$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft File: 6sLBr9S97JgFBvoH33yGYtVU-kY.mft (raw, json) Hash identifier: 1aiUiHuxNFjBxOqhl+QcAYcz/MtlyGxW94HVTkIg4+E= Subject key identifier: 29:8E:35:68:51:FE:B1:D5:20:C0:6B:7A:92:F2:0C:E1:0D:E0:3D:E5 Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46 Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46 Certificate serial: 0197B7EAA1F04A9BF8598F95784B6733D885 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft Manifest number: 0FE9 Signing time: Sat 28 Jun 2025 19:01:36 +0000 Manifest this update: Sat 28 Jun 2025 19:01:36 +0000 Manifest next update: Sun 29 Jun 2025 19:01:36 +0000 Files and hashes: 1: 6sLBr9S97JgFBvoH33yGYtVU-kY.crl (hash: N+e/R8++EV9Z9GrNw+LnPYlhnn9OrotdCoJYmYkUuk0=) 2: I73UM1nCBWQnJ20aXL_6NYA4pj8.roa (hash: L68T0N8qj7ef7ryDCvyLKmdACJuuoiHt4h0eR0KlZX4=) 3: Ia6V3oQfJDjO1qZ0unwCn8VGfRI.roa (hash: YjJMnYScrGxfBSd345nAAnlIHFqBVMEk1HrKUwbMEtQ=) 4: McMTko8bQr91a0JpNrnKOvBDV0I.roa (hash: +aOn0BT18FMcBHp4FqjXhcnRXA0IZ5BQanHigZZPPho=) 5: Q63VjVLDUPnmuHnw2k7_RU2ecDo.roa (hash: hbZpJJlkwNtwiNGl+GRL8rkQ+0B/zJwYAf2+pY47R10=) 6: UgN0cKNW9dNdHdWelhpwDBynnFs.roa (hash: d596rMSRxVyDkNR+qvNV44FN3LGE81IKqHNAerm5Jfc=) 7: mTBy0j8EnJsdaUzGVXZ-14s63tY.roa (hash: helve75lh7gtxaq/8CTnY/dxHsO6u+Iv8BV7ge1atis=) 8: ohfoQ6PMXyCRqvXL697wq32N2IE.roa (hash: 4Ftq9cImGTnlsG/GFrSW+NEOcfqwWC5dS24FmwyqHJQ=) 9: tVnuMHg38Y2y8DClEzJcg-BhRZI.roa (hash: 2bCfD0mgqb/6Lcsm2AyIQ8y1K+w9/t9hgqU4lqbYazg=) 10: wrTzzYkG5LOMXtKZWk2jBf3LA_Y.roa (hash: 45WK1sV6GaRDvSfuryou71nLUkmNtAjtTqBWp6wTaJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:ea:a1:f0:4a:9b:f8:59:8f:95:78:4b:67:33:d8:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46 Validity Not Before: Jun 28 19:01:36 2025 GMT Not After : Jun 29 19:01:36 2025 GMT Subject: CN=298e356851feb1d520c06b7a92f20ce10de03de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5b:50:7e:f4:e5:81:de:66:3c:41:87:2b:3f: 95:51:ff:af:d0:47:4a:47:f4:11:a9:fc:72:fa:15: 71:d4:88:45:cc:d5:00:67:c8:c5:5c:0d:53:8c:ad: ed:6d:ff:f8:44:e8:85:08:ce:23:1e:d3:5b:e7:f8: e6:c1:6b:4a:bc:f9:a8:4a:b9:e6:1d:c2:1b:ff:82: 63:2f:16:df:3f:6a:df:20:f8:a5:3e:b6:04:9e:da: 5f:8e:6b:e7:ea:ae:4e:6e:b2:e7:f0:aa:10:56:15: 38:96:70:60:cf:44:40:ee:8e:81:9a:8d:bc:f7:8b: 5d:fb:34:f6:8e:fb:a0:28:c4:4d:23:26:19:0e:d7: f0:90:f8:63:e7:56:95:c5:5d:b5:2f:78:91:c5:8d: a1:5c:c1:af:0b:61:aa:8e:60:5a:48:39:80:10:17: 4c:6f:0a:8f:fa:c8:c3:bc:b9:8d:72:ae:ae:4f:3d: 1e:60:87:3f:68:a1:c6:0b:d6:24:67:97:36:c7:01: 79:ba:c1:e1:60:6b:38:fe:26:ae:4b:11:9a:6e:3f: 