$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft File: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft (raw, json) Hash identifier: 8eT53HZ/j91fCrJS/V3VtwHSIc3kWcF3/mDg7lwY2p4= Subject key identifier: A3:66:39:C8:AA:9F:CF:D5:FA:DC:15:A2:53:DC:BC:B5:90:D3:58:2A Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2 Certificate serial: 0197B7EA9190751AA00B02344FD8ED114FFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft Manifest number: 15C3 Signing time: Sat 28 Jun 2025 19:01:32 +0000 Manifest this update: Sat 28 Jun 2025 19:01:32 +0000 Manifest next update: Sun 29 Jun 2025 19:01:32 +0000 Files and hashes: 1: 0bSG1GbQSr3JP2M9BW2A6zWEmWQ.roa (hash: m8/KEzPrRo4PqG3DFfILeyvmSqlK6Zrphut5P8ccG8c=) 2: 9lwL98-HDVBrZzYLRCpSdOAFXpo.roa (hash: Za/9eX9VNb3FiSxJk6MAE/CpFGWxRO5mjghE1elRivc=) 3: B0iUIhkwv2ZZdyXRyu9yUh7Z61o.roa (hash: F6O6OkDRyyyGqFimHsLztSYsh0AUNFPNkRW3jSPwvEw=) 4: I1EoUAseUd3MHO-sI_txqICBiwc.roa (hash: khM+HdjIw9WozXCqEk/wtCOtMrpNfxWXErjSXn8BT5M=) 5: KQ7nGqqdl8DwDw35UdDbOJPZhfY.roa (hash: 8pIf1gsysAeCO62ayw5k2bU+b1g8t0mrR6+zNCtTibQ=) 6: LS_oKjOyENRZwn9y786G7x_fDEc.roa (hash: qwrjawF9Z67WE+ivjm8mPIl3xqaLReHxca9+SNnwKPE=) 7: Pvub5ztTS47f0XG6tBZE9ngX8Rw.roa (hash: euQ5dqT6xwCfoTsPu9P7kfQ9UGdbPzkkEJWSyFwCBTw=) 8: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl (hash: B6Yp1GOFBmY/wOX2LUUCZHdCb7cpZHDCQqHuLrXmkF4=) 9: lqxGizsVmZbvi7xpd3yzs2I4ILw.roa (hash: aTi4SECMvkjegR9/FyzL9HTmeGkM0AsiVgyipWCsYrY=) 10: sFnlwbiQ75y8_114DKwn3kP_iWc.roa (hash: dkHr9wKemXLLSQfaJK2+kCvWwELtA6u+nMBynz2rXgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:ea:91:90:75:1a:a0:0b:02:34:4f:d8:ed:11:4f:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2 Validity Not Before: Jun 28 19:01:32 2025 GMT Not After : Jun 29 19:01:32 2025 GMT Subject: CN=a36639c8aa9fcfd5fadc15a253dcbcb590d3582a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2d:d6:6d:fc:3e:b7:8f:6a:84:32:4e:aa:15: b2:19:91:3d:c1:7a:e0:40:60:f2:94:ec:3a:59:9c: 88:13:71:91:35:ae:d6:77:8a:c5:86:62:f7:cc:a8: 5e:ce:24:c8:ad:9f:8d:a5:8a:94:92:eb:ae:d1:2c: 41:17:3e:56:90:60:73:09:20:ac:e1:2a:ff:93:c1: de:fd:1b:51:58:69:0a:c3:03:71:79:4c:97:01:44: 7e:ac:51:bd:d0:c9:c8:6d:12:4b:ec:18:ec:55:d5: 4c:48:b6:89:e6:f7:cf:cd:88:06:66:bd:ab:44:fb: a9:28:11:ed:0e:85:3a:38:b1:e7:53:24:69:75:9e: b0:48:1a:0e:6f:f7:bb:5e:b5:bb:2b:cc:2c:8c:f0: 62:ca:7f:d3:95:56:fd:19:33:8f:9b:16:cc:05:7f: 50:3e:65:73:fc:b5:76:9d:99:a0:27:9b:07:62:44: 9a:8d:f3:f7:b7:e0:24:32:f2:2d:cd:3e:89:b9:43: 