$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft File: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft (raw, json) Hash identifier: UP393NSQHZKmvoPTF/skLs0mPf3ysMYdtl2oIUvkWNo= Subject key identifier: BF:F4:2D:15:CE:32:F3:6F:16:88:26:59:63:B8:10:B7:75:D9:63:1E Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Certificate serial: 01976DABC78191D997E4A84C08AC418DEF91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft Manifest number: 0A8F Signing time: Sat 14 Jun 2025 09:01:03 +0000 Manifest this update: Sat 14 Jun 2025 09:01:03 +0000 Manifest next update: Sun 15 Jun 2025 09:01:03 +0000 Files and hashes: 1: 2m_CYVmLsPzF7bcN6vIid84YZD8.roa (hash: LBmz6BkcC+hYAgg9NpyTpTiVYvW2FI/a+Z33OiNH3bM=) 2: 4nVbm_9mW8-MAn0I_kGjdBfxhVw.roa (hash: pTL9FLQm2ArdSOx4IvTJl5dYC4wcCTYCswuw3GEGHMQ=) 3: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl (hash: x4mVRmjND0edOdQPcJsjawmLfVoKFkTroLH935d1/ao=) 4: ASUGNfdEr-zmHuBMKbmczWEEyX0.roa (hash: XbBf6Nfds25faGeda9A9EZrA0jUpRsOTRIO73TfrGdU=) 5: D_RGKNjU3HO1804H_N4lL39f8xU.roa (hash: lQxsMyLpAGFJHo/y+xtaq8v1/ZEVry9ym0LdrZC/Bgk=) 6: Di4BCmfwCebJmpiiwQVl8kD1SGY.roa (hash: YROnCwrXQNQ5Na/T+Qstm6PeSLYo1KpF7+7yHOQYHZY=) 7: GPFpap7M0DbSFtJBpaKp67RfOgs.roa (hash: 6C0EKVC4/wJ0awCJ51hmh22riQaO8QV9e+LjKWFhq3o=) 8: IrnZpWugwiVaDWE0Y8y2HTk6myM.roa (hash: hz4dzGEJlp9nAI/PksWqX4be/cNB9cFXoUk0RTppUW4=) 9: UPL7qImi1Ys3kJpNeUneyjua3iE.roa (hash: yEbc7GI9w/HHKG7S49YH0IbZWjyzBWFPN0Ij4so55ao=) 10: Wqi1dLZsHvoMXUpSlZaZNHPgS_4.roa (hash: uMbe0TM0fIuYtnHf63Llp9sJ+CZVXJ/tOzlQU2AOjts=) 11: gqYJ1QlxZp2sfbvxF5yVPiDZ3Dk.roa (hash: +mkHl1F4HLXN9PfWQktZtYiROfsgXfptEmlNuP4F0GM=) 12: hrJ9G8LdPfpuv4HEnlrj0UM1FZI.roa (hash: Ap/wGOk300z33ESWLkwykljx6YcmZDQ+kuaPYGOBuOE=) 13: ip51KpcMdfOcRWLVf2HbT1-y1Tk.roa (hash: w96a29aqdZpAZsW1TalxljppYBFpY8XCQQF21I+O+bg=) 14: qOKY-IzakK8b3r-fGGAM7SuFUFM.roa (hash: 0xmS3lTVgR47MEU89O0ODLmZ+nEhlRcq1hkGVTaLD7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 09:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6d:ab:c7:81:91:d9:97:e4:a8:4c:08:ac:41:8d:ef:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Validity Not Before: Jun 14 09:01:03 2025 GMT Not After : Jun 15 09:01:03 2025 GMT Subject: CN=bff42d15ce32f36f1688265963b810b775d9631e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4f:a0:e2:c9:3d:3d:a5:22:59:7d:b7:8b:c2: d3:a1:b2:7f:2c:1f:21:8e:69:38:04:0f:25:43:1d: 47:34:4b:f2:5f:9e:74:cc:69:69:f4:73:60:af:c1: 88:c3:b2:f0:c1:fc:2a:ba:8f:83:46:e9:87:36:78: ed:e4:45:c2:9f:ba:2c:3f:d7:20:51:21:6f:08:88: 2e:19:a9:7f:c2:fb:3f:1e:46:c3:30:61:82:e0:76: 12:48:eb:22:ff:36:1a:2b:78:be:87:c3:54:9d:44: 3d:13:77:43:54:1d:d1:b0:1b:5b:f7:39:3a:8d:4e: 