$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft File: zRCMIl8keM1CMBeYkNByhL4WNs0.mft (raw, json) Hash identifier: Ts8vyG7kLIAdlU9h6faSiXcj2OuDZaB6TzRaeAvWzpM= Subject key identifier: DD:9B:F9:06:F7:11:2F:D6:EC:7A:AF:0A:4B:FF:F9:05:66:EC:23:E5 Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 0197B77C42102342ACE3BC40A1F44AAC18DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft Manifest number: 0E09 Signing time: Sat 28 Jun 2025 17:01:03 +0000 Manifest this update: Sat 28 Jun 2025 17:01:03 +0000 Manifest next update: Sun 29 Jun 2025 17:01:03 +0000 Files and hashes: 1: 5WcQI-96O5FH1qX3Ok9ZLqqGV90.roa (hash: 6fOcHEhBTxH3iUZb4U4KYnoW42okdMilfcyFdKyUUCo=) 2: 9pK-UIM-H6tNfktNjnY3n3eplHo.roa (hash: uVmuFNCMVIRszRB0UyxXgi1VNyC51j94Uds90LHBjSU=) 3: TrRa3mOQMzvIbozJzmyBJZ6tULw.roa (hash: d1WpoK6cobO04MOKczILPk89idxmBxtIOoIeGxHI9HI=) 4: WxkR99ND6hkg9zjVGX3QR8_P3Sg.roa (hash: kx4fWFzO9g7cyAxp6MdcGUoII+Luoha51Ph8bVepefA=) 5: bV7wiXISBEG2SHcG3dNKC6Wy_3Y.roa (hash: nmxCRUNayEJiwBjnfgLQZj2sJPp5WltkD5SdU2gQZ9k=) 6: bel6Fk2PBFF8iK4X4dPcB_YL-p8.roa (hash: whSoMvRfcwg1zlxaNwdPk6EU1wdOECDElkdNcqQV/CE=) 7: dguhelyeA7h-WKBbQzBkNq3_W40.roa (hash: xeizpLm1WM753pH0+O915Rj+oI7hkint9s/onXzL15U=) 8: hBKsbi06dqWQsHOJ9T-z_RIbUjA.roa (hash: uWUX6xGjuFBVk0pdcf+5Gpk/beOEbACzQvY2ZU/EXNs=) 9: m5uzTjKBj1YNxt9lmpL_W70mOs4.roa (hash: XT7e+1v3eFE6ptU9W+MrlhCJgipVPDN9P/6NNIsbxmg=) 10: uOq6i2-TnOYCsxAxwvHpJmAlTfg.roa (hash: 9inVtd7SVRI0UIGAJNZs9aNl1wsnYwDi5iWNfEOoDLM=) 11: yoNL7-5tCOlQ2k6SSzI3Bw-Kl9o.roa (hash: ZyshyOfvs12ZYQKuRmc4qW+/EYU6jHrxeUY751HiXsY=) 12: zRCMIl8keM1CMBeYkNByhL4WNs0.crl (hash: OFVU8VKsH2oz2RTqq750jOGMVI9/Xs4CgGYN2JNIMQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:7c:42:10:23:42:ac:e3:bc:40:a1:f4:4a:ac:18:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Jun 28 17:01:03 2025 GMT Not After : Jun 29 17:01:03 2025 GMT Subject: CN=dd9bf906f7112fd6ec7aaf0a4bfff90566ec23e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:03:22:20:1b:33:90:d8:3c:55:1f:89:3c:11: 61:08:e7:5e:d3:d3:7d:7b:51:de:ad:29:1d:13:a0: fe:2e:ce:f2:88:69:f1:f4:fa:95:52:eb:32:66:58: 24:60:81:e1:6d:92:2e:7c:3e:d3:7d:c0:74:58:03: 14:e1:4f:42:2e:97:fd:82:5a:c1:8d:21:d0:2e:73: 7b:f2:bb:8c:73:66:11:0c:2f:63:b5:22:db:3b:f8: b1:e5:e7:50:9c:7f:4b:b0:2d:b2:21:2d:88:12:b5: fa:12:74:85:74:6f:b8:87:a1:12:15:f7:38:f4:9e: 00:29:2b:6a:98:00:30:11:48:a4:42:49:b3:38:4e: db:aa:b4:d1:1b:b9:db:06:ba:f4:aa:d0:b5:66:a6: