$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft File: 5dbG6LztQL0DLRdxjBseOa6EGug.mft (raw, json) Hash identifier: 34R1J6TpZuhUdr76X8nQgmUHezR4/zv3EXWju6bqlos= Subject key identifier: CC:4B:A8:23:EB:25:47:B3:87:77:C2:26:26:E7:69:04:FF:9A:70:E8 Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8 Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8 Certificate serial: 0197B5FBF82611E5CC3E9932986BD92E6A63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft Manifest number: 15BD Signing time: Sat 28 Jun 2025 10:01:18 +0000 Manifest this update: Sat 28 Jun 2025 10:01:18 +0000 Manifest next update: Sun 29 Jun 2025 10:01:18 +0000 Files and hashes: 1: 1-4thfGCfV_85lt2WZkN-l71fwv0.roa (hash: 7cUPpyEsjpN2LkemwyOwpAzp6M6Mod4nt5VJCSxBi3s=) 2: 1-U546Wnv3X2dlqBwiPgmgD5rG0Q.roa (hash: UYLMoDLmtnbaqveYEw4e1FYtKG5Xz2eS50cYOB7habA=) 3: 4wlDChlgzrgFapvpBy46MAFlefc.roa (hash: EYqlVV6MH4EbjLdFRd/br9sG35MzdZTRrWmN3sTJ6/Y=) 4: 5dbG6LztQL0DLRdxjBseOa6EGug.crl (hash: hYbEWH+X9rgZFi9dyiV1uTPR9VWYzQ9kvtc7QFOTiGg=) 5: A-Fkuj2Ry_3wy9lszQO5iFmpTsM.roa (hash: MqXfL/IjblbyaoanvxCZ0s6/syF5tUBaoXoKEYvO5Ck=) 6: CqQsoC1jFsSbLss7hEFtLKrKDMY.roa (hash: 7YVK/zmpOd/tEBFOBPOhNo6QF1d67oChKSOQOYEoacg=) 7: Grw7nIi6RKNyYj-gX0F5si2FPWg.roa (hash: P3/krGXIhVeYouYxQBpxzM61tb05ZyoVg+B5ZJUx//k=) 8: PPn88xNGN-bL0F7MubjXlyHvb9c.roa (hash: nLdf7Pq2piaIE9RRNqGUwrSH2EAIpbdo6397rklNDK8=) 9: QmD1NuxNLYfmzuhbCU_99CJ-o-k.roa (hash: ugpwTRCdEyAoIefE/m+oUbM/pJjpH0ikF/U5tO+O/jM=) 10: TtR0csYqYQUGmaJtYJ6I1Sb4jtA.roa (hash: /RrNIRwEKfIWdjBmKgKNDu3bdN5NswYfyOudqPj07dM=) 11: W5W8H6uR-lCCEmn3v-XsPLRNVss.roa (hash: MqFZSzbOqhNyXJIgrbDDE4K1XPvGby9AbWHLANkDs8A=) 12: cKTcZs-U_VD8X5oF6KYi9vL_XPY.roa (hash: Ojplqzn5+rFkagKqgJjGg7MR261z7vGOzqJ6p2GYag4=) 13: dUjWdWqHZ3bB28SlJrHRKXOFumI.roa (hash: L5pkt5HZhPKaDfcEd3yHsIdGb5cnUbqIUW0exwEPLyc=) 14: j3rbxvXK8ctBFBgkYLP92aiT8pc.roa (hash: SkgwXJK38mScZ5LxMMAb0ANPv8t3zcxnc/zFVB7Ba0w=) 15: mza84PKMv0aUDroEfzQZip-9Um8.roa (hash: xfLnRg1sIPVix0oNDyz6FdqLtVqmjxCCvOykxKOTB0s=) 16: u0oJmkSedaonOs5uLkSqqL59uJ4.roa (hash: C6uJzJ3uiAjMgAmGSpBjfqhHJVcbN5byOHdLx08rPTM=) 17: ujwUfZi-j2E7tiXxuxPwDEMg9Do.roa (hash: ZVTJzzTXgsjt6o/MwKVQt8mq4QnG+HkM2MYUgIyYqIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b5:fb:f8:26:11:e5:cc:3e:99:32:98:6b:d9:2e:6a:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8 Validity Not Before: Jun 28 10:01:18 2025 GMT Not After : Jun 29 10:01:18 2025 GMT Subject: CN=cc4ba823eb2547b38777c22626e76904ff9a70e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0a:ba:66:01:cb:5e:f2:d7:99:6c:09:92:ac: b6:82:db:6c:05:b0:ec:74:d7:c7:62:50:1e:b2:b0: 26:07:7f:17:24:20:1b:6a:5c:d4:84:05:d4:2e:53: 4c:72:3d:8d:c5:18:bd:89:b4:b3:93:48:bf:72:24: 39:06:05:76:51:c5:95:46:78:dd:56:76:a2:ac:be: de:ee:c8:99:6b:3f:d5:20:b7:2c:77:eb:b2:0a:27: 94:b9:9f:02:79:e4:4e:12:af:5c:7f:ad:aa:80:8b: 03:62:b3:5b:e8:45:d9:56:fc:bd:fc:9a:85:bb:67: 