$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft File: mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft (raw, json) Hash identifier: 1GZeuko2L3c18pTREJDCcIJ1e76z5EpaheoyKYQ+yPE= Subject key identifier: 7A:B1:3A:BF:0B:92:E3:58:15:7C:2A:E0:8F:46:F0:F2:81:0E:8D:42 Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 01976C98DD13EE5B06D7B75B388DF18DBCE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft Manifest number: 1661 Signing time: Sat 14 Jun 2025 04:00:46 +0000 Manifest this update: Sat 14 Jun 2025 04:00:46 +0000 Manifest next update: Sun 15 Jun 2025 04:00:46 +0000 Files and hashes: 1: 1-W8fXv0jttdWKlzJAXVxxYtpRug.roa (hash: gpIh638+Fcd1tAei50b0+8GVpPlev9wrd/g4gdASdjg=) 2: 1UWB6DiO5XdV3re-o8rnuoqA6Ms.roa (hash: acQwekWVQZ/8nvJFITjzBnRus/D8fEtyc11Q6KELe7w=) 3: 21_l98tMuuHtah8-s1GQ4s9w80o.roa (hash: kBh4jdwY3MGZ4Pq8reV1XfNIfs+7zVu2WLUGJ+5lgvc=) 4: 4w30D5KawwaEKeLXCLppZs-985Y.roa (hash: D2Lwmoer5qGID/4i5fsaA6M5CcgJmrhikqoV9diBlTk=) 5: 584_8-MCCtntQOfvULwWZs9O7nE.roa (hash: 2qpHd4/GVV0NiG+wogJB5AQCeDp3yyLGq0zIUvBip28=) 6: 86PqxVW6kwg2uAh7WbBcKHdg2nI.roa (hash: CuXGZytdc0z3bOivO1qPbLT67lDlFMigmbZjCs37dqk=) 7: Brhkd2-auvvZmCyvxy5ORhHeQ6E.roa (hash: g8WF2m4nW9TPwqD2pE0ddCjVXs1fr0m/MHPrZ/Qj2HI=) 8: CnHjgZKNSNMP8dJ_BtYZ7Xo4ZrM.roa (hash: FqQbIRpVOThM0L1uy/AMjORSqSUsS/5+snA6mZqlQAA=) 9: IrnlAQa6M1A96HHiDasRUfVGqbQ.roa (hash: xgq5FcKSqvltS9tf8414o9TbLoeW+VIxwonV5uaPruw=) 10: LOKrZEDDVhVnSlJWlOLgQ5nPcM0.roa (hash: 2CeUB6HU9O6IboYshEwLG/p+jYhiKQ64ZtA5Y3idzrs=) 11: LbbsmkI3GqawDuN3XH6acheMxPw.roa (hash: BqWA3SYDAKLfoYVuIlyCld31iNDXkXCl/KtIv69jNUw=) 12: OOYkNDqqDn1Unj3M-yrjf_S9VlU.roa (hash: oCGvjVeC4FC9ueufaA6bhsrNhxHd2pd306IA0XGXLfs=) 13: QJvPeNzFvPANqEbfkIc8-3zDQLs.roa (hash: felyBGjLHZhYiBLtOS5vAZwi9iqRNucwfxHrWgkMpWA=) 14: UlqMdzKNjKKz7GVAWhNQ0GeC6iE.roa (hash: vyjrNuYYOAehZPhyITO+Q5uPp2e1fJC2nVGYypgHEhg=) 15: VWkW07I1zIXdyqs4BQIBdaBd2vc.roa (hash: h5pIJAnIs7+ZjnOWO3/wnU97A/ELdSh5CNwqpKVYXPM=) 16: WJhqTCUN_AjGjAYRDp33eZN0BY4.roa (hash: 06Htmns2yq5ClkGiqHYQcD9sTifSqYU3RXoOiPSPCkE=) 17: azJgsmdTDF3ELk-I19mAROWoKeE.roa (hash: oh/dgWtIFhqfW7S9fR3cOqTRk0csYkiTH2ALt2aoNhQ=) 18: eChAGDbdQGMbx-CgEa8ktTddF6A.roa (hash: WaY78nyI3A8kBY4pFd0TG8ZJI0s+NCkhF+OV6SV5Crw=) 