$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft File: VXsKwQuGQqJ909dO1ste4EXme5c.mft (raw, json) Hash identifier: 3xo5W9p+MQ4zLPziKARALVSoPet0dvtzlNciOchVRlM= Subject key identifier: 58:AE:A3:98:BB:81:B5:89:C8:AD:7E:FF:7A:3C:FE:90:8E:EB:CF:6D Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Certificate serial: 0197B6D7B40663069FAA495CEAABCC1A0374 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft Manifest number: 0A0C Signing time: Sat 28 Jun 2025 14:01:18 +0000 Manifest this update: Sat 28 Jun 2025 14:01:18 +0000 Manifest next update: Sun 29 Jun 2025 14:01:18 +0000 Files and hashes: 1: 21k07trihuOq_p0d1xoi4bxuPZA.roa (hash: 7OFU6XWsgxZjBgc5/9Z26TjwR0mC8/oQG4kPqRbf13g=) 2: 4iaJi_OBKAE3o8h175iBu_IZyfI.roa (hash: lDCEAMXE0clsOMjNyholsrUDxhoIrjK4k3xcCfxPkUY=) 3: 5BopT6zWN2-PdGYdxH2aUB0jmhg.roa (hash: /mHqZKMlZJCdgH7Kawl3aGGRgWwqt/sVMAcpLcw5mXU=) 4: Geel9OdOaQ9FlrEzFHKlpiWE30U.roa (hash: mEBGWZVn+mmpTlkiNI5Af3AFG/t42zkx+akYj/Nw/0M=) 5: JWpMTh79Cpipv8z2TiqFetsx4Z0.roa (hash: EeuLpYtgLdl6hvIb6vNrTtAuFpAgpCnIwfpYkuwZmkQ=) 6: ORkWSvHyz7xVlACj3J643SMA1t4.roa (hash: 9HyAWLxiFAOsSF7hRfVc73gtPaqofO7sI7vq8SdYSfA=) 7: Tg1n5Fp1pJd7zBO6W_NcYtcUcjs.roa (hash: 2JSaIkit5yVDVUZV0/gM1VkpGy+fdm5Z9IWeQFjGnCA=) 8: VXsKwQuGQqJ909dO1ste4EXme5c.crl (hash: NUjTVXDc2vE2h75mN2q+t8YYUeVRxX9WW/+xTaAwpX4=) 9: eEIU-7XZaVcC-f6y_l8FbyGXkYs.roa (hash: ccjF0pRALTvlsj4nghUXMFhD4eJgmm2vuAU1GU9bybw=) 10: gk0o9JIYrdgKiCEVnFxYDFCmm6g.roa (hash: U5lgDtUaYRY5Jq/t8D2zh/ImkX7ABdChH50k3iWkRSA=) 11: isVEUZfOAYWgwQz8Wasb0pXP9-c.roa (hash: KMpoK0MvGBO62nHjsAV0aozmo8+TgCC0xqPegTe+AGU=) 12: plBE2K-1jhmKq6eM8fW4KaXWZeQ.roa (hash: Fhmhnyiel4/Ua1E2ksX/40TvHfAVYkZD+dMm3wF8AAw=) 13: q5iwhkLWHaHzrsMDMRUmBmBn11k.roa (hash: 2neeMv5dtKfWXLBDuxY5lIZ8bbDinZSWs3Ol+x9qe8Y=) 14: qGHwRT5XaADoYIFvBSiB_qBc8VI.roa (hash: 1jerdKXo29tvZCLipnWCYRKXmzqu+SKDN+L+wjo2w8c=) 15: qSnacK2T8IuqCW3tI5c1Sj5K99M.roa (hash: WK1c1s6zKzUYTVUxjbT3jBDMbmv6j/g+GMi3AvdtgQY=) 16: rCp1o_nOqwsF2hOj4c5kBCN-sNQ.roa (hash: hkXBdU7Mx+s+1UvYnZlcv2/hPwhLGz/FrQNM7+jLYxI=) 17: uNvKhwe5KEaAzLU0ACWU9sZ7Bm4.roa (hash: jacfmgDqnbUtNbN3r/NGjMzBlVkGGEbKEgbjHG7ah6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:d7:b4:06:63:06:9f:aa:49:5c:ea:ab:cc:1a:03:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Validity Not Before: Jun 28 14:01:18 2025 GMT Not After : Jun 29 14:01:18 2025 GMT Subject: CN=58aea398bb81b589c8ad7eff7a3cfe908eebcf6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f0:ac:d5:9e:48:05:03:4b:9b:02:0a:9c:fe: c8:3a:5e:91:f8:e2:cb:31:9f:0a:55:f3:0f:6e:02: a7:88:f9:cc:fc:72:d5:39:3c:cd:7b:88:b4:61:00: 51:5a:66:9f:26:ca:0e:8a:c0:97:23:f5:b6:51:3d: 79:41:9c:7b:7d:27:d7:10:84:72:5a:35:47:f2:4b: ef:5e:9f:59:d6:51:03:3f:31:c7:f4:4c:b2:1f:28: 62:95:45:da:1f:b7:38:bb:59:76:0b:50:13:cc:c4: b7:41:a3:31:20:e1:1b:5c:c0:fd:6b:45:7f:f4:c9: 