$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft File: I0Rtp6cLznc-wrwWVarjDDwYQSw.mft (raw, json) Hash identifier: foqsHuRwX7Lrj5QebuBLsV8w78DaHrFSxMaywvXhnwU= Subject key identifier: 6B:75:56:FF:73:4F:70:85:BC:8E:F7:CC:89:42:B1:50:9D:53:FC:7A Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c Certificate serial: 0197B70EED0F6CD7FE64E3FE4EE787622AFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft Manifest number: 1375 Signing time: Sat 28 Jun 2025 15:01:37 +0000 Manifest this update: Sat 28 Jun 2025 15:01:37 +0000 Manifest next update: Sun 29 Jun 2025 15:01:37 +0000 Files and hashes: 1: 1-DmgZ4SOp-NyMxLpBYaEtj39Pdc.roa (hash: moNVW0pEVWJfvkZEJ959J7HVzxYxrRxeZe7wePoILkM=) 2: 1-YvBQ0BXrsF-NI7ubQxbzvPVuzg.roa (hash: eYRmazTnlT6QkpTc8BcLL4cZu0o6zfLVuHBleuRca74=) 3: FwySP1jVKL7DmmlRNwZnvOJofjw.roa (hash: F8V8HLYupPXjwfMEbx0g1ieMP6WPPz1HmoVO8jTtRCg=) 4: I0Rtp6cLznc-wrwWVarjDDwYQSw.crl (hash: FT+GDSm8V5sfz8WbhNM7thCV+lGwzJisHC3S8smOf9I=) 5: Xu2K8fW-gQnYV7VE3ISwB8N68f8.roa (hash: NKQq6ePbr62hGHn3QtTkpNNxc85cdItsXJmI3/Mzf2w=) 6: bXcsNUMfdZBR3tv1r8dI-NGTxGI.roa (hash: nSyMcXVhj3Lt4TUfuUh042NUrc5IpwBc7m8EmxqlbJw=) 7: d_P2C7-8KzXEXKrYSD9DOI8LiWE.roa (hash: Yd4prnJa4gstJKWN3oZHIXfbfrVyLQkl2GQSNyCI7uQ=) 8: k5bIb9MZd-l_B-bxXKNoMlRDovA.roa (hash: bpuvw96upd8j55DJW2izTXwq0PIjcaMc/13PHw88j0I=) 9: leUb75eQIxyb-VxN49MBjH1YF7k.roa (hash: kyA2+f/9l+pKqkl9Or57N7CwCtWEqE5/Far2bCfSZ4I=) 10: pqM1u8SkS4zcFQvrBhQWpXPMYCA.roa (hash: ZvRrYdTYDz9FJEg1Ikh5qg9AfwzK1a1b92vZCCUcbys=) 11: qV9uaYW0EJ9RfJ2uJjNKqD5z7XA.roa (hash: 8zBVfYPjKnKjKryP+fVFU4l51KGHl1B5bpWFMv1A9Mk=) 12: sDrv6ds57QYfp4Z_4o5IpblURKI.roa (hash: Y8MxO27e+WV4vIqzW7fZxZuurHymmQUKVTNCec7B22g=) 13: wFX7xPpJ7yA033Ye7jyB7b5hfrY.roa (hash: cWLM1VzdX6e7FN9H2A5u+k5ZkEsPKCYG7CFbFvNUR/k=) 14: xxa6C-pa80quO5ROYbjP391EF1Y.roa (hash: kO5NzNIL7QO5wmPmlUrjQ/tzsh5UuDfcIRoRWEvLEF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:0e:ed:0f:6c:d7:fe:64:e3:fe:4e:e7:87:62:2a:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c Validity Not Before: Jun 28 15:01:37 2025 GMT Not After : Jun 29 15:01:37 2025 GMT Subject: CN=6b7556ff734f7085bc8ef7cc8942b1509d53fc7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9e:fd:17:c1:95:d3:12:5b:5f:e6:86:b5:03: c7:80:ad:af:ec:d3:54:da:3b:07:ac:f6:18:1e:d0: 30:eb:57:b2:89:68:2c:4c:91:37:38:93:30:01:60: 6d:99:98:20:36:6d:0a:9c:83:9a:74:2f:23:93:48: 8e:04:95:81:dc:ae:47:32:90:a8:cd:d0:8a:9d:62: 59:90:68:ad:d4:d6:f3:c2:3c:44:3a:2f:58:c2:f3: 90:15:f4:83:a5:99:6e:57:c6:29:fd:f1:92:44:13: 4b:7e:75:d4:fb:37:3f:51:2e:3b:7d:ad:41:4a:30: a1:5a:a8:bb:62:1a:13:b5:81:65:78:4e:0d:65:5e: d5:47:05:78:5f:b5:46:00:e7:de:99:66:ba:71:95: 9d:bb:47:c6:65:fa:58:53:37:57:f3:02:49:d9:2e: 