$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft File: X32laK0Ce54knBPiI9MidpiBop8.mft (raw, json) Hash identifier: 2vnG0Z2+Xfqr0oPJU3BIFmcEUyq2zQFlk4/2xJheSrE= Subject key identifier: E9:EA:66:CA:AE:33:D2:3A:94:B7:1F:31:E6:A7:BB:8B:76:73:C9:8F Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f Certificate serial: 0197B7B31D6AD50F022D5A757CA8E889BFA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft Manifest number: 0B2D Signing time: Sat 28 Jun 2025 18:00:58 +0000 Manifest this update: Sat 28 Jun 2025 18:00:58 +0000 Manifest next update: Sun 29 Jun 2025 18:00:58 +0000 Files and hashes: 1: Dhg938LLNxihNYriqStR3oqs6Jg.roa (hash: Aj+6lvIDsodEZ6I55Us8ZFj5GtVjSmfFFjL8I/MfYqo=) 2: FuntCXoBht24QvgtEtbVZEuCdp0.roa (hash: JUPlc/PvxJjzfETFQC1BU7Iej8ynSg/XdYSUf902Tpo=) 3: OSozPCauqZRrj5FYZCZShQYan60.roa (hash: gJTuyuPcePva2Pf/4Z3V1y7VTQjYV+P6FusXSLPZfSw=) 4: X32laK0Ce54knBPiI9MidpiBop8.crl (hash: zCAwZcQgE9EiHsVzw8TsMNQ2vbN1tvZ9LULmoD+IG4Q=) 5: XjVu2IyXljFzhSvYma_h3-clfVU.roa (hash: nT21YokFB5zQvbm3JPkkRJDjEHGU38C24xQDpQHQGAI=) 6: ZkkDzXmdTsLG1oQnHCXCpjMrN0c.roa (hash: vhxQZdTakyknsbSaFbQwA3rjVR03VcM9s8jNMsMZ03E=) 7: jUQ_fZXFaYGd4zaZnSgAlOdWse0.roa (hash: TxGng+dp5AKM1yJ/Crw7UDMDcGHP31uzC9AJJeqBDMA=) 8: oSGRjgd5g7uxmIyMg55GeDp1lcQ.roa (hash: yVVI9w+n8DQ5LZ0pU0EZPfP/S8D3Imwu6pg6ds8XII0=) 9: s84uwW_-i_SHLp2X5wNbbXCbos0.roa (hash: XmZwP1Dphpy/OpROhUP0RXS2PeMw5xbgxdsjXIheFhc=) 10: ztzJ9WkVuGW2KUZ-NYOffXMn-mU.roa (hash: 0aNwIJcWE8BWdRRapb0b1h0he6NRcvrOvXa3hI/Nxv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:b3:1d:6a:d5:0f:02:2d:5a:75:7c:a8:e8:89:bf:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f Validity Not Before: Jun 28 18:00:58 2025 GMT Not After : Jun 29 18:00:58 2025 GMT Subject: CN=e9ea66caae33d23a94b71f31e6a7bb8b7673c98f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:12:34:06:b7:a8:eb:f0:57:ae:07:7c:60:b7: 11:e7:6d:75:0c:0a:be:ca:42:ec:99:8d:de:b2:59: 69:cf:79:45:69:ce:09:fc:1c:22:26:a6:b5:2b:aa: ef:bf:12:72:d4:63:95:9f:41:f3:b5:20:6d:be:16: 41:d2:aa:c0:41:a6:db:ce:a5:b5:17:56:fc:16:1e: 62:93:9e:10:e0:83:c8:67:5f:de:3a:84:c6:b5:c5: b2:8e:b4:df:f8:0c:39:aa:fc:70:ed:79:86:cb:fd: bb:5a:66:9d:72:c7:97:be:01:68:bb:28:a0:f4:42: 7f:06:b4:54:2b:1b:af:60:03:c9:ad:5e:a8:17:63: fb:d9:a6:c3:7d:49:98:8a:0c:54:87:1d:20:e7:ae: 68:0c:84:4a:13:87:a9:cf:56:44:3a:62:1e:ed:16: 1d:b7:64:d3:8e:90:c5:d9:c7:51:6e:a6:90:2b:b5: e2:4d:e0:52:d8:38:2b:51:3a:7d:4d:c5:99:de:99: 75:ae:71:42:2f:23:d8:16:97:e5:0c:cb:84:c2:ed: d6:19:8e:35:18:71:d7:a2:e3:73:80:3d:70:66:bb: