$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft File: jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft (raw, json) Hash identifier: a/anjmrAdEeH2ZPW3QPu3G+rJArAZ5yNUoSai2rui5M= Subject key identifier: 3D:67:2F:3E:2A:03:9B:DF:73:52:D8:EE:1E:96:E9:E3:97:C5:2F:E9 Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24 Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624 Certificate serial: 0197B70E5A7F2002DDCE141744B836DADC43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft Manifest number: 0E9C Signing time: Sat 28 Jun 2025 15:01:00 +0000 Manifest this update: Sat 28 Jun 2025 15:01:00 +0000 Manifest next update: Sun 29 Jun 2025 15:01:00 +0000 Files and hashes: 1: 0JcOAjVYzD7ATTRTY6zM_FW7ibk.roa (hash: ae6zh695aCdxOBAb92vW9Mqs/ewqcDH7wayEClXo5lU=) 2: 1-Y2dKMtSX_HHImXALZ9Ywq-mBt0.roa (hash: 7qyTbmtwccyXrpltxd1wqJPnd+/MFLmBgiiCsu8AQkU=) 3: 2QTRX3rMARDGeCqwmM0inJSU1I8.roa (hash: JqKkV8sJ2151XjqigefJVjz+CjQivqO6Q6p2fwfafME=) 4: 9fRtydBjgnhbFaykZOo5uuxjF38.roa (hash: RH3Om+bNuUzjZrbi9dURSTYAb514YDgcJdJj7pg2lZE=) 5: EY7ogwruZGSD63obEpUnqn0nkuo.roa (hash: eHBlu7ijObgowuU+joBjfNNXkGVZmY2eT3u/EnffphU=) 6: HJWy01pqJrtg2Vo5SudbPdEEkd4.roa (hash: Vr6k9Sg54f+U5YuclxncYArpuGy+CEnoAy/c+X99oH4=) 7: IYKB-HSEiCq4O7HvrSnxClTqE4I.roa (hash: HbfqesX7Z3CjfGeH5MdNYm5FcZQ54JXRPRk/orWo/qA=) 8: PT8j9eHtg5ttD87ZTwg2GzdumEg.roa (hash: 6rQ85ph5sdL+xNggsMfKZpzXGn+sK3MhYgm3m97nS/I=) 9: ZlUjZQcl9nR0SUVxsgzMhtk30HU.roa (hash: RueFoN4i6RiouAbfwEgZPqUPq4WVTXhPv6TjG8c7n5M=) 10: _K57y8dAfTW_4za5nQ1yw_fKnZI.roa (hash: Rymw72FXGoLgMvCj/WyEf1Es/Ms+t2XEE94XwkN2BgM=) 11: aAifBze_JXbbUHJNy418NFONnUo.roa (hash: rLLARXHfwNDLekNJ80A4f1i0LwTr3pN9Pr1HKxuL2t0=) 12: foR2m61HjPqfHMhA9Ix6Kf8yr6M.roa (hash: maf/3FkUEYfY53s6cIQgES3ADrhkolDvLrwLZz7ie3E=) 13: g6TYrOiqfeY_zc4wZ63S9GaTHtA.roa (hash: McFJsvyZf/CJB69UHaeJLyOzFI33CZnDxz9asvMb9+k=) 14: hiMcEIjHUWN5FsB7VlVyAr5izXE.roa (hash: 6yVp6mlnWSD0tIxqmD2GQ7svu30uQXkMfzEBlI3SWXo=) 15: jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl (hash: vIbovaEfB3sf/rGVjTBWYYSQ6MI6TNjBLHBD8jIDju0=) 16: mXX0pAjU5w8oM8Kw23jhrgx4Wvk.roa (hash: sc8dapOFwgxs0Xrg6eWIDXxwfzY184TsGMxeq92yyGI=) 17: o0ZwaYj89qD05J13n0pZ23X4IIA.roa (hash: Y8iKBwsONnOxQpFezT8Qy8hc9RHNcwVnuvC+XOuLtNY=) 18: ySGM40xeAZyu32ERIMnkJoio4hw.roa (hash: w5mMTd2fQSF1PurNOaDTdU1aGhD+Vitko+NZO/EWYYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:0e:5a:7f:20:02:dd:ce:14:17:44:b8:36:da:dc:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624 Validity Not Before: Jun 28 15:01:00 2025 GMT Not After : Jun 29 15:01:00 2025 GMT Subject: CN=3d672f3e2a039bdf7352d8ee1e96e9e397c52fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:84:b2:38:74:1c:98:60:27:2b:26:17:c0:21: 87:d8:51:7b:51:41:91:2b:cc:76:46:f5:4f:85:b6: 69:76:5e:45:c0:2f:43:1f:98:d2:bd:9e:ad:a8:6c: 5b:68:c7:f3:44:8b:3a:ee:5f:66:07:a0:c9:85:f0: 92:15:2c:e4:f9:63:bb:dc:10:1f:9a:0d:34:f9:12: a2:e6:15:a3:6f:ea:a4:aa:fb:6d:59:19:1b:f2:5e: 