$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft File: dGNlNVtmVWSiEMNYxooBF7f765o.mft (raw, json) Hash identifier: GqTZwxD/dSRWDls1XQVKGHRJM1+cNifM61yiTj3rNyw= Subject key identifier: 3B:7E:8F:4A:08:64:06:20:47:A7:E3:E9:19:A2:33:17:C0:AB:33:0C Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a Certificate serial: 0197B6D7370FDA57D99A5E912B82DFD5DF56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft Manifest number: 161E Signing time: Sat 28 Jun 2025 14:00:46 +0000 Manifest this update: Sat 28 Jun 2025 14:00:46 +0000 Manifest next update: Sun 29 Jun 2025 14:00:46 +0000 Files and hashes: 1: 0Z8yTYlKjkqvKh6kY-kM6OXYfz8.roa (hash: fwm0Gtt1RFKV50/Ms+CgVe/rwlPJ9Q3VLzTFIW1v2aw=) 2: 1i1h10HKuKMLFRXN4cBGZ2mRyJM.roa (hash: 7JEI6UNI/BK6+fsUZu0VQIRD6uiIejb022WVzNTlPqI=) 3: 4AhKQoLmAk1YQIBQspZfyfaiu0s.roa (hash: 1kEaOXNNkPEAuTvrZqrQmCGg/Uu08f1ofkHwiva1rBk=) 4: 4VJyAeGVgAs2ysdZRw_rlOWdRTY.roa (hash: Xd7f6Is8VkQ7huxtuAE7hUXnUe/NIXlF2TbPODpbZHk=) 5: 8xmePB-pGcDcrQ-prX4UP_SBy78.roa (hash: OO9rzem914ccJuV3c6Pdstzz47bnogLMsoJtrFTJhQo=) 6: 9nwJkf06ywYV97ycnHX8xephiLw.roa (hash: E/N+tJSxegWf0b+66cYXz6Gw0s8y/7JfEZqjs9iWYvA=) 7: BwoakCWAb-eSErzQWMsQx4Pet1E.roa (hash: TL0uGVtiqnrxVB3nr0QUt2pk4pP950lLnLqq2Skso9M=) 8: G1nDGEYcV0zuKzKuOXzDx75r3GI.roa (hash: 41u/KL+MWJdDf84HJGznj8QmpQB0mJMrGBzkwlxjtIc=) 9: HtGtnD1WG-uR4lNZ5h-A8-pjUrU.roa (hash: JiGHlI4PQlUWbSzc2TBFb2wXm1bs25OSgaV13SVkmqE=) 10: PQouGTOckW4W12cc4d-xjaematA.roa (hash: Kckr0tsSpm5YRyOoyFHZZMP1JYibeLXzK7UoR9DsQbM=) 11: PVKwdeX3NyiQmgk2A2820t7cOqs.roa (hash: 26tO2fkoICp4JASDnIMTpkdHS90b8zIixKpW6hSIQzc=) 12: TQNP6hoAf66GZWfHy5k78DAiiCU.roa (hash: uABddS+djXpmQc7iz2KFGbyJ5oeYnTC/ey9Ec918mow=) 13: UMHCyN1PhpnvoYUbs1CT_48YLGk.roa (hash: i765qk64qL4Uog5FTQxpy5y2jivRwNCYq0ub5NcQaLk=) 14: V51fQsmdOucWQLFJANFvs_Ma2i0.roa (hash: mhzDbXcVW4r5ZjsZqcqDKjjyLnY5MIVjnfy6m1yWpyc=) 15: V5HLYQX7OEpLFK_MH5_sUYR0JBQ.roa (hash: 6cm5gNEppEG5XD2KabFv9dmbCHQEnB7rCQFwcW30ZWM=) 16: WWDr2Um8NXXwWukbK6cj1BF3t7Q.roa (hash: KB4bFVPkGqmvCaRGbBdpA1si7s9CexKnU66M/mHt/0s=) 17: XZET7dFa5OoJqf73WGd1UHo9Trs.roa (hash: FbxqvpbDfsQRYaW0n//PgGX2T+UQY1wiBpKlSWUYJQg=) 18: dGNlNVtmVWSiEMNYxooBF7f765o.crl (hash: O1M0IQW4MLDSu66cpkfOhZ27d+sfLaLkBer/ado/OOU=) 19: dc2g-kIH50S7LA2o26AVsv4LItA.roa (hash: anV8AfiZnJM+uW7z2xYGvooxLoCl6L/cGFCY34WgBTU=) 20: g3gXDyn1r3CKRtOkIamh9XiFNXQ.roa (hash: bsh/frVfpWjiiUA/IVdx5lj5UBB7HEuHeERH5RVXbJU=) 21: hbkDGu-27NQwuA34KKvsthuBpoc.roa (hash: gs4QclFDIW6OH3AQHoXwFFecYQ+OpwQ25vhb21IUnck=) 22: iHslhtFiuKaugZuIjgDSTM4F6Sk.roa (hash: 43DehRvyD4BSrfqUpPUdy+zsjmfPk1hQcSdYylB1zpo=) 23: jmqPtt5Ns_W-iBFLphm9TOPqcBk.roa (hash: Q0XLFkj7/QEzPnBRybOs7B/q1S4uk4+SdVBsy+OCL8U=) 24: kMJn1HheqQ9Rsacjsd3PZ6CXhTk.roa (hash: QHx3y/n5TxjTD6iBbFsTYJr5O+YrfK0OyTuVkyzqTiI=) 25: lkYJ-_nXwt_j8sYXcXEPI8XjVSs.roa (hash: H5A3LLoCNjemShwdfzZoOLg2oRcQfw/qyX1Up4Fug7w=) 26: m095Z-7KR0K5gXucbWhKiz12Uqg.roa (hash: pKKUCvxcyqiDYUVY3jhLgvu4uMJ7RTYnDW2HPLpWkkY=) 27: nMVuUhhQLd_p2MmIFg0uk6oN0DA.roa (hash: VPC3QfM3Xk9o/TFr02RnouDa7yDlwB8VvuZ6tJbURMA=) 28: nyslHXPfyz0FM3udFOE-7tndyMk.roa (hash: gPoCAQJEwCTv4wbyGKoKpT/fwNV2im1/jc8HR0EwRAo=) 29: oEbBV7xx5_jwLtoklKva4-Dg2v8.roa (hash: i+aaCmiUXCVg0OPcM0SwO92pJsKLDZGoxx/fXdMrMgQ=) 30: oQY8Ggs-WHGozgLdlzn62PGvTmo.roa (hash: Rm3b27WZnppZmsClSvXbSesr4c+ogRwCEVrSLNbiwvA=) 31: ohR12qV3YhwWzvyvvRFfjsTfW3I.roa (hash: /Itg9xPIRRo/oOwoFitB3haSxIqbmv1Hy1qpYEx48YA=) 32: r-97pPvj-RimUl1469wxiEjOXHw.roa (hash: BJihjsrYYxzSHh3xQ0PZJNW0AKvTbj8ZG/b/oUaGZaU=) 33: sTAcEeIlslVpuXMYkyeJBskGwEo.roa (hash: sDqLs0eEA0fKuxXHljiO7Zt9np/B1YWaKWKNaP6grbA=) 34: si-h3EMZPum7ZeFVKrM-JgEvS5s.roa (hash: e6RNF3nCZ80GPAqffnrYJBWzKtbs1gbwLTkQ6jY31gw=) 35: t2bPxtc37O7_UaSx43VqFjBQeQ8.roa (hash: TQAVmYhnwd2Kv49WbSb4VDqVmwGOcSo0dPabg2IvysA=) 36: yTFqO5xiaIDSCJNJ_ZUqbKSypdQ.roa (hash: zRFFAOZDcEueQQ2liuDNq8EtejJKoUyry9Flbp6zROU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 14:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:d7:37:0f:da:57:d9:9a:5e:91:2b:82:df:d5:df:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a Validity Not Before: Jun 28 14:00:46 2025 GMT Not After : Jun 29 14:00:46 2025 GMT Subject: CN=3b7e8f4a0864062047a7e3e919a23317c0ab330c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:69:0b:24:dc:d1:90:78:4a:cc:e2:02:e9:b7: 99:35:82:3a:10:e3:e4:5d:77:49:24:6c:3d:04:9d: 22:a7:a6:3e:a2:12:54:d4:f2:dd:a4:6b:4a:4e:9b: af:f2:44:96:37:c6:e5:9b:72:bf:46:84:d5:af:e4: 4a:98:25:7d:8c:20:57:ea:17:07:38:25:b7:ea:4b: 47:d0:00:71:8b:75:08:8e:ef:cd:fd:50:a2:63:24: 14:45:b7:da:49:4a:8f:75:cf:47:1a:a3:1e:cf:6c: c7:83:f3:40:2c:44:8b:d2:5a:8d:93:77:a7:74:46: c6:21:58:91:91:fe:8f:dd:2d:f3:e5:62:18:d5:f2: 47:d6:18:49:da:7e:e9:44:e2:c3:31:ee:3f:9a:31: e1:d1:9e:2b:d3:31:5e:01:9e:14:78:a1:39:1e:54: 03:22:51:68:a7:b5:c4:c3:bd:75:15:50:c8:39:98: e8:d7:d2:70:2e:16:4d:41:01:63:77:08:47:a3:6a: e6:d0:52:84:75:2e:ad:31:6c:00:84:bb:b5:1f:2b: 