29:a2:e0:a9:5b:93:92:8b:a8:5b:65:1d:6a:dd:39: 9a:b0:72:70:9a:7c:35:1e:06:00:11:47:1f:67:24: 92:63:61:2f:b0:41:ae:a2:6a:43:87:fe:4e:09:52: 86:cc:9c:5f:65:a7:7d:c8:32:65:e6:77:f0:59:b3: 8b:82:d8:35:32:72:0f:15:59:0a:54:f0:b1:e1:80: 13:59:ae:80:b8:56:79:dc:3a:19:89:2c:56:cc:a9: 60:a6:22:6a:1f:f8:da:69:9e:4e:d0:f7:51:68:5a: c4:fa:14:3b:45:32:30:fa:69:e8:9b:7a:8e:2f:82: d4:e8:b6:c6:79:8d:a4:5b:9b:2e:13:87:8c:97:19: 14:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F4:2D:15:CE:32:F3:6F:16:88:26:59:63:B8:10:B7:75:D9:63:1E X509v3 Authority Key Identifier: keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:31:b1:85:5a:c0:d7:ab:fb:9e:73:d0:9f:a9:72:4f:7b:90: 70:2b:1b:e2:bc:de:14:b8:8a:c9:fc:e1:e0:7f:d5:4d:d2:67: fe:dd:ea:e7:32:d7:2c:df:ad:f3:81:bf:76:28:db:04:b6:4c: dc:d4:5f:04:40:bb:49:be:ef:bc:fd:90:27:f6:e2:b4:f8:80: fd:76:e4:d6:3d:f1:35:9e:8c:b3:1d:07:18:ca:e4:44:c3:f9: a7:76:41:b1:d0:78:59:38:56:af:3c:db:1f:42:81:8c:97:24: 09:1b:27:bd:bb:fc:b2:b5:90:4d:8e:16:11:67:8e:fb:b7:50: c0:b5:32:d8:a7:1b:51:ca:c9:3c:5f:67:ad:c2:3c:96:fb:1f: 87:55:20:f3:70:c0:45:36:6c:c8:c7:c7:6c:17:b2:8a:69:25: 83:fe:5b:23:77:1d:12:2f:32:b0:00:0d:35:ee:ae:88:76:e4: 4e:45:c5:63:3b:55:bb:7a:78:30:f2:28:61:ca:b7:48:74:3c: 05:45:07:1a:5b:47:78:0b:33:a7:6e:fb:8d:2f:ed:46:f3:f9: 27:96:24:50:54:06:71:cf:73:2f:73:86:4d:99:2a:35:a4:36: ae:ce:ee:9e:1b:e2:4a:1b:3b:f7:49:ae:cd:a0:f5:15:c1:f1: d9:1a:62:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdtq8eBkdmX5KhMCKxBje+RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh N2IwYmEwHhcNMjUwNjE0MDkwMTAzWhcNMjUwNjE1MDkwMTAzWjAzMTEwLwYDVQQD EyhiZmY0MmQxNWNlMzJmMzZmMTY4ODI2NTk2M2I4MTBiNzc1ZDk2MzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU+g4sk9PaUiWX23i8LTobJ/LB8h jmk4BA8lQx1HNEvyX550zGlp9HNgr8GIw7Lwwfwquo+DRumHNnjt5EXCn7osP9cg USFvCIguGal/wvs/HkbDMGGC4HYSSOsi/zYaK3i+h8NUnUQ9E3dDVB3RsBtb9zk6 jU4pouCpW5OSi6hbZR1q3TmasHJwmnw1HgYAEUcfZySSY2EvsEGuompDh/5OCVKG zJxfZad9yDJl5nfwWbOLgtg1MnIPFVkKVPCx4YATWa6AuFZ53DoZiSxWzKlgpiJq H/jaaZ5O0PdRaFrE+hQ7RTIw+mnom3qOL4LU6LbGeY2kW5suE4eMlxkUvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/0LRXOMvNvFogmWWO4ELd12WMeMB8GA1UdIwQY MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt ZGZiZmEzZmNmMDIxLzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPzGxhVrA 16v7nnPQn6lyT3uQcCsb4rzeFLiKyfzh4H/VTdJn/t3q5zLXLN+t84G/dijbBLZM 3NRfBEC7Sb7vvP2QJ/bitPiA/Xbk1j3xNZ6Msx0HGMrkRMP5p3ZBsdB4WThWrzzb H0KBjJckCRsnvbv8srWQTY4WEWeO+7dQwLUy2KcbUcrJPF9nrcI8lvsfh1Ug83DA RTZsyMfHbBeyimklg/5bI3cdEi8ysAANNe6uiHbkTkXFYztVu3p4MPIoYcq3SHQ8 BUUHGltHeAszp277jS/tRvP5J5YkUFQGcc9zL3OGTZkqNaQ2rs7unhviShs790mu zaD1FcHx2Rpigg== -----END CERTIFICATE-----Generated at Sat Jun 14 17:26:13 2025 by rpki-client