$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft File: kiIItHtqhk2dH_M-BqqB0TgZp04.mft (raw, json) Hash identifier: F+iFGhcZouxR3yR2TGcAqJgxQfCH8u+t4BPQ33JHTLA= Subject key identifier: 63:D6:31:B2:1B:1F:57:45:56:DF:71:25:24:E7:5D:91:8E:42:BF:59 Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Certificate serial: 01976BF43B3EB3CBABB0163F21E6E0545E03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft Manifest number: 15D4 Signing time: Sat 14 Jun 2025 01:00:57 +0000 Manifest this update: Sat 14 Jun 2025 01:00:57 +0000 Manifest next update: Sun 15 Jun 2025 01:00:57 +0000 Files and hashes: 1: 1-rtI9dIBDPGpB7XLgp5LO6PPhNw.roa (hash: ZOyoK37XAa4AMrftPMDpS57217i8QyMPPSqOrLIuDh0=) 2: 1MqnWOr2XX863k_xrrBNGhpSTM8.roa (hash: ZAHJz2QsnnKlOkhGF4MOgyBVqnyxAgqsRswDwRAbn1Q=) 3: Af6rgn7gOSO6b9yJTE82-PCW8cY.roa (hash: yvanfAEMgiAgFfICebeCl0yyBYWNTVGEo6Cci4GOC2Q=) 4: ETJiLj_FPEXG5No5WrAoxGg_y_w.roa (hash: 662t7NLUufLVnPvlW5VowqyxEXMWNP4WIugo2zvrIGE=) 5: QX1PzB0slLNh42gV_9Uq9W7-NNU.roa (hash: 42Me4JYy4dGGMwi/uXUY8iDNdYDcztDyEjfKcP1cPGo=) 6: XPCmvArgHR13v_k02Z1LW1lWJx8.roa (hash: 9yrs8EgUGCgumASichQb2a43gXVQMGz8ZJNkpOkb3cg=) 7: XWYIJ6UuSY9_AQiT-hJINBObDQE.roa (hash: PdxLhxNEU7vSAkCuLaQWVId/t5OMWmj8bekrOqUDrSs=) 8: cOLPd5Lu_3ww7o-cdhWB7-TfdNY.roa (hash: S/36KJdTMQ8aIP0tPHIBx2zWJTQd/RRNG/oJA1iTyvo=) 9: iCgmGpyhGXjIvVkyeLmT7N8_y-4.roa (hash: jOahkOswhpSU7ry2oaBtzcTaxYOf5EimbWn3HXDfD9I=) 10: j-60Smkd34pUp65Reim9QN1pXBY.roa (hash: M2tsmNC79ATfwuHh7j2unUzS2isZxvxmhlA+F7YtpNY=) 11: jT8TtCFNTlKwPMmqlrycg4pd3Ks.roa (hash: Z/6XZMJC3dE7VsH6nt9a6dKmCPvrRaks+OkbIUHxD+w=) 12: kiIItHtqhk2dH_M-BqqB0TgZp04.crl (hash: 0DwZv8EAhYkwPezF4fY+0PwW7ee9GaDduhNCRY0ZHXc=) 13: knSytMRDBBEnCJmSSPDhHWtHg0c.roa (hash: xgKSyUyWK6rR5NEa7nVIywiPdyu/cPSGzuk49MX8f0A=) 14: vBAure0FxWxWdTfj2W3O6_7De24.roa (hash: yikPG1Koq3q/WuhD/GCuT4mpPwhtQgx1jshmNW1jKHY=) 15: yyPUAj_dCWAktPW0jmBjCiRvIJg.roa (hash: H8oCA9x6vnmIvl4HatB3uvnypYSjgIN9/CrfMgatutI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6b:f4:3b:3e:b3:cb:ab:b0:16:3f:21:e6:e0:54:5e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Validity Not Before: Jun 14 01:00:57 2025 GMT Not After : Jun 15 01:00:57 2025 GMT Subject: CN=63d631b21b1f574556df712524e75d918e42bf59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4e:a4:2c:35:ef:2a:40:98:b9:2c:0a:35:7f: 7f:22:84:db:0e:f2:8b:09:86:95:a8:96:77:72:9d: ad:f4:a2:79:29:88:e2:0e:99:55:7f:ae:15:66:55: 26:84:17:5e:df:95:22:50:ad:9e:00:c6:49:e5:b7: db:a1:e8:d3:d3:7b:01:bc:e9:fa:17:8f:75:a5:5d: fd:7c:ad:4c:47:14:65:10:e8:59:17:52:da:ff:40: 89:8f:db:fd:37:0b:51:6e:22:2c:ca:66:3d:fa:38: db:55:60:cb:20:11:70:63:64:0f:79:30:aa:67:dd: 82:2a:ba:be:60:ad:c1:ac:1a:2b:c7:ed:b9:9f:4c: 