$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft File: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft (raw, json) Hash identifier: QsoEG8VZxpfRycE8dT8ynXqfM5mZ6QwaL/obF4Mv2VU= Subject key identifier: C6:56:48:16:9D:93:93:89:1A:B4:1E:9C:CF:1F:49:4C:02:CD:D1:D4 Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Certificate serial: 0197B7B382BBB091262651608C407D4B330F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft Manifest number: 0FBF Signing time: Sat 28 Jun 2025 18:01:24 +0000 Manifest this update: Sat 28 Jun 2025 18:01:24 +0000 Manifest next update: Sun 29 Jun 2025 18:01:24 +0000 Files and hashes: 1: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl (hash: K49mFDLthnHLrtEIKehHEWKCNQDoV+tV+idD8qi4fpw=) 2: 7KfLp6tWihAhdW_ZCJGaxH-KxhA.roa (hash: TNNFwSmMyWVi4jN+jvMQ3wmmO3p3q2BXU7y9CZpeBFo=) 3: 8GeGNNzjzZvJIEAAhJi9tW2bbrA.roa (hash: Eto9TySCaxnkkdyIGeX6PMXh8s89OGTNecNbv02FHmY=) 4: BinZKeyg5gKkO8gwYJ0Ze8CeRxs.roa (hash: y9nENbUlBNsJYj+Cw11EQBzVD35m8OwMSWBUyRfdWao=) 5: CWwZKtjic8hgoUqW8Q2C2AbAOcg.roa (hash: kwrireSUCM8B5X7b/jFwe6owVISrGhqj47+KxFuhlXE=) 6: JS3mwrKoM_bu1YlMg44SqBJyzi4.roa (hash: FctYPf15GQv8egu27KZUZZfAkIishBp5/PDkotJF9Wg=) 7: ZEh3Y_7VDHkL8fnCRdlRBdMNjSs.roa (hash: 9tGGpEhNIUdMmTNT3BtQPbBWAhfLGDnPCij6bP6MIf4=) 8: ZH0QvaHOPvJPYEbUbSGF-chYfuI.roa (hash: GNpLUKAR49JusHGuTxHkn0FssgkY3qDBV+p8eW6v2dA=) 9: ZkdslEW73ziNwqF-q4Q9ZtOsaus.roa (hash: ZWo4Eyuzq+IOclSvnXp+HHT0W9PAbHQIMQb06/kMR+4=) 10: biowetcg3ehch8_ZT-Bjgdr3xVQ.roa (hash: +3UkGpMA2we3DWKym0QAg124Kd/FTF+tUn4YLgIyHpE=) 11: gmGmlBXuT4XMadwFIMM_Ru7A8rY.roa (hash: C02/amx+lTSpWSc0IFfRlXGRMUsC7V5LK9TrUNGhpXk=) 12: j0duG-Ijddau9Fj9XQZGhj9d5E0.roa (hash: jAtA5pws2q4wQ+M2hNZZyClsEg5rjHmu2VOiOpDAE88=) 13: mP8Qz54E01SquciLEGB10XN2R-M.roa (hash: TdXFl7ZveLTgT4OrOlqkJ84pFNT0T+LUDZ5933YP0mE=) 14: suXcRzS6-_4AE_w0ZJlYPW8wMRM.roa (hash: +PBYO+10etR0ZMMQ1FwMVF/GjPtirIZFSfWGb9cD2rU=) 15: yRlATHfw4VPtk07WpZ6YJCL0ujk.roa (hash: qFhl3+M+zqPL0w/p5+UX5EFi+fLod6eaZpO9ZGTbXcw=) 16: yVFu2BG-2jPO42o54RBasvcduFQ.roa (hash: 6xPh274P2CTFpVhbpm7wdZ5x4IvYPBNr1EUV4XIfsgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:b3:82:bb:b0:91:26:26:51:60:8c:40:7d:4b:33:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Validity Not Before: Jun 28 18:01:24 2025 GMT Not After : Jun 29 18:01:24 2025 GMT Subject: CN=c65648169d9393891ab41e9ccf1f494c02cdd1d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fc:c1:b4:15:90:46:fc:b3:98:e6:ac:04:86: 6b:eb:2a:5b:15:d3:c1:b1:59:9d:01:c2:0c:63:9c: 0a:68:13:75:e8:3a:3d:60:89:17:4b:50:14:31:62: bb:00:0c:c1:d8:a6:dc:c3:d3:25:75:11:f9:7b:f1: 5c:b8:a2:9b:9b:e3:e6:30:e4:18:ef:32:ec:94:05: 05:b4:22:ba:db:e3:e2:c7:78:a6:82:ff:c8:60:8a: 43:3e:e4:70:33:93:9c:72:7a:7d:64:b4:f0:98:28: 