$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft File: S0BcqrNLv95rjuZsYAhgxs6W8ys.mft (raw, json) Hash identifier: X8mA8KQvtHYQ2UN5iojhyNY5R5++O/T6/3nFKixCYGI= Subject key identifier: EB:66:0B:5B:C9:E2:0D:D3:1A:18:14:F1:40:08:AF:7B:2D:94:ED:40 Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b Certificate serial: 0197CE71B9638F5B3373D6559C389E442408 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft Manifest number: 15C8 Signing time: Thu 03 Jul 2025 04:00:48 +0000 Manifest this update: Thu 03 Jul 2025 04:00:48 +0000 Manifest next update: Fri 04 Jul 2025 04:00:48 +0000 Files and hashes: 1: 11HD7yYKcpDp91MDnZ2qx4f7DA4.roa (hash: I82O47jamEqwRmGn3/G2hhZ8d3EhBnYIg9JLsYyDdcE=) 2: EVFSBas9Aq_MdNVwUd8bGuaA3Ws.roa (hash: BhtgRPsHAejHOiiDvH3HRPbC4SYTxdKvHTv4FGSpdUs=) 3: EwIzZdJ1IhMaFw8VKQftgylzjgE.roa (hash: TssNiQ/Zpv1pzvYDHFFLNu5wfEVQ4u0fKOIDHY91aqk=) 4: LVgdGGp1BXM3wqsV9OwWixTAngw.roa (hash: yASeozzYpGQSF5fg0wPLHaGxwKLjvcatKKCkqykA4I8=) 5: MJIbLhSmNC8a874fA2nbq57HEtg.roa (hash: WaRYM9CvEVYhUP+ZoiflR5McAGOB5Og+0p9cf3/LEak=) 6: P1A1BXCqCADzQosrk4MwUKPYxTk.roa (hash: LXH4t2ODNhUtfiB03lL7Y51z/AGbNaW0Y11NO+KNqsc=) 7: QHWMs-MZjDSwChSISEL6Gl0q8mw.roa (hash: MTwg/6CPgLRHHoER9F5LK/UDna9Vp7Lok94EKexAIUI=) 8: S0BcqrNLv95rjuZsYAhgxs6W8ys.crl (hash: h7ep4HIHklK5WD/cL7kgN+N2QqugOVJWUau6hkzMJsc=) 9: Xdvj43KnSMHPF5yK-nfEWq4KZoY.roa (hash: 0KUoHz1/LcxNxADlsv04gqLb680zAS0Z8MaiKDomgYY=) 10: foffFzsX_C0XZVackxzc9TT3Ql0.roa (hash: v5tw1DCZvp0dZORs+mozhjde3hmTpwW0Pvc0v2NmjrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 04 Jul 2025 04:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:ce:71:b9:63:8f:5b:33:73:d6:55:9c:38:9e:44:24:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b Validity Not Before: Jul 3 04:00:48 2025 GMT Not After : Jul 4 04:00:48 2025 GMT Subject: CN=eb660b5bc9e20dd31a1814f14008af7b2d94ed40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a7:68:51:95:bd:01:4a:89:0f:04:0a:82:da: 41:7f:49:a8:64:ba:4d:b0:4d:d9:d5:d5:cb:8e:44: 9b:ae:6a:71:9e:8e:8e:b3:ea:26:40:20:e7:0f:58: 87:5f:8e:eb:51:3d:e4:0e:18:3a:3f:11:cc:a6:4b: 4c:8c:ac:2d:50:0b:7c:47:42:4c:3f:25:0f:67:c3: aa:13:89:73:e4:78:47:32:34:24:1b:40:15:8b:1e: 96:45:2a:a8:5b:3b:07:97:74:c6:0b:47:e4:4e:62: b4:93:d2:fd:b3:4b:b2:c3:ba:76:ca:48:13:a1:21: f0:ef:fa:c0:cf:26:68:a8:89:b5:95:6a:eb:80:23: 04:16:da:a3:62:9e:38:34:eb:9e:55:0d:b5:4f:a8: 96:a8:4e:19:25:ae:e3:02:b7:98:87:53:33:e5:03: 3a:e4:4c:db:d4:93:18:61:4a:34:92:9e:bb:b5:9e: 84:6e:8d:d1:05:b8:31:b2:fd:bb:29:7f:2a:be:2a: eb:48:ec:01:13:3c:28:77:6d:9b:f8:35:8c:b4:22: c3:b4:4e:87:ab:96:07:66:99:98:75:43:aa:08:79: 