$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft File: xqJJoOrNiry-oNgu9xAW04bo75Q.mft (raw, json) Hash identifier: fWwsIsOlmY/lr6EOMQIm+umbWXTmsqZ28mGwE3z8Fy0= Subject key identifier: 82:CA:40:29:ED:AC:3D:AA:E6:7F:6E:7A:D5:A4:77:15:17:E1:BF:19 Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 0197857C92FB4FCE7A5B0FEB02A45A42E6DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft Manifest number: 15B3 Signing time: Thu 19 Jun 2025 00:00:23 +0000 Manifest this update: Thu 19 Jun 2025 00:00:23 +0000 Manifest next update: Fri 20 Jun 2025 00:00:23 +0000 Files and hashes: 1: 5oGMURS5rgp_1dlgKvuvCDO5G0w.roa (hash: wMYp5LaGPuSag8fX06xhHkbgdVirB9cJhM+3GGw2/jg=) 2: BQvusTzEEHLSJHJlumFKa1oNwrQ.roa (hash: lEe5F40vmhWKpQEVA2DofBBwwqWZxHOLJtp+bmSetd0=) 3: CYC52qHhJ6RUPTEobJ8VoMfHNRI.roa (hash: ZZP9aFpLns5QQxSZHDNfLoao3AVc9G009OXX8vXR5gc=) 4: CeX7E3fZXVsdPANui7LEojY4jyY.roa (hash: knL0+PqLOBqomAg/sncBbQWcoQB5Mmxq54ysIaZdoTY=) 5: I0AFm-vc4rf4QsaVWhj5NHyb11w.roa (hash: BGbcWwHIrmn5ZBCCyfBSP0+HfpIO8Xl9K0FKbiZmvI8=) 6: LLhwUpHqz22GnC5TEmimdFlrtqk.roa (hash: fvLKEFRwIYrK/dNIazKMMzJzXGAsDgMXq4phPeziOkU=) 7: MqhH7LZrBnXXGBOARTaALjBOu0k.roa (hash: eb5e3IYtX1JLVkPpTH90MSfTGSJlQRW4w6AkJQsqHDE=) 8: NznSTmaNmRlH_azHj2PejtUv32Y.roa (hash: vqJasZBwevHspmBMCQpj1DtVpKmfJrLVqU+PRrcMqfM=) 9: OfFCEKE7y2G6xu45x0onbMCbDaw.roa (hash: e/8sENTA8NJv+5P6ivLRFth819D0j4syG1Q5lKqx3Rw=) 10: Z2dSkQ6PASRngm_2ArTJe9mzGwQ.roa (hash: 2dzsM88NRUyjmGplJFA3j8lI1oArTGFKZ1kC35f7j6Y=) 11: asGcSQns56fV1692zV3Ch_oG4Kg.roa (hash: 5dHMVFt5oYiYTS73IJtgkzio0zBGi60UjdzaO/dGRQI=) 12: c-YB5zSc0c1xWdOauA62tbaTi7U.roa (hash: OX0Hi6BRKnvgV0Q4TqYGzIGBa5g+sChYvpN4EKEAkSc=) 13: qKFWe9Dc9VXd-E9itFNBr6DQEUs.roa (hash: y5dptfGZPYO1h43chWxX74P05NldZYlQNc516YN4G9M=) 14: r1CV8D1_y4TguGkYqv-ggeXr4c0.roa (hash: jDk4rmD0Q4dKvEGvkXrnmVvHn/m5l4R7RawW2v9/HZc=) 15: wj33JoQLWARvqka0yZK45_1318I.roa (hash: TfGyszRr6br7JzJj6n9Z5YtEXoLaFYdaPq8IN1vIPao=) 16: xqJJoOrNiry-oNgu9xAW04bo75Q.crl (hash: fK+xhzK/7QoHTr3+oNE96L63vOTFiJSdRgtoNGVvJyQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 19 Jun 2025 23:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:85:7c:92:fb:4f:ce:7a:5b:0f:eb:02:a4:5a:42:e6:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Jun 19 00:00:23 2025 GMT Not After : Jun 20 00:00:23 2025 GMT Subject: CN=82ca4029edac3daae67f6e7ad5a4771517e1bf19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ff:3d:73:ac:4b:ad:be:fa:27:74:a3:7e:20: 8f:93:00:2e:fc:c3:50:ff:08:7f:b0:8f:c9:64:24: ff:51:c7:25:0d:55:c4:84:6d:2a:d5:22:cc:d6:89: 3a:8c:3e:40:a0:fb:76:1e:6f:e3:12:4f:62:ab:7f: 79:d1:bf:da:1b:0c:3a:93:27:8f:b1:f1:85:87:55: 7a:2e:fb:2e:a1:12:26:3a:e2:41:97:15:62:4c:e5: bc:61:8a:1e:76:d8:89:17:30:51:b0:4c:93:38:21: 46:a4:f9:f7:0d:ac:4d:b0:9d:ee:6f:1d:cc:7e:eb: 81:35:2a:a3:f7:df:76:0d:dc:8a:3e:c9:41:f1:49: a7:db:17:f7:45:c7:b5:d8:58:51:61:96:25:92:0a: f5:72:da:3b:d5:9f:15:73:b3:c5:a4:c5:7e:ac:85: 30:60:2b:26:54:b6:73:3e:99:53:d6:30:b8:7e:5c: bf:a8:8d:7c:b5:88:1a:b6:4e:9e:6b:0e:99:83:5f: 8a:fd:2a:63:26:ad:0d:43:77:d7:3a:e2:25:b9:87: a5:25:12:5f:ae:b8:8f:60:f3:30:cf:00:7d:15:6a: 37:e6:7c:c1:75:16:5a:ef:db:22:ff:9e:00:2d:7e: 22:75:a1:58:ee:86:11:6a:e8:d9:03:ea:dd:3c:4c: 75:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CA:40:29:ED:AC:3D:AA:E6:7F:6E:7A:D5:A4:77:15:17:E1:BF:19 X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:74:bb:2f:75:63:a1:b8:6f:fb:df:36:16:80:54:76:89:ec: f3:89:b4:5e:88:b0:07:17:fe:33:ad:0f:1b:ad:d3:fd:42:84: 25:e3:5a:13:8d:4f:30:92:82:d4:c8:c9:bb:c1:ce:d5:94:df: 39:dd:3d:a9:b6:42:eb:c9:46:2c:c6:bf:6c:90:27:a0:d7:dd: 7e:5e:c1:7a:39:a1:58:5e:d9:07:61:72:7c:97:2d:51:65:8f: 86:26:d7:fd:ed:6a:5e:7a:c1:a5:54:a9:17:20:24:3b:90:6a: bb:dd:91:34:79:e0:fa:4f:04:aa:db:73:5f:77:d4:83:c1:a2: f5:5d:15:1f:94:64:5c:16:96:42:ab:85:a5:9f:39:3c:4c:cc: e1:c8:99:c0:38:91:c6:c0:4a:09:52:c0:2a:cc:d7:82:3e:c1: c2:9d:21:a5:39:7d:78:41:ff:30:a7:28:51:b8:23:6e:c1:64: cb:5c:18:18:7c:97:c3:3d:39:3b:a5:cf:62:93:ca:59:d1:68: 41:47:52:4e:14:36:7a:ad:64:9d:56:bd:34:4b:81:56:39:cc: 64:d0:96:8a:49:59:a8:03:e3:86:2c:4b:22:a5:f1:19:80:fc: f9:7b:ae:ba:41:01:26:73:0d:ff:cd:7e:6b:b7:0e:91:53:9a: c4:4d:62:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZeFfJL7T856Ww/rAqRaQubfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjUwNjE5MDAwMDIzWhcNMjUwNjIwMDAwMDIzWjAzMTEwLwYDVQQD Eyg4MmNhNDAyOWVkYWMzZGFhZTY3ZjZlN2FkNWE0NzcxNTE3ZTFiZjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf89c6xLrb76J3SjfiCPkwAu/MNQ /wh/sI/JZCT/UcclDVXEhG0q1SLM1ok6jD5AoPt2Hm/jEk9iq3950b/aGww6kyeP sfGFh1V6LvsuoRImOuJBlxViTOW8YYoedtiJFzBRsEyTOCFGpPn3DaxNsJ3ubx3M fuuBNSqj9992DdyKPslB8Umn2xf3Rce12FhRYZYlkgr1cto71Z8Vc7PFpMV+rIUw YCsmVLZzPplT1jC4fly/qI18tYgatk6eaw6Zg1+K/SpjJq0NQ3fXOuIluYelJRJf rriPYPMwzwB9FWo35nzBdRZa79si/54ALX4idaFY7oYRaujZA+rdPEx11QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILKQCntrD2q5n9uetWkdxUX4b8ZMB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASHS7L3Vj obhv+982FoBUdons84m0XoiwBxf+M60PG63T/UKEJeNaE41PMJKC1MjJu8HO1ZTf Od09qbZC68lGLMa/bJAnoNfdfl7BejmhWF7ZB2FyfJctUWWPhibX/e1qXnrBpVSp FyAkO5Bqu92RNHng+k8EqttzX3fUg8Gi9V0VH5RkXBaWQquFpZ85PEzM4ciZwDiR xsBKCVLAKszXgj7Bwp0hpTl9eEH/MKcoUbgjbsFky1wYGHyXwz05O6XPYpPKWdFo QUdSThQ2eq1knVa9NEuBVjnMZNCWiklZqAPjhixLIqXxGYD8+XuuukEBJnMN/81+ a7cOkVOaxE1ing== -----END CERTIFICATE-----Generated at Thu Jun 19 04:38:02 2025 by rpki-client