$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft File: 0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft (raw, json) Hash identifier: lvpi6UlvXXqBrkncRT0O9rYuQrBM1UldVv0XYGPaMjY= Subject key identifier: 9D:D9:1F:83:F8:48:29:96:0F:EE:F0:1B:DF:28:5E:27:9D:CC:CC:31 Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 0197B70F09F2F892211E6649707E2F88D728 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft Manifest number: 15E8 Signing time: Sat 28 Jun 2025 15:01:45 +0000 Manifest this update: Sat 28 Jun 2025 15:01:45 +0000 Manifest next update: Sun 29 Jun 2025 15:01:45 +0000 Files and hashes: 1: 0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl (hash: gO/Dllkw46V/ItTxO3Ysw1wonXo5K44IoxZBpwz2+xY=) 2: 1U6WyMqsZGid0T3NYQ9DAZ6gJQY.roa (hash: F8XNKrvuc9Q1Nu4SwuceqF3nF6Xwjfiv6CKLGF36N9o=) 3: 1kQumq_e6uZMuznoqft2SVzuZ3Q.roa (hash: O5Pgdgj19C5uGPu9CgP8o2xOs0u0sxX5vxusIg1OjbY=) 4: AOzgmFptP-TTohv3IqoDSstHBco.roa (hash: E03eZxbf/EuXdLKDt7qVPONNosnX3JMcim9Rf3ahviw=) 5: ARYdkedt9hArm1X7hp83_Cg5tpQ.roa (hash: JuBJSBaOkvov17EXCYN32IfgGgf0k5Tgl6lj874nn5w=) 6: DF4R54GK1qwRWFDBGUSLGBLlvGQ.roa (hash: hSV4Oh/5jJRGVFTBAtkBDd7jCrElG8uSHu25zzZr1Fg=) 7: GkHiDHIr7HTOUId4AyJatL1OA68.roa (hash: ry2bBxXk4C9dBw82DZVtUnDVRsGRjPykl7o+jmf06RM=) 8: I5QYvq4IicclfQWoviXNqVkoJ1Y.roa (hash: 5MBWFEJVGuF7S46IjtmTYb6qp1cvuLGpPvqKkXBXql8=) 9: JD10CY-i84YcUMqJlGDowbidmN8.roa (hash: XMDhrcZoGK5i42ls2n+Jvun/2Ta8y4audrWdpm2Fv7o=) 10: MzqzArxAJAkfONxRw-qlxwpo-WA.roa (hash: gVgkd0vEVneDHuJdUVE4MgW7pXSiw6x+VScHKlglHnQ=) 11: NfUnQ-O42D51XKIYtUM-enrgq28.roa (hash: QhgxpbRg3wpHFfse32zYgTIu0IaNj22usVCm4EOvDbg=) 12: NjLk2e2zqXQskhSwEvgc6VrieSE.roa (hash: /tSrJbpm+cVRf2wVaaTrsH5ognA/ZAO3z9nKKazqJL4=) 13: Nv12FFJAhm76vmtQvLtk0-qb9uU.roa (hash: GWYX+UV7jTRToJvscvGnDmcfi+hdjE9fs/PSDIO/qXI=) 14: PVvGYWt24uzVlwnsAFMPqAtNvZQ.roa (hash: jUjkhiHyuibAHI/mM+xTuAPWbIQGwY5NVpAGVowuUvU=) 15: REFW6rSHBTfRsUnwOYyR16B8o0I.roa (hash: XB70ye/c1KysdH/4/hccAGTbjaBXhCjgy7hTvmJtugk=) 16: TFiXnA69SUIjZxShh655vlYs5os.roa (hash: iue8xNO+FBfmf0WBI+KQBXMK4ZDijvqm8QzG1kL5NP4=) 17: UL_XqoqGTTWGEVhImq5X-9zOVrE.roa (hash: g+ulsD4HEDP8q2GNuKa/nIFiaIn0ZbF6fYEGT+Sdri0=) 18: VWY8XiWq4Jote7W-6rigfrKoiY4.roa (hash: ON7HuggQtcTWGIVCoLH7d6Q/DUJJsZCop+RTdEiL82o=) 19: X_FL5W5PaBcXLOauRMxOwRuyYlc.roa (hash: kCKDT8tcDr1dP8XE79tCmIW9bJ4NTTFNxriENFz7kC0=) 