$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft File: 5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft (raw, json) Hash identifier: cTwIp/8AtvayFkuk+hWPm3S1gj1wuXA77ZANPfPdMv8= Subject key identifier: 43:88:27:DF:11:DC:19:7C:52:E0:88:86:30:F2:9D:A1:75:10:DB:0B Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e Certificate serial: 019777F859C484610A07258BEB9696DF2C52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft Manifest number: 15A1 Signing time: Mon 16 Jun 2025 09:00:54 +0000 Manifest this update: Mon 16 Jun 2025 09:00:54 +0000 Manifest next update: Tue 17 Jun 2025 09:00:54 +0000 Files and hashes: 1: 53Sw43oc54bFdYl3J8aYgPuTq1A.roa (hash: F/vDAf5IclENw5iT+CZVjqI+jpZyrwkuo7GV9LGXD0M=) 2: 5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl (hash: qfzy3E7geNaihcH3Vm7myWUh+s4HCPRJTlFaA0hMuOQ=) 3: 8bzVTIvU7VLto519WM6kmb1aC88.roa (hash: RKtsKte4GFMP8uvXTysNKUtwWTqGBn/sT3xSLBAL7kc=) 4: 9Xnf0_RPB7rW94Ti4f7tLJoLt5Y.roa (hash: 6HzGHL3rDmh0KnGoCjxpw3uQutKsEpK/x9u0157VNyI=) 5: KDN_6FFPENk8-bDnIrfpP21-8VE.roa (hash: RLkioT2IjSMiI+bndKsLWNSNLlPwCFxgUoWcDB4O4GA=) 6: L9WBYojbvLbnk987LNP8zQZEzQg.roa (hash: 2vRXimXnDZGXHdopycsq1UqK3u4zkQKmcrWliNbOkFI=) 7: WOy4XXuLEMlJp9KBWwhDiF407tA.roa (hash: 6fZWXR6YTfGld6EIK4/PHGRBk1q4g1SRUcUmJfhoCkw=) 8: ZpjDQL4nsFw5QzvH0G3r2a1GNlk.roa (hash: CAm7uW2+Hk0sF/LHF5dzV4+B9Tz215MhOa+XlD6Ei5U=) 9: _-8ya1uGdNGiht7Yn5oHbq29tkc.roa (hash: HJnr22vqmqJofZlvbL2aClJAV7UWIehW5NjhEYtzTto=) 10: _KM3VWtbdBYw-7ONqWep42LzJbM.roa (hash: e0kdHEeKs2calKvQRylwRCnRtRK5mFt57DwvVj7HLtU=) 11: cVKkCDaARUtvYDXoV4X9N2Ey2ZE.roa (hash: QIVK0slO8PFSnaXnlK3EvRckSMInnvVoSayFBWoxzeo=) 12: p3CfwknfntcJcKeXNwkBmQDTjRo.roa (hash: HQKyD96aQw0B1cae393pm4KC6jsUYb1IgbC2E55egQc=) 13: qepQI1x3-VZdN4tY2IgS2Qt0QxA.roa (hash: bg52ywo15jKHz/Ym+vNWwgmJcwLyfvK3SRvTyb5JixQ=) 14: uo3I45HXu40pb8JAg4x-iMt72NU.roa (hash: DCwRNzAYt7btk9pb3J4DQg/DLUtwWKO6Tv+fQC/dgO4=) 15: wf1azGdbs6KejpsvGDcmKSTTHpQ.roa (hash: q5SxtkKD9yNoBx9Nh1XxgTUv7m8d3XBZq8krtOYc6Wk=) 16: xLOovb_V_553mPyCa2MPaJ6AL4o.roa (hash: N6NgzmGF9X7Oq9bKLoPjt2ok22T8qTteZuv/qrOneTE=) 17: yQ-AQ94E1D9Tv3q18wm7Fve1ObI.roa (hash: H8VQOZeeUDRGGEzlonPzEMZCTDLV4o0msTIPImbqpx8=) 18: zmQcXGUtGhS1_tiNEBK-z0ub5Is.roa (hash: w9Y2nBHc4Olve6gCgm/MbgZTbOJSTsJeyEW3ubYEBD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:77:f8:59:c4:84:61:0a:07:25:8b:eb:96:96:df:2c:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e Validity Not Before: Jun 16 09:00:54 2025 GMT Not After : Jun 17 09:00:54 2025 GMT Subject: CN=438827df11dc197c52e0888630f29da17510db0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f7:65:26:62:6e:10:fd:47:4a:bc:10:7b:dc: 11:ed:95:3d:eb:2c:a5:5f:03:92:6b:cf:1d:ea:85: 1e:b0:db:4b:8e:a0:d9:cd:2e:cc:4c:90:be:c6:fa: 5d:de:c7:23:cd:d1:35:3b:7c:e2:17:c5:46:7c:7c: 6a:84:15:13:5b:ae:94:0f:dd:a1:56:e4:d0:0b:f2: dd:78:65:f7:c5:8f:80:7c:69:08:07:66:19:c9:2c: 8e:f8:58:4c:c5:83:01:0b:b4:a8:61:6c:e3:be:5b: ee:e7:52:6a:9b:3f:3c:67:6c:82:bc:be:11:8f:c2: a1:2b:7e:51:d2:49:90:e7:2e:6b:7f:f7:d4:f3:51: b2:5c:96:81:2a:ab:af:fa:d7:72:11:0b:67:c2:a6: d7:62:a7:0c:86:e5:e5:18:5e:9f:1a:ed:1f:78:a1: 59:14:8d:73:ca:32:e3:9c:ba:90:eb:68:1b:2c:04: e3:52:e6:29:b0:b2:23:07:df:55:ab:27:a0:39:3a: aa:93:ec:b7:19:0d:fd:14:65:df:7d:e3:c5:99:0f: cb:fe:a6:40:47:d1:e3:a8:a9:3c:b5:48:ca:16:45: 96:2e:64:59:b2:80:76:9e:4c:14:9e:4c:c3:95:69: ee:e9:ff:a9:11:63:af:eb:a3:76:2f:c8:7d:47:9d: 3f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:88:27:DF:11:DC:19:7C:52:E0:88:86:30:F2:9D:A1:75:10:DB:0B X509v3 Authority Key Identifier: keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:0d:a1:60:c4:54:02:74:15:4a:ee:ff:6b:0a:6d:0e:3f:7e: b8:fb:c5:e4:bd:62:cc:67:0d:1e:ea:87:4e:7f:c8:df:88:49: 3f:2b:a9:c9:66:41:b7:f7:56:d5:b3:12:0f:01:be:4c:6b:c3: 99:3e:48:20:03:61:9a:42:c2:21:27:29:ba:c1:9a:82:0d:75: 0f:11:43:a7:af:32:19:1a:da:11:0d:cd:56:7b:33:26:b9:77: 98:72:02:ee:3d:70:ca:4f:07:1b:70:6e:f1:f0:6a:1f:01:e0: 68:99:d4:28:bc:6e:5e:a3:d0:ea:e3:f8:61:82:da:fa:34:6c: 95:da:de:0b:d1:75:72:de:d0:05:38:0a:e7:24:9a:9c:93:81: 2f:af:dd:81:0c:fe:ec:65:51:8c:6b:9f:6c:72:8f:7b:2b:44: 7b:f9:66:a0:fa:6c:b4:43:cd:df:4e:c2:6f:24:cb:d2:bc:d9: 31:39:b9:2b:fb:16:c3:31:7b:00:59:a7:93:2e:6d:18:ac:af: 16:f9:c4:da:77:6c:ed:9b:74:3f:76:c6:11:f3:fc:52:40:78: 4d:ff:b0:47:0b:79:8b:8f:36:97:4e:e3:0e:ef:59:d7:69:4b: 5d:37:6c:ae:cb:7a:6e:a2:30:65:2b:8b:1d:a3:7d:f7:3a:4a: d5:6a:46:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd3+FnEhGEKByWL65aW3yxSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODAyNGI3MjlkOTlmMDUxMzNlYzZkMTQzOTBjNzNlYjM2 ZGI5OWUwHhcNMjUwNjE2MDkwMDU0WhcNMjUwNjE3MDkwMDU0WjAzMTEwLwYDVQQD Eyg0Mzg4MjdkZjExZGMxOTdjNTJlMDg4ODYzMGYyOWRhMTc1MTBkYjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPdlJmJuEP1HSrwQe9wR7ZU96yyl XwOSa88d6oUesNtLjqDZzS7MTJC+xvpd3scjzdE1O3ziF8VGfHxqhBUTW66UD92h VuTQC/LdeGX3xY+AfGkIB2YZySyO+FhMxYMBC7SoYWzjvlvu51Jqmz88Z2yCvL4R j8KhK35R0kmQ5y5rf/fU81GyXJaBKquv+tdyEQtnwqbXYqcMhuXlGF6fGu0feKFZ FI1zyjLjnLqQ62gbLATjUuYpsLIjB99VqyegOTqqk+y3GQ39FGXffePFmQ/L/qZA R9HjqKk8tUjKFkWWLmRZsoB2nkwUnkzDlWnu6f+pEWOv66N2L8h9R50/6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOIJ98R3Bl8UuCIhjDynaF1ENsLMB8GA1UdIwQY MBaAFOWAJLcp2Z8FEz7G0UOQxz6zbbmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQt OTU2ZjZiNWM2MTcwLzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQtOTU2ZjZiNWM2MTcw LzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFw2hYMRU AnQVSu7/awptDj9+uPvF5L1izGcNHuqHTn/I34hJPyupyWZBt/dW1bMSDwG+TGvD mT5IIANhmkLCIScpusGagg11DxFDp68yGRraEQ3NVnszJrl3mHIC7j1wyk8HG3Bu 8fBqHwHgaJnUKLxuXqPQ6uP4YYLa+jRsldreC9F1ct7QBTgK5ySanJOBL6/dgQz+ 7GVRjGufbHKPeytEe/lmoPpstEPN307CbyTL0rzZMTm5K/sWwzF7AFmnky5tGKyv FvnE2nds7Zt0P3bGEfP8UkB4Tf+wRwt5i482l07jDu9Z12lLXTdsrst6bqIwZSuL HaN99zpK1WpGaA== -----END CERTIFICATE-----Generated at Mon Jun 16 17:43:51 2025 by rpki-client