$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft File: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft (raw, json) Hash identifier: EwdCBSjGYRrSEPYLqk/VsRdhHUKQ+mYl4IZ0oH3bV28= Subject key identifier: 64:02:A9:A9:62:D3:87:59:EE:55:D5:94:68:0B:B5:FE:DA:42:51:66 Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 Certificate issuer: /CN=255876412d20fbb6cab823481782ac47703b4404 Certificate serial: 0197B7B2F2C71315243339C78A7887EDABB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft Manifest number: 028B Signing time: Sat 28 Jun 2025 18:00:47 +0000 Manifest this update: Sat 28 Jun 2025 18:00:47 +0000 Manifest next update: Sun 29 Jun 2025 18:00:47 +0000 Files and hashes: 1: 8g-49_qQ3fcAAr8ogKNyJYRIsqM.roa (hash: YUM8nQydrUaGiZYWfH9e5CkG/0ZnMAVKiwEv7wrrmyU=) 2: HL_391YyhybjwJ74kNKee4Xme30.roa (hash: SKqvmhnXy6lVHKlIjthvO2Ffcm5YC3y5BAN0frkvak8=) 3: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl (hash: qtNy9zNytv6IdAmfdW4EYKTQEcET1OdR2GJDcj0MUvo=) 4: UFzq6HTzLsKXQDiIwbMVwsSvCKE.roa (hash: SkcdE34ZRnlvciguMZx89azOscHKjWKi4kmUM6ce2ek=) 5: Vf3C3nEL83KU-t7pLCkbgpiASsA.roa (hash: 6SosAmZB67F6Q5qUy5fWvfEJcjGr5qv93jKtlhRr2es=) 6: b37yA0vBw9z9NXOjP3ngOC-nsdQ.roa (hash: xnMkc8ma8YV2ulWTsjtILbYV33NvcPwQMYE2M0mdniE=) 7: evsBxqfpyH3zHvt0KdEDbPjJt40.roa (hash: vsA8eWY0hm6KpE4+4Kq5HkaUgEZIYMzjLRq48DP4yG4=) 8: hp0pLX_QGiWhiOhgc-g-g3McIzI.roa (hash: iRmxgVLqjy7bOiMWp10+U3a2wekQwe0YpGsmUpp/wOw=) 9: lwlNrqm3r8NOZc8muUo80fFlOeY.roa (hash: FfJzjpvXZQfdbT9Lc8mjBM1Q8TX5WkjUXsorwJal9Zo=) 10: pu4GRTEZI-DDS8alCpZhtqjD728.roa (hash: 4gymL9RPKKRX/UazcJNoKfCcQGjN640R8KkZ8YDasZ0=) 11: r6VOlpU6VgL1WVlEQKIIOdFJ6jc.roa (hash: qZ5211k3RJOzvqXcolh5rN4QAkWpCPQgoaSC1kNOR9w=) 12: zB7jZpVQ6_QohXb9Ts1uTCDa9vc.roa (hash: G92uGtD4p7P9jynyu17jJLaD0YzUsjPpS9i4T5WM4LU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:b2:f2:c7:13:15:24:33:39:c7:8a:78:87:ed:ab:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255876412d20fbb6cab823481782ac47703b4404 Validity Not Before: Jun 28 18:00:47 2025 GMT Not After : Jun 29 18:00:47 2025 GMT Subject: CN=6402a9a962d38759ee55d594680bb5feda425166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e2:a2:06:16:db:79:4e:c1:de:27:fd:47:23: 72:54:19:8b:48:07:13:4b:06:ec:ff:94:67:35:d9: 01:fa:70:c6:2f:8b:d3:d8:96:67:9e:1c:42:40:65: 10:65:71:8f:79:95:47:7e:1e:80:9f:5e:3e:53:4a: 1c:cc:d7:51:9a:95:df:e6:e8:bf:91:8f:a7:45:b8: 94:4a:16:bd:ea:cc:a4:b7:63:5b:66:48:04:cd:ba: 58:3c:13:e5:f3:06:14:fb:5e:82:ff:85:df:2d:ba: f0:33:d1:13:11:1a:c9:27:27:56:f3:33:30:ae:ec: 63:52:95:53:20:ad:44:bc:c9:ee:62:82:19:8d:e1: ef:75:06:0c:5d:d8:dd:2e:a5:9a:ac:51:69:67:58: 8d:10:1d:79:83:1e:81:f0:1d:09:72:34:eb:fc:f8: d8:75:b2:73:bc:48:e8:c7:53:c3:f7:6b:5d:b1:af: ca:21:48:f5:04:20:ee:fe:da:29:db:fc:67:49:3c: ab:25:7d:0c:80:9b:51:1a:69:db:52:72:99:ef:e9: aa:8e:3c:97:72:c0:90:49:8a:67:52:e8:df:a6:d8: 10:b5:ee:71:8c:5b:90:3d:3d:73:65:f8:3a:45:7d: ef:27:83:1f:52:b5:93:73:bd:2d:bb:ba:b7:22:9b: c8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:02:A9:A9:62:D3:87:59:EE:55:D5:94:68:0B:B5:FE:DA:42:51:66 X509v3 Authority Key Identifier: keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:09:26:6b:b7:6a:78:85:af:b6:63:99:df:dc:67:04:94:f6: 2e:72:dc:98:9e:cf:60:75:09:76:09:06:3b:68:a9:e4:2c:15: 7a:c4:5c:a5:9c:17:c8:66:ed:02:cd:7f:12:1b:76:2e:67:90: 85:da:72:87:4e:58:25:73:eb:0b:34:c0:2e:e1:d7:51:f6:98: e3:d1:7e:d9:b5:4c:2d:fa:8c:1b:bc:e2:f4:f7:b2:47:3a:72: 3c:f9:f3:94:c4:4b:f7:34:50:15:3d:9a:e2:f5:37:24:7a:b3: 98:5a:23:c6:13:26:2a:be:f7:b3:10:c7:a1:39:31:04:4b:d7: 83:f8:50:d5:51:45:12:23:2b:18:1b:85:6c:30:de:26:42:e6: 51:38:b5:25:aa:13:ee:3d:70:d8:90:a8:d5:b2:c8:ba:71:05: 2e:0e:47:f8:de:f4:bd:a9:7b:21:86:21:b9:35:bb:a4:df:31: 8e:98:b1:0f:20:31:2e:9d:9a:3f:39:a1:fb:fe:31:66:fd:51: 9b:fd:c2:a4:cb:c9:b8:51:be:0c:b7:39:92:01:42:e3:62:a2: 36:ba:22:99:47:80:ab:af:fa:3e:ae:33:45:a6:bb:de:17:20: 2c:ea:df:8f:ec:3e:6b:57:6d:49:90:f6:7d:ac:48:69:96:d8: 9a:92:cd:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3svLHExUkMznHiniH7auxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NTg3NjQxMmQyMGZiYjZjYWI4MjM0ODE3ODJhYzQ3NzAz YjQ0MDQwHhcNMjUwNjI4MTgwMDQ3WhcNMjUwNjI5MTgwMDQ3WjAzMTEwLwYDVQQD Eyg2NDAyYTlhOTYyZDM4NzU5ZWU1NWQ1OTQ2ODBiYjVmZWRhNDI1MTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseKiBhbbeU7B3if9RyNyVBmLSAcT Swbs/5RnNdkB+nDGL4vT2JZnnhxCQGUQZXGPeZVHfh6An14+U0oczNdRmpXf5ui/ kY+nRbiUSha96sykt2NbZkgEzbpYPBPl8wYU+16C/4XfLbrwM9ETERrJJydW8zMw ruxjUpVTIK1EvMnuYoIZjeHvdQYMXdjdLqWarFFpZ1iNEB15gx6B8B0JcjTr/PjY dbJzvEjox1PD92tdsa/KIUj1BCDu/top2/xnSTyrJX0MgJtRGmnbUnKZ7+mqjjyX csCQSYpnUujfptgQte5xjFuQPT1zZfg6RX3vJ4MfUrWTc70tu7q3IpvI8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQCqali04dZ7lXVlGgLtf7aQlFmMB8GA1UdIwQY MBaAFCVYdkEtIPu2yrgjSBeCrEdwO0QEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEt ODc2YzdmY2E0YjM0LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEtODc2YzdmY2E0YjM0 LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQkma7dq eIWvtmOZ39xnBJT2LnLcmJ7PYHUJdgkGO2ip5CwVesRcpZwXyGbtAs1/Eht2LmeQ hdpyh05YJXPrCzTALuHXUfaY49F+2bVMLfqMG7zi9PeyRzpyPPnzlMRL9zRQFT2a 4vU3JHqzmFojxhMmKr73sxDHoTkxBEvXg/hQ1VFFEiMrGBuFbDDeJkLmUTi1JaoT 7j1w2JCo1bLIunEFLg5H+N70val7IYYhuTW7pN8xjpixDyAxLp2aPzmh+/4xZv1R m/3CpMvJuFG+DLc5kgFC42KiNroimUeAq6/6Pq4zRaa73hcgLOrfj+w+a1dtSZD2 faxIaZbYmpLN9Q== -----END CERTIFICATE-----Generated at Sat Jun 28 20:55:48 2025 by rpki-client