$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft File: up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json) Hash identifier: JhdrOECaNTVRL5Y8k777va+3xJuBrxWqs+ZMKu4UGjk= Subject key identifier: 3E:84:2C:2B:13:CE:23:BE:A5:6C:2C:0A:CB:D1:E6:98:83:1B:23:8A Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 0197B7B32C601EC02831E8BB9C6F73090B7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft Manifest number: 15C4 Signing time: Sat 28 Jun 2025 18:01:02 +0000 Manifest this update: Sat 28 Jun 2025 18:01:02 +0000 Manifest next update: Sun 29 Jun 2025 18:01:02 +0000 Files and hashes: 1: 400_RzqZ2Zkj4RgRtQM0ieiw_70.roa (hash: cWGkkjGCyiI5yIlZYg8oK4kWIOo/BCALf4PQ/6MHr2Y=) 2: 4Wfz_EQvo6SYko68k4TSfAN47sU.roa (hash: ox9v/ftMGhy9fG8TSa40dOcstxMI1IJ6bYGEOLCjJzU=) 3: 6_4Hwc6tzBdm4l-R8mlGWEV4N9s.roa (hash: UHiP2cXYQ7lCrtkLIonRIJ0zFlvgCt2dpLZRN8ietd0=) 4: AJ6fmQiDz0GXs7lMqGohkie4ct4.roa (hash: r9hxOjQfXyLSDYE4VLoR0q1v13yTVS1W/Vgz5ZPmFVM=) 5: ATThoTvJNJF4N5lVg-wyxhidePQ.roa (hash: 8ezRICXjiYRUY5WiWzKJgIUwL+aryWeybUmLAWnMagE=) 6: FFOy7JzcrItrCcqIMOBP12gCuvA.roa (hash: 4feRGc55ccbj4QRPLSWi7NCE31nGpgj09ILORHtqr7E=) 7: IJorGzUf120CRI-mpVXAgOI_TJQ.roa (hash: DW42FlDi+SRpZXtqB1CINfiZYcz4yxFQLUYN4vDCN7c=) 8: OoklI3kvpUu2QON6vzr_znMlb4o.roa (hash: RZHqfGmBHtCF9GP4Ad5GiS/4m5qbDE50y9ANbpznwhg=) 9: QEvUN67KDbFaOfZj9g3vC9rUQm8.roa (hash: zUZsUbWINgqv3RegkdqlIa9Hhl7pusc0/yFVE36iNwo=) 10: QKPU8lHD1Ls8ijbvjjabsAgLzUg.roa (hash: /fSYXi8WIkq4YrB09WT2QnZLo4NqtBeyd9xE217JYvw=) 11: R2PawQq0aEUNn_27xWpTtnBVRIM.roa (hash: wgajC5DOyIsq57Qvm++dcs3T7mB2PJ+qFxFBFbbVsAw=) 12: RDOul7gyH90sNWuWnbwP87u8wBY.roa (hash: o6ZEueWl1RLQaWWUlM9zZ0WWrPg/eDS24KItGKwAdKc=) 13: SGqQT2BA7nvZeypVaggMahgg5Ag.roa (hash: rpRHSpS91VJQoigSTO7lxay+A/xm/jPFJyoswIPhH6c=) 14: UHKWf0IFUDq4891IQbRTHXY2rfo.roa (hash: khzJ2vmoGD7A0nhnzsOiCPmcx8Ixl6GoeAYAbQaOA34=) 15: VrGGCYFwhGi4BPeG9vQveoaFfLM.roa (hash: edTPl3MGZDPIQA5qIWNLHzc/W7A7u7n891N+syJZyK8=) 16: XOgRPDn4EAwuDOtKWrXwVLKxYbQ.roa (hash: 49AORPQzSmZAZLgFWXR4a6bM5aE+rKu1rS5QrLIREg4=) 17: f22Rg9MgZynKKLpI74qpWeFqUQg.roa (hash: nzoA/aYd6ivHr6t+Z/FKBabLT0D3aCpU8WEfvxU6+0Q=) 18: fYISzZWRzG7_wtxIDhjyXHPM4P4.roa (hash: G+ywPlLAl4RvDHTdYmvn2UIgfVxBZaWwGMa191aRbWk=) 19: gR6HPRWa_I93ATF_6lEGpZdtVD0.roa (hash: akW6B3OCvdeceBU9Nhi1NU2MjvgHwNjLQ7OLUdvvzL4=) 20: mAo26VPj0zSn83SBRVoaCRdhIg4.roa (hash: C7ffNHQiA5Pk5uSBOSpDLGUyZWz38AAFh4I1f40dGgU=) 21: oWrtd0aFvC95N4Z6gxyZZ1SWrJs.roa (hash: AlvH9oYmiwAzp0Z4dOdOt5RLv8lOGK9l5kvoT65TGlA=) 22: qvRavzCJNzlbWaxfB4-Csl1ipM8.roa (hash: TD2WbwBpamsZuvWzJKbhtgXUy7eDy6Fj193ZH7DB3bY=) 23: s8dlGwwG7APZ3e9v5u6lvgLO1LA.roa (hash: 8xnfXfiigbDRlP2kATr1I4JuafJveXZL4+MTG5Nb4O0=) 24: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: kEgmPOWeErOg5crgmJlTQ9xJNi5jufoR8NcOfZNBBec=) 25: xGjAXSy-rPa7gZ2kCW6E-VgMqD8.roa (hash: AKtFMHlOVM+NFVSI2WpJP3l3MsXbWpJgiU4DhcCI8gQ=) 26: xqd3xWJCW96sJcN2e73CvA4BAEA.roa (hash: laL7IIKjO1uC6O19XqLmeRI4pdgH1HSkOUvvYu+TK5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:b3:2c:60:1e:c0:28:31:e8:bb:9c:6f:73:09:0b:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Jun 28 18:01:02 2025 GMT Not After : Jun 29 18:01:02 2025 GMT Subject: CN=3e842c2b13ce23bea56c2c0acbd1e698831b238a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:94:04:00:ab:67:37:da:e8:2a:3b:e1:ac:59: ab:c8:3a:fc:78:04:97:15:f7:c2:1d:1d:75:1a:c8: 59:22:c0:99:bd:46:ee:47:35:12:76:27:b6:8a:7c: 5f:cc:4f:46:01:cb:3f:c3:23:9d:8e:09:1e:a7:7e: 67:e1:de:2f:75:a7:04:0d:8d:51:8c:0e:e2:b5:12: 1b:63:c7:ff:64:49:be:77:fe:96:35:d5:36:61:33: 01:cf:9e:f0:e8:ca:2c:91:62:ee:71:1d:22:a5:a0: b0:7c:38:e5:32:9d:ab:b6:64:88:ce:95:53:9f:4e: 4d:89:43:b5:37:2a:bc:99:96:a1:57:96:cd:85:e7: 9d:74:1a:eb:f2:4a:07:53:03:11:85:49:dc:f1:7e: d7:26:86:62:1f:0e:33:86:eb:98:99:e8:13:40:1d: 16:ce:c3:ec:f6:ef:6f:c9:25:cd:ef:77:0e:04:14: da:9b:c1:ba:b9:e3:49:60:7f:c1:d3:84:6d:9e:ab: d8:21:04:c2:40:b7:36:3c:cc:8d:63:e7:77:67:ae: 48:c6:5c:ef:80:45:ab:e7:bd:ea:92:99:a0:a9:e4: 91:34:8a:3f:4a:8a:6a:84:f7:61:3d:bb:1d:e6:4b: 0e:9b:37:b8:6a:9d:86:8d:ed:52:6d:c4:df:61:7b: cf:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:84:2C:2B:13:CE:23:BE:A5:6C:2C:0A:CB:D1:E6:98:83:1B:23:8A