$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft File: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json) Hash identifier: Ysc6GnBmTU6NLwVqAdax2RrTGWTkV/QEK7SnmXtLGRg= Subject key identifier: 1A:CF:AE:C8:FD:9C:A7:75:0B:BF:DE:08:E3:EF:57:F1:F5:19:44:E8 Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Certificate serial: 0197B6D76540F4876E18E856EA82B40C0904 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft Manifest number: 024A Signing time: Sat 28 Jun 2025 14:00:58 +0000 Manifest this update: Sat 28 Jun 2025 14:00:58 +0000 Manifest next update: Sun 29 Jun 2025 14:00:58 +0000 Files and hashes: 1: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: 2AANfgojzNs2KgFLagRbsie6dmBbPfiM9KVGjMS8clo=) 2: B0NZnOPP2h8oD-RNqJ-Ta2yq_Fc.roa (hash: hPfH3C1Uf5sAxbquvsid9TZ9qowMzn90bG/96XgZCYg=) 3: S1RfsmJWrTSVYn0bgLgV6uSGS9o.roa (hash: 6GW/YM8KanThjvsOobmtnnsY2uWqxmk/1xhOzheXoh8=) 4: SO2aAnB4S5yHRruYM18XroAhS7s.roa (hash: Pz0dkuO54GBo11/DomEvI/BTZKCMV4IWlZC7klvn2ps=) 5: S_UvXYrcwi02mD9XS72xM5GP0XM.roa (hash: tDWixxPYWWKm64Sflrs16Hs5q2OnmoXj3QlJNoGIgAE=) 6: UF3Vre6C-2uWPd901r4ODYt5AHA.roa (hash: eNmvyxetTd0QVI6G0VkpJaSR8G25jRhf1MP+bDcaMic=) 7: _ZvG0PlF42L37wxQnyxCZfeMoAM.roa (hash: Z8GPW7jOAC9/r+ylozkesuGuO/RAGB5R1mOtBovFWng=) 8: jXLpkBBRrrRHjLoA0K-cw--pBrA.roa (hash: RDhF74MSc3oQL4ctthS0IBCNFsLyipPZpShGGlt9FTc=) 9: oZWWF5zyx5ocTW76AkaqmRcZRbc.roa (hash: Md76ioroY7UyB9QPN3x3zrcMAb6sqenqdiEF83Lxjww=) 10: wG4o-qI2-SFDukKFY7nO5neU430.roa (hash: yujHQG+kbMes0VhHuaufvfh3r/oBAVTjRJJ1+dXsMPA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 14:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:d7:65:40:f4:87:6e:18:e8:56:ea:82:b4:0c:09:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Validity Not Before: Jun 28 14:00:58 2025 GMT Not After : Jun 29 14:00:58 2025 GMT Subject: CN=1acfaec8fd9ca7750bbfde08e3ef57f1f51944e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f1:23:ca:df:74:fb:e3:aa:06:4c:a3:af:41: 82:ef:ed:fb:a4:aa:d6:81:60:84:cf:b0:d9:80:18: 30:0d:c2:c2:49:1f:6a:9e:c2:3d:78:12:1e:d9:1a: 08:31:bc:a4:5d:ff:9e:f0:fe:8d:7b:fe:9f:e4:37: 13:74:d5:c8:77:05:9b:8a:1e:d0:3e:73:bc:86:bb: 04:4b:32:ba:06:1d:66:7a:b4:6e:74:77:8c:4c:83: 7f:3e:2f:66:93:33:b4:f1:22:40:04:f1:ca:83:fb: 61:ad:15:28:d2:11:70:3d:ba:94:92:62:57:44:63: a4:24:82:2b:4f:63:dd:7b:3b:4d:6f:b3:f3:54:6a: 60:0c:76:8d:50:59:1f:73:33:5f:1a:17:77:e1:85: e0:cc:45:ee:84:ee:6f:ad:03:82:d2:1f:2a:f5:33: 26:ed:10:62:51:65:65:59:8a:30:09:1e:e6:34:fc: 62:39:69:44:a3:e3:57:93:c9:53:e0:7d:71:b0:ca: 