$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft File: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft (raw, json) Hash identifier: OOFLiRUqxzhbzoQJ9qGhZE8rl95LqRKdBigWGODpNbg= Subject key identifier: F4:0A:E0:70:B4:BF:60:3C:35:6A:A4:74:09:B0:AE:CF:DA:F6:40:92 Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d Certificate serial: 0197B70E98C792ACE76B339C4247A0B69233 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft Manifest number: 118B Signing time: Sat 28 Jun 2025 15:01:16 +0000 Manifest this update: Sat 28 Jun 2025 15:01:16 +0000 Manifest next update: Sun 29 Jun 2025 15:01:16 +0000 Files and hashes: 1: DBze0gTqh5SDOw7x6hoGuoE8yr4.roa (hash: ZLoARLtI2IGjjdgEEhL+2Ku7l0nsKThYXfmPapH0dJU=) 2: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl (hash: ewDVF03eDW0UcVsBU0FCxN7CfLE+XLTIuVYvP4mKbtI=) 3: JEDgkveNrJ65vuQX11mg8UnyJUY.roa (hash: q6FNEl8CDSP0PRckpcDIVuz5w5t1HfMs8z/qUPyjC5I=) 4: KjkD8Cm8Nvn5kLoxMWRB37y0yGg.roa (hash: HwYwsaGRIKEpmjSBA+wSKugW77viLOfzOy52g+ZRvys=) 5: NcbkyJf0XrQlWSuaG_6rLIv8CEA.roa (hash: t1bpX5VtlqYKcE80al52Eab7HsC+sX2g/k7XldXhhvc=) 6: SAifF78qmhwobbNifv-ncSGKlCQ.roa (hash: /saAmnnB/hN9KICwUzdIN9J64c5nmcrdQQhBsyGdv1o=) 7: TpQ5Z-UdKferYkvwPdK8R7DUnj0.roa (hash: QghfP6CKI1HCADXXFPrgTYVwEH/4oteFqhbAKuXsWlY=) 8: il06Z06HBr4UubVDG3con6FSTJE.roa (hash: 6jxCobZPgi+fb0sp+gKSIVfeSMM4jnCmJ/PQ50Rwxgc=) 9: n3eGk4GZdLWL8rCKUegiOGKLLGE.roa (hash: T8Y25mtZcw8oW9dkDTGN7ilbRkb3BxSHEAwHzK4aavQ=) 10: uVOilRs9nlSZX9PqVogOUrvkQSM.roa (hash: /mCUbTOWeinlY+5TK02vBXtRmjYZ4tmNd4E1mVfIF/4=) 11: xfa86z-_cd1JUN4qijUc-8zKEIc.roa (hash: V2BeXBWhsFE6+Rnj92uoYp038Gza7m9G0eWAbg/3QGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:0e:98:c7:92:ac:e7:6b:33:9c:42:47:a0:b6:92:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d Validity Not Before: Jun 28 15:01:16 2025 GMT Not After : Jun 29 15:01:16 2025 GMT Subject: CN=f40ae070b4bf603c356aa47409b0aecfdaf64092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7e:1c:5b:fb:27:0f:53:a3:7b:a4:54:5d:75: f4:28:42:5e:01:4b:3d:ed:6e:06:b2:93:ab:4a:dc: 67:16:e7:2a:06:a5:48:56:c8:82:51:7f:92:e9:8f: 41:1d:82:30:12:13:87:9a:dd:3f:50:e3:7b:98:a5: d9:c6:bd:21:69:29:1d:dd:11:48:0a:88:f7:3e:d2: ff:53:4f:05:fc:38:23:7e:df:08:8c:48:23:02:21: 70:81:3c:2a:f7:0c:21:a7:73:de:31:ec:ed:d7:c5: bd:31:79:19:70:e7:eb:e5:05:c1:04:42:9d:e5:9d: 2d:72:ba:6c:b9:53:81:7b:b7:a7:dd:2a:b7:ff:e5: 21:91:30:08:96:ac:41:9c:9b:75:81:7b:da:c0:32: b7:e0:0d:52:94:fb:d1:19:e5:ca:5a:be:f3:20:c1: fb:0d:b9:5d:0e:08:b9:bd:f7:60:f9:a8:4c:3f:21: aa:a6:c2:4f:53:4a:35:45:26:b3:2a:58:65:88:bf: 66:4a:fd:d3:18:81:ad:d0:86:8b:c6:e6:3d:12:25: 