$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft File: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft (raw, json) Hash identifier: KlY/95nYkKZmWY1UkQsu36/vfgmSkwMWKlPWINp8v+w= Subject key identifier: 47:76:64:A2:53:81:43:A6:FE:06:CA:82:35:CD:92:17:7F:A9:B1:D5 Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Certificate serial: 0197B89025D7B370F6176AC44C77344E6527 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft Manifest number: 0F5D Signing time: Sat 28 Jun 2025 22:02:24 +0000 Manifest this update: Sat 28 Jun 2025 22:02:24 +0000 Manifest next update: Sun 29 Jun 2025 22:02:24 +0000 Files and hashes: 1: 7InXKoGXPyPmSkShdNo1bN5BHPE.roa (hash: p0vQNoVwsgdCf98zXzcil2JDwtIbKg4o52YVuAX43Qg=) 2: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl (hash: mSByRBCABfKQQKHGdGSmALJxPyELGvtUxOns4BZp74c=) 3: G7eTk3jqB-BdA_Wy3K2E2YFtyTA.roa (hash: OtseOoY4gfu7tKjqn1wIwpg1/zv9XoIf0fx8DQ1CUfM=) 4: ISNHkwTdIse1R5eVAbZVrpNzf7I.roa (hash: aWcNBCaUk6iVQl/ljrkexa0tplOypXs9VyEvekzMA3M=) 5: L0ujmwzkJ6RRH45eugAjMYC2Zhg.roa (hash: ZYuGlloJDpR2SY2TTczc6v50q6dosW6j6YAj25G96Pg=) 6: LII7hRC3tP9UTUOEbD-OlE2YLz0.roa (hash: 2G0IT+KoXJQxpXp8HjaK3udKnKhR8XLas866IuV7Mj4=) 7: MGAJtndIL2Zkck_RVFiKK_Egp5c.roa (hash: 3Dl+p66+/Z3qtyr+Z1rkPfMp8vG5nBq1fl9w3qHRGM4=) 8: VTdQuPLguO6Ibw0Th9ypJCxyOf8.roa (hash: ipcRPToVDEN7EVH1AfqkAeCn3ymsz/f4y1+i87V66wQ=) 9: _nLYAZC-VddX97JjR5Q6LKKqBQ4.roa (hash: ndREz8aC1hd1w5pe58qePL+6kw9PyDSZ6Q1HeOlC7Rc=) 10: d1Mc0OsWnepemmVerPa7kdZl1N8.roa (hash: JRdvIEtlRj7j9yeTQYkXzcTmst5QyvuiftJaDhMJ8Og=) 11: gZtcQ4r6Woqv34G6dpT_HEC-DoY.roa (hash: FjGgXSzWLOa8xqz/zgnt2HT+YvKm/u5bq1IXo4VHelQ=) 12: k_9bhWj2JcQnyMq-FPfEv0otOUw.roa (hash: Zs3oxA2HTYXtiE5lUDi8OJy4SVF/+vQT5qkuzqaf+ew=) 13: o4_pEwPipmYi6C3PXNhpC7by3MA.roa (hash: HbprNAxeP8NoQY7jwdw1Rs3l1Tj/TI85puQfPIX124c=) 14: p5_bRG9M5kT8MStfkRHRT1v8cg0.roa (hash: ZjQG7VMMupt1nuY8BdmGWD7HOxruqtYbna7mlcKvAUo=) 15: qjxC3CMWMpiM1TpibiIWl8s1Se0.roa (hash: vL7m0foCqcx4qZwFUYV1ieilxVwO5UgoFDNdvDch1DE=) 16: t0gWV72zLQLExI3pDHKlUQNMCLg.roa (hash: sZqkeiCyvYuQZJfxR8h/KOL8f5qWehA/zicZawvNouA=) 17: wj2VxfuvQPp_y-B-S4cBoG4no9E.roa (hash: NUb/774hisZdKkcNsYbowzixlPdgcgSeN+DazRzxjeU=) 18: yKoxV-6M6xkebvfJ-LK1Pi2FfE4.roa (hash: BokFvMbsrr4nAc7qB6GIDJeX4FQmEPo1VOjQtgLqvj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:90:25:d7:b3:70:f6:17:6a:c4:4c:77:34:4e:65:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Validity Not Before: Jun 28 22:02:24 2025 GMT Not After : Jun 29 22:02:24 2025 GMT Subject: CN=477664a2538143a6fe06ca8235cd92177fa9b1d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9d:cf:e6:85:90:c1:92:0c:13:6f:5a:27:2c: a7:5c:fc:6e:33:2a:34:0e:c4:92:1c:c6:3a:11:09: 69:2e:ed:81:0f:ac:9f:66:04:3a:6a:1f:e4:ab:79: 31:5e:60:e3:7e:d8:65:70:fd:dd:4e:73:e2:e2:b8: 2f:c8:d1:48:66:43:83:86:25:b4:e4:f7:b7:12:92: