$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft File: C1Vqy187lhtcwkoplfNO6R953BY.mft (raw, json) Hash identifier: zG8WoMo4a2METN+luP8Jt2fS2HoAofaCDzrru1FW4Cw= Subject key identifier: 2E:A7:9D:C3:68:39:72:40:8A:8C:27:CA:80:D7:12:25:1F:2A:23:1F Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Certificate serial: 0197CCBAEB87119B2A6BC994F3B92ABB4F51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft Manifest number: 15DF Signing time: Wed 02 Jul 2025 20:01:31 +0000 Manifest this update: Wed 02 Jul 2025 20:01:31 +0000 Manifest next update: Thu 03 Jul 2025 20:01:31 +0000 Files and hashes: 1: 1-Ss8y57Ehk6R15I50N_Ja4NuZFg.roa (hash: E3Xe56Uq6qf9xoMjHrb8Tp1z8LD2YFv8nmr/lvS0Ysc=) 2: 7AEnLXSB1YaAfgMGKA-kT_KobA0.roa (hash: 5AKbmZJGLK7UnAttUygeGitl8Ob/t23TtR2u6flJg/c=) 3: C1Vqy187lhtcwkoplfNO6R953BY.crl (hash: +39qGf14qG8M288a1k3DYufsOU3mlEPMt1UB/Npdifs=) 4: QmJcakWH1CARNak1a46tlM2ytyE.roa (hash: v8cGIzbtBdgrBgCJGkJKF+awirm33gkAmHePtYlNHWc=) 5: Ufuhf0_wn9lleED4LQKhcdXKZLY.roa (hash: f4Ng8ktmuEshcdJiOHZjPJAwq7/nitwlptaYvO0/DHU=) 6: XFCPjaaIP04nEp4Rlitk1zUJ8nA.roa (hash: 9Hrw22EfwJiPVEvx9iOeq1/U32N9ujjXKgQDN7kPNnY=) 7: bzDr7kn2LfhqjYsoZQLZ-uHwvQI.roa (hash: ETCcL6Lmgpdi6iyG4gf+W9Umfg+Mzqif1q2dVBD62g4=) 8: e38Kg8iCKqOVcGx8ZyJTu1IrTwc.roa (hash: yWG15kNG/dsh9zB22D/eO5GMJKGaRyWMaUm0mhvs7uI=) 9: irmafOolxajIUAAu4T-WCDDYGuE.roa (hash: B2dN9t4bHqneaqFXcxWnKXREXDW4ZcJ7+Z7DVVfobpU=) 10: n7XNxY-sa2O-8oAFuyK34I07FxU.roa (hash: 7HgkBdxidw6ZJ5Ks5cBFOnu0xmnIR/zyHKV2JfMTPLM=) 11: nikI6XTmNMIUEKKUIOhaKpaRfTY.roa (hash: 3OTWr1t7MNgVLjxLDAQClENVYG0IMxrFr2dhuyh8iLU=) 12: pkcx_-V9HNVC8HzviAJSCvzoxJg.roa (hash: V4tEVQoUWw/5eT8C/Z8qztjVCTQ8kgfSRy2bETB0V2w=) 13: wq6Oybyru5PjGYeKDTrdRRIxOok.roa (hash: +NxS5vTeW/Lv7n0fJHcbikUT3d8Gb7EPQOKgAIeQnGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Jul 2025 19:33:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:cc:ba:eb:87:11:9b:2a:6b:c9:94:f3:b9:2a:bb:4f:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Validity Not Before: Jul 2 20:01:31 2025 GMT Not After : Jul 3 20:01:31 2025 GMT Subject: CN=2ea79dc3683972408a8c27ca80d712251f2a231f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e2:05:60:2b:39:0a:42:3d:8d:ed:db:19:d3: 1b:e0:a4:7c:a7:e0:1c:ad:37:c0:06:a4:bd:ba:a8: 0d:79:a7:91:80:5d:69:9d:3d:3f:e4:38:a8:43:1b: 62:c9:81:94:42:0f:4a:2c:0d:84:b7:a3:0f:6a:a6: fd:37:e2:38:96:d0:55:55:17:a8:3d:e1:3c:4f:71: d5:0b:bf:70:a0:2b:71:6a:06:b7:c8:a6:e1:32:47: f4:12:df:d0:fb:c5:94:18:5f:63:be:3f:ff:09:14: d3:bd:4c:0c:c8:70:76:1f:91:4b:01:dc:06:7d:1e: 91:a9:fe:0e:ba:1c:85:b6:8f:d3:56:c4:58:38:1d: ae:4e:45:91:51:3b:a8:a4:d7:7c:67:06:fe:d0:65: a6:05:cc:3c:0a:a3:9e:ea:f8:a7:bc:b6:f7:e2:89: 