a6:05:88:26:95:fb:05:3f:a2:9b:d8:b4:34:3c:20: 6a:ce:7e:41:f3:5c:79:e3:b2:58:ee:f4:69:3f:3c: 56:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:EA:66:CA:AE:33:D2:3A:94:B7:1F:31:E6:A7:BB:8B:76:73:C9:8F X509v3 Authority Key Identifier: keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:c9:01:96:64:72:44:47:ff:57:8d:60:94:42:54:7f:8c:a4: 0c:4c:34:3b:f8:44:12:87:f3:3c:e1:e1:41:8a:cb:1a:f3:bc: df:98:6e:b9:c9:cf:2e:4b:18:95:49:6f:97:19:b6:c7:60:3b: 8d:2b:2a:bd:85:2f:d4:67:6b:e2:48:73:13:ff:a2:43:23:3c: 60:8f:19:55:27:1f:0b:81:4d:1e:19:24:4b:3d:fb:ca:f5:de: 4c:80:9a:30:81:a2:70:be:aa:f9:c1:e4:d5:48:60:9e:9b:ec: 04:15:48:dd:c3:d0:54:66:74:2d:65:e1:29:b2:ba:d7:98:ff: 21:f2:8a:c1:97:1f:e0:0d:47:42:4c:af:ef:91:86:ff:80:06: 52:11:4e:0c:d5:93:7c:f0:ab:d4:f3:59:e5:d0:c5:8c:51:09: be:85:78:93:93:4a:08:08:4e:e4:b6:54:30:e0:2f:3e:33:87: 59:c7:b3:b9:03:9d:b1:f5:69:69:1c:bf:81:cb:2e:a3:95:6e: b3:7e:9e:e0:01:fe:34:9c:2a:54:64:5a:6d:cd:c4:2d:fc:e4: 02:f9:d2:5a:54:75:5c:fb:18:48:d8:e0:9d:fe:25:6f:61:91: dd:b2:1d:d7:77:3f:2c:4b:35:06:6a:ef:6a:46:16:35:6e:e2: c6:77:70:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3sx1q1Q8CLVp1fKjoib+lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmN2RhNTY4YWQwMjdiOWUyNDljMTNlMjIzZDMyMjc2OTg4 MWEyOWYwHhcNMjUwNjI4MTgwMDU4WhcNMjUwNjI5MTgwMDU4WjAzMTEwLwYDVQQD EyhlOWVhNjZjYWFlMzNkMjNhOTRiNzFmMzFlNmE3YmI4Yjc2NzNjOThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxI0Breo6/BXrgd8YLcR5211DAq+ ykLsmY3esllpz3lFac4J/BwiJqa1K6rvvxJy1GOVn0HztSBtvhZB0qrAQabbzqW1 F1b8Fh5ik54Q4IPIZ1/eOoTGtcWyjrTf+Aw5qvxw7XmGy/27WmadcseXvgFouyig 9EJ/BrRUKxuvYAPJrV6oF2P72abDfUmYigxUhx0g565oDIRKE4epz1ZEOmIe7RYd t2TTjpDF2cdRbqaQK7XiTeBS2DgrUTp9TcWZ3pl1rnFCLyPYFpflDMuEwu3WGY41 GHHXouNzgD1wZrumBYgmlfsFP6Kb2LQ0PCBqzn5B81x547JY7vRpPzxW7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOnqZsquM9I6lLcfMeanu4t2c8mPMB8GA1UdIwQY MBaAFF99pWitAnueJJwT4iPTInaYgaKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUt Mzc1NzUzOWMyYWM5LzEvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUtMzc1NzUzOWMyYWM5 LzEvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMkBlmRy REf/V41glEJUf4ykDEw0O/hEEofzPOHhQYrLGvO835huucnPLksYlUlvlxm2x2A7 jSsqvYUv1Gdr4khzE/+iQyM8YI8ZVScfC4FNHhkkSz37yvXeTICaMIGicL6q+cHk 1UhgnpvsBBVI3cPQVGZ0LWXhKbK615j/IfKKwZcf4A1HQkyv75GG/4AGUhFODNWT fPCr1PNZ5dDFjFEJvoV4k5NKCAhO5LZUMOAvPjOHWcezuQOdsfVpaRy/gcsuo5Vu s36e4AH+NJwqVGRabc3ELfzkAvnSWlR1XPsYSNjgnf4lb2GR3bId13c/LEs1Bmrv akYWNW7ixndwQw== -----END CERTIFICATE-----Generated at Sat Jun 28 22:52:26 2025 by rpki-client