$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft File: AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft (raw, json) Hash identifier: 1bAqBwtgvMTp3R/35lKj+y49AwzTMR6CppNn91R8KXI= Subject key identifier: 7E:16:43:B4:0F:30:5E:B0:B3:FC:B7:F6:A6:89:F5:04:8C:9F:25:67 Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Certificate serial: 0197B88FC21AE9EB1E98312BFA7C9E17124A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft Manifest number: 15C2 Signing time: Sat 28 Jun 2025 22:01:58 +0000 Manifest this update: Sat 28 Jun 2025 22:01:58 +0000 Manifest next update: Sun 29 Jun 2025 22:01:58 +0000 Files and hashes: 1: 2MTpcYnM1k7_eZxG4JM1vyDTgyk.roa (hash: ymmdwaUbb6XKWmKTfQm4pWw8ouzRa7gwqokbxv+gmWU=) 2: 3CW8ZrBicXZ-3Xo2rFwfHtSekAs.roa (hash: 7ay6ExNqGjacU7HN/bzX0dJI8r/LlyrNhedhAiFT9ik=) 3: 4MiALt5VQvZmZRNJbgiFndSZM4w.roa (hash: GJAf7lhefseebsxtLfvA2JkOrit3YnALqwfo2sORCvw=) 4: 7XLrZeKON3mi_Y8HbdkwhdOJHZM.roa (hash: uPZBCvQWdyX5oSW3u+GYq0zKOz3VqYp/42l/kQKgi6Y=) 5: AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl (hash: YfHQEdbXPCjyrXxcx5JOryU40eXLSIXuXbcCTAISlnU=) 6: Woo9uQ4ucTRYjMh9ah88cw5clxk.roa (hash: WrdAqZeK7ES2+LIoGcfX11G6G4YXGyd2qn4CZO/jQsA=) 7: Xih-EfVQ2lODpeM1Ya_8fjlb3e0.roa (hash: l4FttRaMYnWfbRGN1GiO7VFVJgCvU1nAC+1h/ttWafI=) 8: Z2PHW8LvacSdhO2HpcioR4D6P_g.roa (hash: kHWtIvwFttg31Y3IHOia+gnD127BKytZFvvHo2JKuAw=) 9: gbjyDe1jMzAx-GtGqvOl5rcNw2Y.roa (hash: bZY4frDqpa0VtHIgDLvz2UTVVluMMplhW24wn9Ofe38=) 10: kSocueKI3xqrxYrVlgp46XPJhoY.roa (hash: 38MoDqAostLgesLzGLlzSF6QuxV0tRHQ2WgTUcouUvI=) 11: zDn6BG65-N44C0uDlJe3RzkiUTs.roa (hash: EM6Uwy/Us+r0AtgVlMQcbmCbt0K/tS3jHqszI1mZVYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 22:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:8f:c2:1a:e9:eb:1e:98:31:2b:fa:7c:9e:17:12:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Validity Not Before: Jun 28 22:01:58 2025 GMT Not After : Jun 29 22:01:58 2025 GMT Subject: CN=7e1643b40f305eb0b3fcb7f6a689f5048c9f2567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0f:2e:2d:73:dd:c9:40:c9:32:90:1b:ba:ff: 19:b1:46:03:b4:94:82:5c:ed:7a:69:b0:48:91:f8: f4:ce:51:d1:e1:03:07:a0:95:10:16:e7:3c:26:1c: 82:81:78:02:4c:a2:43:13:a7:0d:69:10:d4:9c:6a: 3e:a2:3f:8b:14:5e:24:d3:8e:02:59:bb:20:8f:2f: 4c:3c:30:04:ec:bd:e9:57:3f:06:d7:ae:05:f3:73: bf:42:eb:1d:ac:6c:a1:6b:aa:3d:4e:d5:58:69:0c: 09:83:19:8d:1e:cd:05:a6:5a:9a:51:7d:79:b5:ca: 5a:86:9a:18:0c:4f:da:d1:86:57:c8:72:aa:78:c1: ed:cf:c4:97:0a:f1:75:22:81:82:8c:4e:bb:d8:d3: 9e:68:cd:8e:cd:1c:10:78:ce:53:81:23:23:30:f4: 90:da:84:81:f6:a7:5f:9b:e5:c5:da:36:03:ca:6c: 43:55:89:31:50:f2:eb:3b:d7:b9:4a:1f:1c:12:4c: 