$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft File: h74JMJcJfERX_1qj5Yk8jBVDJhI.mft (raw, json) Hash identifier: Ndfw6k2OEtGm7w+eoux2FNYk/5YlcukXFLd6daiY2Z4= Subject key identifier: 92:AD:4C:86:49:81:D2:1D:E0:A3:A6:A5:0D:F2:2F:98:48:F0:AE:23 Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612 Certificate serial: 0197B8FD99EE6481D0AD284E3DC262D9022D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft Manifest number: 1246 Signing time: Sun 29 Jun 2025 00:01:57 +0000 Manifest this update: Sun 29 Jun 2025 00:01:57 +0000 Manifest next update: Mon 30 Jun 2025 00:01:57 +0000 Files and hashes: 1: 58EBygRjdS7517jE8ijFSPfVOH4.roa (hash: 7YP7WUOPsrK23qXejFg0a6c2K8s3GbzwWCeuhRLXrr4=) 2: 6gQb_YrXJIkOy1ffV5AywwaDFKA.roa (hash: YBUcx/W2YYWfTW+ZfLh5vpIiC6jkcxCKGBt0nojo2Ok=) 3: CjTW9-CUmuY1lxZ8OqndS2FXSrY.roa (hash: 9DQ0LnRbHYpMYq+dl7Z0Jfv0Jx2DrmotGXluT5sxbiI=) 4: UYD_ol6L79u8glgaI6wKUZit3aI.roa (hash: Gf9BtC+mpY9FQr0OFj9WV8BSFzyS8ChMq/mXIibBTC4=) 5: YxuPih3fAlXVoEE31gDs9iD2i1w.roa (hash: x8butTOJLg1TuADmdhNJfjqeOtty4tQbuYOKyeZNAJI=) 6: cgfWhp9nnNlIFwxwBmM9ufcXLT8.roa (hash: d9o/0tEnmxkRdMrExtvCAvZnhgV08vpjue2h9xSnd5M=) 7: h74JMJcJfERX_1qj5Yk8jBVDJhI.crl (hash: b8VGoGHRvwDIKvExcteWRcDzB0OSRYFlQOc4NNuCXOc=) 8: jS9AN5oD9gr_onzGTzL8xf4_tCg.roa (hash: L5WRngdm8hXH1GtO9dblNyDW24uvtXBx7hO8Cv9i3R8=) 9: l73XbGk7c4j4MjyLCnCZ2AhSa5g.roa (hash: zN4KADzvP9RDaA1coLbTnlm7K8otMtISf3HRhyFdP4I=) 10: zDYhvUbelcRpqpslUbRSgUjh_fg.roa (hash: oMqhUHMRnzSTRY98vl61orkGgfrk9poSjKlRD++vvbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:fd:99:ee:64:81:d0:ad:28:4e:3d:c2:62:d9:02:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612 Validity Not Before: Jun 29 00:01:57 2025 GMT Not After : Jun 30 00:01:57 2025 GMT Subject: CN=92ad4c864981d21de0a3a6a50df22f9848f0ae23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:03:52:dd:bf:2e:4b:18:3d:37:48:7d:fa:cd: 4d:29:c0:12:69:54:28:b1:da:7b:9d:97:ea:d0:fc: 72:46:3d:24:45:e3:be:ff:9d:65:d0:d1:7d:1c:89: f0:e7:66:22:68:1c:da:32:e1:d3:e3:40:bc:64:9d: e9:3a:b5:3c:79:6e:0e:b6:b2:7a:fa:6b:b0:b0:53: c0:b7:f7:a3:e0:88:a3:2b:eb:8a:79:d0:9c:c7:4b: 31:2a:cf:4e:c0:0d:2d:1b:58:cd:d5:da:3b:b5:2c: 3e:df:d4:df:5d:d8:e6:c4:49:97:d7:41:dd:af:a3: fc:88:ae:7f:0b:8d:ba:e2:f4:72:7e:ee:b8:34:ef: ff:94:8b:18:3e:91:e3:13:b8:c8:8f:72:27:0f:49: 5e:b5:02:89:0d:0b:22:cd:e3:42:1a:e1:5d:27:69: f5:ca:8c:7a:42:d8:6b:82:50:f9:26:dd:b5:09:7a: ae:18:03:13:76:9d:63:c3:bc:80:ef:19:ef:55:aa: 7d:d3:0a:ef:34:02:da:04:30:4e:2f:6c:92:92:ef: 48:63:60:be:5c:59:bd:5a:fe:d2:1f:b6:a2:5d:86: 