$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft File: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json) Hash identifier: aNYQAV8p5CXqt+pw5LSxe5cev9nRCDsB6B/zVYN7i9s= Subject key identifier: 3E:6C:10:B8:B1:DD:A1:D0:3A:5C:B4:11:56:24:F7:C5:F2:E4:D6:81 Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Certificate serial: 0197789C9F802EED16F02DD5F4F671D8CC6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft Manifest number: 15A3 Signing time: Mon 16 Jun 2025 12:00:19 +0000 Manifest this update: Mon 16 Jun 2025 12:00:19 +0000 Manifest next update: Tue 17 Jun 2025 12:00:19 +0000 Files and hashes: 1: 0qAbgoW4LJAElFdWt9cFuw-rgn8.roa (hash: L8maPhEmT2n7X8a6uusm8vsVOaPlCBJtXIkemnm/t10=) 2: 26WNO431X2DrhCSuMJxs-XhHdFw.roa (hash: NIeRGI1yKvtGj8sFMzxTqCRVywS0D7qHUOhHSF/o4Dg=) 3: FLQOSktOr1hKjG4R6lRrGTwu4Y4.roa (hash: HCxQYiPGo2KxnCSlrWXoWcHI4W9ZFCE3iBJWeLRX1o8=) 4: MTxciv5mcC6g5MkOWJ_PCLUtcGw.roa (hash: sgzh4uhlDpWhAHL+IAu4cgWAxT/K2/Pct3jSfOVM8NQ=) 5: W4Pp1uZLNY6O8zypTnIooV8OKUw.roa (hash: sz2YvKmGzTepzQeb00hlOadIcmBeFimSpx3Uqur21uI=) 6: Y1uBCw2ID0YyZ99v-Z_lyCH99eg.roa (hash: cjULbx6P7MvMK4WANKsBKAVbb7nETAlX3DivVasETiQ=) 7: bCiizil2Ey8Pvh56RnqDgTk8X7Q.roa (hash: phspsqh/4y98JzmGzw3HpShtGGUJNNv7gxCq93gvxKo=) 8: gyBoR0Pr1cH4RPdcxzglRlFRHBw.roa (hash: 3pblEbuyEQGeT8WjyqKPo8c9UE3z9FtuOT2bJKOYqhg=) 9: kj7kinsfLRhL_IoV619KJi8FFL8.roa (hash: PZmgxN8/Rtu6BsEbQsN7jkEXwA4RX6FBccLjt1dXYy4=) 10: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: 5F3vddJN3QcNWOOInN6ppDEFMWD0xdgbBuQtlmQXRMg=) 11: ntJH0KRoZucW8VNuwTIHrnSnlKg.roa (hash: 09HbUbUgEiRqWzx65FOtxruuV31mRSjgz3dJWoNx5nA=) 12: pgkZmq53mdBn0axql3jHx0EQjb0.roa (hash: aQFrLEqXJ0R769ANrMlsyVSYn8plE/Z1heUQyyK64EM=) 13: rQI6zOSTMPr-5aSxylwS7FyovQ4.roa (hash: rfEafPW5O0SAZQwvAq0I4Fkx0LFGcfF/mHD1nsLYnQk=) 14: sjrvDPQwhWQPqwn6TmRlTLKuFYg.roa (hash: 1WK8IPxCTeSex8E0rLqfFDPE1ENBltlsB6VMf3gJcZY=) 15: u4G1_yF4TBBumrIYzOwiYZxivvM.roa (hash: KXapgrZ9J9YmS63vQiCaKhL0YwTkps2tWnrl3xdYLX4=) 16: uMHNQRmfBxlbvZLGtjT4gp4kg2M.roa (hash: F+fAKBuQq3PLDBu2sHTyZl1ELbNuh34xu5t/W6OjOpg=) 17: ywFfsakzP6gwg7h7Z-Y4enCkXVs.roa (hash: zQ4r7S3Ps9QMhK/S8Db/JFo0flSN41hhML8fbJu8SJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:78:9c:9f:80:2e:ed:16:f0:2d:d5:f4:f6:71:d8:cc:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Validity Not Before: Jun 16 12:00:19 2025 GMT Not After : Jun 17 12:00:19 2025 GMT Subject: CN=3e6c10b8b1dda1d03a5cb4115624f7c5f2e4d681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:82:c4:98:b6:40:13:65:dc:76:34:74:f1:d6: f1:93:af:b8:43:7f:4a:be:7a:23:e9:f0:a2:f6:cf: b2:4c:a9:3e:2d:83:48:0b:3e:d6:46:5f:91:db:67: 86:62:65:46:20:bc:88:9f:12:bc:71:d3:34:c7:23: 34:48:a8:60:b5:c2:e8:db:8a:6e:71:43:d1:4c:14: 76:16:c9:f8:63:0a:d6:76:30:0e:20:dc:67:ce:ee: 