$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft File: _2mO6y5J_LX5xlqZhXrynOBmQdk.mft (raw, json) Hash identifier: TZ6zt4QZCdLMlwozAQr83vwn+CCGQPtNwKqxhGUx6XE= Subject key identifier: C8:9E:58:4D:F4:D3:EF:DC:23:20:9A:A0:51:DF:B5:B6:D8:B4:C2:A3 Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Certificate serial: 0197B77BFC45D42AF65AF03CFDD7B3CCE5CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft Manifest number: 15C0 Signing time: Sat 28 Jun 2025 17:00:45 +0000 Manifest this update: Sat 28 Jun 2025 17:00:45 +0000 Manifest next update: Sun 29 Jun 2025 17:00:45 +0000 Files and hashes: 1: 0nspkNZBD4AF3c6BuZHawbNEn4s.roa (hash: uIJdsMvT5D3zL8bAjl80cE2Pwz5BnxnpyFyZ11QSq50=) 2: 54-UEvGfxV4WPcy4WxLxIFxxE-U.roa (hash: ojna0RnGjI7OjDPWs+roB1Amf6WKyl5pMZi5IPEPWP8=) 3: 5Tf-mqxbzy7qofAM2dNl7l1t3mU.roa (hash: 6mVr252OaOJiHsmGk/+j0aXnhIUGcpjMKQ+02iLXgcA=) 4: HIpztZT__B_f9n2gN6auamR5pIU.roa (hash: rJY52okWB1TeezbKU/iuTbv7tjIWb1W5p6bbeWIcdzo=) 5: LuyH1oX8EXWypVZ7iAaDpvRYVVc.roa (hash: PwqXxZGK4PUOy9TXRGdRnGJ0Q9f2SZmolPNVfAk0WgM=) 6: NkdsfBqVz48X5H2Y1WQJSu8vlt4.roa (hash: tuiwHFcQQ4SB/tCeR0sJ8nBN9XREzDRoO1cXDj6kEqo=) 7: UjPxDMGW7lYqCuTCh7JHOA6hizY.roa (hash: ANkRdXMj6bkHEGkvb/XWLCpMoxX6nYg0dbetuBTbz8U=) 8: _2mO6y5J_LX5xlqZhXrynOBmQdk.crl (hash: NoI7YCAhounDqGHcgnrOk8GS3T2ENO62TFtuwmWqoM4=) 9: jqfbqOe3Dnj2fXOhZ9LOHypCFAI.roa (hash: /x0Hcf4qFuhf8+J5QzDuB3C52+I2nDMc1dbR/JkR1Cw=) 10: meQ5SBMnqJBkFHe-JOcEGhCsKFY.roa (hash: TMc5toGudrJJLzHO6dJLOGc8MvIeTEaZ3Nzvom9Ftsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:7b:fc:45:d4:2a:f6:5a:f0:3c:fd:d7:b3:cc:e5:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Validity Not Before: Jun 28 17:00:45 2025 GMT Not After : Jun 29 17:00:45 2025 GMT Subject: CN=c89e584df4d3efdc23209aa051dfb5b6d8b4c2a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ff:22:25:ba:50:52:c0:15:47:c9:cf:07:2d: 15:65:8a:0c:5f:58:db:f0:17:3b:aa:35:9e:02:65: 34:49:12:e4:33:c9:3f:df:d1:1e:65:f6:b6:38:3d: 33:e8:19:16:e9:f2:f5:ea:db:5c:5e:3b:81:d6:81: db:dd:e5:e8:67:3b:61:4b:a2:12:aa:14:cd:17:bd: 2e:f8:9e:df:f1:25:3c:7d:af:16:b6:d2:32:52:f2: 37:74:ed:7f:0b:3b:fe:e8:ac:2d:f4:3c:aa:0b:eb: 19:ca:52:64:c7:4e:1e:5b:5e:e9:db:2d:0f:23:b5: ed:75:35:b3:01:23:83:16:09:b9:3c:b8:24:bf:7d: 8a:da:10:14:1c:b7:3a:0b:a2:b1:b3:e1:4b:c3:f7: ea:f2:0f:f0:75:2f:ac:a1:05:74:f0:ce:8d:dc:44: a0:79:60:bf:5a:03:da:59:db:a0:bd:db:3d:2a:d4: 9b:ba:45:1b:7c:05:41:27:b4:9b:7a:4a:c5:11:97: bd:b1:24:10:6a:74:6d:f1:62:cc:97:1a:f6:4a:d3: 00:4c:9e:46:2b:ac:aa:80:f9:88:ec:9d:68:cd:9c: 0c:b0:3f:63:a2:5c:8e:c6:5c:ed:1c:70:9e:35:d6: 1d:d7:f5:27:5e:23:a7:6c:42:8f:a7:7e:ed:88:ac: 45:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:9E:58:4D:F4:D3:EF:DC:23:20:9A:A0:51:DF:B5:B6:D8:B4:C2:A3 X509v3 Authority Key Identifier: keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:23:a7:c7:12:e6:b1:3e:db:4d:dc:06:93:dc:36:7d:9a:4d: 27:0b:8e:89:81:be:1d:8f:b9:41:0e:14:1a:10:d5:2d:bb:b9: 68:ba:10:6a:61:69:6f:d1:7f:48:02:4d:83:a8:8d:d8:a8:7c: ce:76:4d:1c:ff:6a:03:37:f8:ba:e0:80:40:e9:00:2e:b1:e8: b6:7d:f4:1f:5d:96:e9:1b:ed:22:2c:f8:19:4d:cf:df:6c:d3: bb:c2:ce:0f:e6:a2:a5:4c:0e:50:29:63:2f:91:22:d2:16:0d: 50:e4:72:dd:df:d1:7f:46:cf:a5:c5:f1:35:aa:e4:f9:5f:14: ab:4f:3d:17:20:01:0e:b9:19:79:70:f6:0c:e5:7a:29:89:24: c4:9e:3c:ab:97:04:5b:29:29:d6:3a:c4:cd:f8:03:0d:88:b9: 1f:6c:07:eb:9e:cf:da:02:be:d9:a2:f6:74:24:1d:06:2f:3f: 59:65:de:dc:ef:58:40:a7:f8:0b:2f:ea:6c:ac:6a:cc:4c:d2: 81:18:76:f1:58:5e:37:c8:7d:94:26:fc:7c:30:19:25:ca:2d: f3:e3:6a:d5:2d:9f:52:fe:b1:b8:7d:cf:e3:96:b0:cc:15:35: 76:1a:0e:e8:92:1d:38:af:80:d2:1a:94:22:38:b9:ca:33:f1: 86:40:e0:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3e/xF1Cr2WvA8/dezzOXMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2 NjQxZDkwHhcNMjUwNjI4MTcwMDQ1WhcNMjUwNjI5MTcwMDQ1WjAzMTEwLwYDVQQD EyhjODllNTg0ZGY0ZDNlZmRjMjMyMDlhYTA1MWRmYjViNmQ4YjRjMmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/8iJbpQUsAVR8nPBy0VZYoMX1jb 8Bc7qjWeAmU0SRLkM8k/39EeZfa2OD0z6BkW6fL16ttcXjuB1oHb3eXoZzthS6IS qhTNF70u+J7f8SU8fa8WttIyUvI3dO1/Czv+6Kwt9DyqC+sZylJkx04eW17p2y0P I7XtdTWzASODFgm5PLgkv32K2hAUHLc6C6Kxs+FLw/fq8g/wdS+soQV08M6N3ESg eWC/WgPaWdugvds9KtSbukUbfAVBJ7SbekrFEZe9sSQQanRt8WLMlxr2StMATJ5G K6yqgPmI7J1ozZwMsD9jolyOxlztHHCeNdYd1/UnXiOnbEKPp37tiKxFtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMieWE300+/cIyCaoFHftbbYtMKjMB8GA1UdIwQY MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt NTdjZDY4ZDljYjRlLzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkyOnxxLm sT7bTdwGk9w2fZpNJwuOiYG+HY+5QQ4UGhDVLbu5aLoQamFpb9F/SAJNg6iN2Kh8 znZNHP9qAzf4uuCAQOkALrHotn30H12W6RvtIiz4GU3P32zTu8LOD+aipUwOUClj L5Ei0hYNUORy3d/Rf0bPpcXxNark+V8Uq089FyABDrkZeXD2DOV6KYkkxJ48q5cE Wykp1jrEzfgDDYi5H2wH657P2gK+2aL2dCQdBi8/WWXe3O9YQKf4Cy/qbKxqzEzS gRh28VheN8h9lCb8fDAZJcot8+Nq1S2fUv6xuH3P45awzBU1dhoO6JIdOK+A0hqU Iji5yjPxhkDgnQ== -----END CERTIFICATE-----Generated at Sat Jun 28 20:30:18 2025 by rpki-client