0a:db:a1:cb:c3:10:7f:b1:17:4b:47:f4:ed:89:91: 89:e2:43:1a:c2:c4:58:67:6c:c1:f9:d0:f3:67:49: 6f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AD:4C:86:49:81:D2:1D:E0:A3:A6:A5:0D:F2:2F:98:48:F0:AE:23 X509v3 Authority Key Identifier: keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:b1:58:40:8c:e9:5f:18:6f:a4:0d:c1:5f:38:de:fa:08:2b: de:6f:fd:2b:48:b4:2c:13:50:a8:5d:19:ff:12:31:f6:08:82: f3:a0:ae:2e:ec:ca:5a:32:79:e6:c5:ae:44:2e:69:f1:47:21: 01:2c:38:34:08:59:08:5d:ff:72:49:d8:b8:6e:b7:da:75:0e: 16:8e:b2:31:b8:99:35:a0:56:7e:3e:59:17:45:58:2c:d4:b8: 9c:e8:ec:07:a9:e3:63:4d:b9:d5:5e:75:4f:38:4a:7b:8f:84: 9c:57:63:89:fe:7f:04:a4:fb:7b:7b:c2:5e:7c:09:f2:de:8d: 28:01:d3:d2:f2:ba:42:ea:41:18:c6:8e:68:b0:5f:21:5a:da: e7:38:c0:32:33:55:08:b0:e9:17:1d:f6:92:0e:0a:73:78:a7: 23:94:6e:87:94:b8:f1:ab:fc:4a:ea:77:4c:4d:f0:df:2d:83: 8c:d7:89:a1:c5:7d:30:cc:e0:df:d7:fe:50:48:2e:84:98:b1: 91:50:c9:18:c9:a8:1c:b2:55:21:a2:1e:fa:be:5b:bd:b2:d3: ba:4c:27:78:7a:8d:70:37:ef:29:61:15:bd:76:2c:26:02:97: 9b:e1:a0:2d:c8:c6:f5:38:56:aa:e6:4b:45:46:97:05:f3:c3: 13:f4:ba:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4/ZnuZIHQrShOPcJi2QItMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YmUwOTMwOTcwOTdjNDQ1N2ZmNWFhM2U1ODkzYzhjMTU0 MzI2MTIwHhcNMjUwNjI5MDAwMTU3WhcNMjUwNjMwMDAwMTU3WjAzMTEwLwYDVQQD Eyg5MmFkNGM4NjQ5ODFkMjFkZTBhM2E2YTUwZGYyMmY5ODQ4ZjBhZTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQNS3b8uSxg9N0h9+s1NKcASaVQo sdp7nZfq0PxyRj0kReO+/51l0NF9HInw52YiaBzaMuHT40C8ZJ3pOrU8eW4OtrJ6 +muwsFPAt/ej4IijK+uKedCcx0sxKs9OwA0tG1jN1do7tSw+39TfXdjmxEmX10Hd r6P8iK5/C4264vRyfu64NO//lIsYPpHjE7jIj3InD0letQKJDQsizeNCGuFdJ2n1 yox6QthrglD5Jt21CXquGAMTdp1jw7yA7xnvVap90wrvNALaBDBOL2ySku9IY2C+ XFm9Wv7SH7aiXYYK26HLwxB/sRdLR/TtiZGJ4kMawsRYZ2zB+dDzZ0lvhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKtTIZJgdId4KOmpQ3yL5hI8K4jMB8GA1UdIwQY MBaAFIe+CTCXCXxEV/9ao+WJPIwVQyYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMt MmNkZTY1ZjMxMTJhLzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMtMmNkZTY1ZjMxMTJh LzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUbFYQIzp XxhvpA3BXzje+ggr3m/9K0i0LBNQqF0Z/xIx9giC86CuLuzKWjJ55sWuRC5p8Uch ASw4NAhZCF3/cknYuG632nUOFo6yMbiZNaBWfj5ZF0VYLNS4nOjsB6njY0251V51 TzhKe4+EnFdjif5/BKT7e3vCXnwJ8t6NKAHT0vK6QupBGMaOaLBfIVra5zjAMjNV CLDpFx32kg4Kc3inI5Ruh5S48av8Sup3TE3w3y2DjNeJocV9MMzg39f+UEguhJix kVDJGMmoHLJVIaIe+r5bvbLTukwneHqNcDfvKWEVvXYsJgKXm+GgLcjG9ThWquZL RUaXBfPDE/S6Tw== -----END CERTIFICATE-----Generated at Sun Jun 29 08:06:32 2025 by rpki-client