$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft File: MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft (raw, json) Hash identifier: udvvJRwSjWr0mSL4klTwaenLMQqmPgwr8NlqWoain9I= Subject key identifier: 80:D2:4D:6A:86:76:9D:D4:A4:B8:B8:F2:15:97:F3:FC:07:8D:C9:71 Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Certificate serial: 0197D105945CC4A25A4A19E108B9E786CAB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft Manifest number: 15CF Signing time: Thu 03 Jul 2025 16:01:33 +0000 Manifest this update: Thu 03 Jul 2025 16:01:33 +0000 Manifest next update: Fri 04 Jul 2025 16:01:33 +0000 Files and hashes: 1: 7sUlQFo2i2sGz_Vst269K_D-c-U.roa (hash: awgZwYT2+l2C5RaRZHXtrmJNbZfubWqB+2+301bBQBU=) 2: MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl (hash: ZFCrf97tTrQCQodmnmHxWoZ/KguloUu8esjTPYk8KFg=) 3: N6977Tm3BxtAWxQMZFqlxhSXVqI.roa (hash: avNpgfUO6xrr8rilL4FRK/J7Wxu+LI2r4IfOPlXIeJI=) 4: OqobHIZLFLbZk0OR9E-PF1zk1Lw.roa (hash: Op02L+M19/z5j79qbmcRNqPT6icOYzM0VJzQXj5mmv8=) 5: TEsKuOI8Wr3xLM61BToTHvaxLG0.roa (hash: rGoXl2FfQwurIyUgTu1Dn9mUe7pNqUYv/AJnXAkg28U=) 6: i7jWP6E6hcB7Kvbk4mThF2buTs8.roa (hash: OqH0B+K5eYlDv/BpS97jLxNiwQggexBzkbjaho23mP4=) 7: nqc-9YDKd79YsE90D6bPl2BpKgE.roa (hash: VLqSIZaMWc7sFSdSIdfn5EqqZNs2ezp2l6diOyM4sNY=) 8: rgeIy49dLmNJww9sp8JRWKXD-n8.roa (hash: L8MUX4zAy84NplfwfzJB7WI9HcrmosjCL1UuxDQCssQ=) 9: xZ2vcM-Bgt-peFWCq0zItN8_N0c.roa (hash: IJSnWW805B1m7rlymmTJG2w628sB6dalr9ieL5l/bMk=) 10: zZigjvCd6NcudatYLyfpsyOboFA.roa (hash: vGtEfaZy/GpSD6Vra1IvWRrERF5jpy55majvnW9xdMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 04 Jul 2025 14:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:d1:05:94:5c:c4:a2:5a:4a:19:e1:08:b9:e7:86:ca:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Validity Not Before: Jul 3 16:01:33 2025 GMT Not After : Jul 4 16:01:33 2025 GMT Subject: CN=80d24d6a86769dd4a4b8b8f21597f3fc078dc971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:63:ab:86:2f:bb:e0:c1:06:a9:7e:90:b3:ef: a9:3c:ba:ee:89:c4:16:b6:b7:60:43:02:dc:91:78: 02:61:02:2d:58:b8:2e:7a:26:24:e2:9b:e2:f4:fa: af:2c:e3:11:5f:46:50:69:b1:11:1b:e1:b6:a8:c3: 67:18:c0:eb:3c:87:21:c0:a8:97:4c:12:8b:89:46: 24:cc:1c:95:1d:45:b7:61:71:b6:b8:d8:5c:4c:2b: 60:5c:50:37:49:26:17:dc:3c:91:2a:64:d0:1b:ca: 2f:26:c0:ed:75:15:0f:e3:38:08:1c:a8:dc:1a:6b: b7:4b:00:7a:f1:f1:38:c4:5d:67:70:8e:ba:db:1a: 46:ad:74:83:9b:5f:59:77:69:57:6c:5b:3b:a3:75: 12:a9:6d:11:22:07:1b:56:ec:ca:e4:37:90:28:ec: 64:62:bd:2a:1e:35:a1:42:20:12:1e:ba:47:7b:ea: 0b:1e:4c:9e:7b:86:53:41:d1:0f:b4:eb:62:54:e8: aa:e1:1d:df:ed:6d:67:af:ea:18:53:92:cf:6b:ca: 