$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft File: i0eqCfLGEPb0S051wc2dzTiE5V0.mft (raw, json) Hash identifier: MeMSPpBD2ubS604p9IrZpsmdSZJolCBdoG4MNq6u0/c= Subject key identifier: F2:E8:C7:AE:C7:6F:7F:16:8D:94:08:A5:21:72:2E:2F:51:D8:95:64 Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Certificate serial: 0197B7EA8F48562478CD7C57CFDE2256B212 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft Manifest number: 0611 Signing time: Sat 28 Jun 2025 19:01:31 +0000 Manifest this update: Sat 28 Jun 2025 19:01:31 +0000 Manifest next update: Sun 29 Jun 2025 19:01:31 +0000 Files and hashes: 1: 1N4Y-cxz_J8zvyVIPn4xaQ56W2I.roa (hash: LqNoYMeIHUvi7e8ZqSiPD8gSQPNLvRqFi/MU8NW82NY=) 2: 59PndGiGSGsbZj2RG0Ycf2mhgxQ.roa (hash: 4mRCrakJ34q1MdXD9vBIYWH6H5pZIK2v8drs+brvjAI=) 3: 6WgYdehy91JaGiXTQ4-mtet9hKA.roa (hash: k18cYqD3ZZMZ5W+a0Kjw8aqcJhfy210LAE8xFma2X2Y=) 4: TI__S_5wBSs76T2sPdddnNR3NI4.roa (hash: 1cgm9AfaKeKcFrBAUFYpRgSienV4cq0Pog28Pn4vsBo=) 5: ax82hmj304KQ6lsAdD5oZeQi8aQ.roa (hash: etYT+wmJ3v0dyDPK3kOFDbBh+/DHGm30j18qmZddn14=) 6: clWNFKcGPCSVI8IczoLVlzymSwE.roa (hash: kwC3djRgAXxGmhjo7j0gZC7YajpIcaKz89NjkpuMd6c=) 7: d_GmJYSiWtstngRCp4D-3Nytktc.roa (hash: b5QdQbGkypzupkHkl6NURfR0Tou888+YLeKDY72J/ww=) 8: i0eqCfLGEPb0S051wc2dzTiE5V0.crl (hash: gMTvKm0X7kdyjDx8aZP2Zx58uUjThHQFWWffs/502Fk=) 9: t3F8K-eKkpIig0xnri8gdWPYoUc.roa (hash: 0LMmNIPY61uLEOsd/F4vx4OEiYbCbnmZs1SeTx2VOHc=) 10: xCwC0ruPjNW76bEQ25__qiX8bTI.roa (hash: /PNuMEC0HX9r4nNg0Hwe56qDotvTcrptdJE+VRq+wv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:ea:8f:48:56:24:78:cd:7c:57:cf:de:22:56:b2:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Validity Not Before: Jun 28 19:01:31 2025 GMT Not After : Jun 29 19:01:31 2025 GMT Subject: CN=f2e8c7aec76f7f168d9408a521722e2f51d89564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:44:6a:7e:08:98:8f:bf:65:2c:83:37:91:4f: 7e:ee:68:9e:3b:cb:b2:85:33:8f:27:7d:5e:82:83: 31:9b:29:59:5c:85:8f:51:30:87:08:40:83:25:8a: 2b:b0:22:78:d1:26:95:b6:20:5c:7d:58:94:e0:74: 08:a7:3d:68:ea:44:5c:e5:07:d8:aa:48:6b:fa:a7: ec:04:7d:86:91:66:4b:c7:77:bd:bb:97:85:ca:ab: 09:b8:dd:b1:84:d3:83:2c:a7:5e:bb:c6:e9:e7:da: 69:63:f2:f5:b8:5e:13:d0:62:b2:c8:c0:96:ee:26: 34:5a:ea:6b:f0:ea:d3:a6:bf:58:16:7c:36:73:52: db:85:38:5d:f9:f7:af:5f:4d:72:28:16:ae:60:24: 3d:f5:8f:ce:ae:c0:ac:3a:3e:91:78:fb:09:de:5d: 3c:58:af:a9:94:60:4b:df:f8:83:91:75:85:66:ae: c2:3e:89:a8:55:2a:4d:e7:7a:bc:f9:10:3a:fe:9e: f7:9c:1f:3d:90:65:1b:57:15:9c:2b:69:4d:7b:8a: 23:38:40:81:3f:31:29:64:f6:13:05:a1:7f:e9:eb: 