$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft File: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft (raw, json) Hash identifier: cRbgkcKiQwPhsfJsgxtF4GwYsI+5EyH/bRciMb0wC0c= Subject key identifier: E6:54:0F:D2:27:2F:25:25:4D:46:E9:90:4E:AE:7A:59:C6:20:05:54 Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Certificate serial: 0197B745744CECBAF43D2F9634C1724841A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft Manifest number: 03E0 Signing time: Sat 28 Jun 2025 16:01:11 +0000 Manifest this update: Sat 28 Jun 2025 16:01:11 +0000 Manifest next update: Sun 29 Jun 2025 16:01:11 +0000 Files and hashes: 1: 1-WZZnjR8DlZqLUibcRUcYzm0QDU.roa (hash: /lrkBjM9dGMr6D7JGPVc5syjsFBtCzanEGLfhb4dKM0=) 2: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl (hash: pUjpZI6goqKgaCJVOUV2VzuUDUNmli1Asc7wd2RV2Ow=) 3: 3jZyUpaNiuxwzYQ21tChGVq7yOY.roa (hash: rlRJ/UNIhVQKGyw4Wr/cDFs+VO81jRk6SUephZD3g4o=) 4: 5khyx2A9d0Q0e3huYGosj5KCOlo.roa (hash: m/iIxHfeWDlWWpGAIqzgFb7iOcTekZb0i9Y2aBX+dy4=) 5: 7cUCY2EysYK09Y_F1tsMsp_B8MU.roa (hash: el4sZWuoJZOOcj14KO5Yq16IPPIz+c0KckgEteIx4YM=) 6: ILbeank0F3xhLsgBl0NZfpBZFig.roa (hash: 8RlSwtQK5lhGbhOtyX4cacpgfYuG3exGirW2aa5+FLI=) 7: KBQWtgPCMeq_IbONzoF64FnlzwE.roa (hash: EZ3seNeYjAQFpAfGwhXlV+Wya2vQO7lfYcVB84EkqA4=) 8: PBiom43THD1F1SBGVmDFN9WwnMo.roa (hash: EVRLL8Mxobz8XRwc26H2JAHWkuwMiYakvll8d/79CJQ=) 9: TnqWiZSrJP5FZLgDlXk-iaFi5k8.roa (hash: 8gjKeaSL9Im1mKl/CKczQDSLzI2OEBo3YD5qQoY5RT0=) 10: VXGu7cRy3TUPyfgbIf2vopAF1Lc.roa (hash: 40vRMPsPFPCFnDUP/ikEgH9v+gi1iVOQkLoxtLSkOqE=) 11: ZaSQVTZm2f4ebc71HIkhrpqqsuk.roa (hash: X8/L0T6q0bM6s++7u2MQIu4RlHWQNdJcKAvE7bH3VP4=) 12: jldP_NkgEKrLmFaYQtB6TuhGzRs.roa (hash: Cz3xmiLxKccg4wAv608JqhvYxIHIutFBcyhT8Ond0Zs=) 13: oQk2rT9-TmTMiTawX34MBI0QTrc.roa (hash: 6J7fvMBzz5wnq8Q655iOLvmHY5jKT0LznvTL3IrQ8Xw=) 14: unsmmkYBpbXrCubGO7XS6N7I7QM.roa (hash: /TaQOoUPP+hWic0pvVLJBHflkZLzIc8T4AFkDEL7yKk=) 15: w9Z-5nLehvUlBeOI2h5dSoEBLSw.roa (hash: dyC69X2s5yoLrmCLq7pBQHExLj0vbp1A/uwW5wlqEug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:45:74:4c:ec:ba:f4:3d:2f:96:34:c1:72:48:41:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Validity Not Before: Jun 28 16:01:11 2025 GMT Not After : Jun 29 16:01:11 2025 GMT Subject: CN=e6540fd2272f25254d46e9904eae7a59c6200554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:0c:10:e8:5b:4a:c8:87:39:74:9c:e1:07:7b: 9d:55:e4:f3:bf:fe:d0:46:63:49:d6:6b:51:5e:be: ac:07:5c:15:69:8d:9a:72:1c:7f:f4:35:d1:28:21: 35:3f:95:db:88:b2:16:cd:b4:e1:23:9b:f3:28:ea: 37:79:6e:63:ba:8a:dd:68:19:a3:24:c1:8f:21:95: 06:44:68:dd:73:e6:47:6b:06:ec:05:00:5f:06:9d: 2b:e3:8d:79:96:d2:af:eb:b0:d1:13:0e:be:cf:3e: cb:d9:5b:ea:79:a3:92:58:a3:0c:d6:fd:74:d4:15: fc:b0:89:09:5c:36:ae:09:53:96:39:34:47:a6:e7: 29:cf:eb:a3:ce:40:d4:7d:c0:c7:41:ea:d0:e6:db: dd:22:c7:12:f2:17:8e:f8:22:08:ac:e1:bf:03:67: d2:6d:77:8f:cb:2b:7f:6b:d3:5c:aa:25:6e:d9:6f: 52:b1:09:b6:a2:91:93:4d:18:9a:22:76:38:8d:7c: 98:6e:39:b2:6e:ff:b1:41:15:a9:c7:5e:5b:23:a4: c3:08:42:7c:ae:2c:e3:2a:b9:d7:65:28:fc:69:13: e6:fd:f2:44:58:7d:83:09:fc:05:4d:2f:2a:22:a9: d7:c1:f9:65:dc:4c:e8:54:f5:d8:55:23:4b:2b:21: 51:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:54:0F:D2:27:2F:25:25:4D:46:E9:90:4E:AE:7A:59:C6:20:05:54 X509v3 Authority Key Identifier: keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:74:4f:a1:d3:a2:10:85:8c:7c:b2:c5:3f:a8:8c:b4:2e:64: 4d:5b:ea:d3:8e:2a:32:3f:0e:e9:43:d2:6a:f0:43:56:54:05: d5:0d:58:90:89:ab:d7:57:57:32:61:c4:4d:5e:b9:24:b7:1d: c8:4c:96:c3:d0:50:1e:cf:4e:9f:b2:68:28:c2:15:3b:9e:4e: 9f:56:dc:ee:21:31:0f:60:e3:8b:f2:dd:ad:8c:7a:bb:39:60: b9:be:96:ed:bb:fc:56:bc:9f:a3:d0:a5:3e:38:d0:6e:6d:98: 62:75:51:fc:98:4f:f0:ec:47:8b:92:e9:91:ca:ef:d8:18:5e: 9b:1c:30:b0:8b:21:78:b8:19:b1:78:11:c4:49:fb:03:74:62: d9:e6:24:1f:a2:e2:43:20:a3:fc:d5:0d:98:2d:00:54:c5:f1: 7b:f7:bd:f6:50:a0:ca:0c:da:0a:05:24:55:4e:95:f3:7a:cb: 2e:98:76:a3:3c:82:c1:2b:1b:8f:27:f8:0a:b7:de:cd:55:07: 57:6a:f5:46:4a:b7:f7:5c:90:21:98:83:20:e8:7c:21:0c:7f: d1:fd:61:c1:64:e8:34:10:4f:5c:82:dc:e1:23:77:e7:3b:96: 90:88:1c:7b:d2:1a:da:1c:8c:42:ae:2f:25:94:6f:f3:3c:ba: ed:07:a1:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3RXRM7Lr0PS+WNMFySEGmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm MDIwMjAwHhcNMjUwNjI4MTYwMTExWhcNMjUwNjI5MTYwMTExWjAzMTEwLwYDVQQD EyhlNjU0MGZkMjI3MmYyNTI1NGQ0NmU5OTA0ZWFlN2E1OWM2MjAwNTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9AwQ6FtKyIc5dJzhB3udVeTzv/7Q RmNJ1mtRXr6sB1wVaY2achx/9DXRKCE1P5XbiLIWzbThI5vzKOo3eW5juordaBmj JMGPIZUGRGjdc+ZHawbsBQBfBp0r4415ltKv67DREw6+zz7L2VvqeaOSWKMM1v10 1BX8sIkJXDauCVOWOTRHpucpz+ujzkDUfcDHQerQ5tvdIscS8heO+CIIrOG/A2fS bXePyyt/a9NcqiVu2W9SsQm2opGTTRiaInY4jXyYbjmybv+xQRWpx15bI6TDCEJ8 rizjKrnXZSj8aRPm/fJEWH2DCfwFTS8qIqnXwfll3EzoVPXYVSNLKyFRuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZUD9InLyUlTUbpkE6uelnGIAVUMB8GA1UdIwQY MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt NGI2YzFjZjlmZTRmLzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVnRPodOi EIWMfLLFP6iMtC5kTVvq044qMj8O6UPSavBDVlQF1Q1YkImr11dXMmHETV65JLcd yEyWw9BQHs9On7JoKMIVO55On1bc7iExD2Dji/LdrYx6uzlgub6W7bv8Vryfo9Cl PjjQbm2YYnVR/JhP8OxHi5Lpkcrv2BhemxwwsIsheLgZsXgRxEn7A3Ri2eYkH6Li QyCj/NUNmC0AVMXxe/e99lCgygzaCgUkVU6V83rLLph2ozyCwSsbjyf4CrfezVUH V2r1Rkq391yQIZiDIOh8IQx/0f1hwWToNBBPXILc4SN35zuWkIgce9Ia2hyMQq4v JZRv8zy67QehOQ== -----END CERTIFICATE-----Generated at Sat Jun 28 20:28:40 2025 by rpki-client