$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft File: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft (raw, json) Hash identifier: Qw8OOL3HF6W+2ADEn0/qeXhHmv9L/qHR+9BKddCGByU= Subject key identifier: 74:81:7F:6B:59:12:93:F6:E3:77:A0:6B:4D:80:69:F6:DB:18:F5:82 Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Certificate serial: 0197C802691ED939054EE135FCAA324964BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft Manifest number: 15CD Signing time: Tue 01 Jul 2025 22:01:30 +0000 Manifest this update: Tue 01 Jul 2025 22:01:30 +0000 Manifest next update: Wed 02 Jul 2025 22:01:30 +0000 Files and hashes: 1: 1d9PCrI-4OIWZHlndWAF-BFZeRg.roa (hash: Iw4tosd5c4tKjF6tKkdj+Nm6L4yubj6pDN7RhIdr5OM=) 2: 9irhpoo7t3RuQsofnh453Wz9yzc.roa (hash: PhvRYsh7H1rsPmbcRRJi8HgMHZoVZsvvG8rw54V1xv8=) 3: QlG1TVRz55diqUdGl7g_uO4xh_Q.roa (hash: fgvqjVsU5zRnz0bSGyWJaFmUvSDnHcvgLRxyVqmSVT4=) 4: ZyvSvqBO_CRtrjVV5g_m38QqdF0.roa (hash: EMjT9dIsrbauUL5Ml+fcJBjE3Hsiqb5K2tYe1FIy+Zk=) 5: nnciRjVheF08s398UKSonGItpsk.roa (hash: R1OwPDHsbFUiJTJpwPW1Uer2AhB7tNd3rerNZf5joWI=) 6: pzeazRaM8Z6SjrjO6Q79mNPUlRs.roa (hash: /9lKkXVgAMejZaK+X1dNcf57k6lh360Swbxh+XCM3Ik=) 7: shBa9JrmFrbHIJ50XFqnyAIX03Q.roa (hash: ZX0cowj/X8/UKH2s85v3mEfUGDpRbJzNCB3///lxrIs=) 8: tJb8Ts4XgvLq7IFd612PdAoSex8.roa (hash: /2oqwW8TIewEulnC/YwP+6MDX06JT0RuhBb946Sy6pg=) 9: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl (hash: x1BZiuJ9uH9ghgpKKfDSrs9+G8XkgtSoMg5MKUguiCM=) 10: zag9EMVMQmmPCVwwU3_0aOJuzic.roa (hash: ffeNrZA6EtrT2ro+QuAB6ElVQs7TfooiMECDOqyyyqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 02 Jul 2025 22:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:c8:02:69:1e:d9:39:05:4e:e1:35:fc:aa:32:49:64:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Validity Not Before: Jul 1 22:01:30 2025 GMT Not After : Jul 2 22:01:30 2025 GMT Subject: CN=74817f6b591293f6e377a06b4d8069f6db18f582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:82:47:e3:e1:95:1b:46:75:dc:07:08:49:78: 54:16:fe:f2:79:e0:54:e1:8d:2f:3b:68:fb:ba:67: 16:e0:2d:97:15:0e:c3:65:ad:2e:b0:96:db:66:07: a2:3c:13:d3:b4:25:c6:94:57:52:22:42:6c:aa:54: 1d:96:04:de:a2:19:a4:15:9a:c4:29:1f:99:71:7c: d8:e4:66:16:be:6d:96:76:dc:ac:fb:a4:a9:c8:e8: b2:e1:27:e6:50:a7:01:f2:8a:84:41:ab:8e:bc:62: 26:b5:fe:64:57:fa:f6:43:e1:5f:85:a5:da:2f:8e: d0:54:ec:8b:94:00:c0:f6:18:25:8c:de:78:7a:a9: 6c:9f:82:f9:1c:c6:92:0b:a0:dc:50:63:08:d4:2b: 7d:75:6f:79:73:6a:8e:23:30:d2:d2:c3:66:31:93: 54:18:0c:7e:60:5f:99:da:f2:45:83:44:4a:2a:51: ee:7f:47:57:76:66:c2:34:4e:e5:fb:0d:5e:39:aa: bd:27:4c:1d:e1:4a:da:92:46:7d:74:9a:6f:92:08: bc:1e:13:1d:3c:4b:af:d8:e4:a8:dc:72:8e:4a:9a: 09:78:d6:9a:a1:f4:1d:7d:6a:9a:46:2b:67:f7:3e: b6:04:90:8a:62:36:2f:00:8b:67:3a:44:67:a3:5a: 84:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:81:7F:6B:59:12:93:F6:E3:77:A0:6B:4D:80:69:F6:DB:18:F5:82 X509v3 Authority Key Identifier: keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:f3:35:bf:c6:ac:1c:af:3d:d3:3f:01:78:18:83:36:29:35: a1:5a:6a:76:bd:1a:46:2f:fc:2d:16:72:36:4c:27:b6:13:d2: 6c:23:04:51:73:33:f9:54:10:26:3b:61:f4:9e:7b:da:9d:f5: f4:25:13:a5:b7:af:21:f0:f0:e5:f9:50:62:4a:7d:f0:cc:dc: 00:90:e2:c0:2b:92:92:0a:54:41:08:7a:7f:15:5f:da:76:f4: 52:82:69:ee:bf:58:15:d4:a7:bb:6d:ae:7a:a2:e0:a1:e2:e9: d4:f5:52:db:00:7c:f1:72:3b:ca:90:f7:a3:bd:8d:05:b0:9f: 5a:ea:4a:e8:65:0f:90:7b:2e:36:8c:5c:38:8b:b2:04:7e:2b: ac:79:3a:71:2e:b9:90:c1:a4:5c:b8:53:0c:55:23:0d:2d:03: e9:9b:27:7e:42:7f:fd:28:d7:7e:96:d4:76:dc:bc:1d:30:59: 28:fa:60:b2:d1:ed:45:d0:8d:6e:2c:1b:43:02:1a:ff:87:53: 1c:42:ba:cc:e0:7b:61:28:03:24:71:da:b7:d6:0b:de:19:62: 2b:88:4c:74:ea:26:fd:90:fb:e3:a8:5e:98:21:80:a7:6e:79: b1:c9:29:44:16:6b:f4:ee:83:5a:a1:b4:81:1b:9a:94:8a:d9: b0:55:69:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfIAmke2TkFTuE1/KoySWS8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWM2ODNjYjFlYjljMGY0OWI5NjdlM2JkOWI4Yjg0Y2Yw OTliYjgwHhcNMjUwNzAxMjIwMTMwWhcNMjUwNzAyMjIwMTMwWjAzMTEwLwYDVQQD Eyg3NDgxN2Y2YjU5MTI5M2Y2ZTM3N2EwNmI0ZDgwNjlmNmRiMThmNTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4JH4+GVG0Z13AcISXhUFv7yeeBU 4Y0vO2j7umcW4C2XFQ7DZa0usJbbZgeiPBPTtCXGlFdSIkJsqlQdlgTeohmkFZrE KR+ZcXzY5GYWvm2Wdtys+6SpyOiy4SfmUKcB8oqEQauOvGImtf5kV/r2Q+FfhaXa L47QVOyLlADA9hgljN54eqlsn4L5HMaSC6DcUGMI1Ct9dW95c2qOIzDS0sNmMZNU GAx+YF+Z2vJFg0RKKlHuf0dXdmbCNE7l+w1eOaq9J0wd4UrakkZ9dJpvkgi8HhMd PEuv2OSo3HKOSpoJeNaaofQdfWqaRitn9z62BJCKYjYvAItnOkRno1qEhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSBf2tZEpP243ega02AafbbGPWCMB8GA1UdIwQY MBaAFMRcaDyx65wPSbln472bi4TPCZu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYt ODhkMmRmMTBkMTViLzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYtODhkMmRmMTBkMTVi LzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPvM1v8as HK890z8BeBiDNik1oVpqdr0aRi/8LRZyNkwnthPSbCMEUXMz+VQQJjth9J572p31 9CUTpbevIfDw5flQYkp98MzcAJDiwCuSkgpUQQh6fxVf2nb0UoJp7r9YFdSnu22u eqLgoeLp1PVS2wB88XI7ypD3o72NBbCfWupK6GUPkHsuNoxcOIuyBH4rrHk6cS65 kMGkXLhTDFUjDS0D6ZsnfkJ//SjXfpbUdty8HTBZKPpgstHtRdCNbiwbQwIa/4dT HEK6zOB7YSgDJHHat9YL3hliK4hMdOom/ZD746hemCGAp255sckpRBZr9O6DWqG0 gRualIrZsFVpQw== -----END CERTIFICATE-----Generated at Wed Jul 2 05:55:14 2025 by rpki-client