$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft File: jzgYVUpRgI7vuCnsdGWjIi8nASM.mft (raw, json) Hash identifier: UlqGaVEn/Wy24Dzw267oHsE78HMo6jabfWlOOfdQ7Gs= Subject key identifier: 87:DE:28:C0:99:A6:11:33:7C:56:42:EA:A3:D3:E8:9A:6D:30:49:83 Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123 Certificate serial: 0197B7EAC9C4EE28D2E3471A1DAC0C0F00F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft Manifest number: 15F0 Signing time: Sat 28 Jun 2025 19:01:46 +0000 Manifest this update: Sat 28 Jun 2025 19:01:46 +0000 Manifest next update: Sun 29 Jun 2025 19:01:46 +0000 Files and hashes: 1: 1-d5l7iEM0a18LhX1EyGB8md8n8M.roa (hash: 501zHAdTFZeEcvr80KDCfqteaSP9iBPoj2GeSoFGK4o=) 2: 1pbl9lLrLHSegTR5aMKg_vc70Uo.roa (hash: JuIlY/C1ag+dEHYXDzz9ICIcinIRd2dm1piPpM/bPQE=) 3: 3zrOYfPwdwhMIYtIoDWyzk7SucA.roa (hash: ruw9KhAohiZRqx+LW+C5lr9bjBdHC4VDTTsxeERmgZg=) 4: D9naFu6VO2lwpjmohULxFpHf9o0.roa (hash: /QUuvgGaHE+yk+5fnp+5qSsx9OmsxECFhKZjRSqaWdE=) 5: Dhmm9E4z9IDgJopzgLGmxrHdNQ4.roa (hash: B8DLE1dNxG4G5fXZ02aNrPdB4JUf1oXnLm020cY0Ang=) 6: Fex3ntehhk9YD9UIIrzJwNM9wrw.roa (hash: sq3dolfBoZQI4X41dAgCq7RgYZJhMoyQLMqp5TWhC2I=) 7: VjpJTcOg3A5jj9MR_Jf-2rC27FI.roa (hash: j+JKcPjYq1zl0l4R0plKeTXWGQoSZJuEOufZw9GSsFY=) 8: YW1hjZcECO_e-0edVIPSxYfb76o.roa (hash: Z7Jb+7gEawQrZdP5rGn/EP9zISP8MR7q05pqJZYy5UQ=) 9: Yf4EPkmLCRMBoZZIyHDnCPRPVEI.roa (hash: ttyqpkkqQzqqS+yO4BIrD80NvM4sA9JzqnD08LyFADk=) 10: bilb14WArW1Ov7SsrYk0Wsxs1vU.roa (hash: vP2MTh6QB6vRojmbG2tYWTOri2gn+m2SiJ7LuQrhK/Y=) 11: dXcSjT8XLHwaAMrJxhlYycEZesc.roa (hash: vJl3MVsCu53wiiS+S6cF6AaFBwg//wkLirqkCxUkMcU=) 12: djNEYQKUqckFK1iM46DyL8t42d0.roa (hash: NQBuvCxVnkGQRlXPk53EZOQo+ABbplgx2/ODuq1jN3M=) 13: f7g9WoNm-2HicP4eAC6c6FDXbfw.roa (hash: zw4AKABwEHT1G3SslViMu4vYgw9q/wbL5miIJACFbLo=) 14: gvygCJRNiZjAzFCHzFEh-Jvn8p4.roa (hash: GokX4+GYxsZuRoER2H3W827pg8jM7a0dfuDGYTpJcug=) 15: jzgYVUpRgI7vuCnsdGWjIi8nASM.crl (hash: KeNcJ1BuRTxzVt3iDEGYjlcrE/cLmkLjOhSftbabmWg=) 16: l4eCCyQbqnmNaWzCsO-CTHaJLBQ.roa (hash: +can2V5bGbRV5XkaQEn6m/2qdSAnNySkBwlFd9kA+2w=) 17: mfw9rN7s0JH2LVr_IrLTwFMFT7k.roa (hash: Fl3Qq4SjgxhY/P+3EJokj3AAPC+i2wSth+OMzYo5JiY=) 18: sHn49Wbb5PrrjUwnaQqlFkCVe1w.roa (hash: Js/zXcmF6Rja4dKWo6EIhgWUvKjRGSk5unEUfI1hOIs=) 19: xQd5W4e4PnDjglCYlz04ippgCtY.roa (hash: Tau6wHDOULjCaWttAcL4vrdDPhetrZL68pVWIATRLJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:ea:c9:c4:ee:28:d2:e3:47:1a:1d:ac:0c:0f:00:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123 Validity Not Before: Jun 28 19:01:46 2025 GMT Not After : Jun 29 19:01:46 2025 GMT Subject: CN=87de28c099a611337c5642eaa3d3e89a6d304983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:06:0e:0b:87:ec:b4:f7:07:64:bf:67:b5:18: 86:3e:d1:51:54:e1:c5:2f:76:3f:e2:68:88:7e:0d: 10:20:3f:50:66:2b:85:e7:f9:ef:da:dc:d3:b2:06: 76:36:39:62:24:c8:48:ed:22:21:40:f1:ab:a1:c0: 7e:06:14:23:32:7e:8f:10:9d:56:20:91:f6:b9:c2: 