$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft File: RFbBTNhyT5qQlie5TgBs9p0SMHs.mft (raw, json) Hash identifier: Z+Bs2bp87o8mcihxTGNNzriEbw7fCtZcSTspv0TYKK4= Subject key identifier: 9E:0C:DC:A6:FA:BA:00:5A:B6:F9:0E:6A:CB:25:7C:56:46:1F:14:0D Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b Certificate serial: 0197CCF1A10DE3ECBB6CC408D434542AE4EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft Manifest number: 0FBD Signing time: Wed 02 Jul 2025 21:01:16 +0000 Manifest this update: Wed 02 Jul 2025 21:01:16 +0000 Manifest next update: Thu 03 Jul 2025 21:01:16 +0000 Files and hashes: 1: 1-zO_X8m4H1rJu5YxrTfq1_LtFUw.roa (hash: 8XULk9NSCsk6wJTdGSnM5MpRbtNCX8jvKKx3+n/QI24=) 2: 3vuXYmLO804YeH7WzpNylqDzYzk.roa (hash: pZmQFxF+w/pjKco0VNoAljDoLP/ZSq7cNuWVMp1z4Eo=) 3: Ajg1evwXtbOwH8JbxtFbskFgAik.roa (hash: iHM/YIdefBXDCl4eoKU+a8Pl/9qUhEUpDTRYLpSYF+k=) 4: BzIUJhUJbKG8FJ3ZDsR0CAFvEys.roa (hash: Wo3BYY5cyZkRMqsE1puPM7lM2g8GnmQ0M7pog+XPkLo=) 5: RFbBTNhyT5qQlie5TgBs9p0SMHs.crl (hash: m0+UDwZSaiFORwGGLvJrDSD7HmVHeqVkQkiJGHifc7M=) 6: hAIfnfjaKDnBZe_kC7FVwx1QMuA.roa (hash: 28LijweuR0v3kdcfazkSP36utyc5j9zhZ5VcP5Ag5ns=) 7: iVv9ozH_svAyWCz87404M3b3dOg.roa (hash: B5ikMCrUQ9bNfvmS1tqxZLEZ9Uh8pGPtdisM2zHNixE=) 8: oxFojUhDbgbvQWJLE662AtGMYd8.roa (hash: D4p1qN18Lpr9kDtEzYCALPnApaaR+jAbpSvJT1J28Nk=) 9: phMHUXGvPxn2DLT5p1ejhNrhbjU.roa (hash: I3f7lI5Gs9gMy8wigPhFWkKF/LTaX3B+WQTJbC+AJvo=) 10: rSBf7m4QN8B8IdOa1QZkuz2yGzo.roa (hash: HK04u30OvyiqU+SoQ1bUDIZ6GpYsXVoMPcjWlJuPm+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Jul 2025 20:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:cc:f1:a1:0d:e3:ec:bb:6c:c4:08:d4:34:54:2a:e4:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b Validity Not Before: Jul 2 21:01:16 2025 GMT Not After : Jul 3 21:01:16 2025 GMT Subject: CN=9e0cdca6faba005ab6f90e6acb257c56461f140d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:78:93:70:b1:1e:9b:91:1b:e3:e2:81:a6:16: ab:08:94:c5:4e:4f:f8:b8:62:19:56:2d:48:06:d3: 46:b0:dc:4e:41:ec:d8:2a:13:50:90:97:ce:c3:55: b9:00:1c:6c:ae:34:05:62:58:e1:40:2c:87:24:e9: 9f:d0:5b:61:11:9e:f3:bb:fe:46:71:2c:54:9d:38: 4c:e5:ec:07:43:5f:39:1f:5c:90:e0:1b:ec:e7:15: 23:55:3c:80:b8:a2:40:85:0c:78:02:4c:9c:57:04: d5:57:1f:cb:15:28:6b:3a:e6:8b:e4:26:30:39:fd: 69:63:f0:4b:eb:12:6b:48:61:fc:0b:14:c7:f1:dd: 70:17:1a:21:4b:cf:ad:db:d1:9d:6b:18:9a:58:c8: 33:96:79:7d:cf:c1:ad:14:4b:43:37:bc:f4:37:e7: 30:e8:f4:7b:cf:e6:eb:7e:af:0b:25:73:74:d4:0e: 34:e3:cf:bc:35:aa:15:6d:80:85:90:de:be:ed:3f: ad:d9:5b:58:f8:fc:e7:2d:36:a8:46:9d:b4:b5:a0: 