$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft File: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft (raw, json) Hash identifier: ABfvtMQnI1f3lm8AbfZV8VpOjsyVMHeWbXAE5BHqbcE= Subject key identifier: 18:72:05:A9:1F:33:BD:74:D2:E7:2C:1C:7F:A9:3F:16:9D:52:27:C1 Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7 Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7 Certificate serial: 0197B6A118D26BFE5A29FEDE7D07E92B5EEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft Manifest number: 1054 Signing time: Sat 28 Jun 2025 13:01:40 +0000 Manifest this update: Sat 28 Jun 2025 13:01:40 +0000 Manifest next update: Sun 29 Jun 2025 13:01:40 +0000 Files and hashes: 1: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl (hash: OJUbbXBw0BMFl643PmjUCEtxES6UCvjrGyHp3kaba5Y=) 2: FmBFQOhNzhtYDdGU28d2mOWYxkg.roa (hash: AVAVJ+z2q5E9uU0vpHh6beNWBbBTBuDWNk3vwtJ8KHM=) 3: a8dfbuD_49og8AJXwHhNJcwaxsI.roa (hash: W1ipPbq868Ly393rgOf3eds1bM0F3aTAdVR1mM1YvM4=) 4: ebI6lo6FFyrxH7BnniqczSoCpEU.roa (hash: VWIQku3g+eu08iWePk/+zF+lAvowuzYaw8AhxuX9/iY=) 5: iEjwphsnsCkTvYcagBPKufnt2-g.roa (hash: exQmAtQ6POft9PaSsq76nVkrM+e0e7z6aqVk5GRVWO8=) 6: mYlPJBjSVo-nMdiARP-4qGUEks0.roa (hash: jq8esI3cAJrQeZlA/zKhC8wm74GcNEo/R1+l+csXuU4=) 7: n11ZJorlH1hZHcOrMkN5woOVejs.roa (hash: qO1znHdZkcnjjGqE4Hx9Dgh/NFBxbtAoTeajvo0zDfk=) 8: rhaUzcqQYW4tC3EdQCdaNLWOPbA.roa (hash: PvCUNKVTR3gGQiqq6yWqtNwJ314FXo4VLynnYKTFbJo=) 9: uEehilTaJNTK6wTZHHdxxqFauYo.roa (hash: tRIraXpN8mX3nJ3uL7fIgHQ/edV3rhiXldnw6ddpk0I=) 10: x6Fr-1VeTypvMg38CuYZL6Aoelo.roa (hash: ajAlNUJcOgM2msZH/aiPOA3cqagu5/2Oq4Xgzqwcm3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:a1:18:d2:6b:fe:5a:29:fe:de:7d:07:e9:2b:5e:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7 Validity Not Before: Jun 28 13:01:40 2025 GMT Not After : Jun 29 13:01:40 2025 GMT Subject: CN=187205a91f33bd74d2e72c1c7fa93f169d5227c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3c:44:5c:c0:5f:fa:8a:dd:3c:2d:63:b8:22: 1f:c3:5e:fc:21:ac:44:76:82:7d:c9:b1:1a:b6:ff: 0a:4f:55:b9:ce:52:27:fb:62:3b:69:82:07:8d:0c: a6:71:c5:b8:9a:f4:8b:8c:d2:47:4a:92:39:03:53: 6d:db:46:67:62:c0:4d:19:ce:ad:d8:b4:82:4f:b7: 97:16:3f:04:2d:95:ec:76:ba:e6:65:b5:0b:05:cb: 6a:11:cf:40:36:61:e0:00:88:07:8d:0c:6b:f3:8e: 02:53:ff:7e:10:8e:d6:c8:0e:76:7d:42:87:fc:d2: 2f:54:88:83:fc:23:62:1c:cc:d2:a4:77:97:5c:8e: 58:a4:d6:32:41:f6:6e:1e:d8:3c:9c:c2:e1:91:0f: 12:6e:eb:08:d4:af:50:e0:fa:ec:f6:e2:e1:48:a7: 00:aa:4d:ac:d1:71:08:f5:5a:4b:a9:d4:41:a5:7a: ff:83:cd:51:85:7b:6c:30:2a:69:6e:90:2d:35:91: 87:ed:5e:c1:d4:55:2e:6e:2c:25:4c:81:68:99:72: b5:82:1a:b4:8a:00:27:8f:7f:e9:29:61:5d:0f:f3: d0:a7:c7:18:de:76:a2:ff:ed:bb:49:0b:63:4a:9a: 22:40:26:55:1f:36:9a:34:63:35:cb:7e:9f:42:88: 5c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:72:05:A9:1F:33:BD:74:D2:E7:2C:1C:7F:A9:3F:16:9D:52:27:C1 X509v3 Authority Key Identifier: keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:6e:fe:ca:54:ba:de:42:0e:c6:bf:05:90:3f:a4:d2:b6:dd: 0a:c6:e6:68:f3:78:9e:ff:6d:68:a4:83:fb:54:36:9c:df:fe: 9d:04:a3:f3:29:1e:44:c7:fc:2f:4b:10:ff:49:39:84:45:2f: 42:a8:06:f6:1f:f7:8e:d1:ce:90:02:c8:6e:56:9f:5f:12:a0: ae:0b:8d:b4:bb:e0:31:40:c7:57:69:16:fa:0e:c9:fd:58:e3: 49:07:cd:af:85:e4:9a:6d:1f:c3:39:10:46:f0:c9:53:71:8a: 91:19:c6:51:e8:05:97:3e:75:50:79:c1:f8:ae:03:6f:37:7d: 98:9e:cf:38:63:f7:4d:f9:b3:fa:27:02:7c:4e:b1:65:04:f3: ba:69:6a:a5:ee:7e:cf:70:e3:fe:b6:f3:36:9c:f2:41:d1:89: d8:fb:98:2d:35:95:d3:a0:89:c5:d5:5c:06:76:3a:7d:c3:9d: 4e:10:29:5d:29:e1:37:ee:58:97:42:71:81:a2:09:0b:26:00: 41:ac:d5:60:45:0c:f4:92:18:7f:1d:3e:7c:13:da:53:3a:14: 16:9a:b2:d3:70:5e:71:61:bd:0a:42:94:03:b8:8b:34:31:4a: 35:21:13:f9:a8:ea:4b:b1:f5:d5:2a:88:bf:60:34:36:81:10: 09:81:ae:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2oRjSa/5aKf7efQfpK17uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkYmU2ZTBhZGFlOGJiNDc4MzkzYWFiMTc1YjYzODY0NGM3 NGNjYjcwHhcNMjUwNjI4MTMwMTQwWhcNMjUwNjI5MTMwMTQwWjAzMTEwLwYDVQQD EygxODcyMDVhOTFmMzNiZDc0ZDJlNzJjMWM3ZmE5M2YxNjlkNTIyN2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDxEXMBf+ordPC1juCIfw178IaxE doJ9ybEatv8KT1W5zlIn+2I7aYIHjQymccW4mvSLjNJHSpI5A1Nt20ZnYsBNGc6t 2LSCT7eXFj8ELZXsdrrmZbULBctqEc9ANmHgAIgHjQxr844CU/9+EI7WyA52fUKH /NIvVIiD/CNiHMzSpHeXXI5YpNYyQfZuHtg8nMLhkQ8SbusI1K9Q4Prs9uLhSKcA qk2s0XEI9VpLqdRBpXr/g81RhXtsMCppbpAtNZGH7V7B1FUubiwlTIFomXK1ghq0 igAnj3/pKWFdD/PQp8cY3nai/+27SQtjSpoiQCZVHzaaNGM1y36fQohc0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhyBakfM7100ucsHH+pPxadUifBMB8GA1UdIwQY MBaAFN2+bgra6LtHg5OqsXW2OGRMdMy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjkt NmJhYTNiNTQ4ZDIzLzEvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjktNmJhYTNiNTQ4ZDIz LzEvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk27+ylS6 3kIOxr8FkD+k0rbdCsbmaPN4nv9taKSD+1Q2nN/+nQSj8ykeRMf8L0sQ/0k5hEUv QqgG9h/3jtHOkALIblafXxKgrguNtLvgMUDHV2kW+g7J/VjjSQfNr4Xkmm0fwzkQ RvDJU3GKkRnGUegFlz51UHnB+K4Dbzd9mJ7POGP3Tfmz+icCfE6xZQTzumlqpe5+ z3Dj/rbzNpzyQdGJ2PuYLTWV06CJxdVcBnY6fcOdThApXSnhN+5Yl0JxgaIJCyYA QazVYEUM9JIYfx0+fBPaUzoUFpqy03BecWG9CkKUA7iLNDFKNSET+ajqS7H11SqI v2A0NoEQCYGueg== -----END CERTIFICATE-----Generated at Sat Jun 28 19:16:07 2025 by rpki-client