$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft File: CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft (raw, json) Hash identifier: T6ra6mcNMH0A7VgafqCNS66OQIwLDRt3gVb3gN8X6N0= Subject key identifier: 25:3A:27:C9:E4:94:B6:DF:69:5C:73:55:0E:37:10:3E:A8:A4:46:97 Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 01977C79CB5136EAEB285EF81CF24E3FFC8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft Manifest number: 15C9 Signing time: Tue 17 Jun 2025 06:00:46 +0000 Manifest this update: Tue 17 Jun 2025 06:00:46 +0000 Manifest next update: Wed 18 Jun 2025 06:00:46 +0000 Files and hashes: 1: 0EWIFMkHOwPxXxJO-cVVnlFMV9M.roa (hash: H3HRfMwSGiaOC4hjRP3JPpolbe1iEtk1HgVt+tXcFJg=) 2: 1Q8S-F04ndhiDn0SGwOoAJvpcJE.roa (hash: C3Etga/0CnN14pA6mDGityRvYUsO547YlA3aweNBuiE=) 3: 2VG718T3W04-_y_DFYMb27FL8Xc.roa (hash: rc2TenqF9dc6/5xbGTLqr/wJccF1AG2cwa4tLlPDxNg=) 4: 4eUzX53KjKiFABS1AxLPvZ5r-bY.roa (hash: 7YG9ahRtvq/YQgGSsJQAoRx/DWLAGEIhFL7ghXNU9R4=) 5: 5HzzPzyXFWUltUFIxz7A1OHGi7o.roa (hash: KdXF+S8JaHRcZ3Ivt3Pqt/DXcq9oRCgLGhDICrSfT58=) 6: 9NRiEzWNWvOsqkkmj1H_nO4JtIA.roa (hash: M1EfpG0UAk+KXmH4YDb8gbqx8X4cMoL0D3M3L/57Gmk=) 7: CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl (hash: zkFPoxRRVf44eqywzYc2cCmho9pmMtKzQp6nUS3U5Fw=) 8: CdZHXMtiuXIYHPmoJY2aErxG8Z8.roa (hash: zau8aloWL7mHqdY4KBJaLbm12+SMJIeq7unHMUAtkpg=) 9: ELaIItpNMzqHS9OpyWZxQCWwejQ.roa (hash: nTU80YWNnv8w85NSUIjn+8ThW6vosJXjx8iKS04GONQ=) 10: QDnTB1-gKLLvkYk5f0mHuXK293g.roa (hash: ITp7yMZbWE36QWni9uBDxLpY4F+C9+SnVAj3E7l62Ts=) 11: XDAdp99VnBF7cnnsQ12OybJrT8Y.roa (hash: RlZg9LpMx3Sn+N/ygBjqDdQQDqiZuazZKwQVgxx0FBg=) 12: rfdo-9tZjARHX4NveRw0hMtJZi0.roa (hash: 5ECReeTc1Tc4KP4YsINLVoWJBI6UqeiVxcrFrB9M65o=) 13: tjV22hyfL6sKASeEJo6Ke2cIRMg.roa (hash: j+NWMjI7+Df8SVOaL0Iyl9IZZ4H1LL2E359iqV63je4=) 14: zCJNwAHBT-OuD8JSwLlWmHeq2i0.roa (hash: xxcu2GFnZrIoRaIL254U2SP3O3E+qALgdaalLMmqYoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 18 Jun 2025 06:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:7c:79:cb:51:36:ea:eb:28:5e:f8:1c:f2:4e:3f:fc:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: Jun 17 06:00:46 2025 GMT Not After : Jun 18 06:00:46 2025 GMT Subject: CN=253a27c9e494b6df695c73550e37103ea8a44697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2f:b3:c3:ee:34:0d:eb:d7:49:f8:64:03:e1: 54:f7:3e:eb:de:66:e5:4f:eb:1e:21:a4:06:b3:71: df:31:3e:ae:68:ec:b7:2e:0d:48:81:c5:ca:e8:b7: 5e:3f:50:63:70:e9:3c:68:bd:0f:85:b0:8a:f0:c1: 25:d4:ae:8a:29:83:df:2e:17:d7:0e:d8:50:c5:ad: 3f:9e:65:ba:3f:4d:8b:0a:71:06:33:c8:52:a9:4e: 41:8a:c6:f7:7c:b3:ff:5b:55:64:69:c9:6a:b1:0b: 