$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft File: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft (raw, json) Hash identifier: wU/PBCFEm7sHFeBaFk+nA/NKK7imZx0MKuxv3lWBrIE= Subject key identifier: 74:BE:10:8B:C4:C0:23:4F:29:6B:DD:0A:C6:64:83:13:E1:25:9D:E0 Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Certificate serial: 01976E8710EC780A7EF59E4642C345616506 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft Manifest number: 15AC Signing time: Sat 14 Jun 2025 13:00:34 +0000 Manifest this update: Sat 14 Jun 2025 13:00:34 +0000 Manifest next update: Sun 15 Jun 2025 13:00:34 +0000 Files and hashes: 1: 08x65D62xajmjuWxGOGX--5GFZ4.roa (hash: ku01TCluM3ObD1DEPpsLr/8jGhA1O5espf/zteTKSkk=) 2: 1-fxNLZQMykWE3SLBLsEKwibzn3o.roa (hash: U9t8UfOKITE6D0gBLc/Dtn9zr6EfXzJkxHJL0LBQvTo=) 3: FzyJ-A4chBzu8lQqhpLh4dfVe9s.roa (hash: kikBFtCVFZZA5yK1FlsJJ2Y15ol/mIm/K3+f2pwmt3Q=) 4: JRfXlKgZScSlnAP9_s4mWUCHMzI.roa (hash: Yofq9QzaUqxyhMLfnSLcXXtmS3vz0xWVOjl3kItQ1gM=) 5: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl (hash: QxnRjNX89mwR1ojYoVyFPq6HDnXTGPwNBnLTmd74kTE=) 6: OOWsOYaSoAqJ3HO-R5wNTcf_irg.roa (hash: FHVKtTLfD9KJ5KSxDig6awJ13wpTnxgLs+NcZ0Q//g4=) 7: UI2cnhatNs5ZeysmslxEpLBSTew.roa (hash: axZPCQgEFKrONNIyjteNC+Y0RYmX6khaCS5yj1K7lFE=) 8: XIqtTjvuJ5glY39EaIP6KmILhoo.roa (hash: oyK+JoJZ3ZJXn7BAWGpujgyfoF5xI3Ds91YiwWdI2PE=) 9: b_MAVuI29oBciIh7vGGq0NJVEzc.roa (hash: hDxp3S5bhbbLqI6OACypq5MMFaQlI+7lCsYe3tJ2F9c=) 10: dOfaSe3fIYIhGR1xcwXjfUk3OeI.roa (hash: uz8UfxMH6M1zEnn7EFrd8TVCQANQpajV/Ux4YkN59Jk=) 11: ivBw7pb2lERE4O4pT70f-IjK-H8.roa (hash: 9+du4uvg6+sqYU99LVsbimMbdhpdO5ppSVPQO3/HDIY=) 12: mew8-eeZMjfWFrph1bkqTGd0o2o.roa (hash: ZTROpY1xzLgXXfO1lrdKWiIbYEdEw9dXrylpkOT7OWA=) 13: o56KW7qmKI89RBX7wwhJRJnWzxA.roa (hash: TSisfXvRUilLYjnEFcF1fY33OVEAWdRk4KyWKFaY7ZA=) 14: vaL0J_r43BzBTm5r8Bo75j0pTF8.roa (hash: 75FzmVXUE4MjGcr9LiSgeGxgqkVwVmsZ6mF1xXYO59Y=) 15: wjhfspu_G4HGizYS_OBNLClt3cU.roa (hash: bxfIFEAR3HaNo4msf1HR2PgJlfyMNGagLyOKrjbfFag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6e:87:10:ec:78:0a:7e:f5:9e:46:42:c3:45:61:65:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Validity Not Before: Jun 14 13:00:34 2025 GMT Not After : Jun 15 13:00:34 2025 GMT Subject: CN=74be108bc4c0234f296bdd0ac6648313e1259de0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:44:23:09:84:ec:51:7e:08:9b:83:1a:3c:51: 5c:9d:74:f4:bc:2e:eb:ba:08:a7:3e:f9:7b:5b:84: ac:ba:c3:03:28:06:de:a1:0b:b3:59:4a:38:16:c2: 4b:af:59:95:fc:ea:e7:43:33:a5:94:fe:f9:ef:0b: 62:51:b8:ef:37:b7:67:95:44:d9:fd:b2:32:1d:db: 66:55:2f:9a:a3:13:f0:64:cd:b1:20:29:9a:72:da: 8b:2a:eb:52:9b:58:76:73:ad:37:f3:54:71:50:df: ce:c8:a9:15:ab:25:1a:e9:b6:7d:84:c1:6d:c8:f9: ee:ad:a1:00:57:9e:3d:7e:70:59:45:b8:5f:7f:67: a4:d8:d9:97:9e:7f:c2:76:7d:76:d2:fe:44:ca:66: ed:7f:e9:d2:8b:25:81:54:a9:b9:3b:46:58:c4:1e: 86:1e:55:7c:66:47:dc:a1:19:9b:01:5a:83:ae:d9: de:4e:d9:0b:cf:13:58:9d:1f:5a:e3:00:5e:63:33: ce:b0:43:8c:cb:64:81:d3:79:c4:26:1f:d2:f4:b2: ad:f8:bc:a4:b4:af:34:c1:40:07:5f:66:c0:52:ec: 3d:05:f7:fe:62:1b:e6:c1:de:6d:cc:2c:da:59:aa: 18:4c:d9:9f:7c:00:b3:ab:37:45:a7:7f:2e:11:bd: c2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:BE:10:8B:C4:C0:23:4F:29:6B:DD:0A:C6:64:83:13:E1:25:9D:E0 X509v3 Authority Key Identifier: keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:bd:5e:1e:75:0d:e8:91:0a:1c:d6:5a:4d:00:c3:5f:cd:b1: 47:c8:b4:b2:b6:b2:04:ef:de:2f:3d:f3:bd:a3:ed:d4:a5:ce: 4f:6f:00:ff:66:7e:2a:84:af:c1:15:1a:33:58:8e:8a:a8:c8: 9a:4b:de:83:f8:78:78:91:55:7e:86:f4:00:c6:52:db:25:b0: ed:fe:79:6b:4e:d4:18:e5:e2:f2:1c:4c:78:ec:7a:d3:a2:15: 30:25:59:60:67:60:8d:17:65:41:89:33:b2:34:bc:82:0c:bc: 03:90:be:5f:33:ab:d5:c2:fc:32:7d:c9:b2:c2:33:ec:e5:24: d0:b2:76:96:64:d8:6d:7c:cd:4a:53:34:e5:28:ee:71:9f:7b: 9d:68:7e:e1:22:ba:52:5e:b4:b8:f7:6c:5f:08:ed:14:03:c8: fa:2d:95:b7:fd:ac:79:e8:7b:34:57:51:12:b4:f5:77:9a:aa: d6:d9:b5:3e:f8:b7:d4:92:33:f1:58:a3:a3:27:d0:4c:da:d8: 03:cc:79:79:be:16:19:9f:d7:f3:5c:f1:eb:6b:f4:4a:ce:b5: e0:f5:d7:c7:10:5c:d0:e1:5f:c6:cc:0c:e1:d1:bd:45:bb:60: c0:69:eb:96:a2:a9:ce:95:ed:7d:7c:97:79:7b:1f:0e:e6:90: 75:f6:69:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZduhxDseAp+9Z5GQsNFYWUGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNDc0YWM3Y2E4NWUwOWMyZDQ4YjMzZTdiZjY2ZjhlZDc2 NGRlMGYwHhcNMjUwNjE0MTMwMDM0WhcNMjUwNjE1MTMwMDM0WjAzMTEwLwYDVQQD Eyg3NGJlMTA4YmM0YzAyMzRmMjk2YmRkMGFjNjY0ODMxM2UxMjU5ZGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskQjCYTsUX4Im4MaPFFcnXT0vC7r uginPvl7W4SsusMDKAbeoQuzWUo4FsJLr1mV/OrnQzOllP757wtiUbjvN7dnlUTZ /bIyHdtmVS+aoxPwZM2xICmactqLKutSm1h2c60381RxUN/OyKkVqyUa6bZ9hMFt yPnuraEAV549fnBZRbhff2ek2NmXnn/Cdn120v5Eymbtf+nSiyWBVKm5O0ZYxB6G HlV8ZkfcoRmbAVqDrtneTtkLzxNYnR9a4wBeYzPOsEOMy2SB03nEJh/S9LKt+Lyk tK80wUAHX2bAUuw9Bff+Yhvmwd5tzCzaWaoYTNmffACzqzdFp38uEb3CRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHS+EIvEwCNPKWvdCsZkgxPhJZ3gMB8GA1UdIwQY MBaAFDJHSsfKheCcLUizPnv2b47XZN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzkt MTJlYzIyYzljNWEyLzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzktMTJlYzIyYzljNWEy LzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAor1eHnUN 6JEKHNZaTQDDX82xR8i0srayBO/eLz3zvaPt1KXOT28A/2Z+KoSvwRUaM1iOiqjI mkveg/h4eJFVfob0AMZS2yWw7f55a07UGOXi8hxMeOx606IVMCVZYGdgjRdlQYkz sjS8ggy8A5C+XzOr1cL8Mn3JssIz7OUk0LJ2lmTYbXzNSlM05SjucZ97nWh+4SK6 Ul60uPdsXwjtFAPI+i2Vt/2seeh7NFdRErT1d5qq1tm1Pvi31JIz8VijoyfQTNrY A8x5eb4WGZ/X81zx62v0Ss614PXXxxBc0OFfxswM4dG9RbtgwGnrlqKpzpXtfXyX eXsfDuaQdfZpQg== -----END CERTIFICATE-----Generated at Sat Jun 14 22:24:37 2025 by rpki-client