$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft File: zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json) Hash identifier: bq6KOaHIqbYmYwVkWHO2t8k540hl7QkblWU2qDmouAk= Subject key identifier: 21:63:4C:20:D5:BF:59:80:E1:14:4A:1F:FF:82:D5:96:28:E0:90:65 Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 0197CA5DF1C332EBB7FC5AB2B87992ACA74B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft Manifest number: 15C9 Signing time: Wed 02 Jul 2025 09:00:43 +0000 Manifest this update: Wed 02 Jul 2025 09:00:43 +0000 Manifest next update: Thu 03 Jul 2025 09:00:43 +0000 Files and hashes: 1: 6ve9ZdOx9-Jbfmi44W3M8-3fyYA.roa (hash: dVVun+kF/7beMen84cbPjTHH6kjQfKs3AUC1Xd2wQ2A=) 2: J2wVE-ysPom5E_5lF4tJldYNa-0.roa (hash: oUIFr0+ZyYlkYGUaUpe52i+2V6CsiaUkgkNDD+7+LeQ=) 3: UKCOK-W3ox3wQ-_xQp6Nu_DwCz4.roa (hash: gPrsrWnRzFL4kuQaY4M1gIUFgKd8cdPjv6qajYb7JnQ=) 4: YwzWinKJc46_U8FICjJOYyamFbE.roa (hash: 6RpEEVsTkHPSo1dAN1+8+s2LqtjPnGEmS34LuQumwbI=) 5: a5CofPxS02DnAUUS9BR-MfOlQu4.roa (hash: LylucOp1UfCFOp+5ipOtc4LcLveZAw9S3wnaBKPFnAA=) 6: aTxnMurrHnoJZlgUyPTNHT4Ir8Q.roa (hash: HeEFk1qtIJz6ps6s2w4DpyvOfJGSvhT8ioiircXVR2o=) 7: c_P4sr3Opke1mWU78BvJMlMDps8.roa (hash: epdNIDM+10/qxHg1G8njFcHs1LoWUpUQmmausYhNxGY=) 8: iI8DgizVWpbEfLLZJw23cwOMtao.roa (hash: gWEZpZ6NinOCicsU6XwwO/9pb7/TViv+n+2ETM0yooY=) 9: p1mSMR7xN9m1jztS6WxG27UANcc.roa (hash: 4Bmm+a1YgG6FugC5k/i8MnSCpfdQHkbijQGY6Yl+j+g=) 10: sYAfD4BV-6irRlKQSwMoXHjm0Mc.roa (hash: T1/WiR0D/YUKPRxlOtYq/pfY4c0SddtxyI4tXYaUGdg=) 11: wZigKiFSFg2jf4ybn-aNCM9AUoc.roa (hash: 7ZXKjf9bxY5hwxObMzg74iYfXa92Z7QeLKS7Y869myY=) 12: xuKZJebXbxs55nxOb7ZrfE7zGKE.roa (hash: Jt/lG0DwTTw8LOe3o8IYDXO60+0YpLwITYi+cEFQ4h0=) 13: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: XRabAG7T8rnrRYwctl4ZEZZdIe4QB034XymvYWQqi80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Jul 2025 09:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:ca:5d:f1:c3:32:eb:b7:fc:5a:b2:b8:79:92:ac:a7:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: Jul 2 09:00:43 2025 GMT Not After : Jul 3 09:00:43 2025 GMT Subject: CN=21634c20d5bf5980e1144a1fff82d59628e09065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:86:2d:97:da:45:80:a0:b1:e6:b4:ae:7d:43: c1:78:43:58:d5:2f:2e:44:7c:e2:81:17:1f:11:c1: 28:05:e2:5b:b4:1a:ee:80:cf:68:d7:bb:4e:a9:7a: 78:8d:ab:1d:ad:7a:79:b6:03:df:a5:d3:39:5d:32: 8a:a4:9e:ab:78:8b:16:1e:98:b2:63:e8:d2:ad:b0: 7c:3a:f1:77:17:aa:c6:9a:f9:03:b3:e2:ce:47:d2: 15:da:63:e3:2e:6f:04:93:db:a8:fe:6e:10:7e:41: 28:d6:2a:1b:e7:f7:bf:58:ca:6f:01:6f:21:63:00: 