4f:04:60:df:a9:99:00:97:c2:e0:1e:2c:55:88:d8: 56:6f:ed:c9:6c:84:01:d4:a1:71:22:f2:0f:b8:7d: 90:b9:b8:fc:2e:5b:8a:dd:1a:21:0e:cf:b0:5d:67: f4:34:83:c3:eb:1b:6f:e2:9f:01:59:37:74:29:47: 0a:f1:85:28:5d:2c:fb:15:2c:8b:ae:34:73:dd:cc: 15:0d:0e:c6:0e:6c:d5:3d:44:9a:1d:e1:85:d0:75: 5a:d0:eb:89:49:e4:66:00:bb:4a:64:78:f6:1a:03: c0:27:0b:0a:46:e7:58:f3:20:a2:f0:4e:15:57:cb: 6c:3f:45:76:21:65:60:dc:52:9a:1c:5b:93:dd:fe: ea:d2:4e:3f:b5:1b:2f:a1:08:9c:3a:65:59:18:09: d0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3A:27:C9:E4:94:B6:DF:69:5C:73:55:0E:37:10:3E:A8:A4:46:97 X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:8b:d6:97:de:cb:0e:46:f6:d4:7e:85:7b:48:85:b7:b1:61: d9:2d:08:b9:b4:3a:39:f6:c1:1e:4c:43:22:ab:26:70:e5:21: 12:fe:5f:ba:29:70:f6:e7:26:64:49:f1:c5:cc:f4:71:50:e9: 11:c6:82:6d:b1:19:c3:23:94:ea:9e:68:21:8c:be:06:4e:ee: 00:ae:3f:32:c3:d6:55:03:50:f5:1b:3a:14:63:de:f5:4f:fe: b7:ca:ef:89:cd:23:25:37:4a:c7:6a:b0:3a:74:7e:b1:7e:72: 28:30:0d:66:dd:c0:ab:e9:5c:99:5c:76:70:1a:2e:ca:de:d3: 38:c7:80:15:ed:14:28:55:f8:b8:27:79:2f:9c:59:45:db:78: ee:8a:f7:83:a9:74:f5:62:0f:06:15:30:f4:f5:ea:25:e9:a3: 7f:94:1d:31:b4:f4:99:10:0d:7a:8b:fd:e7:20:74:61:5a:c5: a8:ec:82:a2:ba:fd:1a:f6:12:d6:46:a6:af:96:7e:31:40:27: ff:28:b3:bb:32:1f:20:28:16:8c:7e:cd:49:25:09:f1:7f:92: 73:ba:b3:cd:c1:0d:d1:02:f3:53:fd:19:9d:21:8e:d8:24:9d: 6c:e6:fe:14:53:5c:c4:c4:c7:c1:23:f3:3b:2b:05:34:0e:94: d7:3c:81:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd8ectRNurrKF74HPJOP/yNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjUwNjE3MDYwMDQ2WhcNMjUwNjE4MDYwMDQ2WjAzMTEwLwYDVQQD EygyNTNhMjdjOWU0OTRiNmRmNjk1YzczNTUwZTM3MTAzZWE4YTQ0Njk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3y+zw+40DevXSfhkA+FU9z7r3mbl T+seIaQGs3HfMT6uaOy3Lg1IgcXK6LdeP1BjcOk8aL0PhbCK8MEl1K6KKYPfLhfX DthQxa0/nmW6P02LCnEGM8hSqU5Bisb3fLP/W1VkaclqsQtPBGDfqZkAl8LgHixV iNhWb+3JbIQB1KFxIvIPuH2Qubj8LluK3RohDs+wXWf0NIPD6xtv4p8BWTd0KUcK 8YUoXSz7FSyLrjRz3cwVDQ7GDmzVPUSaHeGF0HVa0OuJSeRmALtKZHj2GgPAJwsK RudY8yCi8E4VV8tsP0V2IWVg3FKaHFuT3f7q0k4/tRsvoQicOmVZGAnQjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCU6J8nklLbfaVxzVQ43ED6opEaXMB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd4vWl97L Dkb21H6Fe0iFt7Fh2S0IubQ6OfbBHkxDIqsmcOUhEv5fuilw9ucmZEnxxcz0cVDp EcaCbbEZwyOU6p5oIYy+Bk7uAK4/MsPWVQNQ9Rs6FGPe9U/+t8rvic0jJTdKx2qw OnR+sX5yKDANZt3Aq+lcmVx2cBouyt7TOMeAFe0UKFX4uCd5L5xZRdt47or3g6l0 9WIPBhUw9PXqJemjf5QdMbT0mRANeov95yB0YVrFqOyCorr9GvYS1kamr5Z+MUAn /yizuzIfICgWjH7NSSUJ8X+Sc7qzzcEN0QLzU/0ZnSGO2CSdbOb+FFNcxMTHwSPz OysFNA6U1zyBmg== -----END CERTIFICATE-----Generated at Tue Jun 17 14:32:19 2025 by rpki-client