2d:4d:26:ec:19:24:86:00:15:72:b1:99:4a:f3:b5: c2:0c:ce:91:dd:e4:63:01:e2:f4:3c:b5:f3:6c:b3: 07:cf:e8:9f:00:c6:3c:b8:64:b2:6a:fa:da:12:73: eb:3f:7c:6c:4d:f2:8d:b9:57:da:0e:b0:ff:89:4f: b7:ff:9b:13:c9:49:39:e6:da:88:e8:7b:d2:64:3a: 01:a9:f9:6b:86:a9:88:5e:ba:2a:7f:40:af:32:1d: b5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A7:9D:C3:68:39:72:40:8A:8C:27:CA:80:D7:12:25:1F:2A:23:1F X509v3 Authority Key Identifier: keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:c7:dc:a6:94:83:e4:c3:07:75:f3:a0:52:0d:82:e6:c5:06: 66:3d:af:18:25:fc:09:9d:73:f0:90:0e:eb:bd:e3:90:c4:05: 02:41:8f:c9:3f:d4:92:fc:41:92:3c:3b:bb:0b:29:e4:b9:92: 0b:f3:b3:28:22:bf:92:ec:19:0c:14:40:4d:28:ab:8e:46:7b: 7c:45:fc:2a:34:25:42:4d:a0:24:6a:32:9a:bf:52:fe:83:6c: 39:c4:40:4e:58:26:9f:36:a4:6e:91:cf:6b:7a:c9:a0:ac:5f: cd:09:0b:3f:0d:d0:2f:66:37:14:4c:ae:f2:7e:d3:c2:98:b3: 69:45:f3:7f:c6:0a:97:c9:34:88:04:44:d3:bf:86:15:1d:07: 05:3a:59:d8:16:70:a7:1c:0c:40:d3:6e:e7:58:d7:54:b6:a0: 5d:36:e3:5f:c1:97:ca:be:73:8b:a1:0f:6f:ca:f5:94:46:70: 95:90:1c:d6:b7:2c:9f:84:05:2f:c5:fe:e3:f8:f0:6d:f8:aa: 41:f1:34:28:7b:af:b7:a1:06:02:f7:ef:c5:54:4a:31:fb:9e: c8:f1:90:b0:9e:6d:80:89:3e:9e:51:01:f7:1b:08:9b:c1:21: 2d:4e:ad:21:00:ac:46:d2:cf:3b:5b:58:30:73:64:9f:41:2b: fe:55:85:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfMuuuHEZsqa8mU87kqu09RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNTU2YWNiNWYzYjk2MWI1Y2MyNGEyOTk1ZjM0ZWU5MWY3 OWRjMTYwHhcNMjUwNzAyMjAwMTMxWhcNMjUwNzAzMjAwMTMxWjAzMTEwLwYDVQQD EygyZWE3OWRjMzY4Mzk3MjQwOGE4YzI3Y2E4MGQ3MTIyNTFmMmEyMzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuIFYCs5CkI9je3bGdMb4KR8p+Ac rTfABqS9uqgNeaeRgF1pnT0/5DioQxtiyYGUQg9KLA2Et6MPaqb9N+I4ltBVVReo PeE8T3HVC79woCtxaga3yKbhMkf0Et/Q+8WUGF9jvj//CRTTvUwMyHB2H5FLAdwG fR6Rqf4OuhyFto/TVsRYOB2uTkWRUTuopNd8Zwb+0GWmBcw8CqOe6vinvLb34okt TSbsGSSGABVysZlK87XCDM6R3eRjAeL0PLXzbLMHz+ifAMY8uGSyavraEnPrP3xs TfKNuVfaDrD/iU+3/5sTyUk55tqI6HvSZDoBqflrhqmIXroqf0CvMh21oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6nncNoOXJAiownyoDXEiUfKiMfMB8GA1UdIwQY MBaAFAtVastfO5YbXMJKKZXzTukfedwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEt ZDJiYmYzN2RhYmI0LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEtZDJiYmYzN2RhYmI0 LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPMfcppSD 5MMHdfOgUg2C5sUGZj2vGCX8CZ1z8JAO673jkMQFAkGPyT/UkvxBkjw7uwsp5LmS C/OzKCK/kuwZDBRATSirjkZ7fEX8KjQlQk2gJGoymr9S/oNsOcRATlgmnzakbpHP a3rJoKxfzQkLPw3QL2Y3FEyu8n7TwpizaUXzf8YKl8k0iARE07+GFR0HBTpZ2BZw pxwMQNNu51jXVLagXTbjX8GXyr5zi6EPb8r1lEZwlZAc1rcsn4QFL8X+4/jwbfiq QfE0KHuvt6EGAvfvxVRKMfueyPGQsJ5tgIk+nlEB9xsIm8EhLU6tIQCsRtLPO1tY MHNkn0Er/lWF2g== -----END CERTIFICATE-----Generated at Wed Jul 2 22:29:20 2025 by rpki-client