1e:b5:61:78:6d:aa:f4:78:7d:27:61:8c:44:de:da: 0a:6e:1a:a7:04:66:92:78:bf:76:0c:9f:e2:c4:b1: 36:0b:42:74:f3:d3:73:f5:1f:ea:43:54:2a:fd:53: 74:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0C:DC:A6:FA:BA:00:5A:B6:F9:0E:6A:CB:25:7C:56:46:1F:14:0D X509v3 Authority Key Identifier: keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:39:ff:50:2d:67:b1:04:95:b7:d2:b0:09:d6:88:14:a5:a6: 02:0a:e6:24:5a:7f:1b:35:23:3e:d5:fd:61:58:11:ea:c0:cf: f3:3f:a6:11:d4:6a:d2:b3:8a:aa:1f:13:cf:f3:e0:e5:99:7e: 9a:08:77:6d:0a:5b:f5:46:cb:1c:43:18:11:48:18:bb:cc:b0: 39:64:f7:72:c8:41:47:4e:74:4f:51:19:8b:50:79:67:f7:54: d4:db:50:27:a3:2b:02:a7:67:2a:e9:32:41:85:bf:22:f4:fd: 7a:b8:15:c7:ac:31:23:4c:e6:b5:b4:56:9c:38:bc:9a:03:66: 0b:5e:05:63:32:af:51:31:93:5e:06:7a:d8:02:fe:2b:56:39: 4b:6e:cf:38:40:4c:e7:50:1c:75:fe:c0:72:ab:42:61:5f:d7: 1a:39:6c:43:fe:6c:a6:66:fe:23:35:5f:60:31:c4:4a:7a:12: a6:b9:de:77:c8:a3:7f:41:a6:dd:27:60:9a:b5:d8:b1:c0:ee: c8:f3:10:d7:ac:29:b7:18:f0:de:dc:74:8a:f4:7f:53:4f:ff: c9:c0:a9:67:c0:03:45:4d:6d:ca:d2:e8:bb:6e:86:d7:b6:37: 14:8b:31:fb:5e:1d:af:67:ce:af:fa:f2:51:80:e2:34:be:11: e8:d2:59:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfM8aEN4+y7bMQI1DRUKuTsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTZjMTRjZDg3MjRmOWE5MDk2MjdiOTRlMDA2Y2Y2OWQx MjMwN2IwHhcNMjUwNzAyMjEwMTE2WhcNMjUwNzAzMjEwMTE2WjAzMTEwLwYDVQQD Eyg5ZTBjZGNhNmZhYmEwMDVhYjZmOTBlNmFjYjI1N2M1NjQ2MWYxNDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3iTcLEem5Eb4+KBpharCJTFTk/4 uGIZVi1IBtNGsNxOQezYKhNQkJfOw1W5ABxsrjQFYljhQCyHJOmf0FthEZ7zu/5G cSxUnThM5ewHQ185H1yQ4Bvs5xUjVTyAuKJAhQx4AkycVwTVVx/LFShrOuaL5CYw Of1pY/BL6xJrSGH8CxTH8d1wFxohS8+t29GdaxiaWMgzlnl9z8GtFEtDN7z0N+cw 6PR7z+brfq8LJXN01A4048+8NaoVbYCFkN6+7T+t2VtY+PznLTaoRp20taAetWF4 bar0eH0nYYxE3toKbhqnBGaSeL92DJ/ixLE2C0J089Nz9R/qQ1Qq/VN0ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4M3Kb6ugBatvkOasslfFZGHxQNMB8GA1UdIwQY MBaAFERWwUzYck+akJYnuU4AbPadEjB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYt NWI4NzgyNWMwN2VlLzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYtNWI4NzgyNWMwN2Vl LzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHzn/UC1n sQSVt9KwCdaIFKWmAgrmJFp/GzUjPtX9YVgR6sDP8z+mEdRq0rOKqh8Tz/Pg5Zl+ mgh3bQpb9UbLHEMYEUgYu8ywOWT3cshBR050T1EZi1B5Z/dU1NtQJ6MrAqdnKuky QYW/IvT9ergVx6wxI0zmtbRWnDi8mgNmC14FYzKvUTGTXgZ62AL+K1Y5S27POEBM 51Acdf7AcqtCYV/XGjlsQ/5spmb+IzVfYDHESnoSprned8ijf0Gm3SdgmrXYscDu yPMQ16wptxjw3tx0ivR/U0//ycCpZ8ADRU1tytLou26G17Y3FIsx+14dr2fOr/ry UYDiNL4R6NJZGg== -----END CERTIFICATE-----Generated at Thu Jul 3 02:38:20 2025 by rpki-client