$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft File: MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft (raw, json) Hash identifier: 8iKjQjXp9zaXK9kKI7p36Gqgd4GAA+YdzDAIaeuYdjc= Subject key identifier: D4:AE:AA:38:76:58:2B:F3:E3:7F:83:DE:AA:EB:D0:0F:31:EF:E1:9B Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Certificate serial: 01978D6D10AC7B76BB511F6D058CC8CA26CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft Manifest number: 15AC Signing time: Fri 20 Jun 2025 13:00:24 +0000 Manifest this update: Fri 20 Jun 2025 13:00:24 +0000 Manifest next update: Sat 21 Jun 2025 13:00:24 +0000 Files and hashes: 1: 7sUlQFo2i2sGz_Vst269K_D-c-U.roa (hash: awgZwYT2+l2C5RaRZHXtrmJNbZfubWqB+2+301bBQBU=) 2: MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl (hash: SiArvqDJ86snqdvZiOZXN443npPrCtSDOYdZO72c1/g=) 3: N6977Tm3BxtAWxQMZFqlxhSXVqI.roa (hash: avNpgfUO6xrr8rilL4FRK/J7Wxu+LI2r4IfOPlXIeJI=) 4: OqobHIZLFLbZk0OR9E-PF1zk1Lw.roa (hash: Op02L+M19/z5j79qbmcRNqPT6icOYzM0VJzQXj5mmv8=) 5: TEsKuOI8Wr3xLM61BToTHvaxLG0.roa (hash: rGoXl2FfQwurIyUgTu1Dn9mUe7pNqUYv/AJnXAkg28U=) 6: i7jWP6E6hcB7Kvbk4mThF2buTs8.roa (hash: OqH0B+K5eYlDv/BpS97jLxNiwQggexBzkbjaho23mP4=) 7: nqc-9YDKd79YsE90D6bPl2BpKgE.roa (hash: VLqSIZaMWc7sFSdSIdfn5EqqZNs2ezp2l6diOyM4sNY=) 8: rgeIy49dLmNJww9sp8JRWKXD-n8.roa (hash: L8MUX4zAy84NplfwfzJB7WI9HcrmosjCL1UuxDQCssQ=) 9: xZ2vcM-Bgt-peFWCq0zItN8_N0c.roa (hash: IJSnWW805B1m7rlymmTJG2w628sB6dalr9ieL5l/bMk=) 10: zZigjvCd6NcudatYLyfpsyOboFA.roa (hash: vGtEfaZy/GpSD6Vra1IvWRrERF5jpy55majvnW9xdMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 21 Jun 2025 13:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:8d:6d:10:ac:7b:76:bb:51:1f:6d:05:8c:c8:ca:26:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Validity Not Before: Jun 20 13:00:24 2025 GMT Not After : Jun 21 13:00:24 2025 GMT Subject: CN=d4aeaa3876582bf3e37f83deaaebd00f31efe19b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:80:6e:08:0a:4b:24:58:89:ab:dd:3d:60:84: f9:32:52:e7:de:e3:38:53:74:31:d3:e4:1f:ff:f8: 6a:45:72:ab:91:33:fc:cb:c1:e1:79:7c:0c:9a:74: 62:2e:1c:52:61:a7:6f:4e:ee:74:cf:d4:60:5b:d9: b4:a9:d8:26:f0:fe:81:04:b5:b3:a7:8d:78:cb:92: f5:1a:de:b5:5a:a0:de:a7:e3:92:6f:37:a6:f2:08: be:e5:3c:89:78:9b:d7:38:4f:9e:f8:09:0a:fb:bf: 81:62:10:eb:ae:a0:e6:b1:cb:01:30:16:84:18:6d: 80:82:67:81:58:0b:a8:23:d9:60:d9:0a:c5:5e:15: be:a4:94:ff:b5:f3:10:ee:6f:65:8b:73:57:49:4f: d5:5e:14:36:6e:fa:2b:64:72:52:bf:3b:4b:ff:95: a8:b7:b2:7f:09:75:52:04:0a:28:8b:22:f9:ca:61: f2:7f:7d:c6:f4:76:53:b2:b2:6c:44:94:8e:14:3d: 81:44:33:fa:b3:b7:a9:61:d2:bc:01:1c:69:7b:18: 