$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft File: nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft (raw, json) Hash identifier: e5/Tc5L/VRzLh0VZek7/02OTmn3qYlKj1tFyQAnKCy0= Subject key identifier: B5:0C:42:0F:F7:75:C8:1F:46:BD:5D:D8:25:8F:0C:E7:3A:A8:0C:A9 Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Certificate serial: 0197B8C5BB324B85AF84E08C795D66A13F62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft Manifest number: 15BA Signing time: Sat 28 Jun 2025 23:00:55 +0000 Manifest this update: Sat 28 Jun 2025 23:00:55 +0000 Manifest next update: Sun 29 Jun 2025 23:00:55 +0000 Files and hashes: 1: 3vl8XIfuhRt73vGy6IwhrWPuLQI.roa (hash: q3Fh75KrQyoQfVHvtuNwmD855fGW6oB7xId9MSHUyb4=) 2: 6wuhUyQ6B8hcKFtpQPLF4a8xiLM.roa (hash: PVP/CIAq5vbBthYH2NgEEDe22Dw5jd7urf5cJiuVvXo=) 3: 9NNSEhajneEgbt66V0EkEE6XolA.roa (hash: xTgVQs+MsZfir4Ub3DiVbK1ClBqkcXuh9whyhrkEvAM=) 4: BzRg7cqbGCxPjaoZhAl0Moquf1Y.roa (hash: 6kEaZouendLfYXdknvUfHV20sm02LURoxyHpm7Wn7AY=) 5: G-7uTcKf4R76KSJdYf98itHFuPU.roa (hash: uB9gNVUlSjqGsS16y0z5ke/O0agEGAvuljoiA6PJrUM=) 6: QgQPTUqWSoJLC8pH1ZTpV9J6Spg.roa (hash: roAeP2l3vRUpAFpkZSsf9wX3WRLL0BI8ikMQ5kYqDxQ=) 7: ftQQpBrk0ZFia4n99q7-wX-5E0M.roa (hash: U0GhDpZiZ5saXJRfz3p+tKxwcbveFdHD/WbcCpSo+CQ=) 8: mUKuky3l-ZY5p-RPO9s2pPEyk78.roa (hash: ti7kzq8iHsvI0iGcqQO/PpqkoDoJf7orqrrfuhBfEKg=) 9: nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl (hash: HsUtHJLYxw0e4MGzH0wnfh2KK/KAJr98GIhEAP9kM3w=) 10: pp90XH9ku5igKr_7gjm59WVXVs4.roa (hash: bfssuNaaIGlZ7LKFXdiYHHy+DIw/jcyEOsfVzSQEBMQ=) 11: qFB-AfrzECXh6GN5dVSZvb0x6SI.roa (hash: GzIs503Dc0bsL2WCHQKf2MOheJQNWlvUYNrT8tj73vc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:c5:bb:32:4b:85:af:84:e0:8c:79:5d:66:a1:3f:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Validity Not Before: Jun 28 23:00:55 2025 GMT Not After : Jun 29 23:00:55 2025 GMT Subject: CN=b50c420ff775c81f46bd5dd8258f0ce73aa80ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b3:7c:ae:c5:5d:c3:fb:60:aa:5b:bc:89:ef: 5d:79:7b:bb:68:e4:64:50:93:e3:7f:74:67:6e:92: f0:d1:a8:f8:69:dc:f9:ff:cf:02:3e:33:89:00:5b: 38:5a:19:aa:7d:c8:71:f7:10:9f:19:3e:ca:e5:9f: 9e:82:e0:57:e9:23:78:84:ce:3b:c8:87:ce:47:f9: 5c:7d:22:3c:c9:7b:f6:6e:eb:24:ec:18:39:ca:10: bf:78:03:ad:f9:78:c1:f9:31:cb:4a:10:c8:11:5a: 80:58:44:f6:41:c5:91:0d:b7:b2:be:94:1b:5b:0d: 2d:fd:99:8f:a9:2a:66:9b:06:1a:73:7f:44:21:90: 1f:ef:d4:e4:f6:f2:b9:ae:95:76:12:f2:bf:80:10: 43:42:ae:26:a3:6f:24:6b:38:83:63:51:aa:e7:47: 1c:88:14:ba:ed:c3:76:43:03:8b:0d:d1:fd:f6:44: a3:5c:67:c3:97:e5:26:29:d7:4f:80:66:33:44:31: 98:19:e0:bd:a0:d7:1d:a2:bd:c0:4c:7d:56:2e:73: 