$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft File: FgVYAbd153QwYyFFX9Rj-9knPEw.mft (raw, json) Hash identifier: BFf939eZZg9+Hv3J3DhjBAxgusoOYd/HiKr5pxzb5YU= Subject key identifier: 9B:5F:DC:E3:F2:2A:68:64:09:5B:17:10:CA:2B:A8:82:EA:61:51:7F Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 0197B82125ECA10C960CB5BF98FFD2D18C9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft Manifest number: 0348 Signing time: Sat 28 Jun 2025 20:01:09 +0000 Manifest this update: Sat 28 Jun 2025 20:01:09 +0000 Manifest next update: Sun 29 Jun 2025 20:01:09 +0000 Files and hashes: 1: 1KQdLQdqSavQ8opOsJBCC_LRSmI.roa (hash: sDbjsiQHm8jFEXwFUnfwIQmQndNvaybGYHSFGwTIBNw=) 2: 2KRS8xNg1n3MiFJIQWdojz6XlS0.roa (hash: VaIgVtBIZ8x0cTFrgwuhgZXExSOoccJFrVYDCE79DMA=) 3: CGF1BIeHy8IT5aGPGNEOXrLnJlM.roa (hash: 8VwJdcpb3DlrQc7aqH1TphMMsq6OhgM+K3smNx7xgHw=) 4: FgVYAbd153QwYyFFX9Rj-9knPEw.crl (hash: 5wOfs/S3jp+u5Er36ZY8oOXn5i2zTHbIU4Y0s6AwpnA=) 5: HlqaX9y1cpjv0wxGrlQZeagT5Q0.roa (hash: dZjid0DCr3cVa0kusKQlx9flhXPy/L6bL7wDHQcf1TY=) 6: HtWPks8re8wT-Qc0p_2vGh8QeMQ.roa (hash: hj+XgnyJ0Da4wSkZgTsnnXr4WcLVInfl1QD5sz921GI=) 7: KokmpyIZ-xJPhZHdbyQVUxoRW5o.roa (hash: b1lOLAYHQOxQVa21mEjqyKotS3xDQTkF8+kYPRp8ch4=) 8: L-fvo2Ga_XsqWFK5WpDjGiCw6HA.roa (hash: fBEXK38J40jBxQtyFUIZtrkSR3Zl74lHfM4BXZh9AWM=) 9: UPtnw9Xg6xaDjOjDI1a41rl6dCg.roa (hash: gP2nmywyvMi3C3A/rSnGDj5/7gnWG8ZEQKItpqbvyzU=) 10: VhykJr3iGtJe14xyVuqvvCapaNo.roa (hash: kzFiZWS6t+iaz12TBNlwLt+jTollGPfCjhtGoJB0BAA=) 11: Vi0tQBHwoMxUWkvZJQOXAjvua3g.roa (hash: XVR5Vh1TDH7ai92z29/FWQoF7PE/ZxcAaFQCZWHNaDY=) 12: Z8p5c-rlAPW0cZ-sWH7G-yZd9To.roa (hash: 14NxmVMH2EBfG9yj1NkfTzczT8KoDClH3gg1peZJpIk=) 13: aNo1lorx6tVQ1LtbDZZYpwG98bI.roa (hash: M/dPr78yQy8Oq7tst5W5cmGPYp+8hAOwwdyPVs5Qgpw=) 14: jy6ZQDS-YqFCf2Cn_W0r70C4lz4.roa (hash: wbMwT/LI6BlVBcI4TsbmQW/8Juf9ZSouNoe1le3Rim4=) 15: nN14ybWzIvQiHRDqtTsLv6RL6MQ.roa (hash: dTL413bt+UUDMC8PnoBeSRaaCwqZujhseKRGe3kky/c=) 16: nfwXLaa85PC-1c7VMk7rOkw_-kg.roa (hash: gQAkAYEgr329mA4EnpTCM1JOzdPYMZwZfd+KXQs7Zh4=) 17: wTi7Rzww3EZXhgQOBREzY1ltru8.roa (hash: gxxJFgecVYxEQehjaeKI+l34uL+Gr3bpgbzFlOSfauU=) 18: zOhruI3f8CmZnvrfikkp_umvSCQ.roa (hash: NEbucM5c57bMZLBETD9r4o+f8o+xAOVGhz7z1f9K4Ww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:21:25:ec:a1:0c:96:0c:b5:bf:98:ff:d2:d1:8c:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Jun 28 20:01:09 2025 GMT Not After : Jun 29 20:01:09 2025 GMT Subject: CN=9b5fdce3f22a6864095b1710ca2ba882ea61517f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:16:03:20:e4:b9:7e:50:ce:cb:2b:35:65:2c: 4c:36:ed:b5:98:bf:95:f2:5a:5b:48:ba:ff:08:e0: 72:26:82:28:14:cb:ba:b2:aa:83:1f:28:65:37:00: f5:2a:5a:93:1a:53:57:a2:d0:37:0f:08:3f:c1:08: d8:cb:05:0b:2f:b3:39:c0:01:57:20:0e:c0:93:9b: 