$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft File: tIUv-6fVfFqK-7bqW-r33-wMFFo.mft (raw, json) Hash identifier: 0Ew8AVIj+5eRgNt9HPbk/AV+OmuD4nx7o5GD4ZsMhsQ= Subject key identifier: E5:DF:B4:3B:59:60:77:99:E7:6E:CA:12:20:CD:C5:D8:5F:77:C2:CE Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Certificate serial: 0197797874E6AC7FF8764C5E3F88C62F5AA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft Manifest number: 15A5 Signing time: Mon 16 Jun 2025 16:00:26 +0000 Manifest this update: Mon 16 Jun 2025 16:00:26 +0000 Manifest next update: Tue 17 Jun 2025 16:00:26 +0000 Files and hashes: 1: 2zBG6wv0zKBe2XlbGkfLL9rOdtY.roa (hash: lxNpEB+wfb/SASGgTTjYX3zTxUdrCP8FyxAXU//G0JE=) 2: 60ZaPiBpi8SxBTjOjQUT9FiEU2Q.roa (hash: +EenJI8/Zu0itO/r18F94M+NWWU8CW03dUIDwunEbUc=) 3: ELder04tNbbgntelOzAhfHduEJQ.roa (hash: EYr754S/llaOJHTStE73M5DFVVB9J1YVjraoxE/z0DE=) 4: EU2O-Gd0BV713EAdFoGJuGMnLgQ.roa (hash: DIGhFlsty46rXCRlbLUopCZPIy0Ap7bO0kln0jsUUZQ=) 5: O3sXFCWDkxRLQArJVgciZYJOH2k.roa (hash: wEiLpu8rEygqvBvHCRoBqicZ9xgf2J+eV7J8nj+KxjA=) 6: ZjHl0XpQM8CCJz6Om67G0wOmvS4.roa (hash: xCetPcOL8RFsZEGexQBgMW05eQfuM1TVnSNp6oyXZtQ=) 7: d8mFLNhZassFfsIT0V6Pg-FoNgA.roa (hash: G1lxk+WJgE19vtZBUhgAhwauP4CikNyKzPmcQ0hwXlc=) 8: dEvm44MVXindQlOEmPEQUDFIhOs.roa (hash: dVgBBC/Rmim2eB3c1PNCO34aKUguzhPQDH4vqUewLA0=) 9: nf_J-Be6PvK26ukKjJl6IQe1MJY.roa (hash: 0NfHfYZttT9eDOJu1RyDhX+/FDw371Nzr/BlGE9d+BA=) 10: tIUv-6fVfFqK-7bqW-r33-wMFFo.crl (hash: bNwFG/oo7S3vNYHZJfCq9vn7282tJYDzhtZkrQ2ZtV0=) 11: xBgHl8C3dJGWCJmZHqv6nB5Y8oQ.roa (hash: rI1CEkrztn+BRMtnvWNccs01rdhwia4WvS8p6nZL0z8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 14:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:79:78:74:e6:ac:7f:f8:76:4c:5e:3f:88:c6:2f:5a:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Validity Not Before: Jun 16 16:00:26 2025 GMT Not After : Jun 17 16:00:26 2025 GMT Subject: CN=e5dfb43b59607799e76eca1220cdc5d85f77c2ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:96:f6:95:d3:0f:2c:e6:28:6c:db:12:cb:51: 02:75:c2:f5:2b:74:51:d1:34:84:cf:ad:df:f5:3b: e1:f6:cf:ca:5a:91:c3:dc:c9:9b:a4:f6:e7:74:ff: 72:85:7d:f0:6c:bc:c7:e7:67:5a:ec:93:1b:52:95: 50:3d:1a:d9:a6:37:a5:50:3b:e6:b3:1d:00:52:e7: be:ee:9c:fe:e7:cc:43:15:36:f9:b0:9a:4e:07:b9: 11:20:51:d7:04:e3:9b:49:eb:b8:3d:2f:ce:3b:b4: bd:6e:3b:b6:a0:3a:94:24:ae:5a:e4:49:6d:a0:ef: 40:f3:e7:80:ca:9b:77:eb:f5:d2:ee:f2:bf:39:b6: b3:ca:3f:ea:68:1d:3d:4f:c5:d2:74:2b:ce:e8:46: 55:a5:f6:dd:26:79:9f:ad:c4:aa:de:88:c7:9f:d8: 58:3a:66:ec:d5:f8:f0:d1:cc:fb:78:7d:f5:b2:ed: 61:ec:76:0d:94:05:67:de:85:ed:91:d2:1b:3e:e7: 