d0:12:1e:3e:2c:5a:aa:71:c7:5f:fe:2b:fe:d3:10: a9:ee:05:10:f2:5c:12:62:e1:d8:e3:8d:86:6c:1b: d9:85:87:e2:eb:cd:b8:f7:67:b6:c9:e5:e5:6e:68: 95:34:68:5c:e2:61:92:c1:04:b7:c9:e8:c4:bf:ce: 70:d5:1c:4a:43:28:7c:ed:6c:7e:40:41:97:f6:8d: 06:be:f5:0a:d7:3a:4a:07:a0:be:43:c6:ed:aa:40: cd:d1:ea:e9:2c:6f:3e:8c:d4:95:3a:0f:65:82:2d: 42:44:ba:41:14:18:fa:87:53:d5:36:4e:cf:46:73: 1c:05:51:1e:84:eb:eb:d4:2e:82:75:da:31:0e:07: 36:a9:71:28:60:87:83:7e:9c:d2:47:b6:38:be:dc: fb:d7:ed:c4:50:fe:9f:91:81:c7:f5:5c:a2:1f:13: 03:ad:a7:17:bd:d0:b5:22:26:53:c4:fd:c8:79:0a: 1c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:76:64:A2:53:81:43:A6:FE:06:CA:82:35:CD:92:17:7F:A9:B1:D5 X509v3 Authority Key Identifier: keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:74:99:9c:65:43:b9:4c:bb:fa:4d:01:a2:53:ee:f6:7b:7f: e5:93:c5:d3:6f:2f:7d:3c:fe:fb:76:c1:5d:aa:c1:8c:c4:2f: bb:c6:9e:40:2f:2d:6b:81:85:58:78:e3:a5:28:4b:00:b2:d4: a3:d4:61:30:be:51:d9:40:8a:0d:3e:6d:2c:d0:41:21:51:62: 93:4a:e3:52:94:79:80:81:ba:cd:d6:fc:2b:66:86:cd:d0:70: d4:be:31:f3:3a:65:6b:95:5c:83:a5:6e:71:3a:6d:6b:ba:1f: dc:2d:2d:0a:17:82:92:8f:c3:4e:f1:c6:b5:7c:50:17:21:73: 65:da:c7:bc:80:ea:13:98:a0:35:8b:47:f1:86:44:37:c2:17: a5:a4:71:9c:9c:c7:0f:bb:ca:90:6b:55:0a:12:05:b1:db:a8: b3:35:49:20:6c:67:5b:6f:7e:d7:e9:7b:bd:cf:0c:dd:d7:b2: 93:ac:88:ae:4c:8a:0a:9e:5d:34:0f:6d:55:c2:33:03:a0:74: 55:d3:b7:4b:03:d1:2f:dd:7c:f2:80:e7:c7:36:00:d8:48:3a: 32:14:ec:2f:d0:d2:f9:3c:d3:83:88:25:06:e0:0d:cc:5c:15: 6d:19:b7:8b:d7:38:48:2f:fb:df:89:10:34:05:19:da:c5:34: 29:da:11:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4kCXXs3D2F2rETHc0TmUnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5 MTk3ZjIwHhcNMjUwNjI4MjIwMjI0WhcNMjUwNjI5MjIwMjI0WjAzMTEwLwYDVQQD Eyg0Nzc2NjRhMjUzODE0M2E2ZmUwNmNhODIzNWNkOTIxNzdmYTliMWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ3P5oWQwZIME29aJyynXPxuMyo0 DsSSHMY6EQlpLu2BD6yfZgQ6ah/kq3kxXmDjfthlcP3dTnPi4rgvyNFIZkODhiW0 5Pe3EpLQEh4+LFqqccdf/iv+0xCp7gUQ8lwSYuHY442GbBvZhYfi682492e2yeXl bmiVNGhc4mGSwQS3yejEv85w1RxKQyh87Wx+QEGX9o0GvvUK1zpKB6C+Q8btqkDN 0erpLG8+jNSVOg9lgi1CRLpBFBj6h1PVNk7PRnMcBVEehOvr1C6CddoxDgc2qXEo YIeDfpzSR7Y4vtz71+3EUP6fkYHH9VyiHxMDracXvdC1IiZTxP3IeQocqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEd2ZKJTgUOm/gbKgjXNkhd/qbHVMB8GA1UdIwQY MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt MmQxNDNkN2I4NTNjLzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxXSZnGVD uUy7+k0BolPu9nt/5ZPF028vfTz++3bBXarBjMQvu8aeQC8ta4GFWHjjpShLALLU o9RhML5R2UCKDT5tLNBBIVFik0rjUpR5gIG6zdb8K2aGzdBw1L4x8zpla5Vcg6Vu cTpta7of3C0tCheCko/DTvHGtXxQFyFzZdrHvIDqE5igNYtH8YZEN8IXpaRxnJzH D7vKkGtVChIFsduoszVJIGxnW29+1+l7vc8M3deyk6yIrkyKCp5dNA9tVcIzA6B0 VdO3SwPRL9188oDnxzYA2Eg6MhTsL9DS+TzTg4glBuANzFwVbRm3i9c4SC/734kQ NAUZ2sU0KdoRAQ== -----END CERTIFICATE-----Generated at Sat Jun 28 23:26:40 2025 by rpki-client