$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft File: Vw-w8di4wZiw3IYVivvLxSnPFr4.mft (raw, json) Hash identifier: 5TaORUFAYxO7NgCCMFlYBneS85jb0u2dMqudIZ0POxA= Subject key identifier: 3B:DD:13:95:38:4C:D4:2D:06:A7:D4:45:94:1A:D6:FF:FA:AE:15:98 Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Certificate serial: 0197B745A67A843BE5389AD48E6D9AB96FA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft Manifest number: 108D Signing time: Sat 28 Jun 2025 16:01:24 +0000 Manifest this update: Sat 28 Jun 2025 16:01:24 +0000 Manifest next update: Sun 29 Jun 2025 16:01:24 +0000 Files and hashes: 1: 394tf-42F2nqTQBsIqtkSRmucjA.roa (hash: FEgkNeogh00D0/bMKIclm4PWisfm2kigk4t326/BxbM=) 2: 8r_Cdukqv5EKtHGgGM8PC-3JcW0.roa (hash: YQDznsFHlF+2/HPFbS/bHU432YG3aHbKtyIjPPD/5uU=) 3: K4TXiO4vx97fOtBrxUmscpYLw7k.roa (hash: hogSVOE6lqRzYCTW78AUF5G9qYwC37tvODD3V8YR6bs=) 4: LhiSCtln5FtX__OORvWyogq6e1Q.roa (hash: hy6v9rxifRC/tHX6TRNuZxsYh5g9SsOUALYCNaysw+8=) 5: OcYqxTzrKk51o7UzflMDq0IEkmU.roa (hash: r3dK9LV9mG8s5RFEYjKSnWAnYTPlW4DqfejV7eJjGtw=) 6: U0iiCyVKkBtsYKQQ59uFgwV0vUY.roa (hash: Kg0XkwtjvHqkxTV75IaHlum33qw8f4RzUFb1Bkwzos0=) 7: Vw-w8di4wZiw3IYVivvLxSnPFr4.crl (hash: Oz4UA8q6gz9YsMEioxK0yKFq5SSrB1QSh4A/8UohuJg=) 8: _OYA4765g9NJpcF7TDI32R4HwJ8.roa (hash: Yn+kaEeIeAIZFGdnv8IGAlURa//73XSkwoeGL0+JgXY=) 9: reOQvkCKTthRHYQBGidmg42zKD8.roa (hash: EVknv6hrF+g4BHS3Ghs5tKKPCCQu7Bf9Lg/hf58Bxoo=) 10: ss9acv__B4xuRCikM6Q1io4S-n8.roa (hash: pFGlfxJ1WiZHMyxc9wr2pYkizcAW4NxGW31B+3adYmw=) 11: yFRw8q4k0v0OL9Ce0AshdGghXG8.roa (hash: t47jhkvwslm22JJIGO341Kc6OVcgswUpwpZDqVXEDVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:45:a6:7a:84:3b:e5:38:9a:d4:8e:6d:9a:b9:6f:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Validity Not Before: Jun 28 16:01:24 2025 GMT Not After : Jun 29 16:01:24 2025 GMT Subject: CN=3bdd1395384cd42d06a7d445941ad6fffaae1598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:91:2f:fb:b6:81:99:52:b3:d3:b3:bc:5d:c0: 81:ea:7f:28:05:71:c4:c6:fb:ec:b0:22:0a:24:ef: 78:fc:42:a8:9f:db:4d:2d:e8:1e:c7:fd:d0:79:15: d6:b2:bd:af:eb:af:a2:c9:72:ac:d9:79:67:52:fc: dd:01:ec:2a:11:e9:6c:6c:c1:e9:e9:22:e2:d4:08: 79:aa:6d:91:fc:fd:94:99:a1:36:38:f4:21:b7:94: b3:e5:db:ca:4f:55:9b:ad:97:f8:62:27:8d:eb:fe: 5e:44:72:8c:9f:e2:f4:26:92:01:bf:26:73:00:1a: 15:e7:56:ac:17:6f:d7:26:3c:fe:11:fb:b4:07:91: 53:0e:ab:77:72:ea:1d:dc:bd:9d:a2:c8:16:67:56: 84:bc:10:26:14:e6:01:3c:ba:26:c4:c9:23:d1:be: bf:e6:cc:71:ea:f0:d9:01:ab:3b:6a:d6:19:e4:0f: f9:5b:46:b5:7a:98:f7:cd:e6:4d:38:95:ff:fe:2b: 30:74:42:e9:46:53:74:b1:cd:a7:75:53:e4:d1:74: 85:a0:ad:72:ff:40:b6:2c:72:05:20:00:77:23:c6: ba:b9:f0:9b:d2:d3:d0:6d:41:9a:cc:3a:10:a9:60: 20:db:ec:a7:44:dd:71:e1:12:66:92:c6:6a:ca:b3: 53:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DD:13:95:38:4C:D4:2D:06:A7:D4:45:94:1A:D6:FF:FA:AE:15:98 X509v3 Authority Key Identifier: keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:49:c3:4e:e8:1a:be:b9:d6:3c:af:3c:4e:f4:fe:45:e3:b9: c3:0d:fb:b5:53:95:d3:af:f7:7e:23:e7:6f:72:c1:5e:7f:d3: 76:ed:7b:7b:a4:10:e5:59:1d:96:8d:cc:92:2d:1b:70:02:8c: 46:58:dd:62:92:3d:9b:be:df:67:84:4e:93:30:45:7c:53:ae: 21:9a:26:28:fc:a2:d7:73:4b:97:e2:fc:b0:a5:8e:bb:49:83: b1:9c:86:6b:b8:24:42:fc:c7:a2:10:0c:d3:7f:f9:c5:f6:58: 0a:31:54:f9:71:3a:68:01:87:4d:dd:19:54:c9:dd:57:e1:46: 7a:07:3a:fe:af:e4:4e:db:ef:b8:e0:85:53:29:a6:0b:fa:81: 36:d6:54:46:51:a2:c9:1f:80:7c:53:a4:80:77:13:c6:ee:a7: 7e:8a:fa:fe:47:ee:1f:33:a7:77:67:ee:46:ba:e8:87:a7:1f: dd:41:02:1b:53:32:2c:34:7e:14:45:9a:8b:c4:3c:c3:78:13: 37:1a:29:d1:47:45:33:bb:4a:2e:c1:e3:3d:f0:e5:cc:29:d5: 6a:b5:65:e5:80:9e:fa:55:84:32:c3:13:47:53:63:f1:80:5c: 9f:bc:3d:19:3f:89:b1:27:bf:37:cc:19:4e:d2:c7:6e:70:e0: c5:fc:03:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3RaZ6hDvlOJrUjm2auW+pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj ZjE2YmUwHhcNMjUwNjI4MTYwMTI0WhcNMjUwNjI5MTYwMTI0WjAzMTEwLwYDVQQD EygzYmRkMTM5NTM4NGNkNDJkMDZhN2Q0NDU5NDFhZDZmZmZhYWUxNTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9pEv+7aBmVKz07O8XcCB6n8oBXHE xvvssCIKJO94/EKon9tNLegex/3QeRXWsr2v66+iyXKs2XlnUvzdAewqEelsbMHp 6SLi1Ah5qm2R/P2UmaE2OPQht5Sz5dvKT1WbrZf4YieN6/5eRHKMn+L0JpIBvyZz ABoV51asF2/XJjz+Efu0B5FTDqt3cuod3L2dosgWZ1aEvBAmFOYBPLomxMkj0b6/ 5sxx6vDZAas7atYZ5A/5W0a1epj3zeZNOJX//iswdELpRlN0sc2ndVPk0XSFoK1y /0C2LHIFIAB3I8a6ufCb0tPQbUGazDoQqWAg2+ynRN1x4RJmksZqyrNTQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvdE5U4TNQtBqfURZQa1v/6rhWYMB8GA1UdIwQY MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt OTcyNDNlMzE2MjcyLzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVEnDTuga vrnWPK88TvT+ReO5ww37tVOV06/3fiPnb3LBXn/Tdu17e6QQ5Vkdlo3Mki0bcAKM RljdYpI9m77fZ4ROkzBFfFOuIZomKPyi13NLl+L8sKWOu0mDsZyGa7gkQvzHohAM 03/5xfZYCjFU+XE6aAGHTd0ZVMndV+FGegc6/q/kTtvvuOCFUymmC/qBNtZURlGi yR+AfFOkgHcTxu6nfor6/kfuHzOnd2fuRrroh6cf3UECG1MyLDR+FEWai8Q8w3gT Nxop0UdFM7tKLsHjPfDlzCnVarVl5YCe+lWEMsMTR1Nj8YBcn7w9GT+JsSe/N8wZ TtLHbnDgxfwDjg== -----END CERTIFICATE-----Generated at Sat Jun 28 19:58:27 2025 by rpki-client