$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft File: mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft (raw, json) Hash identifier: TAWuOor8TphoPoQdQ1wb+kCx+g7tBWJ1iLqbOtRwPPQ= Subject key identifier: 3A:F3:9C:0D:C9:B8:14:B4:21:1F:6C:A9:62:32:1E:7E:8D:E6:D9:8B Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e Certificate serial: 01976BF439A4C3EF9148D1CF5A350AE17BA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft Manifest number: 15AF Signing time: Sat 14 Jun 2025 01:00:56 +0000 Manifest this update: Sat 14 Jun 2025 01:00:56 +0000 Manifest next update: Sun 15 Jun 2025 01:00:56 +0000 Files and hashes: 1: 7hlWKm8vTIF0LH1H2oS6Admh1TI.roa (hash: JGgMMA+OZIrWq67kkKcLVk/aNndkz3SnG1R5RYOVvj8=) 2: 8Okcs_WzeZSlRzql6-e5V5V7syA.roa (hash: Bgf74cz9Nwo/ctlxM9vVhY3z4DibfYQP6Uszu31EXc8=) 3: AJpw_2i3EoQNYD9kunMPYOdByi8.roa (hash: 2y+udfjFmNVer5C4pJzKndxIM53KHs0ELdljGNxXclM=) 4: BW-ZjApW-eGpyxFEOc0qqC_7S5k.roa (hash: RqpMiCDIPeUSPd1EPbgHwl0XZwlcr7/eFSWcSxO7pPY=) 5: FjCA5Ak9pc8iYQAo2kd8vxWMg2c.roa (hash: LWHCt8fi0ffLNOHRJ69hCW6DNWkN+nY4S8kMpRaQ7ss=) 6: Ik8Kqt-zKfrsdQjyrAjHXX-mlLc.roa (hash: Zg9C0+0W8n0QIjR6RRPkp/OJIpBk8iu2+syGMIoxQyg=) 7: P82-6fcmXy1vqdLrwWWqytTl0TM.roa (hash: z01aDruR3yMRSRzpiGY2CGLWYQwuEAMQJV+YU0LBGGA=) 8: RYdEtsOojE3SXyShhqAjMIQl9xQ.roa (hash: bxAZYk1bj8j4gGSsg9+CUkCHFq1GRl7baVopFxolE0s=) 9: WBeAt2UOvPgAdfpllYF8DBrXsx8.roa (hash: IGhLKO/rQTI4tOBHJDgWqI73xTyqxuZsgF0ztyC/dOc=) 10: bbmenZqkY_bNQyceoK-fLvwWxdc.roa (hash: 5/uuA7PsJ4CyNOajTBR0J1Bkylsmq9V39AJtX9hFgFU=) 11: dMlBq16YcIM7-JR7sVrQGjUo5Ts.roa (hash: i7NU7NT4PhY/w3tg6T+Z3qdRHBm2oFSaLm/74+Urx2g=) 12: f4e7IUwG3JkPasx3oPPOpKnw014.roa (hash: oT75cSQjF7ggxHOJOkz6Sxjs0hfilCF0H6NE1nJtUfo=) 13: mNguxrQSssFTgOvDx-TtVJcngJ0.roa (hash: p4yScE1NaP9LVRZLGH/RikX/bIEDOl76JK/45ns5C9Q=) 14: mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl (hash: OkNnuB7O/i8ZQgZkLoWEhrq1Zu+205nhHVWerFIuxCs=) 15: u_mqTybwgy-hqVDwwCNi1Bf-8tI.roa (hash: JZzfV1nFUUQsICoBUJ9//kJmxjSvH3d3D7ybB8QQr/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6b:f4:39:a4:c3:ef:91:48:d1:cf:5a:35:0a:e1:7b:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e Validity Not Before: Jun 14 01:00:56 2025 GMT Not After : Jun 15 01:00:56 2025 GMT Subject: CN=3af39c0dc9b814b4211f6ca962321e7e8de6d98b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ab:60:e6:ba:f8:43:37:af:bb:b6:c1:03:9f: 97:da:db:ee:c6:ea:58:5f:d1:22:06:1e:33:f7:00: 36:63:8a:25:30:4f:d5:97:cd:61:4b:c4:53:e5:3a: 0c:03:5d:aa:f3:65:ab:57:e4:db:ed:14:4e:c1:70: 19:a6:7e:62:1c:e1:aa:c7:57:7e:18:70:b7:98:fa: da:bc:e0:4d:8c:33:25:dd:7c:41:4c:b3:f5:47:15: 4f:05:a3:50:df:b0:a7:00:49:c0:0a:f3:67:79:44: 31:7b:98:01:2b:ed:1c:f7:2e:c6:35:1c:da:13:9c: 9b:33:cf:9d:d3:0d:f7:e6:42:73:00:71:76:b6:b5: b3:dc:ab:83:42:53:49:9b:f1:6d:6b:5c:e9:f1:54: 