$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft File: 09VvB74YTLpS9v3ASegRTSYWwyo.mft (raw, json) Hash identifier: bC3aAYktD6uYL8zQZLduqkLaRlBOC42rRfD2A6xgUbw= Subject key identifier: 48:0E:EB:D4:C7:3F:ED:C9:BF:55:3F:00:0A:C9:28:4B:8E:53:7E:00 Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Certificate serial: 01976C2B6C2A90A0BB0AA378A6613F86E042 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft Manifest number: 1596 Signing time: Sat 14 Jun 2025 02:01:14 +0000 Manifest this update: Sat 14 Jun 2025 02:01:14 +0000 Manifest next update: Sun 15 Jun 2025 02:01:14 +0000 Files and hashes: 1: 09VvB74YTLpS9v3ASegRTSYWwyo.crl (hash: /Uey1s+TP8+g9OWn/3bZIek8pfM8rbe6VMeLp1Rn3Qg=) 2: 4c68WXa89S9GaEZ3betWtfOynEI.roa (hash: fVAp1PUxEqPq1PXw46ujCE/Pw+4uzGlNeTIsndTtQ4g=) 3: 7kfcYNNoB5VB3-_80xlsWN3weyk.roa (hash: 1wJop1mQ6qBQDepGqT5ANO4tx0iRC5GqiIyWQqeZxiY=) 4: Bs0O01jXAqadcOrA_652_6vgquk.roa (hash: hEdFCfeLg1JToe8V2oyy+hkNpnht00+5NYTQRgNDOq8=) 5: KidN7PJCXFwqwby4fVpHaeAhpFY.roa (hash: rFMoYmqrD8lR5TajeeUqUicyuRT28K2jKIN4IFZHnsU=) 6: NYzishm2ogJfRyzy8nT6kXYmzuI.roa (hash: LaEEfSMmtUB1mBqYxGiYK3KhOkpxYURIQoeWj6Zjkz4=) 7: RIPl0ZcnNzCRnoJoRMQdo7FatJo.roa (hash: V51bdAbDUbCCdG4ap1IngeKOzNBFdbTp51TPAvBkqrE=) 8: eKmkaw2M8tueZ_tzxfDI9F6CNcc.roa (hash: fg34CUb41rhu+065E2VZ9qaIx2X2iqQ2jxGQO4GwQe4=) 9: pq2QS5SBDS3pAxrbz1jylBKYb1c.roa (hash: kdt9b8eHxviCcBXo3alD6ToqY7JvOLmYwFiRPu6twu8=) 10: tpxzfABwHA4uTKjODgtKlvT10t8.roa (hash: /uiIY+OMfjw8MyTKZlNYbS4i9kHVxO0uNCEe4Op3YPE=) 11: xz6DVtU3-Ra9kwVQS1hT5B1NgIk.roa (hash: L6obqobAUv8Kf3w8kISkegiNvXZC3M7YbdVJnQVDNRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6c:2b:6c:2a:90:a0:bb:0a:a3:78:a6:61:3f:86:e0:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Validity Not Before: Jun 14 02:01:14 2025 GMT Not After : Jun 15 02:01:14 2025 GMT Subject: CN=480eebd4c73fedc9bf553f000ac9284b8e537e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b8:8d:6e:df:4d:68:46:17:69:34:43:65:8a: d6:de:25:df:e8:c4:32:22:32:3a:f7:7d:29:db:6a: e9:15:60:5b:b1:35:86:07:fd:b6:80:ab:83:0a:c9: c3:eb:9a:d4:1d:63:fc:0d:e8:01:3e:5c:97:b2:5c: 00:a0:2c:d8:b5:79:56:6e:e4:77:7d:b4:d2:be:f9: 96:ef:e3:b6:39:9e:81:a8:ad:34:aa:14:db:de:bc: ae:d8:07:21:54:3f:48:2e:b4:fb:04:88:28:05:1b: 74:20:61:7c:8e:68:ab:b5:c9:4f:9e:e9:32:fd:59: 9e:ef:6e:3d:7d:51:7c:a7:db:fd:d1:23:95:7d:dd: 00:4c:aa:ff:1b:23:45:84:97:09:e1:e5:d4:10:ff: 88:81:45:2f:85:84:b0:9c:8d:40:39:82:09:fd:54: 4f:fe:61:e6:a2:9b:a9:de:b3:21:0b:81:c8:71:51: 6b:c6:ab:53:51:9a:6f:bf:35:0b:77:ab:af:cb:c0: b5:e9:ca:d0:80:ff:d2:8f:77:8b:2a:8b:e5:38:83: 