$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft File: a8XefXJVt9WCYMZaEgsWTvEO-QM.mft (raw, json) Hash identifier: LEtvjNp5eiozJqB33r19MnuYMWoZXkwuzzrp9vBAjNc= Subject key identifier: B6:53:03:3C:F7:55:A8:69:6A:80:C6:A6:FF:52:10:D8:A2:A7:4F:3A Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Certificate serial: 0197B890960F54914BF8F73858A994201CFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft Manifest number: 158C Signing time: Sat 28 Jun 2025 22:02:52 +0000 Manifest this update: Sat 28 Jun 2025 22:02:52 +0000 Manifest next update: Sun 29 Jun 2025 22:02:52 +0000 Files and hashes: 1: 12ToQcSPt7mcdwlwu8cks0_4omc.roa (hash: Iyr2cE2tf2K+xaBK2dhfD2MWZhPJHAOvhdyF3JqR+/g=) 2: 5ZYhCNxqOm04hmY0BhngKxN9rig.roa (hash: 83J35QD4/t+gUfggZnoS3qCNRY62Cfjrx/Jm442KIdY=) 3: DD7MG415kr5pDZ5NERV8_6UIOOg.roa (hash: u4w0GFe68e8W5/D1x1XDL/I/y5A0DFg3JZSWmOmPxVs=) 4: DNFKKqPzY2tTxyq4ZF-e6ESwWBk.roa (hash: ONyXaG/qy9WX6Bit7PbMeuasymNM8i3asJe1STaYw+o=) 5: HQby7lGCxVhcsYrFBxtLvu1Nq1s.roa (hash: OEoyOXMuUI9gzJHQlRaFw5QR3hyZ9zizJ0Zhg109soQ=) 6: KEB7URRNcLIkdHFl8_NaQFzoCUc.roa (hash: 8o0J9qbfKon/Y8q8sQm0uMymQ1kVnwb8u5ia9INGr/U=) 7: RVuh9Ovnia6HGIxuY5C4mqQkVzw.roa (hash: 7MdQXOdkGadK2Vo4n1LYddNyvg9R887clmJN5QnKDO0=) 8: _4iJCnTkrZTLi3Znw6No51nUp0U.roa (hash: q5ypixYuURsWaauidvKopOxQLyMvMh9Ff8agaEGE8Z8=) 9: a8XefXJVt9WCYMZaEgsWTvEO-QM.crl (hash: xYXSLelF1OUqgtmqbhyJt8qWqfj+2buz3x5eIQJxQhc=) 10: egyYxAR3bwmsGgeknwOtvs63Vmw.roa (hash: XurIkmwZSfSrHBi1j2SOabRmxdimDBrxAVpSXYwSmK8=) 11: gCwZCj5y4eEHhiE3OdNG143EtPw.roa (hash: bJxdVgp0WUK1yUG+3MFHdMNTBJUCc3SJjDGJmr3bN5s=) 12: kWxL8-0FaQ5asnDLfivzWKH4-z8.roa (hash: aTbkIB4IPS1IGAIXN2uxEpuYorOcI3bZmMM6X6TsyjM=) 13: wM1Yw5nFuvuJTOAzQjCj5rN5Pm0.roa (hash: ent4AXHk/p6bQe6GuoAZTq2KLI9u7gMCUsO1EmVjq8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 19:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:90:96:0f:54:91:4b:f8:f7:38:58:a9:94:20:1c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Validity Not Before: Jun 28 22:02:52 2025 GMT Not After : Jun 29 22:02:52 2025 GMT Subject: CN=b653033cf755a8696a80c6a6ff5210d8a2a74f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cf:5e:94:62:61:28:9b:49:a1:db:d8:8a:1b: e3:eb:93:f9:48:4d:23:92:e8:b9:66:14:0a:1e:d0: cc:d3:ae:77:9d:f7:99:e5:04:f3:99:1b:80:4e:11: 10:e1:ee:87:ab:b5:b4:fb:b0:39:8c:bf:fb:1c:28: b7:3f:88:5b:42:1a:2d:cb:57:2e:08:10:9a:62:2b: a3:6b:b5:0f:b0:bc:a8:6a:b0:04:71:78:78:8c:c0: d5:43:d3:91:d8:59:57:ba:03:60:20:ba:a1:12:fa: cf:0c:f2:75:f1:9a:4b:57:8d:8b:aa:5d:29:46:99: ee:56:10:99:21:e3:21:ab:ca:2a:d2:09:a9:aa:71: 3c:03:ce:e3:b7:ce:f9:2f:e2:c4:32:1f:7d:95:a8: 98:a0:b1:28:86:3d:ec:15:72:25:0c:b8:eb:bd:67: 