$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft File: dOPDNpcglLGowT1BgWhX0Zejquk.mft (raw, json) Hash identifier: QPE83TrXuJ+OAD9viw/mWt8I3kbnWtS3HTF3cSJsKyg= Subject key identifier: FF:A3:A7:25:CE:E5:4A:94:00:9B:65:C1:BF:8D:66:BF:84:8B:92:20 Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9 Certificate serial: 0197B7B35E65CD2901525E5A1D47B70F6ADB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft Manifest number: 12D5 Signing time: Sat 28 Jun 2025 18:01:15 +0000 Manifest this update: Sat 28 Jun 2025 18:01:15 +0000 Manifest next update: Sun 29 Jun 2025 18:01:15 +0000 Files and hashes: 1: 1jpCyAps9bajWpTTNjuuJqkvGNw.roa (hash: QdNF4dszmqN93C6OMT7lYcdmskEQt8kQtHTCFEeRLK4=) 2: B-IzhwSKXhHkz88nSETOGD9yRG4.roa (hash: YnLpp9fGmyMsduAjb3ebFR0Lsy/94n7A+dxRiyz9BXo=) 3: LfVA7yFSUE0qhq_HYTK38H6PAlY.roa (hash: Kppg3VjpkBzGqtZq9DRkl+9W1VehTNUgM7T4eg/Jh/E=) 4: UEcNqvrJ5SQl5H_s0LFUfwkR_hE.roa (hash: bIJXuRboJUOwUf77dVkGAbQtOlD1q8qNpaYp5FkD4+Y=) 5: UWwzSZwnxpR_r3Y4D6vttKdBBVs.roa (hash: 7svZa4xV7+uz3XJCftME26l72YGSUBkSe+OkDk5Vluk=) 6: VJ6MDr9v2VTJjopln-NK2ojxFwc.roa (hash: aCjSF+Bt+cDnTvcdibhV9s05hQuvY9LCYp3eMrgD2Ks=) 7: YOcpXFVJRTJW2caFAPTppkNQBuk.roa (hash: bsMm8G8+2Vegzn+c1SqEObi1wuYbeOXaQ994ZEYf674=) 8: a1U9llCdwrEqU4GkcwBsuwGny80.roa (hash: x9+7kA4QQzpZS4+gdNTWeXV2Ehq7i5FwV0w3Ws0zS7A=) 9: bilxvgHa_ortWdZiJoCPu9q2EO4.roa (hash: l/1X47j3OP5z+Rp05LuTXjyl7yZpgOm/aXT90ziTHDc=) 10: btX-zAe_zEJQ3ltM7sZKTKWNtzU.roa (hash: FXQNguGpvehosedHQRjCf06rJkvh5KY35ySN2Wig1dE=) 11: dOPDNpcglLGowT1BgWhX0Zejquk.crl (hash: 6nhvYslxOBUkYYxEtz5huATf04UnDOd9+IFGpt5FSZM=) 12: leLN7dUwqNQXTkicjPodaPNaHrA.roa (hash: /TZBYmyqPdbIBcWc+Ubi8mL2e3Sg1zgKUo/8XZMZsK8=) 13: ltEUPJ59iMmxTdNEYLGbM1Yq6jY.roa (hash: 4OyHOUV/gpG2mHKMCDQGjjKuCFHSFtOInlqympBF1Os=) 14: pzyfVcqGqM8oIh9yspKnplAOyo4.roa (hash: hsiUYyCYakxAYsQctvaT1faoOH457ARGeeeeMVZVUZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:b3:5e:65:cd:29:01:52:5e:5a:1d:47:b7:0f:6a:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9 Validity Not Before: Jun 28 18:01:15 2025 GMT Not After : Jun 29 18:01:15 2025 GMT Subject: CN=ffa3a725cee54a94009b65c1bf8d66bf848b9220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8d:03:6b:7a:aa:88:d7:f2:38:58:83:9f:64: d7:de:e5:40:7f:d9:2c:9a:b4:f2:53:7c:b3:a5:91: 0a:f0:7a:0b:3b:44:ca:d6:78:fe:e9:0f:17:66:c4: a4:ef:0d:2e:77:9b:05:19:82:b6:30:bf:a0:04:04: 81:75:86:4a:f6:80:68:6a:9b:70:7d:3e:3e:d4:6a: ee:2c:d9:57:65:5f:71:45:af:55:35:94:6f:86:85: af:8c:44:9b:de:6a:df:80:a5:1e:86:7f:5f:be:c6: ed:42:23:e1:a0:b2:ef:09:4f:77:0a:22:b1:99:83: ef:d3:17:03:9d:e4:eb:ca:07:ff:88:3a:49:1c:af: e5:0f:e0:ff:88:d3:d8:39:b5:3d:73:24:1a:b4:bf: 