$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft File: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft (raw, json) Hash identifier: QGMrfQCRpemb9em1JzQOT+0RkVQtifK2mwVIPCNzwbc= Subject key identifier: C4:E7:DA:5D:B4:33:08:43:A7:AB:DF:6F:C9:EB:17:AC:D1:04:7D:62 Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 0197B77C5BF30035FEACE1E59E32684D3947 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft Manifest number: 128F Signing time: Sat 28 Jun 2025 17:01:09 +0000 Manifest this update: Sat 28 Jun 2025 17:01:09 +0000 Manifest next update: Sun 29 Jun 2025 17:01:09 +0000 Files and hashes: 1: 3MQ1Zm2jB8qgOjCAc_a0v-3nM_o.roa (hash: T4pVm2mU2N5el1g2HcnlglhN57e23NLVS7ny7NzSBL0=) 2: 4SEUaFHVUAL3abRJwnhpLcw21dk.roa (hash: Nz767QGxnFH79p/BW/8MOsNM3RviNN1Kvy4GgZgMyGs=) 3: FCFfx3p7hHCFHlKPZobVJyLJ5MI.roa (hash: 6JV0xEEqdwivRbZdMI4zo4Wpa9PWQK4gKoasAD6odWU=) 4: IYmUJK1vApyWT119wps-ukf2n9E.roa (hash: w1dWdBHD/FLi3tR98pk3iJlbhc1nR22X1Pwn/kqhO/0=) 5: KcuMI0SBvL5BPuYJm6BH3vJKAQ0.roa (hash: s0e2eWUrZQW14pJCqfjgMZ+ViTFNuU9345bizVg0sKY=) 6: MSrSUIwYGP5OzMFaA9dwr3mO4jY.roa (hash: OHzV5kP6uhO1eFoIB7t+WKfJjHs90j+a/iXQqOXuv30=) 7: N7C2a3H5ML3ydyNI5IDIoJ6m-6U.roa (hash: FJm0Nzs6ME/1+LojcQZMLdUu/cBqlxKE16Bs75fFFLw=) 8: Nf1rHETWcCnhWhR_uM_9B2P3jb8.roa (hash: pBdKIUwSvvQqLJChVbTbSEDRXa+Ll262+ax9ivbZD0o=) 9: OFTgwkdKspRJ_TvSv6vgx_ckdLQ.roa (hash: b7UPAbBCKcuRworqLaxy25e9Gx9nfc4PaZocWvp2h84=) 10: RzvDJbgMFFQ3RXZZowAtkGpvaYQ.roa (hash: pXgfU5zLGpdaPENK8y9IOVL5xtiIt9Fk8RRzx12JQUw=) 11: WToItz8al9Sw1IRtEOUm1ku1TzY.roa (hash: cD3Nf3okXGtPiYuFOkPnzfMJHgIYmW52aVmaOwxOEN0=) 12: dcAEUZ_ghRVpaUYo3WWA9zUPe9U.roa (hash: AsvsdGamYH2cSArWOQT5cvLOD/2t8gp5MEnt/aWjLII=) 13: m-VIT0LjtD9EzoMprh8uOjUFAXU.roa (hash: uPdvifi2Mse38dnV2nTzHEKQ8cRZMoEcUuAqy+pbA4Y=) 14: mIeBpS2n4kCr0BZmoszWNjvAQck.roa (hash: sgSJy89RWLefTDlUw+TWGE3cezazErlzXNR2nAjs6uU=) 15: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl (hash: 0tAcEtfx3tcuu8PvZLxTMTITyVIuWVJMuGPg/JAhOm0=) 16: sVCQlL9zy4ci5k4im_qh1UgQSao.roa (hash: tXiv/i4AXQDYnVQqrjLO82vwz0zcYS5lORUFrc1ytqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:7c:5b:f3:00:35:fe:ac:e1:e5:9e:32:68:4d:39:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Jun 28 17:01:09 2025 GMT Not After : Jun 29 17:01:09 2025 GMT Subject: CN=c4e7da5db4330843a7abdf6fc9eb17acd1047d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cd:86:03:fc:db:42:9d:b4:86:89:ae:01:8d: b5:cc:1b:ad:a1:41:59:4a:21:b4:cc:1b:3e:97:f1: 60:af:61:3f:03:aa:aa:ed:ae:92:04:fa:17:da:b5: e5:d1:3f:8a:08:8e:03:da:15:f8:81:5a:ab:ef:ae: ac:88:c0:1b:3b:68:fc:92:5d:3b:21:ad:15:d2:e9: 9e:14:a0:f3:7c:e5:60:7b:82:7a:96:89:86:5a:27: 