$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft File: snJh1xU0i_1zzp27ckiGVpk7ovE.mft (raw, json) Hash identifier: HJUs7z+v9BxhjBGQGXJBZDYR48+QfbB+a+00kADtwSs= Subject key identifier: AB:0B:92:E5:D4:ED:C3:EB:72:D5:EB:62:7D:C3:76:65:88:90:54:CB Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Certificate serial: 0197CC156F2C0AA77946431F9B134643B528 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft Manifest number: 10ED Signing time: Wed 02 Jul 2025 17:00:45 +0000 Manifest this update: Wed 02 Jul 2025 17:00:45 +0000 Manifest next update: Thu 03 Jul 2025 17:00:45 +0000 Files and hashes: 1: 54iLRsUEYQSLlV8kHVTer9P4keA.roa (hash: Oib7LJlXh4bUMGiTPxF+59IQOdwF+fvCUOmQ1Sv5YqM=) 2: 83ZfI9Fyoy0-0Ed7XViCJUVWAUk.roa (hash: x5Erfp0LUGN9evcbs1ECyXblatyvnAhrnm8OrbCDB8k=) 3: DtWqKYrRCyGx6dsd9f2L7CKfIRc.roa (hash: O7NemdIlDZpd4quz6YecLMnjW1CyD/u06cKhcBOTRro=) 4: GrZCo-Pl-pKds5zmwg7ubalVFTA.roa (hash: XSM4rBpjvcsUyAb/r/u55Oo3ZCJqxZNIGwjYsJQ68bw=) 5: M80ufUXhkNHfa9K4zU6X6k_ofZQ.roa (hash: 4dQl+qST57nUFs67WwcEmlUV01oY2iEO29630JMqbwE=) 6: OcXOGlX2Gc26JEdm5iWVWnBYg58.roa (hash: /vGDKbgE4iZUS4BzIvVP16inipE2apdXrS0M45rcngw=) 7: QpucqboD9L8Uv9-I8wC2eqyytjM.roa (hash: QJ36JcAEae+tPmwoLHxsrKQ/qHkNlapv2iTQudy3nXg=) 8: VLrSYlONO7JZUvaeI6OzgjRksA0.roa (hash: LTkUIoLhvOTPKcASxWAtrGL8orynFjazuB3yg7c0ZYo=) 9: W95VCieFrYA-UWvQbNSL7N3Y2Cg.roa (hash: YvWvtJ9d+roXNfi60DzUNUYY7G9jfkQp1ZTCPAwbx+g=) 10: Yw4yz2qvg4rQujrK-dIx_KPixQM.roa (hash: rPOdhOXTd0LJkvjvgXHjpfcSX15w4WKfBaBl0s4PykM=) 11: mMdAkncXd62KSLEMH5-GZ2xifmI.roa (hash: BsiKxHj0OcEVg20ZYqrvGiqQgj+ynivI6054d313+QE=) 12: snJh1xU0i_1zzp27ckiGVpk7ovE.crl (hash: 2iTTF/ZfjvM5t1wjCA36S2HG/wdhBn+41hSg/HoqkYE=) 13: tXmj_lk4J_cxjq5mg9Y-DnR4g68.roa (hash: FkJnyg1Nbp4kUP6A2c71ys6CgKIoTjWwYiDec6OD1BY=) 14: x93oIxwN7f9CnY5MK-gEMFA9RCs.roa (hash: iUrM+UkqfotbOBAOD6sNrVDAFzEQJnu2I0F39zCKGjM=) 15: x_9TAtatN7OaJxTBmrfHpUlXZDA.roa (hash: 2gG4s/omQ5P0Lbi33p1Th/x4L/bao6YkNKtuc6UmamA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Jul 2025 17:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:cc:15:6f:2c:0a:a7:79:46:43:1f:9b:13:46:43:b5:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Validity Not Before: Jul 2 17:00:45 2025 GMT Not After : Jul 3 17:00:45 2025 GMT Subject: CN=ab0b92e5d4edc3eb72d5eb627dc37665889054cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bd:c4:02:1b:67:d0:82:18:bc:14:f6:7e:80: 3e:00:50:59:80:e6:1d:f9:97:26:76:f6:7e:e3:3e: 4c:8e:17:38:85:6d:ba:ad:b7:f3:7b:7b:4b:cf:e8: 88:59:0b:8a:2b:4d:3a:f2:79:ef:e9:ed:88:b4:50: f1:ba:07:b7:ee:85:c0:0a:2d:47:21:e3:40:5a:8c: cb:48:f5:df:5d:8d:94:41:f1:b9:4d:2c:25:e1:25: 53:8c:8c:36:8b:d6:50:0d:a3:c4:3e:e7:06:51:7b: 50:3e:35:29:35:c1:53:89:42:23:11:ec:f5:b4:66: 91:4b:85:57:dd:81:17:8b:d9:37:a3:77:2a:cc:32: fe:e9:f9:3c:7f:83:75:66:e3:d6:3c:6c:70:d2:3c: 