17:66:83:13:4d:40:86:28:46:7b:2e:bf:93:a6:aa: aa:3e:b2:a8:df:42:d1:f6:f0:88:f8:61:01:62:95: 3e:4e:66:78:f0:6c:fa:28:e4:21:af:82:24:72:0e: df:88:14:35:ff:0f:47:e6:db:fb:c3:9e:c6:e3:09: 57:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:66:39:C8:AA:9F:CF:D5:FA:DC:15:A2:53:DC:BC:B5:90:D3:58:2A X509v3 Authority Key Identifier: keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:c4:b2:08:81:dc:ec:45:af:1c:87:95:a0:b2:e3:77:8f:e0: 17:d5:eb:4e:ae:43:f3:00:71:8b:59:ea:eb:80:5a:55:7d:16: 2f:2a:e8:be:ad:cb:7f:e1:cc:d9:56:fa:af:43:7c:65:39:d1: cb:53:64:f8:a1:e1:58:9a:6f:a4:d6:74:fa:1f:cc:03:de:16: da:d4:26:23:40:d3:72:b5:4b:56:25:21:cd:b3:eb:b5:42:37: e3:0f:30:dc:cb:a3:b0:59:a1:e6:47:e3:06:2e:80:42:9f:ec: 5c:96:22:ad:4a:82:f4:a2:33:e3:85:1b:b0:4b:45:d4:19:f0: c3:4f:9f:13:20:d3:d3:be:e9:7c:a9:40:23:d7:31:d4:2e:54: 06:33:c3:69:75:3b:be:01:05:23:5f:23:67:73:e8:42:ca:01: f5:99:32:14:cc:94:8a:43:04:4d:33:14:e4:4d:28:2b:15:3f: 55:a8:75:1f:d1:f5:ca:65:fe:10:7c:e3:4f:e4:a6:3e:05:48: c8:b9:af:e3:75:0a:c8:fa:53:ea:78:0a:d0:3a:dd:0a:57:82: 4b:86:7f:32:4b:23:2c:36:90:e2:de:7a:4f:af:f5:db:79:3e: c8:e2:f4:f5:c8:3f:de:cd:e3:d6:d2:02:a1:48:a2:20:30:6c: 9b:51:a9:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe36pGQdRqgCwI0T9jtEU/6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy MWZjZjIwHhcNMjUwNjI4MTkwMTMyWhcNMjUwNjI5MTkwMTMyWjAzMTEwLwYDVQQD EyhhMzY2MzljOGFhOWZjZmQ1ZmFkYzE1YTI1M2RjYmNiNTkwZDM1ODJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi3Wbfw+t49qhDJOqhWyGZE9wXrg QGDylOw6WZyIE3GRNa7Wd4rFhmL3zKheziTIrZ+NpYqUkuuu0SxBFz5WkGBzCSCs 4Sr/k8He/RtRWGkKwwNxeUyXAUR+rFG90MnIbRJL7BjsVdVMSLaJ5vfPzYgGZr2r RPupKBHtDoU6OLHnUyRpdZ6wSBoOb/e7XrW7K8wsjPBiyn/TlVb9GTOPmxbMBX9Q PmVz/LV2nZmgJ5sHYkSajfP3t+AkMvItzT6JuUMXZoMTTUCGKEZ7Lr+TpqqqPrKo 30LR9vCI+GEBYpU+TmZ48Gz6KOQhr4Ikcg7fiBQ1/w9H5tv7w57G4wlXywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKNmOciqn8/V+twVolPcvLWQ01gqMB8GA1UdIwQY MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt Mzk1NTk1OWVhZjgxLzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMSyCIHc 7EWvHIeVoLLjd4/gF9XrTq5D8wBxi1nq64BaVX0WLyrovq3Lf+HM2Vb6r0N8ZTnR y1Nk+KHhWJpvpNZ0+h/MA94W2tQmI0DTcrVLViUhzbPrtUI34w8w3MujsFmh5kfj Bi6AQp/sXJYirUqC9KIz44UbsEtF1Bnww0+fEyDT077pfKlAI9cx1C5UBjPDaXU7 vgEFI18jZ3PoQsoB9ZkyFMyUikMETTMU5E0oKxU/Vah1H9H1ymX+EHzjT+SmPgVI yLmv43UKyPpT6ngK0DrdCleCS4Z/MksjLDaQ4t56T6/123k+yOL09cg/3s3j1tIC oUiiIDBsm1GpMg== -----END CERTIFICATE-----Generated at Sat Jun 28 20:44:36 2025 by rpki-client