94:02:f0:5d:97:77:92:80:39:ae:bb:95:cc:4c:ec: f9:80:e3:0a:c2:07:f1:26:04:71:18:3d:a2:5c:60: e6:81:0a:1f:ec:06:a3:56:c8:10:36:8f:9f:08:9b: 70:a2:5e:1e:e6:a0:8a:ed:04:fb:93:b6:4c:76:ed: cc:ac:02:e6:03:29:83:4b:f7:05:47:30:73:b1:9f: ad:18:cb:3b:1c:fe:8f:8e:e4:56:5e:bf:66:2a:60: 74:b6:4a:f6:18:e3:b8:1c:00:b2:56:8d:3b:6b:d5: dc:0e:0d:15:19:5e:04:ad:57:bb:91:bc:2f:c2:94: 20:9a:e5:30:a2:82:12:46:85:dc:40:68:9c:00:e2: 75:cb:13:38:66:81:70:0f:bb:ee:f5:20:e8:10:d5: 41:4a:29:d3:69:92:1b:80:1d:5d:dc:84:97:1e:10: b1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E7:DA:5D:B4:33:08:43:A7:AB:DF:6F:C9:EB:17:AC:D1:04:7D:62 X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:7d:58:95:63:55:1d:22:74:00:32:98:59:f9:1f:5f:c1:e7: 8a:8b:fb:f6:c2:32:f3:4c:ee:20:c8:28:9f:0c:f8:f9:0c:b9: 83:cf:fe:d1:9a:bb:02:7a:71:f7:c8:a9:0f:b3:c7:1c:ac:9f: 09:cb:09:92:b7:d6:09:7d:c1:24:22:2a:63:7b:9e:4a:14:c1: b2:bf:e1:f8:fb:1e:6d:13:8d:81:e9:9c:f9:4a:81:1e:f3:32: 88:35:50:fa:c0:ab:74:96:43:39:2e:64:e5:92:7d:43:44:ee: d4:a0:ee:39:8a:33:8f:c3:29:7f:b2:83:82:5e:4f:5b:0f:84: 1c:1e:28:d8:39:6d:85:d8:bc:7a:36:ff:0a:17:01:2f:a6:3b: a1:79:ff:77:c3:0a:9a:b4:31:4b:39:8f:f6:b4:6c:ce:29:57: 69:bc:a7:1b:b6:13:29:e7:a1:19:7a:26:04:5b:f1:66:f4:04: e5:d1:d5:7a:dd:22:30:55:fe:44:68:18:cc:46:ce:a4:1e:d7: ea:cd:c8:5a:ea:7d:ad:7b:fa:0b:da:a9:e6:a6:9e:7d:10:cb: b2:9b:5f:95:f9:3c:d1:d9:9f:ce:0a:a6:bc:0a:5f:a1:cd:fe: d5:29:72:83:ea:46:d9:2d:d7:a5:57:14:b8:37:74:db:6b:e4: b9:6b:ad:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3fFvzADX+rOHlnjJoTTlHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjUwNjI4MTcwMTA5WhcNMjUwNjI5MTcwMTA5WjAzMTEwLwYDVQQD EyhjNGU3ZGE1ZGI0MzMwODQzYTdhYmRmNmZjOWViMTdhY2QxMDQ3ZDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn82GA/zbQp20homuAY21zButoUFZ SiG0zBs+l/Fgr2E/A6qq7a6SBPoX2rXl0T+KCI4D2hX4gVqr766siMAbO2j8kl07 Ia0V0umeFKDzfOVge4J6lomGWieUAvBdl3eSgDmuu5XMTOz5gOMKwgfxJgRxGD2i XGDmgQof7AajVsgQNo+fCJtwol4e5qCK7QT7k7ZMdu3MrALmAymDS/cFRzBzsZ+t GMs7HP6PjuRWXr9mKmB0tkr2GOO4HACyVo07a9XcDg0VGV4ErVe7kbwvwpQgmuUw ooISRoXcQGicAOJ1yxM4ZoFwD7vu9SDoENVBSinTaZIbgB1d3ISXHhCxlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTn2l20MwhDp6vfb8nrF6zRBH1iMB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX31YlWNV HSJ0ADKYWfkfX8Hniov79sIy80zuIMgonwz4+Qy5g8/+0Zq7Anpx98ipD7PHHKyf CcsJkrfWCX3BJCIqY3ueShTBsr/h+PsebRONgemc+UqBHvMyiDVQ+sCrdJZDOS5k 5ZJ9Q0Tu1KDuOYozj8Mpf7KDgl5PWw+EHB4o2Dlthdi8ejb/ChcBL6Y7oXn/d8MK mrQxSzmP9rRszilXabynG7YTKeehGXomBFvxZvQE5dHVet0iMFX+RGgYzEbOpB7X 6s3IWup9rXv6C9qp5qaefRDLsptflfk80dmfzgqmvApfoc3+1Slyg+pG2S3XpVcU uDd022vkuWutPw== -----END CERTIFICATE-----Generated at Sat Jun 28 21:22:55 2025 by rpki-client