$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft File: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json) Hash identifier: qSUNj96S2n6FlgbeVO0BzssVw+vuuXw1J0yV+1j+Jis= Subject key identifier: B0:23:27:D8:EF:B8:AB:09:C9:DF:DE:F8:E8:03:1D:76:06:62:48:33 Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a Certificate serial: 0197B77C2DA02D4DF27D2F67CCF5E1BCD27D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft Manifest number: 15BA Signing time: Sat 28 Jun 2025 17:00:57 +0000 Manifest this update: Sat 28 Jun 2025 17:00:57 +0000 Manifest next update: Sun 29 Jun 2025 17:00:57 +0000 Files and hashes: 1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: 8Reqv4thU+AN5L1y6g/0gPcYKQ5Zxdr6Hyv69ClSciE=) 2: 8yyknMa8Qa7eji2_-25NgjHMwAs.roa (hash: 6EA1L4yNjiFkAAM6t2iZAA7ze8SV3lMCUhKNPg3vBUQ=) 3: 9QjCjG8fGXKK3KT9GGHW6MAVJzE.roa (hash: fSpz8n2jWyy0I2DDmxohRpaljlrP9nL5ZtLGzLKYuXU=) 4: H7En3yY1mH2yRYS167HpwA6AL5Q.roa (hash: FPJfC/52NavOyoGt4vZ9gio4MoEgpYKiZrTtURDieXE=) 5: K4UoliAJDnPT2oq72AyXanTYwdo.roa (hash: +5dNWwnlyTnn33FOhd8BsjDiWGBw/K7XK9sbIa7ROKQ=) 6: WjTYhnjd8JZNKcEGGyvScBW7ujg.roa (hash: xm9/rrII6hlVm8eUope1QTZ7F33LVLrGkQUEXzf0iIk=) 7: aWWA3-Hs7ng_GCTHIDmwQ5Rjbdg.roa (hash: isC8RltnKP3pjrz7ZvAls/aB0WZTll6Skvt9xKP3UkI=) 8: fPjaiW_RQVaw1K0jco_QmLpGo5s.roa (hash: agQGyFSnSoUI1Vx0MTRN/i+hHcE0hyBre8ShGUX7keA=) 9: sERIvqHcZj2yU32m6o5QSyQReME.roa (hash: cfxbkVfwNX0hfImDTJjGC48Jbi/ZuYY11AKoePEqH8k=) 10: zTLxL4slk5kZQfWpH_PY-TD7nNM.roa (hash: tzDHOIgeKhCjAOTBNpSwMn6WduYNfsmvzrDJbeHe5/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:7c:2d:a0:2d:4d:f2:7d:2f:67:cc:f5:e1:bc:d2:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a Validity Not Before: Jun 28 17:00:57 2025 GMT Not After : Jun 29 17:00:57 2025 GMT Subject: CN=b02327d8efb8ab09c9dfdef8e8031d7606624833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ff:69:aa:76:75:f2:84:50:da:60:49:c0:f9: 41:29:62:7e:d2:35:43:38:4e:c1:60:7b:b2:21:e4: 4c:49:6f:b0:be:93:c8:0c:78:a5:64:ee:6f:88:28: cf:7e:4d:55:a6:a2:70:d4:34:c5:74:86:61:d5:d1: 30:c7:1f:8a:5f:65:45:f4:43:32:f0:70:d4:77:8d: 69:29:26:af:a5:2b:68:e3:9d:04:c4:b0:c1:ed:b0: a5:f5:ca:21:6a:ee:dc:58:a6:8d:b7:72:a2:30:1c: 9d:42:9c:d6:63:d8:cd:5b:99:43:59:4c:ae:cf:0f: a6:ee:82:19:20:b6:dd:5d:1c:11:1a:43:d9:3d:a0: 96:4f:14:d8:b3:29:07:21:70:d8:fd:68:af:8b:84: 49:5f:8c:de:6f:6f:e8:8a:54:53:aa:c2:bb:aa:46: a8:57:08:de:b3:08:96:fd:4a:fb:89:86:eb:4a:2d: e9:e6:f2:fa:e0:65:fc:19:dd:64:d7:58:3f:3b:dd: 6a:24:d0:31:aa:e8:9d:93:07:d6:7c:db:42:90:37: 53:f5:21:a1:33:0c:6b:79:43:ef:16:f3:9c:2c:e8: db:29:22:73:d5:8b:76:4c:8a:2d:02:71:59:13:23: 5b:96:85:2f:7f:4a:27:b1:55:27:3a:52:21:e0:06: 28:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:23:27:D8:EF:B8:AB:09:C9:DF:DE:F8:E8:03:1D:76:06:62:48:33 X509v3 Authority Key Identifier: keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:1a:9d:f7:8c:d2:a4:05:c7:c4:c3:fc:52:3d:d3:30:21:4e: 8b:8e:f8:fb:e3:e7:05:5e:c3:4e:42:f7:a8:5f:5a:2f:d2:7a: ee:8c:72:2d:c7:93:02:30:1f:89:0f:3c:c8:bc:0f:66:ab:78: 91:89:dc:a2:b3:0e:f1:a7:a1:74:07:01:01:e2:37:69:8e:0d: e5:55:0f:0d:01:3a:80:b0:59:90:b7:ae:37:61:97:b3:70:86: 6f:47:bf:15:24:2e:4f:54:55:5a:b1:66:bb:81:5d:e1:dc:c8: 63:de:61:39:47:a7:6c:4d:0f:a3:71:a4:d4:e5:ee:2c:79:ed: 64:89:fa:7f:42:05:63:f3:b8:16:18:d3:07:c7:fd:40:d8:27: 22:93:d0:f3:81:6b:fb:07:31:a3:db:8f:65:36:e9:e9:f4:39: 58:b5:c7:d5:ad:2e:39:cb:9b:f0:04:5f:a0:55:36:57:5f:53: 7a:a3:9f:5a:f3:00:9c:89:e9:16:3c:f7:44:53:b1:2d:7c:d4: 55:27:39:ad:6b:7c:13:13:ca:f5:a3:c1:42:a6:60:fe:39:c1: fd:5c:dd:6f:05:1c:63:19:21:28:c7:da:35:88:ea:ed:60:a8: ba:7d:48:8d:f4:66:6b:c4:18:82:16:ec:a1:33:3d:50:6a:8a: ad:5c:b9:cd -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZe3fC2gLU3yfS9nzPXhvNJ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjU1NGE4NTZhNDIyYjA2MWFlNjRjNTc3NjMwZjkxZDQw OGNkNGEwHhcNMjUwNjI4MTcwMDU3WhcNMjUwNjI5MTcwMDU3WjAzMTEwLwYDVQQD EyhiMDIzMjdkOGVmYjhhYjA5YzlkZmRlZjhlODAzMWQ3NjA2NjI0ODMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/9pqnZ18oRQ2mBJwPlBKWJ+0jVD OE7BYHuyIeRMSW+wvpPIDHilZO5viCjPfk1VpqJw1DTFdIZh1dEwxx+KX2VF9EMy 8HDUd41pKSavpSto450ExLDB7bCl9cohau7cWKaNt3KiMBydQpzWY9jNW5lDWUyu zw+m7oIZILbdXRwRGkPZPaCWTxTYsykHIXDY/Wivi4RJX4zeb2/oilRTqsK7qkao VwjeswiW/Ur7iYbrSi3p5vL64GX8Gd1k11g/O91qJNAxquidkwfWfNtCkDdT9SGh MwxreUPvFvOcLOjbKSJz1Yt2TIotAnFZEyNbloUvf0onsVUnOlIh4AYozwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLAjJ9jvuKsJyd/e+OgDHXYGYkgzMB8GA1UdIwQY MBaAFPglVKhWpCKwYa5kxXdjD5HUCM1KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DVlVxRmFrSXJCaHJtVEZkMk1Qa2RRSXpVby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNm LTk2NWQ2ZDYwM2JmYS8xLzEtQ1ZVcUZha0lyQmhybVRGZDJNUGtkUUl6VW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRmLzk0MzdhMi0wN2U2LTRlNmEtYWEzZi05NjVkNmQ2MDNi ZmEvMS8xLUNWVXFGYWtJckJocm1URmQyTVBrZFFJelVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehqd 94zSpAXHxMP8Uj3TMCFOi474++PnBV7DTkL3qF9aL9J67oxyLceTAjAfiQ88yLwP Zqt4kYncorMO8aehdAcBAeI3aY4N5VUPDQE6gLBZkLeuN2GXs3CGb0e/FSQuT1RV WrFmu4Fd4dzIY95hOUenbE0Po3Gk1OXuLHntZIn6f0IFY/O4FhjTB8f9QNgnIpPQ 84Fr+wcxo9uPZTbp6fQ5WLXH1a0uOcub8ARfoFU2V19TeqOfWvMAnInpFjz3RFOx LXzUVSc5rWt8ExPK9aPBQqZg/jnB/VzdbwUcYxkhKMfaNYjq7WCoun1IjfRma8QY ghbsoTM9UGqKrVy5zQ== -----END CERTIFICATE-----Generated at Sat Jun 28 21:50:28 2025 by rpki-client