$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft File: F7UEL8INm6sWduCa9_8bpb-trnU.mft (raw, json) Hash identifier: ScnW1EBlLmSzl+zXzMZv6uMAX8hG8w33x3khuks78C0= Subject key identifier: 70:0B:0E:93:EF:A5:25:15:23:D6:10:E2:EA:9D:73:D4:99:F6:13:2E Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Certificate serial: 019768F2B729D0474BE218398D27769F2BE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft Manifest number: 0EF8 Signing time: Fri 13 Jun 2025 11:00:26 +0000 Manifest this update: Fri 13 Jun 2025 11:00:26 +0000 Manifest next update: Sat 14 Jun 2025 11:00:26 +0000 Files and hashes: 1: 5bIFsErhPSlmM37nhrp-eU9l5Y4.roa (hash: W0LEviwE6sQ3/HTSMFGMNopeuLD+ieboT1WS/XkZF1E=) 2: 7rGZ7Kn81ZZ9VKoeH0eLU-kXt9M.roa (hash: wbrR267hltnIltfZnIqap+bK1X+30aRn2vIaMwlZYl0=) 3: 8B9wa-TamsFPX-b9Sjwq2JWmpu0.roa (hash: mYWGy6vPQqUonSl/lzSA7r99GqgJfzuS4OhPL383spw=) 4: A39EZrrDrXLk3J8BZLUN7wQ6C50.roa (hash: Ark/uTgt37FRO8Utnxml8XHzzu9fwVEDGjmOjqbxT4E=) 5: Chb74JL8JJmMbGzdCWsV1I9XTHM.roa (hash: uqlIkNtybKQGK6oYFgs8Gcl/3LifaWUOWXgUOaIWjq4=) 6: F7UEL8INm6sWduCa9_8bpb-trnU.crl (hash: MUuuT5WnV+9E6BYRnsiNdZwEipaOtZXKu8GBKduGWao=) 7: FD5eZ9WTnwJ5n2l_V7-DFMkDAmk.roa (hash: 5X+F3zJhX8DlISb93S4qdF1bDYjU/DI8wtFO7omMZgs=) 8: H-wI8WViyvhQ58migChLNEMEYb4.roa (hash: 55jO9FPLyHdmA0ZhDHMAOcwTS+Ma+ZmiF+DkbWOEkzk=) 9: JY2Qbmj2mgX3KDG39J6yIxJr0tc.roa (hash: 1KGhpD1HwCPZtP8VkVF45re3cg2JKrviwS59Vb+WzQ4=) 10: QnOCtXAVmX13ibu9GQu1nSs9w-k.roa (hash: 2ja4/uzYhdT+ao7xdjqgdrp8HFOJkvXcfpdXCeeEDmY=) 11: YRRXPoENpmdtt6jCnuMjG8rrikY.roa (hash: DbDzgUZdi2jed/+3x8UofBswoXpqS+WPTmkA9M7K92c=) 12: bA2-1nnLbrWRGqFV2afM2bzGsYs.roa (hash: FCcUA1F21qdmoEMQzczm0l/NGWKzFMZ3eCmf0F/+Cd0=) 13: blSvVBOfQQX8HPgRw9s7J2WaT7U.roa (hash: vl3RTDfDlA0AmENRkgmM8JLJlNA1WYfzNQBSFmihkQU=) 14: xZC_xBRdyqTElb8rKCSQViw1QQk.roa (hash: Am0BFTFCqKQ+R9vTI46rJ2D1DFX8Hh5BkVmp7WNJvlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 11:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:68:f2:b7:29:d0:47:4b:e2:18:39:8d:27:76:9f:2b:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Validity Not Before: Jun 13 11:00:26 2025 GMT Not After : Jun 14 11:00:26 2025 GMT Subject: CN=700b0e93efa5251523d610e2ea9d73d499f6132e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:98:f2:e7:18:de:e5:e2:be:cf:c9:9f:3a:27: d0:be:20:ae:82:89:55:78:4f:c5:8b:40:6b:51:46: 04:b1:e6:77:15:73:ad:0b:0d:e8:d5:11:de:8c:19: 49:1b:80:ea:60:09:10:bb:30:68:e8:7b:3e:45:48: 6f:84:fa:ee:4d:43:25:b8:6c:9b:06:a3:68:37:8e: 18:c7:bc:18:0a:bc:62:d0:5d:ad:31:37:3a:80:f0: 52:75:96:ea:d9:56:83:d9:b9:a3:3b:c4:91:09:76: a4:fa:f9:07:bf:05:77:c9:69:ea:af:73:43:5d:5f: ff:cf:8f:90:b1:aa:47:8a:f5:e1:b1:83:ed:b6:09: 