$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft File: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft (raw, json) Hash identifier: Ma15N1hBv3NFnsCKSs4AOFIOxjtmPxR6kCQrsUAtEvo= Subject key identifier: A5:7E:DA:7D:97:51:7C:DB:57:21:EC:76:5F:B1:67:8D:90:8B:19:43 Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Certificate serial: 0197B7EA80A8C597368401CD93C47E78BC90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft Manifest number: 15CE Signing time: Sat 28 Jun 2025 19:01:28 +0000 Manifest this update: Sat 28 Jun 2025 19:01:28 +0000 Manifest next update: Sun 29 Jun 2025 19:01:28 +0000 Files and hashes: 1: HG0sxwCI7w4fkh8VU0N2fcVMuLU.roa (hash: 1EixzIypMSg7Afd2h1TllH/pBszhQ8LEEsFtCe9BNAQ=) 2: SF9inl-Z2UBEp7L7rHoMTP2o47I.roa (hash: OJPpBVtZqLTjhkxtA0o0cIzlBYqPE/6vDiaXNk1Wf6s=) 3: V9THiIVArSnZ1H4kkTxosx3Tvz4.roa (hash: lUYBTWUgXaqtzw8eN2t3fS8dCvHHrGYo2Uz5MEjddRY=) 4: YkO14vUX3HHLD5m73eeF94u-z9Y.roa (hash: myJ7UTUt7mcT9gjy0mgRP7jrD85IU3fMUws/RpMjTT4=) 5: bTtf1_C9R2Bt4xdvshIG3OCVSD0.roa (hash: Z47R6cDRJGZAaj0MeG+895zHqKHcV33MIM2W9d4hC9E=) 6: c-pova8C1uulibxroeJZUgkQnv8.roa (hash: OvhwnSV+pVkr5UA9RfkEZJQ3n/9Mm7Ihqgy3rKhknz8=) 7: cdiLy2n18Y-vOIkFViZGUd7RsKM.roa (hash: /+RvQbcmllMNKfEXhyM/QGFxvrK6kosbr0fHB6H8FyU=) 8: dVPbIRfsnF_eS0blJ9Y7zNoUs7k.roa (hash: ShygWBXCmOMXv5YpTJlMJ5UYglgVh9DDoGkuss6YEGo=) 9: obNE3NdMVlCy0XPf9mK-g4oa9eg.roa (hash: 7NjsanTWQOoFeSktyUJvcMuLG2S6+z5IgmOffiI6238=) 10: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl (hash: N5yNhQxDZ+LHAgmz+/E0x2iVlRizTG+M5e83dJLkcEU=) 11: un7p1oX6IuixEnJw52S1lgp4k0A.roa (hash: zhKv5DC0Mh83opPQLWP9MGfrzkdDgqEhOQ8/1xd2cZA=) 12: vXPdTshBqnn4ghgMByB7XXaLYRA.roa (hash: f07bhqR7ZOptfaHvf20BCw3ge0IxK37mw/76h6jHsI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:ea:80:a8:c5:97:36:84:01:cd:93:c4:7e:78:bc:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Validity Not Before: Jun 28 19:01:28 2025 GMT Not After : Jun 29 19:01:28 2025 GMT Subject: CN=a57eda7d97517cdb5721ec765fb1678d908b1943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:28:26:f2:8d:d6:ba:9f:c7:e3:e5:66:b4:b3: 76:3a:e9:ec:5d:f7:24:f1:d8:50:80:9b:0c:0b:69: c2:e4:c1:43:7f:ef:96:ce:5d:45:7d:85:5a:2f:81: 2f:2a:8f:cc:bb:5e:02:a7:26:1b:35:47:a5:21:bb: 4c:09:79:74:a3:fe:26:43:81:e8:e2:73:f8:70:ce: ac:96:cc:68:74:ff:df:6d:16:b2:70:a7:45:d0:5f: c2:9c:af:93:48:76:a3:a7:8e:61:48:3f:fb:c6:3c: f9:97:ab:6d:47:9e:32:49:15:1d:c4:b2:df:8d:de: af:8b:0d:05:9c:74:ad:9e:8c:35:f5:3d:a1:7c:43: c4:b8:ee:50:2f:27:67:3c:7c:71:13:ed:f8:be:79: 50:83:ba:7e:8c:ff:8c:ef:ba:de:9b:29:b8:0f:17: b3:b8:7f:79:55:32:a4:00:d5:f2:bc:b7:de:b2:1c: 58:9b:81:59:47:4b:3c:f5:4c:99:1f:25:29:7b:19: f2:16:04:86:74:be:6c:ef:ee:6f:1a:96:ab:cc:d0: 6d:43:90:17:f1:aa:d9:93:a4:b5:4b:53:74:6a:ff: 3d:09:a5:40:65:a5:62:8b:87:8b:92:d4:64:39:55: c4:b4:2d:fa:08:3d:15:24:af:02:c0:06:44:52:da: c9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7E:DA:7D:97:51:7C:DB:57:21:EC:76:5F:B1:67:8D:90:8B:19:43 X509v3 Authority Key Identifier: keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:25:41:0f:57:8e:df:ab:4b:87:20:9f:ad:bf:1d:6c:59:71: 64:cf:fd:91:c8:86:5c:23:dc:c5:6c:5f:9f:ef:0a:31:02:07: a0:17:06:64:fd:61:b3:df:df:f7:70:7b:2c:15:d4:1a:2b:4e: 57:d5:e0:75:67:c8:c3:94:f2:e1:fc:bf:1f:e9:b6:1f:18:2d: 15:8e:e1:f6:e6:aa:0e:89:d9:d1:72:a2:87:9d:c3:b6:74:24: 5c:36:b0:83:14:b9:78:12:ea:eb:cf:48:59:e6:8b:06:7c:b7: f2:25:68:32:e5:3b:30:92:00:4a:4f:b2:7b:36:47:6d:60:cc: e1:7b:f3:28:c8:fa:b7:a1:59:42:c4:e0:4b:d1:a4:fa:c9:3a: ff:ec:b9:f4:e8:b4:36:a7:15:ef:97:0e:b4:3c:54:46:53:bf: 3c:a1:33:cb:36:64:0d:08:70:1a:92:2d:a8:a8:24:b6:cc:68: da:e7:0b:5d:2f:a8:d5:48:61:b2:45:7d:20:20:8a:73:db:56: 5f:80:95:0b:7e:47:5c:71:55:27:5b:ac:87:28:e7:c9:81:da: 79:7e:f9:90:22:1a:d0:7f:4c:10:a6:db:68:22:94:5c:c9:b2: d1:ea:fb:90:35:9e:30:52:4b:15:44:4a:51:1f:e6:6c:64:61: 98:5d:df:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe36oCoxZc2hAHNk8R+eLyQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZWUxODJkOWM0M2E1Y2U3MDY4ZGZkOWJhN2FhOGVkOTBl NWUwYmEwHhcNMjUwNjI4MTkwMTI4WhcNMjUwNjI5MTkwMTI4WjAzMTEwLwYDVQQD EyhhNTdlZGE3ZDk3NTE3Y2RiNTcyMWVjNzY1ZmIxNjc4ZDkwOGIxOTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Cgm8o3Wup/H4+VmtLN2OunsXfck 8dhQgJsMC2nC5MFDf++Wzl1FfYVaL4EvKo/Mu14CpyYbNUelIbtMCXl0o/4mQ4Ho 4nP4cM6slsxodP/fbRaycKdF0F/CnK+TSHajp45hSD/7xjz5l6ttR54ySRUdxLLf jd6viw0FnHStnow19T2hfEPEuO5QLydnPHxxE+34vnlQg7p+jP+M77remym4Dxez uH95VTKkANXyvLfeshxYm4FZR0s89UyZHyUpexnyFgSGdL5s7+5vGparzNBtQ5AX 8arZk6S1S1N0av89CaVAZaVii4eLktRkOVXEtC36CD0VJK8CwAZEUtrJswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKV+2n2XUXzbVyHsdl+xZ42QixlDMB8GA1UdIwQY MBaAFKfuGC2cQ6XOcGjf2bp6qO2Q5eC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDkt NmI1ZjY4NTIyYTdkLzEvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDktNmI1ZjY4NTIyYTdk LzEvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUiVBD1eO 36tLhyCfrb8dbFlxZM/9kciGXCPcxWxfn+8KMQIHoBcGZP1hs9/f93B7LBXUGitO V9XgdWfIw5Ty4fy/H+m2HxgtFY7h9uaqDonZ0XKih53DtnQkXDawgxS5eBLq689I WeaLBny38iVoMuU7MJIASk+yezZHbWDM4XvzKMj6t6FZQsTgS9Gk+sk6/+y59Oi0 NqcV75cOtDxURlO/PKEzyzZkDQhwGpItqKgktsxo2ucLXS+o1UhhskV9ICCKc9tW X4CVC35HXHFVJ1ushyjnyYHaeX75kCIa0H9MEKbbaCKUXMmy0er7kDWeMFJLFURK UR/mbGRhmF3fIg== -----END CERTIFICATE-----Generated at Sat Jun 28 22:52:18 2025 by rpki-client