$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft File: kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json) Hash identifier: yEYgfpzRS4OV499Q+upYbdYDzKqEDiLCA+QvxWmuJpw= Subject key identifier: 28:AA:06:03:4E:27:67:B6:5D:B4:0B:A1:FB:43:8B:16:C4:4D:2C:96 Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Certificate serial: 0197B8FCCFA4DF3D7015916A0A3FACD3D3A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft Manifest number: 15DA Signing time: Sun 29 Jun 2025 00:01:05 +0000 Manifest this update: Sun 29 Jun 2025 00:01:05 +0000 Manifest next update: Mon 30 Jun 2025 00:01:05 +0000 Files and hashes: 1: 1Is4Dx2b4hAEbNi2pJoiESDUUOg.roa (hash: Iq8BDLkXu6DWvDv/qAdFA5wJ/wndBJHGHruYEfWId0I=) 2: 5SbiNIlOSo5rSNp1qoSW-dXTShg.roa (hash: uVc4NzR1mD0S0EgbWMAzbFbtAKv13hqUCRgnRLw7Bjw=) 3: Jds9VOdsrBFbfq4zn6-y356BGP4.roa (hash: HezTqg7qCIYcC14zyjNtznQH/Br2gzRPiHXceTw8UGg=) 4: M5yL7Qczw_r_ypIKC8v2b5DfsHQ.roa (hash: ySMymQ6+hiFwYh+NPFP79oquje9btPVfCDVyeZ/3kTU=) 5: Nc2fha0lLWlvc6xMAIxXT07_q2w.roa (hash: mO6BTT3XjIVWSygzqP8zo/wWNxMwAbGXuPNN6vNEhUE=) 6: VHnEdWOU21TmJWTQH9-doQXQ0yk.roa (hash: pFCoqQmJJvFJk4sf3//959OhDhdVi2aYYgZGYzF037A=) 7: ZR5HRzEqKWtKpqmMzL4r6DgJHWw.roa (hash: VJyDWQzVLgkrKXE4tqLoSvO15wkiKpkLd3L7U2g60hg=) 8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: 6YIC1Eq+ixVu3PGjUx/cdLWlR3/96DZCyLtKc/ijiQw=) 9: qpIHRqhd7Nb3PZWHKXegTOoXNV4.roa (hash: Zo5QxFaHcYek6dzqi+zquJFUfLpMRdJYYo05MF+VngU=) 10: swmwnpHGQQ_MAJYmDfyapkyOrco.roa (hash: tPimhTpohNCgbw9pSvdpk8DZxmGSBfS96JkOf5fTibk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 00:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:fc:cf:a4:df:3d:70:15:91:6a:0a:3f:ac:d3:d3:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Validity Not Before: Jun 29 00:01:05 2025 GMT Not After : Jun 30 00:01:05 2025 GMT Subject: CN=28aa06034e2767b65db40ba1fb438b16c44d2c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fc:98:7a:79:f3:62:ab:ca:de:6e:79:f9:2f: 5b:93:63:3a:0d:c4:bc:4c:27:73:42:2a:0f:3d:41: 19:a9:c9:9a:b6:de:f4:fa:6e:5a:38:5d:3f:81:5d: 7a:90:d6:32:01:0f:51:ef:6b:ed:cf:1d:e2:86:d7: 6f:6f:3c:e0:55:18:8c:38:13:da:a0:5e:48:d3:bd: 82:55:6c:0c:0f:b7:40:4d:8a:62:91:4f:1c:af:e5: d0:05:a6:32:05:48:63:81:d6:ce:86:74:55:83:b7: 71:a3:72:03:fc:9d:60:1e:d2:bf:b7:2b:ed:36:2d: 07:2b:aa:ab:ff:cd:b8:07:96:23:ab:78:77:b1:f5: 82:f8:07:3c:29:db:96:5c:c4:36:5b:ee:a0:43:35: 0f:f9:2d:7d:70:ec:14:dd:c3:3c:a6:d7:9b:d2:66: 5f:4e:f9:f6:5d:5c:5d:96:37:cb:ff:5a:23:c7:bf: e1:4b:2c:dc:93:98:08:a4:4a:32:31:1f:e6:43:8d: d8:4f:12:be:88:30:60:07:ae:a1:1c:53:21:9d:f0: 39:5e:64:69:2d:27:bb:a7:79:f7:3c:b6:97:3d:f7: 07:75:a3:80:fa:51:bf:2c:fd:e9:e6:56:6e:65:8d: 2d:71:f9:d6:a0:d7:7c:c9:80:ea:da:0a:f2:39:e5: cc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:AA:06:03:4E:27:67:B6:5D:B4:0B:A1:FB:43:8B:16:C4:4D:2C:96 X509v3 Authority Key Identifier: keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:c3:23:24:4c:e1:98:3c:c6:ae:c3:78:8f:3d:8f:38:33:c3: 24:58:e4:74:36:92:e2:f4:7b:6f:12:a0:c8:af:e0:7d:bd:f7: a2:4f:9f:74:d4:de:3b:ed:d9:9c:aa:e1:36:4e:1d:4d:4a:c4: ee:4d:cd:04:9e:72:ce:f4:d2:34:ec:6d:6d:e8:c2:ad:0b:67: ed:a4:fc:5a:54:83:fc:b2:85:a1:73:fb:72:ef:bf:d8:95:d2: 66:2a:8d:58:d3:f0:cf:bc:06:fd:de:cb:92:11:8d:06:30:a7: 1c:ae:a7:54:5c:18:e3:f1:1d:03:b5:5e:53:be:c7:c1:a1:09: cb:2e:d4:31:23:44:64:9d:25:72:b1:9f:f5:11:12:fa:2d:8d: e5:bd:f5:07:49:ae:53:ec:35:3e:29:d6:e2:62:d0:6a:02:61: 65:44:ba:2a:df:72:a8:88:56:73:dc:2a:7a:08:5c:c9:a1:05: 76:19:76:de:39:e1:1c:87:81:e4:a7:b3:f4:58:be:64:65:d2: 10:48:e9:d8:d1:c8:62:0b:90:1a:e6:94:2b:df:cb:34:a3:6e: ba:d3:e4:9d:94:3f:92:ac:c6:d7:c9:b3:92:8b:69:f7:45:0a: ab:ef:c6:df:9a:f0:0e:b1:b2:14:a8:3c:51:a5:9f:60:63:bb: 25:2b:0c:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4/M+k3z1wFZFqCj+s09OoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5 ZTUwNTUwHhcNMjUwNjI5MDAwMTA1WhcNMjUwNjMwMDAwMTA1WjAzMTEwLwYDVQQD EygyOGFhMDYwMzRlMjc2N2I2NWRiNDBiYTFmYjQzOGIxNmM0NGQyYzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PyYennzYqvK3m55+S9bk2M6DcS8 TCdzQioPPUEZqcmatt70+m5aOF0/gV16kNYyAQ9R72vtzx3ihtdvbzzgVRiMOBPa oF5I072CVWwMD7dATYpikU8cr+XQBaYyBUhjgdbOhnRVg7dxo3ID/J1gHtK/tyvt Ni0HK6qr/824B5Yjq3h3sfWC+Ac8KduWXMQ2W+6gQzUP+S19cOwU3cM8pteb0mZf Tvn2XVxdljfL/1ojx7/hSyzck5gIpEoyMR/mQ43YTxK+iDBgB66hHFMhnfA5XmRp LSe7p3n3PLaXPfcHdaOA+lG/LP3p5lZuZY0tcfnWoNd8yYDq2gryOeXMewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCiqBgNOJ2e2XbQLoftDixbETSyWMB8GA1UdIwQY MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt OTA5NmUxNjc0ZTIyLzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8MjJEzh mDzGrsN4jz2PODPDJFjkdDaS4vR7bxKgyK/gfb33ok+fdNTeO+3ZnKrhNk4dTUrE 7k3NBJ5yzvTSNOxtbejCrQtn7aT8WlSD/LKFoXP7cu+/2JXSZiqNWNPwz7wG/d7L khGNBjCnHK6nVFwY4/EdA7VeU77HwaEJyy7UMSNEZJ0lcrGf9RES+i2N5b31B0mu U+w1PinW4mLQagJhZUS6Kt9yqIhWc9wqeghcyaEFdhl23jnhHIeB5Kez9Fi+ZGXS EEjp2NHIYguQGuaUK9/LNKNuutPknZQ/kqzG18mzkotp90UKq+/G35rwDrGyFKg8 UaWfYGO7JSsM5w== -----END CERTIFICATE-----Generated at Sun Jun 29 09:33:31 2025 by rpki-client