$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft File: u6Nc-KtvPqoq663Z4jc97AiTYl4.mft (raw, json) Hash identifier: /P15fiS63S7vOLPF/rIegk5QUJAY0vDumvid02vm0vU= Subject key identifier: 88:57:C3:8A:89:1D:0D:2F:A4:06:80:8B:11:4B:88:CE:6B:C5:B2:25 Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Certificate serial: 01976DE2EBA0F5F564DAB1A86E5DE98D5A13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft Manifest number: 135D Signing time: Sat 14 Jun 2025 10:01:17 +0000 Manifest this update: Sat 14 Jun 2025 10:01:17 +0000 Manifest next update: Sun 15 Jun 2025 10:01:17 +0000 Files and hashes: 1: GtppMOhe-qj4-qKPQwYM7Bndra0.roa (hash: DZ7bcQ1MagW/CKYzAoT3tgdmQpZud4AtQbSCkk/MCKU=) 2: IICQjXJW2EEkB1v0o8BM6izDgbM.roa (hash: 7Xb1rw7YXZ8yAd+5aXbmrrlzp2Uxli0xSynXq48MEYc=) 3: PZNxNz45jwhU2f2Vk-rUkU1xuZQ.roa (hash: F+PZJf4GxvF8kf0ckwm9Pxo9WyYXyL9ytkInNQ2bSTY=) 4: _8UTREX8Q0a63ua_dGhbhojBdUA.roa (hash: DL1eDSZaMbokl5Ydp9t7oF5cl2AwIO6gEepk09/TZDc=) 5: _kZUir8n1AqIU0qtCf0tRxbZpds.roa (hash: i0Gwqdkr5/j/wsvWbuGrhf4MKjNKMEm96rfhCoH477Y=) 6: c7nY0rggG6raEqDRkehzGz_VYtA.roa (hash: EhNdOxX4vcohdV7gKrHWK7+fsvt8pGFZe0311VfzJ1M=) 7: clWD5iSFcHwGMTWctP6MgbhffFI.roa (hash: XeY9jpVy1coomoksHYwsuAsFdSJEnTf0ShOjmRYUnB0=) 8: hEnYun4dBmY4NXRm3bASEYEJDP0.roa (hash: 9ED8ExgB7hEhZTw92vukURu1ltjtyM6wWC7Qc0GRBP4=) 9: tTkbfZxula834alUiiKULvFUhEY.roa (hash: 53gfHOJtFDupMS3Pl17R4clQixHqHEmtoBj+F2KX9dc=) 10: u6Nc-KtvPqoq663Z4jc97AiTYl4.crl (hash: DNjTOCBL6vbIXRYObOI0k2VRcF6YmsEIIrqMHRkw9VY=) 11: uZ3gLoi-baUsKV1SOOe_6eXbk4A.roa (hash: DF0imGw170/tpFF5iP4nGcWrEFYm61EvjaRvJ/3jKZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6d:e2:eb:a0:f5:f5:64:da:b1:a8:6e:5d:e9:8d:5a:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Validity Not Before: Jun 14 10:01:17 2025 GMT Not After : Jun 15 10:01:17 2025 GMT Subject: CN=8857c38a891d0d2fa406808b114b88ce6bc5b225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:49:37:ea:d4:9c:fd:d8:6c:c8:a3:7b:13:7e: 7d:b6:e5:08:f9:8c:f8:84:f1:8d:ad:5d:08:6e:be: d7:d0:7e:1a:20:7a:d4:d6:09:96:c1:44:02:0a:94: 24:4a:9c:b5:86:a5:25:7d:08:e9:61:3d:56:d8:02: a7:81:0f:ee:6f:89:b5:ab:fb:ea:ce:7a:ee:24:f8: ff:56:bf:cd:59:9c:7d:9b:8e:ff:de:c7:c5:49:31: c3:5f:3d:21:25:f1:52:4b:f9:ca:54:e1:be:5e:3c: bb:5d:89:37:cc:70:c6:f4:ef:0f:4b:28:47:be:91: 6e:a5:0d:6f:56:29:39:8d:da:42:45:50:0a:33:8f: 73:12:06:a4:a4:37:5e:47:0f:7e:f3:59:d6:2d:f3: e0:73:df:0a:90:bb:d9:08:d2:98:01:7f:e9:5d:5a: c6:41:f6:4b:ac:52:04:8a:21:c4:3b:ca:44:44:97: 4c:45:2c:e9:75:79:f8:8e:5d:92:83:cc:06:ba:8d: e3:43:be:eb:f6:28:3d:ff:46:ed:b4:d9:03:1b:9f: 