$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft File: 8FIRKM9jSqavp-9S1THz_NVWKPk.mft (raw, json) Hash identifier: Cyr4lCFAayh79vw3P+6wqeH3biFWgr1pvP4oCV5fLyA= Subject key identifier: 7F:EA:A2:99:E6:76:10:02:B5:C8:68:67:E9:1C:BA:48:1B:E1:0E:43 Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 01976D3DEF40AD553FED319E8602E39777FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft Manifest number: 1598 Signing time: Sat 14 Jun 2025 07:01:04 +0000 Manifest this update: Sat 14 Jun 2025 07:01:04 +0000 Manifest next update: Sun 15 Jun 2025 07:01:04 +0000 Files and hashes: 1: 0vpioq7e7IBvU0f7txi-wExHAPw.roa (hash: lCvUWIuH8RdERCkztaN1NhfYOchJDmj9ywnhD1WG0qs=) 2: 1-t-clxlx4vHi76xBwGIh0Y5orug.roa (hash: WGphFqEzeHYQfivrVaHRtOvOzzhN/PDKxrZlm3FuIDA=) 3: 4CCEdgNV-fGWUC_aGHxQwbUsOKQ.roa (hash: zTRmkFZkHzwf+QYURy5/v5Sjyovq0HLSmOwtNQ48L/c=) 4: 8FIRKM9jSqavp-9S1THz_NVWKPk.crl (hash: pEYmbakmkskXSMt4f0TBnGPAyUehExkBEjPvk77qFOY=) 5: 9oOMh0CjqydkdSKEbK66nXXsu4E.roa (hash: qQJNJWud5A2R6q9LElC5WdsYynVdzga12kQWDH61mWo=) 6: AoQYABlbiRY1s0Gu3McHV58zrpk.roa (hash: 9zDAXKdytFg/3YwoUton7cniFW2Ja9ArE5tJ2skkn+c=) 7: OdGF_e17lYBOCmXmsk6hkXdf7b4.roa (hash: mFKHbPekFFY75D3Eu+1fU9mzEnOZ9+rJaeHup24zW3Q=) 8: PFyByii-LGzRSy90jiJ5mw1207A.roa (hash: gIS/3e5ejAqBGpUPti4f7RxoNdrem0KAE6vwjMubh3s=) 9: Qkq_75MjyviWe2NqgT_-Mwn9gnM.roa (hash: wJb9fi2vDIIR6voDYxFFRDUWuFkEQa98zP1PFmkzpXs=) 10: ScwFXX2rYjT7naQciVMaotJ-UfM.roa (hash: X8Vp96ZEvVObF+OkcOx9P04g9HBNU6my6Pc/b9LR72Y=) 11: rh7_88ku0NVEacOTg4kYRNyhUIs.roa (hash: Uz863y1lKUf+O+OGV8gNQDxIpi4RBI83I9R9FXt5Xp4=) 12: u37q8oxj6d2YnoBLY1VE3CqS2g0.roa (hash: QV9HVDjMgl4TBfOFPjFKF+CTfrUEm6XmvkI/fobJGaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6d:3d:ef:40:ad:55:3f:ed:31:9e:86:02:e3:97:77:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: Jun 14 07:01:04 2025 GMT Not After : Jun 15 07:01:04 2025 GMT Subject: CN=7feaa299e6761002b5c86867e91cba481be10e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9a:01:fa:a5:84:78:cf:f5:39:c1:90:fd:18: 0b:12:13:20:b1:4a:1f:50:0a:12:1c:09:45:af:ef: 11:a8:2c:68:01:18:c1:14:bd:85:34:44:b1:b0:46: c3:c5:4f:8a:ca:8e:57:5a:2a:57:43:6b:45:81:43: 2e:70:27:f8:f3:39:53:de:a2:6d:73:d2:f5:a4:aa: f3:06:bd:84:ad:38:84:f3:da:0d:06:b8:b9:c9:ca: 1f:f1:38:88:b0:7e:73:2d:b3:e6:d7:a9:ba:8e:91: 25:ab:cf:67:a4:ac:4b:d5:7d:1f:cb:34:0c:35:c4: f8:ba:03:ea:9c:12:42:56:40:44:3e:05:7b:e8:fb: 9b:7c:8e:1d:f5:48:d1:5f:13:0a:bd:f1:6e:76:5a: 