$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft File: 4tDEmg6X4NXzztO3trn3LKDLU9Y.mft (raw, json) Hash identifier: /WZUd37bjYPTgs3djj98pUDgg76o5GIvjzgbrmsKKCg= Subject key identifier: CB:EE:3C:34:33:A0:15:B9:82:06:B6:EE:08:FD:75:50:BF:EB:CD:2E Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Certificate serial: 0197782F2545D1692F8370C0326519C7315C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft Manifest number: 128B Signing time: Mon 16 Jun 2025 10:00:44 +0000 Manifest this update: Mon 16 Jun 2025 10:00:44 +0000 Manifest next update: Tue 17 Jun 2025 10:00:44 +0000 Files and hashes: 1: 1-xvBLiVIr5eO0ojnuxuHIDpGNj0.roa (hash: aK7ZmDyAzamzfU5scYPlW3gVBsMwISXT9xd5u5skngQ=) 2: 2BXalnRCdxlKBucFyUnY3v8NXIE.roa (hash: qbascniAVekJiZabGEHd3VuxY6P4azJ4yMUjYrzFjJo=) 3: 4gUeII5uNOSsk7ig0e6KHlG6BHA.roa (hash: xRGa4dvp0FYk/JLyi3pQEJ/XtveeLwqm3x3hfczzGhM=) 4: 4oFgbvjivonc75j6oWwkurpCHuo.roa (hash: wfNIhptalUUsPvpgzrp9sVZFBDTSEW8d7lJfHh/ba4k=) 5: 4tDEmg6X4NXzztO3trn3LKDLU9Y.crl (hash: ZOcYbgVgrWqmkeC+FF9s03YA/2OQgBpZ8RJmKZsDvw4=) 6: 5pnldwPETCzwQT8iJkyiSoWD3_k.roa (hash: oJntOrxxRhN9f3IdHJXmdQbwUKQGLcIDOqq/1tPI4PI=) 7: 6uM9geMN5E_JocXQTslv41Eocx8.roa (hash: Dlfx02PXvOyh1z3EkOuN2tEacNYqoH0GaOFD4WRWv7M=) 8: FBdxjOu8SX4p5g9e-XxmzyShdHQ.roa (hash: mngc3R66oJgb9rQ/5d73AA7n7b16oOQZDw1SHYqnhTA=) 9: HglCnD55qDv-Q0rgVR2_h-nRZkY.roa (hash: Qc4gkZG+SuNlsvP0f5FqX4UkqgAGysqsANOz/SQ42AI=) 10: HtZ57OBsmdXhe-F5g-lmzijNxck.roa (hash: P0xwVuTg9ir4CIbwZxsA+9nWaNItfve6TrNuKY2zqxM=) 11: PeZtOK6XcrYqlf82Nopp1BFWAXQ.roa (hash: y6xfqENV86+DxwWiv0cIANxmFCLNJHi4fntVAOoYQLI=) 12: RlHI2VPMUxz4vWMxsz_aSP7Y58A.roa (hash: o2Eco/oz0OjYhDyp8QR2quUuINLwT9HDpRtnEqaVUfg=) 13: SMigdfBEZBCpmCAUQemz1HzXzsY.roa (hash: rYoGdgZTMvC2OSoASCQvWU0g5tSPQxjtZ99HNktE1UI=) 14: _DswbRpVkPXQzJnopc-2rpO7ck0.roa (hash: sOdG0gaxCyeQh9EtJRGptli2IEmCGrHJQ/h1DmBq1IQ=) 15: dkbWTo4bq_yPPRqYmeLtAion_fk.roa (hash: DMCPEeMn/42xBYmE/TT+llc8dW4AkHYEj+Bu1a5chCg=) 16: f8wMF_0nYOjBC4T-3T9maTV9XOg.roa (hash: HH9Xx2RMXttctrpMSPb7lv2kW9EcD2NdHUms9yLQH2E=) 17: p_QYv0L6aYK512B3fR5CFvOoznk.roa (hash: aDfS/bDbCsW3S/qJ7SubMpjp1TuE7mqqhF55UFptL5k=) 18: sP_P89Gjqv0cRXNUr9_pv6JCftE.roa (hash: V9LKomJ1OLCr/vLBTnJjw6UPEUZRVYDPDN8HoyzesJg=) 19: slG7etJhHMxEF_RaKXpH3iT7Jqo.roa (hash: Jw4LSw8veeGAScSQy+xbjepFLappzSdTU9yGBS4At04=) 20: wMpCtJuJnMKH9PZbiphThxb5p3I.roa (hash: ho1eRYtOPimdRyr4aEbAZG/GlZlHUFROWz250IKu38c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 10:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:78:2f:25:45:d1:69:2f:83:70:c0:32:65:19:c7:31:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Validity Not Before: Jun 16 10:00:44 2025 GMT Not After : Jun 17 10:00:44 2025 GMT Subject: CN=cbee3c3433a015b98206b6ee08fd7550bfebcd2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:69:f7:a1:dd:f2:cc:38:a9:89:47:cb:1c:6c: d3:5d:ea:d4:0b:5e:1e:aa:2e:3e:6f:d7:6f:fc:67: 64:b3:94:c2:dd:44:ca:c4:f6:37:22:0d:a8:2a:6e: 