$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft File: RotZLzEQvGw1JJqCcaDawamssM4.mft (raw, json) Hash identifier: KNWpCM6Ph2GtUsNy6rRjFIHBT1tl3b+fsehnFhsleRc= Subject key identifier: 87:E3:91:E9:43:D2:71:32:EB:95:5A:DB:90:99:28:BD:00:9E:F3:4A Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Certificate serial: 019768F2B0AE8AE47C586557C597249E8268 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft Manifest number: 0598 Signing time: Fri 13 Jun 2025 11:00:24 +0000 Manifest this update: Fri 13 Jun 2025 11:00:24 +0000 Manifest next update: Sat 14 Jun 2025 11:00:24 +0000 Files and hashes: 1: 4PdFFqbPgnyAF8OAZU59EP79EQE.roa (hash: 0N0pRYIfSwp4rQqEao9ImOBW5Z4au+nqt0SGDhOprnI=) 2: 8u1Ww9yNVHCXoKy959EsUaU71zs.roa (hash: MCjwWNvinwMVi61YdY3QarB5BMMcy4gUuYfqYD2T3PI=) 3: B5kdDxNFhlA9AT3PyqFkTX6RY6M.roa (hash: Xin+IDogu4+kKllgKutdfXdJm2piOKuXIHOph9bE8Zw=) 4: RotZLzEQvGw1JJqCcaDawamssM4.crl (hash: hWPQApiWBzxdnCODb+DYy9PuWcKM0tkvirCRQB0ZI+s=) 5: _vYyrixRE-yXYNd95EagmmedMZs.roa (hash: Nq9E9fzlDdc1TerNy7pW2Y+cp+tsEL9ANsKsoDQ0Pwo=) 6: bvgsPr3D5PPxL6J89BfI0hjp6nU.roa (hash: gQ8pHX8IE1KeaNe50ukz0WLLfO6NzXHlCO7loLPh0Ow=) 7: elD2CPARB_SCiElYBqX86L528iA.roa (hash: 4GpojDoTFDR9/As1unQ2wQcCWk8x0pykSLzc87gKTZw=) 8: i1oSM0zm6FdsD8GW2rr18ZJYU9c.roa (hash: vhtU0Gjcgqwk2dDqzgcdqq71xJAqWywoPwJaRLlLExA=) 9: moar5P9-vHm1h7dW1fwgc72NFhw.roa (hash: JbVrT9GvQCxgYaVUxgeC2lZytQA7NzFvIW4W5mDjY3A=) 10: wpO2gWHd7fIiJY2UmwBghuKU8Pk.roa (hash: eNcYuQe4vVrI0lLxGnwWNPY5OwCaWdtNSK5bPAl0Ug8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 11:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:68:f2:b0:ae:8a:e4:7c:58:65:57:c5:97:24:9e:82:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Validity Not Before: Jun 13 11:00:24 2025 GMT Not After : Jun 14 11:00:24 2025 GMT Subject: CN=87e391e943d27132eb955adb909928bd009ef34a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:01:b7:b4:1a:3f:5b:17:66:4a:5b:67:df:93: c6:ec:9f:7e:ac:b7:f7:78:26:94:d5:31:6a:66:ad: 0b:0e:9f:a6:33:70:33:89:2f:82:25:a5:96:b1:86: 23:a7:d3:3e:5b:c4:33:b0:b3:07:60:91:b9:8a:38: 01:fb:d5:84:ec:d4:1f:bc:8c:71:da:80:ae:aa:50: f5:b7:49:b7:22:ab:9a:e1:ff:ff:ce:00:0e:e3:73: 9e:1b:2c:a9:39:ea:43:3d:56:09:1f:3f:58:01:75: 28:88:51:01:0b:98:7e:d5:a0:21:e4:51:5b:74:cd: 41:e6:d0:eb:3c:36:41:b6:51:26:36:15:47:f0:f7: ce:8e:02:ed:87:bb:81:ad:d1:e7:ca:af:56:67:68: a2:6b:71:ba:7e:a6:09:26:63:ea:6a:41:20:00:68: 0f:7e:9f:9a:23:83:34:6c:d0:31:94:93:64:7e:3b: fe:07:62:fb:0d:1d:a8:0c:5a:e1:15:18:fa:7a:4e: f6:31:ed:50:e8:0c:59:48:35:b9:f6:6a:28:ff:60: 