$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft File: sLWoCnEG4KS4VFyBULtyxpn8yaA.mft (raw, json) Hash identifier: rKFDf3ZLJLnk1WpIWH3x+eq4vM/t8dAIK5ECe9x6DxY= Subject key identifier: B1:01:C3:AE:16:1F:47:5A:6B:F1:B5:6F:29:DD:F8:95:FB:8A:EB:65 Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0 Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0 Certificate serial: 0197C9F057E0C82AE92FBCD6D5CA41298724 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft Manifest number: 15DD Signing time: Wed 02 Jul 2025 07:01:00 +0000 Manifest this update: Wed 02 Jul 2025 07:01:00 +0000 Manifest next update: Thu 03 Jul 2025 07:01:00 +0000 Files and hashes: 1: 60jG5Ay8pKNRLAaYiabGAbMAWcU.roa (hash: mGDjXdclRD6cM00fzezmu8njPZGu0i86EMmzQCWdsaI=) 2: 8NknCKB4mqEufbZ6UbHgAa8xKGk.roa (hash: +VuXhmjH2zdhVZOeQIf+1XfhIBEvtUJA5CNUFP6jbIc=) 3: Cwb1KDzjyZP06ERQCkOqE8eDn-Q.roa (hash: qEbiLSfggbr/wcV1CfVb4G8sOcwZPVPdEo2xFZT7GWw=) 4: ULGt5CdhlE1JEjeG7VsVStOraA8.roa (hash: RKuD3ZtjSv+b+szTB+emIP6q+hmA+ntSP7hJQn+VQLA=) 5: XXx0PZbW0VSnHcKqWvct0KGeX5o.roa (hash: fg2kYbNMaJFsDmSVzEYMa+3owPgOnqiysynI+fCXGgg=) 6: XqyfpygCBb8Q3tIPPqdoPK94M0A.roa (hash: 2VTgMTAP00AWrF9/qszpE/dPLTmJ6fjO0h7TyCaHdtE=) 7: _xekjSFtSAUujx70CN_lqAzDOTI.roa (hash: RCBKZCow8/qZDtOMSChrlpX+0rMSwhsyivwOBDzZ8y0=) 8: d5wYN4sqYmgKKKUN9X-8jp9PKTs.roa (hash: /7Xb7BgMP/VziPk4Q/U+uMUdmAyttT7O93i5sL6urDU=) 9: jU-enqBlwHSK5LFQUkQMv3mnQ3c.roa (hash: XGjlZdDrp7Q05Es+vT4dQhjxGrAgZ9KHZykl/3VpHuk=) 10: rgPd-lPBT_KjoGNurNCPr8-tYLM.roa (hash: 7UFfmlghHed6gv5YUhlj2bi7/Km6EbVr9jqYqXUYH8o=) 11: sLWoCnEG4KS4VFyBULtyxpn8yaA.crl (hash: m/Mp3KWR7Mlo1AApgk7lLfWRP7M7y97yqaUiO7mXV78=) 12: uYQNZGrXH6jilfHVW7M6-uKjZF8.roa (hash: K7dbhIw3GKL8CpYsfdoECZtVDjcGxNIlpZxMSzxg0fc=) 13: zad7TKoNmHhoc0CyHOzgSXKr6f4.roa (hash: LQ6zogTRTgGoz9vqyWdA5yZND4PDb2ytjo7mWtS7rF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Jul 2025 07:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:c9:f0:57:e0:c8:2a:e9:2f:bc:d6:d5:ca:41:29:87:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0 Validity Not Before: Jul 2 07:01:00 2025 GMT Not After : Jul 3 07:01:00 2025 GMT Subject: CN=b101c3ae161f475a6bf1b56f29ddf895fb8aeb65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ea:0e:4a:ee:7f:19:77:94:57:6b:ce:25:3d: d9:6e:b3:64:c9:58:ae:eb:44:35:fc:94:a3:63:79: 3f:91:77:60:c8:5e:b1:af:7e:4a:89:93:90:63:95: 23:f5:14:fa:d4:ed:75:17:f3:14:ba:9b:eb:9a:e7: 3f:4e:d3:3b:5a:dc:54:6f:df:85:c4:9f:dd:ea:3a: cc:9f:f2:4f:76:fb:d8:b4:46:b1:6d:1b:a7:9a:03: db:da:f4:50:ad:35:3c:69:8a:60:85:9e:20:18:00: 7c:6b:69:58:e4:33:b9:59:b6:1f:d3:04:b2:b1:55: b6:07:5f:f7:2d:ea:92:2a:45:85:8e:b1:64:97:e2: 38:9c:55:22:d2:25:49:55:be:f9:66:16:4a:da:40: 9f:93:93:ad:3d:ae:f8:c3:2f:d4:6e:a0:0c:97:88: fb:42:3f:74:9f:6e:da:a8:77:1e:1d:84:aa:eb:d5: b0:41:03:26:0c:3c:f3:cd:72:ac:f7:11:d9:8a:0b: b8:9d:14:96:f9:c2:be:d9:bf:ac:12:b3:b2:e7:27: 9b:e7:e9:20:23:cf:60:f1:5e:83:0b:15:82:4a:39: de:c6:64:78:0d:8b:c8:c8:db:cf:67:45:dc:93:34: 55:1f:32:51:50:cf:67:32:1e:8d:04:e7:d0:a2:4a: 60:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:01:C3:AE:16:1F:47:5A:6B:F1:B5:6F:29:DD:F8:95:FB:8A:EB:65 X509v3 Authority Key Identifier: keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:49:a6:61:ad:50:c7:18:b2:2a:df:f4:43:32:bf:4a:3d:52: 4a:0a:d2:38:0c:33:3b:91:b9:bd:8d:31:17:d6:d7:d4:75:e8: 89:7b:84:71:bd:a2:86:71:7f:af:eb:be:f2:65:28:80:33:62: 4b:80:bd:fe:b7:f0:08:82:53:8d:dc:59:1a:a0:6c:48:e6:64: 14:50:3e:d2:f3:94:56:90:74:80:ea:ad:ed:c5:63:a1:07:d9: 92:a2:1a:ab:88:c0:80:8b:40:31:a1:be:bb:fd:a7:12:4f:90: 9f:8d:42:ab:1e:5f:17:20:1a:9c:94:7b:4e:90:57:19:4f:a0: fa:3a:23:5b:3f:9b:0c:b2:16:20:ba:ed:33:0c:ee:2d:ad:76: 6c:59:fe:bd:5c:b1:ac:c3:11:c7:89:4a:fb:6f:0f:ed:4a:96: ae:fe:ae:53:fa:b3:9b:75:06:c9:a6:20:84:8c:eb:9b:2d:08: e4:d5:4c:e4:f5:74:7e:87:a6:20:f9:82:8e:a9:50:a1:ba:b1: c2:13:ce:24:aa:d8:e2:0b:11:9d:7b:f5:85:01:bd:46:e6:31: 23:26:4c:8a:e6:ab:67:70:cb:dd:3a:70:31:e7:6a:57:c2:36: be:41:4e:2f:2e:aa:3d:05:b1:ea:73:b6:59:e5:5b:ed:b4:9e: 6c:cc:aa:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfJ8FfgyCrpL7zW1cpBKYckMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYjVhODBhNzEwNmUwYTRiODU0NWM4MTUwYmI3MmM2OTlm Y2M5YTAwHhcNMjUwNzAyMDcwMTAwWhcNMjUwNzAzMDcwMTAwWjAzMTEwLwYDVQQD EyhiMTAxYzNhZTE2MWY0NzVhNmJmMWI1NmYyOWRkZjg5NWZiOGFlYjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteoOSu5/GXeUV2vOJT3ZbrNkyViu 60Q1/JSjY3k/kXdgyF6xr35KiZOQY5Uj9RT61O11F/MUupvrmuc/TtM7WtxUb9+F xJ/d6jrMn/JPdvvYtEaxbRunmgPb2vRQrTU8aYpghZ4gGAB8a2lY5DO5WbYf0wSy sVW2B1/3LeqSKkWFjrFkl+I4nFUi0iVJVb75ZhZK2kCfk5OtPa74wy/UbqAMl4j7 Qj90n27aqHceHYSq69WwQQMmDDzzzXKs9xHZigu4nRSW+cK+2b+sErOy5yeb5+kg I89g8V6DCxWCSjnexmR4DYvIyNvPZ0XckzRVHzJRUM9nMh6NBOfQokpgvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEBw64WH0daa/G1bynd+JX7iutlMB8GA1UdIwQY MBaAFLC1qApxBuCkuFRcgVC7csaZ/MmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDIt NzQ1ZTA4ZmU1OGM2LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDItNzQ1ZTA4ZmU1OGM2 LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmEmmYa1Q xxiyKt/0QzK/Sj1SSgrSOAwzO5G5vY0xF9bX1HXoiXuEcb2ihnF/r+u+8mUogDNi S4C9/rfwCIJTjdxZGqBsSOZkFFA+0vOUVpB0gOqt7cVjoQfZkqIaq4jAgItAMaG+ u/2nEk+Qn41Cqx5fFyAanJR7TpBXGU+g+jojWz+bDLIWILrtMwzuLa12bFn+vVyx rMMRx4lK+28P7UqWrv6uU/qzm3UGyaYghIzrmy0I5NVM5PV0foemIPmCjqlQobqx whPOJKrY4gsRnXv1hQG9RuYxIyZMiuarZ3DL3TpwMedqV8I2vkFOLy6qPQWx6nO2 WeVb7bSebMyqLw== -----END CERTIFICATE-----Generated at Wed Jul 2 15:11:16 2025 by rpki-client