$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft File: jRrIPuOj-WjWatL99GFue7Hk0dc.mft (raw, json) Hash identifier: nA9426L/bcdhG78FB1j00znosj3j//unNWCFIOcONeo= Subject key identifier: 40:05:B7:4C:3C:62:85:DC:8A:D7:A2:C6:EE:3A:A0:2F:71:7F:6B:A4 Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Certificate serial: 0197B6A045DC3F8F115BE98F0F67F4B6945A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft Manifest number: 0B3C Signing time: Sat 28 Jun 2025 13:00:46 +0000 Manifest this update: Sat 28 Jun 2025 13:00:46 +0000 Manifest next update: Sun 29 Jun 2025 13:00:46 +0000 Files and hashes: 1: 0hcYkFvLnPnX3tJPZIl-Uhot1i0.roa (hash: 6/eHz/J+k5SuDY5b5eslxHZpd3P/l7+bfENiu84Xo/Y=) 2: 2MTjWcnAZaBZxr6B57_xkNelCyo.roa (hash: LwS+Lia49xksIy+sqAnEnU2btZ36QZE/qsN4N2FlYK8=) 3: A3vCnLdcCAHsjG0TKS7PepEiSRQ.roa (hash: 8/8TxF0wXw7stYTcBeXGRpf0HZpKR5xHMrhdKNPhjb4=) 4: Eb3nQCsubyrRRwgtef25b2tcJbQ.roa (hash: sgX7PEOSSTdMVUw2kIAqvpDSoV+TN56cGW37Ykizvek=) 5: FQFiaH-Uhznyo9tuv-39hg1SgIc.roa (hash: AaAgvoQWwsBdEDlzs9JJLKseENMJxUCvDZ1+feCaadI=) 6: JtkTsuHPsoBKn0hRChOrC4JXTN4.roa (hash: M9uGhnRBSZAnmB8BCT/jdRx465I3Ctf37Vtgm+Jt4nc=) 7: LNIAH1MylX8WQQ-W8xfPHTlOsW0.roa (hash: GFXXpakvt3mJ4yGbBFawI3+WVF7sKNF14A1lgtziIek=) 8: Lxv8RdYN9P2vj1nZyAjFF9lNkU8.roa (hash: xMtpILHpW8icGyga3EnNkKUNmrRxGITTuJWIIZqDxDI=) 9: MudRzNeUk2R859eEP09GJeDExf0.roa (hash: 2o3NbfW7AkgEJtAc91HUgnIB/5KesUMTjVvuVU09fp4=) 10: RTZYU-7DG4fUoipBd0qSh8BirjI.roa (hash: 3eo6AFVTXAYcIIpYV9OFjF0R4DRTO3nfrXKCxpb3Q8c=) 11: XO5629FFpWYFF8ZRrD5XKcMM2vo.roa (hash: wKy5dCiE9pBzbJNPaAeHBHoxO/6aKqqjDAe2f2qYl60=) 12: gwSC7EAy3C72kqaOxsQmMkrjxyA.roa (hash: oVgyYlrKyPjekvA+50Kp0/QR+pQendS8nmEKcr8YBXw=) 13: jRrIPuOj-WjWatL99GFue7Hk0dc.crl (hash: vhmCpUyzE0fJyBnPDczp5uO9QJMhSLwlnhLLficD2h0=) 14: koWcD6_YJsplq6MpdAuoeyxurzM.roa (hash: 2bTDDvlz5M3JHeYmPpa6SlfroaAlw505uc1zw7/pXCU=) 15: lO8z4PUnAAW_FQZ30LG2G_SaC34.roa (hash: TP4CK9avYURoeZBLUriM0sZhHgj7m8xB680P8/Q/778=) 16: ptIzMM5pGR32qdt6NWym3eUNiak.roa (hash: bSsM8QyZGEjlRqx/UPAoekl3qkyD03EUapHU3WIbdX4=) 17: tesrxSIX8wDOD0usavdzlelTyC8.roa (hash: 2mw6qDJEVPvk2SB5Frfa2IZ+DHf6Rgtla+C91qwtmwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:a0:45:dc:3f:8f:11:5b:e9:8f:0f:67:f4:b6:94:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Validity Not Before: Jun 28 13:00:46 2025 GMT Not After : Jun 29 13:00:46 2025 GMT Subject: CN=4005b74c3c6285dc8ad7a2c6ee3aa02f717f6ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1a:b9:8a:d7:a6:5e:db:72:50:33:10:66:3b: 72:87:41:47:62:0e:18:9d:c5:fd:b4:e9:42:20:f6: 98:65:4f:94:a6:65:67:b5:6b:5d:da:cd:6d:9d:19: 88:01:1f:c7:7e:52:76:e1:82:c1:9f:e9:66:29:ec: ac:54:4e:5b:49:9e:8b:60:ed:73:ec:98:44:ac:ca: fd:02:1e:9b:5c:9c:a1:20:3a:31:e6:ff:9a:7c:ef: 8a:b6:0f:b4:3f:38:3a:80:77:54:22:5c:95:12:a6: 