$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft File: eXmGPOqCrrjp3zhLOapRdvS8-mE.mft (raw, json) Hash identifier: eaHng2gOP2hO2o59IsT28/g3SR4LiUqeijVGDAtISAg= Subject key identifier: ED:0A:6A:7A:82:12:28:85:E9:60:43:C6:87:26:E1:42:05:19:F2:22 Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Certificate serial: 019788475E14A85F32CD14BDC7A81E113C92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft Manifest number: 15BE Signing time: Thu 19 Jun 2025 13:01:07 +0000 Manifest this update: Thu 19 Jun 2025 13:01:07 +0000 Manifest next update: Fri 20 Jun 2025 13:01:07 +0000 Files and hashes: 1: 2cSeSi_Xs9nxENINXXMmVW1DasQ.roa (hash: NILYBWHjcUi2YMu0b6KQQ7GSdlhIfBjAKlI5QryWGe8=) 2: 31B5K7vkAfS9R2wkGuV5dcAnL2Y.roa (hash: O89Ry4yQ6lrE+ydQl9ey5gr4XCsYEJZz/2ZEEVTUklM=) 3: 8rBNukWPHPmFUpvlkGmzTz1-HwA.roa (hash: tMcco5dxWlTIQfy3zxbp0EQ9rOWiTqcDWIU/jeQq+bM=) 4: DrV2xA7Yd-hZFiq3pO9rygl2qg0.roa (hash: TVf6eSJU2syGlD0lzcyv3W0pP95vSrCKIhPdX0AUyh0=) 5: GGh-0xxwn6ceElDQMHRGmEsQE-s.roa (hash: P3CSh7y+NvPz/ZjtWmpED7vAzzUGfZNIvd2EgvFxP9s=) 6: NmG_HXr74xhss_g6667RcEUKRLI.roa (hash: w4iJzBXqF4+nBtbBp9H18XsHRW5050KpbO/LhdFePIo=) 7: OeWAQhxz5E883h7RJjR3cmkBM6o.roa (hash: SpK+6FCkO+sEnLY+zrox32fWgUHKX5y3hElZSDHvkaU=) 8: OllQNmMawdArtrTwZHIJNF4T5jM.roa (hash: +uevr5/ThP6vpFGT/Sd5hxkcaCeLUtP4ogWvmijr4m8=) 9: eXmGPOqCrrjp3zhLOapRdvS8-mE.crl (hash: S3URd378IWchb8fL4uUNk1nQNJYTh+78JmyFwitlz58=) 10: jRyIBgdtXReJ9oHBVuw4FaEWM-0.roa (hash: ZszsBIs7CJREdsDcllx0N3t5IqBzFvq0JJZ2fLMu8PY=) 11: pGXlBe8mvqpUo_lCHeYFkShv2K8.roa (hash: rjd6cps92Ja94+46vbe5lft5y/2s10gUp3FV0e699LY=) 12: zIH5sPlMx70fyP1Az3Csaj7WyTI.roa (hash: 2aeoW9K+GdEGc7tRsUNmCwR+CPzyrfG3s/F0EGb6/Pk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Jun 2025 10:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:88:47:5e:14:a8:5f:32:cd:14:bd:c7:a8:1e:11:3c:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Validity Not Before: Jun 19 13:01:07 2025 GMT Not After : Jun 20 13:01:07 2025 GMT Subject: CN=ed0a6a7a82122885e96043c68726e1420519f222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:55:55:61:57:41:ed:db:55:e4:a6:93:99:c2: fe:59:8d:28:fa:7b:51:74:f6:58:7c:77:62:07:14: d6:35:e1:22:89:5e:da:8e:34:ba:a6:72:fd:4a:b3: df:d8:8c:90:de:79:23:50:af:d4:60:28:60:f2:c4: 26:1b:e0:c1:2b:4f:be:ec:59:29:97:71:57:23:05: e3:12:20:81:82:60:ad:ec:69:ef:15:2c:a6:1c:00: 4a:cb:67:62:2b:b8:ad:86:01:12:39:d4:07:70:d8: 55:39:1b:5e:86:3d:ff:fe:39:1c:55:0c:7b:cb:77: 9e:a5:46:28:03:81:a1:01:00:ba:81:7d:35:88:ea: 87:9a:61:79:49:c7:c2:ac:2b:b7:fd:74:c2:e0:1f: 8b:54:2a:7d:57:3e:4c:98:62:c7:e9:46:06:af:03: 14:bf:38:63:20:0d:86:ec:be:b2:29:45:85:4a:fe: 