$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft File: bOl89NjQvBezrx1ixNcUiGYb0hI.mft (raw, json) Hash identifier: oCRpuE/+QrkBhX6RpLbSnuyw3P549aDz/w/G1IS7Ico= Subject key identifier: 8A:FB:CF:16:2B:A3:D1:BD:31:E1:6A:00:E8:07:1C:D4:D7:C5:2E:C8 Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Certificate serial: 0197B7B38D87BA754CD0549B2B904A92449E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft Manifest number: 15C0 Signing time: Sat 28 Jun 2025 18:01:27 +0000 Manifest this update: Sat 28 Jun 2025 18:01:27 +0000 Manifest next update: Sun 29 Jun 2025 18:01:27 +0000 Files and hashes: 1: Af8LoP7Lc3Ri1EjEl2aPSimN8N8.roa (hash: K3jq+ZPDX3ZWFw5k3Zz+FhB98xNgrxje9TzL4q7xQ84=) 2: F2A4Y0MrgEztwlWitJZvMyHSYcU.roa (hash: w50mpPDFrcclMXuIaVxZ4+xtSUk5AU18fPWu5EoX+LA=) 3: HDwNTyOMXjdcFIbI5Dg8ZGceIPc.roa (hash: xGqkyX+qZQ75xb5Nb+DtuxrBcbMbXYywOv/jqNzFE9U=) 4: J1CKtsXx9r_LHHrlYsJGTJF509U.roa (hash: Wy6xl+FAMDx5u89yFxnteVYqnAsEeBLLKMZFfJdUW6I=) 5: Uh2lETEq8E5x-jAu-VnjQrM5VGg.roa (hash: SoBuut5hx6X/4eMmfxkxmJvGDUdRqdsnwXxbmDCgQsE=) 6: XJb3trIMR2o2CfWTOuYiqHcFzws.roa (hash: BRkLNlJqve/L2aNsuMJ+5pqTXL5/kYQCmhET9weR1yA=) 7: YY5vnq-WY3ttKAPBwWUwZDNoZ94.roa (hash: otf25hemgRYV3JPKjRYvJ8q5HrlB5I1ctES0TPSG1ck=) 8: Z48A1_I47mYSHVTo4XpKWd1w_wY.roa (hash: NvJ6V/CehduL5Zgko7xVcI92EacH0CBv0m1gyVIWLQM=) 9: _sq0c5GTAFHDkK0kB1xS-FJEkxE.roa (hash: 0/aQ7T6vcLRIStkXpDsfCFlQb8OkLcG1wf2/+Q//xZk=) 10: bOl89NjQvBezrx1ixNcUiGYb0hI.crl (hash: /1AgOX4yIn/p3gdmUp/DQwvM3cRztens7QjKuTgLvfo=) 11: bgndW0CmBQuiHxQFDGV1p4kfQ0w.roa (hash: 69wNM6Nj33ysdv0n+TRiRf/aZRUnSe2bA4XmQXvr6Ug=) 12: nRXz0JWuVzTuqgJJowbVl480fPU.roa (hash: 8yilskVPxe2I/+785iQCSlJBQxLK7FQ+9fHJRaIbBIk=) 13: ok2coLlZfCNf012-KQnTYpk7lZE.roa (hash: jPQ1+YObpchvAlB5pc4INo3tzPPIYQQgACezxT56CVQ=) 14: whbNPX7xpImhIktrpipKoQzAFZo.roa (hash: Jtvnk0ncEqCQ/ZQ9F0sCk3O4UoG6D0dlD2s9B3IWjbk=) 15: y2chyLi0MiNw5kPgCGuG_lAJm6E.roa (hash: aBY4sS6r8TuI74TUuwhLmDR0B3e0KyzhgW6eBiCSGXY=) 16: yCCs4shbMfXFkRbB-dbVm3aK1dE.roa (hash: ERGKfWwqWpDoNIV4hNRq6bDPGoH2AztZvrPKQ4MnRxU=) 17: yqrbohxedJqZYRfOM_ZbeFgbUDk.roa (hash: 5D+jOOYzSjHZwRxIJ5GcJlLwrz/EOLrzaFXp3+Dosvg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:b3:8d:87:ba:75:4c:d0:54:9b:2b:90:4a:92:44:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Validity Not Before: Jun 28 18:01:27 2025 GMT Not After : Jun 29 18:01:27 2025 GMT Subject: CN=8afbcf162ba3d1bd31e16a00e8071cd4d7c52ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bb:9d:57:fa:28:7e:db:30:73:4b:1b:34:70: eb:a7:ce:53:1a:3f:62:62:5f:da:e0:7b:01:1b:c8: 1c:99:ae:38:79:06:ce:a3:78:73:c7:d0:dd:2c:bc: ce:35:c0:cb:15:3b:3e:66:a4:2e:f4:fb:5a:00:12: 00:2f:14:28:05:9a:6b:b9:ad:bd:3a:2a:6f:09:d7: 60:50:7d:77:b3:2f:0e:41:3c:8f:fa:04:7b:06:4b: 93:84:6e:c4:3e:33:4e:5a:48:3a:f2:b8:9f:3e:b2: 8d:fe:1d:43:10:59:6e:9a:a0:ce:c1:67:f1:63:ce: cc:da:d9:43:e7:a3:c5:87:3e:93:aa:21:46:3e:24: c7:f8:9a:c4:34:6d:48:54:bd:71:3f:41:3d:84:ce: 7b:da:96:40:26:72:be:8e:d0:8f:64:ad:b1:18:07: d2:36:73:10:d2:61:6b:3d:d7:19:e7:fa:e1:53:99: a1:10:c2:a9:1d:af:2d:cb:95:49:b6:63:69:fc:19: 7c:d9:ac:67:39:3b:c5:6b:8d:b9:89:f5:38:68:56: a3:07:8a:a5:a6:6a:13:11:e7:c0:75:de:f5:df:66: 6b:a9:ef:07:9e:48:1f:06:98:8e:c1:01:49:5d:62: 7f:a6:16:bc:14:a3:83:2d:73:fe:8f:78:0e:2c:5d: f8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:FB:CF:16:2B:A3:D1:BD:31:E1:6A:00:E8:07:1C:D4:D7:C5:2E:C8 X509v3 Authority Key Identifier: keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:0b:6d:54:1e:c6:42:66:dd:ee:a9:2e:9d:97:3a:57:cd:04: 84:42:62:18:d9:da:b7:b8:3f:dc:98:f7:a3:53:2a:87:78:56: c5:2a:04:05:ae:93:50:07:bd:94:3c:3d:e7:17:aa:74:94:f6: cb:9d:1e:7c:0a:61:8a:cd:1a:e3:57:65:b3:dc:2e:4a:b1:35: 3a:5b:7f:f6:40:5d:40:01:3a:c2:f3:cd:6a:67:aa:d2:55:1e: 15:34:92:b8:44:f3:32:fe:ca:b2:e6:a1:a4:c2:eb:64:e6:94: 16:88:7b:a8:1d:18:7b:0f:e0:88:b2:e0:4d:e9:1b:f9:cb:46: cf:8d:0c:b2:38:a2:4b:a4:ef:cd:1a:60:19:fc:ef:f2:aa:f2: a3:6a:10:bc:ea:a3:58:be:c1:b8:8b:16:f1:a7:62:38:7c:39: b5:e6:3a:27:e4:0c:8f:3a:7c:01:e8:de:dd:be:6c:09:6b:3b: a8:c3:c5:91:29:0c:51:fc:d7:f3:55:69:9d:6a:33:8f:5f:bd: 26:e7:e3:94:68:37:e1:e1:19:19:cb:2d:7b:37:8c:7f:12:65: 70:98:08:2a:73:25:ef:e9:6d:45:36:0a:24:d5:72:3b:79:84: 5c:4c:09:f5:6a:b5:d2:81:1c:64:94:76:64:d8:21:d3:c5:cb: 33:35:d6:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3s42HunVM0FSbK5BKkkSeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZTk3Y2Y0ZDhkMGJjMTdiM2FmMWQ2MmM0ZDcxNDg4NjYx YmQyMTIwHhcNMjUwNjI4MTgwMTI3WhcNMjUwNjI5MTgwMTI3WjAzMTEwLwYDVQQD Eyg4YWZiY2YxNjJiYTNkMWJkMzFlMTZhMDBlODA3MWNkNGQ3YzUyZWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7udV/ooftswc0sbNHDrp85TGj9i Yl/a4HsBG8gcma44eQbOo3hzx9DdLLzONcDLFTs+ZqQu9PtaABIALxQoBZprua29 OipvCddgUH13sy8OQTyP+gR7BkuThG7EPjNOWkg68rifPrKN/h1DEFlumqDOwWfx Y87M2tlD56PFhz6TqiFGPiTH+JrENG1IVL1xP0E9hM572pZAJnK+jtCPZK2xGAfS NnMQ0mFrPdcZ5/rhU5mhEMKpHa8ty5VJtmNp/Bl82axnOTvFa425ifU4aFajB4ql pmoTEefAdd7132Zrqe8HnkgfBpiOwQFJXWJ/pha8FKODLXP+j3gOLF34nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIr7zxYro9G9MeFqAOgHHNTXxS7IMB8GA1UdIwQY MBaAFGzpfPTY0LwXs68dYsTXFIhmG9ISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMt Mzk5M2FhMzI0ZTFmLzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMtMzk5M2FhMzI0ZTFm LzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwttVB7G Qmbd7qkunZc6V80EhEJiGNnat7g/3Jj3o1Mqh3hWxSoEBa6TUAe9lDw95xeqdJT2 y50efAphis0a41dls9wuSrE1Olt/9kBdQAE6wvPNameq0lUeFTSSuETzMv7Ksuah pMLrZOaUFoh7qB0Yew/giLLgTekb+ctGz40MsjiiS6TvzRpgGfzv8qryo2oQvOqj WL7BuIsW8adiOHw5teY6J+QMjzp8Aeje3b5sCWs7qMPFkSkMUfzX81VpnWozj1+9 JufjlGg34eEZGcstezeMfxJlcJgIKnMl7+ltRTYKJNVyO3mEXEwJ9Wq10oEcZJR2 ZNgh08XLMzXWDQ== -----END CERTIFICATE-----Generated at Sat Jun 28 23:33:02 2025 by rpki-client