$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft File: ORnyrZFYS6_wRnRHusj7l40fndM.mft (raw, json) Hash identifier: TI3oT0ndYu0GcHXC7PUfWLHVqpyMm8fxhxSNuWqxxOU= Subject key identifier: 42:84:92:FF:07:03:FC:19:A4:F4:67:3E:6C:06:50:EB:15:9A:89:F3 Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Certificate serial: 0197B7B2E8710FB6928B52B539A15B92033A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft Manifest number: 15DB Signing time: Sat 28 Jun 2025 18:00:44 +0000 Manifest this update: Sat 28 Jun 2025 18:00:44 +0000 Manifest next update: Sun 29 Jun 2025 18:00:44 +0000 Files and hashes: 1: 3Xkfgsy5F0IowNcy1PedAB3Q6w0.roa (hash: iyJL5cuUJjZvE75tBtKfcWvyK2dmPiVKM7BX3wZGQos=) 2: 4EDvDSCIPe0YYvYx7Str0IpAPeM.roa (hash: A9xeZgyOfSqqIMRvaPEIhp5b1RhtdrlitB+v147UkT4=) 3: 5pue0s9j8lhdVuO6m6E92d4GwDU.roa (hash: CSkd5pFYexGISl0uc2qVJpocMMmmGw3Zguf0ypv5Owk=) 4: M5hYRJhvdGCKvhvMAGC4jWTJSXA.roa (hash: VGkxa4pTyEqZCbbcRS6HnlUuOo2QmctHYBT+vvYYBDg=) 5: ORnyrZFYS6_wRnRHusj7l40fndM.crl (hash: 3+EXMCR/tvKsPHWOn2AF0ArMHKrYx3qFT8IQU2XyA74=) 6: UfCPGY0KJE6274iAqACixLj9Gmw.roa (hash: DEe7CtPUt0XEDknWoFEE8OaasnbG+ag0I4mAzR/inaE=) 7: WBerlCoyvzWnSx7AM9uVxy9XUro.roa (hash: FyOYZU8Lcu6m3tCIEh8spxjddiJiAmITHkAJjSq/GW0=) 8: hWosbOoApl7V_Bhpe5UlA20sERA.roa (hash: PkJmNJ/LtXuQwtW6f6gFggLl9YMZJgAspupTTJw2DD0=) 9: m-oD5AGGiKc-qI8F9BHOsqfUhwQ.roa (hash: ZivLa2r1rkIhgA7nnzvSrie3rkSLQvNS6UhWQpi2o50=) 10: r4CnQQx_zbdBDGpIsGGdqEuowRg.roa (hash: Cf3KdUglzAXq3AND0kUcTnVm0D52NG4w3f87gIFdSQg=) 11: uot90FkBP8Y3Y-x6-7brjjoB-rU.roa (hash: 0JXXSAl/uFfrD7KxeCsCoDWgeiNKlIuga4IDFWQXH2c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:b2:e8:71:0f:b6:92:8b:52:b5:39:a1:5b:92:03:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Validity Not Before: Jun 28 18:00:44 2025 GMT Not After : Jun 29 18:00:44 2025 GMT Subject: CN=428492ff0703fc19a4f4673e6c0650eb159a89f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:35:f3:42:44:27:61:b8:1b:dc:b3:64:57:db: 56:98:ad:f8:1b:47:8b:c0:94:d7:3d:3e:96:28:d1: 2c:72:0d:75:40:26:95:79:8e:0f:e7:fb:a0:fd:e8: 45:02:a4:52:75:cb:3a:c3:b2:a7:a9:ff:96:35:a2: 54:39:a5:eb:d7:e8:8d:dd:cb:67:f5:15:7b:c7:00: e2:24:41:38:12:d5:bc:56:35:c8:09:dc:fe:26:02: 15:ff:ad:c6:9d:60:b2:b7:d3:b9:61:39:4f:f9:d5: 6e:3a:db:8a:2b:5b:88:8b:c3:cc:8f:e4:27:33:2b: 00:2a:39:31:b1:29:75:11:42:ce:2e:63:6d:d2:df: 85:6c:51:8f:8f:23:f3:3c:ab:76:e6:78:f4:36:3d: dc:e1:ff:b3:6b:5e:e4:14:25:bc:2e:b7:9a:b0:08: f7:93:ea:16:c8:02:be:d1:78:e0:9b:d1:3c:1e:5b: ef:d1:b7:e4:b7:3a:69:33:aa:a0:4e:48:d6:c4:e2: 95:49:e4:89:f7:38:dc:4b:91:10:c3:7b:89:39:bb: 