f5:12:91:31:b3:01:78:ec:c4:44:9e:63:fb:21:5c: 87:fa:b8:f7:ae:6a:7b:90:c3:43:0e:76:52:50:ce: e3:7e:c9:74:3b:43:bf:b6:42:d2:84:f3:e6:17:3e: 2c:c9:4e:96:20:91:fc:5e:7c:63:3f:85:e2:57:47: 47:b0:46:85:f7:54:2e:90:95:4f:97:70:33:00:55: 32:fe:f0:40:0f:e8:ed:f5:31:67:98:fb:f3:03:34: 99:f9:f6:a7:2a:11:e6:73:c2:11:88:d5:99:42:0d: 40:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9B:F9:06:F7:11:2F:D6:EC:7A:AF:0A:4B:FF:F9:05:66:EC:23:E5 X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:fc:83:a7:07:2d:0c:ef:b7:00:67:d7:76:eb:1c:45:d2:8c: 71:7a:9c:c3:68:ba:99:50:91:81:94:8a:59:6d:67:71:65:df: 8e:74:5e:84:77:da:ec:07:08:1a:82:a4:97:86:24:49:a6:86: 0f:85:9c:1f:90:cb:28:bf:3c:4a:4a:4f:a4:93:1a:95:8a:2d: 26:a8:82:39:59:72:21:9f:b5:c2:d9:fb:23:e8:9e:70:5d:be: af:9f:c5:df:63:c2:73:3e:ad:d4:f2:bb:7e:a6:5c:ea:36:f5: b8:60:55:de:6f:89:bb:d1:ea:8e:6a:0d:b3:d0:a0:d1:79:62: 11:a8:bb:92:15:03:6e:84:6c:e1:02:06:0c:00:2c:36:34:0c: ca:63:13:73:f8:5b:9c:3f:90:3d:7b:fa:5e:3e:a4:79:f0:d6: 82:eb:06:e9:39:e9:a3:08:c5:90:c7:c2:41:e1:20:b6:4e:f6: a0:38:f2:4c:08:91:b2:42:60:87:3e:3e:11:35:ef:ca:46:fe: 33:6d:13:92:ab:53:3a:a8:4f:79:55:34:21:05:e9:3f:b9:d2: 94:b7:22:a2:75:e4:ac:9e:7e:b4:0c:6e:38:41:a1:e4:e6:22: f5:ab:0e:41:e1:4e:2e:a7:ed:7b:92:e4:f0:e9:6c:3a:2e:ec: dd:3e:cb:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3fEIQI0Ks47xAofRKrBjaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjUwNjI4MTcwMTAzWhcNMjUwNjI5MTcwMTAzWjAzMTEwLwYDVQQD EyhkZDliZjkwNmY3MTEyZmQ2ZWM3YWFmMGE0YmZmZjkwNTY2ZWMyM2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wMiIBszkNg8VR+JPBFhCOde09N9 e1HerSkdE6D+Ls7yiGnx9PqVUusyZlgkYIHhbZIufD7TfcB0WAMU4U9CLpf9glrB jSHQLnN78ruMc2YRDC9jtSLbO/ix5edQnH9LsC2yIS2IErX6EnSFdG+4h6ESFfc4 9J4AKStqmAAwEUikQkmzOE7bqrTRG7nbBrr0qtC1Zqb1EpExswF47MREnmP7IVyH +rj3rmp7kMNDDnZSUM7jfsl0O0O/tkLShPPmFz4syU6WIJH8XnxjP4XiV0dHsEaF 91QukJVPl3AzAFUy/vBAD+jt9TFnmPvzAzSZ+fanKhHmc8IRiNWZQg1A4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2b+Qb3ES/W7HqvCkv/+QVm7CPlMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvyDpwct DO+3AGfXduscRdKMcXqcw2i6mVCRgZSKWW1ncWXfjnRehHfa7AcIGoKkl4YkSaaG D4WcH5DLKL88SkpPpJMalYotJqiCOVlyIZ+1wtn7I+iecF2+r5/F32PCcz6t1PK7 fqZc6jb1uGBV3m+Ju9HqjmoNs9Cg0XliEai7khUDboRs4QIGDAAsNjQMymMTc/hb nD+QPXv6Xj6kefDWgusG6TnpowjFkMfCQeEgtk72oDjyTAiRskJghz4+ETXvykb+ M20TkqtTOqhPeVU0IQXpP7nSlLcionXkrJ5+tAxuOEGh5OYi9asOQeFOLqfte5Lk 8OlsOi7s3T7LGA== -----END CERTIFICATE-----Generated at Sat Jun 28 23:21:20 2025 by rpki-client