99:b6:d4:16:12:3b:0e:8c:50:63:15:61:6a:94:57: 6e:fa:c4:6d:86:73:01:dc:06:cb:b4:3b:92:81:02: 72:a2:8e:96:31:e3:8a:3d:d4:de:32:39:f4:09:1a: c1:04:e8:b3:2d:ba:d2:3b:8d:c7:36:b0:71:9a:a8: 18:a0:81:28:38:d4:c5:ce:b0:ed:bd:f1:34:3b:fc: fb:1e:b2:f2:ac:ec:b0:04:57:81:ab:e2:3e:52:5c: b0:27:f2:bb:d1:e5:70:5f:64:56:bb:19:2d:24:13: 1b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EA:A2:99:E6:76:10:02:B5:C8:68:67:E9:1C:BA:48:1B:E1:0E:43 X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:55:62:41:03:98:51:d4:3a:b3:5f:ed:d0:b5:a9:7c:10:5c: 07:7e:b0:e0:1b:8a:c6:a0:25:e3:c1:eb:42:b8:3b:5d:17:90: a9:2f:b2:bb:9e:a8:d1:1d:e0:ff:59:5f:98:13:56:04:ff:0c: 6a:97:18:17:22:df:38:ab:de:37:9c:36:db:84:59:74:97:7c: 6d:a5:76:9b:9e:70:5f:67:0a:d6:fc:73:ed:ad:b5:3c:a4:7c: 8e:2e:ab:d9:fd:f7:cc:cd:6a:9a:7d:f5:41:e1:91:5c:4c:9a: eb:ea:cf:93:e6:78:87:dc:c5:09:95:41:1f:9d:8b:b2:94:09: 46:94:1c:7b:27:3e:b4:7d:e5:5e:2a:e1:21:f4:a9:af:c0:cc: a4:69:f1:37:3d:50:54:2f:c4:81:97:37:ce:7e:ca:ba:d9:b2: d7:f5:03:b8:52:96:39:2a:6f:75:e6:81:3d:55:cf:51:ca:ad: d7:4d:96:be:21:98:39:43:6a:e2:b8:8f:bc:42:e3:8a:78:16: c7:ad:38:cc:85:75:63:a3:21:c2:03:3c:51:c9:48:24:66:43: 4f:c7:1e:43:65:f8:ba:aa:6c:4d:9b:bc:68:a0:d8:f4:53:d2: 12:13:b7:57:1a:32:2a:b2:6e:29:dc:30:3f:ca:b7:cf:0c:d9: 0c:9b:a6:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdtPe9ArVU/7TGehgLjl3f/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjUwNjE0MDcwMTA0WhcNMjUwNjE1MDcwMTA0WjAzMTEwLwYDVQQD Eyg3ZmVhYTI5OWU2NzYxMDAyYjVjODY4NjdlOTFjYmE0ODFiZTEwZTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZoB+qWEeM/1OcGQ/RgLEhMgsUof UAoSHAlFr+8RqCxoARjBFL2FNESxsEbDxU+Kyo5XWipXQ2tFgUMucCf48zlT3qJt c9L1pKrzBr2ErTiE89oNBri5ycof8TiIsH5zLbPm16m6jpElq89npKxL1X0fyzQM NcT4ugPqnBJCVkBEPgV76PubfI4d9UjRXxMKvfFudlqZttQWEjsOjFBjFWFqlFdu +sRthnMB3AbLtDuSgQJyoo6WMeOKPdTeMjn0CRrBBOizLbrSO43HNrBxmqgYoIEo ONTFzrDtvfE0O/z7HrLyrOywBFeBq+I+UlywJ/K70eVwX2RWuxktJBMbGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/qopnmdhACtchoZ+kcukgb4Q5DMB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOFViQQOY UdQ6s1/t0LWpfBBcB36w4BuKxqAl48HrQrg7XReQqS+yu56o0R3g/1lfmBNWBP8M apcYFyLfOKveN5w224RZdJd8baV2m55wX2cK1vxz7a21PKR8ji6r2f33zM1qmn31 QeGRXEya6+rPk+Z4h9zFCZVBH52LspQJRpQceyc+tH3lXirhIfSpr8DMpGnxNz1Q VC/EgZc3zn7Kutmy1/UDuFKWOSpvdeaBPVXPUcqt102WviGYOUNq4riPvELjingW x604zIV1Y6MhwgM8UclIJGZDT8ceQ2X4uqpsTZu8aKDY9FPSEhO3VxoyKrJuKdww P8q3zwzZDJumkA== -----END CERTIFICATE-----Generated at Sat Jun 14 09:35:55 2025 by rpki-client