$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft File: jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json) Hash identifier: RL1wXEUUmPJ4KqV1+IxA6uhIu8KLBQBNtpW+qf0PQ/Q= Subject key identifier: 4D:16:94:80:98:26:79:56:B0:4B:73:B7:0D:86:4B:20:9A:41:D1:61 Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Certificate serial: 0197B7EA774E03EFAD39E4EAD304889D1D84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft Manifest number: 1555 Signing time: Sat 28 Jun 2025 19:01:25 +0000 Manifest this update: Sat 28 Jun 2025 19:01:25 +0000 Manifest next update: Sun 29 Jun 2025 19:01:25 +0000 Files and hashes: 1: A3slZgyg9eemzONzeM4ZjQZOkQA.roa (hash: X0hOJW7H3OQv8gNe/Scffw0tX7rp3lfITg3c2bDp62I=) 2: Dyi32KlOskocQHPe6FUF7ELQs5U.roa (hash: D3EF+UreJY6p0ckzuksgWXVvYetF6sITxKDGv/w2L0k=) 3: FJEFcX2c3QiytgwJXtBXdfXF7AQ.roa (hash: wDOQFjMrdpmJOwUI55qSC810FFGrsaY4QPcOoJKWykM=) 4: G_noKzntiWHLaHSdta1FputJESM.roa (hash: 76HBYH18Q5+wfRzE5ydGp21BC62rcsuS2tSvCzBrWp8=) 5: K9IKE8UzWzIlRqgdm5DBscj4DXI.roa (hash: TmNOvsKyJxclTHoJrrP+Wz2lJl3QKp06vZRtwf2Wkwo=) 6: Orf0-crrS-m0d2xw75OekVLRhcU.roa (hash: NyC6YqKt0FNmC1unp3jevt47/gr2Ss5dzqvXJGD2AjU=) 7: THZGRo10wjMlm6DbRUy7KjrwfkM.roa (hash: 9FjGohVB5WEFkwBSNZEgEcooaudVJnnxxDK2Jy9/LgI=) 8: VmEKVuU_uT-v34QUxuvTEoMoaug.roa (hash: lCfgs7Wts05rdP9N+OaYxsLVxOabAGR5SUtGArrm95M=) 9: Vxz_brs8mMP8pyfBjMG6SqLCoLA.roa (hash: InPdcQtGkZTGLva52kv6ADnfkbCulTXgK4jOcLs8G7M=) 10: Xmin5XG-kRl49Vt7ZEcTgSLDhDM.roa (hash: DHMC7YXYfDSAA2x6JnOvMwJT1zdpAymlypp6F1bKmgY=) 11: Yfzph1m23vmbClyvIoORpS1CW-E.roa (hash: SuwU2G9eYZ/n+GS6xB/GEsh3UziEYPdyi1WD5kRpjAo=) 12: _vcj5hH5PQmqE-mf4-B7kcWGpfg.roa (hash: ReLlnYnzQbiQ5Pk/0fIjBSPY1fpdoMBMJpSnkiSreWk=) 13: d-sWN4azI8sU7mlb0U-920Rsmtc.roa (hash: eiusVr40X1jFuIAj+CFi96eXy2bKXAQXnB20dKkv/70=) 14: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: rUqHUxyEFCh+5QjPULfBDKGYQnGhLrdaCrIV4Nj6hr8=) 15: mwm5rC4rfoUfkUGj1keywZQhhGw.roa (hash: dDwtNYt9WubuetSqef0LQakniH0rgBVhQK32OI1f1fU=) 16: nyxtNnWsxM3-5IIVvMZ44cQVEYU.roa (hash: ub8VtVKtgWVEPS0rlKsjT0ZjeuiFnfLTw/tC6ZpW/Vo=) 17: v5kzcztD_Zc4DwbwnN4YfKR9YoA.roa (hash: 33e8kQ++AVlCN79vtcp+1+C+oGUNBxplYHYOGaRMl58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:ea:77:4e:03:ef:ad:39:e4:ea:d3:04:88:9d:1d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Validity Not Before: Jun 28 19:01:25 2025 GMT Not After : Jun 29 19:01:25 2025 GMT Subject: CN=4d16948098267956b04b73b70d864b209a41d161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:eb:d6:5d:fe:50:b7:a9:9e:82:2c:23:c1:ff: fa:ab:17:cb:03:8a:ea:a4:33:5c:32:57:49:0c:2f: 84:6c:e7:11:15:25:1a:ba:12:d1:3d:f5:0a:12:e2: e2:dd:f1:23:c2:65:4a:70:1d:3d:25:20:3a:b1:fd: a7:37:2a:92:0c:46:24:db:b9:60:fb:6c:cb:e9:17: f6:43:d4:55:24:b1:f4:c4:92:a9:8e:4c:7c:aa:26: ae:42:42:00:4b:11:64:57:c4:c3:45:70:56:40:e3: 38:fc:e7:48:6a:be:39:11:9c:64:5a:67:c7:92:09: 11:57:13:ce:14:f1:25:6f:e0:bf:6b:6d:2b:40:a7: 63:c7:f5:7c:c7:be:6b:62:dd:b6:9d:bf:8d:a5:c0: e8:29:8d:01:52:d0:25:2f:22:f4:92:5a:e1:1c:36: 4c:68:e2:ac:0b:e5:5a:e4:9a:38:17:bf:09:e0:d7: 45:1f:3f:9a:a5:0b:f1:ff:8f:b3:e2:7c:34:88:bc: 0d:de:73:12:94:1d:51:95:f9:df:5f:76:5a:44:50: 3d:3d:20:38:ce:1e:07:cc:4c:6e:15:e9:12:be:55: 6c:3f:9b:2f:42:e3:1c:06:c7:95:2b:15:5d:b3:5d: db:9c:1d:49:e2:2d:1b:6d:d3:19:69:8b:d5:2c:d7: 05:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:16:94:80:98:26:79:56:B0:4B:73:B7:0D:86:4B:20:9A:41:D1:61 X509v3 Authority Key Identifier: keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:d9:e7:0a:b5:1f:c0:32:55:0a:a1:77:d6:07:a9:08:58:d2: 43:03:e7:c7:4e:66:2a:52:a6:18:b5:4b:38:b1:0a:f8:5f:f2: 55:69:f7:ff:6b:65:af:84:8f:c2:79:e8:e5:ea:e9:e4:cb:99: d6:de:05:30:44:37:ad:d0:13:63:ad:10:5d:b3:48:7f:31:75: 14:e7:e9:b0:11:97:fc:d9:3a:b4:fa:ae:c5:36:a3:93:36:7a: 08:42:2b:9f:b7:7f:a2:84:af:fe:8a:da:a1:fa:3e:fc:9a:d9: d8:48:0a:30:31:0f:8e:cf:d6:c1:1f:1d:0b:44:5c:bf:6c:20: aa:25:90:f3:a7:d0:2d:f8:c5:7b:df:39:2e:b8:6c:84:8d:49: 09:be:d1:0b:6f:02:4a:ce:73:02:dc:5c:56:5b:6b:d9:0a:0f: 68:13:f7:f6:4a:bc:86:98:69:65:86:48:69:64:99:75:90:6f: 99:0c:e4:61:8a:ae:6c:b2:0f:9e:06:4b:9f:c1:fe:c4:99:a2: bd:39:e2:7e:38:45:2e:ce:0c:7d:8b:38:d1:71:01:f3:27:bf: 9c:72:48:dd:f9:05:11:ba:2a:f4:ea:ac:a6:aa:56:f0:b7:2c: 3b:1e:5a:d6:6b:3d:f1:ed:ac:69:a3:6f:d4:4b:f7:cc:5f:43: af:67:f1:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe36ndOA++tOeTq0wSInR2EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl NjNjMTMwHhcNMjUwNjI4MTkwMTI1WhcNMjUwNjI5MTkwMTI1WjAzMTEwLwYDVQQD Eyg0ZDE2OTQ4MDk4MjY3OTU2YjA0YjczYjcwZDg2NGIyMDlhNDFkMTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OvWXf5Qt6megiwjwf/6qxfLA4rq pDNcMldJDC+EbOcRFSUauhLRPfUKEuLi3fEjwmVKcB09JSA6sf2nNyqSDEYk27lg +2zL6Rf2Q9RVJLH0xJKpjkx8qiauQkIASxFkV8TDRXBWQOM4/OdIar45EZxkWmfH kgkRVxPOFPElb+C/a20rQKdjx/V8x75rYt22nb+NpcDoKY0BUtAlLyL0klrhHDZM aOKsC+Va5Jo4F78J4NdFHz+apQvx/4+z4nw0iLwN3nMSlB1RlfnfX3ZaRFA9PSA4 zh4HzExuFekSvlVsP5svQuMcBseVKxVds13bnB1J4i0bbdMZaYvVLNcFVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0WlICYJnlWsEtztw2GSyCaQdFhMB8GA1UdIwQY MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt YmE3NzFmZmQyNjljLzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVNnnCrUf wDJVCqF31gepCFjSQwPnx05mKlKmGLVLOLEK+F/yVWn3/2tlr4SPwnno5erp5MuZ 1t4FMEQ3rdATY60QXbNIfzF1FOfpsBGX/Nk6tPquxTajkzZ6CEIrn7d/ooSv/ora ofo+/JrZ2EgKMDEPjs/WwR8dC0Rcv2wgqiWQ86fQLfjFe985LrhshI1JCb7RC28C Ss5zAtxcVltr2QoPaBP39kq8hphpZYZIaWSZdZBvmQzkYYqubLIPngZLn8H+xJmi vTnifjhFLs4MfYs40XEB8ye/nHJI3fkFEboq9OqspqpW8LcsOx5a1ms98e2saaNv 1Ev3zF9Dr2fxCw== -----END CERTIFICATE-----Generated at Sat Jun 28 23:06:01 2025 by rpki-client