68:07:78:24:71:92:6c:d0:71:74:dd:c2:51:57:4d: 0e:cc:12:7a:2a:f0:2a:d0:3a:2d:c1:07:f8:a2:a9: 92:82:a0:35:a5:8e:13:57:ca:94:a1:54:ff:1f:e0: 89:30:5d:8d:53:71:ef:82:a7:98:96:43:72:bd:cb: be:87:c5:fc:6c:f4:b8:7f:60:bc:5e:89:13:06:f3: 2c:1b:af:e1:14:a1:54:78:d5:bf:4a:a7:a1:4d:f0: 39:80:28:e3:a4:6b:52:7c:76:ce:d8:fb:a8:b8:b2: 23:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A3:A7:25:CE:E5:4A:94:00:9B:65:C1:BF:8D:66:BF:84:8B:92:20 X509v3 Authority Key Identifier: keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:47:27:44:6f:7e:47:72:3d:42:b9:9a:55:7e:b9:71:4e:a7: b8:18:61:46:ca:a8:60:b5:45:5f:29:28:44:0b:b8:bc:21:e6: e8:a9:0f:ad:43:68:f3:e4:bb:89:e6:f7:d2:ff:a5:b7:4f:79: 1c:6a:d9:81:76:63:fa:69:8a:9e:45:a3:ad:1c:04:0e:e2:b7: 5c:8c:4d:bc:44:e6:fa:22:1e:64:04:ca:4c:a2:c2:e6:74:c2: 86:f5:89:60:34:6e:21:aa:7e:8b:2a:a0:0f:c1:a1:bc:c8:60: fa:ff:ab:7b:57:a6:f2:39:42:b5:8a:ee:94:60:56:c5:40:e0: f2:f5:60:45:8e:4f:40:bc:4e:8b:f0:83:52:c1:57:92:98:43: e2:27:a2:0e:e3:3b:0d:c6:c1:33:28:a0:7e:0c:94:c3:24:cc: cf:ac:5b:7e:db:31:65:12:69:3a:5d:82:57:22:81:cd:b7:f8: c0:95:37:20:79:6e:7c:6d:39:85:5e:9d:13:32:ba:c0:5d:92: 61:ed:62:1d:ee:64:44:b0:22:33:7c:f5:e2:54:88:66:8e:a9: bb:2d:82:b0:c2:5b:d9:c6:7a:c0:bd:85:ab:2d:29:79:2a:ba: f2:f2:68:72:ff:c9:e0:df:ec:ad:7c:5a:98:90:61:c2:2e:30: d9:2d:13:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3s15lzSkBUl5aHUe3D2rbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh M2FhZTkwHhcNMjUwNjI4MTgwMTE1WhcNMjUwNjI5MTgwMTE1WjAzMTEwLwYDVQQD EyhmZmEzYTcyNWNlZTU0YTk0MDA5YjY1YzFiZjhkNjZiZjg0OGI5MjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq40Da3qqiNfyOFiDn2TX3uVAf9ks mrTyU3yzpZEK8HoLO0TK1nj+6Q8XZsSk7w0ud5sFGYK2ML+gBASBdYZK9oBoaptw fT4+1GruLNlXZV9xRa9VNZRvhoWvjESb3mrfgKUehn9fvsbtQiPhoLLvCU93CiKx mYPv0xcDneTrygf/iDpJHK/lD+D/iNPYObU9cyQatL9oB3gkcZJs0HF03cJRV00O zBJ6KvAq0DotwQf4oqmSgqA1pY4TV8qUoVT/H+CJMF2NU3HvgqeYlkNyvcu+h8X8 bPS4f2C8XokTBvMsG6/hFKFUeNW/SqehTfA5gCjjpGtSfHbO2PuouLIjewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+jpyXO5UqUAJtlwb+NZr+Ei5IgMB8GA1UdIwQY MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt YTZjNDllYjI4Mjg3LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3 LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACEcnRG9+ R3I9QrmaVX65cU6nuBhhRsqoYLVFXykoRAu4vCHm6KkPrUNo8+S7ieb30v+lt095 HGrZgXZj+mmKnkWjrRwEDuK3XIxNvETm+iIeZATKTKLC5nTChvWJYDRuIap+iyqg D8GhvMhg+v+re1em8jlCtYrulGBWxUDg8vVgRY5PQLxOi/CDUsFXkphD4ieiDuM7 DcbBMyigfgyUwyTMz6xbftsxZRJpOl2CVyKBzbf4wJU3IHlufG05hV6dEzK6wF2S Ye1iHe5kRLAiM3z14lSIZo6puy2CsMJb2cZ6wL2Fqy0peSq68vJocv/J4N/srXxa mJBhwi4w2S0Trw== -----END CERTIFICATE-----Generated at Sat Jun 28 22:08:52 2025 by rpki-client