$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft File: Ben8oKhYT-scEjGQcUIwYbCP5FY.mft (raw, json) Hash identifier: j+iomlXDDIIKJjJEkbVrpGJ80+EstHatgAHinD+wXBQ= Subject key identifier: 73:4B:D3:7A:B1:B2:F2:A2:0E:4C:7F:88:CD:44:F6:E5:24:78:D8:C3 Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 01976E87029B773200E18CE59DB1E7B7BC31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft Manifest number: 0D9E Signing time: Sat 14 Jun 2025 13:00:31 +0000 Manifest this update: Sat 14 Jun 2025 13:00:31 +0000 Manifest next update: Sun 15 Jun 2025 13:00:31 +0000 Files and hashes: 1: 4JQtl6CjZI4Ed81VYmD8y3s93nc.roa (hash: DNWzfbgNl38BTmSJIdFxCJ7U9WCYuq21jLucbQaekUg=) 2: BL3LZfi-f3ywcf3FmAmJwnbzASI.roa (hash: DVAE75CLKTBw2pzOs2zlkLoQMMQUvF717xgboLC73+I=) 3: Ben8oKhYT-scEjGQcUIwYbCP5FY.crl (hash: Y6v/LLWetJrm59EY590Gb8ti07p732OUwm4pnZHuops=) 4: DeACqwGcvIcEJ9pagEhHd4n2i_M.roa (hash: WPp0dLB9p4cnbOnLtVE+B38AXmBSQMpiDZZIvPoqViw=) 5: FMfF0PRqbPl1Xgf7uetPmo11RwY.roa (hash: Nmk2r9tNYQqNw9x7igBvoQ88flRwtwnRPqDYVBzi6Zk=) 6: Q146qaaxZ1xmkBzI32xjl700K7Q.roa (hash: Dmot/z3pbyFtlPpe5Va8TlDgzImhsPNQJ1rELTx4Aro=) 7: XNBwXrAiwZu96uMUjODQvvz_Bzw.roa (hash: mCW8/M59wIOxOS0wM2q/LR+3KGIdWjCxHtDVDd4aiCU=) 8: Z4WfPAHr0U4HuMsBXDWE11AR6SY.roa (hash: nIFqFX+PoOUUY+ho0HNN5VDHjMoLJi/JVpJHhVS9zMY=) 9: fETfH_XiNbseiVsjZA2HM6Af2jI.roa (hash: uyRqpIalZYJdXa3YW/3/Z8wVH+1oAHTZduFpskFWKhg=) 10: foM10PwLyaHwLhfbaJzkwnbAE_w.roa (hash: DIaKJkxL7f9BTL5/9GbSSi0rXtJN9gz1NV5M8HRodzE=) 11: phO7epvCoYFhkG0dTV5RtGTfFoE.roa (hash: jkhzkXF+DB42uMow0dB8LWjmxEVbOyoIZtbBsaP8XFo=) 12: rS554DqYgNK00lANZV007fZTVkM.roa (hash: 3SSYULxYvCw8XOXXkyZRjzf+FifSR5lE3jD5NyjPQ0I=) 13: uZ82HsSJfJMX-injZJkIBGdxGBY.roa (hash: mT1BefewYqT0QULFBWTWCpATALXi+6J6LGgvQIVpGhI=) 14: wacKSVeFcrTyL4jcOjnOwrcddYQ.roa (hash: n1rU/BStziAQk9f5pDE6L63EitmHb6FHEduDthm4TxU=) 15: ytwdpN2_MmIz-ujAGkeOSyxFnQQ.roa (hash: Q1K4a50MOqKpSRbaxfZO8lYsK/lxhMtlTC8aBU8fdHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6e:87:02:9b:77:32:00:e1:8c:e5:9d:b1:e7:b7:bc:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Jun 14 13:00:31 2025 GMT Not After : Jun 15 13:00:31 2025 GMT Subject: CN=734bd37ab1b2f2a20e4c7f88cd44f6e52478d8c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:38:47:21:56:91:ad:4c:af:6b:db:19:72:0b: 6f:9b:15:9f:9e:1c:3a:a4:af:4b:7a:ad:dc:cb:d2: 99:f7:4c:b7:42:87:59:1b:06:63:f5:a0:0b:63:95: c0:05:50:d0:fa:ae:ad:95:14:ea:7c:26:14:a9:c7: eb:e1:40:5e:61:f4:13:7d:61:d4:25:d3:07:26:0b: 51:4e:71:8f:7d:42:ea:a8:36:18:82:67:bb:05:87: 12:bf:3c:25:bd:87:bd:d1:ae:b3:a9:b4:b1:70:c2: 47:3c:24:4b:e7:77:4b:30:da:ae:df:bc:ff:a2:6a: fd:9d:87:91:e4:ac:84:c6:cd:3d:72:bc:0f:05:cf: e7:c0:e2:fa:f6:db:55:aa:63:8f:03:13:39:22:e9: bd:61:ca:8d:91:f9:35:55:a6:ed:03:be:3c:88:31: c5:d9:cd:8d:1a:b7:4b:d4:fa:92:42:b5:b2:c7:c2: 97:ac:c1:eb:60:24:a2:45:76:4f:f0:63:cf:e2:68: b1:f8:d6:37:13:5b:a2:79:b9:9d:53:cb:50:50:77: 86:ef:4f:ad:11:b8:e8:aa:10:cd:c6:bf:59:02:e7: 0c:d9:70:5e:c2:ec:f4:d6:dd:eb:48:1e:f0:d2:69: 57:da:aa:fc:5a:84:af:45:f8:62:b9:71:58:ae:5f: 47:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:4B:D3:7A:B1:B2:F2:A2:0E:4C:7F:88:CD:44:F6:E5:24:78:D8:C3 X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:4a:63:ce:bb:64:7b:5c:70:29:cc:a3:92:6c:a3:bd:09:b7: e2:9a:16:92:cc:e9:f5:6f:41:d7:f8:3e:d3:48:69:f0:4b:84: 04:b8:17:ed:84:74:38:c1:60:29:d2:5f:b4:c9:36:5c:ba:ae: 1b:9e:ec:c4:7a:72:3f:4b:70:a6:be:98:5c:59:0c:85:aa:20: ce:90:77:ed:c2:a2:07:44:57:c0:03:39:eb:5a:51:95:cd:ce: d5:0a:4d:a0:a5:9b:46:f7:0d:c0:b8:03:10:48:45:90:9b:df: 4b:1a:f0:01:c2:12:cc:87:14:31:7f:df:3a:3a:2a:c9:fb:18: e3:c2:fe:0d:ba:2c:69:3a:70:37:b3:e5:e4:0a:9e:b6:e4:1c: 29:cf:f0:4f:dd:76:f5:4b:aa:e8:e6:e1:72:5f:98:7e:e7:db: 5a:75:c0:d9:9f:84:ce:c1:b0:8c:a6:2f:00:f9:d6:29:54:bb: 29:44:0f:70:5e:c0:eb:97:cc:56:e7:01:f2:dd:b1:a0:4f:39: b0:97:6f:57:f5:14:7f:97:e8:75:98:bf:f9:5a:db:df:5a:d9: 55:16:30:44:7d:5f:ef:81:0d:87:23:ec:8a:a6:e0:7b:12:db: 3a:f6:4f:2e:50:d1:bd:2f:db:b9:79:30:84:14:b3:a9:30:40: 20:68:8f:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZduhwKbdzIA4YzlnbHnt7wxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjUwNjE0MTMwMDMxWhcNMjUwNjE1MTMwMDMxWjAzMTEwLwYDVQQD Eyg3MzRiZDM3YWIxYjJmMmEyMGU0YzdmODhjZDQ0ZjZlNTI0NzhkOGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDhHIVaRrUyva9sZcgtvmxWfnhw6 pK9Leq3cy9KZ90y3QodZGwZj9aALY5XABVDQ+q6tlRTqfCYUqcfr4UBeYfQTfWHU JdMHJgtRTnGPfULqqDYYgme7BYcSvzwlvYe90a6zqbSxcMJHPCRL53dLMNqu37z/ omr9nYeR5KyExs09crwPBc/nwOL69ttVqmOPAxM5Ium9YcqNkfk1VabtA748iDHF 2c2NGrdL1PqSQrWyx8KXrMHrYCSiRXZP8GPP4mix+NY3E1uiebmdU8tQUHeG70+t EbjoqhDNxr9ZAucM2XBewuz01t3rSB7w0mlX2qr8WoSvRfhiuXFYrl9H3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNL03qxsvKiDkx/iM1E9uUkeNjDMB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEpjzrtk e1xwKcyjkmyjvQm34poWkszp9W9B1/g+00hp8EuEBLgX7YR0OMFgKdJftMk2XLqu G57sxHpyP0twpr6YXFkMhaogzpB37cKiB0RXwAM561pRlc3O1QpNoKWbRvcNwLgD EEhFkJvfSxrwAcISzIcUMX/fOjoqyfsY48L+DbosaTpwN7Pl5AqetuQcKc/wT912 9Uuq6Obhcl+YfufbWnXA2Z+EzsGwjKYvAPnWKVS7KUQPcF7A65fMVucB8t2xoE85 sJdvV/UUf5fodZi/+Vrb31rZVRYwRH1f74ENhyPsiqbgexLbOvZPLlDRvS/buXkw hBSzqTBAIGiPmg== -----END CERTIFICATE-----Generated at Sat Jun 14 22:23:43 2025 by rpki-client