$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft File: pjvMbSX3R2-7PsM_bbw-nurZIhI.mft (raw, json) Hash identifier: NSbOavEyxX1+szwqNn/Fh7tJZzxQM8ltpkkpkNtVVyc= Subject key identifier: BD:90:E4:25:81:48:E3:B4:FC:AF:41:44:46:D5:FF:D2:06:77:34:43 Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Certificate serial: 0197B820EF3B0AC9B604D6B0794EE4F631D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft Manifest number: 0917 Signing time: Sat 28 Jun 2025 20:00:55 +0000 Manifest this update: Sat 28 Jun 2025 20:00:55 +0000 Manifest next update: Sun 29 Jun 2025 20:00:55 +0000 Files and hashes: 1: 5NFcVQOlS2SfRA9_dseHho-9-mc.roa (hash: swfI8aXvx2sxn3YOzxRnlDU7qvwOILHJAwX26Y3ztqI=) 2: 719PZLmeHqbujtRsKmvo5771XIo.roa (hash: bsKRuhzJIveVWiHQvKvv+dLt6oNf3d66tNY6ht9/C3A=) 3: 8WUQrdzKsEZUNzZ9k3E9ajfkd5s.roa (hash: Ixz0hSpVqJJ/oAfsncTGxOv3fHWBSaH9gBGjqTv8vpQ=) 4: FHXWFrj4nreKJjXTfDKCc6Y16Is.roa (hash: PfuW04ELrwKUUeQD8qGy+/BFhBo8C5J05OWPOUMFx5w=) 5: Ho4pDAaaconFe5cZ7ygze1a44Xo.roa (hash: 1pC6hpICFpbgfqlZn7adq2AVfLKO5t0AC5KWofkjFSE=) 6: Kd5CFoG07kPDgqUGQpHj24zQka8.roa (hash: +2s4BraFjLJP4x9hMH6DgHfMWVkWCLxuz2cF8ghToGs=) 7: NYJYw1BTKJV56akoY5ZQRJna-MA.roa (hash: brwHoHz9mi1vg8NUkbqZqqePDdu1Ej44xmauCwQ9Qac=) 8: OgDpb12QenrW4aaDXbTn4f8I2T8.roa (hash: 7qGsjvQNE3/Sxn8HV68TpKmq8XIi7jnoVQF2QNW2HSc=) 9: TLEdQvZiEPlpX35O8B6oknJfuyE.roa (hash: AdjCtV/JftiFEQtyk78ssQUWpqAhZBfMUWjoyo3BngI=) 10: fBfhsJw2d6Op2y70b533dv-T4j4.roa (hash: B8cZmEngTY2Ne9QwtzyJ6aeIrWSAdYH7Des5rTXKgP4=) 11: pjvMbSX3R2-7PsM_bbw-nurZIhI.crl (hash: qmQ4yS7HmNQoD+aU3z9QjYogSyv/nMKJ4GxnZhMMMCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 20:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:20:ef:3b:0a:c9:b6:04:d6:b0:79:4e:e4:f6:31:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Validity Not Before: Jun 28 20:00:55 2025 GMT Not After : Jun 29 20:00:55 2025 GMT Subject: CN=bd90e4258148e3b4fcaf414446d5ffd206773443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1d:f9:30:26:9a:8d:8b:9b:3c:ba:4f:72:71: 5c:51:5e:23:d1:31:21:98:59:13:82:12:b0:4f:ba: 02:63:9c:64:16:d1:85:e2:26:a3:0f:8a:e1:b8:aa: 37:61:3c:74:96:70:ff:f3:87:1c:49:54:27:53:05: 10:d6:3d:b5:dc:8d:a4:fe:86:6f:0f:97:56:b8:33: 5b:8f:cb:a5:0c:5a:2c:5f:6d:02:dd:f9:2a:93:6f: 72:94:1d:ad:8b:55:0f:f9:c2:b0:65:34:e8:e2:4d: c7:05:61:e5:0c:2e:b4:7a:86:17:a7:f7:94:5c:e4: e7:72:d2:df:be:45:a7:fb:15:9b:4d:bc:ac:b2:b0: b4:bf:3f:e7:47:e1:10:96:c8:b4:d2:0e:21:af:8e: a5:ae:d8:df:db:7e:46:20:55:9d:e9:38:4a:04:79: e2:53:e0:cf:07:d1:1e:77:62:64:2f:a5:22:b7:6a: 22:86:49:4a:27:2d:53:f8:cb:ec:fd:f3:f9:e8:f6: 