78:a5:6e:13:d2:57:4c:cb:7e:f5:ad:06:40:e5:00: 8a:59:38:13:7c:98:74:60:07:c5:59:00:6b:49:5b: ff:d4:92:bd:0c:30:8f:ce:35:e3:c4:84:af:56:af: 43:a2:e1:0e:92:07:41:f2:f8:bf:ab:6e:df:d0:17: 34:11:bf:61:e6:da:de:77:a6:68:9e:42:fd:c5:2c: c9:cd:46:d9:4e:7a:0d:af:5c:08:d5:bb:b5:28:48: 7f:e3:b5:61:20:86:19:2d:77:cb:87:3a:c0:ce:26: 7a:69:fd:18:d4:2f:7e:e1:8e:d8:4e:45:92:99:06: 99:7e:09:89:39:a8:87:64:5b:f2:19:10:5e:8d:69: ea:89:3a:e9:ca:6e:17:1c:ea:8e:af:07:64:c1:d1: 77:44:1f:e1:bf:37:ba:94:4e:4f:ce:e9:b6:f6:38: 05:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6C:10:B8:B1:DD:A1:D0:3A:5C:B4:11:56:24:F7:C5:F2:E4:D6:81 X509v3 Authority Key Identifier: keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:d6:9f:e8:cc:9c:70:d8:79:e7:ce:28:2f:09:0d:2b:8d:bb: 01:38:ac:cb:fb:fb:ed:bd:f9:41:62:bb:eb:d1:18:08:e3:4b: f1:41:1f:4e:e8:59:09:8c:a9:87:80:0a:32:72:af:42:cc:a3: 5c:cd:72:85:98:13:ca:96:4d:34:8f:8a:d7:79:6c:51:8d:9d: 8b:01:9c:2b:5d:97:a8:77:4c:7f:9e:6d:39:a3:88:c5:ee:aa: ba:22:d2:49:03:ec:60:33:b6:7d:32:61:7b:b3:8b:6d:23:b7: 8a:62:cc:da:27:61:37:c2:a9:f6:69:4f:46:7f:76:6d:7e:d2: 68:8b:72:c8:59:ba:61:d8:d5:97:18:ee:d8:1e:4e:3e:b0:52: e9:73:f1:4b:ea:0d:7d:95:7b:9a:2f:22:6c:6f:09:03:14:59: 4d:c3:cf:9d:06:b4:50:b1:02:38:88:13:10:35:90:9d:47:a1: a4:4e:be:30:59:26:99:64:06:09:4c:0c:51:c6:24:3e:ea:5a: 92:a2:b1:18:66:4f:15:cd:78:f1:da:42:7c:00:21:7d:7f:87: ed:00:82:7c:b5:92:d3:cf:5e:f6:4f:83:86:43:90:0c:9f:37: db:6d:2d:a2:78:d9:e7:3c:79:1b:5a:4c:d4:77:4b:de:94:d8: 5d:36:be:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd4nJ+ALu0W8C3V9PZx2MxsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1 NTEwNTUwHhcNMjUwNjE2MTIwMDE5WhcNMjUwNjE3MTIwMDE5WjAzMTEwLwYDVQQD EygzZTZjMTBiOGIxZGRhMWQwM2E1Y2I0MTE1NjI0ZjdjNWYyZTRkNjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoLEmLZAE2XcdjR08dbxk6+4Q39K vnoj6fCi9s+yTKk+LYNICz7WRl+R22eGYmVGILyInxK8cdM0xyM0SKhgtcLo24pu cUPRTBR2Fsn4YwrWdjAOINxnzu54pW4T0ldMy371rQZA5QCKWTgTfJh0YAfFWQBr SVv/1JK9DDCPzjXjxISvVq9DouEOkgdB8vi/q27f0Bc0Eb9h5tred6ZonkL9xSzJ zUbZTnoNr1wI1bu1KEh/47VhIIYZLXfLhzrAziZ6af0Y1C9+4Y7YTkWSmQaZfgmJ OaiHZFvyGRBejWnqiTrpym4XHOqOrwdkwdF3RB/hvze6lE5Pzum29jgFQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5sELix3aHQOly0EVYk98Xy5NaBMB8GA1UdIwQY MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct YjUzZTMwZTE0MTJhLzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtNaf6Myc cNh5584oLwkNK427ATisy/v77b35QWK769EYCONL8UEfTuhZCYyph4AKMnKvQsyj XM1yhZgTypZNNI+K13lsUY2diwGcK12XqHdMf55tOaOIxe6quiLSSQPsYDO2fTJh e7OLbSO3imLM2idhN8Kp9mlPRn92bX7SaItyyFm6YdjVlxju2B5OPrBS6XPxS+oN fZV7mi8ibG8JAxRZTcPPnQa0ULECOIgTEDWQnUehpE6+MFkmmWQGCUwMUcYkPupa kqKxGGZPFc148dpCfAAhfX+H7QCCfLWS089e9k+DhkOQDJ83220tonjZ5zx5G1pM 1HdL3pTYXTa+0Q== -----END CERTIFICATE-----Generated at Mon Jun 16 15:30:41 2025 by rpki-client