$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft File: i4JDP_6UvzU2_sMnVD05YVggIHI.mft (raw, json) Hash identifier: bG/vh+lrBDAuYeRft0YCgCx6zHe1YWHZO5gFz1jQuJM= Subject key identifier: FC:4D:31:89:0F:0E:B1:A4:14:09:B6:2B:8A:5E:91:E7:34:F2:7D:1F Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72 Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072 Certificate serial: 0197B96A83D7176DF9EE8CD70A06F59A1E10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft Manifest number: 0BCE Signing time: Sun 29 Jun 2025 02:00:54 +0000 Manifest this update: Sun 29 Jun 2025 02:00:54 +0000 Manifest next update: Mon 30 Jun 2025 02:00:54 +0000 Files and hashes: 1: 4fxQzx_8ByWwMKk9dyXM0XEaMys.roa (hash: /pQNDc4tCpOKVTxdQ/1sSXEuYSGaPkaAPaOzkIFfq/U=) 2: D0yJcu0JvPJ2IZ6qvrN_68RL81A.roa (hash: NXJKvgJ+KpYYxv4h48ZyQkogSfsaqjnCJ9F84sJ/8IA=) 3: W9TFdD94lkINNpe0yudKptP_VLs.roa (hash: cP06PmfxXfnVdgeDD5yGsXjPUheUvD8ffIUpVLl0OGI=) 4: fAdRVcLtp1Hdo62qAxJzNRyFLms.roa (hash: /9qm18tTMk3ZVKpb3SBqcWWsV0TFo0WtQqugq7BXDfU=) 5: fk9piBmxadoxJuP7Wx4UPTdBTGM.roa (hash: P0efcRRoA7jHUP2kLMx2ZKnIu/J2T6OthYnnV4Yj06A=) 6: gYA_rHJcDyZ1I8qy1R4L0zDW9qI.roa (hash: u5z8BQnf6PynI8NBRk8KSGbQCrjifEnXJWVptV9ywSs=) 7: i4JDP_6UvzU2_sMnVD05YVggIHI.crl (hash: nZzrPSKnJqzBJmWO/c/zpehKgTftw2EwxDTa+zAYNiA=) 8: k_0zEMHxmfACdt3JyIQe32n-3UE.roa (hash: 1zpkXrC9Bl+aFyn5Yr4Xer+2HoYHjHajiHX7XweXMcg=) 9: xNtGHv1YLmz0baQ6fFAsVkQIQLw.roa (hash: glTrDTx+iBPrwn7/BNyzFNiZr9vyz3H84OvS4u/lrN4=) 10: yx9i8LZCbjvaDebLsn4vp_1QQsw.roa (hash: koRh5dNP2sZyFodyKIh0Iqwubeq7l02U0bZSoimi8yU=) 11: yyP9fmeZAYp1K1vaVu0uJv4Agws.roa (hash: egmTg6Tzum2/xFgjHv1aVGDhof0qC374Rh2lR+uVm0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b9:6a:83:d7:17:6d:f9:ee:8c:d7:0a:06:f5:9a:1e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b82433ffe94bf3536fec327543d396158202072 Validity Not Before: Jun 29 02:00:54 2025 GMT Not After : Jun 30 02:00:54 2025 GMT Subject: CN=fc4d31890f0eb1a41409b62b8a5e91e734f27d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e0:6b:56:bc:38:b7:d5:91:e2:54:be:1c:ab: fc:b1:b8:64:ad:e3:89:60:34:de:ba:e3:84:61:1d: d9:bb:88:3c:aa:93:ac:76:ef:31:ac:27:84:d5:f1: d1:2c:9d:68:42:ba:84:f8:6a:7e:4f:b0:cf:37:83: a9:3a:a9:f6:f1:f5:48:ab:1d:82:ff:e8:71:4a:3a: 3c:0c:62:83:80:77:14:97:83:04:62:37:be:c9:5a: c0:45:99:63:0b:ea:d1:f6:ba:84:7c:ca:58:6b:2c: 86:84:8c:b0:0e:20:10:2b:b7:0d:f0:5b:27:a6:57: 97:66:f8:e3:4e:a4:56:1f:f5:70:c2:dc:88:9b:33: 4c:1c:73:fd:29:48:2d:f1:14:79:bf:68:85:4d:58: 97:34:eb:a8:02:8e:8f:99:7e:f0:ea:90:d3:d1:73: 45:04:23:b9:e3:f1:79:a3:fe:56:44:d3:6f:ba:31: 95:d0:40:d8:16:54:0b:98:c6:7a:08:bf:9c:bc:4c: 