$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft File: vTZoYo8N950EfsoNmtz8C2aT4wk.mft (raw, json) Hash identifier: 5nY1A/5JiUyXWFW1+FULe+FMu1/UENcjlIEl6kvuWe4= Subject key identifier: DF:FB:42:D1:62:21:AF:DF:EB:6C:6B:BE:4B:01:37:3D:49:F0:5A:1D Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Certificate serial: 01976929D210E35464B816DF1BA2416646C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft Manifest number: 10F8 Signing time: Fri 13 Jun 2025 12:00:37 +0000 Manifest this update: Fri 13 Jun 2025 12:00:37 +0000 Manifest next update: Sat 14 Jun 2025 12:00:37 +0000 Files and hashes: 1: 1-AkEgtFYAeYpvfsAvZdlJuyuVF4.roa (hash: bj7r1qBjXXo6AEdGvTw884ILliGHjEYqfvi7PxgbBxU=) 2: 18s6iv28JzN23ACcxvidnV4O018.roa (hash: E520J/m/9e2VHqsrljvZsuWV/dovmSdu9Qn56B7khEk=) 3: 7HaXNFSYGxOw3R9L6I0z6V-mXb4.roa (hash: iLQ9KNTQ4u3M1tfa+YEpVxilam6XMDqybBUGCnTqiss=) 4: 8GAUp0koq7cLyKDBljD12_gS9fU.roa (hash: TLK0INhWOPZtOAAlZEJ0okbttAxXwilC0/Fin663h4o=) 5: 8ezldgsZjdYUFJex6k0Ut1HMEC4.roa (hash: bDkmxhsgqaahY46AsODPGEATa+7WHhbve+WtDMm08R4=) 6: AjIXviqVH3jjU8nx_L7OJg_U83s.roa (hash: 0CsKhyREb/pMQdzxyVg3OJeuEqLaSH7N9bz2OblFPhw=) 7: CZpuUzJEsKjUOKMTz3rPnaPFYr0.roa (hash: 829sU0orhueuSWygyiEyGmFZ/X99K3xCPmemYX73BGM=) 8: FL7xyPZcMQ2IcS_NYdOw64zSnhI.roa (hash: hTtsrLyKX+B71mb+xLolhfXCujGBZZVnGz4ugWVh69Q=) 9: b7dBieR_P9kmLnGcxW0fyaZjeow.roa (hash: 7CjlHKhuVQvksqqfXKK92KNHJPTf/pbKa2kMAV8YPNg=) 10: c-Wnlh-kFjP6q7EkrDX-duWttJc.roa (hash: 6Prgxqh9/nVNm4A4c9/ay2pcayT5Dd+P1lar2QOL0DQ=) 11: e_TrdC1EfOVSQQ49ZA0FeaTTzjk.roa (hash: jUrwE90O+dclJeJNaa2stLGSCRfUe/eu1j5NSomJE/4=) 12: hVFH86LVYnyePIbmaCqfpS5vJKM.roa (hash: Jp2Ho2sVrxwbPVnhT98cuAw+l3HPTfx4q1sSUogMvrs=) 13: iL4hRCpLyAzkS7iRbK0kB-K-W-4.roa (hash: ZPL3tMdQLbuvPkq9q+UlEUarVrYcyMhTXlq7N8fBMNw=) 14: kPQEqnQ2tyC7d6-aTILssWet_yM.roa (hash: 1lTdkFvpUx4+IWByR4mFr+hq9dYheTg8typs5YnbW5g=) 15: oo68fdLP_MI4Rwlcq0C2I-y_K9g.roa (hash: UGZ9aKbm2nLCSA0ehujHTDQj51oKQ6d9RZi7a5m0ANs=) 16: pVgxUhCc7dPqvhiu0OhGRnn06X4.roa (hash: H5Zdm7znexs+7FCW+NTfkFJPDw3F/Gamb5QXizhY9Tk=) 17: tBvdEHK96-8IqXDimpyAd6-FvfI.roa (hash: kV3wVJLyHXbFkaWXeqnUNYEgcOQg7ySmIasAR3i9gU0=) 18: vTZoYo8N950EfsoNmtz8C2aT4wk.crl (hash: qhmwCQEyxKMf6Jm1tzYb9kcjQMUsfYbofDHIdYqoBRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 12:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:69:29:d2:10:e3:54:64:b8:16:df:1b:a2:41:66:46:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Validity Not Before: Jun 13 12:00:37 2025 GMT Not After : Jun 14 12:00:37 2025 GMT Subject: CN=dffb42d16221afdfeb6c6bbe4b01373d49f05a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0f:b2:07:f1:5b:2b:c1:b2:00:a6:8a:fb:31: 72:ff:c6:0d:d9:0a:0c:e5:f2:ae:a6:50:ff:6c:7d: a6:f6:fc:2d:aa:ab:c3:ed:8c:55:03:0d:61:71:02: 49:66:ee:16:7e:64:2c:3a:24:ca:dd:23:b0:7a:d5: 4a:02:e8:d4:ff:9d:0f:d6:ca:33:0f:4e:d4:10:0c: 