20: Xdb2GonGqu9DkyPtW1xL_ewg_Bo.roa (hash: GVGr4S1zTr+dNdiuuONrJJ2q6Nn0ihVO0n5qN0zw/pQ=) 21: YI7BsdHWBwifx7Kt01-_ncEUcHY.roa (hash: HVOFDOE8MHZk+bxGzUoBn72CCZUrO9pspE6LqId/iqE=) 22: ZiVprlwwAp8Ov7zgsZNSwSGIkuc.roa (hash: Tk3A5shWtfiSwwuDcCc68dVXd7yvds9RfjT7MSIEjKQ=) 23: _YFT4hVNYyXh4lnoEwOwHf8FvbM.roa (hash: tlgEY6jYUU+UF0+FT6gUJlgYou8+Ams7PkVw5ofCpx4=) 24: agXt9_lVvCGbqZ8zrKKiS_mUy2E.roa (hash: 3LDkltUt39lyuNt50RL0JrUq8hhCsHNy15R/1YCL/Vw=) 25: b77IgHc-0C0Rr_dfvuGtS4avGl0.roa (hash: pUFCLnY0Uuj86mPeajrETTuvcuysKr2jMpqMVsvwa6w=) 26: eYF3k2wyfF4T5aDW_Us7bP66Ee4.roa (hash: qJu+C3kZMtw4Lzr4RPWfIIggz4SLZ1MdPm3V0ZSYkCA=) 27: grTxe7kxw6ZzaQqpTIbiKf1m4JM.roa (hash: i5OkfeqChX4b5A5gBGr0b6nOiJOg7XT/mMLOR9RIW50=) 28: hNrTf4PE5wrSnR7cUGP-FWLvavA.roa (hash: 419lgUmCiB5WepdJkvKnWC8TY9QzFCGf/bRs/Tt6fMo=) 29: ki55bfqHhRC77pU-EJ0EZN9IsgY.roa (hash: AccLPwD52wvMA4/Hsn0acDKYYBn7x4JHw/P1GwnYSwA=) 30: lAsvBALGAB7ffanhsI2XBbzGjwg.roa (hash: Lfmd3jAWkGrnZmmpvbr3VmK27pHIPidZbcCZnfMNIH8=) 31: nmXKG7O5Y4Y-3VQd-oJvUHMEIEY.roa (hash: qsL3cjqC+DzRSqTDxZdudYHZ+K/KlZvY/xyn2uR0PZU=) 32: tL1J0NtmUttz_rcwHxLnXK2PdPo.roa (hash: PUWwC8StzaLGZf41J8Z9nZ+2ZJF8MbN2VoLzOJM1nEg=) 33: u3IeL1WtwZrppYb7gzyGvxoAWq4.roa (hash: u4/0Flhb+g2HVbYnU4CFZNSkHaVHi6ldxHLZ21W79Xw=) 34: xUXBE40oIxonI2rdk7VzQpzz0LE.roa (hash: ntMdjj60VVTzKWDb11pY1Uxeklwz6iMkL+l3QqN6Y/E=) 35: xeZzF4kLsUeSGRaVWSM2Yl0MJyw.roa (hash: lnF7laQENq7wiyRjfsr7hJCvC1X60Wd/Bj27GtnwCQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:0f:09:f2:f8:92:21:1e:66:49:70:7e:2f:88:d7:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Jun 28 15:01:45 2025 GMT Not After : Jun 29 15:01:45 2025 GMT Subject: CN=9dd91f83f84829960feef01bdf285e279dcccc31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:29:86:f1:00:f8:41:15:9a:67:85:ba:a6:5b: 3b:62:f0:30:0e:d6:fa:ae:1b:b9:9d:cd:7a:22:09: 7f:d6:47:5c:4e:77:c3:9e:e4:15:7e:a2:6f:0c:4f: 51:71:3f:5d:29:f0:b6:9c:06:5b:83:25:90:35:e1: 48:ff:06:07:2e:98:28:e1:4b:bc:2c:40:11:84:66: 61:ff:b8:d3:48:a3:a2:f1:bd:ec:bc:5e:8a:e7:b2: 27:24:8f:1f:57:bf:dd:64:fe:32:ff:d6:d7:00:cb: c4:e4:56:2b:97:60:8f:47:da:ae:25:d1:43:65:07: 5f:3f:6a:86:12:87:64:34:0e:45:17:d0:73:79:68: c4:b4:5d:f2:15:39:a2:42:c9:a5:38:7f:da:a9:e5: 58:b7:ae:63:3a:ae:70:d8:a0:75:97:ba:03:fe:00: b1:6c:18:c9:f7:8f:cf:fd:2b:9c:93:b6:db:a7:e5: d8:02:d5:dd:14:c2:5b:c3:8b:e6:0c:03:b6:5f:d5: 