6d:90:95:21:6f:01:4b:1f:09:c4:29:22:c6:64:42: 8f:c4:a5:68:62:bd:85:ef:c0:b3:78:61:db:52:0e: 36:93:b3:9f:4e:c5:74:64:dd:ba:87:40:2c:e5:54: 35:f4:28:2f:91:6f:da:5b:33:f4:2e:12:a2:20:69: 5a:e5:16:d2:c6:ca:4e:fa:9f:93:b3:f5:93:d1:00: ab:61:8d:b3:77:ab:3a:8e:4b:51:c9:56:31:22:20: 25:26:b3:59:93:e2:4e:9a:15:bc:1f:7a:56:d3:17: d1:b7:83:7d:4f:35:3e:a8:3b:7e:ed:e3:4c:33:ba: f9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D6:31:B2:1B:1F:57:45:56:DF:71:25:24:E7:5D:91:8E:42:BF:59 X509v3 Authority Key Identifier: keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:fb:29:33:11:ca:84:7e:a9:61:09:28:02:eb:8e:9f:7e:d1: cd:fa:9f:54:4a:68:5c:14:d9:60:ee:da:a8:21:6f:0c:57:6e: 8e:76:38:93:1d:51:6f:2e:7c:76:2f:83:56:ce:64:3b:b6:fc: 2f:ba:e4:23:90:32:16:37:37:c2:09:99:53:88:8c:ef:27:02: 93:63:05:74:e5:7d:34:44:30:1a:86:e5:68:9e:0f:15:c9:fe: 4d:f9:bb:85:84:f0:c2:72:b6:8f:1f:90:b0:4e:00:f9:0b:b3: 42:2c:e0:a6:4e:76:84:44:5e:b6:10:65:ff:b8:81:bb:bf:c4: e3:c1:20:89:df:9f:ec:8e:ca:c0:fc:af:44:f5:31:3d:c3:95: dc:6d:a5:02:e8:89:b9:12:e6:29:23:5b:e9:b6:3f:81:5c:8c: 2a:a3:7c:69:d9:f9:f9:67:76:0c:f9:16:42:f3:5d:cc:2a:ac: 80:8b:04:68:ab:e2:5d:00:dd:7b:66:b0:df:42:65:9f:1b:1a: 6c:e0:03:6c:90:90:ef:42:5c:e8:42:45:f1:86:21:97:86:f6: 08:c9:34:04:87:38:5a:a0:f3:25:7b:14:cb:a2:3e:4b:78:49: a8:03:27:05:0e:9f:42:a5:73:f5:92:7b:f5:c0:27:31:05:60: 70:33:77:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdr9Ds+s8ursBY/IebgVF4DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx OWE3NGUwHhcNMjUwNjE0MDEwMDU3WhcNMjUwNjE1MDEwMDU3WjAzMTEwLwYDVQQD Eyg2M2Q2MzFiMjFiMWY1NzQ1NTZkZjcxMjUyNGU3NWQ5MThlNDJiZjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU6kLDXvKkCYuSwKNX9/IoTbDvKL CYaVqJZ3cp2t9KJ5KYjiDplVf64VZlUmhBde35UiUK2eAMZJ5bfboejT03sBvOn6 F491pV39fK1MRxRlEOhZF1La/0CJj9v9NwtRbiIsymY9+jjbVWDLIBFwY2QPeTCq Z92CKrq+YK3BrBorx+25n0xtkJUhbwFLHwnEKSLGZEKPxKVoYr2F78CzeGHbUg42 k7OfTsV0ZN26h0As5VQ19CgvkW/aWzP0LhKiIGla5RbSxspO+p+Ts/WT0QCrYY2z d6s6jktRyVYxIiAlJrNZk+JOmhW8H3pW0xfRt4N9TzU+qDt+7eNMM7r5kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPWMbIbH1dFVt9xJSTnXZGOQr9ZMB8GA1UdIwQY MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct OTViMDhlMzY2MGNmLzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMfspMxHK hH6pYQkoAuuOn37RzfqfVEpoXBTZYO7aqCFvDFdujnY4kx1Rby58di+DVs5kO7b8 L7rkI5AyFjc3wgmZU4iM7ycCk2MFdOV9NEQwGoblaJ4PFcn+Tfm7hYTwwnK2jx+Q sE4A+QuzQizgpk52hERethBl/7iBu7/E48Egid+f7I7KwPyvRPUxPcOV3G2lAuiJ uRLmKSNb6bY/gVyMKqN8adn5+Wd2DPkWQvNdzCqsgIsEaKviXQDde2aw30Jlnxsa bOADbJCQ70Jc6EJF8YYhl4b2CMk0BIc4WqDzJXsUy6I+S3hJqAMnBQ6fQqVz9ZJ7 9cAnMQVgcDN3cA== -----END CERTIFICATE-----Generated at Sat Jun 14 10:22:49 2025 by rpki-client