$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft File: mGihmSu4A33egdDIzcBpX87hfCc.mft (raw, json) Hash identifier: UIBNCgheTJNdeMPS3lL9TJ1/RbaqwIL5crXrzKxoAWA= Subject key identifier: CE:1B:68:5B:3E:C5:A3:3B:4F:38:E9:70:8D:A0:65:1D:FC:9A:FE:5A Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Certificate serial: 0197BA7E88A49C5E93E0B0F1B12BC6E97EA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft Manifest number: 0FBB Signing time: Sun 29 Jun 2025 07:02:24 +0000 Manifest this update: Sun 29 Jun 2025 07:02:24 +0000 Manifest next update: Mon 30 Jun 2025 07:02:24 +0000 Files and hashes: 1: 9_JhIw-bjUbjcsXjaRSJlNBXD-s.roa (hash: Hm59eKak2mRBLnGzAb7+vw2g+CNCplTmTg9aukFT0JE=) 2: Cm5DqrbsctqFvXQRRyRwNPG00IY.roa (hash: O06PA3Ks3knW3J57m8lSN/Hv9kQ6nHGAf+goTnk1j04=) 3: FPzxN2ymmUH78y5haV0PaZXdLVY.roa (hash: DdUQ7lpUro6lEFuSiN9fKQg9b9UllNMKrwO6ynxkjos=) 4: JPO6PlbO7T2lxOXw7VKbRM2Ge5Q.roa (hash: kV6T9GvL2JmIx9RKefMlHDbvnYr8DiGL3xFPvQ3Jx8U=) 5: JfmWtf32dZhRVwJQ1ZtKQrQQAfg.roa (hash: ucBbFh4z7Smi+4uRRA6FLN/GqDjNQS+yFNEoMPGwvug=) 6: VQJlRnI_FsEKIbEWGLyhLwP0NtM.roa (hash: onaEyOz4ocmnu3HOOu4gakiggdji6MdLGBGGPS11inY=) 7: ZBv1VZ75Z-edNoZRcvYjkb7NpN8.roa (hash: WTUxj+sidK096ykp4PAhTaXWq6bYZtjXmE5iUhcAutU=) 8: a0GKpzKa2l-eFBlKQIWeWorMYWE.roa (hash: ToDMarZPFqTg+Vik2NKe1VnAgzMIR0HHOC5Xh17RUK0=) 9: aEXJ-GLDzjyP60FhTQdWJ8Fvt7E.roa (hash: 0YpF7CPYi6PyoAg9TvQlat07FWQyIu8cHA137q7nQSc=) 10: bmd97yvzsY5Yo2HfnEE_aGsiLVw.roa (hash: rBbiHBTIds8AVFd6SWdPqBeLyfTxB+l6zirCVR5u1u4=) 11: mGihmSu4A33egdDIzcBpX87hfCc.crl (hash: 81EaJddXAIjuY9oSZ4mYBxdLQQzRRAHDpu24lrxUmyA=) 12: pygxQHbvGZKVLzuvUJnRE055Ymk.roa (hash: jTpMpBKEIx8o2FyniDrKdnhuTZAZvNKL8hZwfmfGnMs=) 13: qYL6kaPJ2b0Ev5p7Oziqiiv4qTc.roa (hash: WBI5DwkHHee0G2mSopIcnWotDs7K8/Lvby/GArK324A=) 14: vY3Y3etrniGVDWVqa-wGwlb4wOM.roa (hash: 3iBpAllkx0+u9qLlhBtBBscqzISkhr+UuWv9+CbK7ew=) 15: yQafrAusZTwTPZBFL3M0qrFQZ04.roa (hash: Bj+Dm5K+2i3MwGi4viuLKNvUn9KDeSK+/ogiA8Pwh18=) 16: zsat_Kz6NAhfzEasx4a9lQm7pnc.roa (hash: iKI5HEcwbfP2kx1h4h3ET7Ssp+IpbRLbrY2f8G6eDr4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:ba:7e:88:a4:9c:5e:93:e0:b0:f1:b1:2b:c6:e9:7e:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Validity Not Before: Jun 29 07:02:24 2025 GMT Not After : Jun 30 07:02:24 2025 GMT Subject: CN=ce1b685b3ec5a33b4f38e9708da0651dfc9afe5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:29:a6:64:8c:11:48:98:32:e5:d8:0b:fb:67: 80:3d:69:45:30:49:88:dd:77:4f:12:d9:5e:d8:f4: be:bc:b6:73:4a:7e:72:32:9e:4a:16:59:48:1c:80: 12:c3:83:ae:d2:5b:9d:fb:50:7f:5b:5a:9b:2a:11: 9b:06:bf:a8:c3:ed:d1:c0:83:c4:63:31:dc:17:a7: 69:8a:d2:6b:81:53:3c:ef:74:0e:29:cb:70:7d:df: d2:a0:91:93:9c:ac:94:fa:45:e3:3b:73:ec:27:d5: 46:2a:09:3c:5e:3f:1c:91:a0:9c:f0:30:12:fa:03: