$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft File: a8XefXJVt9WCYMZaEgsWTvEO-QM.mft (raw, json) Hash identifier: axYUoFxo2js7OvFxj3fITAtj+xB26Pz3sI0w2xMtLus= Subject key identifier: 00:75:E6:45:47:D3:65:97:DE:41:81:F2:07:70:00:FE:94:8B:1B:E6 Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Certificate serial: 0197696123BA6B763466AD1949FE187800BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft Manifest number: 1563 Signing time: Fri 13 Jun 2025 13:01:03 +0000 Manifest this update: Fri 13 Jun 2025 13:01:03 +0000 Manifest next update: Sat 14 Jun 2025 13:01:03 +0000 Files and hashes: 1: 12ToQcSPt7mcdwlwu8cks0_4omc.roa (hash: Iyr2cE2tf2K+xaBK2dhfD2MWZhPJHAOvhdyF3JqR+/g=) 2: 5ZYhCNxqOm04hmY0BhngKxN9rig.roa (hash: 83J35QD4/t+gUfggZnoS3qCNRY62Cfjrx/Jm442KIdY=) 3: DD7MG415kr5pDZ5NERV8_6UIOOg.roa (hash: u4w0GFe68e8W5/D1x1XDL/I/y5A0DFg3JZSWmOmPxVs=) 4: DNFKKqPzY2tTxyq4ZF-e6ESwWBk.roa (hash: ONyXaG/qy9WX6Bit7PbMeuasymNM8i3asJe1STaYw+o=) 5: HQby7lGCxVhcsYrFBxtLvu1Nq1s.roa (hash: OEoyOXMuUI9gzJHQlRaFw5QR3hyZ9zizJ0Zhg109soQ=) 6: KEB7URRNcLIkdHFl8_NaQFzoCUc.roa (hash: 8o0J9qbfKon/Y8q8sQm0uMymQ1kVnwb8u5ia9INGr/U=) 7: RVuh9Ovnia6HGIxuY5C4mqQkVzw.roa (hash: 7MdQXOdkGadK2Vo4n1LYddNyvg9R887clmJN5QnKDO0=) 8: _4iJCnTkrZTLi3Znw6No51nUp0U.roa (hash: q5ypixYuURsWaauidvKopOxQLyMvMh9Ff8agaEGE8Z8=) 9: a8XefXJVt9WCYMZaEgsWTvEO-QM.crl (hash: pcziZtRQ9WB2J3QSwgr6uJjqLhampTHE9IMGho+fEKo=) 10: egyYxAR3bwmsGgeknwOtvs63Vmw.roa (hash: XurIkmwZSfSrHBi1j2SOabRmxdimDBrxAVpSXYwSmK8=) 11: gCwZCj5y4eEHhiE3OdNG143EtPw.roa (hash: bJxdVgp0WUK1yUG+3MFHdMNTBJUCc3SJjDGJmr3bN5s=) 12: kWxL8-0FaQ5asnDLfivzWKH4-z8.roa (hash: aTbkIB4IPS1IGAIXN2uxEpuYorOcI3bZmMM6X6TsyjM=) 13: wM1Yw5nFuvuJTOAzQjCj5rN5Pm0.roa (hash: ent4AXHk/p6bQe6GuoAZTq2KLI9u7gMCUsO1EmVjq8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:69:61:23:ba:6b:76:34:66:ad:19:49:fe:18:78:00:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Validity Not Before: Jun 13 13:01:03 2025 GMT Not After : Jun 14 13:01:03 2025 GMT Subject: CN=0075e64547d36597de4181f2077000fe948b1be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:41:b0:97:5c:89:22:66:9e:e8:dc:1f:17:69: 59:f8:6c:83:80:77:47:99:41:bc:fb:e4:8a:af:56: 4e:32:03:c4:24:07:23:19:62:72:2b:1f:48:18:ee: 24:7a:a7:07:27:ff:5a:ef:9c:f3:ce:fe:50:2d:63: 2f:20:14:ca:34:09:29:91:3a:b5:e2:99:a0:dc:b1: cb:a9:f2:b2:62:97:d3:6c:1b:9e:66:10:7b:14:1c: 5a:04:36:89:69:ce:a1:17:47:b0:7d:a5:68:2b:24: 24:3f:50:6b:ec:4a:36:ca:6c:a5:c7:22:53:2d:5b: 32:fc:ea:8b:f4:dc:9e:29:c4:b0:ee:bb:e7:cf:31: 53:6a:2a:13:84:4f:9d:38:a4:1e:74:62:4b:cb:af: 06:d3:73:b7:53:0e:bf:bb:b3:5d:68:cb:a3:2d:d1: 