19: gN00iWVZ4X9ImdixtPXeB88eR_k.roa (hash: DPVgneYPbYS00UaxJyd5C7zkqYJRRcPWgn4xBTn6bHk=) 20: gnHztlWIUEkbfP_VpJDgy1aZ-q8.roa (hash: 8IEq5Il4ymKT0XR1RNf3aEeBm7YPqbccSq4VWhr/cXU=) 21: mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl (hash: vzVN09NPt5cbYzmT4bQegc9GG0+nW0oOy47ACOf715k=) 22: owD2F5PTIfIuOH1ResHlD6bHqfw.roa (hash: FwwD5nwDxuakINFZYh01TzvwO9abW6HL7q42RgazHtQ=) 23: qjM14mHgk1Edy0idzb8PcMe4oBE.roa (hash: pcsI+0E79qmlWXPdLST7nM+67d24tKTfwvx2fxrvqMw=) 24: s5Ai9g5eYYL8Bgx7ZWiTovq-xxE.roa (hash: BtApyhPvW43mqLBFeRPcKdPRw6DTk5KYzme6TZtVXns=) 25: sW7iMiWbwjQZ4JTr9eqMstrH0fY.roa (hash: fl3fF4gUVsev8QdVZnLOIu5u/5rzRWGxzrZRrAPXabs=) 26: tdG4gwbiCDTl2DZU4EFrqi-57Fc.roa (hash: HXWAwqtUcnHFWl+ei5dmWCUQV5Bz5IiYmO9iAB6ydxI=) 27: w23_TR4dcsNa31LTX8HVMLWRN_w.roa (hash: rfdkH9NAgBWGbrUS8/d8Rmrz5XY4u8KepKOXwjiNknw=) 28: wWRDfWHup1u0k3UjICPfUYIPuSY.roa (hash: yzH1M2v1GGWQRBkb4bWaRfefbh3n4eH1xoy+GhWge5A=) 29: wYxMdXSUEDjU1Cv3_j8xQDvi1yg.roa (hash: WyaQu0KrdFh/xZS6g5xHvbw77OL9Wai9qSXwo4Oty1g=) 30: xeXsIqRyNQ8tCJjLiS_SWkibat0.roa (hash: JByqNQHgtIum6mQVh/2h0Z7sUMkRsbp23RZvkf78Q8U=) 31: zA8L3Jvv9SEACC4CD6D8SPMP2Sk.roa (hash: Tngvw9PMaTEzEGc2VaqgRFM8azKZIG82ga5hio7GHN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6c:98:dd:13:ee:5b:06:d7:b7:5b:38:8d:f1:8d:bc:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Jun 14 04:00:46 2025 GMT Not After : Jun 15 04:00:46 2025 GMT Subject: CN=7ab13abf0b92e358157c2ae08f46f0f2810e8d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4a:0c:49:51:1d:15:94:5d:78:3d:8c:28:59: 2c:85:43:b8:d8:95:0e:36:06:3b:90:af:fd:70:ac: c0:5e:95:86:70:32:70:6b:7b:23:d6:2c:42:d8:c9: d5:03:4b:1e:1e:8a:2a:ee:a8:4c:1f:42:57:bc:be: fe:44:d4:7a:53:b3:ff:20:98:b1:e1:6e:78:a5:45: 21:3e:12:e4:20:7f:2e:24:7d:a7:b1:24:57:68:ba: d3:8d:cd:28:99:3c:df:50:1a:d3:3f:27:15:24:d4: 36:53:b1:da:8c:b8:f5:dd:e9:bf:54:1d:00:ed:f9: 02:be:25:d7:f3:fa:e3:90:96:8d:cb:38:8f:8d:98: 30:fb:97:46:d4:64:7f:f3:53:da:8c:cc:bf:4b:6d: 9d:99:fd:24:f0:61:b3:5e:9c:27:e0:9e:35:dd:d0: cb:4f:ee:a0:cd:9c:4d:95:4c:27:5d:39:d7:10:c3: 9e:8e:6d:48:b0:6b:83:fd:b0:87:fe:f3:42:75:b6: 2b:cf:9f:ee:81:41:40:2c:05:e9:71:02:e3:e0:db: b2:ca:d4:26:ba:1d:d9:87:2e:a3:85:88:4f:a6:67: 4a:2d:9f:2d:23:ec:de:6e:63:dc:95:1f:bf:1d:fd: 