3f:b8:67:52:69:8f:cd:02:2e:09:61:22:b0:94:0d: ae:04:e6:63:e4:c9:10:96:a9:a4:19:47:ed:44:e3: 73:74:5e:9f:e7:9e:6e:ae:ac:2c:f5:f2:f1:a9:6f: 2a:d3:88:9b:2b:ad:16:ff:5a:00:1a:2d:da:ea:06: 88:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DF:B4:3B:59:60:77:99:E7:6E:CA:12:20:CD:C5:D8:5F:77:C2:CE X509v3 Authority Key Identifier: keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:af:1b:32:6c:7a:76:2e:75:5a:49:68:e1:ac:ab:52:80:87: e6:75:b5:61:67:0e:92:a8:09:d0:e3:b1:65:93:b4:6c:c6:6a: 0a:30:27:47:37:63:2f:d3:21:cb:e3:5e:e1:8e:92:25:3e:c7: e4:46:33:de:5d:d4:af:e3:ed:7e:28:f1:37:f0:18:17:35:7b: 6d:8d:62:ac:d8:ab:88:ad:f3:1e:c1:3e:39:7b:fb:78:e3:05: e7:f3:93:5c:49:3c:37:f0:8f:e4:1d:be:25:23:71:75:a4:b6: eb:ec:1f:60:17:46:cb:99:3b:4b:3f:32:d1:38:c6:10:dd:9a: 49:44:35:aa:d8:fd:c0:7f:2e:59:f8:db:69:d8:ae:e6:06:b8: a4:ae:7a:80:83:45:4d:72:43:ff:24:3d:9c:39:46:8c:9a:77: 32:e8:74:78:aa:3d:24:67:7a:f3:2d:1d:5f:d3:84:56:6b:c8: 3d:71:e7:e8:7a:66:b9:b4:84:b0:10:4c:5b:4c:4d:b9:09:e0: fb:17:a9:93:0c:ff:d6:d6:37:c6:df:a3:c7:b6:cc:9c:fe:b5: 63:32:f5:9c:80:78:ce:96:dc:2e:b1:a6:4b:f9:04:19:d3:4f: 5d:fc:d1:7e:51:47:9f:95:ef:14:33:fd:4c:1a:44:6b:b1:ad: 65:51:e8:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd5eHTmrH/4dkxeP4jGL1qiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODUyZmZiYTdkNTdjNWE4YWZiYjZlYTViZWFmN2RmZWMw YzE0NWEwHhcNMjUwNjE2MTYwMDI2WhcNMjUwNjE3MTYwMDI2WjAzMTEwLwYDVQQD EyhlNWRmYjQzYjU5NjA3Nzk5ZTc2ZWNhMTIyMGNkYzVkODVmNzdjMmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZb2ldMPLOYobNsSy1ECdcL1K3RR 0TSEz63f9Tvh9s/KWpHD3MmbpPbndP9yhX3wbLzH52da7JMbUpVQPRrZpjelUDvm sx0AUue+7pz+58xDFTb5sJpOB7kRIFHXBOObSeu4PS/OO7S9bju2oDqUJK5a5Elt oO9A8+eAypt36/XS7vK/Obazyj/qaB09T8XSdCvO6EZVpfbdJnmfrcSq3ojHn9hY Ombs1fjw0cz7eH31su1h7HYNlAVn3oXtkdIbPuc/uGdSaY/NAi4JYSKwlA2uBOZj 5MkQlqmkGUftRONzdF6f555urqws9fLxqW8q04ibK60W/1oAGi3a6gaITQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXftDtZYHeZ527KEiDNxdhfd8LOMB8GA1UdIwQY MBaAFLSFL/un1Xxaivu26lvq99/sDBRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQt ZjcxMDM4ZTk2N2E0LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQtZjcxMDM4ZTk2N2E0 LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXq8bMmx6 di51Wklo4ayrUoCH5nW1YWcOkqgJ0OOxZZO0bMZqCjAnRzdjL9Mhy+Ne4Y6SJT7H 5EYz3l3Ur+PtfijxN/AYFzV7bY1irNiriK3zHsE+OXv7eOMF5/OTXEk8N/CP5B2+ JSNxdaS26+wfYBdGy5k7Sz8y0TjGEN2aSUQ1qtj9wH8uWfjbadiu5ga4pK56gINF TXJD/yQ9nDlGjJp3Muh0eKo9JGd68y0dX9OEVmvIPXHn6HpmubSEsBBMW0xNuQng +xepkwz/1tY3xt+jx7bMnP61YzL1nIB4zpbcLrGmS/kEGdNPXfzRflFHn5XvFDP9 TBpEa7GtZVHo5w== -----END CERTIFICATE-----Generated at Mon Jun 16 21:09:03 2025 by rpki-client