02:f3:4f:a1:a2:5b:73:19:3c:ab:ac:aa:d2:d7:a8: 15:84:43:1c:12:3d:51:8a:18:31:70:8c:c6:e3:e5: fd:b2:04:92:db:c0:83:41:66:b0:12:4d:a7:2a:dc: 7f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:0E:EB:D4:C7:3F:ED:C9:BF:55:3F:00:0A:C9:28:4B:8E:53:7E:00 X509v3 Authority Key Identifier: keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ba:b7:22:ac:72:6a:06:64:c8:88:73:97:6d:95:7d:76:47: a4:51:84:84:a9:40:96:66:67:50:2c:4e:dd:c0:dc:0d:0e:de: a8:28:8c:fd:24:21:a2:df:3a:2d:c8:24:f7:8a:7d:83:55:c0: 43:80:e1:08:30:03:9c:e0:85:23:20:c1:b8:4d:dd:38:c7:ff: be:ea:a1:7c:f6:5c:bc:08:0f:e7:4f:89:cd:9a:ed:87:db:f9: 03:88:9b:e8:aa:09:0b:d7:48:00:5d:f5:65:79:a2:f7:86:cc: b8:2c:2b:ff:cf:7e:6f:dd:92:22:c7:bb:1f:e2:6e:d3:03:68: d4:5d:bc:c0:37:f0:ba:2d:af:9a:67:84:d3:c1:25:95:9c:05: cb:a4:63:c8:b4:85:01:2f:2e:c7:05:95:79:6f:e4:72:1d:4a: cb:bf:72:4e:61:f1:80:c5:60:c3:13:20:13:12:ce:0e:0c:49: b8:c6:4a:e9:f2:1c:39:dc:58:5b:9f:7d:46:19:9d:09:bf:c5: b0:84:cd:ca:c6:44:79:db:54:21:e5:ee:08:91:33:65:27:c5: b9:c4:62:dd:59:96:88:01:75:f3:1d:04:06:ee:c0:05:69:f0: 13:26:a0:9f:31:c0:73:dd:f6:44:b4:f2:07:1e:ba:84:6f:b1: fd:ad:84:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdsK2wqkKC7CqN4pmE/huBCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZDU2ZjA3YmUxODRjYmE1MmY2ZmRjMDQ5ZTgxMTRkMjYx NmMzMmEwHhcNMjUwNjE0MDIwMTE0WhcNMjUwNjE1MDIwMTE0WjAzMTEwLwYDVQQD Eyg0ODBlZWJkNGM3M2ZlZGM5YmY1NTNmMDAwYWM5Mjg0YjhlNTM3ZTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7iNbt9NaEYXaTRDZYrW3iXf6MQy IjI6930p22rpFWBbsTWGB/22gKuDCsnD65rUHWP8DegBPlyXslwAoCzYtXlWbuR3 fbTSvvmW7+O2OZ6BqK00qhTb3ryu2AchVD9ILrT7BIgoBRt0IGF8jmirtclPnuky /Vme7249fVF8p9v90SOVfd0ATKr/GyNFhJcJ4eXUEP+IgUUvhYSwnI1AOYIJ/VRP /mHmopup3rMhC4HIcVFrxqtTUZpvvzULd6uvy8C16crQgP/Sj3eLKovlOIMC80+h oltzGTyrrKrS16gVhEMcEj1RihgxcIzG4+X9sgSS28CDQWawEk2nKtx/PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgO69THP+3Jv1U/AArJKEuOU34AMB8GA1UdIwQY MBaAFNPVbwe+GEy6Uvb9wEnoEU0mFsMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt MWIwNmQxYzcwNGMxLzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx LzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7q3Iqxy agZkyIhzl22VfXZHpFGEhKlAlmZnUCxO3cDcDQ7eqCiM/SQhot86Lcgk94p9g1XA Q4DhCDADnOCFIyDBuE3dOMf/vuqhfPZcvAgP50+JzZrth9v5A4ib6KoJC9dIAF31 ZXmi94bMuCwr/89+b92SIse7H+Ju0wNo1F28wDfwui2vmmeE08EllZwFy6RjyLSF AS8uxwWVeW/kch1Ky79yTmHxgMVgwxMgExLODgxJuMZK6fIcOdxYW599RhmdCb/F sITNysZEedtUIeXuCJEzZSfFucRi3VmWiAF18x0EBu7ABWnwEyagnzHAc932RLTy Bx66hG+x/a2EzA== -----END CERTIFICATE-----Generated at Sat Jun 14 09:33:50 2025 by rpki-client