7b:3a:14:ae:6e:ef:15:13:7e:14:d0:40:cb:22:f8: fe:56:15:f5:6e:88:79:86:99:71:7e:52:6d:17:99: 65:c6:14:e7:38:2a:c0:a8:ad:d2:73:2e:6c:80:34: d9:6e:e8:f6:46:8b:7f:d5:b1:12:00:57:33:6b:fd: fa:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D9:1F:83:F8:48:29:96:0F:EE:F0:1B:DF:28:5E:27:9D:CC:CC:31 X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:99:bf:bb:2b:bf:15:ae:91:8e:f8:fc:c5:99:06:90:a0:76: 15:49:e7:9d:22:46:11:f8:86:65:c2:85:c7:a7:78:54:2d:83: 47:8b:4e:22:17:e3:22:bc:11:50:36:06:29:0a:49:57:9c:14: c0:f6:d0:6f:ee:a8:99:2e:c7:af:1a:c0:42:4f:f4:df:d1:bb: 45:35:a1:0d:f1:4b:3e:ca:a4:c7:b3:b1:c8:b9:d7:0a:f3:45: 54:97:87:e6:1f:5d:7f:84:6b:03:ac:da:90:bf:ef:ea:90:07: da:43:aa:88:cc:f3:6f:0e:44:3b:21:39:32:36:61:c8:b4:46: 47:51:97:4d:58:82:6b:12:a4:71:3f:af:3e:16:56:59:a4:34: 14:cf:44:6b:e7:59:f9:9b:20:67:32:c5:02:c6:c0:6e:12:58: 22:65:67:a1:9b:9d:96:7b:d4:a3:c5:46:00:20:be:82:dc:41: 8b:1f:e9:d3:e2:69:93:37:1e:f9:cd:2b:03:7f:17:ae:fc:16: cf:9d:f1:73:a0:75:52:d9:3e:88:56:34:65:61:4b:29:a8:37: ca:6a:44:17:a1:bc:f3:78:7b:33:ae:06:fd:02:81:27:38:1b: 13:7b:45:42:d8:0f:ab:b0:05:92:0b:36:78:58:ea:27:91:bf: f4:5b:3e:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3Dwny+JIhHmZJcH4viNcoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjUwNjI4MTUwMTQ1WhcNMjUwNjI5MTUwMTQ1WjAzMTEwLwYDVQQD Eyg5ZGQ5MWY4M2Y4NDgyOTk2MGZlZWYwMWJkZjI4NWUyNzlkY2NjYzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SmG8QD4QRWaZ4W6pls7YvAwDtb6 rhu5nc16Igl/1kdcTnfDnuQVfqJvDE9RcT9dKfC2nAZbgyWQNeFI/wYHLpgo4Uu8 LEARhGZh/7jTSKOi8b3svF6K57InJI8fV7/dZP4y/9bXAMvE5FYrl2CPR9quJdFD ZQdfP2qGEodkNA5FF9BzeWjEtF3yFTmiQsmlOH/aqeVYt65jOq5w2KB1l7oD/gCx bBjJ94/P/Suck7bbp+XYAtXdFMJbw4vmDAO2X9V7OhSubu8VE34U0EDLIvj+VhX1 boh5hplxflJtF5llxhTnOCrAqK3Scy5sgDTZbuj2Rot/1bESAFcza/36mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3ZH4P4SCmWD+7wG98oXiedzMwxMB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5m/uyu/ Fa6Rjvj8xZkGkKB2FUnnnSJGEfiGZcKFx6d4VC2DR4tOIhfjIrwRUDYGKQpJV5wU wPbQb+6omS7HrxrAQk/039G7RTWhDfFLPsqkx7OxyLnXCvNFVJeH5h9df4RrA6za kL/v6pAH2kOqiMzzbw5EOyE5MjZhyLRGR1GXTViCaxKkcT+vPhZWWaQ0FM9Ea+dZ +ZsgZzLFAsbAbhJYImVnoZudlnvUo8VGACC+gtxBix/p0+Jpkzce+c0rA38XrvwW z53xc6B1Utk+iFY0ZWFLKag3ympEF6G883h7M64G/QKBJzgbE3tFQtgPq7AFkgs2 eFjqJ5G/9Fs+XQ== -----END CERTIFICATE-----Generated at Sat Jun 28 23:09:37 2025 by rpki-client