X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:bc:c8:fc:cf:50:60:0e:b4:3d:18:a2:5c:2d:08:5b:48:eb: 68:00:a7:41:62:03:9b:78:8b:2e:05:87:fe:e5:b2:59:af:7f: 3d:f7:b8:64:b8:b8:c7:ec:1d:ba:a2:69:0e:96:2f:24:c0:e3: df:60:82:ba:f8:5e:e5:da:22:d1:e6:5b:03:91:c5:d9:e8:23: a6:31:2d:83:90:09:70:9c:15:c8:b4:06:b7:5f:0f:84:31:ae: 0a:a8:66:75:82:ac:13:0b:bd:f2:97:44:67:72:c3:f9:b6:f0: 4e:83:6e:a1:e7:dc:ca:e2:00:67:0b:f4:61:ae:0f:91:c7:00: 63:35:03:70:22:ec:c4:d0:34:b9:76:ce:b8:61:97:52:7d:2c: 63:42:76:f5:3a:9c:bc:84:6a:df:fd:ef:a5:82:a4:3a:10:6c: f4:23:8e:1b:f7:68:b8:93:90:68:e8:55:0c:14:d5:ff:e9:34: e2:70:6b:f9:9e:4c:57:53:ea:d1:3e:87:1b:cb:44:80:83:d5: 00:d6:56:99:d8:ad:ca:7f:6d:09:e1:9e:2e:3d:87:91:b1:31: d8:63:80:0b:c6:0b:70:4c:82:27:c9:a3:21:a6:21:9c:32:63: 11:16:7e:5d:28:be:f9:d3:7c:78:c1:6c:18:ad:ca:47:1c:2e: 84:00:ae:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3syxgHsAoMei7nG9zCQt7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjUwNjI4MTgwMTAyWhcNMjUwNjI5MTgwMTAyWjAzMTEwLwYDVQQD EygzZTg0MmMyYjEzY2UyM2JlYTU2YzJjMGFjYmQxZTY5ODgzMWIyMzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpQEAKtnN9roKjvhrFmryDr8eASX FffCHR11GshZIsCZvUbuRzUSdie2inxfzE9GAcs/wyOdjgkep35n4d4vdacEDY1R jA7itRIbY8f/ZEm+d/6WNdU2YTMBz57w6MoskWLucR0ipaCwfDjlMp2rtmSIzpVT n05NiUO1Nyq8mZahV5bNheeddBrr8koHUwMRhUnc8X7XJoZiHw4zhuuYmegTQB0W zsPs9u9vySXN73cOBBTam8G6ueNJYH/B04RtnqvYIQTCQLc2PMyNY+d3Z65Ixlzv gEWr573qkpmgqeSRNIo/SopqhPdhPbsd5ksOmze4ap2Gje1SbcTfYXvPLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD6ELCsTziO+pWwsCsvR5piDGyOKMB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJbzI/M9Q YA60PRiiXC0IW0jraACnQWIDm3iLLgWH/uWyWa9/Pfe4ZLi4x+wduqJpDpYvJMDj 32CCuvhe5doi0eZbA5HF2egjpjEtg5AJcJwVyLQGt18PhDGuCqhmdYKsEwu98pdE Z3LD+bbwToNuoefcyuIAZwv0Ya4PkccAYzUDcCLsxNA0uXbOuGGXUn0sY0J29Tqc vIRq3/3vpYKkOhBs9COOG/douJOQaOhVDBTV/+k04nBr+Z5MV1Pq0T6HG8tEgIPV ANZWmdityn9tCeGeLj2HkbEx2GOAC8YLcEyCJ8mjIaYhnDJjERZ+XSi++dN8eMFs GK3KRxwuhACufg== -----END CERTIFICATE-----Generated at Sat Jun 28 21:42:51 2025 by rpki-client