82:c3:b5:60:44:0f:ff:c9:5a:0f:9f:2b:18:8d:41: 9a:7c:e4:0e:99:28:eb:72:e8:be:9a:4c:17:b0:fa: 90:3f:ee:90:62:13:cc:be:ad:c3:6c:ed:c3:45:eb: 0c:01:7f:67:0b:cd:e3:b9:da:01:2f:a8:86:5b:35: f5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:90:E4:25:81:48:E3:B4:FC:AF:41:44:46:D5:FF:D2:06:77:34:43 X509v3 Authority Key Identifier: keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:da:4c:e1:93:cb:e6:8e:5c:97:dd:db:26:fc:e8:9e:58:65: e0:c0:65:f2:08:21:69:7a:ca:7c:51:f9:8e:de:54:c0:43:fc: 4f:30:0b:4c:b1:da:46:99:f2:83:50:cd:28:74:6f:4d:06:81: 40:99:71:3b:13:72:9e:3c:f0:bc:ff:c1:6c:5f:be:17:ec:72: b9:57:cb:ac:b0:97:bd:4a:1c:15:94:e4:80:ba:22:9c:ff:e8: f7:c7:f2:b9:37:0b:92:45:07:71:86:56:ac:17:e6:70:95:65: eb:f4:96:22:ff:af:9f:fd:cb:f7:e0:58:99:b2:0f:d5:bd:eb: 40:97:18:90:45:3d:fb:1a:e0:75:bc:82:6b:26:07:38:03:b8: a2:16:c8:c5:16:b4:42:9c:50:5d:6f:fa:08:c2:89:c8:e1:6d: e0:ef:30:4f:95:18:f8:6d:46:2b:3f:19:3c:6c:1d:fb:08:61: 3f:e5:1a:8b:24:fa:ac:8d:73:54:ca:e0:1d:4a:2d:1b:cc:25: 3d:0c:f2:a3:5a:d1:d7:a1:f0:e5:28:c4:f8:3a:ae:fb:c1:1e: 68:37:2f:a6:79:7c:ff:d3:a7:12:48:d6:aa:2b:a2:f8:a1:ff: 5e:4e:9e:b8:c5:2c:f8:2d:62:fb:b2:59:e8:fb:04:23:eb:56: da:ff:85:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4IO87Csm2BNaweU7k9jHZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2JjYzZkMjVmNzQ3NmZiYjNlYzMzZjZkYmMzZTllZWFk OTIyMTIwHhcNMjUwNjI4MjAwMDU1WhcNMjUwNjI5MjAwMDU1WjAzMTEwLwYDVQQD EyhiZDkwZTQyNTgxNDhlM2I0ZmNhZjQxNDQ0NmQ1ZmZkMjA2NzczNDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR35MCaajYubPLpPcnFcUV4j0TEh mFkTghKwT7oCY5xkFtGF4iajD4rhuKo3YTx0lnD/84ccSVQnUwUQ1j213I2k/oZv D5dWuDNbj8ulDFosX20C3fkqk29ylB2ti1UP+cKwZTTo4k3HBWHlDC60eoYXp/eU XOTnctLfvkWn+xWbTbyssrC0vz/nR+EQlsi00g4hr46lrtjf235GIFWd6ThKBHni U+DPB9Eed2JkL6Uit2oihklKJy1T+Mvs/fP56PaCw7VgRA//yVoPnysYjUGafOQO mSjrcui+mkwXsPqQP+6QYhPMvq3DbO3DResMAX9nC83judoBL6iGWzX1EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2Q5CWBSOO0/K9BREbV/9IGdzRDMB8GA1UdIwQY MBaAFKY7zG0l90dvuz7DP228Pp7q2SISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQt NDkyNGZhMDAwYjdjLzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQtNDkyNGZhMDAwYjdj LzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtpM4ZPL 5o5cl93bJvzonlhl4MBl8gghaXrKfFH5jt5UwEP8TzALTLHaRpnyg1DNKHRvTQaB QJlxOxNynjzwvP/BbF++F+xyuVfLrLCXvUocFZTkgLoinP/o98fyuTcLkkUHcYZW rBfmcJVl6/SWIv+vn/3L9+BYmbIP1b3rQJcYkEU9+xrgdbyCayYHOAO4ohbIxRa0 QpxQXW/6CMKJyOFt4O8wT5UY+G1GKz8ZPGwd+whhP+UaiyT6rI1zVMrgHUotG8wl PQzyo1rR16Hw5SjE+Dqu+8EeaDcvpnl8/9OnEkjWqiui+KH/Xk6euMUs+C1i+7JZ 6PsEI+tW2v+FMw== -----END CERTIFICATE-----Generated at Sun Jun 29 06:07:16 2025 by rpki-client