$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft File: CnMngF3yD7XB1vTokHR0PK6ySvc.mft (raw, json) Hash identifier: 42WcH5CkOJSEodN59jzBq5UGZVoP5/mlq0TfpxC212g= Subject key identifier: 54:27:D8:94:55:8E:3B:00:F9:7D:80:59:53:88:74:65:2B:EA:73:D8 Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 0197B6D7C17C8CD9811B249C87E1C3A9AD58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft Manifest number: 15C8 Signing time: Sat 28 Jun 2025 14:01:22 +0000 Manifest this update: Sat 28 Jun 2025 14:01:22 +0000 Manifest next update: Sun 29 Jun 2025 14:01:22 +0000 Files and hashes: 1: 3cfolha5-Y-keIgl3j-ukMRu5nQ.roa (hash: BQrU5Phy/xAtort4zjZjH8gAv4mg2agVu08FECKFlvU=) 2: CQxWaB1OicMMrqXCoQ0fopCoxdU.roa (hash: WjfHWnkqbfHKaqxUShNyRq++rhQwjg3tNVjy17YQNc4=) 3: CnMngF3yD7XB1vTokHR0PK6ySvc.crl (hash: tTKRtl+BYP7mrrlU8Cm0eFysAWpANPhBjAngZcPjfY4=) 4: D79_joXGPOWpWr93YY0Y2guGopg.roa (hash: 0cVbgcQor7L9mYV+oSvm/P1YAy/Mh97VSOZWkl7idYY=) 5: GopMrpyToOz7hTEn02tSlWTChNc.roa (hash: PWyNZm9NNDQb4vDrYexwTILfoeBvuqO0/ZesnD+rBMg=) 6: QY3FsKWsHL7VlMduaclRNJ3pt_U.roa (hash: H5vPCo3lKDFJhLJsXdyGxkbSr+CZKxnZxfEUf2naVGc=) 7: Zla6xxqlwjD5HGAN16Pzo29Tijg.roa (hash: XT7/Z4sfo6kElFtdLFq3BhRYhs4vxj89ZfDzgHu8Ge4=) 8: eeob2ee4lfFzOOMEsHvp08f6qTk.roa (hash: 0B+jfajS9x0UOg+XsVtGs3LZcCLSBc/7t9eJKjvj4DM=) 9: hnMtsx259zWb5DPTAskFt19vieA.roa (hash: IS/K0LmABWhq/hUi5ijfbnkS8QGQcUBWRW0f7gTisD4=) 10: ydOhopDpEgxJrzwZy5o2ywKpW8w.roa (hash: cGNA9jtDwM6OD4vlqV4K4uD26uy/JQnhTPG3oY/YMmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 14:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:d7:c1:7c:8c:d9:81:1b:24:9c:87:e1:c3:a9:ad:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Jun 28 14:01:22 2025 GMT Not After : Jun 29 14:01:22 2025 GMT Subject: CN=5427d894558e3b00f97d8059538874652bea73d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8b:c2:cc:6f:37:b3:b6:cc:73:7b:b0:e0:32: 11:bd:8e:d7:7a:b3:cc:47:00:13:c6:2f:b0:7c:d8: e9:bc:4a:fa:8c:8b:d0:74:e9:bf:7b:c4:b1:05:d6: a6:9d:91:bf:86:13:87:4e:f1:be:38:a4:1d:3e:a8: 7f:bc:7a:6e:10:d8:43:35:e5:5f:67:0c:29:19:77: 48:52:38:58:46:a3:b8:f4:31:f4:61:ed:b2:35:e8: eb:e3:2d:80:97:83:80:42:c2:84:b7:ac:00:78:63: 62:0c:a4:95:a6:29:0b:95:3b:e4:2d:c4:6f:fd:79: fe:26:f9:9d:85:77:01:22:05:31:5a:b4:d5:d0:28: cd:98:15:de:7e:bf:b9:11:07:2b:c2:cb:d0:aa:24: be:3a:fd:8c:ec:63:49:b0:06:b3:24:30:46:58:70: ef:44:a1:03:62:1f:58:1e:c1:a4:e1:c5:e7:30:55: de:46:ec:10:1e:4d:09:30:1b:17:32:3a:23:6d:8e: 46:66:35:98:03:e9:0b:3a:b6:55:61:22:8c:c6:4b: 74:a3:90:61:3a:c3:7a:27:f8:6f:a0:29:f4:e2:ec: 58:9d:34:98:88:b8:51:95:8c:dd:64:d5:f8:ee:98: ba:fd:2b:02:b2:fc:77:f9:c9:2d:19:d1:eb:09:ab: 83:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:27:D8:94:55:8E:3B:00:F9:7D:80:59:53:88:74:65:2B:EA:73:D8 X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:f2:db:02:1f:7e:31:0d:5e:41:c1:32:67:13:07:76:5c:d9: a6:47:3c:86:1e:9b:57:42:55:74:04:bc:cc:aa:7a:fc:3a:d7: 63:7d:03:a5:12:37:e4:8c:5d:19:aa:23:5c:f5:42:2c:10:36: 98:b8:cf:ed:ca:b5:97:3d:66:cf:8b:d3:64:0d:47:95:ff:b5: 4c:1a:02:f8:5c:7d:1a:76:93:e0:d6:42:ad:1d:89:27:ce:77: d7:ae:84:64:22:ff:2c:4b:20:8f:34:1a:d2:13:76:60:d8:08: ea:78:63:1d:ff:92:a6:76:c4:f6:d3:f8:16:a9:af:18:42:3a: 3a:13:2e:4f:e1:df:d7:b2:f3:b8:98:09:72:f4:d0:0b:ce:26: 82:2e:80:06:57:fe:a0:41:0b:70:79:2e:f3:0c:2f:72:a0:ce: 74:00:ea:62:d9:f5:13:47:96:65:81:00:f0:0e:0f:a4:99:bf: 51:bb:8e:2b:58:02:14:37:80:3c:23:8d:fa:b2:b2:dc:8c:7f: 92:6a:ed:d1:d1:55:c9:3b:b1:c3:54:15:a1:ee:23:0a:85:1a: 7b:5b:47:5e:89:c9:96:e2:da:26:92:33:88:10:ed:7e:67:39: 8e:7a:c8:61:c4:5f:59:53:fc:98:fc:12:1b:72:07:47:3a:5c: 7d:53:aa:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe218F8jNmBGySch+HDqa1YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjUwNjI4MTQwMTIyWhcNMjUwNjI5MTQwMTIyWjAzMTEwLwYDVQQD Eyg1NDI3ZDg5NDU1OGUzYjAwZjk3ZDgwNTk1Mzg4NzQ2NTJiZWE3M2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYvCzG83s7bMc3uw4DIRvY7XerPM RwATxi+wfNjpvEr6jIvQdOm/e8SxBdamnZG/hhOHTvG+OKQdPqh/vHpuENhDNeVf ZwwpGXdIUjhYRqO49DH0Ye2yNejr4y2Al4OAQsKEt6wAeGNiDKSVpikLlTvkLcRv /Xn+JvmdhXcBIgUxWrTV0CjNmBXefr+5EQcrwsvQqiS+Ov2M7GNJsAazJDBGWHDv RKEDYh9YHsGk4cXnMFXeRuwQHk0JMBsXMjojbY5GZjWYA+kLOrZVYSKMxkt0o5Bh OsN6J/hvoCn04uxYnTSYiLhRlYzdZNX47pi6/SsCsvx3+cktGdHrCauDNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQn2JRVjjsA+X2AWVOIdGUr6nPYMB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtPLbAh9+ MQ1eQcEyZxMHdlzZpkc8hh6bV0JVdAS8zKp6/DrXY30DpRI35IxdGaojXPVCLBA2 mLjP7cq1lz1mz4vTZA1Hlf+1TBoC+Fx9GnaT4NZCrR2JJ853166EZCL/LEsgjzQa 0hN2YNgI6nhjHf+SpnbE9tP4FqmvGEI6OhMuT+Hf17LzuJgJcvTQC84mgi6ABlf+ oEELcHku8wwvcqDOdADqYtn1E0eWZYEA8A4PpJm/UbuOK1gCFDeAPCON+rKy3Ix/ kmrt0dFVyTuxw1QVoe4jCoUae1tHXonJluLaJpIziBDtfmc5jnrIYcRfWVP8mPwS G3IHRzpcfVOqgQ== -----END CERTIFICATE-----Generated at Sat Jun 28 21:37:53 2025 by rpki-client