99:08:94:df:c9:b1:53:1b:82:52:be:e3:bc:72:55: 8a:61:60:88:f0:a1:46:62:1d:01:b2:bf:ec:26:fe: d1:3e:1d:c0:cf:32:40:8c:23:89:22:bb:5b:17:6a: 37:20:9a:47:fa:10:e1:26:ad:9f:0c:bc:d5:3d:d1: e3:73:8a:19:94:d5:ef:02:ed:73:9c:5d:3c:be:8a: 62:11:33:bb:17:41:5d:bc:fa:92:25:e8:e8:be:04: c5:1b:14:82:78:2e:0d:bb:41:64:e5:61:9c:8f:50: a5:d0:ed:43:48:3c:af:b1:11:dc:da:63:49:e4:16: 11:19:07:63:4c:ad:e0:03:56:ee:35:8e:73:6d:c1: e4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:AE:A3:98:BB:81:B5:89:C8:AD:7E:FF:7A:3C:FE:90:8E:EB:CF:6D X509v3 Authority Key Identifier: keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:64:d3:d5:38:43:ef:b6:bd:a7:f6:c9:d6:08:90:f2:41:53: f5:d9:33:de:70:06:21:f5:db:56:84:ed:c7:fe:ac:0b:6e:ec: 2d:1b:43:0c:ef:da:53:bf:6f:de:ae:49:75:5a:1f:54:00:72: 99:e8:d2:e9:2c:cf:d3:ca:a0:9a:af:a9:93:b6:f0:fa:d8:c9: 33:16:8b:df:50:7f:41:67:5f:5c:79:6b:e3:a5:e4:5b:a5:da: c6:4a:83:d0:97:74:8e:e8:21:62:da:80:66:02:f5:e0:04:65: 07:33:b0:b9:b2:a3:18:f0:94:7e:a7:37:98:ae:f6:37:a1:e2: 78:c6:6b:08:1e:0e:f4:ef:cf:bc:63:6b:32:06:48:bf:ad:72: 51:c9:4d:d3:76:9d:67:11:48:ff:31:09:6e:93:69:44:46:09: d1:52:98:b0:d6:df:c4:e6:27:42:20:f5:45:a7:49:6c:5e:fc: b2:6c:85:0e:c5:21:d4:e4:fa:be:eb:c6:cb:cd:e5:72:58:95: ab:f6:68:6d:2e:15:3a:c9:c7:c3:68:9e:c4:62:fd:e6:b5:6b: 7c:7b:44:dd:12:a1:55:82:d0:6d:ea:b6:33:84:27:22:30:61: fa:8f:18:b7:ac:ca:ab:5a:22:8a:ed:a9:a8:2a:e0:2c:66:01: 23:01:01:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe217QGYwafqklc6qvMGgN0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1N2IwYWMxMGI4NjQyYTI3ZGQzZDc0ZWQ2Y2I1ZWUwNDVl NjdiOTcwHhcNMjUwNjI4MTQwMTE4WhcNMjUwNjI5MTQwMTE4WjAzMTEwLwYDVQQD Eyg1OGFlYTM5OGJiODFiNTg5YzhhZDdlZmY3YTNjZmU5MDhlZWJjZjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/Cs1Z5IBQNLmwIKnP7IOl6R+OLL MZ8KVfMPbgKniPnM/HLVOTzNe4i0YQBRWmafJsoOisCXI/W2UT15QZx7fSfXEIRy WjVH8kvvXp9Z1lEDPzHH9EyyHyhilUXaH7c4u1l2C1ATzMS3QaMxIOEbXMD9a0V/ 9MmZCJTfybFTG4JSvuO8clWKYWCI8KFGYh0Bsr/sJv7RPh3AzzJAjCOJIrtbF2o3 IJpH+hDhJq2fDLzVPdHjc4oZlNXvAu1znF08vopiETO7F0FdvPqSJejovgTFGxSC eC4Nu0Fk5WGcj1Cl0O1DSDyvsRHc2mNJ5BYRGQdjTK3gA1buNY5zbcHkmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFiuo5i7gbWJyK1+/3o8/pCO689tMB8GA1UdIwQY MBaAFFV7CsELhkKifdPXTtbLXuBF5nuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYt ZmJlMWEwZDBhYTk4LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYtZmJlMWEwZDBhYTk4 LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhGTT1ThD 77a9p/bJ1giQ8kFT9dkz3nAGIfXbVoTtx/6sC27sLRtDDO/aU79v3q5JdVofVABy mejS6SzP08qgmq+pk7bw+tjJMxaL31B/QWdfXHlr46XkW6XaxkqD0Jd0jughYtqA ZgL14ARlBzOwubKjGPCUfqc3mK72N6HieMZrCB4O9O/PvGNrMgZIv61yUclN03ad ZxFI/zEJbpNpREYJ0VKYsNbfxOYnQiD1RadJbF78smyFDsUh1OT6vuvGy83lcliV q/ZobS4VOsnHw2iexGL95rVrfHtE3RKhVYLQbeq2M4QnIjBh+o8Yt6zKq1oiiu2p qCrgLGYBIwEB1g== -----END CERTIFICATE-----Generated at Sat Jun 28 19:26:17 2025 by rpki-client