4c:c2:4b:ad:0f:8f:5b:81:9b:66:d0:2d:d8:98:9c: de:9e:c1:43:db:ab:ca:4d:3d:85:e6:c2:0b:a4:a9: 84:a7:77:45:2a:49:25:a1:d9:3f:67:d0:3c:56:f0: 1e:71:f8:53:9a:da:cc:14:a7:15:f9:5b:aa:e7:f2: b9:09:d9:14:e8:8a:a4:c7:d1:6d:c9:61:a5:d3:97: 39:2a:16:11:e2:73:4e:ff:98:c2:32:03:ae:b0:ce: e2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:75:E6:45:47:D3:65:97:DE:41:81:F2:07:70:00:FE:94:8B:1B:E6 X509v3 Authority Key Identifier: keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:3f:97:e6:31:2f:83:09:ee:3e:e4:9f:70:34:de:79:3b:36: ef:00:7f:45:6c:2e:e3:38:68:01:85:76:11:3b:70:3a:58:a1: 79:fc:63:94:61:af:b8:f3:49:da:69:97:d5:36:96:84:f5:9d: 9e:84:36:c0:88:33:0a:94:97:d8:49:f0:19:a7:a1:6c:74:08: d4:47:ad:96:ee:27:3c:c4:94:9d:81:0a:05:ce:f3:2a:32:12: 96:50:e7:2e:67:c8:87:79:6e:7d:82:ec:81:0d:aa:89:79:b9: 81:ba:4e:4d:d4:68:c4:f9:95:2a:47:60:2a:81:d1:72:d8:fe: 3b:4e:b0:b2:2e:59:2a:aa:a4:04:82:9f:49:dc:c3:08:0e:78: 2e:53:ec:61:97:0b:09:ac:c7:50:c9:8c:87:48:21:42:9f:6f: fd:38:51:0f:e0:66:a2:b0:61:70:5b:26:d2:34:7b:cd:41:6e: 6a:87:49:6e:44:59:65:07:ce:c8:91:df:bb:00:af:1f:1b:be: 0d:5e:db:55:d2:a5:95:22:fc:c3:71:23:d7:e3:19:6b:a3:51: 0c:a5:51:67:01:fb:c0:ab:72:b8:9b:fa:be:fa:cf:b5:2a:c4: bf:2a:c2:57:c6:38:c9:68:87:9a:3b:1b:24:f3:16:f3:28:82: 18:35:ee:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdpYSO6a3Y0Zq0ZSf4YeAC+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw ZWY5MDMwHhcNMjUwNjEzMTMwMTAzWhcNMjUwNjE0MTMwMTAzWjAzMTEwLwYDVQQD EygwMDc1ZTY0NTQ3ZDM2NTk3ZGU0MTgxZjIwNzcwMDBmZTk0OGIxYmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukGwl1yJImae6NwfF2lZ+GyDgHdH mUG8++SKr1ZOMgPEJAcjGWJyKx9IGO4keqcHJ/9a75zzzv5QLWMvIBTKNAkpkTq1 4pmg3LHLqfKyYpfTbBueZhB7FBxaBDaJac6hF0ewfaVoKyQkP1Br7Eo2ymylxyJT LVsy/OqL9NyeKcSw7rvnzzFTaioThE+dOKQedGJLy68G03O3Uw6/u7NdaMujLdFM wkutD49bgZtm0C3YmJzensFD26vKTT2F5sILpKmEp3dFKkklodk/Z9A8VvAecfhT mtrMFKcV+Vuq5/K5CdkU6Iqkx9FtyWGl05c5KhYR4nNO/5jCMgOusM7iOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAB15kVH02WX3kGB8gdwAP6UixvmMB8GA1UdIwQY MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt ZmRmNjYzOGQyYzA0LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0 LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnz+X5jEv gwnuPuSfcDTeeTs27wB/RWwu4zhoAYV2ETtwOlihefxjlGGvuPNJ2mmX1TaWhPWd noQ2wIgzCpSX2EnwGaehbHQI1Eetlu4nPMSUnYEKBc7zKjISllDnLmfIh3lufYLs gQ2qiXm5gbpOTdRoxPmVKkdgKoHRctj+O06wsi5ZKqqkBIKfSdzDCA54LlPsYZcL CazHUMmMh0ghQp9v/ThRD+BmorBhcFsm0jR7zUFuaodJbkRZZQfOyJHfuwCvHxu+ DV7bVdKllSL8w3Ej1+MZa6NRDKVRZwH7wKtyuJv6vvrPtSrEvyrCV8Y4yWiHmjsb JPMW8yiCGDXuYg== -----END CERTIFICATE-----Generated at Fri Jun 13 19:22:32 2025 by rpki-client