$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft File: j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft (raw, json) Hash identifier: KNjZ716J6PY9rV+LTj/ooVs7ZtVatdmJj6UchAOnFWs= Subject key identifier: F0:9A:EA:30:A6:96:AC:DB:55:44:FD:77:CA:2E:2D:30:D8:1C:0F:B3 Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Certificate serial: 0197B70E4F37F59ED2591DEDED2D493C0ED0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft Manifest number: 113D Signing time: Sat 28 Jun 2025 15:00:57 +0000 Manifest this update: Sat 28 Jun 2025 15:00:57 +0000 Manifest next update: Sun 29 Jun 2025 15:00:57 +0000 Files and hashes: 1: 33CUfDLiP8hMW8-xKnh5gWXZm9w.roa (hash: Bh9+3b8fWDJobwnZ5uEge8oWIc5s9pLu/K/Qpm494l0=) 2: 37WDsJgS29ArcL4Cmhv4wwYMgFc.roa (hash: AXUUOGrTgb1EkHkLKG0Np5XXpArC+TW3abI6bwcRXy8=) 3: 4UeqOidVxXtllJBCXqccAPMB0L4.roa (hash: F4SRHUsUQrgLFfE9vd29L5EUyTp/MgFHpYK0szqzOSo=) 4: 8Pql3WWXWEFRERRDmVMGD4G9M-A.roa (hash: Ou+GeKB9aMm7s/S9nX0yfjyzbehhUnphSDoiUeT/MCo=) 5: 8sf3AriWeoOoKb2ZrL9ruFI5-yU.roa (hash: akXe86mXNL4F4xYmekk3EuMAOLAD/RcPwHK74zX/QY0=) 6: 9a6AdkqAs0vIWdMjgvg0SfIEVG8.roa (hash: 3MZg0XXsOYdVObhOBprmqJ/8u/fpWKxyx3HFfsb7hhc=) 7: AmHkvm73L7WuRs2OBkCuUN3ylao.roa (hash: mk6A7F32UtKijP2YOQDh8IbbK8Vw0IDJK2YgMl3UZWk=) 8: Gkj-_sNoI1_V4Aq0AR967JJ7iIA.roa (hash: D6alHFBw87PSRUedkFujLNRW9+yoaIFCiBA4D58vz5s=) 9: H9HhLY73Vk4PBLowFwmqq8qnEvs.roa (hash: yboN6O4NEwN/9jtzcqVhwL7Xp6BAuM4oUmdLAuSlRZc=) 10: TgV1xu8ntnem5zfBufPUC7kUDYk.roa (hash: viX/DxmV4FfM1xJLQLNfoeWsVndpgszxqhUN0jk4LmI=) 11: VuwmrfCYeX-5-G3EACirZwyCtzg.roa (hash: 1HbLhGjSO6WtBBMMxb8oy/0MhfWurHjl8dezIem0SBE=) 12: a_gWGAH_HkQq48s4xebSJs8e9SM.roa (hash: /PN+oDh7g+uIG4/Jaj9EAzn6xGtetecKxsI53eVsu+k=) 13: bwAG82vgu_-f3Xus3V_4NK2WQyQ.roa (hash: qly2qjfn5eyWDXm67Zp4c9WaqGquHK1Au5pP/Lwhj6U=) 14: fczn2jh4ajq3X4s1Mo_fsWXXm34.roa (hash: J5rtauXxpoCURr4ah9LdMnYQCXOtCScxCM8XbJ0ALGA=) 15: j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl (hash: Knlr5HNsm34Ao3g8KS83N6euJzXRFoQxQOUJQ3pOdlc=) 16: tUXcljwuTzZu2HFVE--E_B3XnQ4.roa (hash: Gfw3NzI90kBuKsp8o/a8mrst3zcJzAdSNtNsY8SwJUA=) 17: tgzOB-X3X9hQIl9WIvEW-sVk2TA.roa (hash: dct8dEsqnpkwRMNVp0z4oU64+Yxl27f7QQdtJgkmALY=) 18: xrtDAIk3vWJYXPnZVXMHaoJfbQs.roa (hash: u3EOwyWtPWjn//AFUgWdQ3LoVgi+BzUJpSJKyhN9AL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:0e:4f:37:f5:9e:d2:59:1d:ed:ed:2d:49:3c:0e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Validity Not Before: Jun 28 15:00:57 2025 GMT Not After : Jun 29 15:00:57 2025 GMT Subject: CN=f09aea30a696acdb5544fd77ca2e2d30d81c0fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b4:17:8f:07:3f:89:27:cc:df:2e:cf:47:4d: 13:3f:b1:2d:5a:fd:bf:c3:f2:1c:5f:76:45:87:de: 6d:84:4b:e6:fe:12:5e:a4:7d:ef:4d:88:a8:d8:37: 66:97:f0:4e:5f:53:16:b8:5f:32:a4:34:27:60:45: ef:34:53:0d:22:6e:e9:54:5f:12:90:6f:b7:c3:c8: 9a:40:88:7d:db:a8:eb:85:8f:3f:e5:58:99:0c:b1: 