10:bd:99:1b:f2:95:07:2b:d9:23:68:11:e1:02:f0: 49:9f:c2:1d:ac:10:b0:92:97:e9:94:d8:ae:9d:99: e4:e8:a0:39:ec:ea:c5:ae:c4:05:1c:43:55:be:ad: aa:23:b4:3e:21:4f:2f:22:be:8a:1b:00:b2:85:49: 00:37:4c:80:7a:a4:4e:16:39:c8:21:a0:5b:3f:d1: 52:6b:68:91:e7:c7:f3:3a:04:d7:2b:1b:8d:20:e5: 93:30:b3:f5:11:46:38:13:49:62:99:15:a4:b4:6c: 1e:8c:46:45:05:77:b7:90:e3:19:42:06:51:57:d3: 42:a8:8f:0e:cd:06:86:d0:a9:9e:67:67:5f:35:8e: e9:e1:dd:27:39:75:73:d0:3a:a5:aa:68:7c:f7:52: b1:d1:5b:d8:b2:40:df:01:9c:ca:82:5e:e9:2b:09: f8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:67:2F:3E:2A:03:9B:DF:73:52:D8:EE:1E:96:E9:E3:97:C5:2F:E9 X509v3 Authority Key Identifier: keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:93:a1:d8:db:3b:9b:ee:69:87:40:e5:2e:50:ef:f0:33:de: 8c:83:3d:a6:b6:b3:c9:ad:f8:31:26:41:85:da:e5:77:16:f3: 2c:17:80:7a:2b:5a:e7:fa:c7:b8:3e:fb:ff:78:48:0d:96:71: de:7d:a8:25:25:15:97:cb:f1:6c:b0:92:2b:18:40:db:b8:de: 27:3f:d1:b6:2c:18:ac:28:36:ce:ac:18:bc:86:5a:2a:0b:e9: da:de:f8:57:f3:a8:0f:94:1c:f1:b6:08:b1:1d:3b:5c:51:ec: 2d:8d:83:65:c0:fd:3a:57:af:56:7b:34:9e:13:45:a3:0e:94: 8a:b6:4a:65:14:fd:e2:7e:0b:c2:e1:6b:f1:66:27:05:07:78: 11:b7:a1:b1:4c:46:98:7e:64:ca:96:c4:44:41:ac:f2:c0:a3: b5:ce:08:a3:4a:40:e0:21:17:9b:1c:fd:92:93:55:0b:72:2a: 41:ac:45:4a:13:57:bf:de:0e:ef:d7:ad:47:3d:86:e6:2c:57: 21:07:8b:51:4b:4e:95:85:09:31:29:b8:f8:72:87:0f:9d:18: bb:b7:4f:5f:db:55:53:53:c8:56:13:1b:9a:94:ea:84:51:06: 2e:1f:03:19:8e:d2:d2:80:de:a8:9f:f0:50:22:f0:12:1d:23: 45:b6:33:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3Dlp/IALdzhQXRLg22txDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNjI2YzkwOWViNDk1MTE1NGJjZWU4MjIxZTQzOTUxYjQy NTc2MjQwHhcNMjUwNjI4MTUwMTAwWhcNMjUwNjI5MTUwMTAwWjAzMTEwLwYDVQQD EygzZDY3MmYzZTJhMDM5YmRmNzM1MmQ4ZWUxZTk2ZTllMzk3YzUyZmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24SyOHQcmGAnKyYXwCGH2FF7UUGR K8x2RvVPhbZpdl5FwC9DH5jSvZ6tqGxbaMfzRIs67l9mB6DJhfCSFSzk+WO73BAf mg00+RKi5hWjb+qkqvttWRkb8l4QvZkb8pUHK9kjaBHhAvBJn8IdrBCwkpfplNiu nZnk6KA57OrFrsQFHENVvq2qI7Q+IU8vIr6KGwCyhUkAN0yAeqROFjnIIaBbP9FS a2iR58fzOgTXKxuNIOWTMLP1EUY4E0limRWktGwejEZFBXe3kOMZQgZRV9NCqI8O zQaG0KmeZ2dfNY7p4d0nOXVz0Dqlqmh891Kx0VvYskDfAZzKgl7pKwn4yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1nLz4qA5vfc1LY7h6W6eOXxS/pMB8GA1UdIwQY MBaAFI5ibJCetJURVLzugiHkOVG0JXYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAt ZTk3ZDFkMDIyMGFmLzEvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAtZTk3ZDFkMDIyMGFm LzEvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK5Oh2Ns7 m+5ph0DlLlDv8DPejIM9prazya34MSZBhdrldxbzLBeAeita5/rHuD77/3hIDZZx 3n2oJSUVl8vxbLCSKxhA27jeJz/RtiwYrCg2zqwYvIZaKgvp2t74V/OoD5Qc8bYI sR07XFHsLY2DZcD9OlevVns0nhNFow6UirZKZRT94n4LwuFr8WYnBQd4EbehsUxG mH5kypbEREGs8sCjtc4Io0pA4CEXmxz9kpNVC3IqQaxFShNXv94O79etRz2G5ixX IQeLUUtOlYUJMSm4+HKHD50Yu7dPX9tVU1PIVhMbmpTqhFEGLh8DGY7S0oDeqJ/w UCLwEh0jRbYz7g== -----END CERTIFICATE-----Generated at Sat Jun 28 23:15:27 2025 by rpki-client