$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json) Hash identifier: Wb9hRsP1mLo6Rau/fdKl0eN+i299M2ozMPGQTo4QUyk= Subject key identifier: 2B:F6:7A:F8:3D:05:AD:9E:2E:DA:58:41:31:72:A4:2B:8C:42:55:A8 Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 0197C64ABACA57606AE7BBB5E2B30A87BB14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft Manifest number: 15E6 Signing time: Tue 01 Jul 2025 14:01:15 +0000 Manifest this update: Tue 01 Jul 2025 14:01:15 +0000 Manifest next update: Wed 02 Jul 2025 14:01:15 +0000 Files and hashes: 1: 5oD2HNqgzG_qOcF_21G9KLy5e2Y.roa (hash: RmXZv+Vqe5cI4h6ljtkED0qwtDL54/1oOSvgcLZr5dM=) 2: 6H0jPgZ40-qSdMrUIpXtjHxd2VA.roa (hash: bKX7Wm+km5brNebStx9trC9lQWDSYN+gli61DR2OFCc=) 3: 75sT-nwUqhGJrktdH6EqWa-q1mo.roa (hash: R1QtO6OQwY7O/dWJMCnCSA9mjsQZb+aGyr2mwiCWXM0=) 4: Bk5EEDboiWzloYLSbIprmQyOumI.roa (hash: Leabib+pYR396O62ZqXXAQ9RyIVRB2I7VcCKzRGI0Zw=) 5: FRe6auZzcSOVPtZ6Q5yvjDHlzS0.roa (hash: 2NaXdTlzJjkR6eXsQNd9ul22Iz8k3jyPNXeVsKS/++A=) 6: GEXA_gDFN_UI9pmu8MV3voaPJJw.roa (hash: dqAjGTOppVUexxUhNJnZSDJjjUoQVnH9/+S3XNxYfss=) 7: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: Pm4MGfSQPgZFQ2+ppGMWHVZ9WEMewE9girDNY/l/vRg=) 8: J0mrTDoDAe4tdcNY4ZTx8ruuu9g.roa (hash: SdkYwpw3qIRaB5VQaHi9AMXoPRVnXFJoZo9ChQzY2P8=) 9: QKd9v1TqhiMsVLAcOxJ22eYxs_g.roa (hash: HKu0bw+bkfxh/NhVSCdqzBjjysK0/agU+8z7cijegyY=) 10: WKhjscqZWdN-nuM8dfIBcstyH14.roa (hash: khUF0nyoDvCPGxtlsBxOqPz0aIco2pUZJy9sOWQaHzM=) 11: qMUUhW1iC-XMKPgcY2-u4nUNHXY.roa (hash: 8IGWcOXBDlPGcQOckJ+GtmlbDYmD6/HkpFAja/aKolM=) 12: tV8pY2AaFoThs7aSR_rVRKM4uZ8.roa (hash: 5JEjFQnGCc8ZZH1Nis0Dk3OW+MkzIr5bBwteIscBMNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 02 Jul 2025 14:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:c6:4a:ba:ca:57:60:6a:e7:bb:b5:e2:b3:0a:87:bb:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: Jul 1 14:01:15 2025 GMT Not After : Jul 2 14:01:15 2025 GMT Subject: CN=2bf67af83d05ad9e2eda58413172a42b8c4255a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a3:17:42:b4:a8:4d:e6:a4:1e:ac:43:be:82: 4a:4c:7f:63:05:07:df:e4:c4:ed:1b:6e:1f:a8:56: 40:a5:c5:db:28:fb:a5:e6:29:99:03:31:aa:30:3c: d9:af:f1:fc:87:2b:a2:d8:36:ee:2d:de:4d:6e:57: 35:55:9b:52:bc:44:39:21:c7:7e:dc:4b:84:c0:9c: 26:88:c1:b0:76:8e:03:2e:9f:9f:ac:15:be:a1:b8: b9:30:96:8a:ac:8f:bb:0f:de:b4:ee:4a:3b:c6:ac: c6:d1:6c:d0:48:4e:ef:35:1e:a0:c3:c6:2e:98:78: a0:bc:dd:7c:bc:03:87:d7:4e:d4:23:6f:03:12:88: 0d:f1:07:1d:37:4a:44:44:8c:4b:0d:00:96:e9:91: 