$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft File: CoH-kFn2ggvBitWALy8fynfSVLc.mft (raw, json) Hash identifier: 6LBaTv8EKc9FO3SfWMzOhpZgePEOG2uO5cx6Mmiywyg= Subject key identifier: 71:1D:88:98:D1:4E:39:28:B5:54:5E:8B:F9:E3:D4:B6:ED:86:7A:73 Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Certificate serial: 0197B6D78BD06A1B62614E282B54F6E86BEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft Manifest number: 0916 Signing time: Sat 28 Jun 2025 14:01:08 +0000 Manifest this update: Sat 28 Jun 2025 14:01:08 +0000 Manifest next update: Sun 29 Jun 2025 14:01:08 +0000 Files and hashes: 1: 31z7eSu8--35kebgOlCIABBeVf8.roa (hash: Bo6lIvIlV0RX6xhodzhO7tuvgscKOLMBcfTJSKlUYZw=) 2: 7pPLJaN3OTQBK8i-P4GOQNKJPho.roa (hash: HpLQLLrJKx/bS+zdiKUm5TCX+jRSuh5jVP1YSt/MOZY=) 3: CoH-kFn2ggvBitWALy8fynfSVLc.crl (hash: McN/o/oVIe7XOf1JRrUoJzPAcGGavYDT8g4vSXnL9Rc=) 4: EacbpO8P-LkG-h50-C35fVYJXyI.roa (hash: btUaf5jDz02025fLzDlihBUOmr88cX2MxuDiHPb5dc4=) 5: FstRBv2kO53NDHW81Q9Mg07SWg4.roa (hash: +uStvYqgj5hn3d6BL0rwAnmTzIsGb1x7W+G4jAHTkdA=) 6: Gf8Y2t4y9XW51teYl9-IOJM-QkE.roa (hash: JzLxoz0gWXWBbhQLZinkEP2bb0OKmAdUFJyyBJ71KUI=) 7: N0ylFt5LVYNjTI-_TsSgO84trzU.roa (hash: FGN5RCpPLee+DVEx92LqF5VUyDDoLbxxrafkYHnOVZg=) 8: PEEbtcraLxJZAPZLAW5H_KDLDwQ.roa (hash: wU0HPJ884+fnbW1G1BaCynti9gWD3Sn+0YrIsJUp3ns=) 9: hLdZE5q1FOXSO44ZofCjRXN9z7I.roa (hash: CmOCZv7BugezIWG5ZPHeIaee5S3CP9UP9zRJfwRzazg=) 10: i1bI7bZVKfcJ9vCnWPYEzcCSqOc.roa (hash: I9SME80ARJLDqvqmW5BBXCvNlxHc4Su4PKuf6AZPdG4=) 11: n_d7GjbZ9YbYK045nkHL_lX76pM.roa (hash: L6McSAJwh8T7ZY3ArgurepjkJRDGFkS06sAchDylLyc=) 12: pW-Kl5UPWqu6KG3_J4t1h52HuR0.roa (hash: 0HOBimxzzdToQy38vYlAJbGZVaBtPNrg0qioOLxF/+Q=) 13: tlqKEYYvFMWYK-JPntFn1nyKI1U.roa (hash: /wIoPxgkbhHCyNQ8NB2J0bNqG5fb1wxitY8EONuXMt0=) 14: yFPiywRMEHaITt3TRPzJux8bzAU.roa (hash: WnTskmfJ1KLR7sA0SYoAyMqXx6u45IJAhh3f7ztydOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:d7:8b:d0:6a:1b:62:61:4e:28:2b:54:f6:e8:6b:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Validity Not Before: Jun 28 14:01:08 2025 GMT Not After : Jun 29 14:01:08 2025 GMT Subject: CN=711d8898d14e3928b5545e8bf9e3d4b6ed867a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:56:f2:cd:dc:2b:50:12:59:0f:b8:40:b7:38: a3:dc:50:9b:a5:17:c4:ce:c2:24:f7:03:73:3b:2b: a8:d2:a0:07:7d:4e:ce:42:cc:02:fc:16:46:e3:31: d7:b7:cd:19:37:c7:a5:fe:b2:74:03:63:95:65:65: 7b:50:f5:f8:3f:0e:b6:58:87:a5:23:b7:a8:5c:3e: 99:6e:10:a5:38:a2:9d:dd:f3:ee:5b:da:2d:c2:e3: d4:32:33:19:81:c9:6f:ab:a2:49:a3:bc:8c:66:91: e8:6d:1a:48:b4:7f:65:d1:43:f9:82:98:0b:e1:f7: 3f:d3:2a:17:14:10:dd:d5:37:d4:b0:00:da:4f:7a: 4f:18:8e:73:44:e5:af:17:df:ce:22:e4:02:80:bd: f1:bd:27:df:1f:b3:fa:3c:46:fa:87:66:ff:b2:89: 53:46:e9:aa:c0:46:a7:51:4c:3e:35:11:89:81:af: 60:ef:71:18:d1:0f:90:89:86:ee:20:af:0b:05:70: 1d:ef:42:c3:61:80:cf:9f:fd:02:d3:71:0a:1c:3b: 93:47:e0:79:c3:3d:e5:d4:fb:4f:48:82:3b:64:c2: 4d:01:02:3b:ee:6e:4a:6b:9c:e2:21:23:56:db:9f: ad:37:c6:0d:b6:a6:5a:a7:16:ee:6d:56:aa:4e:4c: 25:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1D:88:98:D1:4E:39:28:B5:54:5E:8B:F9:E3:D4:B6:ED:86:7A:73 X509v3 Authority Key Identifier: keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:d7:cc:7d:b3:48:b1:a0:03:48:e2:0d:c0:d6:2d:cb:be:a9: cc:0a:34:57:fb:0c:1b:ac:4b:3c:02:a5:68:eb:6c:72:c9:da: fa:39:44:85:32:df:04:02:67:4e:55:b2:8f:93:64:b4:ea:86: ea:2d:c1:3d:50:f0:aa:9c:41:d7:d4:0a:19:53:71:69:5a:df: 0c:8c:14:7c:6c:78:1f:41:69:f5:a2:b9:04:e9:01:76:d8:e8: 4b:70:a2:f8:a4:38:35:fa:d6:7c:e7:c8:cb:e6:1a:8d:31:4f: 29:f8:95:a2:df:61:c9:04:df:7d:0d:3c:4c:a4:c9:02:61:9d: 5f:b9:20:76:c7:49:d9:c0:56:56:b6:f7:ff:df:cb:cc:dd:8d: cc:a9:e4:7d:0e:ed:48:a1:ed:66:59:bd:68:3e:e9:0d:9a:7c: 94:bb:a4:b2:57:97:21:ed:0e:d0:a6:1d:6e:79:a1:70:b4:a4: 6f:f9:26:ac:72:a5:63:63:c1:61:b3:ae:59:90:68:6a:09:2c: 53:9d:40:e2:f4:b7:3a:6d:a6:49:9d:c0:36:bf:8f:55:93:85: fe:ba:bb:68:0a:d0:fb:71:e3:24:f4:82:5d:ea:42:d4:43:05: f8:0f:07:19:38:0f:73:e8:56:c9:69:e8:21:8e:42:c3:60:a9: 23:9a:6f:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe214vQahtiYU4oK1T26GvuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk MjU0YjcwHhcNMjUwNjI4MTQwMTA4WhcNMjUwNjI5MTQwMTA4WjAzMTEwLwYDVQQD Eyg3MTFkODg5OGQxNGUzOTI4YjU1NDVlOGJmOWUzZDRiNmVkODY3YTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlbyzdwrUBJZD7hAtzij3FCbpRfE zsIk9wNzOyuo0qAHfU7OQswC/BZG4zHXt80ZN8el/rJ0A2OVZWV7UPX4Pw62WIel I7eoXD6ZbhClOKKd3fPuW9otwuPUMjMZgclvq6JJo7yMZpHobRpItH9l0UP5gpgL 4fc/0yoXFBDd1TfUsADaT3pPGI5zROWvF9/OIuQCgL3xvSffH7P6PEb6h2b/solT RumqwEanUUw+NRGJga9g73EY0Q+QiYbuIK8LBXAd70LDYYDPn/0C03EKHDuTR+B5 wz3l1PtPSII7ZMJNAQI77m5Ka5ziISNW25+tN8YNtqZapxbubVaqTkwl5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEdiJjRTjkotVRei/nj1LbthnpzMB8GA1UdIwQY MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt YmYwNWFjYzgyYmQxLzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAltfMfbNI saADSOINwNYty76pzAo0V/sMG6xLPAKlaOtscsna+jlEhTLfBAJnTlWyj5NktOqG 6i3BPVDwqpxB19QKGVNxaVrfDIwUfGx4H0Fp9aK5BOkBdtjoS3Ci+KQ4NfrWfOfI y+YajTFPKfiVot9hyQTffQ08TKTJAmGdX7kgdsdJ2cBWVrb3/9/LzN2NzKnkfQ7t SKHtZlm9aD7pDZp8lLuksleXIe0O0KYdbnmhcLSkb/kmrHKlY2PBYbOuWZBoagks U51A4vS3Om2mSZ3ANr+PVZOF/rq7aArQ+3HjJPSCXepC1EMF+A8HGTgPc+hWyWno IY5Cw2CpI5pvig== -----END CERTIFICATE-----Generated at Sat Jun 28 19:08:23 2025 by rpki-client