9b:4a:58:47:8d:05:bf:9b:6d:18:d4:cb:ae:c0:fb: 5a:83:94:6c:ff:2e:a9:0a:e6:a7:36:be:b7:cc:9f: 57:e8:3f:d7:c4:17:54:60:4d:b6:22:f1:bc:48:0e: 5b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8E:35:68:51:FE:B1:D5:20:C0:6B:7A:92:F2:0C:E1:0D:E0:3D:E5 X509v3 Authority Key Identifier: keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:eb:c1:9a:9d:17:f9:9c:d0:ef:e5:55:09:cf:49:b2:91:54: 6b:cb:5a:11:cc:2b:0a:a5:c2:2a:5e:c6:39:17:b3:cb:d5:4d: d6:b2:aa:f8:bd:1d:12:73:0a:ea:3e:21:e8:f7:b1:ed:96:c3: 96:43:31:9a:cf:a1:92:40:82:76:f2:a0:5f:69:a7:0a:64:32: 11:16:6b:9d:d8:ff:0a:b7:a3:20:37:b3:fd:94:ed:96:97:b3: 84:8e:48:d5:47:9c:24:b8:b3:2b:aa:8a:f6:d1:8e:06:c7:fa: 72:db:bd:81:bb:a2:64:56:42:4e:77:6a:24:da:c7:e6:74:61: 70:34:a9:12:82:7c:f0:b6:0f:b6:44:d1:7c:69:d1:cc:55:f3: 9c:6d:c4:5c:7a:a9:77:b7:30:be:6b:03:35:78:36:26:6c:23: ad:6a:ef:46:7d:69:99:00:46:80:c9:3b:d7:8a:67:59:6f:e7: e8:5d:77:b9:48:10:5a:0c:90:e9:44:47:ef:8c:c0:79:c3:ed: ad:6d:a8:d0:05:57:8f:f9:b0:c3:a7:bd:4f:b6:02:e9:58:05: 82:c2:e9:e0:69:6b:bc:d3:b9:bf:40:ac:33:8b:36:d0:76:91: 86:47:0f:bc:28:ab:6c:5f:66:41:b7:27:bb:2b:eb:5d:c7:1d: 7d:9b:fe:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe36qHwSpv4WY+VeEtnM9iFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYzJjMWFmZDRiZGVjOTgwNTA2ZmEwN2RmN2M4NjYyZDU1 NGZhNDYwHhcNMjUwNjI4MTkwMTM2WhcNMjUwNjI5MTkwMTM2WjAzMTEwLwYDVQQD EygyOThlMzU2ODUxZmViMWQ1MjBjMDZiN2E5MmYyMGNlMTBkZTAzZGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VtQfvTlgd5mPEGHKz+VUf+v0EdK R/QRqfxy+hVx1IhFzNUAZ8jFXA1TjK3tbf/4ROiFCM4jHtNb5/jmwWtKvPmoSrnm HcIb/4JjLxbfP2rfIPilPrYEntpfjmvn6q5ObrLn8KoQVhU4lnBgz0RA7o6Bmo28 94td+zT2jvugKMRNIyYZDtfwkPhj51aVxV21L3iRxY2hXMGvC2GqjmBaSDmAEBdM bwqP+sjDvLmNcq6uTz0eYIc/aKHGC9YkZ5c2xwF5usHhYGs4/iauSxGabj+bSlhH jQW/m20Y1MuuwPtag5Rs/y6pCuanNr63zJ9X6D/XxBdUYE22IvG8SA5bMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmONWhR/rHVIMBrepLyDOEN4D3lMB8GA1UdIwQY MBaAFOrCwa/UveyYBQb6B998hmLVVPpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMt YzBjZWIwMzdhZDQyLzEvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMtYzBjZWIwMzdhZDQy LzEvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAquvBmp0X +ZzQ7+VVCc9JspFUa8taEcwrCqXCKl7GORezy9VN1rKq+L0dEnMK6j4h6Pex7ZbD lkMxms+hkkCCdvKgX2mnCmQyERZrndj/CrejIDez/ZTtlpezhI5I1UecJLizK6qK 9tGOBsf6ctu9gbuiZFZCTndqJNrH5nRhcDSpEoJ88LYPtkTRfGnRzFXznG3EXHqp d7cwvmsDNXg2JmwjrWrvRn1pmQBGgMk714pnWW/n6F13uUgQWgyQ6URH74zAecPt rW2o0AVXj/mww6e9T7YC6VgFgsLp4GlrvNO5v0CsM4s20HaRhkcPvCirbF9mQbcn uyvrXccdfZv+XA== -----END CERTIFICATE-----Generated at Sat Jun 28 21:02:11 2025 by rpki-client