5c:54:70:8c:5f:c7:e3:ed:62:fd:22:91:e8:6d:06: 10:bc:c8:c7:d5:e2:79:7e:b4:22:15:c3:70:65:e3: b3:74:6b:0f:6c:21:0c:86:4a:85:82:d5:63:21:ea: fc:f1:b8:39:a2:e0:d5:4b:db:27:28:8e:53:f2:28: cc:7e:e3:21:16:a4:4d:fc:7d:f1:40:4d:97:1e:c6: 32:36:78:9f:ba:92:7d:22:59:de:b3:75:0d:08:7d: fd:b1:a1:74:8a:91:b6:a8:0c:07:21:66:50:79:e9: 2c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F6:7A:F8:3D:05:AD:9E:2E:DA:58:41:31:72:A4:2B:8C:42:55:A8 X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:e9:69:3a:e1:4b:c5:33:65:47:5b:c8:53:7f:56:44:72:4f: 6c:69:df:dd:89:2a:5d:79:6c:dd:2e:89:01:5d:74:3f:8c:c6: 6d:83:20:61:bd:b7:3f:2a:9f:9d:4f:c4:5a:f0:8f:48:eb:3b: 6a:9a:c0:d6:fa:60:43:0c:24:c0:7c:0b:01:bd:55:fb:c3:10: c2:73:e6:e2:32:40:a6:86:1b:7a:93:98:37:9c:a1:03:57:a2: dc:b4:71:70:67:51:f9:aa:a9:f6:d9:3d:11:23:71:de:fe:99: a2:cd:fd:68:87:aa:2a:13:87:14:a8:c4:6f:c6:9d:7b:e7:c8: c7:18:e9:de:76:c1:05:03:ea:60:29:7a:15:8b:ca:07:0e:4b: 80:33:c1:46:69:b7:f6:0c:ec:d3:4b:70:5c:9f:b8:30:6d:76: 93:64:a7:e8:58:46:0a:d6:55:a5:45:d8:6c:63:2a:65:53:f4: b6:a0:fc:40:fb:a8:1c:e2:04:7d:29:a4:c2:9d:0f:a7:40:9b: 8e:0e:aa:6d:63:17:4e:d9:e6:31:9b:49:fa:1d:67:0c:ad:47: 4c:a4:6a:1d:12:da:88:94:3e:4f:65:15:38:a5:d9:c0:6c:f4: f7:0b:4b:2b:35:e0:a2:60:12:3e:73:0c:8e:1c:b9:65:13:ae: 26:49:00:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfGSrrKV2Bq57u14rMKh7sUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjUwNzAxMTQwMTE1WhcNMjUwNzAyMTQwMTE1WjAzMTEwLwYDVQQD EygyYmY2N2FmODNkMDVhZDllMmVkYTU4NDEzMTcyYTQyYjhjNDI1NWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKMXQrSoTeakHqxDvoJKTH9jBQff 5MTtG24fqFZApcXbKPul5imZAzGqMDzZr/H8hyui2DbuLd5Nblc1VZtSvEQ5Icd+ 3EuEwJwmiMGwdo4DLp+frBW+obi5MJaKrI+7D9607ko7xqzG0WzQSE7vNR6gw8Yu mHigvN18vAOH107UI28DEogN8QcdN0pERIxLDQCW6ZFcVHCMX8fj7WL9IpHobQYQ vMjH1eJ5frQiFcNwZeOzdGsPbCEMhkqFgtVjIer88bg5ouDVS9snKI5T8ijMfuMh FqRN/H3xQE2XHsYyNnifupJ9Ilnes3UNCH39saF0ipG2qAwHIWZQeeksRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCv2evg9Ba2eLtpYQTFypCuMQlWoMB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArOlpOuFL xTNlR1vIU39WRHJPbGnf3YkqXXls3S6JAV10P4zGbYMgYb23PyqfnU/EWvCPSOs7 aprA1vpgQwwkwHwLAb1V+8MQwnPm4jJApoYbepOYN5yhA1ei3LRxcGdR+aqp9tk9 ESNx3v6Zos39aIeqKhOHFKjEb8ade+fIxxjp3nbBBQPqYCl6FYvKBw5LgDPBRmm3 9gzs00twXJ+4MG12k2Sn6FhGCtZVpUXYbGMqZVP0tqD8QPuoHOIEfSmkwp0Pp0Cb jg6qbWMXTtnmMZtJ+h1nDK1HTKRqHRLaiJQ+T2UVOKXZwGz09wtLKzXgomASPnMM jhy5ZROuJkkAIw== -----END CERTIFICATE-----Generated at Tue Jul 1 21:56:44 2025 by rpki-client