$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft File: c_IQ8SmaHgrucdwdeeX7EgktMKk.mft (raw, json) Hash identifier: 2EwTWlXEUb4Cda7c6Uv0sQke+MiicyXIkTtAmCHvoQo= Subject key identifier: AE:92:AD:66:F2:C1:94:1D:DD:A2:C0:4E:B4:1D:77:E4:A3:28:9E:20 Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Certificate serial: 0197B7EA62F2BD3B4DDC81BAC997913C9F1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft Manifest number: 15DC Signing time: Sat 28 Jun 2025 19:01:20 +0000 Manifest this update: Sat 28 Jun 2025 19:01:20 +0000 Manifest next update: Sun 29 Jun 2025 19:01:20 +0000 Files and hashes: 1: 7v-L1KuWY_QeDJxKFVyRkWnFePQ.roa (hash: bVQczQ08ozX20fYuXzWGYS1jimxc5e2Qx5nVzF/4kuk=) 2: 8cWfahg-VDjeZtRRDOSOgaZBKKo.roa (hash: 9i7se4/zOMkhHJFeNP5OTbaUpanb8DTDP8yisJke8J4=) 3: H21iUSfTQ-Als3x7YdNaSJDke-Q.roa (hash: TkJySFU5Lrr8Mz/1ct+dWDS3HxILWnBvIL8cVo73vF4=) 4: H74wGZKnnU6XEP7nVKoqw4XaEjE.roa (hash: zhm555s3zw/KlbcjZuumbYd6+z6n6717Q/inEo++9C0=) 5: KFKPGq8CDIQff00UekrfFEmWWU4.roa (hash: pndCMKJbI0Ffrf6VYH3lHviYtYItndyotazCLP7aZyE=) 6: TLCOp8VQQYT-sDLZMkb_dNE0wJI.roa (hash: 8TF1RbnrjzrAYcRglOW5PIK7TmKRhUoFu7HvQr3ZHoA=) 7: XfGBei_fvFP0LcnT4xlGOunfSHY.roa (hash: ApG5cEMi+MNJR6ahm8kTy/uN64zS0fv0zRdzd/i6biA=) 8: ZrwHnbp0cmRv-8Aq-3dTrUs96b8.roa (hash: laG521bBX3KOp9w13a5/N7g1SD2gsHS2KdTqelNAv1g=) 9: c_IQ8SmaHgrucdwdeeX7EgktMKk.crl (hash: JV7oxUQzhehZrWgClOx46toORQWySJssmE5z//XtMdU=) 10: nT9Kl7qa4avyYi6PobndNFEx2JI.roa (hash: 4NhOocRVxQsq48Sjltw5zBhFh6NiUij1mxelAtmoUp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:ea:62:f2:bd:3b:4d:dc:81:ba:c9:97:91:3c:9f:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Validity Not Before: Jun 28 19:01:20 2025 GMT Not After : Jun 29 19:01:20 2025 GMT Subject: CN=ae92ad66f2c1941ddda2c04eb41d77e4a3289e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6b:0c:a9:70:ff:75:55:8f:a2:b7:67:53:ea: 47:9a:ef:77:93:27:95:84:cc:ac:6b:38:c3:7a:d2: 7a:6c:a1:2f:fe:14:e7:44:e9:86:1c:14:c3:63:ae: bb:4e:fc:1a:e5:d5:f7:51:5d:6a:0f:3f:3c:46:2f: 67:8f:9e:70:0f:0d:72:77:8e:ce:f3:d0:83:78:ba: 73:c0:a5:80:ae:41:92:8f:2e:b5:62:4a:78:53:d0: b5:bf:19:80:fb:53:b2:f1:02:38:75:f0:1e:61:9e: 3d:08:25:44:1f:6c:47:25:b3:a6:ba:a2:29:63:a4: d4:2a:13:76:7b:75:36:60:7c:c1:28:11:9f:b4:be: d6:ba:51:9f:3e:78:98:c9:fb:be:df:db:96:76:33: 2f:60:43:26:22:55:c6:dc:44:57:d4:7e:6a:01:f2: 19:3e:92:ba:38:c5:35:9a:68:94:5f:96:81:b2:1d: d9:95:3d:65:c9:65:45:bb:12:5a:1e:3f:96:2f:0f: 02:77:29:8b:14:c3:a4:c9:65:32:8e:3b:3b:8f:45: 