$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft File: rr85Ti8bJRyI2YiocWEIRYB4bvU.mft (raw, json) Hash identifier: LNX30VIUIP7pxvJaQuWMiObovSpHxWTWkoW1bUkmaPQ= Subject key identifier: 8A:55:21:79:CE:50:89:26:D9:82:D5:F5:3E:C7:35:10:F0:1D:C2:D1 Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5 Certificate serial: 01977565394C7ADDFB12E3B802AB5218ECBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft Manifest number: 15A8 Signing time: Sun 15 Jun 2025 21:00:57 +0000 Manifest this update: Sun 15 Jun 2025 21:00:57 +0000 Manifest next update: Mon 16 Jun 2025 21:00:57 +0000 Files and hashes: 1: 1-_mCNfP9_HNiBcEsvWHOFnGkC9I.roa (hash: JsQNy89vRBMXhfgHBZLMyPK1KVQmDn747eH7PkqTbv4=) 2: 499vYtwuw8upiAA2ubHtry-MPMw.roa (hash: Z3mdQWlNWDCy7MpQvjVwxOFHXRgVUsKCd9CYyZydkdQ=) 3: BV9MkYw-noIEhqphKumJe_rAYPw.roa (hash: cTycQR7uMvIZ+ka9U/Z707XPur1pq5RdGRaj9s/WBEk=) 4: BqTGXwEy0NGO0YDBi2enWJEpe9k.roa (hash: NYaAEL0V4uNdZmz3A2gD5aCaRjRzazsS2Zn8GlYp1k0=) 5: C9bq6HqiO8wvPt8Ohvw7Ya0CzfI.roa (hash: eBedAMyLvvyEc8yS2VDwWUUS44f1pIhLP9yn06vWvAA=) 6: L3ZGNHnhgVbtJA6v9_KfCLPdQu4.roa (hash: tRfv/CcITA5fhGSfuor8bEI1B/6QYSwrTAH88Vxz5+8=) 7: c_qSQSef9yQq7ko-zsOrz05POQI.roa (hash: FNYiHqlJ6193udyi9UzOaM0voKaXuvqgwAhp2rGz6i4=) 8: imE36QLRTMX_BQ-hGxHCq-HzUSs.roa (hash: 9oBmGg8MmifOi5UePbS9lDJePGL5vAfP7BimBla3w98=) 9: lmrSRQ5ihg55QvYqat1AjaV_GvQ.roa (hash: hnfw4d4vCZD3abd8/WtjTv2gdPGfcl5xx0Mpy2oIhPc=) 10: rr85Ti8bJRyI2YiocWEIRYB4bvU.crl (hash: UQmjW9a5lldMq/gOnVFmhW5vFig7/R49Igc2LyDAh/E=) 11: uFaCHWPgxrsotozK3-PvWIlEI14.roa (hash: E71w1Kj/9g7CI68LBGPMUUdmv1Dhxwi441Gs522xPmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 20:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:75:65:39:4c:7a:dd:fb:12:e3:b8:02:ab:52:18:ec:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5 Validity Not Before: Jun 15 21:00:57 2025 GMT Not After : Jun 16 21:00:57 2025 GMT Subject: CN=8a552179ce508926d982d5f53ec73510f01dc2d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7b:c7:bd:a0:db:2b:ee:17:62:0c:43:22:60: 16:d8:63:f3:3b:37:f4:61:1e:b3:46:ab:b7:22:a5: d1:b0:39:7b:d7:78:7b:00:db:08:9c:d8:71:4b:90: a9:87:cf:c3:cf:ff:a9:38:ac:93:05:86:2c:05:1e: e7:d0:27:9c:97:e7:8d:d6:bb:c3:75:dc:4e:0f:9a: 5d:5a:56:ae:da:1a:32:6e:55:5a:bd:3f:07:ff:22: 06:d2:3f:9e:02:4b:7f:c5:0f:27:4f:25:28:6a:0f: 81:aa:70:f0:10:f6:7a:2d:2d:35:23:64:fa:d7:ba: 22:73:b2:d0:98:9b:69:f9:b5:87:c3:78:21:e0:60: 9d:cf:ef:72:04:37:39:33:bf:58:57:45:bb:0e:39: 67:0f:37:a9:7e:23:a2:c5:78:09:4f:73:4f:f0:a3: 7d:ae:4a:ab:29:d4:d2:dd:de:6c:7d:f6:6c:ad:8d: f0:9c:b1:b4:80:b5:c4:70:d8:8d:40:59:1e:6f:40: