$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft File: h3e1s29m4TxDiMmTTaUHhWUV0HM.mft (raw, json) Hash identifier: hxu7VCNozjdOjkuSmeG7+u2Rvn+pfVra3Ji4Y2/0UEM= Subject key identifier: FC:09:C0:86:DD:B4:6C:81:07:C9:D7:C9:78:1F:2E:C2:11:75:17:21 Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073 Certificate serial: 0197BA7F270EA3671ED710692A6DC618E6D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft Manifest number: 15C4 Signing time: Sun 29 Jun 2025 07:03:04 +0000 Manifest this update: Sun 29 Jun 2025 07:03:04 +0000 Manifest next update: Mon 30 Jun 2025 07:03:04 +0000 Files and hashes: 1: A6JGXr1SyvHwPS6KzQQ8jkJldSU.roa (hash: VUYWyhNS6ep9E7uE71FApUlIqX9LiZIrh4n1ahAsDso=) 2: TWqw0MHPHKoktRTg5xIAtx78yEM.roa (hash: PUFyi4vEY3nAKmSSQP1jmjE/95RjFLcOq0y69mlpJOM=) 3: V8TNai625jKsZmcQ_WZGrCSKrE4.roa (hash: vysxGoIRN63RAVmh7o1GuXI9idOSf2H3bNvDZcwjEdY=) 4: e6_LhXTjf-f7BeHN6H1yNQzFGts.roa (hash: li+C+e/TyH8gT/zIILB28hzFIhULplGnnZiYiHV9ZRc=) 5: gSW8bbfsJ2jQqNlN9dZhEGJFXP8.roa (hash: vU4Z2mH5UQmCsli4v0J2JenJSa7jKRcKq2cUWRszffQ=) 6: h3e1s29m4TxDiMmTTaUHhWUV0HM.crl (hash: ycfZH0B0KIqBtSgi9G4qPDCBYdDHbuVfnRUagHLIA1U=) 7: i0jLZUHWlEbTjItngq0hMz6l6J0.roa (hash: +fs8xaq1rUOg67Y/1DC1FdTxOQepuB3UaDQqJ+epLzo=) 8: mYsvImsoUU3Ub9pNivjve1CZzdk.roa (hash: 6hty2hcbqDF/bBkU2gmepu7xCrLxFUdqyzgzAZcFQt8=) 9: mcMvNLDOLrmNQ78kKv9_JRA7DZE.roa (hash: VPPZszck1h4O1z0bSD4PbxyUsa9F/mGv1ZkFIvAMZag=) 10: rIHZb_5Mc64A87xwROb5WoKPTaQ.roa (hash: h28IpYVJGdPeChoNExuao8goV9hXIxbKmOle/GHbji8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 07:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:ba:7f:27:0e:a3:67:1e:d7:10:69:2a:6d:c6:18:e6:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073 Validity Not Before: Jun 29 07:03:04 2025 GMT Not After : Jun 30 07:03:04 2025 GMT Subject: CN=fc09c086ddb46c8107c9d7c9781f2ec211751721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:db:70:ca:2d:e3:bc:01:8b:25:a7:f4:87:0a: 75:95:c3:17:59:93:59:aa:7b:50:ee:7a:02:26:b1: 3f:c4:9f:02:cb:db:ea:54:26:81:25:e8:38:16:39: ab:37:d4:2c:1f:27:9a:f4:3f:8b:4c:a0:4c:f1:ae: 8b:4b:33:55:b3:7c:1e:f7:17:fa:3b:b1:6b:5c:95: 0e:f2:61:aa:63:eb:c8:bf:73:65:4d:42:9e:4e:eb: 4a:d9:43:1b:c7:03:54:05:b9:12:ae:a3:5d:7e:9f: 0a:43:37:a0:07:8a:13:a4:83:b3:4e:20:97:3c:fe: 1a:05:88:cd:75:2e:36:1e:38:02:c6:5a:de:b1:95: 4f:5f:80:39:ae:53:ff:ea:99:1d:9c:65:3d:6a:ab: d7:31:43:40:87:a8:d1:9e:ae:59:fe:cf:e6:74:3c: 9e:f2:1f:a9:d1:a1:7a:60:ef:6a:7c:d8:07:d6:fb: f5:ad:1b:f1:dd:6a:ab:fa:e8:c2:dd:00:38:7a:d3: 