2f:bd:94:d0:f7:86:86:75:74:97:aa:33:42:fc:d2: a8:8d:00:d6:f1:08:11:52:db:ec:e9:1f:2f:c8:a6: 68:a2:f8:79:a1:72:5c:2b:8e:87:6e:82:fd:ae:a9: 36:a1:2b:8c:99:73:39:06:38:64:4a:28:23:15:ae: de:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:4D:31:89:0F:0E:B1:A4:14:09:B6:2B:8A:5E:91:E7:34:F2:7D:1F X509v3 Authority Key Identifier: keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a7:de:75:42:e7:e7:f5:4f:d9:cd:6a:d8:6d:cc:e9:c6:4d: ce:9d:ac:04:07:36:de:4b:0b:81:b1:5d:66:46:2a:1b:53:6c: 81:0b:fd:09:be:94:e3:b0:92:73:d7:2f:4a:a1:7c:c2:54:dd: e3:99:b9:a9:9d:2e:c8:e5:37:31:83:8b:44:c1:9b:22:73:2f: f6:e4:1b:53:f4:ad:50:cc:cd:63:0c:42:fe:93:c1:49:10:c3: 8b:54:18:cd:c4:99:f2:72:1d:a0:24:6f:e7:fc:99:7a:d7:a5: 6f:0d:3d:35:a5:5d:5b:57:78:fe:79:b3:40:3f:a3:c5:eb:9e: 25:8d:b1:e4:ba:c3:d0:cd:60:27:ab:e6:49:d6:91:0a:4b:4e: 17:ab:e5:09:fd:36:73:e4:ff:23:c8:ce:89:9d:06:26:b6:9b: cc:6c:cb:ec:bd:db:da:4c:c9:8d:9e:2f:4b:68:93:a7:56:bd: bc:ec:dc:05:26:fc:6a:37:9a:57:f2:e9:0f:ec:e4:da:47:6b: 8f:b7:91:33:1c:e5:ea:cb:5a:00:fc:e6:ef:2e:3d:27:a6:22: 3f:2d:29:c5:e7:09:d0:4c:aa:61:e6:63:36:8b:f0:62:51:13: b7:37:92:08:00:1c:90:7a:63:e1:90:dc:8b:22:be:29:54:f2: 3e:5b:5c:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe5aoPXF2357ozXCgb1mh4QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiODI0MzNmZmU5NGJmMzUzNmZlYzMyNzU0M2QzOTYxNTgy MDIwNzIwHhcNMjUwNjI5MDIwMDU0WhcNMjUwNjMwMDIwMDU0WjAzMTEwLwYDVQQD EyhmYzRkMzE4OTBmMGViMWE0MTQwOWI2MmI4YTVlOTFlNzM0ZjI3ZDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+BrVrw4t9WR4lS+HKv8sbhkreOJ YDTeuuOEYR3Zu4g8qpOsdu8xrCeE1fHRLJ1oQrqE+Gp+T7DPN4OpOqn28fVIqx2C /+hxSjo8DGKDgHcUl4MEYje+yVrARZljC+rR9rqEfMpYayyGhIywDiAQK7cN8Fsn pleXZvjjTqRWH/VwwtyImzNMHHP9KUgt8RR5v2iFTViXNOuoAo6PmX7w6pDT0XNF BCO54/F5o/5WRNNvujGV0EDYFlQLmMZ6CL+cvEwvvZTQ94aGdXSXqjNC/NKojQDW 8QgRUtvs6R8vyKZoovh5oXJcK46HboL9rqk2oSuMmXM5BjhkSigjFa7eUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxNMYkPDrGkFAm2K4pekec08n0fMB8GA1UdIwQY MBaAFIuCQz/+lL81Nv7DJ1Q9OWFYICByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYt MmRkNzg5MGRjNjg5LzEvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYtMmRkNzg5MGRjNjg5 LzEvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKfedULn 5/VP2c1q2G3M6cZNzp2sBAc23ksLgbFdZkYqG1NsgQv9Cb6U47CSc9cvSqF8wlTd 45m5qZ0uyOU3MYOLRMGbInMv9uQbU/StUMzNYwxC/pPBSRDDi1QYzcSZ8nIdoCRv 5/yZetelbw09NaVdW1d4/nmzQD+jxeueJY2x5LrD0M1gJ6vmSdaRCktOF6vlCf02 c+T/I8jOiZ0GJrabzGzL7L3b2kzJjZ4vS2iTp1a9vOzcBSb8ajeaV/LpD+zk2kdr j7eRMxzl6staAPzm7y49J6YiPy0pxecJ0EyqYeZjNovwYlETtzeSCAAckHpj4ZDc iyK+KVTyPltcjQ== -----END CERTIFICATE-----Generated at Sun Jun 29 08:24:53 2025 by rpki-client