04:5a:7a:66:67:6d:0a:71:91:16:77:3e:d7:01:51: 81:07:33:72:2f:77:1c:d0:fd:5c:eb:84:33:ba:ca: 56:82:b6:c0:1e:e8:65:81:8c:e0:e4:c9:bb:50:0a: 3e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:57:C3:8A:89:1D:0D:2F:A4:06:80:8B:11:4B:88:CE:6B:C5:B2:25 X509v3 Authority Key Identifier: keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:aa:48:70:a6:e2:81:34:75:4c:0e:2e:13:4d:f0:89:6c:d5: ae:ee:21:ee:29:59:91:a0:65:d9:0d:42:29:02:0a:e8:0d:e6: 6b:02:ea:66:d6:08:3e:9c:4b:3f:69:1c:4f:17:b8:54:cb:72: 9a:8a:c1:5b:55:ef:06:9a:10:0b:3a:56:b5:28:a2:dd:4c:08: a2:9c:f1:b4:85:02:aa:d9:03:7c:68:36:50:14:4f:4b:2a:68: b4:b1:32:fa:46:10:88:9f:f2:f7:ea:1f:80:cb:c9:46:71:12: e2:81:de:d6:ec:08:d3:90:29:b0:bb:80:5a:68:69:e7:9f:97: 1d:6b:db:b2:32:8a:18:77:55:cb:f9:d0:59:ac:c0:47:4b:66: c8:88:74:5a:6c:fc:14:14:ae:02:53:8c:fb:ed:eb:cc:f2:00: bd:90:60:61:95:6e:13:9d:fc:91:fa:96:ae:e6:bd:79:ba:29: 11:a4:20:d0:32:f7:f7:36:e8:42:16:e3:d4:5f:65:bd:83:88: 97:63:22:d2:95:69:fc:33:6a:97:3c:c2:8f:1e:11:0a:f4:46: 3e:fb:09:04:26:38:de:d6:5e:07:a9:f1:f5:64:ac:d9:e7:2a: 1b:a1:b6:92:b5:31:bb:93:d3:15:b1:14:6c:28:52:19:5c:0c: 29:55:4c:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdt4uug9fVk2rGobl3pjVoTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYTM1Y2Y4YWI2ZjNlYWEyYWViYWRkOWUyMzczZGVjMDg5 MzYyNWUwHhcNMjUwNjE0MTAwMTE3WhcNMjUwNjE1MTAwMTE3WjAzMTEwLwYDVQQD Eyg4ODU3YzM4YTg5MWQwZDJmYTQwNjgwOGIxMTRiODhjZTZiYzViMjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEk36tSc/dhsyKN7E359tuUI+Yz4 hPGNrV0Ibr7X0H4aIHrU1gmWwUQCCpQkSpy1hqUlfQjpYT1W2AKngQ/ub4m1q/vq znruJPj/Vr/NWZx9m47/3sfFSTHDXz0hJfFSS/nKVOG+Xjy7XYk3zHDG9O8PSyhH vpFupQ1vVik5jdpCRVAKM49zEgakpDdeRw9+81nWLfPgc98KkLvZCNKYAX/pXVrG QfZLrFIEiiHEO8pERJdMRSzpdXn4jl2Sg8wGuo3jQ77r9ig9/0bttNkDG58EWnpm Z20KcZEWdz7XAVGBBzNyL3cc0P1c64QzuspWgrbAHuhlgYzg5Mm7UAo+JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhXw4qJHQ0vpAaAixFLiM5rxbIlMB8GA1UdIwQY MBaAFLujXPirbz6qKuut2eI3PewIk2JeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMt NTk3YjZlMjQ5MmFiLzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMtNTk3YjZlMjQ5MmFi LzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVqpIcKbi gTR1TA4uE03wiWzVru4h7ilZkaBl2Q1CKQIK6A3mawLqZtYIPpxLP2kcTxe4VMty morBW1XvBpoQCzpWtSii3UwIopzxtIUCqtkDfGg2UBRPSypotLEy+kYQiJ/y9+of gMvJRnES4oHe1uwI05ApsLuAWmhp55+XHWvbsjKKGHdVy/nQWazAR0tmyIh0Wmz8 FBSuAlOM++3rzPIAvZBgYZVuE538kfqWrua9ebopEaQg0DL39zboQhbj1F9lvYOI l2Mi0pVp/DNqlzzCjx4RCvRGPvsJBCY43tZeB6nx9WSs2ecqG6G2krUxu5PTFbEU bChSGVwMKVVM6A== -----END CERTIFICATE-----Generated at Sat Jun 14 13:09:05 2025 by rpki-client