3f:e0:63:f4:35:80:00:c4:33:62:4e:be:07:02:75: c2:2b:5c:23:10:1b:e7:6f:0f:23:91:98:3c:a9:c8: 64:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E8:C7:AE:C7:6F:7F:16:8D:94:08:A5:21:72:2E:2F:51:D8:95:64 X509v3 Authority Key Identifier: keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:44:5e:2b:67:76:70:90:81:bf:69:1b:d0:a6:67:6b:c5:52: 12:40:be:0d:f9:fd:d1:70:7e:a5:6a:64:3e:1d:5c:a1:e1:5f: 3f:c7:cf:cc:51:83:a0:c7:51:7b:b2:88:7a:ba:d6:68:76:d1: a4:e6:36:f7:67:9b:c9:60:a3:7e:df:be:e1:42:fb:4f:96:35: 6c:11:5f:06:2b:c1:85:25:85:76:34:08:64:be:07:ed:f4:f8: 8a:48:52:5f:25:d1:29:80:e4:50:fe:08:5e:1f:b0:81:15:1c: e8:c9:62:63:3f:9f:b5:a2:2b:b9:41:f9:79:e6:00:6c:bf:ff: ad:ed:d4:8b:e1:11:a7:68:de:75:ec:cd:fb:fa:29:d6:70:c2: 8c:f4:e9:82:6d:b8:58:c4:e7:79:5f:03:4d:bf:65:49:03:14: ef:ba:de:9a:c2:20:e3:6b:cc:4b:bc:12:c3:40:74:0e:40:54: 08:fc:94:f4:25:4a:3b:c8:45:c5:6e:6d:3d:96:55:83:91:92: 4e:cd:8e:5d:8b:20:38:0c:e8:d9:e4:df:c7:07:7e:86:68:3f: d9:ca:c0:60:df:83:5d:38:bd:bc:87:1d:27:85:01:8c:ca:3e: 85:12:9d:60:1b:2c:47:28:b6:6a:c2:1b:ed:a2:5d:b0:7a:89: 5c:4c:c1:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe36o9IViR4zXxXz94iVrISMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNDdhYTA5ZjJjNjEwZjZmNDRiNGU3NWMxY2Q5ZGNkMzg4 NGU1NWQwHhcNMjUwNjI4MTkwMTMxWhcNMjUwNjI5MTkwMTMxWjAzMTEwLwYDVQQD EyhmMmU4YzdhZWM3NmY3ZjE2OGQ5NDA4YTUyMTcyMmUyZjUxZDg5NTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kRqfgiYj79lLIM3kU9+7mieO8uy hTOPJ31egoMxmylZXIWPUTCHCECDJYorsCJ40SaVtiBcfViU4HQIpz1o6kRc5QfY qkhr+qfsBH2GkWZLx3e9u5eFyqsJuN2xhNODLKdeu8bp59ppY/L1uF4T0GKyyMCW 7iY0Wupr8OrTpr9YFnw2c1LbhThd+fevX01yKBauYCQ99Y/OrsCsOj6RePsJ3l08 WK+plGBL3/iDkXWFZq7CPomoVSpN53q8+RA6/p73nB89kGUbVxWcK2lNe4ojOECB PzEpZPYTBaF/6es/4GP0NYAAxDNiTr4HAnXCK1wjEBvnbw8jkZg8qchkbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPLox67Hb38WjZQIpSFyLi9R2JVkMB8GA1UdIwQY MBaAFItHqgnyxhD29EtOdcHNnc04hOVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgt NTAwMTUzOWQ3MTg1LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgtNTAwMTUzOWQ3MTg1 LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFkReK2d2 cJCBv2kb0KZna8VSEkC+Dfn90XB+pWpkPh1coeFfP8fPzFGDoMdRe7KIerrWaHbR pOY292ebyWCjft++4UL7T5Y1bBFfBivBhSWFdjQIZL4H7fT4ikhSXyXRKYDkUP4I Xh+wgRUc6MliYz+ftaIruUH5eeYAbL//re3Ui+ERp2jedezN+/op1nDCjPTpgm24 WMTneV8DTb9lSQMU77remsIg42vMS7wSw0B0DkBUCPyU9CVKO8hFxW5tPZZVg5GS Ts2OXYsgOAzo2eTfxwd+hmg/2crAYN+DXTi9vIcdJ4UBjMo+hRKdYBssRyi2asIb 7aJdsHqJXEzBdA== -----END CERTIFICATE-----Generated at Sat Jun 28 23:29:56 2025 by rpki-client