$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft File: F7UEL8INm6sWduCa9_8bpb-trnU.mft (raw, json) Hash identifier: bZtx32CeG+tinDTxLsNUG+DaSyr0SYjU9Uo1wLCEHPo= Subject key identifier: 62:E8:02:3C:59:97:B9:03:E0:AE:61:8D:08:EE:A0:AE:0F:30:E4:20 Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Certificate serial: 0197B6D787A631FFA3638B4731A976844CF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft Manifest number: 0F21 Signing time: Sat 28 Jun 2025 14:01:07 +0000 Manifest this update: Sat 28 Jun 2025 14:01:07 +0000 Manifest next update: Sun 29 Jun 2025 14:01:07 +0000 Files and hashes: 1: 5bIFsErhPSlmM37nhrp-eU9l5Y4.roa (hash: W0LEviwE6sQ3/HTSMFGMNopeuLD+ieboT1WS/XkZF1E=) 2: 7rGZ7Kn81ZZ9VKoeH0eLU-kXt9M.roa (hash: wbrR267hltnIltfZnIqap+bK1X+30aRn2vIaMwlZYl0=) 3: 8B9wa-TamsFPX-b9Sjwq2JWmpu0.roa (hash: mYWGy6vPQqUonSl/lzSA7r99GqgJfzuS4OhPL383spw=) 4: A39EZrrDrXLk3J8BZLUN7wQ6C50.roa (hash: Ark/uTgt37FRO8Utnxml8XHzzu9fwVEDGjmOjqbxT4E=) 5: Chb74JL8JJmMbGzdCWsV1I9XTHM.roa (hash: uqlIkNtybKQGK6oYFgs8Gcl/3LifaWUOWXgUOaIWjq4=) 6: Clzzp5xK-yp8rYv85D99LfyAh0E.roa (hash: fGSlKDGqBJuLLFO3poXUGL2bDi2qTj0GaL8Jf09spSU=) 7: F7UEL8INm6sWduCa9_8bpb-trnU.crl (hash: aE0TSCu/1bzRqK/JdW0Sl0zxG2Jj8Xq3ryhpNtYzTaE=) 8: H-wI8WViyvhQ58migChLNEMEYb4.roa (hash: 55jO9FPLyHdmA0ZhDHMAOcwTS+Ma+ZmiF+DkbWOEkzk=) 9: JY2Qbmj2mgX3KDG39J6yIxJr0tc.roa (hash: 1KGhpD1HwCPZtP8VkVF45re3cg2JKrviwS59Vb+WzQ4=) 10: QnOCtXAVmX13ibu9GQu1nSs9w-k.roa (hash: 2ja4/uzYhdT+ao7xdjqgdrp8HFOJkvXcfpdXCeeEDmY=) 11: YRRXPoENpmdtt6jCnuMjG8rrikY.roa (hash: DbDzgUZdi2jed/+3x8UofBswoXpqS+WPTmkA9M7K92c=) 12: bA2-1nnLbrWRGqFV2afM2bzGsYs.roa (hash: FCcUA1F21qdmoEMQzczm0l/NGWKzFMZ3eCmf0F/+Cd0=) 13: blSvVBOfQQX8HPgRw9s7J2WaT7U.roa (hash: vl3RTDfDlA0AmENRkgmM8JLJlNA1WYfzNQBSFmihkQU=) 14: xZC_xBRdyqTElb8rKCSQViw1QQk.roa (hash: Am0BFTFCqKQ+R9vTI46rJ2D1DFX8Hh5BkVmp7WNJvlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:d7:87:a6:31:ff:a3:63:8b:47:31:a9:76:84:4c:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Validity Not Before: Jun 28 14:01:07 2025 GMT Not After : Jun 29 14:01:07 2025 GMT Subject: CN=62e8023c5997b903e0ae618d08eea0ae0f30e420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:75:a2:fb:59:b2:ed:c2:68:6b:f8:5a:f3:e8: 94:cc:a4:be:f6:19:b3:fd:7a:fa:3f:5d:30:2b:45: 60:ff:88:6a:ac:2b:84:8e:1b:07:f1:27:87:8a:b9: 40:4f:0c:cc:4a:bf:ac:e1:28:0a:90:3d:70:0d:36: 20:de:28:05:70:f4:b4:31:48:3e:92:7f:f5:6d:c8: b4:58:4e:40:74:d9:92:e1:05:39:5c:60:c8:62:bf: 08:ce:65:fe:fa:d7:9b:21:ad:22:9f:3c:01:89:b0: 37:cf:66:c2:15:89:3a:7e:f9:80:89:42:a1:04:2e: a9:b5:a1:28:07:94:7d:f1:2f:dc:d5:2c:d1:08:f3: c6:ee:00:45:d3:e8:d5:af:82:70:8b:c0:ae:72:6c: 