$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft File: KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft (raw, json) Hash identifier: jGzvIZnOkrb0bSTACfVf6LugzYPLSgmgFHei6/DM7FY= Subject key identifier: 0B:9F:F7:98:67:45:61:DC:3D:4D:C7:61:CA:B7:5B:9C:A5:A6:81:33 Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8 Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8 Certificate serial: 0197B6D789B64CA89F6A8D16E2603BB59E63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft Manifest number: 0A94 Signing time: Sat 28 Jun 2025 14:01:08 +0000 Manifest this update: Sat 28 Jun 2025 14:01:08 +0000 Manifest next update: Sun 29 Jun 2025 14:01:08 +0000 Files and hashes: 1: 3n7I_kSrxdGXM-Yy8kH4fsc4pN8.roa (hash: s/PREhsDL5iYmJE9h5sCUC+jgqMKpegaWts1GqNWSms=) 2: FV9U3Yv2I7_2992_Tu4mBiIQFlI.roa (hash: /WpBV6VXQYMepV5lfUa4zJ1OtPuJRJ1gNT7mbz//kPY=) 3: IvOVPi4Jk0LAA7IyC_lBmoedUPk.roa (hash: iVbMNdqQVbnDfCnhCbcyzkADBiETtoTlj0kjeIAta6w=) 4: KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl (hash: fCCuNi+zhhIJ3Q50DR9Qf3oqAlRFJx4kcmxe5mCDs8A=) 5: T16pm2MQEAUE2FMbSssYLk6CkTk.roa (hash: 7uW7JXvNCvoGIxe5Z6TwqqTVQIqIp/L1A4jFvTPd0mc=) 6: VJKr8K21Xfen5uk1xCfGFVJrqNs.roa (hash: kXpjzIlwN+Gv44HIvCkq7vJ72G9g6c72ZjdAcBJOo5Y=) 7: _54CIVi2Yw4yngdpfKbMO07oyqo.roa (hash: TM5Ay2NTiDiELYyiOeCmFyJPSSpITIxR/LNxTfFDHDg=) 8: c9AU5dwP8sQuOBrK2TPaexkm-2w.roa (hash: rSgCsdAaOy2GK2SsQ0HASyv7OgScD7Kz2kXb5Hn5ibY=) 9: ca6XJ5NiIiIJ1gn26NWoBZY1OOE.roa (hash: m0MfY3W/yHtAcpQIPruy2IhGfS2aQQkvwxrvdJx1dpE=) 10: ozTUlRS2BP8xxCFNOquOdzTJVac.roa (hash: l1UJXUEegLYZKNp2zf9niVjLEqjlu26RHLObHLwCBJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 14:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:d7:89:b6:4c:a8:9f:6a:8d:16:e2:60:3b:b5:9e:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8 Validity Not Before: Jun 28 14:01:08 2025 GMT Not After : Jun 29 14:01:08 2025 GMT Subject: CN=0b9ff798674561dc3d4dc761cab75b9ca5a68133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fa:54:7c:ec:4f:d7:db:07:83:70:aa:81:7e: 43:61:9e:68:47:11:04:30:86:89:ac:1f:b4:7b:ec: 02:c8:03:d7:53:b0:9e:5a:a5:a3:b0:6b:2c:29:88: 54:75:1c:a2:e9:b1:74:f9:5b:94:af:c4:d8:c2:cb: 52:f9:0d:d0:ac:57:2c:54:b5:d0:c9:96:f7:a6:6c: 4a:53:c4:b5:a0:d2:a6:9e:d7:6e:9f:03:5b:35:95: 82:69:62:e4:27:09:d9:09:ae:cb:e5:13:19:0b:bf: 92:b0:76:80:b6:b3:51:05:10:e8:27:24:f7:6d:8f: a9:de:82:d8:c8:e7:7c:09:d5:73:2b:1a:83:10:4a: 84:c0:81:62:aa:06:5c:34:1e:68:cb:91:09:80:b7: 30:c9:86:c5:19:d6:5c:74:fb:f6:6b:44:a5:df:0b: 3c:e9:2d:4f:b7:3c:4f:a4:8d:8a:c4:76:eb:bb:5c: d1:ce:c5:05:96:8b:73:16:df:f8:d1:01:ab:66:3c: 4f:72:64:8c:df:7f:b0:ef:76:74:0c:44:0d:24:b7: cc:cb:8f:16:fa:d7:e3:5d:c1:92:7c:70:8f:01:f7: b6:f6:23:e7:8a:6c:fc:8f:95:41:1b:35:c4:60:c5: f9:b7:c9:27:98:74:5f:56:ec:b2:19:bd:39:df:3e: 55:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:9F:F7:98:67:45:61:DC:3D:4D:C7:61:CA:B7:5B:9C:A5:A6:81:33 X509v3 Authority Key Identifier: keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:b5:f6:98:53:40:1b:f8:f7:32:f1:c7:3a:7e:66:5d:40:bf: ad:73:c5:25:03:9d:08:4e:6a:3c:33:d9:0d:84:1e:6e:07:cf: 15:d5:db:25:ad:5e:47:47:a3:7b:98:10:ba:56:23:fa:86:f3: bb:f7:54:3f:9c:2b:aa:aa:35:cf:45:ca:25:b7:2c:38:41:da: eb:31:2b:13:ee:2f:84:d3:7c:aa:e1:27:48:6b:79:40:4d:0b: 6f:64:70:73:a0:aa:b0:da:90:e5:6b:27:5b:49:88:44:4f:33: 9b:74:2e:0a:d8:75:f6:45:e2:7e:45:ed:bb:97:5e:87:f6:24: 18:12:77:a7:a4:38:03:d4:76:4f:10:0a:d2:0d:62:bf:19:0b: 48:bb:63:93:f1:f1:01:c5:72:ca:69:89:fa:ff:cc:d2:42:bc: f8:42:1b:cb:6e:ec:94:00:f1:86:d1:94:5b:56:8b:a6:74:ca: fe:71:92:51:94:dc:71:95:13:73:92:e8:e4:72:f6:5b:35:8d: 74:59:30:23:3a:04:53:c3:98:8f:e8:bc:d2:4e:fd:22:ae:28: fe:0e:b7:57:90:be:dc:fc:b9:e6:1e:99:9c:37:98:08:fe:e5: 91:97:f0:70:2e:47:42:2d:45:57:3c:4a:e7:de:fb:97:e5:b1: a7:95:00:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe214m2TKifao0W4mA7tZ5jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YTk5NjRlMGNkMzVmYjM2NzU3ZTU2NTNmZmE3NjI2YWM1 ZGVlZTgwHhcNMjUwNjI4MTQwMTA4WhcNMjUwNjI5MTQwMTA4WjAzMTEwLwYDVQQD EygwYjlmZjc5ODY3NDU2MWRjM2Q0ZGM3NjFjYWI3NWI5Y2E1YTY4MTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/pUfOxP19sHg3CqgX5DYZ5oRxEE MIaJrB+0e+wCyAPXU7CeWqWjsGssKYhUdRyi6bF0+VuUr8TYwstS+Q3QrFcsVLXQ yZb3pmxKU8S1oNKmntdunwNbNZWCaWLkJwnZCa7L5RMZC7+SsHaAtrNRBRDoJyT3 bY+p3oLYyOd8CdVzKxqDEEqEwIFiqgZcNB5oy5EJgLcwyYbFGdZcdPv2a0Sl3ws8 6S1PtzxPpI2KxHbru1zRzsUFlotzFt/40QGrZjxPcmSM33+w73Z0DEQNJLfMy48W +tfjXcGSfHCPAfe29iPnimz8j5VBGzXEYMX5t8knmHRfVuyyGb053z5VkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAuf95hnRWHcPU3HYcq3W5ylpoEzMB8GA1UdIwQY MBaAFCmplk4M01+zZ1flZT/6diasXe7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8yMTQwNjMtZjg4Zi00OTU4LWFlNTIt ZDliNTMzZjdmYmMzLzEvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8yMTQwNjMtZjg4Zi00OTU4LWFlNTItZDliNTMzZjdmYmMz LzEvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLX2mFNA G/j3MvHHOn5mXUC/rXPFJQOdCE5qPDPZDYQebgfPFdXbJa1eR0eje5gQulYj+obz u/dUP5wrqqo1z0XKJbcsOEHa6zErE+4vhNN8quEnSGt5QE0Lb2Rwc6CqsNqQ5Wsn W0mIRE8zm3QuCth19kXifkXtu5deh/YkGBJ3p6Q4A9R2TxAK0g1ivxkLSLtjk/Hx AcVyymmJ+v/M0kK8+EIby27slADxhtGUW1aLpnTK/nGSUZTccZUTc5Lo5HL2WzWN dFkwIzoEU8OYj+i80k79Iq4o/g63V5C+3Py55h6ZnDeYCP7lkZfwcC5HQi1FVzxK 5977l+Wxp5UAFA== -----END CERTIFICATE-----Generated at Sat Jun 28 23:22:32 2025 by rpki-client