9a:5f:42:e4:2e:8d:a0:8a:a3:15:0c:39:10:5f:6a: 73:55:90:d2:c8:c2:7f:81:0d:f9:b4:1d:57:b9:2e: a6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:66:0B:5B:C9:E2:0D:D3:1A:18:14:F1:40:08:AF:7B:2D:94:ED:40 X509v3 Authority Key Identifier: keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:96:27:ca:3b:d8:e7:4d:39:b4:5e:87:8f:82:51:27:22:9b: 73:2d:87:fd:47:76:9c:22:8a:a7:91:87:dd:bb:4b:c4:ff:c0: 64:1f:11:c3:08:62:c6:8d:7b:95:04:9c:73:02:88:28:49:4c: 3c:10:86:33:ee:1f:c8:a8:12:bb:68:a9:bb:59:0a:3c:53:a4: 8b:22:44:48:c1:6a:b2:13:28:59:42:4a:f2:cd:b7:91:ab:08: 5f:04:f8:63:c5:52:f8:9b:33:ff:eb:9f:d2:a4:0f:e0:17:83: 6b:30:68:e2:ad:60:6b:7e:00:5c:42:17:ac:a2:6a:2f:90:00: 71:19:05:06:4b:f0:1f:71:25:83:38:d4:0e:f0:e2:18:d0:a8: 56:bd:80:d6:6c:57:0d:99:6d:77:f1:8e:3a:6e:b5:9d:35:45: 60:2f:c9:a9:b8:fe:2b:0e:fd:b0:28:43:9e:89:bd:ff:14:bb: 38:43:ec:29:61:6d:a9:81:6b:34:dd:94:49:5e:63:6e:4a:e0: 5d:f6:81:33:14:3b:e4:f9:4e:96:03:b2:10:a7:88:0e:a4:9d: 58:8e:c1:29:95:c7:7a:c5:50:4a:ba:2c:41:1d:b8:7b:76:61: 29:94:e8:67:ad:c2:f0:cb:56:fc:26:83:ef:83:94:a9:91:e7: 07:34:5a:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfOcbljj1szc9ZVnDieRCQIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNDA1Y2FhYjM0YmJmZGU2YjhlZTY2YzYwMDg2MGM2Y2U5 NmYzMmIwHhcNMjUwNzAzMDQwMDQ4WhcNMjUwNzA0MDQwMDQ4WjAzMTEwLwYDVQQD EyhlYjY2MGI1YmM5ZTIwZGQzMWExODE0ZjE0MDA4YWY3YjJkOTRlZDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtadoUZW9AUqJDwQKgtpBf0moZLpN sE3Z1dXLjkSbrmpxno6Os+omQCDnD1iHX47rUT3kDhg6PxHMpktMjKwtUAt8R0JM PyUPZ8OqE4lz5HhHMjQkG0AVix6WRSqoWzsHl3TGC0fkTmK0k9L9s0uyw7p2ykgT oSHw7/rAzyZoqIm1lWrrgCMEFtqjYp44NOueVQ21T6iWqE4ZJa7jAreYh1Mz5QM6 5Ezb1JMYYUo0kp67tZ6Ebo3RBbgxsv27KX8qvirrSOwBEzwod22b+DWMtCLDtE6H q5YHZpmYdUOqCHmaX0LkLo2giqMVDDkQX2pzVZDSyMJ/gQ35tB1XuS6mYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtmC1vJ4g3TGhgU8UAIr3stlO1AMB8GA1UdIwQY MBaAFEtAXKqzS7/ea47mbGAIYMbOlvMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85MTRkMzktMzAyMC00Yjc5LWFkMjYt ZDg3YWZmYjhiYzYxLzEvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS85MTRkMzktMzAyMC00Yjc5LWFkMjYtZDg3YWZmYjhiYzYx LzEvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJYnyjvY 5005tF6Hj4JRJyKbcy2H/Ud2nCKKp5GH3btLxP/AZB8Rwwhixo17lQSccwKIKElM PBCGM+4fyKgSu2ipu1kKPFOkiyJESMFqshMoWUJK8s23kasIXwT4Y8VS+Jsz/+uf 0qQP4BeDazBo4q1ga34AXEIXrKJqL5AAcRkFBkvwH3ElgzjUDvDiGNCoVr2A1mxX DZltd/GOOm61nTVFYC/Jqbj+Kw79sChDnom9/xS7OEPsKWFtqYFrNN2USV5jbkrg XfaBMxQ75PlOlgOyEKeIDqSdWI7BKZXHesVQSrosQR24e3ZhKZToZ63C8MtW/CaD 74OUqZHnBzRauA== -----END CERTIFICATE-----Generated at Thu Jul 3 08:16:54 2025 by rpki-client