8f:f5:47:02:6f:c2:0d:07:df:65:28:bb:4a:b6:c2: 14:c8:d9:73:f3:99:aa:d0:b9:0c:7c:ba:54:ef:2c: 61:38:35:13:b0:0c:41:3d:1d:7f:d5:35:d9:8e:4c: 49:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:AE:AA:38:76:58:2B:F3:E3:7F:83:DE:AA:EB:D0:0F:31:EF:E1:9B X509v3 Authority Key Identifier: keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:25:02:8a:81:2a:15:b2:3a:f5:40:bb:64:05:67:52:6a:40: 17:52:26:63:dd:72:b2:86:61:66:3a:f4:f5:e5:8c:89:db:b6: 3a:81:43:2b:11:a0:2a:1e:16:be:8c:58:09:89:c1:18:f1:a9: 99:a0:2c:7b:db:14:11:c7:24:7d:43:8f:5c:04:ad:e9:db:55: e1:aa:c4:aa:88:b2:7b:dd:ef:99:41:aa:d1:8c:4e:2e:45:c5: 85:22:f7:f7:22:57:de:40:80:c6:05:75:5d:b3:e3:b3:a7:0f: a1:38:af:29:de:36:6e:c1:f0:83:54:4f:15:69:ee:c5:8f:e4: a8:f9:26:37:bd:c3:ad:24:20:f0:03:a5:fd:ea:d8:e3:9c:e9: 07:96:8f:5f:09:33:a5:eb:5c:b7:fc:a7:8a:08:48:ca:86:c5: 5c:9b:2d:bb:13:0b:1a:03:eb:3c:85:6c:42:f7:15:c2:3a:96: dc:b3:6d:93:47:07:bd:d4:6a:d4:c6:48:fa:bb:15:8e:c0:8f: a6:69:1f:d1:f0:b8:b1:71:06:95:af:bb:55:89:b2:85:fe:59: fa:56:04:38:e4:f6:3f:e9:09:68:81:08:30:72:6d:ec:04:6e: 55:ac:d7:46:c6:b0:75:c4:23:9c:35:5b:33:04:e8:02:5a:26: d6:87:d5:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZeNbRCse3a7UR9tBYzIyibLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTA4ZmI3ODFjYTZkYmQ4MjIxZjJjMmY5NTRhM2E3NDQ2 YjJiNDIwHhcNMjUwNjIwMTMwMDI0WhcNMjUwNjIxMTMwMDI0WjAzMTEwLwYDVQQD EyhkNGFlYWEzODc2NTgyYmYzZTM3ZjgzZGVhYWViZDAwZjMxZWZlMTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYBuCApLJFiJq909YIT5MlLn3uM4 U3Qx0+Qf//hqRXKrkTP8y8HheXwMmnRiLhxSYadvTu50z9RgW9m0qdgm8P6BBLWz p414y5L1Gt61WqDep+OSbzem8gi+5TyJeJvXOE+e+AkK+7+BYhDrrqDmscsBMBaE GG2AgmeBWAuoI9lg2QrFXhW+pJT/tfMQ7m9li3NXSU/VXhQ2bvorZHJSvztL/5Wo t7J/CXVSBAooiyL5ymHyf33G9HZTsrJsRJSOFD2BRDP6s7epYdK8ARxpexiP9UcC b8INB99lKLtKtsIUyNlz85mq0LkMfLpU7yxhODUTsAxBPR1/1TXZjkxJ5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNSuqjh2WCvz43+D3qrr0A8x7+GbMB8GA1UdIwQY MBaAFDJQj7eBym29giHywvlUo6dEaytCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDkt YzEyMjE4NzY1MTU0LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDktYzEyMjE4NzY1MTU0 LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAESUCioEq FbI69UC7ZAVnUmpAF1ImY91ysoZhZjr09eWMidu2OoFDKxGgKh4WvoxYCYnBGPGp maAse9sUEcckfUOPXASt6dtV4arEqoiye93vmUGq0YxOLkXFhSL39yJX3kCAxgV1 XbPjs6cPoTivKd42bsHwg1RPFWnuxY/kqPkmN73DrSQg8AOl/erY45zpB5aPXwkz petct/ynighIyobFXJstuxMLGgPrPIVsQvcVwjqW3LNtk0cHvdRq1MZI+rsVjsCP pmkf0fC4sXEGla+7VYmyhf5Z+lYEOOT2P+kJaIEIMHJt7ARuVazXRsawdcQjnDVb MwToAlom1ofVCA== -----END CERTIFICATE-----Generated at Fri Jun 20 19:53:47 2025 by rpki-client