$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft File: rtruqRF6HVzMMgIilVoJ-qB5j9k.mft (raw, json) Hash identifier: OaRsNMswqG16DcFx5okXQjrGDFVal2QRTDNKLhUQBak= Subject key identifier: 2C:26:79:06:B6:FC:46:3C:69:A4:50:5D:CC:05:3A:3A:54:67:2A:20 Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Certificate serial: 0197B745AEB2FB4B803BC29D4860115B218B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft Manifest number: 15C7 Signing time: Sat 28 Jun 2025 16:01:26 +0000 Manifest this update: Sat 28 Jun 2025 16:01:26 +0000 Manifest next update: Sun 29 Jun 2025 16:01:26 +0000 Files and hashes: 1: 3mlxlqxxKeV1HcJ7bUJquBWrLPM.roa (hash: LdsNRL7zR8y++XszDkFJs9ezvrT1lTI0NjP093U5ljg=) 2: 4SdJi3BPt8-RDec3IP7ET9slx0Q.roa (hash: QGo99RDwnHzRGoxgfvvtNisf3X6cgnQ851GWbQCaLvs=) 3: 7bwXhpAggJ_eID4STuVsUUonWWE.roa (hash: jwAsf9XJ11Ai8DUGeYC8bRJZ9GOha8mucoK1IxHdfkY=) 4: CzaaDeOWHQ6kTwaAx_O9YkLSomg.roa (hash: GUI6ZQYLsnldTDNTDgycT5JJ61OE2lf64zAhH2MlHo0=) 5: F-IifLCSbkSEOgi4sKV1jV1DQV8.roa (hash: 7kKwPi2Jx1AhBc2lAsg83y6Ji6J7QPEIqmUmsdkgOP8=) 6: M9dXL-Oza0PNDTAVGMoUMD1-IlA.roa (hash: jhP7c0ubJpNShQl4AZbo7W8l+sNrqPUvkjw+552fAtk=) 7: N8yg-rsBIkNZqhIg3aIitQuuaUk.roa (hash: Vq9e+6B3g3tkLctdReugpY+B6dczna3y7yxghSqb1lg=) 8: O_1KEMFUqgk53YPdkiJOMWFybCU.roa (hash: 4rGooap/6UNkN/imOgEGeKddbOoLvOCJN4FBsaaC0Sw=) 9: Oac09hx3rqQddn6sXzqSQ66tEsk.roa (hash: 0YnaolK2p37HCU8XIKe9HEtLFbwrR1vF1VCsBkGV6VQ=) 10: QB06ZN3QBBlBCzXQ38Wxu-W0hTY.roa (hash: YOe7BlkRM3bRTDlXC12POtxs/G4SQHLEyUujJ2j8le4=) 11: QeLZg2QtCjiT_FgF9I_8vW-GdW8.roa (hash: SAeRikMKDg+ufTk9edjpL98DiGUmXizgEulF/oacLNQ=) 12: cjQzMFxVd-iqEhVM-o1DNZllV_0.roa (hash: 85nOtiPI0UFXyc2nAprk9yS+5gMOcb9EUZheWPhZTEk=) 13: dnVM1cVOQmo9o53eHsEv3eXfeEM.roa (hash: h/M7g6bSmmEmFXClXRgmZ/cbukURXTiejXMMoqawhio=) 14: o9IncMeHSMz3mrSJeF9aMdkFAcU.roa (hash: KamLMqMs7PVReutKf0aHBQwg2azCb9n4pFhxDQwK6vA=) 15: rtruqRF6HVzMMgIilVoJ-qB5j9k.crl (hash: VR4O9DurICiV5WP2eYI+jo15bxNfC4QWIKM83rbbDG8=) 16: uFTtcjsPGnkaZVI5W5A8IkTF394.roa (hash: SZYFDFQluX6/of0g5ijROkb7a9Qa6zQP//c286jjxKM=) 17: w3UqKWnMOF5NaXpk2iA4PKS4_bM.roa (hash: u2j3jAMfurHPfPAg9hddmCUv1bl75zA9+z27+zKCwbI=) 18: xZ_023oKHQSUR6TwKwMkGIsy224.roa (hash: ifrv9R6haJqU4fA+SuKlYO2IqiC8qB9Zjz5Ablqp45M=) 19: y_VdrldyiOysCbP_n_SofIR2xM4.roa (hash: 3Y8+s1Vq2DoJJO2anwZwA2qsfUgRB7+A97MBZINmwUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:45:ae:b2:fb:4b:80:3b:c2:9d:48:60:11:5b:21:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Validity Not Before: Jun 28 16:01:26 2025 GMT Not After : Jun 29 16:01:26 2025 GMT Subject: CN=2c267906b6fc463c69a4505dcc053a3a54672a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:58:1b:a2:a9:1b:3e:67:ac:75:e6:83:d0:53: b7:d9:1b:ee:52:eb:67:07:18:6f:3d:1e:5b:b4:fe: 81:fc:47:9e:dc:5b:f6:23:47:4a:81:21:0a:22:3d: 52:b4:4b:7e:a5:85:e7:5f:ab:09:5c:1e:f8:c0:dd: 52:04:09:08:80:24:8f:f4:bc:ed:21:a8:3a:0d:6b: 