$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft File: pnhXc98xO5FxG_a8WxSezCRrnok.mft (raw, json) Hash identifier: IhG2LUctqCcXdBvaSmt/P3iMgqUYc4DoMT3/EDSW7uc= Subject key identifier: 91:3A:D8:D5:8D:92:33:08:C8:02:3D:22:E4:C9:AC:D0:6C:46:75:BC Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Certificate serial: 01976D06A7B1DBCD20A4BAB9573F24EA5E14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft Manifest number: 1358 Signing time: Sat 14 Jun 2025 06:00:42 +0000 Manifest this update: Sat 14 Jun 2025 06:00:42 +0000 Manifest next update: Sun 15 Jun 2025 06:00:42 +0000 Files and hashes: 1: 4_O_iIpyAI9RehObq-pOpadb0Oc.roa (hash: yk0faU3G873g+gLSQoGVoe7NYYyCWEaHzHI6ZIk9UdY=) 2: 7loUqY3SMQ476AvW8cBj_oE5D0w.roa (hash: 9ZWiK7Ya0oQoJXKuXssFNZZZ1jcO9WaxjH/2eSSyYlw=) 3: 9qXJnie35SdfH2J2EgodKBngTzA.roa (hash: jwDaD5ZgcucjZdcdoISWLpA3Zdrcncz7G1jWAlDHN4k=) 4: _K6pKy4r_yxn6KKjdedN6hKQIRc.roa (hash: Fa8PiwPRQ/Nbg/tMa4sLtAZckTKFYG8hQ2oLAm3z+YE=) 5: eeGo9wragRSvkLaXijzUVv6g1UQ.roa (hash: f0fCuBwmYqh4E9JpX2SXK0IGaTdlCqkrpCwPLzLM7U8=) 6: f_BAmJDU6YD_W-jGGFTEv2Fs7Ak.roa (hash: PaLYZLAv0TrU+Bsc9bxTmK6PnOfA5lCBIqcJSl9Ay7o=) 7: h0Rq-64YdH2Rhgx8VqQPxecaOJk.roa (hash: +OMPPDfPiGbQBs5xm10WtKzO2XvkhzUC6VL8TFg0R8M=) 8: p7CrYRPqjfqg5-SpOOWgZYcH7pg.roa (hash: VxeYJO6+oO8JTtkcjhdpm2dOlDG12rU/cm/baKhjYqs=) 9: pnhXc98xO5FxG_a8WxSezCRrnok.crl (hash: oQm4u/8z4wy3RuczQaSUlJ6baC7M+oGP515bjAujnCM=) 10: vm5i6AVzmYzAz9qPwbnD4VrLfVA.roa (hash: VDQ8oeDiLzJU7KaKEM2DHEI37PMjg/GP0JQI1knZDEc=) 11: yj9vr2VnE10QnxtDsz-n2QVr0i4.roa (hash: oY4OEejijqth0Kn/mWSI257F9MR4bW3yyLCjseFCr/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6d:06:a7:b1:db:cd:20:a4:ba:b9:57:3f:24:ea:5e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Validity Not Before: Jun 14 06:00:42 2025 GMT Not After : Jun 15 06:00:42 2025 GMT Subject: CN=913ad8d58d923308c8023d22e4c9acd06c4675bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6c:13:84:2c:d1:73:d2:52:18:77:99:05:dd: 56:9f:a4:00:cf:df:43:36:89:d1:1d:bc:75:20:78: 07:c4:4a:cf:33:54:8a:c7:4c:0a:6b:c8:40:72:d4: 9d:56:b9:84:ac:60:d2:30:74:c8:7d:e8:f5:d9:f0: 19:15:67:f3:a3:27:87:91:5a:49:e0:67:cb:fe:12: c7:b9:46:7b:fc:5f:ca:45:a6:90:a5:fa:73:46:16: 02:e0:00:64:26:c5:e2:c0:ef:38:4c:6f:f6:1c:71: 40:1b:4c:5a:a5:c5:0d:0f:c7:7e:af:bd:e0:3a:27: 1e:ba:6c:86:47:e1:99:1e:76:f5:07:95:19:47:b2: 0a:28:95:22:d0:a0:f3:79:1e:fc:97:4d:99:cc:3e: 56:0b:f5:53:15:f5:ba:ea:1a:85:44:ba:e9:a5:9b: 97:b3:cc:f8:1e:e8:fc:db:a6:75:95:ec:29:a4:9c: 98:4f:b3:11:6f:67:8c:43:d6:0a:29:6a:ad:69:ff: b0:64:61:66:6b:d5:72:33:27:22:5a:0d:fe:e3:7b: 