$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft File: RbvSGTZCUwoBf08cvlYuIXCz370.mft (raw, json) Hash identifier: QPbD5P9f5fwK2MZr8vVPstgY8YUzut7E95NS+MY9NFQ= Subject key identifier: CE:75:3F:63:68:0B:89:6F:B5:F2:FC:93:08:02:B5:98:2A:EE:27:9C Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD Certificate issuer: /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd Certificate serial: 0197B7EA8071865E0DF8479BB10F6C36C80E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft Manifest number: 0DAF Signing time: Sat 28 Jun 2025 19:01:28 +0000 Manifest this update: Sat 28 Jun 2025 19:01:28 +0000 Manifest next update: Sun 29 Jun 2025 19:01:28 +0000 Files and hashes: 1: 6ZnfS565qYdUchLZCkFU7aS7slQ.roa (hash: 4t6UU9aRgFRSLJBVwUMaRIV03s5+6yeuigVjxM6Ktp4=) 2: 84g9kcbpLMOYWyAe0WNiCfk8rQ0.roa (hash: Op4AJknS0Y4sLCSDEIKA+ch9xkPiEHCr8XwgBypEB5o=) 3: RbvSGTZCUwoBf08cvlYuIXCz370.crl (hash: bLyxrIT8OPAQQPhxsYTZoLaRx5rC0nGRv+a4+ZVUlQI=) 4: TApodEY8028DyJXWycbZvpKO2JY.roa (hash: U9oKSIIosuWZsZ0CYqCvqcMf8wzWuI0iOJauh9nwcac=) 5: U99JCnG6IDDb3fPb5RJU5lmsye0.roa (hash: X/Q6Sj4Oee6V3+wleBrfWWmYoSOrW6XOkN6eZj48NGo=) 6: UHhBspaFN4Wz4SsUMP7fb9tfT4w.roa (hash: 50TOVRcOrToHPoin6f4jkSxKeLPlDyklnbx1BFOMka4=) 7: _VXztWjIE0ZPwEUQdhYZ-DOYwQo.roa (hash: 185UhIin1qWAIQbRLAq/SfnBaaaHig76ZL9WselXS2I=) 8: bVG91rh6vJ7orCrWLltzoEytWu0.roa (hash: 6UY0Ua8DXjS9JwbhBNdYqbLcTNFaiJVgT0ORPNoYM64=) 9: d4dd63YvMop2w-g3LON2FgQkXGs.roa (hash: wFE27Pfyu6wjdlPpwECWgbJf/SI7T3ch1qMqz+WQODE=) 10: r5ZgGaHKIkFsDW5OTwwhK4tgAsQ.roa (hash: jLmSUGri8N356kUEE/tygoNrVgGIX4EqiZgEZdk/J6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:ea:80:71:86:5e:0d:f8:47:9b:b1:0f:6c:36:c8:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd Validity Not Before: Jun 28 19:01:28 2025 GMT Not After : Jun 29 19:01:28 2025 GMT Subject: CN=ce753f63680b896fb5f2fc930802b5982aee279c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:40:c1:3d:83:ef:c7:39:9d:dc:46:ac:f6:29: 86:ab:86:f6:b5:7e:f5:df:0a:b5:49:f2:47:e3:4d: 1d:8d:c1:7b:b7:f1:6a:07:47:00:68:b2:0e:f0:0f: c3:74:06:3e:f5:96:b6:3b:86:b1:cf:f4:d0:39:56: 6d:fb:8b:85:20:97:85:c9:87:ee:1d:47:38:3f:0a: d6:10:01:9d:0a:79:99:43:b7:b1:53:40:af:07:ac: 61:34:1c:5d:d7:e8:26:9a:55:67:a6:64:53:d7:3b: f3:d3:18:fe:1f:8c:2e:7c:96:f3:1c:63:aa:ab:36: 6a:32:f4:10:4e:af:5d:96:86:8f:1f:8b:81:57:84: f3:e1:9a:53:e4:62:6f:ec:dc:27:00:4c:62:85:44: 20:0e:4c:a2:f9:34:d4:c4:74:a1:60:79:59:8a:7f: 0f:20:b2:12:c1:c2:c9:63:4b:eb:e5:dc:43:56:26: f3:4a:bc:2b:51:90:d5:cc:03:04:3e:22:0f:41:e5: 36:12:a5:3c:b9:58:4e:2e:07:dd:81:bf:35:b5:f5: 9a:53:91:ab:10:2a:01:d6:9a:36:75:fe:b8:76:1d: 49:1f:18:75:30:fc:7b:5c:00:e5:ea:0f:6c:fc:0b: e7:9c:be:5c:27:1e:50:f7:94:ff:cd:42:41:63:83: 73:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:75:3F:63:68:0B:89:6F:B5:F2:FC:93:08:02:B5:98:2A:EE:27:9C X509v3 Authority Key Identifier: keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:51:aa:a3:34:55:8f:8b:e4:58:4c:07:2f:a8:25:55:a8:2a: 53:aa:43:85:da:42:87:c4:ea:50:2c:41:84:40:0d:31:1d:a3: f8:d6:43:d2:bb:e1:e3:1f:7f:8b:2f:0a:91:92:15:80:93:0c: 23:d0:75:37:a7:e7:ba:aa:43:7f:14:eb:3a:63:40:02:33:db: b4:59:98:81:07:fd:51:e7:36:6c:f0:37:82:61:22:9a:ee:61: 9e:51:3a:7e:fb:3e:08:72:1d:94:69:07:7d:10:7a:b2:c0:19: 2a:c5:87:76:9a:60:a6:6b:37:eb:4f:90:e2:26:f5:38:ad:2a: 00:45:51:53:fe:d4:66:cb:fd:55:7f:b2:65:3e:69:9a:02:8c: 45:9b:e5:60:ac:7b:a3:68:6e:9a:d9:e4:64:27:10:6a:e8:e7: 17:7b:17:47:90:95:2a:1a:8a:73:05:e9:5c:5e:89:13:35:90: 5f:2a:9b:a8:94:7e:92:19:10:73:21:99:18:fa:c4:22:a0:ea: d7:79:82:5d:92:9b:84:b9:c4:e6:1e:34:6a:9c:c9:33:b7:3e: 9a:39:49:19:13:33:4b:b9:e0:49:cd:85:0a:10:74:c5:15:5c: d0:e1:08:26:9c:91:48:09:54:8b:50:18:6e:d3:e1:ef:31:65: d1:30:8f:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe36oBxhl4N+EebsQ9sNsgOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1YmJkMjE5MzY0MjUzMGEwMTdmNGYxY2JlNTYyZTIxNzBi M2RmYmQwHhcNMjUwNjI4MTkwMTI4WhcNMjUwNjI5MTkwMTI4WjAzMTEwLwYDVQQD EyhjZTc1M2Y2MzY4MGI4OTZmYjVmMmZjOTMwODAyYjU5ODJhZWUyNzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUDBPYPvxzmd3Eas9imGq4b2tX71 3wq1SfJH400djcF7t/FqB0cAaLIO8A/DdAY+9Za2O4axz/TQOVZt+4uFIJeFyYfu HUc4PwrWEAGdCnmZQ7exU0CvB6xhNBxd1+gmmlVnpmRT1zvz0xj+H4wufJbzHGOq qzZqMvQQTq9dloaPH4uBV4Tz4ZpT5GJv7NwnAExihUQgDkyi+TTUxHShYHlZin8P ILISwcLJY0vr5dxDVibzSrwrUZDVzAMEPiIPQeU2EqU8uVhOLgfdgb81tfWaU5Gr ECoB1po2df64dh1JHxh1MPx7XADl6g9s/AvnnL5cJx5Q95T/zUJBY4NzEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM51P2NoC4lvtfL8kwgCtZgq7iecMB8GA1UdIwQY MBaAFEW70hk2QlMKAX9PHL5WLiFws9+9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmJ2U0dUWkNVd29CZjA4Y3ZsWXVJWEN6MzcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jZmZmZjgtMzUzMC00ZTViLWE1ZTIt Yzc3OTA1ZmJiYTdiLzEvUmJ2U0dUWkNVd29CZjA4Y3ZsWXVJWEN6MzcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9jZmZmZjgtMzUzMC00ZTViLWE1ZTItYzc3OTA1ZmJiYTdi LzEvUmJ2U0dUWkNVd29CZjA4Y3ZsWXVJWEN6MzcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFGqozRV j4vkWEwHL6glVagqU6pDhdpCh8TqUCxBhEANMR2j+NZD0rvh4x9/iy8KkZIVgJMM I9B1N6fnuqpDfxTrOmNAAjPbtFmYgQf9Uec2bPA3gmEimu5hnlE6fvs+CHIdlGkH fRB6ssAZKsWHdppgpms360+Q4ib1OK0qAEVRU/7UZsv9VX+yZT5pmgKMRZvlYKx7 o2humtnkZCcQaujnF3sXR5CVKhqKcwXpXF6JEzWQXyqbqJR+khkQcyGZGPrEIqDq 13mCXZKbhLnE5h40apzJM7c+mjlJGRMzS7ngSc2FChB0xRVc0OEIJpyRSAlUi1AY btPh7zFl0TCP3A== -----END CERTIFICATE-----Generated at Sat Jun 28 20:22:46 2025 by rpki-client