$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft File: C047O4QkIliGMULtOhl5LZfLvHQ.mft (raw, json) Hash identifier: swPhTgjt7YGUCS0ty0woArcHMyRJOIVsl5x7flUq/Ek= Subject key identifier: BA:61:A9:B9:E0:38:E8:BD:1C:28:F7:56:6F:75:A7:58:F3:28:92:8F Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 0197CBA7867E0FF130DEAC20916450C5AD7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft Manifest number: 028B Signing time: Wed 02 Jul 2025 15:00:43 +0000 Manifest this update: Wed 02 Jul 2025 15:00:43 +0000 Manifest next update: Thu 03 Jul 2025 15:00:43 +0000 Files and hashes: 1: 4EVIucA70gYtRBC_kvd8S_jO4G4.roa (hash: f24fNYbERcDJzGGGVxLcXRg46QfyX7NJWLWSxrMNmcw=) 2: 5jJR8ex_Cu2DpLymyUyPZOMyOkE.roa (hash: xzEHQ5rCOad65DlaTD/0zOgecwAYSd4+GjZ0k61Ou6I=) 3: 6Z91pEQIiDn1LmdUBMYsbGOujqE.roa (hash: mfhTSMOtoWe92eSIpzgh+bNLhjFh1xQ1OWKgtl4h5MM=) 4: 6vUhZWGddxVPIIeeH6-Dbc9jpk4.roa (hash: WfzTHJzN03ulxZw9x6atlyLctl8HtDch71VvQgIPbKM=) 5: 6xBMykXleXyosV01BLEJTU6ypG8.roa (hash: ZdidGgqZmV19VuoUDkEoHJw8nogOkry2PBFmQAw+osI=) 6: BPQCE551jGC7AfZxENf1vLcZuQw.roa (hash: b4X/8S2+3tpuUpa3epnbHaVzUEealAaoYFbctbKomoU=) 7: BjqTHtTtBtZx2Y5CozNWD3CEBt0.roa (hash: eW/XcbSH0tDYIAlNaQxhj837cfdUxkfKds65F/54mgM=) 8: C047O4QkIliGMULtOhl5LZfLvHQ.crl (hash: rZH4Pa3rRLhl7jcUj6dS5xvqZRUOQ8EEoA8Okm1NkcE=) 9: EvZmdpYLd03WERL_L0i0mrtj944.roa (hash: CV2qEuFjtfL/Sdsin89UXRGI8h47pjbkcQWbmiCWOHY=) 10: H49hyQPEQJXxJVi2iR8A2ADQ41U.roa (hash: eqi7i//uHcpOg1OfB0kupkpo9kTQKxZE6a6NNvU+Pyg=) 11: HlZrGl1aO3kV1Y6YybleSS-qS48.roa (hash: YzOs1UcuCc3VF2OmGWOmyNrxNY+9CZqIdsz2OYFNBdU=) 12: Tv3eHkTibu1-NKazXj-AMkMj7Sw.roa (hash: lHAqhVPifaQjD9rLTD+uDdEniFd0R32cYJ3zWnuqKHM=) 13: b7g_AfGKRKl1uxe-BoiQM3sl0nw.roa (hash: Zf9ZuQPGxN3TX6S4uzmoIy9WChIwMZZm6ZNHezb6N+U=) 14: bCaBS4aQHjuaa_tTVMTRXq8OR_U.roa (hash: 7H4q9uVHSlMkwQO5xRA3Q4nmZoDkIn1SJmtZoSSXixQ=) 15: mrriTsp_r84VvXOZ9vwCDiafNfA.roa (hash: 237ftlrT6P/fqAsRok2Wq3N6bqs/PXVVGhXC7gyjJzY=) 16: sbkxRvSrfQGNdpGANqUogURHroU.roa (hash: GVO8i7AC/aFii+I0dhy+QGbxHH4AqRNBV/o41DJJYK4=) 17: uSB4Q9lZ5N_vUTK7fY2jb9w2g4Y.roa (hash: br5Lt3idKAa3r0A/AYPd7r0VCPVHp7gxtlokiM1B+jU=) 18: uuTcIhmMVylXKoo0d8I18SaHjWU.roa (hash: a8ZKg1ASt06tQrhILg7SaB6+2r8ufbJSPrndEQoQ7X4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Jul 2025 11:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:cb:a7:86:7e:0f:f1:30:de:ac:20:91:64:50:c5:ad:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Jul 2 15:00:43 2025 GMT Not After : Jul 3 15:00:43 2025 GMT Subject: CN=ba61a9b9e038e8bd1c28f7566f75a758f328928f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:66:a9:7f:bc:5f:7f:40:cd:e4:66:c4:4f:0e: f9:fb:92:a8:26:ea:1e:cb:17:8a:06:9c:5e:e2:70: 3a:20:1c:1b:33:2a:d4:a6:53:c1:3c:7e:1a:14:d6: f0:1d:a6:7f:cb:87:50:03:3d:57:de:f9:63:ce:5f: 