$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft File: JXdsd_jr5wlMoAes4anAv9wrOuw.mft (raw, json) Hash identifier: QbU7Wx0BSPFZ2MdVQ+pfBGNgXjkr9Pu9fpYwDvlsUjU= Subject key identifier: 52:7C:A7:EE:4C:C6:F8:8F:AE:85:0E:CA:84:14:08:6D:8E:CD:12:BF Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Certificate serial: 01977B9E77D3436B8AB319E667639B311981 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft Manifest number: 12DD Signing time: Tue 17 Jun 2025 02:01:12 +0000 Manifest this update: Tue 17 Jun 2025 02:01:12 +0000 Manifest next update: Wed 18 Jun 2025 02:01:12 +0000 Files and hashes: 1: 3vNWcma8J3Yvm292bxcQMk9IMAg.roa (hash: 9vjWGwLIurMfDLhl3LmcOyaHZd6c7cfwMEUeIRekeL8=) 2: AIXPYVOLD4vG7-idW3xSmEYba3M.roa (hash: 0OO+kwQPJqN6G5I1BOBQWzk/kW2juMQTjTkhmJKwZ20=) 3: JXdsd_jr5wlMoAes4anAv9wrOuw.crl (hash: mTwslt+jvZHQyYV/83NauqGsXil6e4NWJTnVYBhssRo=) 4: Um1PZhGXZ7KzU5zkJ2mBWgRYing.roa (hash: r8yw/kx6PR2QiDWv/zH9T6r2Gmbp9EAyZ7zdCGmWEQY=) 5: YhneglxU-YMRltelD3FSRlJ3Zwc.roa (hash: Ncwlfcg8RLjA+nxHVjFBtQFwEe7HoERaw1MC4MeS+rw=) 6: e0eoCvsiK7SasiyB3s3vVf_06r4.roa (hash: hu+jMVWRtJ0t9dVnEO6X7YjTvJeeEKYO8KGJ+pPf1v0=) 7: hkaTE_7fhGUYELRP9AaJ9bAo5bk.roa (hash: KOzsqvok3H5PfVWyF9U8nn9XFXetQgaoM4WrEbmzfjU=) 8: mUfMEaQY8q1gZSjzSxi9XIGiseQ.roa (hash: gaddKtYUZyG4gzalDVZzomDqdepgC8Jfd8AVgvRc31g=) 9: sF1coaLwpjJ9ERbX0K6NN9sGsfY.roa (hash: yKfJfqMuiWBIftmEax6OGMuhlaUME2Z3bSqwXVLFaTk=) 10: vk6LGZMNcC3KaiIa5C3dnYSKUhg.roa (hash: 7Gr8EYP5E5UsMRFGLJUElOUxKJpCvyrgvk2k+QyN1AE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 23:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:7b:9e:77:d3:43:6b:8a:b3:19:e6:67:63:9b:31:19:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Validity Not Before: Jun 17 02:01:12 2025 GMT Not After : Jun 18 02:01:12 2025 GMT Subject: CN=527ca7ee4cc6f88fae850eca8414086d8ecd12bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:06:3e:49:af:a1:76:d4:00:bb:29:81:3e:02: 3e:a9:78:f0:c2:58:39:a2:2c:6f:77:ad:35:20:c8: 3f:46:6e:5f:2f:94:80:51:a7:51:1d:d9:d9:5a:86: 77:e0:4b:e7:88:95:f7:70:ca:60:89:a1:91:ed:29: c8:92:e5:2c:9e:5e:d8:5f:6e:b6:36:a2:cb:d0:1e: f6:7c:f8:42:1b:8f:3a:8b:7d:a3:70:1b:7f:55:e8: 2f:77:7b:0d:e3:5d:0b:08:04:ba:ed:e0:7f:03:d3: 11:c0:4f:73:2f:fb:bc:84:46:5b:64:a5:fd:f9:d8: f9:91:50:6c:5e:11:5d:e9:43:fd:d6:11:bb:fc:f9: 72:a5:7e:05:63:4f:12:53:c8:b4:71:30:19:ed:da: d5:8e:72:59:90:18:e1:f0:83:6e:04:2e:b2:64:e5: 7c:d8:e7:4d:b2:3b:e4:36:75:47:de:6a:77:f7:2e: b7:fa:2b:7c:17:74:6b:12:a0:87:98:d3:7b:9e:64: bd:25:fd:53:34:e3:2d:34:3e:a9:ce:04:90:3e:0d: 83:bc:32:60:49:82:2c:19:60:a9:b9:7a:87:45:e5: 31:ca:a0:0e:dd:11:84:e1:2d:74:77:5a:bb:b9:fb: 64:c4:d3:30:53:d8:2b:d0:0a:f6:03:ca:5e:7c:ca: 15:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7C:A7:EE:4C:C6:F8:8F:AE:85:0E:CA:84:14:08:6D:8E:CD:12:BF X509v3 Authority Key Identifier: keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:57:0d:f1:1c:77:f4:89:a9:9a:2d:21:e7:48:a5:48:79:ff: 3f:74:f2:c9:80:a5:90:f3:99:a0:0f:01:26:bd:41:d1:b9:b1: ef:ff:11:7c:3b:ec:c5:44:e4:7d:2b:a8:e5:59:59:10:a5:b8: 80:56:62:04:4e:55:71:e9:e8:75:7f:d6:66:e7:0e:57:34:63: 94:ae:40:e4:69:4b:c7:05:0e:d0:c3:30:56:81:68:f3:63:8d: 6a:9f:65:1a:ee:87:f0:05:3a:35:2b:03:05:ca:99:22:5c:27: 4a:a5:9d:4e:b9:5d:06:01:91:2a:d5:b6:b3:58:ce:61:dc:f6: e6:cd:9c:5d:e6:78:bd:e0:7d:6e:2e:93:fa:e7:91:9b:f4:7c: d7:8e:c7:4f:5c:a3:20:03:cd:d5:19:77:69:dd:07:a0:ce:b9: cf:d6:b1:9a:05:4f:e6:8e:19:a5:1c:07:5f:8b:bc:8d:5a:a1: 01:19:2c:c4:60:19:e6:13:9b:35:a0:98:d2:42:03:cd:a4:b2: 19:51:d2:f7:d5:84:41:87:6c:a2:61:22:e7:68:22:fe:28:53: 56:7e:9d:51:c1:79:f9:5d:c6:a6:e8:da:da:14:33:d2:a2:0f: 73:fe:be:d7:76:a9:d2:c2:c0:74:33:93:eb:01:cb:e4:93:db: 16:19:3f:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd7nnfTQ2uKsxnmZ2ObMRmBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy YjNhZWMwHhcNMjUwNjE3MDIwMTEyWhcNMjUwNjE4MDIwMTEyWjAzMTEwLwYDVQQD Eyg1MjdjYTdlZTRjYzZmODhmYWU4NTBlY2E4NDE0MDg2ZDhlY2QxMmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgY+Sa+hdtQAuymBPgI+qXjwwlg5 oixvd601IMg/Rm5fL5SAUadRHdnZWoZ34EvniJX3cMpgiaGR7SnIkuUsnl7YX262 NqLL0B72fPhCG486i32jcBt/Vegvd3sN410LCAS67eB/A9MRwE9zL/u8hEZbZKX9 +dj5kVBsXhFd6UP91hG7/PlypX4FY08SU8i0cTAZ7drVjnJZkBjh8INuBC6yZOV8 2OdNsjvkNnVH3mp39y63+it8F3RrEqCHmNN7nmS9Jf1TNOMtND6pzgSQPg2DvDJg SYIsGWCpuXqHReUxyqAO3RGE4S10d1q7uftkxNMwU9gr0Ar2A8pefMoVFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJ8p+5MxviProUOyoQUCG2OzRK/MB8GA1UdIwQY MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt ZTdkYWVjMTk0YTY5LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5 LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASlcN8Rx3 9Impmi0h50ilSHn/P3TyyYClkPOZoA8BJr1B0bmx7/8RfDvsxUTkfSuo5VlZEKW4 gFZiBE5VcenodX/WZucOVzRjlK5A5GlLxwUO0MMwVoFo82ONap9lGu6H8AU6NSsD BcqZIlwnSqWdTrldBgGRKtW2s1jOYdz25s2cXeZ4veB9bi6T+ueRm/R8147HT1yj IAPN1Rl3ad0HoM65z9axmgVP5o4ZpRwHX4u8jVqhARksxGAZ5hObNaCY0kIDzaSy GVHS99WEQYdsomEi52gi/ihTVn6dUcF5+V3Gpuja2hQz0qIPc/6+13ap0sLAdDOT 6wHL5JPbFhk/bw== -----END CERTIFICATE-----Generated at Tue Jun 17 08:58:56 2025 by rpki-client