5f:4d:81:e5:39:46:9e:da:93:fb:9f:ba:30:d0:20: 75:2e:8c:03:5f:47:9a:88:a2:c3:63:85:14:b0:b4: 53:9f:23:e8:ce:8e:67:67:25:55:96:8d:d5:4b:bf: 5b:35:e4:8c:8b:8b:5c:2a:b1:0e:98:73:07:fc:77: cd:9b:b5:90:99:5e:59:fa:76:25:42:32:cc:a9:f7: 7c:bf:48:90:a3:0f:af:23:0e:82:50:56:39:d6:85: 8c:63:4b:7b:a1:91:53:59:f7:13:7f:1a:a5:d8:13: 76:84:8d:89:ce:bd:c2:27:71:5c:b8:c9:e7:2a:32: 8f:97:bf:a2:d4:f2:41:7f:a5:97:58:59:d8:4c:86: 30:26:12:90:3b:32:77:24:3a:2e:a1:7e:68:05:03: 65:05:c2:e8:61:6d:74:dd:64:56:08:3d:34:1b:42: c6:78:d5:e0:c1:41:ad:5f:d0:ee:e5:ac:48:82:b8: fd:2d:3a:35:47:03:6e:1c:9d:e5:df:da:92:c9:7a: 8b:fc:ad:02:42:1f:07:4c:a5:38:93:8f:4c:e0:ec: 76:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:EE:3C:34:33:A0:15:B9:82:06:B6:EE:08:FD:75:50:BF:EB:CD:2E X509v3 Authority Key Identifier: keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:50:32:63:89:34:ef:d3:39:56:d6:21:79:da:39:e6:7b:c3: d0:90:48:f5:f7:66:38:08:76:fe:b9:d3:d4:84:be:7a:09:51: b1:66:3f:b3:04:83:88:89:f6:92:73:c6:4b:e4:13:d3:70:83: ab:d4:80:31:d7:a9:a5:59:63:73:85:f7:22:d5:4f:60:c9:da: 9f:c3:8b:1b:39:13:5b:e6:82:e6:26:6f:e3:2e:ce:2b:54:a9: b6:05:81:47:99:79:f5:23:86:ca:94:d6:c0:3c:da:d3:27:54: d8:b6:c9:d8:8e:ec:d4:3d:82:43:6b:a3:7c:99:23:c9:5d:3d: 5b:67:72:32:83:29:6d:7f:40:9b:4f:4d:7f:de:e9:e0:ba:69: 6b:7d:72:e6:7e:db:ee:a3:7f:04:3d:eb:19:70:cf:fc:d4:07: df:bd:6d:57:eb:38:94:2b:61:e2:cd:5e:51:e0:8b:60:82:15: cc:cd:15:16:79:d7:85:9f:46:af:c7:c8:3a:56:f4:c8:fb:f5: 01:7d:2e:99:3e:4d:c1:7f:ec:5b:43:1c:dc:26:4d:bc:bf:05: 58:8e:14:b5:3a:6b:ea:e8:67:5d:c7:34:be:3b:d8:c0:8a:56: a1:a8:92:38:d1:48:e2:d8:a4:db:25:be:b1:2f:a2:42:78:ad: c9:31:19:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd4LyVF0Wkvg3DAMmUZxzFcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj YjUzZDYwHhcNMjUwNjE2MTAwMDQ0WhcNMjUwNjE3MTAwMDQ0WjAzMTEwLwYDVQQD EyhjYmVlM2MzNDMzYTAxNWI5ODIwNmI2ZWUwOGZkNzU1MGJmZWJjZDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWn3od3yzDipiUfLHGzTXerUC14e qi4+b9dv/Gdks5TC3UTKxPY3Ig2oKm5fTYHlOUae2pP7n7ow0CB1LowDX0eaiKLD Y4UUsLRTnyPozo5nZyVVlo3VS79bNeSMi4tcKrEOmHMH/HfNm7WQmV5Z+nYlQjLM qfd8v0iQow+vIw6CUFY51oWMY0t7oZFTWfcTfxql2BN2hI2Jzr3CJ3FcuMnnKjKP l7+i1PJBf6WXWFnYTIYwJhKQOzJ3JDouoX5oBQNlBcLoYW103WRWCD00G0LGeNXg wUGtX9Du5axIgrj9LTo1RwNuHJ3l39qSyXqL/K0CQh8HTKU4k49M4Ox2/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvuPDQzoBW5gga27gj9dVC/680uMB8GA1UdIwQY MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt NDY5MGEwMDcxNDFmLzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjFAyY4k0 79M5VtYhedo55nvD0JBI9fdmOAh2/rnT1IS+eglRsWY/swSDiIn2knPGS+QT03CD q9SAMdeppVljc4X3ItVPYMnan8OLGzkTW+aC5iZv4y7OK1SptgWBR5l59SOGypTW wDza0ydU2LbJ2I7s1D2CQ2ujfJkjyV09W2dyMoMpbX9Am09Nf97p4Lppa31y5n7b 7qN/BD3rGXDP/NQH371tV+s4lCth4s1eUeCLYIIVzM0VFnnXhZ9Gr8fIOlb0yPv1 AX0umT5NwX/sW0Mc3CZNvL8FWI4UtTpr6uhnXcc0vjvYwIpWoaiSONFI4tik2yW+ sS+iQnityTEZCw== -----END CERTIFICATE-----Generated at Mon Jun 16 16:25:04 2025 by rpki-client