$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft File: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft (raw, json) Hash identifier: PcNpJbua68iVvcdC75P65FGF7kj65cG3xVAQgGm8tD4= Subject key identifier: 9C:AA:D1:07:81:73:83:15:67:9A:43:9F:B6:4B:E4:C2:2B:71:49:C4 Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 019768F2CDAF26C116A071826D9DA4C4CB71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft Manifest number: 1591 Signing time: Fri 13 Jun 2025 11:00:32 +0000 Manifest this update: Fri 13 Jun 2025 11:00:32 +0000 Manifest next update: Sat 14 Jun 2025 11:00:32 +0000 Files and hashes: 1: 00x2a7vYcUP_RgzqZlJDShLq9Do.roa (hash: cq08qt5t6pt7+g4zB6xtHZuctjeJqy9pw/L/lk8TYFo=) 2: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl (hash: E4DNGuY0YwcL2D7r/pQvs3l7NxbVCH17hC075CvH0qY=) 3: KVMzJG-tiBiXKGfDbX7s-fqSUcs.roa (hash: izdiO/l04uY0Tl9GP7xbaa4HsWMYkrOgbs0SiG0a1K8=) 4: OBC2jp5FIHT7G9c2m1xsJUD2ivs.roa (hash: DrwuyysosoB70lBjSllnHo3rVU0U0NusilzO8tRi9Q0=) 5: OxF-ngX6YGUArZrbAYmh9hpGzkU.roa (hash: zhEaR7GNPbf+2lOaH8uFUPJFKzbpuLS5x4CvU7dkxPs=) 6: Q2Pg2GNHELVKyFoNgxOuT8YFvLY.roa (hash: DsyRU7FSw+3XDKbBM9HrtgkzYSVPnqWwqknbD6CWVSU=) 7: RO-InVXPYoHaB1ZpM-19yr94dQs.roa (hash: 8Y6VcUcgO4alufdIJ4djN2KAnB4AyYetp1VZzDDuyNk=) 8: TbcAJ-7kgZbLEMeBArn-aI2s0Oc.roa (hash: ebCgIhbDpPxtlRtDjitUarjC0W1nxe0ujpocy11Koxs=) 9: _gM5SG_4QQqKocZtcQPCR80SAmI.roa (hash: ee8TJS3VrEj5YXrt15hISXpN3dVXM3P5ROyjlVEMHSs=) 10: fG6If6WZh4pXAVRu1gEQ7wbPbEs.roa (hash: OIBSpF8oXZotrR8RVX6KacBPnJZCoNiFLIZ7aWyayQU=) 11: gfQeyx6Q7sjS4Xpny9IUQ8tQxLY.roa (hash: zrq/geD7ajZHxMLm7OvFbnGGXeIS14GfMNfAscurlR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:68:f2:cd:af:26:c1:16:a0:71:82:6d:9d:a4:c4:cb:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Jun 13 11:00:32 2025 GMT Not After : Jun 14 11:00:32 2025 GMT Subject: CN=9caad10781738315679a439fb64be4c22b7149c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b0:ab:0c:75:bc:59:23:34:7d:4f:b6:ce:f3: e1:0d:18:c3:56:71:a8:f5:1d:09:c2:7a:58:a7:26: 38:31:37:a1:ab:25:86:48:47:f1:86:2c:e5:80:d1: 2a:4a:ae:a0:cc:a6:75:5d:94:e0:fb:ed:3b:32:56: b6:b1:41:93:1a:d6:93:bd:d0:d8:0f:ef:11:1c:aa: e8:d8:eb:ba:82:7c:aa:b1:0c:33:ee:0a:3d:da:df: 64:d0:f7:16:25:17:4b:d7:e7:bd:1d:b8:90:72:9c: 4c:e6:97:14:a3:79:00:73:da:70:fd:0c:78:ec:96: 8a:ff:c3:61:af:ca:d5:fe:f2:6b:fb:0a:bd:17:c9: 25:a2:38:f1:3b:98:16:3b:39:80:c7:90:cf:d8:fb: 76:74:7f:29:d0:11:21:1f:cb:24:36:03:cc:7d:14: 