4c:50:10:a8:02:87:05:06:65:22:b2:2a:11:80:2c: 81:6a:58:2a:de:0d:93:a1:35:41:c3:c2:15:e7:e0: cc:3d:32:b2:e5:24:24:95:75:6d:39:14:f4:50:2a: b2:b5:b4:71:9d:9a:6a:ac:4e:2c:cf:51:3f:48:7e: 7f:d9:02:22:23:6c:f4:1f:f3:e4:77:3b:5d:10:fe: ec:9d:01:c2:0d:2b:22:91:d1:df:f2:7a:d3:fb:47: aa:48:c4:72:07:7d:50:f8:ec:7b:bb:bb:66:82:09: 32:c9:f8:4a:90:fd:c9:54:3f:32:57:68:36:39:ea: 87:30:9b:81:02:e6:12:26:73:04:4c:e7:05:a3:13: ee:dc:b1:a9:49:c8:ad:7f:5c:9a:7c:5a:8a:2e:aa: 4c:14:db:88:90:db:a8:a6:31:e3:bc:92:f1:ca:39: 7e:b2:2e:08:8e:92:a5:c3:0f:b4:26:46:50:52:7c: db:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DE:28:C0:99:A6:11:33:7C:56:42:EA:A3:D3:E8:9A:6D:30:49:83 X509v3 Authority Key Identifier: keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:41:bc:c9:c3:7d:35:68:7c:c8:91:57:5e:4e:50:53:76:0b: 18:87:88:19:7a:a6:7a:6b:f5:c2:cd:9d:c3:bc:41:5b:db:8c: ae:52:64:74:93:dd:7f:a5:03:be:f9:99:a0:a6:b4:ba:18:f2: 4c:ee:c7:ed:0a:fc:4c:c1:f4:9c:e2:ae:22:ef:de:51:36:9d: 9c:bb:2f:c3:ea:43:07:43:5b:9b:e3:06:35:b2:7f:95:d3:70: 8a:64:dd:3e:66:6a:ad:0d:8f:4a:e6:9c:0f:15:cf:7a:32:57: 40:6f:1a:a8:21:28:98:b5:39:a3:c6:d8:6b:e0:94:43:1a:3c: 21:45:51:26:60:68:37:89:a4:5d:62:8e:90:96:89:4b:5c:34: 8a:09:08:d0:13:d1:2a:68:50:a5:de:d6:74:36:32:35:11:64: e1:e1:a7:83:0c:53:9f:fa:5e:80:f3:f6:43:2f:1a:0b:6c:09: 24:83:74:0f:88:6b:e8:84:87:0b:7d:6e:8e:6a:c8:8c:c4:e9: d3:ea:05:df:81:de:f7:8c:b8:a9:df:cb:60:e8:6f:b3:91:ac: 5d:56:66:70:c7:a0:d6:07:3e:0f:a9:4f:97:b6:0b:03:92:05: 6f:7e:06:8f:5b:25:f3:2c:04:a9:ae:5d:8d:e3:6f:c1:e5:de: e0:a3:3a:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe36snE7ijS40caHawMDwDxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy NzAxMjMwHhcNMjUwNjI4MTkwMTQ2WhcNMjUwNjI5MTkwMTQ2WjAzMTEwLwYDVQQD Eyg4N2RlMjhjMDk5YTYxMTMzN2M1NjQyZWFhM2QzZTg5YTZkMzA0OTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+AYOC4fstPcHZL9ntRiGPtFRVOHF L3Y/4miIfg0QID9QZiuF5/nv2tzTsgZ2NjliJMhI7SIhQPGrocB+BhQjMn6PEJ1W IJH2ucJMUBCoAocFBmUisioRgCyBalgq3g2ToTVBw8IV5+DMPTKy5SQklXVtORT0 UCqytbRxnZpqrE4sz1E/SH5/2QIiI2z0H/PkdztdEP7snQHCDSsikdHf8nrT+0eq SMRyB31Q+Ox7u7tmggkyyfhKkP3JVD8yV2g2OeqHMJuBAuYSJnMETOcFoxPu3LGp Scitf1yafFqKLqpMFNuIkNuopjHjvJLxyjl+si4IjpKlww+0JkZQUnzbfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfeKMCZphEzfFZC6qPT6JptMEmDMB8GA1UdIwQY MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt YmZiNGJhMzBlNDVhLzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfEG8ycN9 NWh8yJFXXk5QU3YLGIeIGXqmemv1ws2dw7xBW9uMrlJkdJPdf6UDvvmZoKa0uhjy TO7H7Qr8TMH0nOKuIu/eUTadnLsvw+pDB0Nbm+MGNbJ/ldNwimTdPmZqrQ2PSuac DxXPejJXQG8aqCEomLU5o8bYa+CUQxo8IUVRJmBoN4mkXWKOkJaJS1w0igkI0BPR KmhQpd7WdDYyNRFk4eGngwxTn/pegPP2Qy8aC2wJJIN0D4hr6ISHC31ujmrIjMTp 0+oF34He94y4qd/LYOhvs5GsXVZmcMeg1gc+D6lPl7YLA5IFb34Gj1sl8ywEqa5d jeNvweXe4KM6hg== -----END CERTIFICATE-----Generated at Sat Jun 28 21:45:57 2025 by rpki-client