$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft File: xm2dULO4nVHIqiST5-9HAdYlHa0.mft (raw, json) Hash identifier: JlDqz67sDCnL3T27AmBd4Jqxx0sZi7oWgPL4kI1iv7I= Subject key identifier: 7B:2D:97:DD:42:73:3F:6C:36:A1:51:E3:8C:D3:DF:71:99:95:CB:7B Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 0197B7B3867BCBD3E1D529C747FBA95C4A9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft Manifest number: 15C4 Signing time: Sat 28 Jun 2025 18:01:25 +0000 Manifest this update: Sat 28 Jun 2025 18:01:25 +0000 Manifest next update: Sun 29 Jun 2025 18:01:25 +0000 Files and hashes: 1: 0nCCSC3jIA4FtUJpFXhtsrFG7Qg.roa (hash: 5DaOp8ZEA0DdA9vlG0RLC+R1LA0L0gjUqxRcz3w4hyE=) 2: 1-et3egkL66ACcB8XxsgEBnm6VII.roa (hash: 4ZZwKzLoU0lcA0OohX7bJJeDfSc2RrBHj0/VmzWrgQ8=) 3: 1PQvYvTM-0mR2uhRrTfqzRzMCZQ.roa (hash: 57vgEzjnfLTeN7idUdr0XJ8FMClFRQnBo8Ax2ADKNVY=) 4: 37NN_qFZ9oT5ulT_0M_9BF1YCCs.roa (hash: SNkWXgQ1nsWscthwB0+O68nLlOKJ5rDLzgKc8BQLFNE=) 5: 4emO2JW9OCEuV19QBkuS5-P0s4k.roa (hash: 7Nh1o+zzoXalioorL0iJcHjWDslCqg4c5QQSS4+kcTk=) 6: 5lROaiYign0Tncsnuf4DpK7LKpU.roa (hash: CaZKfeoWB0BVzdzVhDocsLIaQtNRrZrO2kmI6Ik5mVY=) 7: 7vSowqY3zLVHcKRQmKhaSah-tyY.roa (hash: GDJHFB+LVsf5zCvLRtIdAUjiaeVjh1VRpfPOoUeuJ3c=) 8: 84fRK7OwW7YBpBtUSGSy4bB1f8A.roa (hash: F0BZ2PiOSrSxrlUmn6WrV3u4aEEX/cL0H6Lud+66Cn4=) 9: 9k6Qv6Q1Icyly4BTu9TZOCUpUxI.roa (hash: 2gkAVJuBXl904G9xnDFvD8OEhhRxc1cTHhIMjnLEM2U=) 10: AKM5h6Ix-3LMoRtdGUA19KyVLio.roa (hash: P77lNcJ0zrzNLtgfjbd4pt0XLBw/55/N1ocxrR5mz8k=) 11: BUNDUMts4ESalMK-ljVnP9FAnRQ.roa (hash: oy9sVfZrNWTnfu5PH2ylBjau+cF2gxb98XThyI6lOdc=) 12: DpaFmJAPai0xaXP7QAreQeSbrjY.roa (hash: FyuIYwr801YWvdCNbt/J8XAVUeBVWYj34IWltEFHHsg=) 13: KHWXU61nbuAvt9t1WCNbKv5_l0w.roa (hash: E9nPdxldKDh3yJv85Wm4ujXcG5a7CsMNQgxdzW3WyPM=) 14: KZxZSP8zxqhzvH1RhiZOsKLojdc.roa (hash: 79Za4ffHNm/35yqEIEXZzJt7VPi1r5OHEywYNdUL3rQ=) 15: Ka96-7xmUJHL1P83ddZSPTnIito.roa (hash: A3j4nr1SyHQHtFJaNRlAwCyTXlwC3Gmo5Vos/lZDRjc=) 16: L9eXoOzloyfByegWKWMIHSuYWXU.roa (hash: 0VEFznzUQQMlCk6q903xJ+gBbGsXZIaen1RH1RLLoj0=) 17: NaoxUETI4MRfs7Ku7ZS618oGav8.roa (hash: wQywEtha5ohZA/lDc9TGZQNBlHs8Tphdixu2SYdW/FQ=) 18: OJ1S0TSC0ulKkFQoexZdeyDj_Vo.roa (hash: K+mGf5tAj8Awh18X2x44DzS5EhLS9o2grru1GE/6gKU=) 19: PGOlAJ2_UbtZt1cjsWcX5kaxtE4.roa (hash: yllK3pne9YzRUhTjD6bVU9YW7N3Ndf4gfPLt+eRd9lg=) 20: QfJGcICUs9Ej1AUv1rRUZ8Xctk0.roa (hash: 