40:33:e1:b4:f5:f4:ea:31:f6:e7:f9:3e:e3:b6:fc: 80:d2:46:4c:86:e5:0d:29:e9:f2:d5:c0:f1:66:5c: 6e:fa:84:88:ff:7c:c1:09:dd:f8:ab:73:4f:37:b8: 12:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E3:91:E9:43:D2:71:32:EB:95:5A:DB:90:99:28:BD:00:9E:F3:4A X509v3 Authority Key Identifier: keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ba:f5:48:ae:f9:62:dd:ec:07:11:71:b7:81:ef:83:5b:6c: 03:db:36:53:2d:29:60:4c:d9:ff:20:34:54:30:79:0f:6c:b9: 71:9e:f6:5a:49:f5:8a:41:92:e4:80:a5:18:3d:7f:f4:6e:80: 68:de:54:2f:86:d4:76:d1:13:8b:5a:d8:57:58:0c:96:a6:d9: 1c:7c:0c:4f:a8:ab:d5:83:27:93:97:79:8f:4e:a1:3e:5d:bd: 96:e3:87:d0:35:9d:7e:39:d3:0b:dd:3c:96:19:42:f6:61:04: f1:54:62:62:f2:70:0a:20:87:fd:4e:a9:35:62:23:f6:02:b5: 25:77:0b:c9:d6:50:74:7e:06:c8:8a:48:cd:eb:f4:bd:be:83: ed:e0:79:2d:4a:db:51:44:01:60:d8:61:dc:cc:5b:4d:ff:78: d2:ab:ea:62:8c:be:15:c1:3b:64:ed:23:97:29:40:d8:22:85: 87:f6:41:3b:2c:09:38:b6:8a:3f:40:a8:31:95:46:5d:be:63: 02:48:b2:a7:95:ae:c5:84:9c:a4:75:bc:42:1e:f1:56:df:7b: 21:f3:b3:2d:c4:c2:6c:6e:12:e0:93:99:8b:0d:9c:ac:a8:78: 24:86:91:ec:80:2c:19:42:38:e8:70:a7:94:cb:e7:1e:81:0e: 5a:f3:14:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdo8rCuiuR8WGVXxZcknoJoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGI1OTJmMzExMGJjNmMzNTI0OWE4MjcxYTBkYWMxYTlh Y2IwY2UwHhcNMjUwNjEzMTEwMDI0WhcNMjUwNjE0MTEwMDI0WjAzMTEwLwYDVQQD Eyg4N2UzOTFlOTQzZDI3MTMyZWI5NTVhZGI5MDk5MjhiZDAwOWVmMzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwG3tBo/WxdmSltn35PG7J9+rLf3 eCaU1TFqZq0LDp+mM3AziS+CJaWWsYYjp9M+W8QzsLMHYJG5ijgB+9WE7NQfvIxx 2oCuqlD1t0m3Iqua4f//zgAO43OeGyypOepDPVYJHz9YAXUoiFEBC5h+1aAh5FFb dM1B5tDrPDZBtlEmNhVH8PfOjgLth7uBrdHnyq9WZ2iia3G6fqYJJmPqakEgAGgP fp+aI4M0bNAxlJNkfjv+B2L7DR2oDFrhFRj6ek72Me1Q6AxZSDW59moo/2BAM+G0 9fTqMfbn+T7jtvyA0kZMhuUNKeny1cDxZlxu+oSI/3zBCd34q3NPN7gSXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfjkelD0nEy65Va25CZKL0AnvNKMB8GA1UdIwQY MBaAFEaLWS8xELxsNSSagnGg2sGprLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTct MDUwMzc0OWFkZWEwLzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTctMDUwMzc0OWFkZWEw LzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrr1SK75 Yt3sBxFxt4Hvg1tsA9s2Uy0pYEzZ/yA0VDB5D2y5cZ72Wkn1ikGS5IClGD1/9G6A aN5UL4bUdtETi1rYV1gMlqbZHHwMT6ir1YMnk5d5j06hPl29luOH0DWdfjnTC908 lhlC9mEE8VRiYvJwCiCH/U6pNWIj9gK1JXcLydZQdH4GyIpIzev0vb6D7eB5LUrb UUQBYNhh3MxbTf940qvqYoy+FcE7ZO0jlylA2CKFh/ZBOywJOLaKP0CoMZVGXb5j Akiyp5WuxYScpHW8Qh7xVt97IfOzLcTCbG4S4JOZiw2crKh4JIaR7IAsGUI46HCn lMvnHoEOWvMUGA== -----END CERTIFICATE-----Generated at Fri Jun 13 19:37:13 2025 by rpki-client