70:85:f1:c1:b0:e7:ae:9b:97:07:1d:e7:6c:7a:b8: 92:6b:9d:f0:63:70:44:0d:e5:80:be:87:83:e1:6c: dc:7a:f6:10:cf:3e:89:f2:5f:0c:55:73:f8:06:d6: b8:ac:df:9f:c9:a4:2a:6b:55:46:94:17:28:b8:a3: ed:be:7f:7f:26:b1:da:66:32:c1:26:03:0a:94:14: 7b:98:b3:b5:e9:1a:8c:2d:56:06:ba:88:ea:fc:5d: e6:b5:3e:dd:81:f6:c2:fe:6e:af:5f:85:8e:cb:73: 5f:a5:29:c0:ef:91:4f:f3:ab:90:84:e9:38:61:bb: 2c:0f:9f:5e:1d:f0:1e:2c:7b:44:ec:3a:b0:e8:a6: 77:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4B:A8:23:EB:25:47:B3:87:77:C2:26:26:E7:69:04:FF:9A:70:E8 X509v3 Authority Key Identifier: keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:fd:7f:70:49:b3:e4:e4:86:5f:ab:89:30:40:a4:04:0b:b2: c4:a5:91:d7:05:fe:96:61:20:42:c0:c6:4f:a0:e0:85:3a:84: 77:1c:1d:4b:d3:33:89:5a:5b:f4:5e:46:ce:81:f9:b9:a9:d7: 66:e0:c8:1e:e5:db:5a:37:bc:62:ec:f9:6e:c5:ef:16:5a:2b: 88:84:f2:bc:1c:66:34:35:32:fa:8a:cd:53:d1:e7:c8:dc:c2: 7a:15:38:20:fe:9a:6e:3e:68:59:4f:dd:85:97:8c:7c:cf:f3: 0b:81:03:bf:ff:9a:32:51:4c:3f:33:e9:2f:a6:1d:97:3d:ad: 41:3b:b2:7a:18:79:fb:04:48:db:d6:1a:9b:7b:39:42:54:34: a0:91:df:ff:cf:cb:2d:da:08:ed:5a:c7:80:9f:5a:f4:ae:c4: c8:14:be:ad:0e:cf:c9:5a:f7:9f:b4:0e:3a:de:01:82:29:b4: 0c:92:18:fd:b4:aa:23:ed:ef:b8:8e:f4:9e:8f:8d:fc:e3:27: 2a:c5:9f:4f:68:f1:f1:63:35:fe:1e:61:2a:93:6b:ac:b5:00: 6e:09:e7:36:8f:0f:fa:1c:47:ec:87:32:33:7e:c4:70:8c:02: bc:da:f6:5b:a7:0b:43:4d:32:46:45:aa:68:cb:61:2f:0a:8b: cc:6d:cb:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe1+/gmEeXMPpkymGvZLmpjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZDZjNmU4YmNlZDQwYmQwMzJkMTc3MThjMWIxZTM5YWU4 NDFhZTgwHhcNMjUwNjI4MTAwMTE4WhcNMjUwNjI5MTAwMTE4WjAzMTEwLwYDVQQD EyhjYzRiYTgyM2ViMjU0N2IzODc3N2MyMjYyNmU3NjkwNGZmOWE3MGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gq6ZgHLXvLXmWwJkqy2gttsBbDs dNfHYlAesrAmB38XJCAbalzUhAXULlNMcj2NxRi9ibSzk0i/ciQ5BgV2UcWVRnjd VnairL7e7siZaz/VILcsd+uyCieUuZ8CeeROEq9cf62qgIsDYrNb6EXZVvy9/JqF u2dwhfHBsOeum5cHHedseriSa53wY3BEDeWAvoeD4WzcevYQzz6J8l8MVXP4Bta4 rN+fyaQqa1VGlBcouKPtvn9/JrHaZjLBJgMKlBR7mLO16RqMLVYGuojq/F3mtT7d gfbC/m6vX4WOy3NfpSnA75FP86uQhOk4YbssD59eHfAeLHtE7Dqw6KZ3pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxLqCPrJUezh3fCJibnaQT/mnDoMB8GA1UdIwQY MBaAFOXWxui87UC9Ay0XcYwbHjmuhBroMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQt YmQyNDliNjI1Nzk3LzEvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQtYmQyNDliNjI1Nzk3 LzEvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn/1/cEmz 5OSGX6uJMECkBAuyxKWR1wX+lmEgQsDGT6DghTqEdxwdS9MziVpb9F5GzoH5uanX ZuDIHuXbWje8Yuz5bsXvFloriITyvBxmNDUy+orNU9HnyNzCehU4IP6abj5oWU/d hZeMfM/zC4EDv/+aMlFMPzPpL6Ydlz2tQTuyehh5+wRI29Yam3s5QlQ0oJHf/8/L LdoI7VrHgJ9a9K7EyBS+rQ7PyVr3n7QOOt4Bgim0DJIY/bSqI+3vuI70no+N/OMn KsWfT2jx8WM1/h5hKpNrrLUAbgnnNo8P+hxH7IcyM37EcIwCvNr2W6cLQ00yRkWq aMthLwqLzG3LNw== -----END CERTIFICATE-----Generated at Sat Jun 28 19:50:45 2025 by rpki-client