2b:15:5e:6c:5a:1a:67:09:6e:68:e1:69:23:8e:fa: 5b:40:87:a7:0b:a4:44:80:dd:7d:d4:db:6b:bb:56: 64:84:f4:95:d5:e1:6b:3d:ba:26:b2:e1:32:40:d1: b2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:92:AD:66:F2:C1:94:1D:DD:A2:C0:4E:B4:1D:77:E4:A3:28:9E:20 X509v3 Authority Key Identifier: keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:1a:3a:8a:51:2b:81:98:9f:f2:20:08:a2:00:fe:ed:82:4a: ba:43:40:4c:91:de:b0:9f:66:b8:c2:2f:b1:57:37:4f:1b:3b: b9:bc:1e:2e:c6:6a:47:e7:0c:90:47:0e:dd:35:88:9f:cf:46: 26:12:8f:f8:5a:94:2d:27:dd:e6:29:05:45:e2:4a:ea:1b:de: af:45:5d:d7:8e:05:04:d1:a9:98:a8:7f:3a:54:93:51:92:54: a7:c1:e9:ec:6b:48:52:aa:54:b6:a3:b8:50:62:c5:5b:67:ee: c3:ae:2a:fc:be:e2:86:0b:46:02:e5:fc:b6:0d:d8:ef:89:37: 0f:e4:79:be:9c:89:d6:bc:ea:32:de:60:03:d2:04:54:be:fe: 57:ba:d0:a3:86:24:0c:bb:b4:c2:fb:15:3b:f5:5b:70:17:f4: d3:b8:1d:45:63:84:e6:c2:29:21:60:fb:4d:6f:0e:c4:e3:7e: 63:c2:20:68:a5:6e:6b:76:d3:eb:10:c8:b3:1c:36:47:9f:85: 6f:4e:af:ef:e4:6a:8e:de:bf:b0:3f:c2:9a:99:5e:c9:d2:1c: 0a:58:d5:c7:e4:9c:2c:ca:7e:35:52:7c:98:85:78:ee:15:6a: f9:71:f8:f9:93:9e:d6:ad:8e:cb:28:75:77:45:2a:26:df:b1: dd:13:3a:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe36mLyvTtN3IG6yZeRPJ8eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky ZDMwYTkwHhcNMjUwNjI4MTkwMTIwWhcNMjUwNjI5MTkwMTIwWjAzMTEwLwYDVQQD EyhhZTkyYWQ2NmYyYzE5NDFkZGRhMmMwNGViNDFkNzdlNGEzMjg5ZTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmsMqXD/dVWPordnU+pHmu93kyeV hMysazjDetJ6bKEv/hTnROmGHBTDY667Tvwa5dX3UV1qDz88Ri9nj55wDw1yd47O 89CDeLpzwKWArkGSjy61Ykp4U9C1vxmA+1Oy8QI4dfAeYZ49CCVEH2xHJbOmuqIp Y6TUKhN2e3U2YHzBKBGftL7WulGfPniYyfu+39uWdjMvYEMmIlXG3ERX1H5qAfIZ PpK6OMU1mmiUX5aBsh3ZlT1lyWVFuxJaHj+WLw8CdymLFMOkyWUyjjs7j0UrFV5s WhpnCW5o4WkjjvpbQIenC6REgN191Ntru1ZkhPSV1eFrPbomsuEyQNGysQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6SrWbywZQd3aLATrQdd+SjKJ4gMB8GA1UdIwQY MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt Yjk0NjQ3MThiYTM3LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3 LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANBo6ilEr gZif8iAIogD+7YJKukNATJHesJ9muMIvsVc3Txs7ubweLsZqR+cMkEcO3TWIn89G JhKP+FqULSfd5ikFReJK6hver0Vd144FBNGpmKh/OlSTUZJUp8Hp7GtIUqpUtqO4 UGLFW2fuw64q/L7ihgtGAuX8tg3Y74k3D+R5vpyJ1rzqMt5gA9IEVL7+V7rQo4Yk DLu0wvsVO/VbcBf007gdRWOE5sIpIWD7TW8OxON+Y8IgaKVua3bT6xDIsxw2R5+F b06v7+Rqjt6/sD/CmpleydIcCljVx+ScLMp+NVJ8mIV47hVq+XH4+ZOe1q2Oyyh1 d0UqJt+x3RM6IA== -----END CERTIFICATE-----Generated at Sat Jun 28 23:24:33 2025 by rpki-client