42:e4:62:db:bc:e7:5d:a7:67:19:14:7d:a4:c3:3e: bc:10:ea:9b:3e:18:ee:6b:26:19:f4:3d:87:8c:5f: 36:49:dd:1f:79:bf:c2:58:c8:ff:6d:8b:1f:96:e2: 8c:49:9f:a4:83:34:fa:6e:f1:31:12:b1:f0:5d:0c: 81:fb:da:bc:67:e2:72:32:90:12:24:78:14:10:ee: 38:b2:e9:2b:09:09:cc:da:27:b2:db:8c:4b:1d:58: 1b:40:ed:7e:24:7e:c8:46:42:9e:7f:33:23:a1:75: 01:75:3f:fa:11:35:dd:e3:82:af:56:4f:5d:4b:e1: 20:c3:cb:f7:c5:a5:7f:fa:eb:e0:64:56:83:e9:10: 5d:c7:fa:88:f9:1d:53:09:fd:68:05:f0:99:74:65: 13:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:56:48:16:9D:93:93:89:1A:B4:1E:9C:CF:1F:49:4C:02:CD:D1:D4 X509v3 Authority Key Identifier: keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:cf:ea:5b:46:c2:9f:30:8f:f8:0a:1d:1c:a2:0c:47:2b:bb: 49:09:87:a9:3c:86:ea:22:d8:8d:86:a4:35:2e:0b:e0:be:1f: 6e:7b:69:08:bf:59:cb:08:fc:ab:26:01:98:3c:e3:45:c9:ae: ab:64:cc:ca:7b:42:41:39:e4:50:68:38:1f:99:75:ce:4f:80: 1c:b2:11:98:3d:4c:d7:de:1a:0e:f2:8b:aa:72:41:7f:b5:35: d0:61:bb:19:87:8e:52:7c:66:85:6b:91:e0:7a:34:54:c5:2d: 3a:94:50:3b:dc:f4:63:5d:32:dc:0e:ff:86:d5:c4:5e:02:d6: ae:e0:89:1d:7f:5a:2a:f7:01:99:f7:6b:9b:7f:bd:11:64:52: 8c:99:6b:97:e9:db:d2:e8:61:5f:e7:50:d0:52:86:e6:27:4d: 46:42:34:1e:d1:20:35:57:3c:16:e6:37:8b:8c:24:5e:fd:15: 39:f3:18:d6:b0:c3:bd:3a:a9:cb:81:7f:d6:02:de:57:f9:b7: dc:90:ad:a6:6d:7b:b1:6b:61:7d:3e:52:10:ed:e1:55:7e:55: 9d:16:a9:bd:d9:2a:98:2a:31:7c:78:ca:f8:d5:be:0e:07:fa: cc:10:c6:0a:39:be:77:53:1e:c8:40:f5:45:56:2a:2b:5b:f3: 50:99:1d:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3s4K7sJEmJlFgjEB9SzMPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm NjljZGEwHhcNMjUwNjI4MTgwMTI0WhcNMjUwNjI5MTgwMTI0WjAzMTEwLwYDVQQD EyhjNjU2NDgxNjlkOTM5Mzg5MWFiNDFlOWNjZjFmNDk0YzAyY2RkMWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fzBtBWQRvyzmOasBIZr6ypbFdPB sVmdAcIMY5wKaBN16Do9YIkXS1AUMWK7AAzB2Kbcw9MldRH5e/FcuKKbm+PmMOQY 7zLslAUFtCK62+Pix3imgv/IYIpDPuRwM5Occnp9ZLTwmChC5GLbvOddp2cZFH2k wz68EOqbPhjuayYZ9D2HjF82Sd0feb/CWMj/bYsfluKMSZ+kgzT6bvExErHwXQyB +9q8Z+JyMpASJHgUEO44sukrCQnM2iey24xLHVgbQO1+JH7IRkKefzMjoXUBdT/6 ETXd44KvVk9dS+Egw8v3xaV/+uvgZFaD6RBdx/qI+R1TCf1oBfCZdGUTHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZWSBadk5OJGrQenM8fSUwCzdHUMB8GA1UdIwQY MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt ZGQyOTRjMzc4ZjZjLzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZc/qW0bC nzCP+AodHKIMRyu7SQmHqTyG6iLYjYakNS4L4L4fbntpCL9Zywj8qyYBmDzjRcmu q2TMyntCQTnkUGg4H5l1zk+AHLIRmD1M194aDvKLqnJBf7U10GG7GYeOUnxmhWuR 4Ho0VMUtOpRQO9z0Y10y3A7/htXEXgLWruCJHX9aKvcBmfdrm3+9EWRSjJlrl+nb 0uhhX+dQ0FKG5idNRkI0HtEgNVc8FuY3i4wkXv0VOfMY1rDDvTqpy4F/1gLeV/m3 3JCtpm17sWthfT5SEO3hVX5VnRapvdkqmCoxfHjK+NW+Dgf6zBDGCjm+d1MeyED1 RVYqK1vzUJkdzg== -----END CERTIFICATE-----Generated at Sat Jun 28 23:49:04 2025 by rpki-client