$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json) Hash identifier: 0mGZJMIX34UDY0i7PN4nM7FDXNvjSYyr72NaraHI3rs= Subject key identifier: 17:D9:39:8C:B2:E0:A1:8C:4B:23:EE:6E:A3:5B:B6:DE:7F:D3:AE:90 Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Certificate serial: 01976F2BF87A7AE978CB1B29247892CC62E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft Manifest number: 09A5 Signing time: Sat 14 Jun 2025 16:00:41 +0000 Manifest this update: Sat 14 Jun 2025 16:00:41 +0000 Manifest next update: Sun 15 Jun 2025 16:00:41 +0000 Files and hashes: 1: 6HdpHxLcX1yJjOzlOGgPAGgCNb0.roa (hash: y1XUmT2PqLYoWjVJT6WyKQER242J2k/RPKz4Xs0cE9k=) 2: BVbo9uh3-UvDvwSZi6BfXSBGPHU.roa (hash: Z8qyhH6viB+EEzaDtRv3WrjvxrAR7rKFv4csNYovB+g=) 3: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: m541Op2KQkMck3d2pbFLCWx04NUj7cQRFXYKcLFUvpo=) 4: DN7cb2WxNWOTpycH6YaG66edbbs.roa (hash: xHRCbbCrWIHuruRPkilEuXWa24rKkDGqIeFboryKMwQ=) 5: Fiaoyzt87itbMDPQcRW3KUFZRqE.roa (hash: msw75zbRd9jVXLoPptdxNvS4cyBll5nFN6qdq2TWWOE=) 6: HHx5PgT40c8odAvxk1P-fxWePlA.roa (hash: zPsSrq/ptkyDcwkMCUxFQsAp1K70phIRO2z3d5q6bK8=) 7: OEhLMwhGsj88kZ4FqVMVTfpqz-8.roa (hash: /KQ43a3fdsH0+xJZbYiIUJZNQ9G0ar1u4ierKXmEsMM=) 8: m87-CXNBm5VwmmEvQBAI-p_8l98.roa (hash: vGGq9E7IPOkRddkapcYuXImJsPgw9f+HEWKjnAHtMCI=) 9: mEeEQY0ey8CTsOe4ojz1GXXgLAY.roa (hash: UNpewFCfGryY81edEZKVL/+q37bqXwMGckJf/qXqj3E=) 10: nMhyX7boXa--DjLfLdE1CijBszU.roa (hash: s95e1FJb6EuRsUkazwo7HJhOqZW3W1mabgyeLhjUIIo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 16:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6f:2b:f8:7a:7a:e9:78:cb:1b:29:24:78:92:cc:62:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Validity Not Before: Jun 14 16:00:41 2025 GMT Not After : Jun 15 16:00:41 2025 GMT Subject: CN=17d9398cb2e0a18c4b23ee6ea35bb6de7fd3ae90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:80:c4:59:e1:f1:dc:fc:db:5f:8d:a0:44:e7: 1d:4e:55:33:f0:19:b4:5e:99:27:ba:03:61:c3:60: 58:d4:f7:ca:fb:f2:25:13:52:68:33:61:1f:de:ef: 03:09:47:2d:6e:62:b3:f6:17:01:f2:6a:e0:a7:c9: e7:45:68:2f:8d:ed:79:3b:bf:09:f1:bf:35:6c:37: 46:1a:24:77:8c:55:38:92:8d:79:9b:81:99:2f:d9: c2:26:c4:c8:cd:7d:1d:5a:29:e6:b9:8a:9a:a6:20: 63:c7:f2:0a:e9:f2:14:92:28:25:5a:fa:ad:37:cf: 2b:39:b1:cf:91:0f:42:24:9a:72:7b:1b:06:da:7d: e2:15:ab:ff:b0:e9:cb:df:0a:e1:16:87:5d:09:8a: 61:74:69:71:16:02:45:65:a9:d2:9f:65:ac:f3:af: 0d:a6:b2:ce:61:59:d6:0f:85:87:ba:52:33:23:2a: 5c:6d:b6:de:d4:bf:82:e8:1a:31:1e:5b:57:26:ca: 