8d:a5:2f:d9:15:21:41:76:f3:f8:72:7a:bc:67:95: 92:8a:ab:bd:a9:85:a7:b8:ba:fc:93:fc:58:98:22: 3a:b3:e4:61:48:62:e1:ae:eb:c7:00:f1:43:e9:c3: c3:88:fb:0c:a3:26:43:6f:17:d6:48:e5:dc:bd:39: 5c:f7:56:aa:1d:f3:e3:41:0d:49:b0:de:93:4d:22: 41:c6:39:81:35:c9:7e:ce:85:cb:df:d5:92:3e:48: 20:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AA:D1:07:81:73:83:15:67:9A:43:9F:B6:4B:E4:C2:2B:71:49:C4 X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:99:69:39:54:d1:a3:54:b9:bf:ab:e7:da:7c:8b:dc:7d:89: 31:54:63:0b:de:b8:b0:f7:d7:9c:c7:4e:b8:83:57:20:d8:1d: e0:91:cc:53:99:e3:9e:dc:73:81:4f:7a:bd:10:3c:2b:2e:2b: 26:94:d0:9a:cd:7c:4e:f9:20:29:7e:20:fe:7a:88:c0:c8:e3: 28:5b:4b:57:d1:1a:1a:bd:ce:45:89:25:08:fa:94:c3:a4:16: 40:a1:fd:59:98:ff:4a:0f:4b:e5:3b:bd:e6:97:60:7a:41:70: f4:88:7e:4b:06:36:46:da:2e:40:2a:4e:6d:db:4a:28:c2:5e: e1:4d:20:91:fe:a6:20:a2:2c:d8:0b:66:51:e6:bb:5e:ca:d8: 0d:8d:47:2d:a3:9b:a6:00:b3:23:d1:5d:0b:15:c1:88:6d:3a: 61:3f:b6:46:eb:50:8c:a9:3d:1e:d1:f1:c3:9c:76:a5:ec:57: 2c:ed:33:24:d6:5c:66:e1:9b:ab:9e:b7:46:36:46:88:8f:40: 25:c7:d5:67:7e:a1:d6:18:51:32:b2:5b:93:02:14:0d:22:ee: 19:8f:d8:92:c9:e8:9c:15:27:15:0a:6d:6f:c9:88:76:43:17: 31:73:7f:63:9e:04:bf:14:c2:72:2a:9b:d8:57:5c:87:1f:b0: 29:0f:c2:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdo8s2vJsEWoHGCbZ2kxMtxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjUwNjEzMTEwMDMyWhcNMjUwNjE0MTEwMDMyWjAzMTEwLwYDVQQD Eyg5Y2FhZDEwNzgxNzM4MzE1Njc5YTQzOWZiNjRiZTRjMjJiNzE0OWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrCrDHW8WSM0fU+2zvPhDRjDVnGo 9R0JwnpYpyY4MTehqyWGSEfxhizlgNEqSq6gzKZ1XZTg++07Mla2sUGTGtaTvdDY D+8RHKro2Ou6gnyqsQwz7go92t9k0PcWJRdL1+e9HbiQcpxM5pcUo3kAc9pw/Qx4 7JaK/8Nhr8rV/vJr+wq9F8klojjxO5gWOzmAx5DP2Pt2dH8p0BEhH8skNgPMfRSN pS/ZFSFBdvP4cnq8Z5WSiqu9qYWnuLr8k/xYmCI6s+RhSGLhruvHAPFD6cPDiPsM oyZDbxfWSOXcvTlc91aqHfPjQQ1JsN6TTSJBxjmBNcl+zoXL39WSPkggSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJyq0QeBc4MVZ5pDn7ZL5MIrcUnEMB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZlpOVTR o1S5v6vn2nyL3H2JMVRjC964sPfXnMdOuINXINgd4JHMU5njntxzgU96vRA8Ky4r JpTQms18TvkgKX4g/nqIwMjjKFtLV9EaGr3ORYklCPqUw6QWQKH9WZj/Sg9L5Tu9 5pdgekFw9Ih+SwY2RtouQCpObdtKKMJe4U0gkf6mIKIs2AtmUea7XsrYDY1HLaOb pgCzI9FdCxXBiG06YT+2RutQjKk9HtHxw5x2pexXLO0zJNZcZuGbq563RjZGiI9A JcfVZ36h1hhRMrJbkwIUDSLuGY/YksnonBUnFQptb8mIdkMXMXN/Y54EvxTCciqb 2Fdchx+wKQ/COw== -----END CERTIFICATE-----Generated at Fri Jun 13 19:04:11 2025 by rpki-client