$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft File: I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json) Hash identifier: 0lHbx2mauvYXPG5L1k0vgrGUZG7Yayplt4Mkjp0i2E4= Subject key identifier: 4D:20:B0:10:6A:0A:C5:4D:FC:F6:E4:BF:9D:CB:D3:5B:23:DC:77:29 Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 0197C801B86ED4FC541A72424B853CA4B8BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft Manifest number: 0BFE Signing time: Tue 01 Jul 2025 22:00:45 +0000 Manifest this update: Tue 01 Jul 2025 22:00:45 +0000 Manifest next update: Wed 02 Jul 2025 22:00:45 +0000 Files and hashes: 1: 2tV1T5SBsSkKar1qXX5FYlQ_B9Q.roa (hash: mGLI3Jd52qgMG50087Vl0ag+Rgi85Yfd8348tK3nJlQ=) 2: 9CjEL92KVQbBIKjAH6PWgI9d9kA.roa (hash: CxlINazLO+svbCxijVW6/kRGdkNG420xQ9K3jp5I7bo=) 3: 9Q-K0yA0D9jdkGXn7ifhVh2hLe4.roa (hash: BhOE66QanPWqjjysyWqBU6hcSToV2kkgkpmWedK9Plo=) 4: BKpPZ6YhMA786wWelQvZ2FdIeg0.roa (hash: CY94cVx1ALq/cp1lEiwu3JzO7Vk53LXHozpiwU2ifHA=) 5: Gg5xBTPmG5wIfgvjDfofedqUN2I.roa (hash: 44BexOUoVzM2f1vahHLSGVHdqnL6HKMPG3ed5PmM4sw=) 6: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: 00RCXIUKpzk5zH/y4F3uvLq6oo6XJLibbCkuWlJZjnA=) 7: KfWHlYFQnzVI2dPuoiLZqsly00A.roa (hash: hXW7e+AyYxT2PE5t8wRUT3atz/+WaH8gt4XQgdBp/mU=) 8: LtctFlc4GRCf3PIlxO5Sz70Upcc.roa (hash: 9oaNZGvrfQP+yRIBwwcg5U7jui8/sOP7Dz6ZLTuPIgM=) 9: LxwAd59gPAFiSwQsp6U5bWHTUIA.roa (hash: sV/jv6UM3eB6Fepo8zmoDeIxV8A3Cp94EBt2zbiu7+M=) 10: M73NPvrSZwGhIOTA9SbUvHl1x90.roa (hash: ijksxiMRPCxOAqaVav7odzv/IiE5tQUZQM4rRqWGT00=) 11: P4Ngmm4fscIJdjrtcZXwEWC6af0.roa (hash: Dgr4uE36WEf5Xw9kH8tw5qMQ+ewLeqeUvdPupgorbKg=) 12: gspg21PC-Bi6SGHc2DwZhP3SxPE.roa (hash: za152yl/mt+IWnj6LxRFIHIPMleLO2z2bWoNpUAX6js=) 13: nppvTips8XGcmj9VgC_a0xkLzT8.roa (hash: +FXbEH/4T1tplmkgWcOzmoIVkqvQhGApNb34NJo2CWU=) 14: o99Nup4psTKMh8kJYocwkh14uKQ.roa (hash: lhz5Qy+hcNJDmky6RtlI26JguzX0YUJj3nMqDKA0YLM=) 15: y9rvtnyXZQSaHcISGufCbgd9oMg.roa (hash: YtKgQZ+a37E4WaxSPAYmpHW8Z8QKRoCD8fhZcaauCRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 02 Jul 2025 16:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:c8:01:b8:6e:d4:fc:54:1a:72:42:4b:85:3c:a4:b8:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Jul 1 22:00:45 2025 GMT Not After : Jul 2 22:00:45 2025 GMT Subject: CN=4d20b0106a0ac54dfcf6e4bf9dcbd35b23dc7729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a1:1a:58:96:d0:66:b3:72:27:d6:52:8d:45: ba:00:7c:96:6b:13:cc:43:29:9f:3c:a4:1b:dd:7f: 1f:5e:1b:f9:31:cc:28:c9:7b:72:de:13:3f:30:52: 2e:85:23:44:44:53:be:0c:42:23:06:99:64:7a:99: 11:89:f3:50:bb:f2:13:d0:31:26:f1:14:b4:82:0a: 0e:6a:a8:0c:5c:76:d0:ea:b4:de:6a:2f:c8:84:05: d3:40:e4:06:37:fc:b5:71:00:0e:d8:9a:a5:c4:5d: 50:22:20:2a:3f:c1:7d:1e:1a:eb:eb:2d:53:71:4f: 37:41:ce:07:6b:d8:6a:3f:57:1e:32:de:f8:ce:f6: 7a:95:ba:db:38:c5:20:76:d9:fa:bc:b3:e8:1f:ab: 64:c3:4a:e6:ec:ce:c9:99:9a:53:8c:64:08:b7:f8: 15:95:fc:23:e2:d8:bd:7a:4d:d8:15:18:8d:59:16: 22:a2:a2:68:4d:f6:03:48:03:bc:d5:63:9c:4b:5d: 32:af:58:88:10:aa:2e:7f:eb:3f:66:f8:0e:d9:17: 09:99:d7:b2:b9:73:45:e9:9e:51:0f:40:76:2e:8e: 17:c8:54:14:d8:83:27:a8:9c:05:25:00:24:bc:86: 56:50:46:bc:87:3d:8f:fa:a4:42:25:46:69:e7:66: 1b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:20:B0:10:6A:0A:C5:4D:FC:F6:E4:BF:9D:CB:D3:5B:23:DC:77:29 X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:b5:6d:c9:8e:9c:6e:3e:e5:f6:51:20:8d:e9:66:6f:fd:89: ee:06:2c:d3:85:9b:59:cf:75:0b:15:ed:2b:11:96:72:4e:8d: 49:35:14:61:45:62:12:19:0b:d3:ba:6d:91:96:00:9a:cc:d3: 68:68:51:ec:31:00:1e:16:e5:3d:50:a6:a4:36:c9:a4:f4:f4: dc:5d:a3:4b:fd:81:b7:56:ba:8d:49:e1:09:e5:0e:2e:e7:a5: d0:02:0d:06:70:b3:fe:20:87:84:db:6d:e7:5c:8b:95:38:82: ca:ab:34:24:45:28:f5:b9:5f:d1:c6:0e:39:6e:b5:ef:58:d1: af:e9:c9:b4:7a:57:86:6d:8d:6c:f1:ec:24:53:d0:04:40:1e: 87:ef:c7:da:58:a0:ea:88:65:28:4d:5f:9f:b6:57:8d:f6:76: 4a:63:58:4a:e0:10:6b:c5:ac:1a:24:78:a3:ab:75:36:8f:a7: d6:90:db:eb:1e:bb:d8:66:f7:32:82:4d:33:22:5c:ca:e1:c6: 0d:93:d5:87:92:3b:1a:75:30:26:97:74:fd:7d:d7:05:8f:7b: 26:f3:96:ad:21:15:6e:1d:74:4f:f3:52:05:e1:d3:ac:56:ce: 6a:65:5d:4e:ca:3e:02:e5:3a:9d:e4:a1:9d:9b:96:7c:8c:e5: 19:81:d8:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfIAbhu1PxUGnJCS4U8pLi7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjUwNzAxMjIwMDQ1WhcNMjUwNzAyMjIwMDQ1WjAzMTEwLwYDVQQD Eyg0ZDIwYjAxMDZhMGFjNTRkZmNmNmU0YmY5ZGNiZDM1YjIzZGM3NzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraEaWJbQZrNyJ9ZSjUW6AHyWaxPM QymfPKQb3X8fXhv5McwoyXty3hM/MFIuhSNERFO+DEIjBplkepkRifNQu/IT0DEm 8RS0ggoOaqgMXHbQ6rTeai/IhAXTQOQGN/y1cQAO2JqlxF1QIiAqP8F9Hhrr6y1T cU83Qc4Ha9hqP1ceMt74zvZ6lbrbOMUgdtn6vLPoH6tkw0rm7M7JmZpTjGQIt/gV lfwj4ti9ek3YFRiNWRYioqJoTfYDSAO81WOcS10yr1iIEKouf+s/ZvgO2RcJmdey uXNF6Z5RD0B2Lo4XyFQU2IMnqJwFJQAkvIZWUEa8hz2P+qRCJUZp52Yb0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0gsBBqCsVN/Pbkv53L01sj3HcpMB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLVtyY6c bj7l9lEgjelmb/2J7gYs04WbWc91CxXtKxGWck6NSTUUYUViEhkL07ptkZYAmszT aGhR7DEAHhblPVCmpDbJpPT03F2jS/2Bt1a6jUnhCeUOLuel0AINBnCz/iCHhNtt 51yLlTiCyqs0JEUo9blf0cYOOW6171jRr+nJtHpXhm2NbPHsJFPQBEAeh+/H2lig 6ohlKE1fn7ZXjfZ2SmNYSuAQa8WsGiR4o6t1No+n1pDb6x672Gb3MoJNMyJcyuHG DZPVh5I7GnUwJpd0/X3XBY97JvOWrSEVbh10T/NSBeHTrFbOamVdTso+AuU6neSh nZuWfIzlGYHYMg== -----END CERTIFICATE-----Generated at Wed Jul 2 01:11:46 2025 by rpki-client