d0:81:cc:fd:a6:c5:83:e5:b6:bb:2a:c0:4e:da:be: 77:bc:60:ac:90:1c:37:71:cc:07:9e:9e:a5:51:1f: a2:9a:88:fd:9f:dd:d9:d6:66:da:f8:d9:d5:c8:dd: 12:0a:76:59:c8:57:23:5b:c1:20:14:86:b9:8f:a2: 48:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:55:21:79:CE:50:89:26:D9:82:D5:F5:3E:C7:35:10:F0:1D:C2:D1 X509v3 Authority Key Identifier: keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:7a:6a:5b:e3:17:13:51:ea:d6:35:e9:b5:3f:0f:cf:2d:cf: 76:37:ad:1d:68:2b:4e:a5:f9:9a:89:4f:97:92:52:95:81:bf: 57:57:94:38:05:81:55:11:14:ea:f3:81:57:20:a5:37:44:d1: 91:f6:ff:33:09:92:e7:51:d8:96:13:ed:b9:02:4a:18:7d:e8: 14:21:28:2a:71:28:16:84:bc:c3:47:41:57:ed:1b:e5:42:0e: 4e:03:d4:91:38:1f:a5:d0:96:7e:74:1b:32:1e:94:51:69:a8: a0:9f:ef:61:96:36:d7:20:b0:40:6a:6e:6c:9c:3c:7d:f5:85: e2:18:e5:b1:ab:44:27:6d:6c:41:f3:67:f7:96:4a:59:f9:f2: 53:ad:08:59:af:c5:14:ed:4d:7c:fd:50:59:f3:f7:06:00:87: ae:71:54:e1:55:93:91:84:47:cf:8d:f3:ce:df:ed:ab:fd:2b: 43:a7:c7:ed:46:b6:e5:e3:ff:11:71:0f:b3:7d:22:c4:4d:fa: f0:40:e7:36:af:57:72:b5:0a:dc:56:8f:81:0e:59:3e:7d:0d: e3:68:c0:6d:2b:94:34:34:df:6d:2d:3a:d8:b0:0b:d8:c6:29: 03:5e:88:e9:76:a7:02:82:6c:36:17:38:81:75:47:bd:23:3d: a3:11:34:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd1ZTlMet37EuO4AqtSGOy/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmYzOTRlMmYxYjI1MWM4OGQ5ODhhODcxNjEwODQ1ODA3 ODZlZjUwHhcNMjUwNjE1MjEwMDU3WhcNMjUwNjE2MjEwMDU3WjAzMTEwLwYDVQQD Eyg4YTU1MjE3OWNlNTA4OTI2ZDk4MmQ1ZjUzZWM3MzUxMGYwMWRjMmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HvHvaDbK+4XYgxDImAW2GPzOzf0 YR6zRqu3IqXRsDl713h7ANsInNhxS5Cph8/Dz/+pOKyTBYYsBR7n0Cecl+eN1rvD ddxOD5pdWlau2hoyblVavT8H/yIG0j+eAkt/xQ8nTyUoag+BqnDwEPZ6LS01I2T6 17oic7LQmJtp+bWHw3gh4GCdz+9yBDc5M79YV0W7DjlnDzepfiOixXgJT3NP8KN9 rkqrKdTS3d5sffZsrY3wnLG0gLXEcNiNQFkeb0DQgcz9psWD5ba7KsBO2r53vGCs kBw3ccwHnp6lUR+imoj9n93Z1mba+NnVyN0SCnZZyFcjW8EgFIa5j6JIcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpVIXnOUIkm2YLV9T7HNRDwHcLRMB8GA1UdIwQY MBaAFK6/OU4vGyUciNmIqHFhCEWAeG71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2It NjFlN2Y0MGQ1ZGQ2LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2ItNjFlN2Y0MGQ1ZGQ2 LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjHpqW+MX E1Hq1jXptT8Pzy3PdjetHWgrTqX5molPl5JSlYG/V1eUOAWBVREU6vOBVyClN0TR kfb/MwmS51HYlhPtuQJKGH3oFCEoKnEoFoS8w0dBV+0b5UIOTgPUkTgfpdCWfnQb Mh6UUWmooJ/vYZY21yCwQGpubJw8ffWF4hjlsatEJ21sQfNn95ZKWfnyU60IWa/F FO1NfP1QWfP3BgCHrnFU4VWTkYRHz43zzt/tq/0rQ6fH7Ua25eP/EXEPs30ixE36 8EDnNq9XcrUK3FaPgQ5ZPn0N42jAbSuUNDTfbS062LAL2MYpA16I6XanAoJsNhc4 gXVHvSM9oxE0bw== -----END CERTIFICATE-----Generated at Mon Jun 16 03:19:55 2025 by rpki-client