6a:2e:f5:fa:cc:76:db:9a:bf:f5:e9:64:df:03:a5: 35:cd:e3:95:b0:31:13:15:8f:3e:1b:cd:20:07:dd: 90:39:0b:94:1f:69:c5:84:b6:c9:c3:79:9c:b3:19: c2:bc:60:03:7b:b6:99:a7:b7:94:9e:05:ef:85:00: 5a:12:21:65:95:b5:32:76:29:f1:bb:7c:77:8b:25: b2:d6:96:e7:00:f9:a5:1b:86:b0:92:92:50:01:75: 22:c9:4f:6f:b9:87:76:05:1d:c3:11:b2:b7:1a:05: 11:99:e2:00:5a:af:99:0c:32:57:e2:13:24:22:b5: 08:ad:bb:4a:9f:87:63:3a:9b:52:87:3c:f9:dd:3a: 12:37:d5:b0:fe:f5:07:b8:f2:46:ca:60:8e:c6:69: ab:ba:c7:f3:26:f2:e4:71:e2:d5:62:1c:f8:08:32: c5:64:db:3b:ef:0e:e5:22:0d:00:79:1f:f1:7f:80: db:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:5F:DC:E3:F2:2A:68:64:09:5B:17:10:CA:2B:A8:82:EA:61:51:7F X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:f2:85:56:d7:c7:4e:34:fd:38:25:21:9e:d2:b5:9c:0a:62: 2e:69:33:95:a7:e2:b2:5f:a8:16:f6:6d:98:f8:69:cc:f3:79: ee:48:6b:04:40:a2:2a:85:53:7f:c1:f9:29:00:48:91:b1:ea: 64:39:69:e4:6d:52:1b:26:00:b4:ef:1c:c4:69:cd:ef:92:2f: 74:1b:98:d7:fe:2d:17:92:f7:e1:a1:a3:ba:70:f4:00:cd:5d: a1:6b:28:e0:6f:ee:1f:90:d4:4f:c2:99:eb:92:54:9c:02:a7: d6:9c:e9:f0:a3:7a:56:8f:0a:8b:8c:1d:43:b0:1b:7e:76:10: a1:da:4f:82:62:53:a5:c3:4f:6d:7e:d1:2a:e0:3d:16:2a:57: 6a:57:1e:8f:fe:c8:fe:8f:a6:3b:a2:a7:59:40:ee:01:32:0b: 3a:5a:93:47:13:ad:16:d1:0d:5f:f9:ba:03:90:6d:e6:23:85: 54:15:15:73:5d:74:f4:05:ee:24:64:88:e7:b7:1b:08:ce:33: eb:e7:e2:9e:8c:cd:74:75:8d:9f:8c:45:14:f3:62:9c:14:67: 90:91:48:03:72:a7:51:82:48:19:04:99:50:77:57:28:b2:5b: b2:9d:9d:23:65:a7:ca:6d:80:1a:4e:5a:ef:05:a2:ff:bc:84: ef:46:c3:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4ISXsoQyWDLW/mP/S0YycMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjUwNjI4MjAwMTA5WhcNMjUwNjI5MjAwMTA5WjAzMTEwLwYDVQQD Eyg5YjVmZGNlM2YyMmE2ODY0MDk1YjE3MTBjYTJiYTg4MmVhNjE1MTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BYDIOS5flDOyys1ZSxMNu21mL+V 8lpbSLr/COByJoIoFMu6sqqDHyhlNwD1KlqTGlNXotA3Dwg/wQjYywULL7M5wAFX IA7Ak5tqLvX6zHbbmr/16WTfA6U1zeOVsDETFY8+G80gB92QOQuUH2nFhLbJw3mc sxnCvGADe7aZp7eUngXvhQBaEiFllbUydinxu3x3iyWy1pbnAPmlG4awkpJQAXUi yU9vuYd2BR3DEbK3GgURmeIAWq+ZDDJX4hMkIrUIrbtKn4djOptShzz53ToSN9Ww /vUHuPJGymCOxmmrusfzJvLkceLVYhz4CDLFZNs77w7lIg0AeR/xf4Db2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtf3OPyKmhkCVsXEMorqILqYVF/MB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/KFVtfH TjT9OCUhntK1nApiLmkzlafisl+oFvZtmPhpzPN57khrBECiKoVTf8H5KQBIkbHq ZDlp5G1SGyYAtO8cxGnN75IvdBuY1/4tF5L34aGjunD0AM1doWso4G/uH5DUT8KZ 65JUnAKn1pzp8KN6Vo8Ki4wdQ7AbfnYQodpPgmJTpcNPbX7RKuA9FipXalcej/7I /o+mO6KnWUDuATILOlqTRxOtFtENX/m6A5Bt5iOFVBUVc1109AXuJGSI57cbCM4z 6+finozNdHWNn4xFFPNinBRnkJFIA3KnUYJIGQSZUHdXKLJbsp2dI2Wnym2AGk5a 7wWi/7yE70bDpA== -----END CERTIFICATE-----Generated at Sat Jun 28 23:24:35 2025 by rpki-client