69:99:93:5a:f3:41:d8:a9:10:1e:3a:fa:7c:8e:fc: 1e:1b:45:50:16:79:c8:83:f3:aa:03:ff:ed:76:24: e9:47:f6:78:5c:07:41:08:92:db:e9:ee:10:ef:29: 63:21:f0:77:a3:a5:aa:f9:ad:86:15:5f:ca:f7:35: df:73:05:ea:7b:c9:b4:0d:a3:26:8c:0a:01:18:86: fa:4d:1e:43:81:92:c3:4c:6e:5d:1c:7e:47:cb:5a: e7:76:73:a0:28:8c:25:9a:16:97:20:83:fe:4b:41: 91:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:0B:92:E5:D4:ED:C3:EB:72:D5:EB:62:7D:C3:76:65:88:90:54:CB X509v3 Authority Key Identifier: keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:a0:0e:ba:c9:e7:ab:9d:48:bf:22:53:48:4a:35:4a:b9:b6: c2:4c:22:b0:9b:bb:b4:6d:1a:11:59:36:66:a5:b3:2b:29:06: 2d:0b:31:a2:fe:3a:dd:5b:c3:0a:d0:15:ec:4b:74:dd:ac:72: ff:3a:60:fd:a9:86:ea:88:eb:99:29:24:9b:58:6b:58:08:d7: dd:39:c9:5d:84:ba:ae:ad:ca:3a:8b:a7:af:f5:de:de:c3:f8: 6f:9a:53:2c:97:05:69:89:da:e1:99:64:3e:9b:f4:42:7f:c5: 39:74:b2:3f:0b:48:98:b5:f0:06:4d:26:fa:da:08:5c:27:65: 9d:bd:5d:ce:e7:56:9b:83:bb:e9:7f:37:66:4a:63:86:2a:61: bf:8c:05:71:e6:3a:b4:82:28:1f:13:c6:3e:2a:56:e4:69:63: 6a:7b:98:1b:6d:1e:3e:37:b0:f6:65:70:5c:3a:6d:c2:9c:55: 68:cf:fc:16:5e:90:3d:a3:34:09:da:ed:6c:99:17:22:6e:3c: e9:c2:2b:e7:29:52:3c:4b:57:93:b0:15:63:df:cb:5b:e0:c5: ea:3b:2e:2d:37:fd:1d:12:ba:48:7d:dc:2d:87:8d:a7:76:17: b3:40:d8:3d:39:1e:85:80:38:18:b2:28:77:05:66:08:ef:36: 63:3b:b1:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfMFW8sCqd5RkMfmxNGQ7UoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNzI2MWQ3MTUzNDhiZmQ3M2NlOWRiYjcyNDg4NjU2OTkz YmEyZjEwHhcNMjUwNzAyMTcwMDQ1WhcNMjUwNzAzMTcwMDQ1WjAzMTEwLwYDVQQD EyhhYjBiOTJlNWQ0ZWRjM2ViNzJkNWViNjI3ZGMzNzY2NTg4OTA1NGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj73EAhtn0IIYvBT2foA+AFBZgOYd +ZcmdvZ+4z5Mjhc4hW26rbfze3tLz+iIWQuKK0068nnv6e2ItFDxuge37oXACi1H IeNAWozLSPXfXY2UQfG5TSwl4SVTjIw2i9ZQDaPEPucGUXtQPjUpNcFTiUIjEez1 tGaRS4VX3YEXi9k3o3cqzDL+6fk8f4N1ZuPWPGxw0jxpmZNa80HYqRAeOvp8jvwe G0VQFnnIg/OqA//tdiTpR/Z4XAdBCJLb6e4Q7yljIfB3o6Wq+a2GFV/K9zXfcwXq e8m0DaMmjAoBGIb6TR5DgZLDTG5dHH5Hy1rndnOgKIwlmhaXIIP+S0GRRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsLkuXU7cPrctXrYn3DdmWIkFTLMB8GA1UdIwQY MBaAFLJyYdcVNIv9c86du3JIhlaZO6LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2Yt NTA0ZjI3NjY3NjBmLzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2YtNTA0ZjI3NjY3NjBm LzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmaAOusnn q51IvyJTSEo1Srm2wkwisJu7tG0aEVk2ZqWzKykGLQsxov463VvDCtAV7Et03axy /zpg/amG6ojrmSkkm1hrWAjX3TnJXYS6rq3KOounr/Xe3sP4b5pTLJcFaYna4Zlk Ppv0Qn/FOXSyPwtImLXwBk0m+toIXCdlnb1dzudWm4O76X83Zkpjhiphv4wFceY6 tIIoHxPGPipW5GljanuYG20ePjew9mVwXDptwpxVaM/8Fl6QPaM0CdrtbJkXIm48 6cIr5ylSPEtXk7AVY9/LW+DF6jsuLTf9HRK6SH3cLYeNp3YXs0DYPTkehYA4GLIo dwVmCO82YzuxQg== -----END CERTIFICATE-----Generated at Thu Jul 3 00:24:24 2025 by rpki-client