94:53:d6:91:66:aa:73:ec:68:46:db:87:fa:46:a6: 3f:28:0c:3b:a7:4e:c1:37:81:17:8f:b6:2f:78:e9: eb:b7:88:e5:15:a1:71:40:1d:d0:d0:c4:5b:1e:38: e6:3f:26:55:ce:21:fa:eb:16:a5:6a:4a:a8:4c:db: 30:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:CF:AE:C8:FD:9C:A7:75:0B:BF:DE:08:E3:EF:57:F1:F5:19:44:E8 X509v3 Authority Key Identifier: keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:9d:8a:68:08:5f:2d:06:ba:c0:5d:70:d3:19:80:9d:0b:d5: 7d:c1:5a:0c:75:21:7f:8d:75:6a:22:bc:a0:0b:17:48:f5:06: c8:e5:9c:f9:d8:0b:fb:e7:46:90:3e:2e:a9:14:17:6c:21:2c: bc:ec:f1:76:28:c2:80:87:c0:83:e0:c2:5b:47:c5:51:ee:d1: 22:cd:a8:c0:8f:34:58:d8:c7:ce:12:bf:92:e5:54:ed:e6:74: 49:a6:e0:25:4c:5d:24:f6:ef:c7:ed:b3:3d:f8:15:30:5c:cc: ae:1c:62:46:fd:ac:73:83:39:66:17:d6:e6:3a:ed:5f:8b:f3: 63:ee:17:81:83:c2:b8:6c:5c:8a:92:2c:ed:ad:07:d6:78:3e: f6:38:d3:77:e8:7c:f0:72:46:ba:45:7c:89:eb:65:df:8e:e3: f1:75:cd:59:7e:38:57:20:65:9f:ba:dd:84:8b:cb:20:0e:3f: 89:22:25:a1:52:2a:d0:ad:a2:50:59:5f:85:ad:3c:e8:e6:40: 8a:63:62:4f:01:fe:d1:d5:f9:51:3e:20:b8:3c:ea:81:26:83: 6a:af:a2:98:d2:64:d8:a0:8a:f8:0e:67:b1:c0:59:04:1e:88: 56:e6:e8:3f:f9:2a:73:c3:f8:04:ac:67:cd:2b:78:02:8b:d8: 91:ab:7b:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe212VA9IduGOhW6oK0DAkEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw YjVjN2MwHhcNMjUwNjI4MTQwMDU4WhcNMjUwNjI5MTQwMDU4WjAzMTEwLwYDVQQD EygxYWNmYWVjOGZkOWNhNzc1MGJiZmRlMDhlM2VmNTdmMWY1MTk0NGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vEjyt90++OqBkyjr0GC7+37pKrW gWCEz7DZgBgwDcLCSR9qnsI9eBIe2RoIMbykXf+e8P6Ne/6f5DcTdNXIdwWbih7Q PnO8hrsESzK6Bh1merRudHeMTIN/Pi9mkzO08SJABPHKg/thrRUo0hFwPbqUkmJX RGOkJIIrT2PdeztNb7PzVGpgDHaNUFkfczNfGhd34YXgzEXuhO5vrQOC0h8q9TMm 7RBiUWVlWYowCR7mNPxiOWlEo+NXk8lT4H1xsMqUU9aRZqpz7GhG24f6RqY/KAw7 p07BN4EXj7YveOnrt4jlFaFxQB3Q0MRbHjjmPyZVziH66xalakqoTNswsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBrPrsj9nKd1C7/eCOPvV/H1GUToMB8GA1UdIwQY MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt MWY1NDMxZTJhNWFmLzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJ2KaAhf LQa6wF1w0xmAnQvVfcFaDHUhf411aiK8oAsXSPUGyOWc+dgL++dGkD4uqRQXbCEs vOzxdijCgIfAg+DCW0fFUe7RIs2owI80WNjHzhK/kuVU7eZ0SabgJUxdJPbvx+2z PfgVMFzMrhxiRv2sc4M5ZhfW5jrtX4vzY+4XgYPCuGxcipIs7a0H1ng+9jjTd+h8 8HJGukV8ietl347j8XXNWX44VyBln7rdhIvLIA4/iSIloVIq0K2iUFlfha086OZA imNiTwH+0dX5UT4guDzqgSaDaq+imNJk2KCK+A5nscBZBB6IVuboP/kqc8P4BKxn zSt4AovYkat7Ug== -----END CERTIFICATE-----Generated at Sat Jun 28 20:28:37 2025 by rpki-client