$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft File: p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft (raw, json) Hash identifier: ayX55Huob49skN/B/b/QeKbLkxQG5q8XagOhGqRDCZU= Subject key identifier: 54:56:A9:A6:E9:FE:BD:93:B3:EE:80:04:18:0C:E4:B9:99:A2:36:DE Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93 Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093 Certificate serial: 0197684E163A24B75E715E023042A742D4DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft Manifest number: 15A2 Signing time: Fri 13 Jun 2025 08:00:37 +0000 Manifest this update: Fri 13 Jun 2025 08:00:37 +0000 Manifest next update: Sat 14 Jun 2025 08:00:37 +0000 Files and hashes: 1: D-RIX_FD-SN5SshOisKYwCgAV_I.roa (hash: x033PUL0ZGG5mDhT/he8/ieNNlTHX9WAHAFDtaJQ278=) 2: DzfEbFPfYy4xpas3bsxIDlFZktA.roa (hash: THhbtWRVoUEwxJC8CZKbYrVSasGjOcgtKoQ/LVP3UKA=) 3: E9n95xnL19yX1B4Vk9ExkIt3f-c.roa (hash: ouMNy3kdRPfar+w1HNS2jM0LMO/r+ZZQenoBAODEfBY=) 4: EAoNPZ8TpgdLFjCSj501GJeuEXI.roa (hash: pO6PSYGesSNZg2BIOmFMIZ89ZMsZTFVJdrF49KPq8PA=) 5: FFaDrp2TE8Iso6bJlqnb0FqxMJo.roa (hash: Jw9G+J8hnCo8w1musIzxpySO6bTcvYrzNLckyhAd2sE=) 6: FXDFb34PBHFpzXqxsfO-MRRoL1w.roa (hash: oabg5c6EyRNzxsL44FI1GqhM5cn4+01B5g9m9wTra50=) 7: IUh9_C97qpOKm_8AV-AspCaoEAg.roa (hash: c2S3m+7nRWXLhOWwBs+WGI3pFEVCypK98I+qc9J+WoQ=) 8: Nbis52_bGmBIGC7k7OWz54ZVymo.roa (hash: aH/DSjSBHo+CUhmGlittWaZYo1UBwB3kdgrpakh3geQ=) 9: PPsYUSjJ6B10FlewER5Ai8nn-_A.roa (hash: 10T1YdRCwRDgbSqL2l2y0wL7RPOmP97+IJQfqf219GY=) 10: oJr4DCeqtN2tV6Ugf36L9eXTcTI.roa (hash: vOwTJ+3Vsj2ap8ElFcEgLM26b3Nku6y6ruqjJGc7XJs=) 11: p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl (hash: 3+I4FJUlpbJYZJ5S/XMwjAQnqKcBITbJ5BXnkXWBblY=) 12: pY29XiCKfPgxYFYQ6-Ey_qrcL8w.roa (hash: UStN0NQIs1Hh3GK9cdElOtzaqGJ6jlYdtTPTd6s3Eic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 08:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:68:4e:16:3a:24:b7:5e:71:5e:02:30:42:a7:42:d4:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093 Validity Not Before: Jun 13 08:00:37 2025 GMT Not After : Jun 14 08:00:37 2025 GMT Subject: CN=5456a9a6e9febd93b3ee8004180ce4b999a236de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b3:05:d6:a6:fd:44:05:47:d5:e9:94:5f:aa: de:1b:10:37:21:d5:ae:4d:b9:47:32:80:88:03:04: cf:af:58:85:63:29:9d:43:00:05:a5:02:79:47:a7: 23:48:b4:59:4c:57:73:a7:9e:e9:97:2b:61:5a:5b: 21:13:1a:5e:2f:17:dc:d5:4d:74:a4:86:04:79:6c: be:1f:12:59:ff:1d:00:53:7f:7d:96:ec:35:b9:6b: bf:7f:ec:7a:42:c7:bd:02:4c:bc:fd:e3:45:de:0a: 62:b6:a4:10:ad:1e:22:f3:f6:ac:c9:b0:d7:d1:51: 89:ac:94:da:b6:f1:c4:21:3f:b8:7d:79:a8:22:d1: e3:aa:9d:12:3a:8e:7f:7d:fd:10:ea:dc:2a:c4:c3: e5:36:c0:a0:a2:58:b7:65:53:f3:71:f8:4c:8f:42: 