93:ce:1c:e1:81:2e:bb:29:48:ab:f0:88:3b:1c:53: 58:e2:85:72:86:a9:84:cf:c3:9f:d1:3c:bf:b7:1a: 71:6d:e3:ee:7e:3e:bb:31:a9:1b:05:17:73:f1:c3: ae:78:0d:ef:9c:eb:b8:94:f0:ba:15:6b:9f:e4:c9: 8d:59:61:da:f1:16:87:5c:4c:1e:c8:94:1b:7e:e2: e6:e6:7a:c6:cb:b6:89:ad:1e:e6:02:85:cf:0b:a3: 74:f4:e0:c7:87:0c:fe:c4:d5:86:5c:6d:a6:26:b8: eb:b7:99:9c:ae:f4:0a:29:2c:ff:63:88:7b:84:21: bc:18:2f:1f:8d:03:68:ed:b3:2b:db:ff:d7:fa:bc: 38:35:a0:53:5b:8d:94:87:8b:31:25:92:5e:06:9e: c6:d6:4c:2a:2d:c7:49:62:5a:36:14:64:14:3c:ab: 9c:15:15:d2:07:c2:ec:02:77:b9:81:3a:70:87:6e: 69:dc:d1:53:c6:c5:8b:07:f3:7a:16:1f:9b:87:09: 0b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:61:A9:B9:E0:38:E8:BD:1C:28:F7:56:6F:75:A7:58:F3:28:92:8F X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:b4:dc:be:fc:f1:18:f1:89:dc:9c:c2:c4:7e:df:9f:4f:ed: c7:9b:72:e9:62:2c:b5:90:08:42:d3:9d:df:4b:8a:15:21:a3: e5:16:79:ce:e8:0a:49:57:35:b0:1d:6c:85:f5:c7:eb:b0:85: fc:25:13:74:19:4b:64:05:a5:ae:47:2d:a8:8c:c1:db:bf:56: db:94:b5:e3:71:e4:3e:78:44:37:b6:39:13:e8:a3:58:66:89: 44:b0:a0:ca:d6:74:0a:97:74:c6:7d:21:a4:30:46:ea:78:97: 93:40:26:e6:1c:5b:e4:11:26:c4:02:b1:5b:7a:09:36:52:47: 79:3b:d2:2e:e5:fc:dc:f2:86:a4:de:42:2c:75:ab:2f:87:ae: 24:21:a5:11:bf:38:40:70:96:f7:58:03:e8:bc:d1:45:57:3a: 49:66:1b:a3:27:ec:3a:16:4a:ea:f0:9b:29:50:4d:82:e8:bc: 72:69:f4:3e:35:02:3a:bd:1a:7b:43:43:fe:25:64:79:c2:5a: 57:27:9f:06:60:d2:06:92:64:20:08:17:4c:97:31:8d:f7:32: f5:db:d3:f3:a3:1e:73:c5:f2:c9:51:31:0a:15:20:74:01:33: 9e:cb:16:aa:c7:76:ca:c7:d7:20:31:50:23:11:a2:85:f6:7d: db:a9:fc:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfLp4Z+D/Ew3qwgkWRQxa18MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjUwNzAyMTUwMDQzWhcNMjUwNzAzMTUwMDQzWjAzMTEwLwYDVQQD EyhiYTYxYTliOWUwMzhlOGJkMWMyOGY3NTY2Zjc1YTc1OGYzMjg5MjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmapf7xff0DN5GbETw75+5KoJuoe yxeKBpxe4nA6IBwbMyrUplPBPH4aFNbwHaZ/y4dQAz1X3vljzl+TzhzhgS67KUir 8Ig7HFNY4oVyhqmEz8Of0Ty/txpxbePufj67MakbBRdz8cOueA3vnOu4lPC6FWuf 5MmNWWHa8RaHXEweyJQbfuLm5nrGy7aJrR7mAoXPC6N09ODHhwz+xNWGXG2mJrjr t5mcrvQKKSz/Y4h7hCG8GC8fjQNo7bMr2//X+rw4NaBTW42Uh4sxJZJeBp7G1kwq LcdJYlo2FGQUPKucFRXSB8LsAne5gTpwh25p3NFTxsWLB/N6Fh+bhwkLOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLphqbngOOi9HCj3Vm91p1jzKJKPMB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbTcvvzx GPGJ3JzCxH7fn0/tx5ty6WIstZAIQtOd30uKFSGj5RZ5zugKSVc1sB1shfXH67CF /CUTdBlLZAWlrkctqIzB279W25S143HkPnhEN7Y5E+ijWGaJRLCgytZ0Cpd0xn0h pDBG6niXk0Am5hxb5BEmxAKxW3oJNlJHeTvSLuX83PKGpN5CLHWrL4euJCGlEb84 QHCW91gD6LzRRVc6SWYboyfsOhZK6vCbKVBNgui8cmn0PjUCOr0ae0ND/iVkecJa VyefBmDSBpJkIAgXTJcxjfcy9dvT86Mec8XyyVExChUgdAEznssWqsd2ysfXIDFQ IxGihfZ926n8EQ== -----END CERTIFICATE-----Generated at Wed Jul 2 20:54:21 2025 by rpki-client