$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft File: RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json) Hash identifier: NLECCEJs0wbJbayTnRSDr/buUyvjElBypXXgxM3/KZg= Subject key identifier: DC:16:33:C7:2C:07:D9:12:47:24:0C:73:1F:C5:7F:69:5D:10:B7:D7 Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 01977150F0DC64CFA71F8E0C99DE0706B72E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft Manifest number: 093A Signing time: Sun 15 Jun 2025 02:00:19 +0000 Manifest this update: Sun 15 Jun 2025 02:00:19 +0000 Manifest next update: Mon 16 Jun 2025 02:00:19 +0000 Files and hashes: 1: 7HWHA8UqwHtsqDMBW-DwrAaDDjM.roa (hash: e8s5o0udkcNi/3gr4/Pby8a6BORkIl6Tk5BcUgdqf98=) 2: 8ZU3bGrm9xWhwMuNBNg_sVSf78w.roa (hash: q1BAPF4hVnnZILV3v3GzNcOP1nX7SZBYfnbCOVjjzwo=) 3: CH-MNJ62x7kM2_t2iuWi-Pl441k.roa (hash: HaFXnQzr7MPgH+K0peJzoRzHcSdMpsIno7S1dDVTYls=) 4: F93HK3zZbjyanEiJSO9cArJniew.roa (hash: wrh+x7Klvcmq0ZMqoDo7aM3datdsQCypsCC/kWY8BG4=) 5: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: 5Yr7m/N7WlUtp28RxnwWXa38LehJWJzIGjFXBE3KjTQ=) 6: RocZhE1Sgw4wWmm8LnKO4d7f68w.roa (hash: +rys+d7y9dD2VIYL252iXtWKGL/n4lME4L1WtriVBxI=) 7: U47Wz_LD2xLJywbdswHmPzRJpDo.roa (hash: qCq8pw/dLAXcMlcPqPaGHxhAYIuN8gInNQEcnd7HSIs=) 8: XVHP5qtngkOzkHHcBMfCOoE6FyE.roa (hash: U8lDjEDePEbA90E5ZD4uXWmkg3O6630794CxqDFoPBY=) 9: cSOzcJuJznyp0-yCo16vcwC-SO4.roa (hash: /BcpV3CpFg+yHnaLyG3CeUoFmA/RLptEV35Vt1SRJwQ=) 10: g8u27N4QItUirByGNIpicNOy82Y.roa (hash: 86XD7A3oPGKMoD9IAzlfVhw0nOpZrI3Tfibq7N31K6c=) 11: iH3j8qY1-071YfTwOblznlAQw6s.roa (hash: yME8emyVjusbrBjqemdlgI+CwPOa3VlHZpR5ZeMxUWc=) 12: mGSm6WnPN8htR3E3SqRmvrkDAW0.roa (hash: ma8SoOibhRfVHVvLv4aSGOKoznJfyTFPs8hixxk0hN8=) 13: o8lbHUF5p8P0LSI1V6iY7jMTuTg.roa (hash: ZQCfB91uZ1JZ71d13fCWoNRsNQvDiuAzDxXdM3rVpoo=) 14: ryDPDikJ1i_zY_ss9G41qhvN3jc.roa (hash: h94vj7TMlIg5ainHE5mYHmcUUj3Q1WNeWVzGbaI/3Fg=) 15: s34gFp_Dg8YCv8xU55YOYuR_tp0.roa (hash: 6OSop7WtLWi7lLLdg7yDCXvjXq4AkQqEA6GX04GSf58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 22:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:71:50:f0:dc:64:cf:a7:1f:8e:0c:99:de:07:06:b7:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Jun 15 02:00:19 2025 GMT Not After : Jun 16 02:00:19 2025 GMT Subject: CN=dc1633c72c07d91247240c731fc57f695d10b7d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c6:57:c7:29:70:91:da:e4:f0:ae:85:91:84: 8d:a5:b9:db:b0:58:48:e1:31:06:f5:16:7c:36:54: 20:99:ec:a0:fb:6e:ff:81:38:72:b9:84:0d:9d:f7: 57:0d:2e:6f:0e:5c:bb:da:3e:76:89:ee:94:32:14: c6:a0:12:01:ac:b2:f2:77:b5:90:89:8e:b5:a3:05: 6b:8b:fc:47:e6:b5:c2:8a:c3:d0:3c:50:b3:00:e7: 1a:98:bf:a2:60:06:f7:76:43:ad:92:aa:2c:4b:e8: dd:b0:cc:ec:ab:1e:1c:17:53:f3:12:a1:3e:08:05: 5a:48:10:31:f4:75:af:84:f5:78:ec:ab:41:43:dd: 5c:5c:ba:b6:fd:17:0f:36:86:4b:ce:e7:06:f3:06: 46:1c:53:8c:db:bd:01:fd:29:a0:70:5b:78:70:0b: e0:a7:f4:54:c6:f7:04:fe:24:bb:d6:7b:ef:17:85: 95:24:d2:f4:04:9f:19:29:ea:9b:0a:64:5d:7a:f1: 24:7e:0a:0a:2d:ef:4c:3f:57:f3:10:09:5f:30:9a: 69:78:09:6b:c8:81:16:f4:99:7a:eb:31:6b:bb:9f: 2d:df:d1:6a:ba:85:9c:ce:16:48:90:b2:a3:d7:9c: 60:80:5c:04:1d:6a:27:58:47:15:df:0f:6b:13:fa: 7c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:16:33:C7:2C:07:D9:12:47:24:0C:73:1F:C5:7F:69:5D:10:B7:D7 X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:74:c7:1c:43:dd:42:4a:d5:6a:b2:f9:5b:e3:78:44:10:3d: 26:a2:5b:40:3c:81:bd:e4:8d:55:fc:c6:c6:cf:87:fc:b8:08: f8:89:8d:d0:a1:96:52:54:4d:ad:99:e4:85:22:c8:74:c6:7c: 1e:b0:c9:25:03:fb:67:b1:b1:e0:d1:09:e9:af:07:34:76:1c: 98:3b:19:f1:25:47:61:2a:53:73:8a:dd:4a:8b:ab:a7:df:6f: ec:f0:35:68:ef:7d:2a:bd:b9:f4:8d:78:b3:0a:42:8b:79:e4: 60:d5:03:c3:a7:f3:b2:e1:85:24:47:a1:3e:a4:56:01:60:7d: ad:85:86:4f:48:27:1c:10:b6:95:cd:2c:06:d0:af:e7:a7:b1: 8e:85:b0:a7:e8:dc:d5:6d:c9:7e:96:c1:d7:54:0f:42:48:e8: af:d6:12:a7:18:31:5c:67:90:f6:2a:a0:7d:bb:ad:61:df:94: 6c:50:c6:7f:59:79:e9:27:ad:4a:b6:6b:c5:03:f3:f0:c9:31: e9:4a:cc:6f:40:08:f6:c6:52:c2:02:60:2f:b3:a6:7a:ca:f3: 4f:b1:22:57:1b:62:f7:19:6c:53:79:df:7a:87:07:6e:8c:ce: d7:73:a8:49:10:69:58:7d:51:d7:9c:b5:5f:a3:20:8e:86:17: f2:c6:c3:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdxUPDcZM+nH44Mmd4HBrcuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjUwNjE1MDIwMDE5WhcNMjUwNjE2MDIwMDE5WjAzMTEwLwYDVQQD EyhkYzE2MzNjNzJjMDdkOTEyNDcyNDBjNzMxZmM1N2Y2OTVkMTBiN2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08ZXxylwkdrk8K6FkYSNpbnbsFhI 4TEG9RZ8NlQgmeyg+27/gThyuYQNnfdXDS5vDly72j52ie6UMhTGoBIBrLLyd7WQ iY61owVri/xH5rXCisPQPFCzAOcamL+iYAb3dkOtkqosS+jdsMzsqx4cF1PzEqE+ CAVaSBAx9HWvhPV47KtBQ91cXLq2/RcPNoZLzucG8wZGHFOM270B/SmgcFt4cAvg p/RUxvcE/iS71nvvF4WVJNL0BJ8ZKeqbCmRdevEkfgoKLe9MP1fzEAlfMJppeAlr yIEW9Jl66zFru58t39FquoWczhZIkLKj15xggFwEHWonWEcV3w9rE/p8twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwWM8csB9kSRyQMcx/Ff2ldELfXMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjnTHHEPd QkrVarL5W+N4RBA9JqJbQDyBveSNVfzGxs+H/LgI+ImN0KGWUlRNrZnkhSLIdMZ8 HrDJJQP7Z7Gx4NEJ6a8HNHYcmDsZ8SVHYSpTc4rdSourp99v7PA1aO99Kr259I14 swpCi3nkYNUDw6fzsuGFJEehPqRWAWB9rYWGT0gnHBC2lc0sBtCv56exjoWwp+jc 1W3JfpbB11QPQkjor9YSpxgxXGeQ9iqgfbutYd+UbFDGf1l56SetSrZrxQPz8Mkx 6UrMb0AI9sZSwgJgL7OmesrzT7EiVxti9xlsU3nfeocHbozO13OoSRBpWH1R15y1 X6MgjoYX8sbDYw== -----END CERTIFICATE-----Generated at Sun Jun 15 08:39:08 2025 by rpki-client