38:ab:ab:48:bf:b1:a6:b6:25:70:19:5e:d7:ab:42: 4a:01:96:c1:2b:c9:01:59:08:ae:97:d9:e1:75:91: ef:20:d3:b5:e3:3e:8e:1a:7e:f5:d8:25:12:36:38: f1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:7E:8F:4A:08:64:06:20:47:A7:E3:E9:19:A2:33:17:C0:AB:33:0C X509v3 Authority Key Identifier: keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:d0:13:ff:d3:fa:a6:f5:3c:19:21:4b:58:51:48:f3:f1:55: 61:95:c8:6d:d2:92:1c:94:e3:96:c9:0c:e0:1c:75:51:0e:69: cb:5f:e8:93:aa:21:2a:77:5a:5a:5e:d1:69:e8:bd:a2:74:7f: 7e:12:86:dd:38:a8:1f:59:57:f9:31:83:99:15:3f:49:b0:db: 50:33:8e:2d:45:b4:8b:4b:c8:67:fe:f7:ff:b9:36:90:16:e0: 93:7c:3a:30:80:55:66:65:79:05:f5:ce:2f:87:25:7f:a4:a5: ac:20:30:87:87:a1:25:5d:91:39:b3:41:03:39:25:cd:6c:a3: e2:da:2d:a5:12:30:07:f9:7e:23:19:7c:cf:44:96:f0:9f:b1: 79:cf:25:0e:cf:97:90:3c:dc:b6:81:10:17:4f:30:f7:e5:0d: 7d:89:c7:76:47:5f:b2:1a:e8:c6:71:4e:5b:c3:4d:c2:8b:a4: 21:3e:6f:0f:f1:f2:76:b0:04:09:7b:f6:98:70:91:22:ee:15: 02:04:1d:b6:3e:c1:fb:71:6f:1d:fd:09:63:89:05:47:aa:e4: 2a:e8:fa:ab:d5:95:49:0b:ff:39:a1:e7:a8:66:84:9b:ac:79: 47:9d:ff:3c:f1:49:f7:33:e2:c9:36:d7:94:b6:11:06:ce:ef: c1:0f:00:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe21zcP2lfZml6RK4Lf1d9WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm YmViOWEwHhcNMjUwNjI4MTQwMDQ2WhcNMjUwNjI5MTQwMDQ2WjAzMTEwLwYDVQQD EygzYjdlOGY0YTA4NjQwNjIwNDdhN2UzZTkxOWEyMzMxN2MwYWIzMzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGkLJNzRkHhKzOIC6beZNYI6EOPk XXdJJGw9BJ0ip6Y+ohJU1PLdpGtKTpuv8kSWN8blm3K/RoTVr+RKmCV9jCBX6hcH OCW36ktH0ABxi3UIju/N/VCiYyQURbfaSUqPdc9HGqMez2zHg/NALESL0lqNk3en dEbGIViRkf6P3S3z5WIY1fJH1hhJ2n7pROLDMe4/mjHh0Z4r0zFeAZ4UeKE5HlQD IlFop7XEw711FVDIOZjo19JwLhZNQQFjdwhHo2rm0FKEdS6tMWwAhLu1Hys4q6tI v7GmtiVwGV7Xq0JKAZbBK8kBWQiul9nhdZHvINO14z6OGn712CUSNjjx1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDt+j0oIZAYgR6fj6RmiMxfAqzMMMB8GA1UdIwQY MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt NmE0ZWNhZjhiM2IxLzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtAT/9P6 pvU8GSFLWFFI8/FVYZXIbdKSHJTjlskM4Bx1UQ5py1/ok6ohKndaWl7Raei9onR/ fhKG3TioH1lX+TGDmRU/SbDbUDOOLUW0i0vIZ/73/7k2kBbgk3w6MIBVZmV5BfXO L4clf6SlrCAwh4ehJV2RObNBAzklzWyj4totpRIwB/l+Ixl8z0SW8J+xec8lDs+X kDzctoEQF08w9+UNfYnHdkdfshroxnFOW8NNwoukIT5vD/HydrAECXv2mHCRIu4V AgQdtj7B+3FvHf0JY4kFR6rkKuj6q9WVSQv/OaHnqGaEm6x5R53/PPFJ9zPiyTbX lLYRBs7vwQ8A2A== -----END CERTIFICATE-----Generated at Sat Jun 28 22:51:12 2025 by rpki-client