7q04UG21qkwmFM+hFjcJQPmY1tVuJ6d7O9TElKsVV9M=) 21: S-w0HsGwAZFQF2Ks8Sg-IkujD2k.roa (hash: 97QhOeDn2Ynbz47Ce+Ud4P3JM4AhVHpCC+sCishuJQw=) 22: SIN-EqwjuVJ_uVTDZcaFfYV-2y0.roa (hash: 69ilVtRvoLW9898G/5j1Gs/FnTheitxDGDBUUK5AC2s=) 23: TydRWxXZQOtNWFnr_XG63P2ou-E.roa (hash: PU14BhgBvKt9TLPY169A5YplJZtkio02RHMWbiyDjpo=) 24: UVTZDoEjk1YI37FQ_IvaaRHJnnQ.roa (hash: NOafG/qLvJxLyZs2q5FGTZ54IzUEYlZgdrCLQIm1dW8=) 25: X3T4KMvuCFlcstKpa1Pxb7curP0.roa (hash: LoC0jPPER3qkcRvKhWoTxxMuuQdxUgg0flbHYv5ApjA=) 26: Y-Hi5v4w9rmIrRykzYfMnnMw0Rk.roa (hash: UAOni9fizzaasLtiSWgBxbS1fhAciTYBxVO8KzIk04s=) 27: ZvCU0K83780pIZIKt_iuhN7EffU.roa (hash: I105+Qqc4XVe/r+SKIg5LTvj890qAzeBPOv1IQSm4eo=) 28: annF-tYuzdXS1ALv0qyj5X5E7jY.roa (hash: +ABYTVUrAak8XwcnVULCGoDqh2JX0sMrrBCuyRBlGCU=) 29: b3HbzyFMAkDn-hz39a-lF2NC8sM.roa (hash: 7Jvn5n7Q6ncqp0VRYLsaglwVJaobFM0uBPvGwFadf6Q=) 30: cQDUoTmzh16X21EUYU6Rst7gwN4.roa (hash: VpP4wKEnD3uBwSFEK90HjJtm7jaN6/opZLM04PiBqsA=) 31: mv8me-CMOrietHYR0QyeHWpK0fY.roa (hash: h7ZeS8a6te+lDUFZmSGqV6CiQhkMVqKUNLmw+yYraS0=) 32: sjrH2otaIZpDDsn6jT5Qey1qR24.roa (hash: 69DxcLnEQlr2qy3j+2wJu74yOEnRWbGBTA6f8nbWFZc=) 33: sxEAKY_aMKRnBM4SpkFRvHo38bo.roa (hash: KqW5nF7IvFVgFNat1NgasvPrULkuuJOyrjf1tgys6gg=) 34: vkUX9hV92VQst5LelEku-jzjmDI.roa (hash: 6t7C3jSP4Jkwuk3y3tOASPT2+HZn8Zja5tWF03TT/f0=) 35: xm2dULO4nVHIqiST5-9HAdYlHa0.crl (hash: tVLkiIkWBn9V7hfvrJpU5GGV9iOzcucPud1a21eY72M=) 36: z-YOtG9p5k4OlqtEFKy2WK9ixms.roa (hash: iNo3KEz5ULECFwTpK+2HmaVlQM7jtAD9hPXyoY/n1Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:b3:86:7b:cb:d3:e1:d5:29:c7:47:fb:a9:5c:4a:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Jun 28 18:01:25 2025 GMT Not After : Jun 29 18:01:25 2025 GMT Subject: CN=7b2d97dd42733f6c36a151e38cd3df719995cb7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e1:f1:0b:ea:8b:e4:c7:90:b1:60:7f:f9:d4: df:5c:b2:18:85:31:06:ba:8a:cd:d2:08:5e:59:c3: 19:7e:89:c7:b0:d1:6b:9a:60:20:e7:72:62:c6:e3: 97:84:f2:08:b2:28:c6:a2:07:1d:cb:16:68:e2:7d: c9:db:3e:7e:29:ae:81:bd:a9:f2:81:91:65:ba:05: 17:30:58:8d:eb:29:13:7a:cf:c7:ae:8e:78:ba:2e: 7f:4e:86:82:8e:b4:d6:87:b0:23:b7:4b:13:44:ba: 52:c1:ee:11:fa:ac:32:0b:4a:a1:34:9f:d1:df:a6: d1:c5:6f:ef:28:47:ce:34:dd:07:2a:cf:91:56:21: 9a:6b:f6:c7:89:8e:fc:24:2b:0b:f0:71:a8:3f:86: dc:d5:7b:d6:7c:e6:6f:91:b4:70:75:81:ec:ef:ea: e8:ca:f9:42:aa:83:58:31:9c:87:61:41:cc:18:37: 36:33:41:b7:36:ba:bd:6e:60:f0:12:a9:fd:87:fd: 