14:89:62:c6:bd:8d:7d:5c:a4:e5:cf:a4:51:0f:e0: 8e:4a:af:8a:f7:88:a5:de:68:3a:30:10:ef:cf:60: 09:fc:cf:dd:6e:f1:8c:d8:dd:5d:78:58:71:c7:13: 86:35:b7:b6:54:73:2f:57:9d:b0:91:ce:9f:05:e8: 93:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:16:43:B4:0F:30:5E:B0:B3:FC:B7:F6:A6:89:F5:04:8C:9F:25:67 X509v3 Authority Key Identifier: keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:70:1d:41:6a:ad:ba:3a:a7:98:75:14:e1:fe:89:ed:43:b3: cf:7e:66:64:02:fa:b7:19:92:7e:77:34:53:6f:ed:8c:aa:be: 7e:07:09:51:3a:e3:c7:65:80:d8:8d:8b:77:ca:5f:5a:d7:c3: d6:ce:e9:5a:0f:46:2e:79:7b:20:ed:b6:ef:f9:c1:e9:a5:bc: 6b:f8:2e:29:87:ea:39:29:90:4a:f3:f9:c9:a6:8d:27:ba:02: a1:83:24:65:8b:ec:8c:50:34:20:27:48:0a:1d:93:64:1c:0d: 4f:99:dd:42:21:36:55:d2:6b:57:8d:fc:c9:10:eb:29:1d:3d: a1:58:8a:4c:0f:ab:8d:72:a3:90:13:c5:c0:68:0d:29:f1:41: 2c:ec:b6:75:4f:be:ed:61:7b:04:71:27:83:49:4a:78:aa:5a: 13:a5:36:4b:cc:b3:d7:2f:d0:53:c2:c8:38:48:39:f8:2a:4c: e1:e8:4d:eb:3e:4a:5c:c7:9c:08:3c:df:e4:82:bb:bc:41:11: 3c:a8:49:8d:fb:22:cb:95:bb:73:47:88:67:07:57:b2:22:f3: bb:91:ef:e8:df:99:0e:37:b8:94:56:3c:48:3a:d8:1f:6f:9b: 5d:37:8b:2c:99:e4:83:79:03:d9:ee:ab:c7:1d:8c:0f:be:32: 54:7e:fb:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4j8Ia6esemDEr+nyeFxJKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMzJhNGJmYjc3OTY0MDVhNTU2Yjc1OWYxZDE5M2U0YzRk MzcxMjkwHhcNMjUwNjI4MjIwMTU4WhcNMjUwNjI5MjIwMTU4WjAzMTEwLwYDVQQD Eyg3ZTE2NDNiNDBmMzA1ZWIwYjNmY2I3ZjZhNjg5ZjUwNDhjOWYyNTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4A8uLXPdyUDJMpAbuv8ZsUYDtJSC XO16abBIkfj0zlHR4QMHoJUQFuc8JhyCgXgCTKJDE6cNaRDUnGo+oj+LFF4k044C Wbsgjy9MPDAE7L3pVz8G164F83O/QusdrGyha6o9TtVYaQwJgxmNHs0FplqaUX15 tcpahpoYDE/a0YZXyHKqeMHtz8SXCvF1IoGCjE672NOeaM2OzRwQeM5TgSMjMPSQ 2oSB9qdfm+XF2jYDymxDVYkxUPLrO9e5Sh8cEkwUiWLGvY19XKTlz6RRD+COSq+K 94il3mg6MBDvz2AJ/M/dbvGM2N1deFhxxxOGNbe2VHMvV52wkc6fBeiT8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4WQ7QPMF6ws/y39qaJ9QSMnyVnMB8GA1UdIwQY MBaAFAIypL+3eWQFpVa3WfHRk+TE03EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEt M2JiNGQ2MjAwNTE4LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEtM2JiNGQ2MjAwNTE4 LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxXAdQWqt ujqnmHUU4f6J7UOzz35mZAL6txmSfnc0U2/tjKq+fgcJUTrjx2WA2I2Ld8pfWtfD 1s7pWg9GLnl7IO227/nB6aW8a/guKYfqOSmQSvP5yaaNJ7oCoYMkZYvsjFA0ICdI Ch2TZBwNT5ndQiE2VdJrV438yRDrKR09oViKTA+rjXKjkBPFwGgNKfFBLOy2dU++ 7WF7BHEng0lKeKpaE6U2S8yz1y/QU8LIOEg5+CpM4ehN6z5KXMecCDzf5IK7vEER PKhJjfsiy5W7c0eIZwdXsiLzu5Hv6N+ZDje4lFY8SDrYH2+bXTeLLJnkg3kD2e6r xx2MD74yVH77PA== -----END CERTIFICATE-----Generated at Sun Jun 29 06:38:48 2025 by rpki-client