$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft File: hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft (raw, json) Hash identifier: HR39eTfcRw7oI6tuCS1/LNkeGjrni/WqyUEJyO22Wao= Subject key identifier: F7:B2:B3:74:D1:6F:84:A9:AD:4E:5C:BC:CB:19:00:25:DF:81:0F:7B Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd Certificate serial: 0197887D920BD208DBF7D8FF39175DB7F81F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft Manifest number: 11BC Signing time: Thu 19 Jun 2025 14:00:19 +0000 Manifest this update: Thu 19 Jun 2025 14:00:19 +0000 Manifest next update: Fri 20 Jun 2025 14:00:19 +0000 Files and hashes: 1: 2Il6q-ZqOuI80bOhmO2ATk_4gjA.roa (hash: qZ2AvjwfuN5RofSpAulT+zvOokvk9hdo9R5gBG6wVV8=) 2: EqxVNlycylxq6ufI9ng2ltdK1KM.roa (hash: b+kpuQsONfGhMD7qgwxZkbzW/4IKkzNE5v/myC4W0qY=) 3: MceCU4XPd0t7fhZxTxvxReumv1Q.roa (hash: 5TdX80iYVUkF2JY7Z9ZEOYjAnRhS8f4vWckTIPnEXdo=) 4: PSbAgR9oWL_1M-wwCnHY0Z_n_5s.roa (hash: UVsiOXoHlbBoR5HA9KIjZeyp4Ya5xZxEFqXfSX00QTE=) 5: QdYIwbhgXZFZDGrsD1bCfWnJfNM.roa (hash: GAa3KktDwm+TlBojUO7F6LnOQMJ0zxC/VLgeFCn23pI=) 6: V1rb0y6iu1TTOsIZQYPUPITNZdc.roa (hash: 4TLj9uQX2T55ymBodPD3FK/tTeE67Ngmw9g4awglSqU=) 7: Yjrt4HsK8wh6pJI81KOUWlnSEwg.roa (hash: XmuwPChIn1UvgMab/4oMWsQTN7bkJ51y5zUd1xVolH0=) 8: aaic0TQ08KDxqNotu0QjynGFp8k.roa (hash: y+rn4gyMmixGkyVVHgb8Zj+xOMFFm7BJm3FAMYf/M4M=) 9: cO2-NOuH2RV4sPciOdoA32su67Q.roa (hash: 9jc3V+7f0q1/c2NMI1faaA1MEEx9FCl4Vp7wxvOlyNU=) 10: euovkC8FzqkWizkBlJiIPuOidbU.roa (hash: NVQ3tcOFWDZctMMGjmKl2U9mGUa0NK9LjFLKrJC2iHM=) 11: gdNItxWNsM4KiGU05OylhksApCc.roa (hash: WiPvUqderzx9CicZMrqZIDKRBrczrFFx57GnwN1V0lI=) 12: hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl (hash: tF6XIw4DXNrjcpkyRJDJsA4JXFPq8j+DyDHCFzVlNIg=) 13: oMpZucICfk-8ZesIjg26RzH9z8Q.roa (hash: avfjdtl0mm9+afn2EBtC58m5oIaLp8/rBFhWdaYQq6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Jun 2025 10:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:88:7d:92:0b:d2:08:db:f7:d8:ff:39:17:5d:b7:f8:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd Validity Not Before: Jun 19 14:00:19 2025 GMT Not After : Jun 20 14:00:19 2025 GMT Subject: CN=f7b2b374d16f84a9ad4e5cbccb190025df810f7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5a:aa:d3:bd:09:70:17:72:cd:44:2e:21:73: 1f:ce:14:4e:e8:eb:fe:ef:13:39:11:6d:03:17:a3: 5b:37:4c:9a:82:7f:6e:5c:65:4f:99:ef:51:3c:e7: cb:91:1b:f9:43:c6:43:d5:7f:f7:e4:18:9b:87:be: bb:43:99:81:0f:f7:ca:86:51:38:16:95:c0:9f:71: 3e:84:58:b0:1f:d4:cd:df:44:b4:63:6f:01:3a:6f: fa:8a:46:fc:82:de:56:9f:a5:12:11:ea:5c:41:fb: 9d:10:e6:90:ed:a1:b5:e9:75:8b:81:64:54:ec:cc: d4:46:92:e9:6a:63:88:d4:90:37:bf:cc:dd:22:58: d6:ea:da:d8:66:1a:35:5a:86:ec:3a:b4:26:c1:fc: 8c:20:83:75:3f:ed:31:e1:30:d7:c0:91:ad:14:d9: 