3b:ab:f7:1f:3b:74:cc:37:60:a5:e2:be:63:81:a3: 1f:af:81:fd:57:43:db:0d:f9:5d:52:52:07:c3:65: 87:24:62:57:60:dd:28:93:72:84:4c:a2:92:41:7c: 5f:61:04:77:c9:21:31:9a:c5:37:a0:7f:07:29:b2: 7a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:09:C0:86:DD:B4:6C:81:07:C9:D7:C9:78:1F:2E:C2:11:75:17:21 X509v3 Authority Key Identifier: keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:65:54:4d:f3:90:31:b8:1d:6f:77:53:29:5b:81:ff:b9:88: 59:29:2b:57:56:94:c5:40:f8:2f:de:a5:89:2f:7e:f8:67:18: 5c:1a:7f:59:40:b8:51:4f:d9:dc:d7:a9:63:c8:b3:b5:8c:12: c8:0b:57:62:dc:7b:16:1f:3e:ec:23:61:4b:51:b4:ce:9b:63: 46:df:8e:9e:c3:8d:42:e9:6e:70:87:9c:87:43:63:dc:fe:5f: 47:50:01:83:ef:82:56:e0:6f:3d:ef:b9:27:80:db:70:b3:30: 8a:00:63:4b:6d:3e:7d:73:b7:6e:59:37:b8:f7:23:56:ba:7b: b4:43:0b:15:2b:24:e4:d1:9e:33:e8:f8:ae:af:d5:09:a8:7e: 66:15:36:1e:7b:9b:bd:85:dc:b7:3e:7d:68:6b:99:f1:a6:5a: 52:6f:12:6f:cf:85:78:c2:69:80:63:18:30:32:1a:37:b7:57: 46:97:a6:02:94:37:ac:39:8f:a9:89:64:5c:3a:c0:31:6b:4d: b1:47:dd:5c:07:7c:de:d2:cd:45:f3:4e:61:63:d2:bc:3f:fb: c6:e7:55:6a:4b:c3:e9:01:7d:3f:72:b2:f6:61:a1:7b:a1:d9: bd:3b:81:f8:90:b8:e2:b0:0d:84:4f:13:86:3a:d0:9f:24:c7: 83:60:5a:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe6fycOo2ce1xBpKm3GGObZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx NWQwNzMwHhcNMjUwNjI5MDcwMzA0WhcNMjUwNjMwMDcwMzA0WjAzMTEwLwYDVQQD EyhmYzA5YzA4NmRkYjQ2YzgxMDdjOWQ3Yzk3ODFmMmVjMjExNzUxNzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtttwyi3jvAGLJaf0hwp1lcMXWZNZ qntQ7noCJrE/xJ8Cy9vqVCaBJeg4FjmrN9QsHyea9D+LTKBM8a6LSzNVs3we9xf6 O7FrXJUO8mGqY+vIv3NlTUKeTutK2UMbxwNUBbkSrqNdfp8KQzegB4oTpIOzTiCX PP4aBYjNdS42HjgCxlresZVPX4A5rlP/6pkdnGU9aqvXMUNAh6jRnq5Z/s/mdDye 8h+p0aF6YO9qfNgH1vv1rRvx3Wqr+ujC3QA4etM7q/cfO3TMN2Cl4r5jgaMfr4H9 V0PbDfldUlIHw2WHJGJXYN0ok3KETKKSQXxfYQR3ySExmsU3oH8HKbJ6pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwJwIbdtGyBB8nXyXgfLsIRdRchMB8GA1UdIwQY MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt ZWQxZjMwY2MxYzU3LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3 LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmVUTfOQ Mbgdb3dTKVuB/7mIWSkrV1aUxUD4L96liS9++GcYXBp/WUC4UU/Z3NepY8iztYwS yAtXYtx7Fh8+7CNhS1G0zptjRt+OnsONQulucIech0Nj3P5fR1ABg++CVuBvPe+5 J4DbcLMwigBjS20+fXO3blk3uPcjVrp7tEMLFSsk5NGeM+j4rq/VCah+ZhU2Hnub vYXctz59aGuZ8aZaUm8Sb8+FeMJpgGMYMDIaN7dXRpemApQ3rDmPqYlkXDrAMWtN sUfdXAd83tLNRfNOYWPSvD/7xudVakvD6QF9P3Ky9mGhe6HZvTuB+JC44rANhE8T hjrQnyTHg2Ba/Q== -----END CERTIFICATE-----Generated at Sun Jun 29 16:47:45 2025 by rpki-client