4c:8a:20:07:1d:9e:c9:54:9c:dd:11:91:a9:f6:aa: c2:b9:84:92:e3:82:ca:1e:68:54:7b:be:82:de:ca: a2:59:48:b3:61:d7:d9:84:05:a9:88:a7:7f:61:30: 6b:95:bc:32:4a:dc:c5:5a:41:39:74:13:da:b4:05: e5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D9:39:8C:B2:E0:A1:8C:4B:23:EE:6E:A3:5B:B6:DE:7F:D3:AE:90 X509v3 Authority Key Identifier: keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:bf:dc:41:b5:17:22:4f:dc:b8:26:22:b1:1d:bd:79:d6:8d: 65:aa:bf:46:46:8e:9b:3e:54:da:27:90:1b:d6:ac:bd:8e:7a: db:6a:8c:29:bd:c9:98:ef:1a:14:8e:fd:af:34:95:58:5c:78: 7b:7f:a3:fe:67:a1:5b:2b:7a:c4:2e:bb:50:6a:1b:c5:e5:65: 41:bf:17:24:f0:2e:cf:63:8d:7c:56:d9:6a:44:94:f6:a2:16: 00:12:af:65:24:6f:db:59:4a:cb:85:3c:bd:9a:9f:5a:dd:eb: 65:3a:74:f8:d4:75:2c:74:eb:1e:79:db:31:f9:0b:84:a5:e3: 56:15:a6:0c:da:aa:4e:28:76:87:c4:e7:03:43:48:1e:87:ab: 23:d4:7d:c5:42:77:c2:9e:2a:98:37:e6:6e:0a:77:c6:d1:32: f4:54:cf:37:78:56:53:0e:95:6f:c1:d0:01:76:4e:b2:de:f7: d7:fa:6f:bb:4f:5f:1a:4c:8f:3c:47:70:84:62:58:06:64:c6: 7f:96:cd:78:ba:8a:a6:0c:01:d9:37:22:48:c6:3d:99:24:28: 94:ff:73:5a:df:64:b7:8c:87:49:b1:ee:3b:bf:c7:d7:37:2c: 9f:dd:cb:40:21:ae:84:d4:63:3b:a5:3e:3c:cd:09:bd:d9:fc: 36:4e:c2:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdvK/h6eul4yxspJHiSzGLhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1 NmRiZmQwHhcNMjUwNjE0MTYwMDQxWhcNMjUwNjE1MTYwMDQxWjAzMTEwLwYDVQQD EygxN2Q5Mzk4Y2IyZTBhMThjNGIyM2VlNmVhMzViYjZkZTdmZDNhZTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYDEWeHx3PzbX42gROcdTlUz8Bm0 XpknugNhw2BY1PfK+/IlE1JoM2Ef3u8DCUctbmKz9hcB8mrgp8nnRWgvje15O78J 8b81bDdGGiR3jFU4ko15m4GZL9nCJsTIzX0dWinmuYqapiBjx/IK6fIUkiglWvqt N88rObHPkQ9CJJpyexsG2n3iFav/sOnL3wrhFoddCYphdGlxFgJFZanSn2Ws868N prLOYVnWD4WHulIzIypcbbbe1L+C6BoxHltXJspMiiAHHZ7JVJzdEZGp9qrCuYSS 44LKHmhUe76C3sqiWUizYdfZhAWpiKd/YTBrlbwyStzFWkE5dBPatAXlKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfZOYyy4KGMSyPubqNbtt5/066QMB8GA1UdIwQY MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt ZTIxNjZhZDc0ZTNmLzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALL/cQbUX Ik/cuCYisR29edaNZaq/RkaOmz5U2ieQG9asvY5622qMKb3JmO8aFI79rzSVWFx4 e3+j/mehWyt6xC67UGobxeVlQb8XJPAuz2ONfFbZakSU9qIWABKvZSRv21lKy4U8 vZqfWt3rZTp0+NR1LHTrHnnbMfkLhKXjVhWmDNqqTih2h8TnA0NIHoerI9R9xUJ3 wp4qmDfmbgp3xtEy9FTPN3hWUw6Vb8HQAXZOst731/pvu09fGkyPPEdwhGJYBmTG f5bNeLqKpgwB2TciSMY9mSQolP9zWt9kt4yHSbHuO7/H1zcsn93LQCGuhNRjO6U+ PM0Jvdn8Nk7Ceg== -----END CERTIFICATE-----Generated at Sun Jun 15 03:15:13 2025 by rpki-client