42:13:4d:5a:39:c6:3e:e6:52:9b:c7:c3:bd:a3:cd: 16:22:99:2c:40:d9:6d:3f:40:b6:49:66:d9:d1:04: 58:1d:0e:8c:f3:50:d5:51:de:a5:5f:4c:d5:7d:62: 03:04:48:c6:ca:0b:4c:c9:7d:a8:52:ad:bd:e7:33: 34:62:5e:eb:80:83:60:1e:26:57:b9:43:97:1c:fb: 00:b5:5e:99:2c:db:38:92:53:d4:7b:2d:a0:d6:03: 71:0e:a4:39:2b:bc:01:a7:07:72:60:a2:ed:60:b9: b7:69:7c:32:2b:13:e6:41:f2:b1:cf:23:8d:df:ea: 74:bc:6b:16:c9:ff:95:fc:8a:15:9c:9e:9d:61:06: 25:93:17:a6:a3:7f:93:8c:63:0b:79:75:67:e1:48: 91:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:05:B7:4C:3C:62:85:DC:8A:D7:A2:C6:EE:3A:A0:2F:71:7F:6B:A4 X509v3 Authority Key Identifier: keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:3e:1b:1a:23:18:a6:5f:38:29:60:0b:96:b7:9e:50:c4:b2: b3:23:8e:e0:44:86:76:d0:89:e4:a0:4c:1d:67:5d:f8:14:e4: 9a:be:6b:4e:db:8f:aa:c4:8d:66:4a:5f:a8:bd:d7:9e:29:8a: 18:af:20:b4:93:0e:7f:60:d4:6d:4b:8f:5f:7c:1b:82:d2:5a: 34:44:0d:45:f4:07:6d:cf:e6:13:39:c0:a8:49:92:db:df:ad: 43:89:10:d9:4b:67:b8:7f:7a:f7:f5:ac:71:f1:d4:ae:c2:ca: 5a:53:76:b2:7f:c0:25:ad:a0:68:1b:57:c9:27:6a:ce:ee:b6: 1e:15:ca:64:87:28:da:36:5b:89:34:6e:e2:70:a6:c5:8c:36: ff:aa:ff:7a:8d:9e:bd:e0:43:54:6c:3f:6a:a7:5f:b0:60:58: 9b:76:c3:5a:c7:65:c9:6a:e9:f1:9b:8c:74:04:2f:4a:a2:e5: f3:0c:94:20:ae:11:9b:8a:df:be:5f:41:ea:a8:ce:14:50:b5: 58:2e:91:e6:9d:91:ed:07:cc:15:d0:40:70:a2:21:9b:84:d7: f7:60:b9:84:8b:72:cc:b4:b9:33:ea:a4:b7:8c:61:1b:16:c4: 42:b5:32:b1:84:48:18:f4:f3:61:f5:f6:7e:a4:51:1a:fb:e8: c4:8f:66:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2oEXcP48RW+mPD2f0tpRaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl NGQxZDcwHhcNMjUwNjI4MTMwMDQ2WhcNMjUwNjI5MTMwMDQ2WjAzMTEwLwYDVQQD Eyg0MDA1Yjc0YzNjNjI4NWRjOGFkN2EyYzZlZTNhYTAyZjcxN2Y2YmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRq5itemXttyUDMQZjtyh0FHYg4Y ncX9tOlCIPaYZU+UpmVntWtd2s1tnRmIAR/HflJ24YLBn+lmKeysVE5bSZ6LYO1z 7JhErMr9Ah6bXJyhIDox5v+afO+Ktg+0Pzg6gHdUIlyVEqZCE01aOcY+5lKbx8O9 o80WIpksQNltP0C2SWbZ0QRYHQ6M81DVUd6lX0zVfWIDBEjGygtMyX2oUq295zM0 Yl7rgINgHiZXuUOXHPsAtV6ZLNs4klPUey2g1gNxDqQ5K7wBpwdyYKLtYLm3aXwy KxPmQfKxzyON3+p0vGsWyf+V/IoVnJ6dYQYlkxemo3+TjGMLeXVn4UiRmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEAFt0w8YoXciteixu46oC9xf2ukMB8GA1UdIwQY MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt ZGRmNTY3ZWRlZDAzLzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADT4bGiMY pl84KWALlreeUMSysyOO4ESGdtCJ5KBMHWdd+BTkmr5rTtuPqsSNZkpfqL3XnimK GK8gtJMOf2DUbUuPX3wbgtJaNEQNRfQHbc/mEznAqEmS29+tQ4kQ2UtnuH969/Ws cfHUrsLKWlN2sn/AJa2gaBtXySdqzu62HhXKZIco2jZbiTRu4nCmxYw2/6r/eo2e veBDVGw/aqdfsGBYm3bDWsdlyWrp8ZuMdAQvSqLl8wyUIK4Rm4rfvl9B6qjOFFC1 WC6R5p2R7QfMFdBAcKIhm4TX92C5hItyzLS5M+qkt4xhGxbEQrUysYRIGPTzYfX2 fqRRGvvoxI9m1A== -----END CERTIFICATE-----Generated at Sat Jun 28 21:51:46 2025 by rpki-client