$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft File: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft (raw, json) Hash identifier: s2acLCqDvCP6YUkPpXWIbhSp1L8WLTx+I08y4XCKoG0= Subject key identifier: 28:A3:22:CD:D2:60:D4:D9:27:4A:06:05:8B:B2:BB:51:DC:26:8A:BE Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Certificate serial: 0197B7450C7E73CD62F9177E244EB8912E16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft Manifest number: 15CB Signing time: Sat 28 Jun 2025 16:00:44 +0000 Manifest this update: Sat 28 Jun 2025 16:00:44 +0000 Manifest next update: Sun 29 Jun 2025 16:00:44 +0000 Files and hashes: 1: 1-0URATiYn4nWMHZbWNa1y4LiAcE.roa (hash: qnoIsvmT1NGoh4R21XKrhNbrolncENGMdF/rtoG9oNM=) 2: 4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl (hash: lfbKwSZxr4Z5+3HtB3FO09n7sALINC4KTDLEq65dv8M=) 3: 4u-FrWKWaho_ISyzc5VOsCnPB-Q.roa (hash: YfroGaZGo+3Y5Nuhq7M/QzCuhU+RFQDjKrM1lqbk5uM=) 4: 8d-QnWmEgzJ4Rpdyt7aQY0aM-Bw.roa (hash: 0s45oUU1o2ifddAJ6DTLViE5f0A+VumWP+t1SybvUik=) 5: CkNJTmPQJYQ_MfgWt_qPISpjHfg.roa (hash: qG9Z2rLkFr1Vmea2q1Wmoyhhg6jqa9C65AeyXksg/3U=) 6: FEB62enegK42pklHkojm9vjgl0s.roa (hash: pN0xSy0QFp+Q3GwqmGGo0b2YcH4wi98IeY7EBvCVPM4=) 7: JvZUEi7A7V388WY-38Um7sLP4iA.roa (hash: CvMgS2JS1B5/pFFOBX0cIZilf0BG410ECm9I/vEGJ5c=) 8: LHEJ8P9xNDxGFTn9ZcZ57mD7xNY.roa (hash: EVWTprH8s6PFuD1lSOWR/aPK95uNZWXobgBHo0J2/Hk=) 9: UWV4l3kE-brWJX9uRkRZO53lO9o.roa (hash: cAU+zNWLTTRLrd7RdQn+sxXYtefOYpWRpuIgwXau7iA=) 10: W5a7DdwJaAnEaRHZv6EO9kbudzg.roa (hash: oyakXu5rs8SXNOZxzAoWDuA9NdXgDHDVljC1e0neNkA=) 11: _03YY1Sj2Mw8TbRIg27y8NVs5gc.roa (hash: 8hmyw8PyKYN4X/jeEdZ5Etu4V01gYWZ543O86aZNZY4=) 12: eIAjg3CiY3Mi_hiZQ1qv6wZzb_s.roa (hash: 0VHL8dNRCWtY3U9FsisIK+yIftWh4d0//02eZdVbL24=) 13: iTss4dVuEO8u2zrybey6wjkQ5CM.roa (hash: iS+Pl9gnUh0T0PMsvXCrH+rna0Q4YPkZDZcMC+K1GTQ=) 14: osgJC1j873fUuICkEREfgiPJqL4.roa (hash: zVB8fV5Ug3WHZPkxIRefMnGWpQ+cjsymHV6dUGE8Z54=) 15: whqum5btfebJ92EiHlAqEY1dMyI.roa (hash: sd3Z4KpjAwY2NA9vLDkpCk4Gn41kPN8SDpZ7IYPGDjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:45:0c:7e:73:cd:62:f9:17:7e:24:4e:b8:91:2e:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Validity Not Before: Jun 28 16:00:44 2025 GMT Not After : Jun 29 16:00:44 2025 GMT Subject: CN=28a322cdd260d4d9274a06058bb2bb51dc268abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fc:a8:a0:03:7d:83:90:12:ae:33:d2:04:dd: 61:3a:4a:bf:20:6c:9e:87:d4:4d:0a:64:3b:e9:db: 1d:4d:e3:cb:e6:f5:96:ee:7c:87:1d:71:82:03:d3: 18:0a:43:c4:61:18:8b:82:c4:e9:5e:25:f9:35:7e: 5f:4e:d9:d3:c6:d1:c3:b5:02:f6:10:97:ac:29:fa: 4c:0b:3b:0c:5e:c5:57:3d:a2:77:61:8d:35:63:d0: 4d:2b:d4:ff:c2:2a:b4:8a:91:bb:6b:e8:8a:26:ae: 95:95:bd:ef:cb:2c:e8:1e:e4:a5:9a:48:81:17:d0: f7:71:f5:84:9e:84:47:40:3e:13:f9:de:e8:d3:3e: 32:39:f5:43:41:b4:d9:2e:f1:a1:26:b1:05:f7:3a: 