56:8b:bb:5a:bc:72:10:4b:4d:57:78:0d:60:e1:78: 9c:d5:17:7d:50:ad:8c:67:a6:88:45:7a:0b:6c:c6: 7a:e4:a2:41:d2:6b:3e:b4:cb:30:7d:db:60:03:3a: 2e:76:e4:5a:a6:8a:c0:90:60:3f:a4:43:4e:73:aa: 23:cc:a0:bb:e7:41:97:51:37:41:73:0c:f1:de:0b: ad:30:8c:42:31:64:7a:41:a1:f8:31:d7:69:c3:2b: e2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:75:56:FF:73:4F:70:85:BC:8E:F7:CC:89:42:B1:50:9D:53:FC:7A X509v3 Authority Key Identifier: keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:5f:9a:0a:28:59:77:e7:10:52:72:81:33:20:09:d4:a2:c7: 93:21:61:09:8f:cd:20:09:88:a1:03:c5:3b:0e:eb:4b:29:d1: 57:93:59:c7:fd:8b:1c:84:73:7f:0a:dc:08:90:0a:15:5d:9f: c6:1f:51:6c:97:14:c4:a9:4a:10:4c:bb:e4:60:99:90:45:d4: d3:c7:86:d7:de:73:31:2e:59:e0:b7:b4:e3:3c:2c:b7:f9:de: 02:ba:26:bb:29:71:e1:6f:76:54:56:a4:b1:83:4f:a3:53:64: f0:c9:63:50:cd:34:c0:70:a9:5e:c0:6d:b9:21:2b:b4:49:02: c8:1f:f8:05:75:ec:b8:db:79:75:0e:a3:b9:cc:e8:56:82:27: ac:aa:4d:5a:5c:2c:a1:86:f0:86:cc:19:26:ed:64:1e:b7:51: 43:a7:80:94:0a:18:6a:b7:ef:4b:64:da:8c:95:7c:15:9b:33: d3:6c:6e:72:95:9e:08:b2:c6:dc:74:35:3e:4d:bc:65:29:e9: ef:e1:75:25:f3:6f:19:76:eb:b1:10:be:09:4f:63:aa:f5:00: 1f:74:3b:5a:df:4c:a3:48:aa:c8:9b:da:2e:52:5c:40:f1:d7: b6:f6:cc:5c:11:6b:9b:b6:e8:c2:e9:81:62:4d:e0:2f:f5:4e: e3:73:95:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3Du0PbNf+ZOP+TueHYir+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNDQ2ZGE3YTcwYmNlNzczZWMyYmMxNjU1YWFlMzBjM2Mx ODQxMmMwHhcNMjUwNjI4MTUwMTM3WhcNMjUwNjI5MTUwMTM3WjAzMTEwLwYDVQQD Eyg2Yjc1NTZmZjczNGY3MDg1YmM4ZWY3Y2M4OTQyYjE1MDlkNTNmYzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop79F8GV0xJbX+aGtQPHgK2v7NNU 2jsHrPYYHtAw61eyiWgsTJE3OJMwAWBtmZggNm0KnIOadC8jk0iOBJWB3K5HMpCo zdCKnWJZkGit1NbzwjxEOi9YwvOQFfSDpZluV8Yp/fGSRBNLfnXU+zc/US47fa1B SjChWqi7YhoTtYFleE4NZV7VRwV4X7VGAOfemWa6cZWdu0fGZfpYUzdX8wJJ2S5W i7tavHIQS01XeA1g4Xic1Rd9UK2MZ6aIRXoLbMZ65KJB0ms+tMswfdtgAzouduRa porAkGA/pENOc6ojzKC750GXUTdBcwzx3gutMIxCMWR6QaH4MddpwyviOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGt1Vv9zT3CFvI73zIlCsVCdU/x6MB8GA1UdIwQY MBaAFCNEbaenC853PsK8FlWq4ww8GEEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQt MjVjYzlkNmNmYmI5LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQtMjVjYzlkNmNmYmI5 LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1+aCihZ d+cQUnKBMyAJ1KLHkyFhCY/NIAmIoQPFOw7rSynRV5NZx/2LHIRzfwrcCJAKFV2f xh9RbJcUxKlKEEy75GCZkEXU08eG195zMS5Z4Le04zwst/neAromuylx4W92VFak sYNPo1Nk8MljUM00wHCpXsBtuSErtEkCyB/4BXXsuNt5dQ6juczoVoInrKpNWlws oYbwhswZJu1kHrdRQ6eAlAoYarfvS2TajJV8FZsz02xucpWeCLLG3HQ1Pk28ZSnp 7+F1JfNvGXbrsRC+CU9jqvUAH3Q7Wt9Mo0iqyJvaLlJcQPHXtvbMXBFrm7bowumB Yk3gL/VO43OVmg== -----END CERTIFICATE-----Generated at Sat Jun 28 19:26:11 2025 by rpki-client