8c:ed:9e:0a:78:b5:a7:1b:d4:0e:87:b0:48:5f:41: 99:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B1:3A:BF:0B:92:E3:58:15:7C:2A:E0:8F:46:F0:F2:81:0E:8D:42 X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:1b:63:be:af:89:4d:ca:8c:7c:f3:d2:88:df:98:ca:92:70: 5c:ed:65:fa:ae:bf:31:3e:89:0e:8b:d4:c4:8a:6a:ae:e4:e4: f5:03:b5:ff:4f:a7:29:e8:9e:cc:fe:8b:17:39:e4:bd:61:25: 0f:73:1e:9e:4e:80:d2:03:a2:4c:26:29:a9:bb:a9:26:aa:d3: 4a:10:b3:21:3f:e2:a3:7a:c5:8b:2a:a4:37:3d:04:f3:3b:79: 83:13:cf:81:7a:1c:65:44:05:a1:bc:5d:dc:1b:fe:64:b7:90: f5:65:15:a4:ad:55:5d:b5:61:07:28:04:e7:37:78:e2:75:f8: 6c:d3:f8:20:e7:47:33:61:d2:ae:7f:ee:f5:d9:b0:94:31:a6: 8c:2b:65:1a:59:1c:86:5f:5a:50:a0:e4:b5:74:eb:ca:96:e1: 15:87:ff:a3:86:1b:72:e4:52:a2:fe:44:49:0a:f0:6e:fb:7c: 91:e2:1e:a8:39:d8:a8:69:94:02:a4:9e:cc:7d:d2:0d:08:92: 64:c8:5b:ce:33:50:3e:e2:4e:35:e0:46:ac:3a:7d:8c:8d:fd: a8:a8:43:1b:d4:d1:d4:67:4e:8c:e7:be:30:19:a0:b1:f3:28: 9f:48:ae:79:e4:ae:51:28:5c:a1:a3:a6:3a:c6:b6:55:d6:5b: cd:4b:f1:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdsmN0T7lsG17dbOI3xjbznMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjUwNjE0MDQwMDQ2WhcNMjUwNjE1MDQwMDQ2WjAzMTEwLwYDVQQD Eyg3YWIxM2FiZjBiOTJlMzU4MTU3YzJhZTA4ZjQ2ZjBmMjgxMGU4ZDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykoMSVEdFZRdeD2MKFkshUO42JUO NgY7kK/9cKzAXpWGcDJwa3sj1ixC2MnVA0seHooq7qhMH0JXvL7+RNR6U7P/IJix 4W54pUUhPhLkIH8uJH2nsSRXaLrTjc0omTzfUBrTPycVJNQ2U7HajLj13em/VB0A 7fkCviXX8/rjkJaNyziPjZgw+5dG1GR/81PajMy/S22dmf0k8GGzXpwn4J413dDL T+6gzZxNlUwnXTnXEMOejm1IsGuD/bCH/vNCdbYrz5/ugUFALAXpcQLj4NuyytQm uh3Zhy6jhYhPpmdKLZ8tI+zebmPclR+/Hf2M7Z4KeLWnG9QOh7BIX0GZ+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqxOr8LkuNYFXwq4I9G8PKBDo1CMB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQBtjvq+J TcqMfPPSiN+YypJwXO1l+q6/MT6JDovUxIpqruTk9QO1/0+nKeiezP6LFznkvWEl D3Menk6A0gOiTCYpqbupJqrTShCzIT/io3rFiyqkNz0E8zt5gxPPgXocZUQFobxd 3Bv+ZLeQ9WUVpK1VXbVhBygE5zd44nX4bNP4IOdHM2HSrn/u9dmwlDGmjCtlGlkc hl9aUKDktXTrypbhFYf/o4YbcuRSov5ESQrwbvt8keIeqDnYqGmUAqSezH3SDQiS ZMhbzjNQPuJONeBGrDp9jI39qKhDG9TR1GdOjOe+MBmgsfMon0iueeSuUShcoaOm Osa2VdZbzUvxJQ== -----END CERTIFICATE-----Generated at Sat Jun 14 09:39:08 2025 by rpki-client