42:40:5f:14:54:da:c4:0b:6a:b5:8e:32:00:b3:6d: f1:aa:00:24:88:56:4e:41:7c:5c:f5:1f:2b:02:ab: b6:ce:c1:c6:4b:f0:60:ca:2b:f6:dd:9b:8d:18:6c: e6:3e:ec:28:73:82:7d:91:50:26:a9:45:dd:eb:1a: 3b:20:39:3a:2b:0c:64:11:2f:51:82:69:2e:fd:43: 6c:ea:f4:47:1e:f7:99:65:83:d6:9d:1f:1e:a5:62: f8:ff:63:33:1d:8d:79:f3:26:7a:ce:be:24:52:2d: 7a:7b:d1:15:71:cc:f8:a2:e8:d3:dc:20:36:38:8a: 77:79:01:33:96:e7:56:7b:92:9e:e9:ea:09:b9:c8: 3d:ce:ef:1b:81:6f:1d:58:9b:46:3b:94:c1:2e:e9: 87:85:ee:c2:02:74:13:e5:d6:0d:f7:7e:22:c9:b2: 5d:e3:d4:69:a8:98:4e:ec:07:37:f7:94:a1:6c:04: 27:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:FB:42:D1:62:21:AF:DF:EB:6C:6B:BE:4B:01:37:3D:49:F0:5A:1D X509v3 Authority Key Identifier: keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:92:21:2e:ea:a6:f6:1c:9e:9d:f6:9b:83:fd:54:05:3c:25: af:f7:ee:d2:55:92:08:18:56:26:83:8a:b3:fe:84:f5:ec:86: 5a:d3:79:75:00:f3:4d:26:00:38:5d:4e:4f:d3:a4:c6:86:d9: ef:da:eb:0b:cc:cf:16:1c:2c:ea:77:fa:46:61:61:52:89:fb: f2:d5:56:bc:d6:94:4a:25:6a:e8:99:09:bb:76:f0:b7:5d:3d: 7a:af:bd:a0:b8:fd:68:04:9c:b6:1f:2e:01:07:4c:06:c8:5b: 1d:0b:e2:dd:06:a0:4a:e3:30:97:be:49:37:2f:2a:a7:20:46: 87:c1:de:84:0e:0a:b2:25:f8:55:2b:8b:70:1a:b9:3c:91:48: b1:97:be:cb:95:d5:8b:48:91:83:4f:2b:3b:4c:be:9a:21:08: b4:61:dc:41:00:49:3f:e5:73:ef:8b:ff:c6:6f:f6:94:38:35: 91:5f:2a:39:25:34:50:a2:41:06:26:5d:fd:d2:85:eb:a3:e3: 76:ce:16:6a:f8:49:21:c1:2d:3f:e5:2a:f4:8c:69:d0:28:29: c8:d5:30:33:fd:b4:ca:62:83:21:5c:5b:18:7f:81:51:bd:f2: 82:87:d6:01:f6:31:8a:14:c5:f7:4f:71:2d:0a:56:ce:dd:cc: c8:30:78:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdpKdIQ41RkuBbfG6JBZkbBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5 M2UzMDkwHhcNMjUwNjEzMTIwMDM3WhcNMjUwNjE0MTIwMDM3WjAzMTEwLwYDVQQD EyhkZmZiNDJkMTYyMjFhZmRmZWI2YzZiYmU0YjAxMzczZDQ5ZjA1YTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg+yB/FbK8GyAKaK+zFy/8YN2QoM 5fKuplD/bH2m9vwtqqvD7YxVAw1hcQJJZu4WfmQsOiTK3SOwetVKAujU/50P1soz D07UEAxCQF8UVNrEC2q1jjIAs23xqgAkiFZOQXxc9R8rAqu2zsHGS/Bgyiv23ZuN GGzmPuwoc4J9kVAmqUXd6xo7IDk6KwxkES9Rgmku/UNs6vRHHveZZYPWnR8epWL4 /2MzHY158yZ6zr4kUi16e9EVccz4oujT3CA2OIp3eQEzludWe5Ke6eoJucg9zu8b gW8dWJtGO5TBLumHhe7CAnQT5dYN934iybJd49RpqJhO7Ac395ShbAQnSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/7QtFiIa/f62xrvksBNz1J8FodMB8GA1UdIwQY MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt ZTZiZjMxNmM5NGExLzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJIhLuqm 9hyenfabg/1UBTwlr/fu0lWSCBhWJoOKs/6E9eyGWtN5dQDzTSYAOF1OT9OkxobZ 79rrC8zPFhws6nf6RmFhUon78tVWvNaUSiVq6JkJu3bwt109eq+9oLj9aAScth8u AQdMBshbHQvi3QagSuMwl75JNy8qpyBGh8HehA4KsiX4VSuLcBq5PJFIsZe+y5XV i0iRg08rO0y+miEItGHcQQBJP+Vz74v/xm/2lDg1kV8qOSU0UKJBBiZd/dKF66Pj ds4WavhJIcEtP+Uq9Ixp0CgpyNUwM/20ymKDIVxbGH+BUb3ygofWAfYxihTF909x LQpWzt3MyDB4+Q== -----END CERTIFICATE-----Generated at Fri Jun 13 18:56:20 2025 by rpki-client