$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft File: uRuRUEmDCRUGoalERXpFWLlNq38.mft (raw, json) Hash identifier: kDg5ppKPF0ZHSI5v7k1VZF8FCC+qHgM7qunm9zMCBNw= Subject key identifier: 57:4B:7B:10:A7:81:B1:25:D6:D6:57:E9:B9:ED:22:59:7A:90:FF:6C Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f Certificate serial: 0197B77C17063D51D5AAE8C5E5B5E5CD92DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft Manifest number: 15E3 Signing time: Sat 28 Jun 2025 17:00:52 +0000 Manifest this update: Sat 28 Jun 2025 17:00:52 +0000 Manifest next update: Sun 29 Jun 2025 17:00:52 +0000 Files and hashes: 1: 3cHkY6M3wghqy0E4fRU4kWGrFkQ.roa (hash: PisxdaF0q8E/ZaKxH7iqkdJWp2eWRH5HsNlfuhmL4YA=) 2: 7XN9wyggBJAAN_phHgYk5ZELjD4.roa (hash: 1wlvTE3rEqXXANBSrqvKUfV7fo/KmcUcs6Xsp62Q0YQ=) 3: CkF_shnLM2M31f9NtC6ofpAehWk.roa (hash: 9XHscVm5GJVGw7mr6oC1JuCI9DQ/dY6py+7xzxUKvgw=) 4: FFJ257cuWQvQOnyedneEzTkSEbg.roa (hash: WRIXzHulc7/3HRlvOUiBPW1I+RRv7EFQWc42kqGWgNE=) 5: RwtCVfFtaPV9RdeIV0kETaXiDzU.roa (hash: qGOs1nAXRnai3SqF63Pp3mOz35yOks9UR3jXK1Ksk+Y=) 6: V-ySkVo6AJD2k7bi0FwLmTw722g.roa (hash: ZQrxU4+RIDKWDuYxdvlV6VUP5fCT7nrPCzOEdrO784k=) 7: mK9ZGFT5MRus9cd9-ZHukBxXa70.roa (hash: bC9fcVsfywX7XSxHtFk/otbdEOU3pNXnqoILIEhH/LY=) 8: oicr-SH4uj1bEvnrrwUj7ri66GU.roa (hash: 1OP0Bnk8WtUk8p0pkwFceXgNGqSThNnA6BUw75ZT3Jk=) 9: uRuRUEmDCRUGoalERXpFWLlNq38.crl (hash: djLQv0gvtbFgKSRe8ywJrPl6RI3hXpUbEBDP5ksLj2g=) 10: wm1WVUXT9pVUrbgtuvUJjNCw7HI.roa (hash: 4A93zZwDOnQwirXpLmuckQTZrNNze07clVzbWfefS6s=) 11: ytRifUfzPmLAaJXJ2__CJPys9bo.roa (hash: 0HrxV+TBxPYNRPY94lk9XCsut+8XflFKvCHLDKEzYNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:7c:17:06:3d:51:d5:aa:e8:c5:e5:b5:e5:cd:92:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f Validity Not Before: Jun 28 17:00:52 2025 GMT Not After : Jun 29 17:00:52 2025 GMT Subject: CN=574b7b10a781b125d6d657e9b9ed22597a90ff6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:95:cf:42:e5:64:d4:6b:ea:4a:3d:af:56:f9: 22:18:a3:c2:cc:b4:7a:84:cc:8b:40:f7:2e:4f:1c: e4:25:0f:b6:38:1e:1a:a9:47:21:22:d8:74:6d:79: 7f:b1:66:60:c8:bb:9e:b9:a8:e2:54:c2:41:ac:44: 79:85:36:05:58:14:23:93:f1:af:66:46:ce:18:b9: 07:f8:43:f1:59:de:33:52:e0:be:55:f5:8b:b9:68: e2:27:a9:8e:66:be:9c:a4:b5:69:75:e7:b0:83:63: 38:71:10:c1:b3:31:d8:00:3c:b5:b3:eb:17:de:0a: a9:7a:9a:c0:e9:16:28:6f:a9:e8:8b:c8:ba:79:70: 43:62:bb:d4:bb:26:c9:5f:ef:18:b0:a6:4e:c0:34: 97:9e:3a:21:fc:be:b4:15:a5:54:a9:a7:14:49:a1: 05:93:dc:50:09:73:76:32:52:6e:94:c5:9c:63:f7: a0:d4:60:23:83:88:e7:a1:8d:cd:98:2e:c9:1f:2c: 54:62:12:17:f8:99:8e:9f:04:eb:ee:bf:4a:17:f4: 46:43:c4:e4:a8:e9:6b:62:3d:27:4e:2f:13:86:98: 61:e8:e3:95:40:15:46:5f:f9:12:18:ff:9f:e6:8a: df:4d:2a:d0:dc:4b:c8:ed:62:80:21:2e:03:d3:24: ca:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4B:7B:10:A7:81:B1:25:D6:D6:57:E9:B9:ED:22:59:7A:90:FF:6C X509v3 Authority Key Identifier: keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ea:82:eb:96:fe:73:6b:b7:f0:9d:bd:58:de:f3:9f:64:38:e6: 78:78:82:58:85:e4:ae:4f:42:61:92:ac:39:9b:9e:48:fc:9e: f1:58:ee:9e:a0:cc:a6:fe:b0:71:1d:0a:d5:70:65:30:b3:44: ff:7f:94:fd:40:41:d0:0c:70:ae:d7:dd:65:fe:d9:8e:9f:86: 60:c5:1e:96:58:1d:74:13:4f:c5:a8:b1:87:f7:34:cf:18:db: 94:3b:70:40:f5:51:eb:b7:9f:64:0f:95:54:ae:5f:20:c6:76: af:4d:96:2b:15:a3:4b:c8:3f:bf:02:2f:09:c6:98:4d:3e:3d: 15:3d:ef:e9:48:09:e0:69:17:3d:e3:cd:49:b3:a9:93:56:76: c5:ea:63:73:d6:51:50:8f:86:5e:6e:ed:8a:1f:94:76:91:f3: d7:24:98:ea:32:3d:a6:11:e0:52:e5:f7:d4:aa:e5:0d:82:1a: ac:58:aa:50:6f:85:f6:5b:f5:16:20:54:7b:d9:60:2c:2f:09: 0b:9f:c0:31:90:3c:d4:72:49:dd:27:b1:14:34:6a:48:75:79: fd:d4:47:f0:d3:70:26:8f:e6:01:35:d9:7c:7b:ee:18:74:1f: d3:17:b7:73:fc:02:4d:73:f4:d1:cf:95:1c:f2:5e:f9:c2:86: 61:ff:ba:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3fBcGPVHVqujF5bXlzZLcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0 ZGFiN2YwHhcNMjUwNjI4MTcwMDUyWhcNMjUwNjI5MTcwMDUyWjAzMTEwLwYDVQQD Eyg1NzRiN2IxMGE3ODFiMTI1ZDZkNjU3ZTliOWVkMjI1OTdhOTBmZjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JXPQuVk1GvqSj2vVvkiGKPCzLR6 hMyLQPcuTxzkJQ+2OB4aqUchIth0bXl/sWZgyLueuajiVMJBrER5hTYFWBQjk/Gv ZkbOGLkH+EPxWd4zUuC+VfWLuWjiJ6mOZr6cpLVpdeewg2M4cRDBszHYADy1s+sX 3gqpeprA6RYob6noi8i6eXBDYrvUuybJX+8YsKZOwDSXnjoh/L60FaVUqacUSaEF k9xQCXN2MlJulMWcY/eg1GAjg4jnoY3NmC7JHyxUYhIX+JmOnwTr7r9KF/RGQ8Tk qOlrYj0nTi8Thphh6OOVQBVGX/kSGP+f5orfTSrQ3EvI7WKAIS4D0yTKzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdLexCngbEl1tZX6bntIll6kP9sMB8GA1UdIwQY MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct OWRkNmU4OGZjYzhkLzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6oLrlv5z a7fwnb1Y3vOfZDjmeHiCWIXkrk9CYZKsOZueSPye8VjunqDMpv6wcR0K1XBlMLNE /3+U/UBB0AxwrtfdZf7Zjp+GYMUellgddBNPxaixh/c0zxjblDtwQPVR67efZA+V VK5fIMZ2r02WKxWjS8g/vwIvCcaYTT49FT3v6UgJ4GkXPePNSbOpk1Z2xepjc9ZR UI+GXm7tih+UdpHz1ySY6jI9phHgUuX31KrlDYIarFiqUG+F9lv1FiBUe9lgLC8J C5/AMZA81HJJ3SexFDRqSHV5/dRH8NNwJo/mATXZfHvuGHQf0xe3c/wCTXP00c+V HPJe+cKGYf+6ng== -----END CERTIFICATE-----Generated at Sat Jun 28 21:39:29 2025 by rpki-client