5f:56:a3:2d:32:7a:b9:f9:6d:a9:10:af:fe:36:2a: 10:17:1e:45:56:67:18:24:e8:bc:dd:a0:55:60:42: 1d:be:b2:f3:4c:7a:65:a5:dd:57:88:3a:dd:c1:96: 14:2d:2f:34:af:fb:60:36:7c:46:8f:f4:15:4a:54: d3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:2D:97:DD:42:73:3F:6C:36:A1:51:E3:8C:D3:DF:71:99:95:CB:7B X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:cf:fb:fd:e9:d3:6a:9e:8a:4f:30:6f:96:88:cc:46:1b:1b: 76:7d:81:4b:ea:3e:27:e9:dc:63:68:ab:36:6e:67:a3:e1:b6: f5:dc:ac:16:60:72:d7:4f:3a:0d:18:2d:53:bb:4a:15:6b:f1: 80:e4:c1:fa:c3:56:88:86:7e:74:e9:6b:94:c6:ad:0c:f0:7f: 33:c2:57:6d:17:88:73:9b:30:03:11:a6:2e:db:45:78:8c:c1: 3d:4b:b7:4b:bc:a0:54:48:fa:76:28:db:08:6e:ae:39:e6:54: cf:72:28:34:f9:a9:4f:cb:80:98:a8:0c:ef:91:a2:3c:85:7f: 05:b1:9c:93:44:ec:a5:b7:d0:51:05:2c:3b:b9:a1:d7:ae:37: f2:b2:5c:df:93:be:a4:3a:c2:01:be:eb:c4:86:46:ec:24:ad: 50:e0:bb:db:30:d0:56:80:d8:8e:0e:96:b5:47:e2:c4:06:68: 32:87:29:34:0e:3e:99:7e:97:c6:a9:24:55:01:ce:cf:fd:f9: fa:50:c1:c4:89:a0:a5:5d:ff:8d:f8:d9:6b:2a:12:56:73:bc: 89:19:74:f1:d6:80:33:60:ce:8c:10:99:10:16:1d:da:0e:0d: be:63:d5:bf:7b:ad:a7:b4:3f:23:a0:bc:7f:22:20:d5:5c:d9: 33:95:b0:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3s4Z7y9Ph1SnHR/upXEqfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjUwNjI4MTgwMTI1WhcNMjUwNjI5MTgwMTI1WjAzMTEwLwYDVQQD Eyg3YjJkOTdkZDQyNzMzZjZjMzZhMTUxZTM4Y2QzZGY3MTk5OTVjYjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uHxC+qL5MeQsWB/+dTfXLIYhTEG uorN0gheWcMZfonHsNFrmmAg53JixuOXhPIIsijGogcdyxZo4n3J2z5+Ka6Bvany gZFlugUXMFiN6ykTes/Hro54ui5/ToaCjrTWh7Ajt0sTRLpSwe4R+qwyC0qhNJ/R 36bRxW/vKEfONN0HKs+RViGaa/bHiY78JCsL8HGoP4bc1XvWfOZvkbRwdYHs7+ro yvlCqoNYMZyHYUHMGDc2M0G3Nrq9bmDwEqn9h/1fVqMtMnq5+W2pEK/+NioQFx5F VmcYJOi83aBVYEIdvrLzTHplpd1XiDrdwZYULS80r/tgNnxGj/QVSlTTCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHstl91Ccz9sNqFR44zT33GZlct7MB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANs/7/enT ap6KTzBvlojMRhsbdn2BS+o+J+ncY2irNm5no+G29dysFmBy1086DRgtU7tKFWvx gOTB+sNWiIZ+dOlrlMatDPB/M8JXbReIc5swAxGmLttFeIzBPUu3S7ygVEj6dijb CG6uOeZUz3IoNPmpT8uAmKgM75GiPIV/BbGck0TspbfQUQUsO7mh16438rJc35O+ pDrCAb7rxIZG7CStUOC72zDQVoDYjg6WtUfixAZoMocpNA4+mX6XxqkkVQHOz/35 +lDBxImgpV3/jfjZayoSVnO8iRl08daAM2DOjBCZEBYd2g4NvmPVv3utp7Q/I6C8 fyIg1VzZM5WwnA== -----END CERTIFICATE-----Generated at Sat Jun 28 21:46:02 2025 by rpki-client