62:4d:58:a4:13:2a:d5:0d:4d:a7:3a:6e:38:60:b9: ce:e0:5d:ca:ca:88:cb:1e:95:60:56:69:98:dc:f7: 83:5d:9e:3d:50:38:8e:84:d5:fe:52:31:ef:79:49: 24:9a:98:bb:5e:62:cf:89:67:09:02:81:c3:ad:f3: 2e:57:c1:d2:7d:e5:e3:bd:e2:c4:65:d2:c4:f2:f4: 88:e0:2e:8e:86:d5:d1:37:bc:4e:2f:09:92:1a:90: 83:8f:cc:81:e0:6e:d9:3d:f8:e4:e4:4a:7a:6c:2a: 37:1d:e2:f7:c8:97:2c:20:a0:b1:8b:89:71:3d:ec: 69:e2:f7:9a:84:bd:50:23:28:b3:5b:69:37:69:83: fa:95:43:96:92:3b:67:c6:d3:25:7f:bf:0b:22:31: a2:aa:60:76:bb:af:03:70:ea:11:87:31:41:b3:f4: fa:50:f5:0f:87:d8:be:b7:84:db:71:17:20:e2:38: 1a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:26:79:06:B6:FC:46:3C:69:A4:50:5D:CC:05:3A:3A:54:67:2A:20 X509v3 Authority Key Identifier: keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:c7:9f:7f:08:0d:d7:4e:45:5d:a3:41:41:17:40:a3:fd:50: 89:35:ef:58:2e:ab:3d:d9:92:e3:ff:ad:df:74:65:cc:96:26: 9e:ab:77:69:f6:24:fc:88:a7:96:a9:f3:12:c0:9e:5d:f7:ce: b3:32:67:33:36:68:af:d0:bd:01:f9:1b:96:10:c8:6a:bb:d0: 44:b5:f6:3e:64:77:37:2d:3b:74:3a:c1:a4:bd:78:61:3b:69: 06:09:37:07:69:18:8d:35:6b:97:95:ed:16:4e:99:10:9b:f8: 1f:50:14:cb:7a:18:e7:90:1d:93:cc:76:81:32:aa:fe:c3:91: 56:59:af:31:e2:b2:e1:7c:4c:72:3e:f4:5e:82:2d:6b:d3:da: b5:c0:ac:13:b9:67:80:82:75:3f:c6:ff:29:e9:8e:c1:98:a9: 58:76:ed:c1:f1:33:39:e6:36:45:b4:45:ec:5b:ab:cf:34:55: 70:0a:f2:09:db:e4:ce:37:de:33:c7:bc:2a:c6:2c:a5:5a:0d: 8f:f9:15:5a:83:eb:29:77:b6:5e:f4:ed:5e:d4:2c:79:75:1c: 5a:c3:57:d2:f6:d6:e0:f2:59:57:da:49:76:e2:fe:d4:5f:77: b4:a9:fd:29:41:b0:3c:53:be:79:28:28:3e:01:8f:1e:50:73: 89:ce:f9:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3Ra6y+0uAO8KdSGARWyGLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3 OThmZDkwHhcNMjUwNjI4MTYwMTI2WhcNMjUwNjI5MTYwMTI2WjAzMTEwLwYDVQQD EygyYzI2NzkwNmI2ZmM0NjNjNjlhNDUwNWRjYzA1M2EzYTU0NjcyYTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1gboqkbPmesdeaD0FO32RvuUutn BxhvPR5btP6B/Eee3Fv2I0dKgSEKIj1StEt+pYXnX6sJXB74wN1SBAkIgCSP9Lzt Iag6DWtiTVikEyrVDU2nOm44YLnO4F3KyojLHpVgVmmY3PeDXZ49UDiOhNX+UjHv eUkkmpi7XmLPiWcJAoHDrfMuV8HSfeXjveLEZdLE8vSI4C6OhtXRN7xOLwmSGpCD j8yB4G7ZPfjk5Ep6bCo3HeL3yJcsIKCxi4lxPexp4veahL1QIyizW2k3aYP6lUOW kjtnxtMlf78LIjGiqmB2u68DcOoRhzFBs/T6UPUPh9i+t4TbcRcg4jgaRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwmeQa2/EY8aaRQXcwFOjpUZyogMB8GA1UdIwQY MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt OTk4NjhjNTEzMjlhLzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARceffwgN 105FXaNBQRdAo/1QiTXvWC6rPdmS4/+t33RlzJYmnqt3afYk/IinlqnzEsCeXffO szJnMzZor9C9AfkblhDIarvQRLX2PmR3Ny07dDrBpL14YTtpBgk3B2kYjTVrl5Xt Fk6ZEJv4H1AUy3oY55Adk8x2gTKq/sORVlmvMeKy4XxMcj70XoIta9PatcCsE7ln gIJ1P8b/KemOwZipWHbtwfEzOeY2RbRF7FurzzRVcAryCdvkzjfeM8e8KsYspVoN j/kVWoPrKXe2XvTtXtQseXUcWsNX0vbW4PJZV9pJduL+1F93tKn9KUGwPFO+eSgo PgGPHlBzic75hA== -----END CERTIFICATE-----Generated at Sat Jun 28 21:41:50 2025 by rpki-client