53:ec:d5:a8:3f:06:3f:e2:79:b0:bc:8a:e2:19:8e: 95:08:0c:48:b5:af:6b:b4:ae:af:21:c2:1d:8d:28: 6c:39:62:41:f2:23:e6:16:ea:99:73:22:a8:47:6b: 55:be:d7:ec:b5:a8:ee:e7:db:08:fe:88:0c:8d:4a: e1:6e:75:e3:ed:66:86:31:d1:d6:ee:7c:93:58:db: 75:a4:95:e4:4b:a2:09:69:5e:b9:2f:d0:cc:4e:be: fe:fd:8b:27:e6:2e:ec:ab:63:44:15:db:85:a1:e9: ab:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E8:02:3C:59:97:B9:03:E0:AE:61:8D:08:EE:A0:AE:0F:30:E4:20 X509v3 Authority Key Identifier: keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:89:af:2d:cb:6f:7f:51:9a:cd:30:d0:f5:f6:2b:6f:f7:f7: 45:53:70:6a:2d:70:10:58:9f:bd:dd:a4:dc:04:41:f7:18:4f: 76:3a:e1:1d:5b:b1:18:43:51:91:e7:11:85:f6:85:ad:e2:39: 3a:db:b2:15:01:34:44:c1:00:94:3e:75:01:3a:e7:93:16:50: d3:f9:52:69:5b:c3:b5:73:ec:56:a8:71:29:f8:62:e8:d2:95: 09:ec:37:95:83:24:55:41:54:fb:79:f7:76:cc:71:77:8d:fc: 16:3f:ad:bd:a9:46:ba:47:4e:93:5e:e7:55:60:20:a9:0b:4f: 5f:9c:33:d7:ca:73:8d:12:7f:56:64:f2:8d:59:8d:a8:db:25: 81:1c:f7:87:2c:4d:1e:fb:4f:06:d8:4b:b0:88:22:3a:4c:02: d2:85:93:86:7b:61:13:38:8d:81:8c:cd:2a:96:90:5e:9a:cb: cb:8e:a2:9f:24:14:c4:50:b4:d1:cb:ff:9c:4a:d3:97:09:77: 84:86:49:cb:54:bd:c6:9d:e3:05:0b:c9:ea:64:b1:77:94:c4: 45:b1:45:5e:9a:59:a0:b0:3a:07:41:9b:89:22:4d:fd:6a:c7: 17:33:5f:f3:a7:af:78:3c:65:14:68:f5:7e:bb:b7:96:37:08: 6f:df:c7:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe214emMf+jY4tHMal2hEz4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh ZGFlNzUwHhcNMjUwNjI4MTQwMTA3WhcNMjUwNjI5MTQwMTA3WjAzMTEwLwYDVQQD Eyg2MmU4MDIzYzU5OTdiOTAzZTBhZTYxOGQwOGVlYTBhZTBmMzBlNDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3Wi+1my7cJoa/ha8+iUzKS+9hmz /Xr6P10wK0Vg/4hqrCuEjhsH8SeHirlATwzMSr+s4SgKkD1wDTYg3igFcPS0MUg+ kn/1bci0WE5AdNmS4QU5XGDIYr8IzmX++tebIa0inzwBibA3z2bCFYk6fvmAiUKh BC6ptaEoB5R98S/c1SzRCPPG7gBF0+jVr4Jwi8CucmxT7NWoPwY/4nmwvIriGY6V CAxIta9rtK6vIcIdjShsOWJB8iPmFuqZcyKoR2tVvtfstaju59sI/ogMjUrhbnXj 7WaGMdHW7nyTWNt1pJXkS6IJaV65L9DMTr7+/Ysn5i7sq2NEFduFoemr5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGLoAjxZl7kD4K5hjQjuoK4PMOQgMB8GA1UdIwQY MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt YmM2Nzk0ZTk1ZTVhLzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4mvLctv f1GazTDQ9fYrb/f3RVNwai1wEFifvd2k3ARB9xhPdjrhHVuxGENRkecRhfaFreI5 OtuyFQE0RMEAlD51ATrnkxZQ0/lSaVvDtXPsVqhxKfhi6NKVCew3lYMkVUFU+3n3 dsxxd438Fj+tvalGukdOk17nVWAgqQtPX5wz18pzjRJ/VmTyjVmNqNslgRz3hyxN HvtPBthLsIgiOkwC0oWThnthEziNgYzNKpaQXprLy46inyQUxFC00cv/nErTlwl3 hIZJy1S9xp3jBQvJ6mSxd5TERbFFXppZoLA6B0GbiSJN/WrHFzNf86eveDxlFGj1 fru3ljcIb9/HmQ== -----END CERTIFICATE-----Generated at Sat Jun 28 19:30:11 2025 by rpki-client