$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft File: DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json) Hash identifier: bOppfJQt9GRJkmjO9yT/IU7+kzINZ+30k+VwxrHdwBI= Subject key identifier: 46:FD:BC:6E:41:86:19:7B:34:B7:01:B8:AE:8F:A9:A5:3D:14:59:B8 Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 01977D1E4D20B9E9FEEEC7CAD3C18F89015B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft Manifest number: 15AE Signing time: Tue 17 Jun 2025 09:00:27 +0000 Manifest this update: Tue 17 Jun 2025 09:00:27 +0000 Manifest next update: Wed 18 Jun 2025 09:00:27 +0000 Files and hashes: 1: 6EqmJwY45la03_mL9DqzIU_pULc.roa (hash: bAAWeDZY2eZUPUFFXbJVDE3ll20OGhbDr+oRfmrEiVM=) 2: 7Pzqe98aO4BoBrbjEM8VyT6sS1M.roa (hash: njNZ21C9pluyh9z/aL31IWofBM1v+N+fPmyvHPndCq0=) 3: 90MmzVO4MvLdyb-AJQYr53vSOsE.roa (hash: 5J/pNqbP4sJI9fRD38vzW+V+FYiLCJKVNSYkNzbkDm4=) 4: 9GHN6GSMWh16APWbnq7wDsfKnn8.roa (hash: JH6A2KPyYk6kU9S+YXzBoAozjZCx1I1/FQIb22szn8c=) 5: A3yiMnUOTAMIYvHymHxcRRdl3pQ.roa (hash: stXGsXMD+FrQyZX4g7row6To+DPm5GuY/8GYAAv5+hY=) 6: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: CZvBTAI6neETQl0RveCSZRzsfBYEVTZ2tcvneBoDND0=) 7: QQRJC_YG8r-4Cm4-FiDTcyGseMs.roa (hash: v9L1LzSv9+QS9AJyAVCgrR0utN6Qk2ha4KHx/OIWRBY=) 8: Rtm2eqjMuokQbFDH0uOZXue46j0.roa (hash: i+SxWKbKu33HD+1YPJSxFNXcAddtYFx5sKVQShwTd24=) 9: _eU7wK7pdUxRG2CXsHdjbv2SOXc.roa (hash: ZAIXppKunQur0KGtFLAbnwIeXUabVYHwA+qIIq12IRo=) 10: aTMRrwo9_4SayQ9D7LTyaVFK_Xc.roa (hash: +IcvkZ/Lt7dooQvX8ekK5PfLV+YRr5hiDK4PBIh/lAA=) 11: fYrpElZs1NsSNrkwEfo6WNxBdRU.roa (hash: w1Z5VCOxpqbNZVNnJiTQLVLUsMOtA4kiHusU/VADD9E=) 12: rytOjYktSxYttWQbNzKnWNHr8kE.roa (hash: yLxz3XA2NehPKva17aTVpf9d8xx7CPICWNJXYP6IG3U=) 13: wz4Rxi2T5RISNbtekZKZj5gg7co.roa (hash: ZkBZlEwEIE4xANMo9oJsaqTSQA+2tjjnLN93XVxIic4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 18 Jun 2025 08:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:7d:1e:4d:20:b9:e9:fe:ee:c7:ca:d3:c1:8f:89:01:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Jun 17 09:00:27 2025 GMT Not After : Jun 18 09:00:27 2025 GMT Subject: CN=46fdbc6e4186197b34b701b8ae8fa9a53d1459b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8e:0b:a5:2e:b7:69:2e:fa:b3:a7:38:3a:1f: 33:f4:09:f6:02:b8:26:9b:9c:69:7a:f3:14:5e:47: 3b:b8:8e:ff:2e:97:59:15:75:12:06:f8:b8:61:a9: 70:4a:04:1f:22:cc:14:16:9b:04:93:e7:19:c6:f7: ef:ed:6b:57:61:9c:96:7c:00:07:b2:6c:49:88:8a: 07:39:22:e8:cc:e4:88:39:d9:16:ec:44:e3:c9:2f: d0:f0:97:2d:54:05:45:f2:50:81:17:b4:9f:19:38: 26:c9:2d:c5:71:98:66:4f:44:e9:f6:7e:31:9c:0e: 