41:00:30:09:a4:db:8a:32:4e:f5:dd:12:2e:ed:27: 4b:c5:01:75:d4:88:53:f5:6f:12:be:37:91:3a:1d: 24:b2:c4:f4:14:f8:12:00:47:e2:ea:20:3e:0e:14: 4c:af:4b:98:af:69:a6:84:0c:df:7b:81:55:b3:10: a2:82:0f:b6:11:48:1c:d9:76:c6:18:5c:e0:c1:61: 9e:7a:4a:eb:d4:a4:06:88:eb:a9:4f:9a:7c:43:d6: 88:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:53:03:3C:F7:55:A8:69:6A:80:C6:A6:FF:52:10:D8:A2:A7:4F:3A X509v3 Authority Key Identifier: keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:cc:61:ed:06:3f:b8:32:84:78:0b:95:68:1c:62:1a:b5:a8: 4b:85:3a:d9:4b:2d:b5:f0:9d:ed:ee:57:0e:7e:e1:68:66:d7: bd:56:4a:29:6d:f7:9d:b2:19:5d:12:09:9a:95:35:39:85:30: a2:7b:aa:3b:ba:82:df:fb:a0:06:d0:b0:f2:5b:86:ed:64:22: aa:10:3d:96:fd:8c:06:c8:d1:8b:d6:71:a1:8b:2c:3e:16:6f: 46:57:9a:a3:22:04:e2:f6:2d:60:f9:e9:f1:b1:54:19:b1:fc: df:9c:eb:47:39:8e:b0:bc:14:ac:b3:bc:f4:6d:75:42:6e:af: 99:83:1a:1a:d1:60:7f:47:d1:ff:2a:ee:f5:ff:43:3c:32:14: be:49:83:a9:bf:0c:64:7b:0c:11:e8:75:de:ff:ec:7d:56:e8: d9:a9:78:4a:e7:2f:50:a0:da:06:a4:bf:d8:66:f8:be:de:f9: c1:c3:33:12:e8:7e:3a:c8:54:36:bc:cd:de:c3:37:55:9c:d4: 79:39:88:53:4d:11:5c:fd:1b:cf:30:f2:00:03:fc:2d:cb:ee: bc:43:95:9b:4c:2d:97:40:85:91:f3:e2:2d:c3:d6:93:77:4d: c0:0a:d9:88:fc:58:68:98:c5:96:d3:cb:f6:f8:81:c5:7d:6a: b8:de:9b:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4kJYPVJFL+Pc4WKmUIBz/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw ZWY5MDMwHhcNMjUwNjI4MjIwMjUyWhcNMjUwNjI5MjIwMjUyWjAzMTEwLwYDVQQD EyhiNjUzMDMzY2Y3NTVhODY5NmE4MGM2YTZmZjUyMTBkOGEyYTc0ZjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy89elGJhKJtJodvYihvj65P5SE0j kui5ZhQKHtDM0653nfeZ5QTzmRuAThEQ4e6Hq7W0+7A5jL/7HCi3P4hbQhoty1cu CBCaYiuja7UPsLyoarAEcXh4jMDVQ9OR2FlXugNgILqhEvrPDPJ18ZpLV42Lql0p RpnuVhCZIeMhq8oq0gmpqnE8A87jt875L+LEMh99laiYoLEohj3sFXIlDLjrvWdB ADAJpNuKMk713RIu7SdLxQF11IhT9W8SvjeROh0kssT0FPgSAEfi6iA+DhRMr0uY r2mmhAzfe4FVsxCigg+2EUgc2XbGGFzgwWGeekrr1KQGiOupT5p8Q9aIlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZTAzz3VahpaoDGpv9SENiip086MB8GA1UdIwQY MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt ZmRmNjYzOGQyYzA0LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0 LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8xh7QY/ uDKEeAuVaBxiGrWoS4U62UsttfCd7e5XDn7haGbXvVZKKW33nbIZXRIJmpU1OYUw onuqO7qC3/ugBtCw8luG7WQiqhA9lv2MBsjRi9ZxoYssPhZvRleaoyIE4vYtYPnp 8bFUGbH835zrRzmOsLwUrLO89G11Qm6vmYMaGtFgf0fR/yru9f9DPDIUvkmDqb8M ZHsMEeh13v/sfVbo2al4SucvUKDaBqS/2Gb4vt75wcMzEuh+OshUNrzN3sM3VZzU eTmIU00RXP0bzzDyAAP8LcvuvEOVm0wtl0CFkfPiLcPWk3dNwArZiPxYaJjFltPL 9viBxX1quN6bzA== -----END CERTIFICATE-----Generated at Sun Jun 29 02:16:28 2025 by rpki-client