$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft File: KX75vv0afiTAzJcpmH_AZda3Ey8.mft (raw, json) Hash identifier: h9Gw/PTlVmYHJKpDUYIMSBsaUb3PseuLJNpq1xHRjEY= Subject key identifier: 0A:2F:63:D0:28:B9:E4:5D:78:94:E0:62:8A:53:FB:17:93:77:F1:00 Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Certificate serial: 0197B6326AC2051FBD895C1D3C0A06B85113 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft Manifest number: 055C Signing time: Sat 28 Jun 2025 11:00:46 +0000 Manifest this update: Sat 28 Jun 2025 11:00:46 +0000 Manifest next update: Sun 29 Jun 2025 11:00:46 +0000 Files and hashes: 1: 1-Qc-jMtuCJmDJ99XnaveA8pYcIY.roa (hash: n91DHx85S8Gjw41fymDMOdRoZ/qxlLYICezT8ZEtkRM=) 2: 7lNOTrEwqfi1ykx8mI82GLbCVSg.roa (hash: FZ2hfje/O61YReLW5yRaWN5SmQ1/e2mAoT18RMzuTMM=) 3: DC8CWnfWr0kQCJUXXP37JYlG3bs.roa (hash: hIJ82Bht26+DJ40TdTwMmY9/6cclogWpDkPQZ7x1T3M=) 4: EE_wtY_jOWFrr7fkMKsqtDjLk_M.roa (hash: bPRNvFCrauDbjeBVD0prKiUlLOERe0dc5QDfoGRuOTo=) 5: KX75vv0afiTAzJcpmH_AZda3Ey8.crl (hash: kDXdirSZfpJBcd8dI1YKYkeZePIhpjfQNpSR+UC/XTY=) 6: Ow6xOfingvBCtHoNkaHGobxC5yY.roa (hash: NhFSRa+v/S1zW+iyQy+gxANBr6Bnqty2hhUOwum97Kc=) 7: QChegxRLNPsgM4aZ3Xr6VhdLIWc.roa (hash: bRcFRsu1/yeWRw6CVou2c0H6TdcYO6U68qWIBkemHjQ=) 8: V0aRJCOG2a9twiI1SK4HfmRChII.roa (hash: xPnpahcVRHcbxfnhq7t0F7epLdK24cqdjPN51uTlfmE=) 9: cBKQe1No6Wf-B3FmLfpXGNcc_I8.roa (hash: Xi+GnpcIV9drKvTmQHNYIPB6evWNG3aHkh9CmwgJtg0=) 10: hKRvEPMVo2ukUILwmPta9_N3Dm4.roa (hash: qTgr935WkDSGh45Ek2R2g/eV9pnfadByRLqS2Wh5HdI=) 11: nendNgfVYn3Er_Jx5FR9_K0MhAI.roa (hash: Zo4nTYqJK3HMiwWvWWXaOyWIMzLwcZzzdn6p7ZMhRf0=) 12: rrgsKOzotuX_T9JtkCjsuwuT608.roa (hash: nbQl5tRFzUGsdMI8eU6ZprMteK4jRGohNhPIbe7S4Js=) 13: ws65NnH7cc5LX3ZtkutF5lwgOTo.roa (hash: 3tggzgIge6V0BsIfvy+BLekh4WUZ+47Y39glMLBsTTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:32:6a:c2:05:1f:bd:89:5c:1d:3c:0a:06:b8:51:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Validity Not Before: Jun 28 11:00:46 2025 GMT Not After : Jun 29 11:00:46 2025 GMT Subject: CN=0a2f63d028b9e45d7894e0628a53fb179377f100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e6:cb:02:59:f8:72:c8:10:ed:9d:37:11:50: 58:5f:78:d5:73:2d:3c:08:9e:41:6e:28:21:e4:03: 1d:40:b2:90:34:d3:4a:57:4b:fc:e2:b8:74:9f:56: 2e:68:4c:2d:c5:90:7b:fb:b6:a8:4c:4b:55:07:e2: 42:f6:7b:ef:d3:a0:84:56:d1:32:06:46:29:39:0b: a9:36:b0:a5:e4:b7:fe:ed:d1:9d:a4:ca:94:e3:93: b8:b3:c2:20:b6:41:38:a3:62:f1:d3:05:aa:ef:d0: bc:12:10:0c:ea:3c:90:36:17:02:99:60:c6:2a:39: 73:d3:4d:45:e7:3b:27:48:c6:aa:7c:d8:8b:04:23: fb:6b:6e:b2:b6:1b:d7:ef:19:4e:c5:3e:0f:50:3e: a7:00:23:5f:dc:65:49:f7:e9:b8:b9:c8:35:3d:46: 