0f:2d:d8:d0:72:ab:cb:07:c9:0a:54:0c:2c:81:ed: 93:35:dc:75:21:94:57:c2:db:97:ed:ed:de:66:c3: 76:4e:a8:8a:8c:12:c7:53:91:78:0c:ad:f1:3e:48: 93:85:c8:95:ec:11:d9:5c:6f:ed:dd:1c:7c:22:7b: 34:ed:e4:e5:13:6d:2a:0b:da:ee:a0:e2:a1:ad:30: 07:b8:f8:9f:ea:4e:f9:ea:f8:dd:30:7a:48:94:79: 01:8a:d8:36:46:49:69:9a:52:9d:3a:1f:a0:8f:fa: 38:64:be:0f:d8:f1:59:4c:3b:f7:64:b0:7a:9c:fe: 50:c8:15:0b:5e:63:47:be:37:4d:62:0a:0b:35:4c: 5c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FD:BC:6E:41:86:19:7B:34:B7:01:B8:AE:8F:A9:A5:3D:14:59:B8 X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:91:d2:88:ac:a6:c0:8e:5c:89:c8:3b:e7:e7:98:e5:63:24: e6:81:f7:4a:75:ba:25:f4:3a:6b:d3:ce:42:c1:cc:02:53:3e: 99:1e:85:cc:11:4d:f7:b9:2e:71:51:54:e5:1e:2f:06:a6:32: a0:20:4a:74:7d:82:f8:bc:e6:d4:65:12:17:28:d8:73:1e:44: 75:85:93:89:6a:c3:62:ce:58:7a:76:75:66:8a:ba:e5:7e:0c: cb:2d:1c:bd:f1:be:a4:10:78:3c:0c:c7:c2:5f:3e:b1:43:12: 47:20:3e:8e:e5:c7:5b:f6:1c:da:d8:44:bc:c5:d8:e8:35:9d: 03:3e:df:9f:e8:61:7c:26:06:fa:ce:75:d7:5c:e5:c0:e6:52: 41:b9:b7:e9:ca:1e:07:5c:8f:3e:41:83:cc:eb:64:f4:29:a8: 99:70:95:ad:fc:e8:e2:6a:38:c0:f0:9a:90:ee:97:80:20:63: 71:07:22:1f:7b:09:55:8b:37:ce:3f:a3:ae:0a:86:4d:de:31: 85:d9:bd:e2:ad:8a:ac:59:89:35:5b:63:ec:93:81:4c:78:e5: cc:78:48:02:a4:2d:f3:5c:80:24:12:c3:42:a9:57:a6:e1:2f: 11:fb:a8:ba:1e:25:40:de:49:2a:36:b5:f3:dc:4c:08:6e:51: 70:39:9e:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd9Hk0guen+7sfK08GPiQFbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjUwNjE3MDkwMDI3WhcNMjUwNjE4MDkwMDI3WjAzMTEwLwYDVQQD Eyg0NmZkYmM2ZTQxODYxOTdiMzRiNzAxYjhhZThmYTlhNTNkMTQ1OWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm44LpS63aS76s6c4Oh8z9An2Argm m5xpevMUXkc7uI7/LpdZFXUSBvi4YalwSgQfIswUFpsEk+cZxvfv7WtXYZyWfAAH smxJiIoHOSLozOSIOdkW7ETjyS/Q8JctVAVF8lCBF7SfGTgmyS3FcZhmT0Tp9n4x nA4PLdjQcqvLB8kKVAwsge2TNdx1IZRXwtuX7e3eZsN2TqiKjBLHU5F4DK3xPkiT hciV7BHZXG/t3Rx8Ins07eTlE20qC9ruoOKhrTAHuPif6k756vjdMHpIlHkBitg2 RklpmlKdOh+gj/o4ZL4P2PFZTDv3ZLB6nP5QyBULXmNHvjdNYgoLNUxcxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEb9vG5Bhhl7NLcBuK6PqaU9FFm4MB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGpHSiKym wI5cicg75+eY5WMk5oH3SnW6JfQ6a9POQsHMAlM+mR6FzBFN97kucVFU5R4vBqYy oCBKdH2C+Lzm1GUSFyjYcx5EdYWTiWrDYs5YenZ1Zoq65X4Myy0cvfG+pBB4PAzH wl8+sUMSRyA+juXHW/Yc2thEvMXY6DWdAz7fn+hhfCYG+s5111zlwOZSQbm36coe B1yPPkGDzOtk9CmomXCVrfzo4mo4wPCakO6XgCBjcQciH3sJVYs3zj+jrgqGTd4x hdm94q2KrFmJNVtj7JOBTHjlzHhIAqQt81yAJBLDQqlXpuEvEfuouh4lQN5JKja1 89xMCG5RcDmeVA== -----END CERTIFICATE-----Generated at Tue Jun 17 12:52:40 2025 by rpki-client