4b:a3:0a:7c:c5:7e:9a:31:74:bf:73:92:cd:1e:6d: 15:30:3b:80:e8:9f:16:2b:0e:c2:14:55:84:ad:0a: d7:3b:be:34:e9:20:9f:a5:84:d1:8a:5a:52:29:54: 08:94:7d:91:be:44:ec:91:ba:ab:3e:0d:6a:5d:89: 88:ee:89:ef:40:52:7b:18:dc:4c:71:cd:16:00:ce: 82:22:59:ac:d9:bd:81:d7:6b:48:6e:be:7b:8a:3a: ad:37:9d:fc:e5:c7:c7:53:46:e1:b5:1f:5c:b2:a4: 6d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F3:9C:0D:C9:B8:14:B4:21:1F:6C:A9:62:32:1E:7E:8D:E6:D9:8B X509v3 Authority Key Identifier: keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:dc:37:99:46:cf:c9:26:bd:e2:72:fd:59:3f:23:58:9c:8e: 55:a8:7d:4d:3c:d3:73:62:6b:8b:b0:21:d4:3c:4d:64:0c:60: d5:1e:ec:6e:ec:f1:a5:9c:67:30:42:b4:c0:43:39:61:2d:c8: 96:06:a6:c4:5a:8f:05:c7:f3:be:ee:f5:4d:3b:80:6d:ce:34: 8f:f7:0a:97:0a:5c:ab:07:9c:e2:43:bb:37:74:cc:10:90:b5: 8e:c4:e1:fd:81:22:4c:a4:aa:22:ba:29:ab:5e:7f:a9:f0:e1: 80:50:1c:89:96:eb:45:6b:44:fb:49:b5:04:fa:98:6a:3d:29: e1:b5:4c:a1:43:8d:1e:da:42:06:4d:84:88:3f:79:1d:16:39: 45:c5:9a:99:37:ad:0c:9b:4b:93:ca:ae:d3:f3:c2:14:cb:e2: 34:c0:c3:e3:60:e0:6b:c1:bb:a5:06:ac:b0:30:e7:3d:05:7a: 2d:6a:1e:8d:bc:9f:5e:29:e7:76:71:28:4a:b5:ad:c7:3f:53: b0:80:74:3a:47:fa:8e:03:03:e7:05:a5:a8:05:2a:7a:01:b3: 2b:32:ec:5d:1d:11:0d:0f:64:a9:89:89:e9:e2:26:86:b2:56: 32:c3:e8:85:e7:12:90:e6:2d:2d:28:8b:31:b3:8d:c5:f7:49: cb:bd:c7:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdr9Dmkw++RSNHPWjUK4XujMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2U1NjlhMTRjMmRiMzc3MmYyMzE4N2NlNjhlNjU0MWVj MDA0OGUwHhcNMjUwNjE0MDEwMDU2WhcNMjUwNjE1MDEwMDU2WjAzMTEwLwYDVQQD EygzYWYzOWMwZGM5YjgxNGI0MjExZjZjYTk2MjMyMWU3ZThkZTZkOThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtatg5rr4Qzevu7bBA5+X2tvuxupY X9EiBh4z9wA2Y4olME/Vl81hS8RT5ToMA12q82WrV+Tb7RROwXAZpn5iHOGqx1d+ GHC3mPravOBNjDMl3XxBTLP1RxVPBaNQ37CnAEnACvNneUQxe5gBK+0c9y7GNRza E5ybM8+d0w335kJzAHF2trWz3KuDQlNJm/Fta1zp8VRLowp8xX6aMXS/c5LNHm0V MDuA6J8WKw7CFFWErQrXO7406SCfpYTRilpSKVQIlH2RvkTskbqrPg1qXYmI7onv QFJ7GNxMcc0WAM6CIlms2b2B12tIbr57ijqtN5385cfHU0bhtR9csqRtcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrznA3JuBS0IR9sqWIyHn6N5tmLMB8GA1UdIwQY MBaAFJnOVpoUwts3cvIxh85o5lQewASOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQt MTA5NTU0NGM2YzUwLzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQtMTA5NTU0NGM2YzUw LzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAndw3mUbP ySa94nL9WT8jWJyOVah9TTzTc2Jri7Ah1DxNZAxg1R7sbuzxpZxnMEK0wEM5YS3I lgamxFqPBcfzvu71TTuAbc40j/cKlwpcqwec4kO7N3TMEJC1jsTh/YEiTKSqIrop q15/qfDhgFAciZbrRWtE+0m1BPqYaj0p4bVMoUONHtpCBk2EiD95HRY5RcWamTet DJtLk8qu0/PCFMviNMDD42Dga8G7pQassDDnPQV6LWoejbyfXinndnEoSrWtxz9T sIB0Okf6jgMD5wWlqAUqegGzKzLsXR0RDQ9kqYmJ6eImhrJWMsPohecSkOYtLSiL MbONxfdJy73HCw== -----END CERTIFICATE-----Generated at Sat Jun 14 09:14:49 2025 by rpki-client