$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft File: 0H11c6rK6CHIfW02Qxz-SygBq0E.mft (raw, json) Hash identifier: 79f809my8CHO70XyaKpl8gxW+X2g6GfLS2S9hFL2Mn0= Subject key identifier: 89:25:F3:37:61:53:CB:6A:3B:7F:C9:B2:6C:A2:28:A2:5A:B7:BF:A9 Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41 Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41 Certificate serial: 0197B820DC14A91CAFB94FD9FDB66EFC31C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft Manifest number: 1306 Signing time: Sat 28 Jun 2025 20:00:50 +0000 Manifest this update: Sat 28 Jun 2025 20:00:50 +0000 Manifest next update: Sun 29 Jun 2025 20:00:50 +0000 Files and hashes: 1: 0DF0N6re6QyjGkcELrZ2PayQLRE.roa (hash: +fZxWB3IhMVYTIeiKHbk18oRReT+PUmn1zDi+OPG/lg=) 2: 0H11c6rK6CHIfW02Qxz-SygBq0E.crl (hash: kzQjD4l+Pgo5aD0udmW8lfuJEIc9/BvDvCHsUczIBO8=) 3: 3CbIb4TEaRdsUuSnzyfjsAcJ8C0.roa (hash: FMM+Gvcvh1vM/fuebG47q1lgLXjSvweT88zfbPoCGg0=) 4: 9MuueRmthntuKlKTwnVM9LicLuc.roa (hash: Qhwg9BIR9qrwafAgYX5pDSZ8fHBJKbNXSHBKS3TOnUU=) 5: DIgxiDivQ3J12DTsz16bG9BGpKM.roa (hash: ipoR7K+Qag5vPNI/tEX1tA3BB9jHVP98Tf9P91MGtOo=) 6: DmJAcHNL5tv0DXlXvpBQPSj5sQo.roa (hash: qPorS5oIpI2apfp+WoMqcxuGrwSF4BiUmmhlYMQw5nA=) 7: GzD59DhVZl4_JB2c2p4bRwKVQNQ.roa (hash: 1OX4fQvpvyMmGHi3iHoSqU11msJNSVwpVls7uukVpCA=) 8: IjdCoPnpProHieFWFH4g3HsCPwQ.roa (hash: +qa0/bhFwN16S6m5JsKHh8Vu/jzfjw/IRYtVBQ1/3r8=) 9: KVofMQ5Iytj3taZ4zNX-3NiQ9A0.roa (hash: SkunsiqfbTLPDmA+1dTSXrSg8HMaos1bWjK4FJzMt/g=) 10: KvI_WlSyaYCbk3_UABhTDePguQI.roa (hash: rPhhKIHPKKRCk53KHCmBvd4JNG8dyNFleXKMwbsZEzU=) 11: LWzTa12ceS3uKfqTTkpFAx1rmBY.roa (hash: oZTmu9Ix2td6L1C/5xioSK5eHWyXVBQsY0hPLgTw194=) 12: QLIx02DBkJ8BTa1KHeMGeh-YdMk.roa (hash: as3RaXvY0zPD+Du6iZO6HneereP8PKXWFDoTrnCHtlI=) 13: _nPdD9NUXNyi6od6mzg3CTRXnXE.roa (hash: 5bWlSHwxWuQbZxvEnoPTlMwKBtuBAjLxH0RjCokO3O4=) 14: bnb74LoHijb6ReFXDA8dOSN40TY.roa (hash: pwFJIAxYs5XXfIXS9iTFUvVpEjtoEP1h/fTl5ckAITo=) 15: dRXssJ13yx35ENXgGitRyldcyQ0.roa (hash: GNYSRDBbtFSH98fHHAWFkKkpqHnJB5tc2K3fGmfA9Xk=) 16: flhmne3OCJjm1qjNcOG0Z5Lii9s.roa (hash: lQBWv0VaHVIzNxJpgK2TdUDo5audQQ5kwE3Uz5fgISE=) 17: lPhFxRT8GyHXdHQ9vuVVLBajUJ4.roa (hash: WLQY2DGtBY5JdQqEp0/I2cNJpPQIJM0e6a534AHtEdU=) 18: liShckzg-y_pGqAmNFUsqPtV5XQ.roa (hash: CRdqFfzJj5q7aSo/eK5J7uVd+II8YpWMcc93sOlwTJc=) 19: owZB8ZzNInvz4qCAZczHr5i6TGQ.roa (hash: OFzte6Bxug1J1ywVmmkhfG0SiDFNDSFv051ZgTkzliw=) 20: p5Mg10zCIfRA7UUdSdLMSBXFn7Y.roa (hash: BUS0bw1TX/ZhcEDLxDt7zaEn0n8CiilgUb2ODoWryJc=) 21: pwGmEYbuZcQZsOR6KNT3jM32lkY.roa (hash: 5UfKqqEXju1N6ARaCHouu2g7PjryinRZ9Cc7bxq100I=) 22: t0oYcll8PI4dP_5gDrpVqJ6D9bo.roa (hash: ZFjxOlyDciCJjlrX2W0RSeB3N5wBNwxTEiHBjcHtR6s=) 23: w3B_b_hTCziVeuO8PCcq3YSHu2s.roa (hash: EH81W2RkfUjm0/Q5QNi5AYaveemQwHLB03yQgBEX+AM=) 24: wbzeMwPRyxIqE7rdL232Kbv3lo0.roa (hash: 0MwHWZD4yNGfOW35B+nQ/M0uW3knCev0pCMd/qtwBR0=) 25: wcgFMyvWhqJvffO8wVrnzqPEWeA.roa (hash: 9GrvaL4luNKVJdLGRZ5R+2Y+tPlz5Om1wQcUI9dS5Ck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:20:dc:14:a9:1c:af:b9:4f:d9:fd:b6:6e:fc:31:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41 Validity Not Before: Jun 28 20:00:50 2025 GMT Not After : Jun 29 20:00:50 2025 GMT Subject: CN=8925f3376153cb6a3b7fc9b26ca228a25ab7bfa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fb:d2:a6:57:02:2e:25:78:5c:e5:df:a2:fe: fa:73:13:d5:8e:81:95:79:fe:80:f9:b5:4f:af:cd: e2:5d:20:e2:f0:a5:24:c2:52:aa:d7:32:cb:47:16: 7a:23:94:27:45:0e:96:fe:b8:fb:34:cd:cc:03:a7: 5b:04:82:bf:d9:16:35:71:26:d9:2b:9a:d7:8d:70: 37:94:45:d0:37:dd:4d:bd:b3:f6:c0:47:38:82:00: 35:30:27:e1:b5:5a:49:18:55:26:d2:da:c9:15:06: ed:46:59:27:f4:50:7c:60:71:73:cf:20:08:28:7b: be:6c:15:3b:90:ed:3e:67:49:16:54:cc:e1:30:24: 30:ae:79:24:f3:0b:75:5a:b0:08:94:88:83:1c:56: e4:fa:24:46:36:40:ed:2d:d7:4f:61:1e:b9:cb:c3: 96:93:0d:75:93:2c:02:4a:c8:7e:94:47:b2:49:7c: c0:97:45:da:c8:16:49:e4:7f:25:62:73:47:b8:8c: 76:ad:3e:75:30:3b:76:5d:f5:cc:89:08:0b:43:1a: 7b:62:b4:15:07:2b:1a:85:6b:2e:b5:4f:09:de:ad: a5:a5:c9:e3:e5:4f:dd:46:1f:a5:d1:68:a1:44:95: 1a:12:da:3b:6f:62:a3:c5:59:7f:ef:9f:ee:a3:8e: 16:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:25:F3:37:61:53:CB:6A:3B:7F:C9:B2:6C:A2:28:A2:5A:B7:BF:A9 X509v3 Authority Key Identifier: keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:48:89:a3:0b:79:c3:53:ab:9b:fc:b8:95:a3:98:78:54:8d: ef:02:62:43:7d:c6:39:d9:73:e1:f3:74:5e:0a:bf:96:0d:ff: 92:82:cf:7f:3b:78:85:f4:d7:58:ed:1e:05:13:ae:99:3e:41: a5:04:36:ed:30:b9:07:d0:c8:c2:9f:0f:a5:c9:28:eb:f9:ec: 1e:9e:07:47:b0:57:7c:04:a8:d6:74:ca:92:16:67:fc:01:d0: 6d:dd:82:3e:51:f9:f2:a4:a6:82:da:df:9c:21:80:37:28:10: f9:2c:81:f1:94:7a:7b:bb:79:f8:e2:a6:8f:3a:84:7c:bc:94: cf:1a:9a:e7:3b:7a:e5:66:6e:4a:dd:a6:fc:73:9e:eb:a8:42: 29:a7:b4:cd:4d:9b:8c:f9:3d:14:57:9b:74:56:96:e2:ed:42: ce:01:f6:d7:47:c3:91:08:47:14:a9:0c:e6:a9:b0:d4:0f:11: 93:1a:32:15:04:6d:e4:92:cf:de:f0:21:2d:be:1c:6b:68:d4: 05:6b:9b:1f:d6:9e:c2:bc:e5:75:e7:00:30:74:b1:a1:65:af: 8d:7c:2f:b7:5a:40:55:cd:fd:7e:63:db:2b:d5:2a:01:32:ed: 0d:69:ae:28:7b:03:06:3b:c3:9c:1e:92:af:78:d5:90:d7:c3: 96:e2:f6:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4INwUqRyvuU/Z/bZu/DHCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwN2Q3NTczYWFjYWU4MjFjODdkNmQzNjQzMWNmZTRiMjgw MWFiNDEwHhcNMjUwNjI4MjAwMDUwWhcNMjUwNjI5MjAwMDUwWjAzMTEwLwYDVQQD Eyg4OTI1ZjMzNzYxNTNjYjZhM2I3ZmM5YjI2Y2EyMjhhMjVhYjdiZmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPvSplcCLiV4XOXfov76cxPVjoGV ef6A+bVPr83iXSDi8KUkwlKq1zLLRxZ6I5QnRQ6W/rj7NM3MA6dbBIK/2RY1cSbZ K5rXjXA3lEXQN91NvbP2wEc4ggA1MCfhtVpJGFUm0trJFQbtRlkn9FB8YHFzzyAI KHu+bBU7kO0+Z0kWVMzhMCQwrnkk8wt1WrAIlIiDHFbk+iRGNkDtLddPYR65y8OW kw11kywCSsh+lEeySXzAl0XayBZJ5H8lYnNHuIx2rT51MDt2XfXMiQgLQxp7YrQV BysahWsutU8J3q2lpcnj5U/dRh+l0WihRJUaEto7b2KjxVl/75/uo44WzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkl8zdhU8tqO3/JsmyiKKJat7+pMB8GA1UdIwQY MBaAFNB9dXOqyughyH1tNkMc/ksoAatBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjIt Y2Y5ZGM1YmFhYTc5LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjItY2Y5ZGM1YmFhYTc5 LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkiJowt5 w1Orm/y4laOYeFSN7wJiQ33GOdlz4fN0Xgq/lg3/koLPfzt4hfTXWO0eBROumT5B pQQ27TC5B9DIwp8Ppcko6/nsHp4HR7BXfASo1nTKkhZn/AHQbd2CPlH58qSmgtrf nCGANygQ+SyB8ZR6e7t5+OKmjzqEfLyUzxqa5zt65WZuSt2m/HOe66hCKae0zU2b jPk9FFebdFaW4u1CzgH210fDkQhHFKkM5qmw1A8RkxoyFQRt5JLP3vAhLb4ca2jU BWubH9aewrzldecAMHSxoWWvjXwvt1pAVc39fmPbK9UqATLtDWmuKHsDBjvDnB6S r3jVkNfDluL2Pg== -----END CERTIFICATE-----Generated at Sat Jun 28 23:26:50 2025 by rpki-client