05:f4:2e:f8:3e:44:27:ef:7c:db:fa:f6:34:15:ad: d7:d3:d3:25:5f:53:18:e6:f3:b2:34:21:7a:16:d6: 1f:40:88:d1:50:9c:ac:2d:5a:b6:03:19:f6:94:24: 25:32:28:92:f7:d9:8c:2a:7d:2e:4b:f5:10:7f:b4: 58:3d:5d:d5:67:d1:5d:22:88:97:1a:d7:70:38:47: 80:40:3a:db:ca:5a:41:0d:d4:82:33:8d:84:c3:7e: b3:87:03:ae:7b:f6:0b:d4:b3:c9:77:b0:18:34:25: 71:21:af:7b:d8:87:0c:bb:4b:d3:45:83:d0:18:d7: 12:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0B:0E:93:EF:A5:25:15:23:D6:10:E2:EA:9D:73:D4:99:F6:13:2E X509v3 Authority Key Identifier: keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:4c:49:dc:1b:4e:25:b0:fb:b3:86:47:22:36:bf:e3:55:92: a3:d7:78:2d:94:aa:b4:51:c3:9d:1a:8a:32:9e:7d:26:d8:32: 31:31:11:5a:f0:05:1d:57:86:8d:5e:b9:7e:51:77:41:bd:4d: c8:2c:30:27:df:ca:d2:e2:5c:19:7d:67:c3:04:1b:e2:ac:f2: e5:bb:41:e6:d7:9b:d3:83:cd:28:3e:73:07:54:33:4f:9a:db: bc:ae:3f:30:84:36:a4:ad:22:e4:92:5a:14:6e:a2:86:d9:09: e3:3a:ef:0c:f0:73:d2:a5:28:87:81:f0:65:ce:60:dc:96:d0: 8e:62:e4:59:17:c0:1d:68:b4:31:42:5d:a3:19:bc:5d:b7:d3: a4:ed:33:8f:ce:11:da:0e:99:25:cc:0c:91:2c:a4:81:79:c5: 30:b5:fc:91:37:d6:e8:5c:d5:4a:9a:72:ab:0b:01:31:a3:c3: 89:54:6b:70:e3:6a:9e:c6:69:bb:f2:9d:4c:18:ed:4a:88:93: 1f:a9:28:c5:48:26:9b:62:6a:ad:5b:ad:c1:99:c0:52:75:9c: bb:fe:d3:c4:19:67:53:19:c2:f0:d8:57:4f:6a:fc:41:7f:c3: 61:42:c8:88:e7:b6:71:72:56:4c:23:80:b9:f4:bc:42:bc:8a: a5:fd:d6:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdo8rcp0EdL4hg5jSd2nyvlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh ZGFlNzUwHhcNMjUwNjEzMTEwMDI2WhcNMjUwNjE0MTEwMDI2WjAzMTEwLwYDVQQD Eyg3MDBiMGU5M2VmYTUyNTE1MjNkNjEwZTJlYTlkNzNkNDk5ZjYxMzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZjy5xje5eK+z8mfOifQviCugolV eE/Fi0BrUUYEseZ3FXOtCw3o1RHejBlJG4DqYAkQuzBo6Hs+RUhvhPruTUMluGyb BqNoN44Yx7wYCrxi0F2tMTc6gPBSdZbq2VaD2bmjO8SRCXak+vkHvwV3yWnqr3ND XV//z4+QsapHivXhsYPttgkF9C74PkQn73zb+vY0Fa3X09MlX1MY5vOyNCF6FtYf QIjRUJysLVq2Axn2lCQlMiiS99mMKn0uS/UQf7RYPV3VZ9FdIoiXGtdwOEeAQDrb ylpBDdSCM42Ew36zhwOue/YL1LPJd7AYNCVxIa972IcMu0vTRYPQGNcSAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHALDpPvpSUVI9YQ4uqdc9SZ9hMuMB8GA1UdIwQY MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt YmM2Nzk0ZTk1ZTVhLzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakxJ3BtO JbD7s4ZHIja/41WSo9d4LZSqtFHDnRqKMp59JtgyMTERWvAFHVeGjV65flF3Qb1N yCwwJ9/K0uJcGX1nwwQb4qzy5btB5teb04PNKD5zB1QzT5rbvK4/MIQ2pK0i5JJa FG6ihtkJ4zrvDPBz0qUoh4HwZc5g3JbQjmLkWRfAHWi0MUJdoxm8XbfTpO0zj84R 2g6ZJcwMkSykgXnFMLX8kTfW6FzVSppyqwsBMaPDiVRrcONqnsZpu/KdTBjtSoiT H6koxUgmm2JqrVutwZnAUnWcu/7TxBlnUxnC8NhXT2r8QX/DYULIiOe2cXJWTCOA ufS8QryKpf3WYA== -----END CERTIFICATE-----Generated at Fri Jun 13 19:09:16 2025 by rpki-client