55:9c:8d:2b:ba:da:fe:2a:44:63:75:d6:cb:a3:e9: f3:b1:aa:1d:a4:c9:d3:02:1c:53:7f:3c:bc:2a:b7: 39:88:df:4e:41:ad:a3:49:5e:5d:5b:55:e1:2e:e3: 5d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3A:D8:D5:8D:92:33:08:C8:02:3D:22:E4:C9:AC:D0:6C:46:75:BC X509v3 Authority Key Identifier: keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:c6:6c:21:f3:7a:03:70:59:1e:09:5e:05:20:74:a0:11:28: 8f:76:c9:72:25:76:9d:28:ab:1b:0c:0a:b9:8d:f7:c5:26:29: 56:bb:e9:7a:36:ca:2b:08:7d:ad:ab:16:ca:6c:b8:53:be:dc: 0a:ba:09:ee:c6:6d:4e:aa:51:3b:34:9a:20:eb:f9:1e:92:c2: e0:07:10:f2:81:07:af:26:5b:0f:4c:a6:8a:24:61:14:53:5c: bb:77:15:1a:29:6d:9c:80:f6:1e:7f:61:27:08:f9:c1:a8:35: e7:d6:7d:af:a7:23:1d:d7:ff:49:88:96:a9:d6:9a:b6:14:63: 26:62:65:d2:3d:be:93:7e:db:65:55:e6:9e:39:d7:30:8c:6a: 0a:34:3f:42:91:16:94:45:7d:34:ab:56:30:59:61:61:04:40: 2e:ff:54:aa:e6:4d:f5:0f:75:9a:eb:70:26:21:a8:28:7c:5a: d8:78:61:3f:37:1d:da:73:a1:0e:00:46:8f:0b:e2:49:ac:bb: 42:10:ea:d4:95:17:c6:ef:be:6f:4b:6e:ec:e2:67:32:e2:ef: 39:ec:72:52:a6:c3:69:b4:08:3d:aa:17:04:ea:6b:af:e5:e6: 02:5e:a4:f4:a6:c5:bf:5d:52:d5:ed:f3:38:1c:f1:04:df:ca: 98:7c:69:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdtBqex280gpLq5Vz8k6l4UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Nzg1NzczZGYzMTNiOTE3MTFiZjZiYzViMTQ5ZWNjMjQ2 YjllODkwHhcNMjUwNjE0MDYwMDQyWhcNMjUwNjE1MDYwMDQyWjAzMTEwLwYDVQQD Eyg5MTNhZDhkNThkOTIzMzA4YzgwMjNkMjJlNGM5YWNkMDZjNDY3NWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWwThCzRc9JSGHeZBd1Wn6QAz99D NonRHbx1IHgHxErPM1SKx0wKa8hActSdVrmErGDSMHTIfej12fAZFWfzoyeHkVpJ 4GfL/hLHuUZ7/F/KRaaQpfpzRhYC4ABkJsXiwO84TG/2HHFAG0xapcUND8d+r73g OiceumyGR+GZHnb1B5UZR7IKKJUi0KDzeR78l02ZzD5WC/VTFfW66hqFRLrppZuX s8z4Huj826Z1lewppJyYT7MRb2eMQ9YKKWqtaf+wZGFma9VyMyciWg3+43tVnI0r utr+KkRjddbLo+nzsaodpMnTAhxTfzy8Krc5iN9OQa2jSV5dW1XhLuNdCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJE62NWNkjMIyAI9IuTJrNBsRnW8MB8GA1UdIwQY MBaAFKZ4V3PfMTuRcRv2vFsUnswka56JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEt ZDc1ODY5YzBjNzFlLzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEtZDc1ODY5YzBjNzFl LzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMZsIfN6 A3BZHgleBSB0oBEoj3bJciV2nSirGwwKuY33xSYpVrvpejbKKwh9rasWymy4U77c CroJ7sZtTqpROzSaIOv5HpLC4AcQ8oEHryZbD0ymiiRhFFNcu3cVGiltnID2Hn9h Jwj5wag159Z9r6cjHdf/SYiWqdaathRjJmJl0j2+k37bZVXmnjnXMIxqCjQ/QpEW lEV9NKtWMFlhYQRALv9UquZN9Q91mutwJiGoKHxa2HhhPzcd2nOhDgBGjwviSay7 QhDq1JUXxu++b0tu7OJnMuLvOexyUqbDabQIPaoXBOprr+XmAl6k9KbFv11S1e3z OBzxBN/KmHxpkg== -----END CERTIFICATE-----Generated at Sat Jun 14 09:48:57 2025 by rpki-client