26:88:b9:94:cb:6d:1f:24:fa:5b:31:69:e0:f0:b6: d9:cc:a8:c1:99:78:b0:34:45:47:44:0c:f5:00:ad: 65:01:14:e2:aa:9e:e1:7a:63:06:8d:3f:8d:ae:87: ac:82:24:d1:76:fd:55:c5:a9:d6:4a:dc:cd:31:08: bd:99:f1:a8:d4:bb:88:a7:7f:f2:9b:a1:aa:30:e7: ae:5f:bf:c2:06:cf:cf:25:5b:85:4d:3a:ad:fd:66: ab:6e:3f:5f:d9:f2:57:ec:b2:42:0c:5a:e0:08:84: 57:20:af:82:85:ea:0b:35:65:f0:76:89:75:85:1b: 53:fd:30:1d:4d:8e:dd:13:94:f3:23:4d:bd:19:88: e2:2a:30:2d:73:4d:72:58:87:e7:ec:56:8b:22:ea: a6:e4:67:46:9f:ba:55:cb:f9:8c:c4:46:10:c5:ae: 66:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:9A:EA:30:A6:96:AC:DB:55:44:FD:77:CA:2E:2D:30:D8:1C:0F:B3 X509v3 Authority Key Identifier: keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ee:46:d6:a2:fd:a4:08:57:36:a0:f3:ec:cd:1b:40:92:83: ea:69:5b:cc:3a:25:2c:3c:78:69:9b:4d:76:59:cc:9a:0b:58: c0:7c:d7:82:09:9f:71:31:39:f1:12:d6:32:c0:5f:d5:5b:f0: ab:ed:b5:cf:c3:d3:7a:99:d5:4c:64:75:64:e6:45:f1:15:7c: 98:07:04:47:38:ff:c1:f7:43:d3:4c:f0:ba:68:8d:8b:b8:10: 78:87:89:f7:0d:db:e7:90:6a:9c:68:c0:4b:04:a6:a3:54:43: dc:67:b1:b0:76:11:e0:a1:88:7f:b7:37:1a:ae:2d:98:12:b4: 33:07:9f:10:04:20:72:13:51:bd:01:27:c5:1c:fc:19:85:31: 9a:91:ae:12:b6:3c:82:08:8e:3e:5c:51:d0:6a:38:22:72:b8: 27:ca:ab:f0:54:05:07:04:a5:0b:d0:ae:71:23:a1:5d:66:1e: 52:64:da:8a:ea:87:3d:29:aa:3e:d0:82:b4:27:a7:a0:68:f1: 8a:35:71:99:8a:f5:dc:f0:c1:62:9f:20:f0:26:7c:15:79:de: b0:cf:c6:e7:df:c0:8d:9c:f9:a5:68:7a:41:3d:aa:f1:37:1d: 9d:a1:d0:2a:83:c0:b8:fb:0f:9d:37:26:e8:8d:15:0b:85:ad: bc:a4:e4:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3Dk839Z7SWR3t7S1JPA7QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2 MmU1NmUwHhcNMjUwNjI4MTUwMDU3WhcNMjUwNjI5MTUwMDU3WjAzMTEwLwYDVQQD EyhmMDlhZWEzMGE2OTZhY2RiNTU0NGZkNzdjYTJlMmQzMGQ4MWMwZmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rQXjwc/iSfM3y7PR00TP7EtWv2/ w/IcX3ZFh95thEvm/hJepH3vTYio2Ddml/BOX1MWuF8ypDQnYEXvNFMNIm7pVF8S kG+3w8iaQIh926jrhY8/5ViZDLEmiLmUy20fJPpbMWng8LbZzKjBmXiwNEVHRAz1 AK1lARTiqp7hemMGjT+NroesgiTRdv1VxanWStzNMQi9mfGo1LuIp3/ym6GqMOeu X7/CBs/PJVuFTTqt/Warbj9f2fJX7LJCDFrgCIRXIK+CheoLNWXwdol1hRtT/TAd TY7dE5TzI029GYjiKjAtc01yWIfn7FaLIuqm5GdGn7pVy/mMxEYQxa5mgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCa6jCmlqzbVUT9d8ouLTDYHA+zMB8GA1UdIwQY MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt YjBiMzVhMzRlMzg4LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4 LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+5G1qL9 pAhXNqDz7M0bQJKD6mlbzDolLDx4aZtNdlnMmgtYwHzXggmfcTE58RLWMsBf1Vvw q+21z8PTepnVTGR1ZOZF8RV8mAcERzj/wfdD00zwumiNi7gQeIeJ9w3b55BqnGjA SwSmo1RD3GexsHYR4KGIf7c3Gq4tmBK0MwefEAQgchNRvQEnxRz8GYUxmpGuErY8 ggiOPlxR0Go4InK4J8qr8FQFBwSlC9CucSOhXWYeUmTaiuqHPSmqPtCCtCenoGjx ijVxmYr13PDBYp8g8CZ8FXnesM/G59/AjZz5pWh6QT2q8TcdnaHQKoPAuPsPnTcm 6I0VC4WtvKTk2w== -----END CERTIFICATE-----Generated at Sat Jun 28 22:29:59 2025 by rpki-client