32:c6:8f:2c:6d:32:73:f0:fa:b2:c7:c4:68:10:df: fe:ef:07:b8:ec:54:3b:d4:3c:ea:2b:d6:cb:24:25: 62:fd:05:34:59:cb:1f:16:63:f1:cf:bf:89:48:a2: 69:59:c2:4a:c2:e8:3f:73:03:c0:36:97:ac:58:ee: a0:ed:15:f7:6b:38:95:2c:a3:2f:2c:23:9e:77:60: 0f:27:4f:04:16:21:a8:5c:f7:5c:ae:bc:0e:59:2b: 04:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2F:63:D0:28:B9:E4:5D:78:94:E0:62:8A:53:FB:17:93:77:F1:00 X509v3 Authority Key Identifier: keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:6b:c1:0d:2c:29:9d:92:1d:7f:62:0c:90:71:cd:ad:59:12: d6:9d:7e:9d:32:fc:72:f4:6e:e9:40:e3:c5:d6:fa:d6:a8:b4: 44:62:a2:01:27:87:ee:55:7d:8c:e5:a2:8a:c7:47:89:6f:d9: b7:1e:f6:e8:39:e9:85:e9:81:4b:5e:d3:a3:ee:a9:23:56:dc: bb:17:49:0c:e1:60:31:9a:9d:b0:96:8a:9c:77:39:68:d3:db: 49:2f:6b:f4:0f:56:b6:f5:29:a8:2e:5c:92:b8:61:ec:88:97: a0:e7:19:73:a6:9d:85:e0:81:56:9a:a8:26:e0:bc:f5:8d:64: 4f:7d:8c:32:81:23:48:f2:ae:a8:d3:8b:34:c2:db:38:dd:06: e5:65:a4:ad:17:56:d7:f3:24:66:4c:d6:91:b4:12:a0:02:ca: 75:cb:01:82:74:70:77:76:30:e0:8a:b3:c8:be:d9:05:0e:af: 03:eb:a2:da:76:31:7b:7c:e7:db:f4:0f:d2:90:ae:1a:51:6b: 1f:07:5a:33:d5:06:22:0c:fd:17:a6:b8:dd:a2:b8:6d:6c:6f: ae:3c:f4:59:3e:24:05:67:66:1f:bb:ff:5c:9d:04:e9:2e:74: 1a:58:48:42:ec:52:25:9d:44:91:a1:34:4a:4e:94:dd:fe:5b: 7c:77:77:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2MmrCBR+9iVwdPAoGuFETMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi NzEzMmYwHhcNMjUwNjI4MTEwMDQ2WhcNMjUwNjI5MTEwMDQ2WjAzMTEwLwYDVQQD EygwYTJmNjNkMDI4YjllNDVkNzg5NGUwNjI4YTUzZmIxNzkzNzdmMTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+bLAln4csgQ7Z03EVBYX3jVcy08 CJ5Bbigh5AMdQLKQNNNKV0v84rh0n1YuaEwtxZB7+7aoTEtVB+JC9nvv06CEVtEy BkYpOQupNrCl5Lf+7dGdpMqU45O4s8IgtkE4o2Lx0wWq79C8EhAM6jyQNhcCmWDG Kjlz001F5zsnSMaqfNiLBCP7a26ythvX7xlOxT4PUD6nACNf3GVJ9+m4ucg1PUYy xo8sbTJz8Pqyx8RoEN/+7we47FQ71DzqK9bLJCVi/QU0WcsfFmPxz7+JSKJpWcJK wug/cwPANpesWO6g7RX3aziVLKMvLCOed2APJ08EFiGoXPdcrrwOWSsEQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAovY9AoueRdeJTgYopT+xeTd/EAMB8GA1UdIwQY MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt ZGVlNzY4NjAwMTNkLzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhmvBDSwp nZIdf2IMkHHNrVkS1p1+nTL8cvRu6UDjxdb61qi0RGKiASeH7lV9jOWiisdHiW/Z tx726DnphemBS17To+6pI1bcuxdJDOFgMZqdsJaKnHc5aNPbSS9r9A9WtvUpqC5c krhh7IiXoOcZc6adheCBVpqoJuC89Y1kT32MMoEjSPKuqNOLNMLbON0G5WWkrRdW 1/MkZkzWkbQSoALKdcsBgnRwd3Yw4IqzyL7ZBQ6vA+ui2nYxe3zn2/QP0pCuGlFr HwdaM9UGIgz9F6a43aK4bWxvrjz0WT4kBWdmH7v/XJ0E6S50GlhIQuxSJZ1EkaE0 Sk6U3f5bfHd3lQ== -----END CERTIFICATE-----Generated at Sat Jun 28 19:21:59 2025 by rpki-client