:bb:0e:d5:74:4d:94:45:98:14:10:d5: ca:56:ca:52:26:b1:03:0c:ab:2e:63:7c:e5:38:40: 59:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:2F:04:6B:18:1C:D3:1C:80:F0:C6:FD:0A:42:4C:75:CB:B8:4F:98 X509v3 Authority Key Identifier: keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:e3:c1:61:43:56:43:2a:83:a3:41:ec:da:74:17:2f:84:39: 42:8b:95:f3:16:85:f6:56:20:1e:32:84:88:9e:f8:12:79:c8: 35:dd:50:e9:57:17:d6:f5:a8:30:a3:a0:ec:e3:af:be:b6:9c: 6c:c6:69:79:80:5e:58:78:e7:ff:4b:c0:05:70:cb:ad:b1:ef: 62:9b:f3:57:66:09:31:91:e8:b8:b3:88:87:6a:3d:08:80:9d: 28:c9:9f:86:77:8a:cb:f5:b8:ff:09:b0:51:09:58:a4:e7:dd: 48:b1:82:ef:b8:d1:9f:0f:ce:44:b7:35:a1:5a:eb:30:21:0c: 6c:98:31:5b:a0:63:41:dc:29:c0:c3:33:1a:7e:7d:50:15:dd: 3d:ff:e4:91:eb:9e:7a:58:a7:05:7d:87:5d:08:8d:e2:b6:23: 75:2c:4a:dc:b6:37:9d:de:81:c7:fe:92:0e:0d:62:9b:ff:e9: 9a:56:a3:c5:1e:a8:9d:ec:34:fb:96:32:a6:92:e1:00:7f:94: ed:d6:9f:2d:ed:05:18:56:a1:9d:78:8c:04:11:48:d0:55:11: 0a:ad:9a:71:be:6e:ba:46:dc:dd:75:6b:e4:9f:ff:5a:4a:59: 17:a1:83:b2:e1:89:0f:99:68:c1:c4:2f:b0:83:b6:87:13:5b: 6c:e6:5e:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdrvQ+qPLoMZdWq4VrxnG/yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNDQ2ZGE3YTcwYmNlNzczZWMyYmMxNjU1YWFlMzBjM2Mx ODQxMmMwHhcNMjUwNjE0MDAwMDQxWhcNMjUwNjE1MDAwMDQxWjAzMTEwLwYDVQQD Eyg0ZTJmMDQ2YjE4MWNkMzFjODBmMGM2ZmQwYTQyNGM3NWNiYjg0Zjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrLaSh5y56nwvMN99Rh3T1QpT8C6 mm09bNiqtIWRRtLp2keKCC34r8lPXDhaKJFYYNvK5JlQw0qswlS0SXiC2Actk0B+ V1qB4RDYsnxl+d7udAH4N8DDAj7wvSRgbsvCU/eizHsHNkO6lcU+3Ky5ZxVfgCGW /XgTleuiveKNBCRMtA004FXmNIM8pCJbilOV4/+GJlFrKqVIMmrGpyw/pv/SQESw mX/qSbqxPami1t1metsMBWpE5LdE6Eoi52j7CuKwwJc5prPD7zU1sPFxB+0OcNRy I5NJuUyzMfdk5/cAqPVKuw7VdE2URZgUENXKVspSJrEDDKsuY3zlOEBZDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4vBGsYHNMcgPDG/QpCTHXLuE+YMB8GA1UdIwQY MBaAFCNEbaenC853PsK8FlWq4ww8GEEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQt MjVjYzlkNmNmYmI5LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQtMjVjYzlkNmNmYmI5 LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtePBYUNW QyqDo0Hs2nQXL4Q5QouV8xaF9lYgHjKEiJ74EnnINd1Q6VcX1vWoMKOg7OOvvrac bMZpeYBeWHjn/0vABXDLrbHvYpvzV2YJMZHouLOIh2o9CICdKMmfhneKy/W4/wmw UQlYpOfdSLGC77jRnw/ORLc1oVrrMCEMbJgxW6BjQdwpwMMzGn59UBXdPf/kkeue elinBX2HXQiN4rYjdSxK3LY3nd6Bx/6SDg1im//pmlajxR6onew0+5YyppLhAH+U 7dafLe0FGFahnXiMBBFI0FURCq2acb5uukbc3XVr5J//WkpZF6GDsuGJD5lowcQv sIO2hxNbbOZeuQ== -----END CERTIFICATE-----Generated at Sat Jun 14 09:24:07 2025 by rpki-client