91:6a:a3:ea:55:94:37:75:2a:59:30:fd:ca:f4:9b: 7a:a7:c2:78:0e:bf:bc:8d:78:f7:d2:2d:27:97:3c: 45:82:cb:5c:ab:f3:32:74:d1:89:e6:1d:bc:c8:e1: 38:65:be:00:ee:34:40:9e:33:5d:4f:ff:8b:12:be: ee:92:5c:82:a4:f9:28:14:90:8b:ae:90:96:e9:01: 10:94:ea:d9:6d:b3:93:75:2a:c2:3a:f9:71:f4:d9: fd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:56:A9:A6:E9:FE:BD:93:B3:EE:80:04:18:0C:E4:B9:99:A2:36:DE X509v3 Authority Key Identifier: keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f7:37:cd:e3:9b:98:dc:55:59:a5:7f:7e:bd:a2:a1:af:7d: c2:a7:8b:59:fd:bc:eb:1a:7d:f6:f4:fc:d3:93:1d:f5:48:b9: c2:be:45:28:f9:96:fa:cc:39:ef:1a:7f:6e:2d:49:9d:b9:e4: 30:bf:1e:c6:f4:7c:0c:98:90:60:1b:be:78:c2:e0:be:f1:b0: b8:3d:bb:39:64:d4:63:2e:56:f4:61:60:ea:8f:b2:8a:a6:f4: be:0b:f1:25:12:98:ee:45:65:cf:00:bb:4d:01:48:83:30:cd: fb:11:ca:bd:05:67:cd:1d:bd:8c:25:a2:f1:ca:95:62:92:bf: 3b:44:c6:b3:2e:bc:ff:d6:4c:f0:10:2a:b7:52:fd:a8:4e:f5: 67:12:dd:ee:df:0d:f3:2e:d7:8a:86:3c:70:c4:ca:3a:31:a7: eb:2a:71:2c:d7:87:3f:48:25:24:48:7f:1f:76:c0:00:a8:24: 7d:c5:f7:04:69:33:c9:f9:0e:6f:c1:a1:b8:9e:7f:55:5b:29: 03:9a:8f:dd:9b:ec:2b:12:8c:61:5d:ad:d7:57:24:e6:11:e1: 94:7f:d5:21:a4:8e:08:fe:59:cb:ac:ee:57:88:4c:58:52:06: 36:7a:a2:28:8d:a3:7d:94:b2:d3:10:92:6a:30:ab:6f:0c:0a: f7:0c:9c:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdoThY6JLdecV4CMEKnQtTbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3OWJiYTI4MDVhOTg4OTU0ZTRmZWM0MjU3MDUzMGYxNmY5 ZTcwOTMwHhcNMjUwNjEzMDgwMDM3WhcNMjUwNjE0MDgwMDM3WjAzMTEwLwYDVQQD Eyg1NDU2YTlhNmU5ZmViZDkzYjNlZTgwMDQxODBjZTRiOTk5YTIzNmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrMF1qb9RAVH1emUX6reGxA3IdWu TblHMoCIAwTPr1iFYymdQwAFpQJ5R6cjSLRZTFdzp57plythWlshExpeLxfc1U10 pIYEeWy+HxJZ/x0AU399luw1uWu/f+x6Qse9Aky8/eNF3gpitqQQrR4i8/asybDX 0VGJrJTatvHEIT+4fXmoItHjqp0SOo5/ff0Q6twqxMPlNsCgoli3ZVPzcfhMj0KR aqPqVZQ3dSpZMP3K9Jt6p8J4Dr+8jXj30i0nlzxFgstcq/MydNGJ5h28yOE4Zb4A 7jRAnjNdT/+LEr7uklyCpPkoFJCLrpCW6QEQlOrZbbOTdSrCOvlx9Nn9LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRWqabp/r2Ts+6ABBgM5LmZojbeMB8GA1UdIwQY MBaAFKebuigFqYiVTk/sQlcFMPFvnnCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMt ZTFlZDlkZDJhMDJhLzEvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMtZTFlZDlkZDJhMDJh LzEvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/c3zeOb mNxVWaV/fr2ioa99wqeLWf286xp99vT805Md9Ui5wr5FKPmW+sw57xp/bi1Jnbnk ML8exvR8DJiQYBu+eMLgvvGwuD27OWTUYy5W9GFg6o+yiqb0vgvxJRKY7kVlzwC7 TQFIgzDN+xHKvQVnzR29jCWi8cqVYpK/O0TGsy68/9ZM8BAqt1L9qE71ZxLd7t8N 8y7XioY8cMTKOjGn6ypxLNeHP0glJEh/H3bAAKgkfcX3BGkzyfkOb8GhuJ5/VVsp A5qP3ZvsKxKMYV2t11ck5hHhlH/VIaSOCP5Zy6zuV4hMWFIGNnqiKI2jfZSy0xCS ajCrbwwK9wycIg== -----END CERTIFICATE-----Generated at Fri Jun 13 19:00:54 2025 by rpki-client