$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft File: 0d4STg-K2059lXbOrjJfZo3SJLE.mft (raw, json) Hash identifier: Syag2yfMcLF/fcB80tGBwu/iZEu0ce1XSCUws/dUtQA= Subject key identifier: C3:4C:07:F6:54:2B:E4:9C:B6:69:F3:B0:13:4E:6C:7D:E0:10:9D:CA Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Certificate serial: 0197B8905110BC1FE857DDDABBF5823F9CE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft Manifest number: 10D5 Signing time: Sat 28 Jun 2025 22:02:34 +0000 Manifest this update: Sat 28 Jun 2025 22:02:34 +0000 Manifest next update: Sun 29 Jun 2025 22:02:34 +0000 Files and hashes: 1: 0d4STg-K2059lXbOrjJfZo3SJLE.crl (hash: pUMowMiCxobS8KiEfvbsnW4er2HBfNPaQ5xAOeXpFrA=) 2: 173-Kv1jDbMWH-4jzzP9yAxk8zA.roa (hash: RAtumuE7sBDLlYGFZheJtE3TDChYxfxrc7dviHDr/Y8=) 3: 21R7B0PZj4S2nfPcu6UWFcUKPgw.roa (hash: qB6ZX383pt5nIhJxyHETDpwIazDIAavubmmD8LzTgMY=) 4: 6caVUV-TGB9bU55p1ya71OWBwvg.roa (hash: c0tRExOUVeBF8+Pq6PhYarD4KHj6+N7f0p/w2jdUK80=) 5: NAlGVYpV8OEmdD2nIMiqn334k0M.roa (hash: XrkbVPgrR7sOnmYGzDR8m+MZN8NJUZRQwjZqOHkM5b8=) 6: dNqRqY6tmtgccI8cx_uJ4tWqiZA.roa (hash: g+K2hBhsL/swaozLRy4ek/JzzpG8kCplNhlD1lsyOeY=) 7: dm3YzK1xAmi2Sk5h8a3Khi5LGPM.roa (hash: p3jFvRhnZ5PWDigF+fLcdkZKduSSZASiccn7Ico+UoY=) 8: g8zmfO2HPSEN8YUDrAkY2r7Nlqw.roa (hash: uAg57JMTD8oD+ghOOtfACvdQoLeAHc5YjQ/CuCFoViY=) 9: hacEV-MoLT8z9KwMPWss3cGE7Ak.roa (hash: /ljDI2bMRna9vPYEiWkrDiOeR+IfW8BnSxXE9Vp7xXE=) 10: odu_cE6nPid9mTtdeynLn3Tm0LI.roa (hash: t/tnuabvUXprLV1nfI7C0+QM/zgYQu0v/clGVZKqTgc=) 11: qnoXcobTtJZawYccy6q_j_ktEjQ.roa (hash: YgqRq2TALdrM9up57j8hrsz1UPh0HBnD1px4pxGN8rs=) 12: xiZp6eivWb7x_d9W-WC8kwhVWsI.roa (hash: GvxU73beqXLMBxGmaGGngexgQ65uQMfsvmeuizGIl8o=) 13: yv08EH90nRPgnJ4aLVioWHP74iI.roa (hash: wfa+cbtIfXj/VcabZ84otkiskAuSmrS6+55fqOkIL+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:90:51:10:bc:1f:e8:57:dd:da:bb:f5:82:3f:9c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Validity Not Before: Jun 28 22:02:34 2025 GMT Not After : Jun 29 22:02:34 2025 GMT Subject: CN=c34c07f6542be49cb669f3b0134e6c7de0109dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b5:ce:ac:30:dc:a4:73:75:47:5f:11:f6:97: 41:da:b2:ab:b3:cb:ce:39:5d:a7:80:85:99:23:f4: f2:db:ac:b1:8e:c0:03:d5:cd:db:61:48:8a:e3:f8: b0:3a:bb:ee:35:c1:80:38:40:0a:77:85:51:09:1a: 9b:6f:ec:dd:69:30:e8:1a:38:05:6e:57:ce:d0:f3: 47:ca:c8:de:c1:7d:3c:5f:4c:22:fe:cc:f4:7e:39: 93:d0:25:43:6c:c4:1e:2b:be:ca:88:55:42:73:a7: 57:ad:77:4a:85:1d:d2:c0:9e:7c:38:fa:80:59:76: 71:f7:f6:1f:0c:a7:a5:95:a1:db:c1:2e:07:16:a9: b0:ad:d6:c3:f2:c1:dc:65:c0:6e:84:46:4c:ec:78: 9e:ad:38:62:ee:39:7f:35:5a:cf:27:78:4b:a3:72: 34:f8:e8:3c:4e:04:1b:bd:5f:d5:3a:bb:27:f2:50: d8:c2:1a:05:8f:7f:7a:dc:1e:ae:a8:6f:c7:c1:bc: 56:45:46:73:b4:af:4b:8d:07:15:bd:1c:16:0e:b5: d8:dd:db:c9:71:09:47:a1:fe:6c:23:11:af:c2:91: 03:a4:ed:6f:24:38:98:4b:83:3b:92:91:e1:f0:29: 9e:62:f4:87:f2:9d:02:e4:60:26:94:c7:1d:fb:62: 58:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4C:07:F6:54:2B:E4:9C:B6:69:F3:B0:13:4E:6C:7D:E0:10:9D:CA X509v3 Authority Key Identifier: keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:67:0b:2d:fb:2e:a9:8a:71:fd:13:1e:f4:ed:c1:7a:92:dd: 64:0d:4f:b0:08:ff:e5:97:fe:6b:85:fb:0d:30:45:b5:5d:91: 16:06:6c:ff:4b:2a:62:16:18:15:e9:95:b6:48:05:e2:71:dd: 8a:b7:bc:6a:31:66:32:c9:81:dc:88:35:be:5b:36:c2:c3:d3: 52:8b:57:4a:ca:59:10:69:fd:ab:e6:d2:82:a6:8f:b1:fe:5e: 75:49:3e:6e:ea:11:ed:f4:27:64:57:3d:05:d3:37:fc:b6:33: 18:95:38:b4:df:4e:d3:bf:14:3a:59:7d:3b:e9:5f:1e:02:9e: 75:30:4c:70:f6:05:6c:ed:bf:ea:e2:2b:3e:80:5b:46:a0:10: f0:9d:21:a8:c0:41:97:d4:e9:42:87:69:f6:1c:7a:32:70:e6: e6:0a:54:ef:4f:cb:d7:56:c9:4d:83:c9:76:54:b1:9b:16:7d: 5a:81:db:5d:40:50:d4:8a:c1:8a:f4:b9:d1:d6:2f:d4:f2:2c: 3d:64:c6:40:97:02:20:d3:1a:ca:b2:18:b8:7c:a6:a7:61:ab: 64:ad:a0:be:43:d1:d8:32:a8:3a:07:c7:08:47:0b:b0:3c:28: f3:56:32:05:3b:99:f9:e8:f8:e0:b0:a9:e7:57:df:2a:1e:79: b9:c1:65:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4kFEQvB/oV93au/WCP5zgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZGUxMjRlMGY4YWRiNGU3ZDk1NzZjZWFlMzI1ZjY2OGRk MjI0YjEwHhcNMjUwNjI4MjIwMjM0WhcNMjUwNjI5MjIwMjM0WjAzMTEwLwYDVQQD EyhjMzRjMDdmNjU0MmJlNDljYjY2OWYzYjAxMzRlNmM3ZGUwMTA5ZGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLXOrDDcpHN1R18R9pdB2rKrs8vO OV2ngIWZI/Ty26yxjsAD1c3bYUiK4/iwOrvuNcGAOEAKd4VRCRqbb+zdaTDoGjgF blfO0PNHysjewX08X0wi/sz0fjmT0CVDbMQeK77KiFVCc6dXrXdKhR3SwJ58OPqA WXZx9/YfDKellaHbwS4HFqmwrdbD8sHcZcBuhEZM7HierThi7jl/NVrPJ3hLo3I0 +Og8TgQbvV/VOrsn8lDYwhoFj3963B6uqG/HwbxWRUZztK9LjQcVvRwWDrXY3dvJ cQlHof5sIxGvwpEDpO1vJDiYS4M7kpHh8CmeYvSH8p0C5GAmlMcd+2JYZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMNMB/ZUK+SctmnzsBNObH3gEJ3KMB8GA1UdIwQY MBaAFNHeEk4PittOfZV2zq4yX2aN0iSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTct NGY0YzliMzQzZTkwLzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTctNGY0YzliMzQzZTkw LzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR2cLLfsu qYpx/RMe9O3BepLdZA1PsAj/5Zf+a4X7DTBFtV2RFgZs/0sqYhYYFemVtkgF4nHd ire8ajFmMsmB3Ig1vls2wsPTUotXSspZEGn9q+bSgqaPsf5edUk+buoR7fQnZFc9 BdM3/LYzGJU4tN9O078UOll9O+lfHgKedTBMcPYFbO2/6uIrPoBbRqAQ8J0hqMBB l9TpQodp9hx6MnDm5gpU70/L11bJTYPJdlSxmxZ9WoHbXUBQ1IrBivS50dYv1PIs PWTGQJcCINMayrIYuHymp2GrZK2gvkPR2DKoOgfHCEcLsDwo81YyBTuZ+ej44LCp 51ffKh55ucFluw== -----END CERTIFICATE-----Generated at Sat Jun 28 23:32:57 2025 by rpki-client