5f:c5:2a:60:ec:b0:c8:55:c1:dd:48:0b:48:e0:cb: 2c:8c:d5:31:c0:93:98:74:a4:1a:57:f0:0d:9a:c7: 2c:6d:85:b3:ca:69:8e:4d:89:e7:78:60:f0:b5:85: ff:57:d4:a6:44:c4:f3:68:22:84:91:aa:67:ff:7c: 13:6c:7f:31:a8:09:32:6e:84:c5:af:71:06:b2:96: 7a:44:31:8e:3d:4d:84:d3:89:8a:0e:54:75:6e:0e: 14:14:c1:c3:f7:be:d6:1e:45:88:87:37:b8:37:c4: af:91:95:69:b9:07:fd:7b:6b:af:10:b1:17:28:d3: 87:45:b3:8c:06:b1:fe:13:9b:aa:36:6e:ac:3f:b8: 1f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:63:4C:20:D5:BF:59:80:E1:14:4A:1F:FF:82:D5:96:28:E0:90:65 X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:2d:62:1f:ef:70:83:52:a3:46:7c:58:23:49:7d:df:2d:b2: 63:b0:eb:28:eb:36:a0:81:ad:3e:80:78:58:33:bb:c6:18:41: 5c:56:ef:4a:d8:b5:22:c0:e9:71:f6:64:31:2d:b0:f6:a6:60: 38:18:da:b7:d0:87:38:63:2d:b3:b8:08:ea:7e:03:10:98:15: 7d:5f:5f:f8:0b:90:87:14:80:dd:3a:64:13:cf:0f:81:08:c1: ea:0c:5e:b2:0c:d2:53:e1:93:fb:c7:be:e4:59:81:66:a1:e0: ae:34:16:e8:bb:8e:5d:08:d1:70:b2:15:c3:8d:44:d2:48:ec: 11:c7:6e:74:f2:80:54:d9:5f:b3:08:bb:78:4e:e5:6b:dc:68: 39:58:04:a3:6b:6b:4e:64:d5:5a:06:f1:25:e8:53:24:36:63: e7:43:77:a9:ef:48:bc:fa:37:b0:a0:2a:8b:2f:ab:b4:fb:75: c5:f2:e8:2e:8c:f4:ff:ff:82:83:ba:9e:98:bd:d8:bf:ce:2f: 85:43:b3:2d:f0:b3:c3:9e:7c:e3:8a:4d:d5:d9:64:66:a3:d5: a6:82:c2:78:6f:b3:07:a8:1d:3c:31:10:df:56:07:8e:60:cf: dd:62:f8:e4:f3:a6:e9:29:d9:82:b8:e8:ca:0d:3e:1a:a8:c5: 4c:f1:65:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfKXfHDMuu3/FqyuHmSrKdLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjUwNzAyMDkwMDQzWhcNMjUwNzAzMDkwMDQzWjAzMTEwLwYDVQQD EygyMTYzNGMyMGQ1YmY1OTgwZTExNDRhMWZmZjgyZDU5NjI4ZTA5MDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroYtl9pFgKCx5rSufUPBeENY1S8u RHzigRcfEcEoBeJbtBrugM9o17tOqXp4jasdrXp5tgPfpdM5XTKKpJ6reIsWHpiy Y+jSrbB8OvF3F6rGmvkDs+LOR9IV2mPjLm8Ek9uo/m4QfkEo1iob5/e/WMpvAW8h YwBfxSpg7LDIVcHdSAtI4MssjNUxwJOYdKQaV/ANmscsbYWzymmOTYnneGDwtYX/ V9SmRMTzaCKEkapn/3wTbH8xqAkyboTFr3EGspZ6RDGOPU2E04mKDlR1bg4UFMHD 977WHkWIhze4N8SvkZVpuQf9e2uvELEXKNOHRbOMBrH+E5uqNm6sP7gf+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFjTCDVv1mA4RRKH/+C1ZYo4JBlMB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARi1iH+9w g1KjRnxYI0l93y2yY7DrKOs2oIGtPoB4WDO7xhhBXFbvSti1IsDpcfZkMS2w9qZg OBjat9CHOGMts7gI6n4DEJgVfV9f+AuQhxSA3TpkE88PgQjB6gxesgzSU+GT+8e+ 5FmBZqHgrjQW6LuOXQjRcLIVw41E0kjsEcdudPKAVNlfswi7eE7la9xoOVgEo2tr TmTVWgbxJehTJDZj50N3qe9IvPo3sKAqiy+rtPt1xfLoLoz0//+Cg7qemL3Yv84v hUOzLfCzw55844pN1dlkZqPVpoLCeG+zB6gdPDEQ31YHjmDP3WL45POm6SnZgrjo yg0+GqjFTPFlQw== -----END CERTIFICATE-----Generated at Wed Jul 2 13:04:46 2025 by rpki-client