6e:d2:3d:03:72:c9:39:27:38:84:f6:31:75:f3:75: fb:9a:7c:57:1f:97:be:d1:cc:ff:40:3a:a0:58:2e: a3:e3:51:c3:cc:2c:59:28:df:58:4f:2c:59:55:53: b9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:84:92:FF:07:03:FC:19:A4:F4:67:3E:6C:06:50:EB:15:9A:89:F3 X509v3 Authority Key Identifier: keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:63:6d:97:cb:34:2b:e2:0f:60:94:53:9f:c8:60:c1:e6:c2: ce:0f:b6:8f:a9:b0:43:8b:f7:f6:ac:70:e6:1f:67:99:fd:15: 7e:ed:a3:67:44:1d:4b:f0:93:cc:51:a5:e2:f0:4d:39:74:e1: 1f:c2:5f:09:c2:ac:20:7c:9a:98:6c:35:b8:d4:ed:15:31:16: e0:ba:f6:5c:66:b7:53:f2:91:d7:71:e2:87:7b:4f:f1:77:fb: 7b:d4:48:b2:a5:93:62:3f:5c:21:90:6b:3e:9a:8f:3e:45:35: 49:f5:8f:ca:cd:36:eb:a6:67:02:a4:28:59:5f:94:b6:d3:c5: c4:29:2e:47:00:cf:12:9d:01:55:93:0c:3a:b0:72:8b:76:65: dd:48:86:36:cf:9c:03:d5:b9:60:6a:ba:68:f7:03:d5:f7:f4: ed:6a:5a:3f:4a:a5:b5:42:16:36:f0:15:a2:2f:5d:23:9f:24: 7e:dd:0e:a4:0c:85:c5:e3:e7:7b:97:94:0f:1e:75:af:d9:49: 51:43:54:64:89:f7:71:4a:3b:57:e0:5d:29:67:04:27:64:ec: c0:4c:ef:ae:76:df:ae:93:3b:00:c0:11:7b:8d:3e:81:0b:e6: 16:ce:33:03:d4:50:c4:87:ac:e2:06:53:a5:ee:0b:c0:72:b8: 31:4b:f8:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3suhxD7aSi1K1OaFbkgM6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MTlmMmFkOTE1ODRiYWZmMDQ2NzQ0N2JhYzhmYjk3OGQx ZjlkZDMwHhcNMjUwNjI4MTgwMDQ0WhcNMjUwNjI5MTgwMDQ0WjAzMTEwLwYDVQQD Eyg0Mjg0OTJmZjA3MDNmYzE5YTRmNDY3M2U2YzA2NTBlYjE1OWE4OWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzXzQkQnYbgb3LNkV9tWmK34G0eL wJTXPT6WKNEscg11QCaVeY4P5/ug/ehFAqRSdcs6w7Knqf+WNaJUOaXr1+iN3ctn 9RV7xwDiJEE4EtW8VjXICdz+JgIV/63GnWCyt9O5YTlP+dVuOtuKK1uIi8PMj+Qn MysAKjkxsSl1EULOLmNt0t+FbFGPjyPzPKt25nj0Nj3c4f+za17kFCW8LreasAj3 k+oWyAK+0Xjgm9E8Hlvv0bfktzppM6qgTkjWxOKVSeSJ9zjcS5EQw3uJObtu0j0D csk5JziE9jF183X7mnxXH5e+0cz/QDqgWC6j41HDzCxZKN9YTyxZVVO57wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKEkv8HA/wZpPRnPmwGUOsVmonzMB8GA1UdIwQY MBaAFDkZ8q2RWEuv8EZ0R7rI+5eNH53TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUt MzJhYTY3MzFjMjkxLzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUtMzJhYTY3MzFjMjkx LzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeWNtl8s0 K+IPYJRTn8hgwebCzg+2j6mwQ4v39qxw5h9nmf0Vfu2jZ0QdS/CTzFGl4vBNOXTh H8JfCcKsIHyamGw1uNTtFTEW4Lr2XGa3U/KR13Hih3tP8Xf7e9RIsqWTYj9cIZBr PpqPPkU1SfWPys0266ZnAqQoWV+UttPFxCkuRwDPEp0BVZMMOrByi3Zl3UiGNs+c A9W5YGq6aPcD1ff07WpaP0qltUIWNvAVoi9dI58kft0OpAyFxePne5eUDx51r9lJ UUNUZIn3cUo7V+BdKWcEJ2TswEzvrnbfrpM7AMARe40+gQvmFs4zA9RQxIes4gZT pe4LwHK4MUv4Wg== -----END CERTIFICATE-----Generated at Sat Jun 28 20:55:52 2025 by rpki-client