23:45:d8:77:c1:ba:06:ae:2b:70:e4:2f:cb:de:6c: b8:f9:2b:59:c7:90:db:0f:9d:3e:6b:3e:fc:43:31: 67:2d:85:15:e8:f4:60:10:ae:37:fa:8b:1e:28:c8: ce:87:57:46:dd:4b:6f:96:4a:e7:ad:65:ce:aa:e6: ee:4a:21:33:ef:06:93:43:ac:7b:a5:65:c6:69:ce: 65:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:0A:6A:7A:82:12:28:85:E9:60:43:C6:87:26:E1:42:05:19:F2:22 X509v3 Authority Key Identifier: keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:12:3d:a3:1e:d5:f8:62:6a:20:10:ae:77:a7:d5:ad:63:a1: fc:f8:76:03:6a:e7:b9:03:3b:90:c8:9f:da:84:0c:8b:0f:4b: 2f:7a:44:9f:df:4e:33:99:74:e2:7d:72:31:90:64:4c:af:20: a6:83:90:c1:49:11:4e:21:ab:51:f1:ec:65:d9:d8:28:d6:89: b5:10:c2:0c:71:f7:b8:1c:83:f9:35:17:ca:52:d9:58:3b:28: 34:8c:e1:d6:8f:4a:e2:2b:6d:bd:0f:de:fd:af:90:0a:21:46: 52:b4:69:32:5a:a7:1f:11:52:79:62:8a:19:35:a4:1a:1c:9e: c7:31:2f:e5:8a:28:32:d2:71:40:7f:2e:c9:44:66:ef:af:d7: d8:08:67:79:ea:6a:6b:2d:e0:58:1a:b3:fc:b4:24:34:76:3e: b6:92:a4:bd:64:0c:7a:dc:c4:7a:4c:01:14:d8:68:dd:70:39: 80:cd:46:93:e3:2a:86:c7:88:e4:cd:e3:c9:1c:f9:96:07:c1: 87:f9:0e:73:2a:a0:d6:dd:f3:14:50:5b:02:83:41:eb:f7:25: ce:0a:af:a5:4a:35:bb:b6:78:6b:2c:e1:b0:f2:6d:8e:04:07: 58:a7:46:ea:e8:ea:c2:80:2e:b1:91:75:1c:4a:e8:20:bf:5a: 46:ce:87:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZeIR14UqF8yzRS9x6geETySMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Nzk4NjNjZWE4MmFlYjhlOWRmMzg0YjM5YWE1MTc2ZjRi Y2ZhNjEwHhcNMjUwNjE5MTMwMTA3WhcNMjUwNjIwMTMwMTA3WjAzMTEwLwYDVQQD EyhlZDBhNmE3YTgyMTIyODg1ZTk2MDQzYzY4NzI2ZTE0MjA1MTlmMjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVVVYVdB7dtV5KaTmcL+WY0o+ntR dPZYfHdiBxTWNeEiiV7ajjS6pnL9SrPf2IyQ3nkjUK/UYChg8sQmG+DBK0++7Fkp l3FXIwXjEiCBgmCt7GnvFSymHABKy2diK7ithgESOdQHcNhVORtehj3//jkcVQx7 y3eepUYoA4GhAQC6gX01iOqHmmF5ScfCrCu3/XTC4B+LVCp9Vz5MmGLH6UYGrwMU vzhjIA2G7L6yKUWFSv4jRdh3wboGritw5C/L3my4+StZx5DbD50+az78QzFnLYUV 6PRgEK43+oseKMjOh1dG3UtvlkrnrWXOqubuSiEz7waTQ6x7pWXGac5ldQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0KanqCEiiF6WBDxocm4UIFGfIiMB8GA1UdIwQY MBaAFHl5hjzqgq646d84SzmqUXb0vPphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEt ZGU0YWNmNDQ3ZmFlLzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEtZGU0YWNmNDQ3ZmFl LzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBI9ox7V +GJqIBCud6fVrWOh/Ph2A2rnuQM7kMif2oQMiw9LL3pEn99OM5l04n1yMZBkTK8g poOQwUkRTiGrUfHsZdnYKNaJtRDCDHH3uByD+TUXylLZWDsoNIzh1o9K4ittvQ/e /a+QCiFGUrRpMlqnHxFSeWKKGTWkGhyexzEv5YooMtJxQH8uyURm76/X2Ahneepq ay3gWBqz/LQkNHY+tpKkvWQMetzEekwBFNho3XA5gM1Gk+MqhseI5M3jyRz5lgfB h/kOcyqg1t3zFFBbAoNB6/clzgqvpUo1u7Z4ayzhsPJtjgQHWKdG6ujqwoAusZF1 HEroIL9aRs6HUA== -----END CERTIFICATE-----Generated at Thu Jun 19 17:45:56 2025 by rpki-client