60:d2:ee:0e:c2:23:2e:a8:b9:d8:45:a1:ba:ba:5f: 2b:35:4c:fc:1c:62:6f:f5:4f:56:52:28:16:19:11: 1d:2c:ae:c6:a9:b2:90:57:79:bc:16:8c:aa:28:d8: 0f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:0A:E0:70:B4:BF:60:3C:35:6A:A4:74:09:B0:AE:CF:DA:F6:40:92 X509v3 Authority Key Identifier: keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:05:63:08:af:da:43:64:a4:61:90:d1:47:aa:1e:7f:67:9f: 2c:60:41:d6:6b:82:e5:06:9d:d3:5c:c8:52:1a:30:4c:a4:be: 0a:e2:5a:89:9c:75:be:02:72:52:49:50:9b:c8:84:c4:a9:bc: f0:59:4b:85:b9:88:26:d0:35:5b:5e:ea:7f:70:d0:4e:74:1e: 4f:d6:76:d4:8d:3c:fd:73:17:1d:1a:76:88:ce:de:f1:a5:19: 9d:e9:5c:d0:06:7f:e2:d3:32:38:71:47:3a:73:40:e8:a6:4f: 9b:c5:0e:ca:90:51:a2:68:33:ec:de:77:63:83:b4:00:fb:a1: 2c:1d:20:81:6c:9b:32:56:f9:f0:89:97:66:e9:d1:f3:1d:a9: 89:97:b2:ef:7c:ec:f9:7e:40:1f:87:53:bf:c2:0b:cf:d8:7f: 88:42:d5:40:97:fe:4f:60:e4:55:24:5f:77:0f:1b:1e:67:b7: 5d:70:40:d7:f3:b8:cb:3a:ef:71:56:1b:20:ca:19:a2:26:d9: 2c:48:48:a9:33:07:69:6d:2a:b2:28:91:54:d0:dc:65:fe:2d: 12:90:ad:4f:c7:44:b5:01:28:79:9a:2e:35:8a:7e:55:19:8d: c7:17:d2:70:f7:5b:ea:43:f5:16:8d:46:8b:3e:9c:7d:66:f7: ff:98:ff:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3DpjHkqznazOcQkegtpIzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYTUxYTBiYzBmMGFmZWJiZjZkNWQ5MjdmZTFmOTgxNmY1 MjM1MmQwHhcNMjUwNjI4MTUwMTE2WhcNMjUwNjI5MTUwMTE2WjAzMTEwLwYDVQQD EyhmNDBhZTA3MGI0YmY2MDNjMzU2YWE0NzQwOWIwYWVjZmRhZjY0MDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn4cW/snD1Oje6RUXXX0KEJeAUs9 7W4GspOrStxnFucqBqVIVsiCUX+S6Y9BHYIwEhOHmt0/UON7mKXZxr0haSkd3RFI Coj3PtL/U08F/Dgjft8IjEgjAiFwgTwq9wwhp3PeMezt18W9MXkZcOfr5QXBBEKd 5Z0tcrpsuVOBe7en3Sq3/+UhkTAIlqxBnJt1gXvawDK34A1SlPvRGeXKWr7zIMH7 DbldDgi5vfdg+ahMPyGqpsJPU0o1RSazKlhliL9mSv3TGIGt0IaLxuY9EiVg0u4O wiMuqLnYRaG6ul8rNUz8HGJv9U9WUigWGREdLK7GqbKQV3m8FoyqKNgPNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQK4HC0v2A8NWqkdAmwrs/a9kCSMB8GA1UdIwQY MBaAFBulGgvA8K/rv21dkn/h+YFvUjUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQt ODcxZjllZDcwOGUwLzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQtODcxZjllZDcwOGUw LzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXgVjCK/a Q2SkYZDRR6oef2efLGBB1muC5Qad01zIUhowTKS+CuJaiZx1vgJyUklQm8iExKm8 8FlLhbmIJtA1W17qf3DQTnQeT9Z21I08/XMXHRp2iM7e8aUZnelc0AZ/4tMyOHFH OnNA6KZPm8UOypBRomgz7N53Y4O0APuhLB0ggWybMlb58ImXZunR8x2piZey73zs +X5AH4dTv8ILz9h/iELVQJf+T2DkVSRfdw8bHme3XXBA1/O4yzrvcVYbIMoZoibZ LEhIqTMHaW0qsiiRVNDcZf4tEpCtT8dEtQEoeZouNYp+VRmNxxfScPdb6kP1Fo1G iz6cfWb3/5j/ZQ== -----END CERTIFICATE-----Generated at Sat Jun 28 19:55:46 2025 by rpki-client