1e:d0:fe:69:1b:5f:98:5e:d4:f8:26:b1:09:3c:d4: c6:1c:dc:70:33:b0:02:1f:bf:94:21:71:b2:b1:91: 36:a7:ad:43:35:49:ec:13:6c:f9:a2:79:af:9a:a9: 4e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:0C:42:0F:F7:75:C8:1F:46:BD:5D:D8:25:8F:0C:E7:3A:A8:0C:A9 X509v3 Authority Key Identifier: keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:65:67:46:36:c4:f0:f0:24:2b:d6:5d:7c:d5:a6:0a:2d:21: cf:f0:26:aa:ca:6b:f6:cd:5b:56:80:37:11:e9:8f:96:88:37: 0c:6e:ce:7b:8d:bf:07:87:df:e3:3e:ba:42:8b:70:f6:0c:30: d8:0d:e3:2b:0a:d0:7c:fa:f7:16:9d:16:62:81:84:a0:29:c6: e9:e1:51:71:25:29:2f:a5:61:f2:2e:20:67:88:b2:92:d2:26: 30:cd:12:4f:98:d7:27:c0:92:ba:69:fc:c7:0d:bf:ac:81:b0: 88:cc:68:06:21:a9:3d:64:49:a7:12:95:0c:26:38:85:4c:09: d9:51:e4:5d:30:fc:ad:9e:9f:97:57:5e:ae:82:52:57:19:eb: 3c:74:41:d1:e1:d0:20:fc:84:57:cc:06:3b:6a:10:58:68:d7: d3:a6:08:b8:95:6b:51:c0:46:e4:94:df:d1:5f:13:2d:eb:3a: 21:71:d0:71:26:78:52:8f:cb:32:3d:04:13:72:8d:8b:35:c9: e1:fd:42:e3:75:27:86:a8:6d:1c:c5:cd:57:86:c7:b6:00:d2: 29:ed:c6:13:50:57:80:16:83:4e:75:a4:06:fb:ae:72:d9:05: 1a:66:ab:62:b6:96:78:46:7c:da:f6:21:55:13:81:d3:34:b5: ea:51:bf:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4xbsyS4WvhOCMeV1moT9iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNWRlNDkwZmY4NzRlOTY4OWNlY2Y3MjZjYmI0ZTJmNTFm NmM3MzEwHhcNMjUwNjI4MjMwMDU1WhcNMjUwNjI5MjMwMDU1WjAzMTEwLwYDVQQD EyhiNTBjNDIwZmY3NzVjODFmNDZiZDVkZDgyNThmMGNlNzNhYTgwY2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7N8rsVdw/tgqlu8ie9deXu7aORk UJPjf3RnbpLw0aj4adz5/88CPjOJAFs4Whmqfchx9xCfGT7K5Z+eguBX6SN4hM47 yIfOR/lcfSI8yXv2busk7Bg5yhC/eAOt+XjB+THLShDIEVqAWET2QcWRDbeyvpQb Ww0t/ZmPqSpmmwYac39EIZAf79Tk9vK5rpV2EvK/gBBDQq4mo28kaziDY1Gq50cc iBS67cN2QwOLDdH99kSjXGfDl+UmKddPgGYzRDGYGeC9oNcdor3ATH1WLnMe0P5p G1+YXtT4JrEJPNTGHNxwM7ACH7+UIXGysZE2p61DNUnsE2z5onmvmqlOPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUMQg/3dcgfRr1d2CWPDOc6qAypMB8GA1UdIwQY MBaAFJ1d5JD/h06Wic7Pcmy7Ti9R9scxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUt Y2VjMzNiYTFiZGY1LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUtY2VjMzNiYTFiZGY1 LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWVnRjbE 8PAkK9ZdfNWmCi0hz/Amqspr9s1bVoA3EemPlog3DG7Oe42/B4ff4z66Qotw9gww 2A3jKwrQfPr3Fp0WYoGEoCnG6eFRcSUpL6Vh8i4gZ4iyktImMM0ST5jXJ8CSumn8 xw2/rIGwiMxoBiGpPWRJpxKVDCY4hUwJ2VHkXTD8rZ6fl1deroJSVxnrPHRB0eHQ IPyEV8wGO2oQWGjX06YIuJVrUcBG5JTf0V8TLes6IXHQcSZ4Uo/LMj0EE3KNizXJ 4f1C43UnhqhtHMXNV4bHtgDSKe3GE1BXgBaDTnWkBvuuctkFGmarYraWeEZ82vYh VROB0zS16lG/NA== -----END CERTIFICATE-----Generated at Sun Jun 29 09:25:05 2025 by rpki-client