9c:5e:08:6b:03:5a:f7:a3:23:e5:07:ac:33:90:9b: d3:fc:20:b7:e0:90:3e:26:d7:66:69:ed:15:43:81: 7f:78:18:54:07:24:84:07:24:36:3a:80:14:7c:b6: 2f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D2:4D:6A:86:76:9D:D4:A4:B8:B8:F2:15:97:F3:FC:07:8D:C9:71 X509v3 Authority Key Identifier: keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:2e:af:2e:c9:b7:23:f1:a7:ce:04:14:08:88:25:45:a1:75: 47:49:75:ff:30:36:36:5d:93:b8:36:2b:6c:60:cc:06:02:c9: 99:63:d5:77:fe:08:a2:75:38:f1:f9:7a:97:8a:96:25:39:b9: 42:56:d1:f7:a3:1f:ee:7d:b5:37:75:8a:5b:ec:6f:ef:b0:ea: 2a:1b:da:5a:30:4e:8d:f7:83:52:f3:ab:a4:c2:ce:18:ec:d1: 3e:a1:c1:0c:0c:f2:24:0c:7f:0f:2f:0d:c6:7a:8a:58:d3:64: 92:c5:f9:df:a5:7e:69:5f:32:91:68:39:26:63:72:d6:21:78: ec:f2:eb:08:e4:08:d9:44:b3:f1:5e:11:88:a2:03:f3:1c:ce: 4a:b2:15:54:80:1c:33:15:f9:a0:f8:1e:fa:9e:06:9b:f9:9c: 0c:0b:32:d4:79:d7:74:8d:5d:0b:b1:aa:7f:2f:61:bb:33:7a: 52:41:d4:f0:c3:90:5b:8a:19:2c:25:bd:bc:db:f2:6d:4c:b6: 27:e5:50:24:db:c8:e0:4f:92:c9:ae:5e:45:3a:9f:2f:f1:68: 92:fa:fa:7f:52:86:d2:47:24:3c:8d:ca:f2:50:1e:33:ae:e1: b4:ae:66:a3:16:14:24:cc:7e:82:3f:53:41:ff:1e:83:f6:b4: b5:76:bb:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfRBZRcxKJaShnhCLnnhsqwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTA4ZmI3ODFjYTZkYmQ4MjIxZjJjMmY5NTRhM2E3NDQ2 YjJiNDIwHhcNMjUwNzAzMTYwMTMzWhcNMjUwNzA0MTYwMTMzWjAzMTEwLwYDVQQD Eyg4MGQyNGQ2YTg2NzY5ZGQ0YTRiOGI4ZjIxNTk3ZjNmYzA3OGRjOTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02Orhi+74MEGqX6Qs++pPLruicQW trdgQwLckXgCYQItWLgueiYk4pvi9PqvLOMRX0ZQabERG+G2qMNnGMDrPIchwKiX TBKLiUYkzByVHUW3YXG2uNhcTCtgXFA3SSYX3DyRKmTQG8ovJsDtdRUP4zgIHKjc Gmu3SwB68fE4xF1ncI662xpGrXSDm19Zd2lXbFs7o3USqW0RIgcbVuzK5DeQKOxk Yr0qHjWhQiASHrpHe+oLHkyee4ZTQdEPtOtiVOiq4R3f7W1nr+oYU5LPa8qcXghr A1r3oyPlB6wzkJvT/CC34JA+Jtdmae0VQ4F/eBhUBySEByQ2OoAUfLYv3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDSTWqGdp3UpLi48hWX8/wHjclxMB8GA1UdIwQY MBaAFDJQj7eBym29giHywvlUo6dEaytCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDkt YzEyMjE4NzY1MTU0LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDktYzEyMjE4NzY1MTU0 LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHi6vLsm3 I/GnzgQUCIglRaF1R0l1/zA2Nl2TuDYrbGDMBgLJmWPVd/4IonU48fl6l4qWJTm5 QlbR96Mf7n21N3WKW+xv77DqKhvaWjBOjfeDUvOrpMLOGOzRPqHBDAzyJAx/Dy8N xnqKWNNkksX536V+aV8ykWg5JmNy1iF47PLrCOQI2USz8V4RiKID8xzOSrIVVIAc MxX5oPge+p4Gm/mcDAsy1HnXdI1dC7Gqfy9huzN6UkHU8MOQW4oZLCW9vNvybUy2 J+VQJNvI4E+Sya5eRTqfL/Fokvr6f1KG0kckPI3K8lAeM67htK5moxYUJMx+gj9T Qf8eg/a0tXa7Ag== -----END CERTIFICATE-----Generated at Thu Jul 3 18:08:13 2025 by rpki-client