f7:43:98:67:40:bd:96:4a:72:f8:dc:86:8e:eb:58: 84:6a:bf:02:6a:83:ad:b8:70:34:b9:2d:d4:78:7e: b0:d3:03:12:9a:36:1b:1f:b7:d3:fc:b8:50:c6:32: 23:21:50:6a:53:52:6f:12:0c:a7:36:4f:f0:6a:9a: 59:8b:2f:1b:4d:5e:f4:93:57:5f:a6:f7:78:df:98: f8:8a:b8:0c:04:53:2f:c5:17:47:f5:91:16:37:a0: a4:75:eb:79:5c:4b:8e:12:4f:f4:b6:2f:e9:58:fa: a0:f9:cf:b3:48:ea:27:94:7d:eb:29:69:48:01:fd: 34:21:34:59:d9:86:8e:56:ab:a4:99:fb:83:c0:e6: 95:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:1B:68:5B:3E:C5:A3:3B:4F:38:E9:70:8D:A0:65:1D:FC:9A:FE:5A X509v3 Authority Key Identifier: keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:ef:99:9c:90:a7:69:4b:d6:7c:bd:a3:e5:c9:ac:be:ea:39: 3b:69:9c:e6:00:ab:a6:af:5f:34:93:ca:20:c8:b2:e0:b0:fe: 68:b2:44:5c:de:34:2e:bb:12:12:1e:0c:64:86:c1:ac:bd:e1: 1b:54:07:a4:a3:74:1c:37:ba:5c:cf:9f:7b:23:cb:4c:d3:cb: a3:67:fd:4b:27:ef:4d:15:7b:99:80:c9:2d:fa:92:96:5c:0e: 98:b8:cd:50:dc:26:7b:a5:da:e4:83:ce:3a:31:0e:24:1d:f2: 10:2d:fb:4b:f1:5d:88:2d:38:db:f5:2f:fc:15:76:d0:03:9b: c7:4f:57:04:fb:24:a4:cc:29:ba:2e:58:67:4c:e3:40:fa:0d: fb:1b:2f:80:ad:17:6b:95:06:47:25:1d:7c:f9:4c:4f:cc:f8: ad:f3:39:a8:95:da:a6:e5:ce:57:5a:9c:a4:3f:59:1f:b1:db: 27:4a:41:60:de:4d:83:cf:d2:93:b3:eb:94:02:ad:49:fb:f5: b9:af:d8:74:94:b3:0e:5d:be:56:11:ac:b7:2c:16:e5:33:67: 4b:c9:03:16:7a:90:25:24:5d:7e:ce:ee:fa:1a:66:d9:53:80: 77:87:c8:c4:3e:e1:f9:2c:87:ee:b5:57:34:af:08:8d:1e:80: e9:60:73:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe6foiknF6T4LDxsSvG6X6jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl MTdjMjcwHhcNMjUwNjI5MDcwMjI0WhcNMjUwNjMwMDcwMjI0WjAzMTEwLwYDVQQD EyhjZTFiNjg1YjNlYzVhMzNiNGYzOGU5NzA4ZGEwNjUxZGZjOWFmZTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SmmZIwRSJgy5dgL+2eAPWlFMEmI 3XdPEtle2PS+vLZzSn5yMp5KFllIHIASw4Ou0lud+1B/W1qbKhGbBr+ow+3RwIPE YzHcF6dpitJrgVM873QOKctwfd/SoJGTnKyU+kXjO3PsJ9VGKgk8Xj8ckaCc8DAS +gP3Q5hnQL2WSnL43IaO61iEar8CaoOtuHA0uS3UeH6w0wMSmjYbH7fT/LhQxjIj IVBqU1JvEgynNk/wappZiy8bTV70k1dfpvd435j4irgMBFMvxRdH9ZEWN6Ckdet5 XEuOEk/0ti/pWPqg+c+zSOonlH3rKWlIAf00ITRZ2YaOVqukmfuDwOaV8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM4baFs+xaM7TzjpcI2gZR38mv5aMB8GA1UdIwQY MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It ZDc4ZDU2MzFkN2Y2LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2 LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOe+ZnJCn aUvWfL2j5cmsvuo5O2mc5gCrpq9fNJPKIMiy4LD+aLJEXN40LrsSEh4MZIbBrL3h G1QHpKN0HDe6XM+feyPLTNPLo2f9SyfvTRV7mYDJLfqSllwOmLjNUNwme6Xa5IPO OjEOJB3yEC37S/FdiC042/Uv/BV20AObx09XBPskpMwpui5YZ0zjQPoN+xsvgK0X a5UGRyUdfPlMT8z4rfM5qJXapuXOV1qcpD9ZH7HbJ0pBYN5Ng8/Sk7PrlAKtSfv1 ua/YdJSzDl2+VhGstywW5TNnS8kDFnqQJSRdfs7u+hpm2VOAd4fIxD7h+SyH7rVX NK8IjR6A6WBzKA== -----END CERTIFICATE-----Generated at Sun Jun 29 10:26:09 2025 by rpki-client