$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft File: 5884hLeAB6Jdvi4s7wzHO2mSH4g.mft (raw, json) Hash identifier: qW2iJSC2/B1EgGtLDmI0XqvCoHl20Uiua8csEaEJptU= Subject key identifier: E6:56:ED:6E:D2:31:C1:B7:B7:70:6F:E1:A1:80:13:7F:0D:94:11:9C Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Certificate serial: 0197B820F7BFEF97CF93018FF568CEE6203A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft Manifest number: 1573 Signing time: Sat 28 Jun 2025 20:00:57 +0000 Manifest this update: Sat 28 Jun 2025 20:00:57 +0000 Manifest next update: Sun 29 Jun 2025 20:00:57 +0000 Files and hashes: 1: 0LDsu8q8BNCVXMdgo8IAmxRh6lg.roa (hash: G5jGPy0QrJ03EB2ETPwF643gtEqN7L0Vq2ZY/sUU8MU=) 2: 5884hLeAB6Jdvi4s7wzHO2mSH4g.crl (hash: ejW4rkw2cRNpY1NNrKbwHvXmg2x2i/86oDH1G1Minfc=) 3: B6snV1O7L6xN7jjaiNZWbxtP82Q.roa (hash: Z+4+/9OXk8fDzA3Dm2Dl/g02UpTK3tqTpOQvWThJM1E=) 4: F3zlltFpu4Bnj8uBujKBSmcA9bg.roa (hash: rcK+1JhYceC79YdxlUwtYTFKypviIfVkM/kBWNB7QNo=) 5: MYlZiK8j4I-CRpNK84XFADjqS_Q.roa (hash: sHYzc9/ggp3cDmlo2cdq6sgs+CvgzddIutlRUEG3Jro=) 6: SNfpSksRdeq_X6alujKtqxhgfmI.roa (hash: Ma1Hn2WiNgfoHoDq7NgShnN2PavA2o6Q6gAsmbAJ6uM=) 7: Xxx-aLbVPMFeFACAuRgkyYhKGZ4.roa (hash: Qjsr5YH+eP1GQSztBosIVdbSouCX9Gvl5XQ/f3iIe+4=) 8: bFYSJ_I4YgMVW4I9mBgSvFA_y-8.roa (hash: H2VlaHHW6c4b4Aq4JHISuCEj338oIr6DsQEFdgqSCMc=) 9: fUwIM0sp1GFSdwqWjPbX7BRcPzQ.roa (hash: Xh0ESEMvO/UeKqHJNYyYyUnRbpIWXGZSxLiX7rQbHOo=) 10: k0HzLQZ3MkcTFmEAim7zDGvlvJ0.roa (hash: MIgwLKWyMzfqXe5kvbowxxxZvthjppNFiSW7cLd35KI=) 11: z2F52wGzH9BMrpqKt2YykAg8u8Y.roa (hash: bvYJ2BHirZKw/0tfOS28eGnj6Ugji4ZaJ639S6rbz9g=) 12: zBe1zgNHDCKtxdrkxgm3eBXCBPU.roa (hash: BXmYyj4eoSdWaSTfE6Ragmw+4eV3ZTlYx1CDpgMgYSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:20:f7:bf:ef:97:cf:93:01:8f:f5:68:ce:e6:20:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Validity Not Before: Jun 28 20:00:57 2025 GMT Not After : Jun 29 20:00:57 2025 GMT Subject: CN=e656ed6ed231c1b7b7706fe1a180137f0d94119c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3f:78:44:a6:f6:13:7c:6c:8c:94:4f:d8:b0: 53:37:68:fc:cd:40:10:62:c8:c1:b2:c0:00:89:88: 42:01:a9:4e:03:b3:81:41:1e:bc:0d:f3:e4:fd:d2: 45:74:84:cf:c5:b4:d2:91:7c:b9:eb:cd:14:0a:8c: 34:c2:d1:c7:37:3f:6a:ec:1e:46:36:39:ea:62:c3: f2:c3:fa:a9:2a:7b:2c:14:de:33:a7:db:ca:96:cc: 51:f7:98:81:d6:0c:47:cd:c5:88:c8:a3:56:23:a9: a5:48:a2:f0:7a:8e:55:f0:03:c5:38:67:88:04:6f: a0:5e:00:3b:06:fd:16:2c:44:e4:c8:2f:b9:7a:4a: 7f:9b:d4:35:de:fb:8a:77:04:2a:a9:21:88:a1:a3: b0:68:9b:7b:f2:8e:14:a7:cc:75:d6:6f:39:18:ce: 67:e4:49:f6:23:b2:4e:a3:c1:61:9e:ad:44:bb:c6: b6:ab:3f:76:85:3c:bc:46:5d:44:e4:d5:61:44:cb: c9:9e:55:39:81:ed:e0:68:c9:65:4c:94:33:52:cb: aa:6e:91:f5:80:15:b4:1b:12:6f:5b:f0:d5:2f:bd: 4e:11:05:18:7f:97:2b:af:3b:76:cc:29:6e:e2:43: 93:6a:9b:49:07:06:8a:f4:6f:69:0b:4c:30:8e:44: 99:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:56:ED:6E:D2:31:C1:B7:B7:70:6F:E1:A1:80:13:7F:0D:94:11:9C X509v3 Authority Key Identifier: keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:0b:04:4b:f5:6b:f1:d5:84:13:45:68:91:8d:f2:9f:8b:f9: 08:10:7d:c1:cc:f7:c9:77:57:49:36:ce:4a:1b:8d:ca:e0:b2: f4:5f:a3:1c:0c:c3:e8:76:5e:37:9a:35:da:ce:39:33:30:df: b8:fb:dc:8c:9d:14:57:80:7e:ad:4b:e3:65:b2:32:45:e3:ee: 75:38:84:99:84:0b:25:bd:d2:84:1e:8a:73:42:98:c5:46:2b: 72:17:52:7c:d6:12:db:18:37:96:d7:1a:65:96:66:81:43:49: b7:41:34:62:0c:42:e5:fe:17:81:2e:7c:9d:53:1e:a7:dc:86: af:bf:ee:0d:95:9b:cb:2a:50:2a:f7:58:d4:12:99:aa:27:b7: 6c:4a:80:22:6b:4c:ee:1a:91:3b:a0:27:13:67:02:0e:f6:9f: 61:bc:a4:fc:fa:10:cb:da:13:7e:60:56:f7:c6:37:a0:1f:91: 65:aa:7b:3e:3d:de:6d:cd:28:64:38:88:53:4d:75:73:e2:1d: 28:f1:1a:8f:86:87:5b:0c:9a:0b:20:b1:0b:6f:21:ed:1e:bd: 29:88:3b:42:55:11:0c:14:cc:fc:9d:fe:e6:4b:f2:f8:00:d0: 1a:c7:48:d8:71:84:c1:1a:ef:cd:ad:a4:4f:36:75:df:34:b4: 66:d5:06:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4IPe/75fPkwGP9WjO5iA6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5 MjFmODgwHhcNMjUwNjI4MjAwMDU3WhcNMjUwNjI5MjAwMDU3WjAzMTEwLwYDVQQD EyhlNjU2ZWQ2ZWQyMzFjMWI3Yjc3MDZmZTFhMTgwMTM3ZjBkOTQxMTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz94RKb2E3xsjJRP2LBTN2j8zUAQ YsjBssAAiYhCAalOA7OBQR68DfPk/dJFdITPxbTSkXy5680UCow0wtHHNz9q7B5G NjnqYsPyw/qpKnssFN4zp9vKlsxR95iB1gxHzcWIyKNWI6mlSKLweo5V8APFOGeI BG+gXgA7Bv0WLETkyC+5ekp/m9Q13vuKdwQqqSGIoaOwaJt78o4Up8x11m85GM5n 5En2I7JOo8Fhnq1Eu8a2qz92hTy8Rl1E5NVhRMvJnlU5ge3gaMllTJQzUsuqbpH1 gBW0GxJvW/DVL71OEQUYf5crrzt2zClu4kOTaptJBwaK9G9pC0wwjkSZqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZW7W7SMcG3t3Bv4aGAE38NlBGcMB8GA1UdIwQY MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt YTE4NGYzNTU2ZTQzLzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASQsES/Vr 8dWEE0VokY3yn4v5CBB9wcz3yXdXSTbOShuNyuCy9F+jHAzD6HZeN5o12s45MzDf uPvcjJ0UV4B+rUvjZbIyRePudTiEmYQLJb3ShB6Kc0KYxUYrchdSfNYS2xg3ltca ZZZmgUNJt0E0YgxC5f4XgS58nVMep9yGr7/uDZWbyypQKvdY1BKZqie3bEqAImtM 7hqRO6AnE2cCDvafYbyk/PoQy9oTfmBW98Y3oB+RZap7Pj3ebc0oZDiIU011c+Id KPEaj4aHWwyaCyCxC28h7R69KYg7QlURDBTM/J3+5kvy+ADQGsdI2HGEwRrvza2k TzZ13zS0ZtUGMA== -----END CERTIFICATE-----Generated at Sat Jun 28 22:51:19 2025 by rpki-client