$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft File: V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft (raw, json) Hash identifier: hxQW2tgluwyg6R5diacvf/zQ15yypSosK8K5+hOeYn4= Subject key identifier: 05:B4:61:48:ED:36:58:2C:6B:0E:FF:6F:31:34:31:B3:81:07:3D:B2 Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47 Certificate serial: 019779786A8C1D0B76BE44BA50985E9DCA64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft Manifest number: 1187 Signing time: Mon 16 Jun 2025 16:00:23 +0000 Manifest this update: Mon 16 Jun 2025 16:00:23 +0000 Manifest next update: Tue 17 Jun 2025 16:00:23 +0000 Files and hashes: 1: 1-2ze8RFqsfXiBAT11ime5104BjY.roa (hash: 1G/91kNwXr6Euhuawe1vb8XkKyyCivckcaN+MUB7G0c=) 2: 2Kp_9YpfYIQIxyL5CznhHnkIxfU.roa (hash: LYK8gdoVuDcWT2M8puwmkXBr6TS/IOAg3OaPmCBsVwI=) 3: 5lDpUUbHXzya0fMquFYbFulqqVs.roa (hash: f1hht89a/wconxQu5KNK8QHufJfhYi0HFOvBnekJIq0=) 4: FHAcQ1hSwnBkPa_1eYwrasvDBAI.roa (hash: UEqpRdrSw3UNWb3wNwi2VW+eLR/IeGW0ScqzLsmeYpU=) 5: FeD_-2NSvz_oTh1LHrP44NqzWIo.roa (hash: M0rfgf8nLa/Z7WmSdsaO8N+Wk6yxPhPTCcsAwupLmJk=) 6: G0XtWDoXmf3g4WPOe4oJBWwD53c.roa (hash: ah5ed8JgyczAK0ktQp/XfJNbJde2PQoHxbYeBWCDQq0=) 7: HlClfikOJrfktj0svDKphR0_6Ic.roa (hash: g1qw7C3eBB8cA1eir2ZaMGGhWvD9jq2Y2uAjecDMYHM=) 8: JHZeQoZfAbaLUlrZmCxtZ1ApkWo.roa (hash: +VPqWsWngmfKHIzBC3GFe6m9tn9RXpVp3jH9A+hxoC0=) 9: LXaOacmSywqNlfh5CO5J1YXXGmI.roa (hash: jtQHK2Bwk3+TO9AZet3mFNI8IuZDJg2fZaIIhEkYoQM=) 10: OXCR5eZAjAKFe_5_WqZvsLDsIGw.roa (hash: +dX5GIlPaHoX8hOklKsClO3JcTsDNTNWJiq3yrlcruo=) 11: SpYcE3S7smMV4xZjzIbw_3YgWQ8.roa (hash: r3TEKYZlZtxmxAKHk3aPSvesmIPuqj82Nxme4CHttjE=) 12: V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl (hash: o9z12Oh5QN5PXEVdbdMwm2OjE7ydFce3wBf7xLgG6Sc=) 13: Xdc1GXsEPiQ6GE6eHjFDA0ZgS3w.roa (hash: OE+tVEQ0oQcFP5VxqAmEpxiSoF7RE792pp1YSKmB2O0=) 14: ctU4FIR-r7525NdQcQhV07S1InU.roa (hash: AU7Mc04mkVMs25EZU4CCsCrYPVp1VtWzfOi9wTwg8to=) 15: ftQ60SsjWVubYA-VxNEHamWbBek.roa (hash: jmvMdMMJCzUDXr3r5E5qmHQUJ9DFMdQTkl3lYF+bB84=) 16: mgE4NAvl5a_fjijODt9d3QXoFWo.roa (hash: U49USPjZ5W98U1upDeeRKhUCJZwO5RTn5SJ+Rro+7ys=) 17: s6UOiaPwRDDgS4GdUQJjrNxDCkA.roa (hash: MfReyFTsbPeeVwKX4SeLCT5vdQejZ0/27SaFtWWlLKo=) 18: valOsPAluNa3RG5X659q6dsU_FA.roa (hash: fkBC+Rvf3Gv+oy6BC36LsnU6WeruMquhW06fi/seA5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 14:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:79:78:6a:8c:1d:0b:76:be:44:ba:50:98:5e:9d:ca:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47 Validity Not Before: Jun 16 16:00:23 2025 GMT Not After : Jun 17 16:00:23 2025 GMT Subject: CN=05b46148ed36582c6b0eff6f313431b381073db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:95:c9:73:df:4a:27:11:39:35:8e:8b:6c:cb: 4b:60:a9:d9:ba:7f:ff:3b:d4:3b:91:09:0b:82:b0: 87:84:45:ce:3b:d9:09:19:6c:b1:89:7d:8a:b2:58: ac:4a:90:e3:d1:6a:92:f7:0f:ea:bd:cc:18:7a:1f: 94:5b:72:0b:4c:84:28:35:7b:6a:65:ea:0b:39:60: ef:c5:d7:ee:5c:a2:c3:6d:e4:a2:24:d2:ec:0f:3a: c6:03:74:85:c4:6a:96:1b:61:56:9c:da:81:d8:b8: f1:cc:d3:40:44:36:1c:76:61:ff:b5:e2:01:d7:13: 37:20:c8:89:5a:af:29:43:c6:43:2a:37:db:e0:c5: 6a:48:f7:7e:73:9c:a0:54:ef:49:d5:a7:4a:84:fa: e7:e0:41:09:a9:9e:be:6f:4f:43:c2:88:25:c7:3a: 87:68:ce:c3:82:c0:33:b2:2a:ac:de:a1:c2:7c:4b: a7:57:af:7a:8c:9d:4e:0e:28:18:6f:ee:5f:d1:92: 0d:48:08:46:5e:8c:4f:05:2b:6f:6a:42:5e:d7:bf: d4:8c:e3:57:4b:4a:95:2a:ea:11:73:a9:1f:ef:7a: c9:30:76:d1:d9:0d:2d:91:ca:54:62:43:66:0e:05: 54:b6:8f:bb:9e:c7:2e:ef:e9:dd:49:e6:3d:b2:4f: 5d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B4:61:48:ED:36:58:2C:6B:0E:FF:6F:31:34:31:B3:81:07:3D:B2 X509v3 Authority Key Identifier: keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:2a:8e:66:28:20:d1:fc:31:4e:86:aa:04:ab:c5:16:87:4d: 1e:a7:bd:83:26:a7:11:34:2e:61:fe:58:76:22:55:8c:99:98: ce:34:1f:a2:e7:c1:64:8b:02:6a:39:47:25:e0:38:45:0a:78: 26:e7:0c:b4:dd:05:94:8d:9b:07:17:13:db:33:8f:1b:c7:89: d2:4b:b7:f4:48:d1:5d:df:c7:e2:2d:49:a6:cc:74:b5:f0:4d: 21:c4:00:c5:3e:9f:79:68:f5:a9:cd:56:98:e2:d2:b4:6c:9b: 69:b6:b2:f8:dd:b8:e7:04:46:4e:60:a7:12:45:b8:53:6b:50: 6f:49:fb:c2:f8:5f:34:7e:d6:1b:12:9a:45:5d:0b:cb:26:03: 84:2e:c0:b2:23:b1:8f:c7:5b:ce:3d:6d:c6:13:96:a0:d2:56: 17:e2:eb:76:f9:6e:84:77:b4:3d:9a:0c:dc:ed:d8:25:ad:80: b0:4d:91:4e:a9:13:fe:28:db:30:d5:4c:3a:77:24:84:51:94: 8d:cf:af:47:bd:73:d4:32:92:28:e3:39:86:15:9e:7d:d5:85: 45:35:c4:de:3a:59:db:a6:15:9f:dc:2e:75:b6:09:79:00:71: c2:90:be:80:f6:0a:27:e2:62:23:99:5e:43:04:cf:84:a4:c3: 9c:c7:b1:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd5eGqMHQt2vkS6UJhencpkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1 MzhkNDcwHhcNMjUwNjE2MTYwMDIzWhcNMjUwNjE3MTYwMDIzWjAzMTEwLwYDVQQD EygwNWI0NjE0OGVkMzY1ODJjNmIwZWZmNmYzMTM0MzFiMzgxMDczZGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspXJc99KJxE5NY6LbMtLYKnZun// O9Q7kQkLgrCHhEXOO9kJGWyxiX2KslisSpDj0WqS9w/qvcwYeh+UW3ILTIQoNXtq ZeoLOWDvxdfuXKLDbeSiJNLsDzrGA3SFxGqWG2FWnNqB2LjxzNNARDYcdmH/teIB 1xM3IMiJWq8pQ8ZDKjfb4MVqSPd+c5ygVO9J1adKhPrn4EEJqZ6+b09DwoglxzqH aM7DgsAzsiqs3qHCfEunV696jJ1ODigYb+5f0ZINSAhGXoxPBStvakJe17/UjONX S0qVKuoRc6kf73rJMHbR2Q0tkcpUYkNmDgVUto+7nscu7+ndSeY9sk9dzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAW0YUjtNlgsaw7/bzE0MbOBBz2yMB8GA1UdIwQY MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It MWVkMTA5NTRiZDk2LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2 LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATiqOZigg 0fwxToaqBKvFFodNHqe9gyanETQuYf5YdiJVjJmYzjQfoufBZIsCajlHJeA4RQp4 JucMtN0FlI2bBxcT2zOPG8eJ0ku39EjRXd/H4i1Jpsx0tfBNIcQAxT6feWj1qc1W mOLStGybabay+N245wRGTmCnEkW4U2tQb0n7wvhfNH7WGxKaRV0LyyYDhC7AsiOx j8dbzj1txhOWoNJWF+LrdvluhHe0PZoM3O3YJa2AsE2RTqkT/ijbMNVMOnckhFGU jc+vR71z1DKSKOM5hhWefdWFRTXE3jpZ26YVn9wudbYJeQBxwpC+gPYKJ+JiI5le QwTPhKTDnMexyQ== -----END CERTIFICATE-----Generated at Mon Jun 16 21:02:43 2025 by rpki-client