4d:db:a5:af:72:74:9d:fa:85:e7:27:98:c6:50:99: 02:ef:2a:44:41:f1:19:63:22:da:91:6c:b6:ab:be: 60:01:a7:58:e5:40:8e:7d:73:22:40:c5:23:22:82: 9c:8f:7c:0e:4d:36:c2:4e:d6:13:3e:68:5f:e7:39: 4b:96:61:25:2e:40:bc:9e:69:ce:40:89:ab:95:4b: 53:7e:d6:41:52:94:dc:91:80:29:84:0c:2e:03:e5: 5d:56:22:a1:92:df:dc:1b:0a:01:42:f1:b4:32:b8: 84:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A3:22:CD:D2:60:D4:D9:27:4A:06:05:8B:B2:BB:51:DC:26:8A:BE X509v3 Authority Key Identifier: keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:5b:7a:08:46:4e:64:8b:98:9f:90:ca:c9:b5:8a:41:e6:72: 7b:cb:38:91:82:c5:07:a6:92:65:4c:dd:a8:27:7f:3f:b1:27: 4a:ee:44:87:72:71:c7:8a:87:fa:e2:91:d8:50:8c:ad:2e:9b: cc:a6:ed:0a:ca:71:6e:92:05:1e:85:06:83:2d:09:0d:d8:55: f2:d6:b2:d6:24:a9:39:b9:0c:3a:82:5d:d6:6e:f8:a9:19:b3: 68:70:27:5d:32:b6:79:82:0e:2b:f7:d4:4b:b5:0d:37:ee:8f: 72:d6:64:88:36:f0:e1:54:4b:b2:31:ce:6c:4d:df:e6:8d:56: ff:fd:da:a2:76:26:b3:b9:9f:f4:2f:1c:4d:c8:7e:f0:54:6d: 1a:f6:df:e0:8d:72:49:8b:bc:8f:4b:bf:b4:6c:94:45:6f:8d: 1a:18:1b:01:ff:d5:1e:2e:db:7c:63:1a:6f:39:7c:7f:96:bc: d0:08:83:ce:f8:53:23:3f:3a:85:b6:9f:29:34:a0:f9:2f:ef: 68:56:64:bd:37:ad:47:b8:d0:3e:d9:fb:eb:f5:6f:53:0b:5a: b5:fe:dc:52:8c:64:a7:ab:29:2d:a9:0b:d7:84:18:f0:ba:ef: d8:1c:1e:3d:dd:f1:74:e0:fa:a5:6a:97:1c:37:40:98:2f:8d: a6:c0:9b:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3RQx+c81i+Rd+JE64kS4WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZWY5Njk0YWE0OGQ4MTI3OWU4ZWRlNDMwNzk1ZjI3Njhk MmRkNTIwHhcNMjUwNjI4MTYwMDQ0WhcNMjUwNjI5MTYwMDQ0WjAzMTEwLwYDVQQD EygyOGEzMjJjZGQyNjBkNGQ5Mjc0YTA2MDU4YmIyYmI1MWRjMjY4YWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPyooAN9g5ASrjPSBN1hOkq/IGye h9RNCmQ76dsdTePL5vWW7nyHHXGCA9MYCkPEYRiLgsTpXiX5NX5fTtnTxtHDtQL2 EJesKfpMCzsMXsVXPaJ3YY01Y9BNK9T/wiq0ipG7a+iKJq6Vlb3vyyzoHuSlmkiB F9D3cfWEnoRHQD4T+d7o0z4yOfVDQbTZLvGhJrEF9zpN26WvcnSd+oXnJ5jGUJkC 7ypEQfEZYyLakWy2q75gAadY5UCOfXMiQMUjIoKcj3wOTTbCTtYTPmhf5zlLlmEl LkC8nmnOQImrlUtTftZBUpTckYAphAwuA+VdViKhkt/cGwoBQvG0MriEMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCijIs3SYNTZJ0oGBYuyu1HcJoq+MB8GA1UdIwQY MBaAFOHvlpSqSNgSeejt5DB5Xydo0t1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMt YWRlZDFjNDY5ZWFmLzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMtYWRlZDFjNDY5ZWFm LzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJVt6CEZO ZIuYn5DKybWKQeZye8s4kYLFB6aSZUzdqCd/P7EnSu5Eh3Jxx4qH+uKR2FCMrS6b zKbtCspxbpIFHoUGgy0JDdhV8tay1iSpObkMOoJd1m74qRmzaHAnXTK2eYIOK/fU S7UNN+6PctZkiDbw4VRLsjHObE3f5o1W//3aonYms7mf9C8cTch+8FRtGvbf4I1y SYu8j0u/tGyURW+NGhgbAf/VHi7bfGMabzl8f5a80AiDzvhTIz86hbafKTSg+S/v aFZkvTetR7jQPtn76/VvUwtatf7cUoxkp6spLakL14QY8Lrv2BwePd3xdOD6pWqX HDdAmC+NpsCbaQ== -----END CERTIFICATE-----Generated at Sat Jun 28 20:37:27 2025 by rpki-client