72:9c:4f:68:25:58:ba:3c:76:b2:45:3b:60:04:cc: bc:94:b4:57:07:a5:dc:b0:d3:17:86:69:d6:fe:e6: dd:2e:99:1b:0c:48:a1:d3:61:47:58:06:15:a7:8b: 9b:0f:f1:e9:d0:42:60:b5:39:d5:55:9c:9c:4a:d1: 90:37:3d:eb:07:18:f6:ff:1a:32:4c:50:a4:20:7b: 45:bc:ff:47:b4:cb:e6:ec:3d:d2:3d:2b:6a:d6:a3: 56:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B2:B3:74:D1:6F:84:A9:AD:4E:5C:BC:CB:19:00:25:DF:81:0F:7B X509v3 Authority Key Identifier: keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:2a:d6:db:d8:84:1a:d7:1a:44:96:33:0f:10:df:4f:aa:bf: f7:26:a0:d3:0a:71:16:c1:3b:c9:cd:c9:46:f9:1d:2b:f1:de: 62:b8:78:a3:94:54:01:14:5e:9f:ec:3f:10:f2:a4:6d:3c:1d: 52:02:67:39:53:2e:30:c7:92:4e:16:30:69:f6:4f:62:13:e3: 10:3e:a4:eb:e6:c8:ca:d1:c7:07:72:a5:e6:8b:77:89:29:5a: 23:ed:24:b0:2c:7b:aa:6e:0d:62:64:6b:d6:47:c3:d8:80:2c: bf:92:0c:9e:aa:87:a8:16:f7:b8:04:6a:b1:e1:14:f1:b4:fb: a3:64:c3:58:05:9f:8f:d8:c4:08:21:6a:c6:8b:71:e6:5b:b4: 05:c8:3b:ce:ed:d0:af:48:cb:cd:61:72:6f:5d:50:af:a5:6b: 11:ab:9c:1b:ce:4e:1b:1b:de:63:8d:84:54:44:64:e1:df:d8: 74:0f:e7:90:56:07:63:1c:f8:8f:dc:e1:74:93:81:06:b4:69: ef:88:3f:fb:76:23:66:56:a6:6c:2c:61:63:3a:f8:56:53:6a: c8:e3:53:05:c1:b2:c6:4a:40:df:fa:1b:d0:65:aa:52:83:51: 52:43:f9:58:49:2d:17:07:48:9b:ff:8e:4b:5e:47:7a:1d:e1: eb:b2:c8:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZeIfZIL0gjb99j/ORddt/gfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZDBlNzYzZjkzNWMxNzE2OTRmMTcyMDU2ZWI0NDIwOWRi MmUyY2QwHhcNMjUwNjE5MTQwMDE5WhcNMjUwNjIwMTQwMDE5WjAzMTEwLwYDVQQD EyhmN2IyYjM3NGQxNmY4NGE5YWQ0ZTVjYmNjYjE5MDAyNWRmODEwZjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Fqq070JcBdyzUQuIXMfzhRO6Ov+ 7xM5EW0DF6NbN0yagn9uXGVPme9RPOfLkRv5Q8ZD1X/35Bibh767Q5mBD/fKhlE4 FpXAn3E+hFiwH9TN30S0Y28BOm/6ikb8gt5Wn6USEepcQfudEOaQ7aG16XWLgWRU 7MzURpLpamOI1JA3v8zdIljW6trYZho1WobsOrQmwfyMIIN1P+0x4TDXwJGtFNly nE9oJVi6PHayRTtgBMy8lLRXB6XcsNMXhmnW/ubdLpkbDEih02FHWAYVp4ubD/Hp 0EJgtTnVVZycStGQNz3rBxj2/xoyTFCkIHtFvP9HtMvm7D3SPStq1qNWPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPeys3TRb4SprU5cvMsZACXfgQ97MB8GA1UdIwQY MBaAFIXQ52P5NcFxaU8XIFbrRCCdsuLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2Qt ZjEyODM1ZjAyNDdiLzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2QtZjEyODM1ZjAyNDdi LzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkirW29iE GtcaRJYzDxDfT6q/9yag0wpxFsE7yc3JRvkdK/HeYrh4o5RUARRen+w/EPKkbTwd UgJnOVMuMMeSThYwafZPYhPjED6k6+bIytHHB3Kl5ot3iSlaI+0ksCx7qm4NYmRr 1kfD2IAsv5IMnqqHqBb3uARqseEU8bT7o2TDWAWfj9jECCFqxotx5lu0Bcg7zu3Q r0jLzWFyb11Qr6VrEaucG85OGxveY42EVERk4d/YdA/nkFYHYxz4j9zhdJOBBrRp 74g/+3YjZlambCxhYzr4VlNqyONTBcGyxkpA3/ob0GWqUoNRUkP5WEktFwdIm/+O S15Heh3h67LIPA== -----END CERTIFICATE-----Generated at Thu Jun 19 17:15:10 2025 by rpki-client