$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft File: 8FIRKM9jSqavp-9S1THz_NVWKPk.mft (raw, json) Hash identifier: vbX+B7+ZUcsPupaqA22zlaPistkwtggmQISay/DR1bo= Subject key identifier: 60:62:48:31:3B:D1:06:C0:F8:46:59:D3:3F:6A:7F:FC:7B:5B:B7:7B Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 0197B6A0E93754C90688EF0A2FED85E5751F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft Manifest number: 15BE Signing time: Sat 28 Jun 2025 13:01:28 +0000 Manifest this update: Sat 28 Jun 2025 13:01:28 +0000 Manifest next update: Sun 29 Jun 2025 13:01:28 +0000 Files and hashes: 1: 0vpioq7e7IBvU0f7txi-wExHAPw.roa (hash: lCvUWIuH8RdERCkztaN1NhfYOchJDmj9ywnhD1WG0qs=) 2: 1-t-clxlx4vHi76xBwGIh0Y5orug.roa (hash: WGphFqEzeHYQfivrVaHRtOvOzzhN/PDKxrZlm3FuIDA=) 3: 4CCEdgNV-fGWUC_aGHxQwbUsOKQ.roa (hash: zTRmkFZkHzwf+QYURy5/v5Sjyovq0HLSmOwtNQ48L/c=) 4: 8FIRKM9jSqavp-9S1THz_NVWKPk.crl (hash: 4ffFvw8l6QA5Efdz2uwwABMCZjdPGIBVYhqQU0pcfAQ=) 5: 9oOMh0CjqydkdSKEbK66nXXsu4E.roa (hash: qQJNJWud5A2R6q9LElC5WdsYynVdzga12kQWDH61mWo=) 6: AoQYABlbiRY1s0Gu3McHV58zrpk.roa (hash: 9zDAXKdytFg/3YwoUton7cniFW2Ja9ArE5tJ2skkn+c=) 7: OdGF_e17lYBOCmXmsk6hkXdf7b4.roa (hash: mFKHbPekFFY75D3Eu+1fU9mzEnOZ9+rJaeHup24zW3Q=) 8: PFyByii-LGzRSy90jiJ5mw1207A.roa (hash: gIS/3e5ejAqBGpUPti4f7RxoNdrem0KAE6vwjMubh3s=) 9: Qkq_75MjyviWe2NqgT_-Mwn9gnM.roa (hash: wJb9fi2vDIIR6voDYxFFRDUWuFkEQa98zP1PFmkzpXs=) 10: ScwFXX2rYjT7naQciVMaotJ-UfM.roa (hash: X8Vp96ZEvVObF+OkcOx9P04g9HBNU6my6Pc/b9LR72Y=) 11: rh7_88ku0NVEacOTg4kYRNyhUIs.roa (hash: Uz863y1lKUf+O+OGV8gNQDxIpi4RBI83I9R9FXt5Xp4=) 12: u37q8oxj6d2YnoBLY1VE3CqS2g0.roa (hash: QV9HVDjMgl4TBfOFPjFKF+CTfrUEm6XmvkI/fobJGaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:a0:e9:37:54:c9:06:88:ef:0a:2f:ed:85:e5:75:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: Jun 28 13:01:28 2025 GMT Not After : Jun 29 13:01:28 2025 GMT Subject: CN=606248313bd106c0f84659d33f6a7ffc7b5bb77b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:db:12:be:34:c7:ed:fe:51:db:02:1b:6e:5c: 96:54:b1:39:fd:e0:5a:89:1b:ad:da:65:d2:e3:1e: 73:47:bf:88:02:53:5f:d4:c7:ba:93:3d:d9:1b:36: d1:f4:ab:c1:69:d9:22:0a:42:7d:ab:cf:51:00:01: 65:52:b2:32:6b:8e:b0:d3:b5:02:61:7e:bb:8e:37: cd:a9:a3:16:eb:69:bb:4e:8f:62:a3:24:0d:77:ca: 74:d9:23:57:be:6b:b3:bd:38:60:b4:c1:f1:af:92: 5e:f2:e9:d2:29:d0:20:4d:68:52:6e:0b:20:a7:89: 3f:44:eb:41:6e:60:df:24:91:e9:54:2a:87:83:1b: 04:5a:47:f3:76:68:5c:d5:7e:f4:2e:37:f2:3b:92: a5:49:8c:e1:8a:45:67:50:4b:63:48:50:6e:46:7b: dc:59:2f:3a:c9:9b:66:0f:a8:b0:12:4b:bb:45:2a: bb:ff:a4:fb:7e:fe:dd:7c:71:d2:52:50:33:13:37: ba:4a:1f:d0:db:db:bf:6a:f5:6b:9c:e5:1e:d9:5f: 8f:de:7a:49:bd:39:2b:78:36:b5:30:79:b0:49:8a: 45:a3:94:ff:fa:87:4b:f6:2b:da:5a:32:1d:16:bc: 96:52:85:48:b5:67:df:87:4d:6f:79:b8:0a:94:a3: da:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:62:48:31:3B:D1:06:C0:F8:46:59:D3:3F:6A:7F:FC:7B:5B:B7:7B X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:5e:6c:59:5c:c7:c6:e8:a5:68:a7:02:3a:36:f1:39:d8:13: 0c:67:d0:e3:a7:d5:a3:3e:08:f1:66:cc:bf:92:d5:aa:2a:fc: f0:8c:73:8a:2c:f7:ef:00:c6:74:a6:ed:2e:0e:6c:90:e1:a9: 6c:44:d4:19:18:bd:20:05:d2:3a:6e:f3:f9:15:94:f9:89:59: f6:c9:b6:24:75:3c:59:ec:4e:bd:e5:2e:91:17:c8:ba:92:f9: da:28:e7:ac:f4:58:50:db:f1:43:68:ed:33:e7:b3:c9:47:ef: 21:3b:e9:cb:07:a4:a4:c2:62:7d:43:9f:8b:5c:a6:f8:0b:77: 0b:1d:5f:9f:09:c0:10:1b:4d:38:69:04:48:71:86:c7:22:8e: 85:9a:16:48:dd:3e:d8:a0:e3:02:ec:d5:85:3d:78:a3:a2:f0: a3:4e:59:31:db:97:c6:01:c0:f8:ee:f3:01:7f:27:34:5f:e1: f7:68:3b:62:fb:73:97:b2:79:e6:f6:74:56:c5:1d:46:84:2a: 6d:27:9e:a2:fa:87:8e:3f:d1:44:6f:30:0e:8d:8e:c0:43:90: af:1d:4f:86:9f:3b:9f:5a:d5:83:43:ba:43:06:3b:1f:d1:d7: 5d:b0:a2:7c:53:cd:a4:6d:f0:c5:ae:1c:80:d6:df:52:d9:08: 1b:18:b7:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2oOk3VMkGiO8KL+2F5XUfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjUwNjI4MTMwMTI4WhcNMjUwNjI5MTMwMTI4WjAzMTEwLwYDVQQD Eyg2MDYyNDgzMTNiZDEwNmMwZjg0NjU5ZDMzZjZhN2ZmYzdiNWJiNzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdsSvjTH7f5R2wIbblyWVLE5/eBa iRut2mXS4x5zR7+IAlNf1Me6kz3ZGzbR9KvBadkiCkJ9q89RAAFlUrIya46w07UC YX67jjfNqaMW62m7To9ioyQNd8p02SNXvmuzvThgtMHxr5Je8unSKdAgTWhSbgsg p4k/ROtBbmDfJJHpVCqHgxsEWkfzdmhc1X70LjfyO5KlSYzhikVnUEtjSFBuRnvc WS86yZtmD6iwEku7RSq7/6T7fv7dfHHSUlAzEze6Sh/Q29u/avVrnOUe2V+P3npJ vTkreDa1MHmwSYpFo5T/+odL9ivaWjIdFryWUoVItWffh01vebgKlKPa0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGBiSDE70QbA+EZZ0z9qf/x7W7d7MB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMF5sWVzH xuilaKcCOjbxOdgTDGfQ46fVoz4I8WbMv5LVqir88Ixziiz37wDGdKbtLg5skOGp bETUGRi9IAXSOm7z+RWU+YlZ9sm2JHU8WexOveUukRfIupL52ijnrPRYUNvxQ2jt M+ezyUfvITvpywekpMJifUOfi1ym+At3Cx1fnwnAEBtNOGkESHGGxyKOhZoWSN0+ 2KDjAuzVhT14o6Lwo05ZMduXxgHA+O7zAX8nNF/h92g7Yvtzl7J55vZ0VsUdRoQq bSeeovqHjj/RRG8wDo2OwEOQrx1Php87n1rVg0O6QwY7H9HXXbCifFPNpG3wxa4c gNbfUtkIGxi3IA== -----END CERTIFICATE-----Generated at Sat Jun 28 19:57:41 2025 by rpki-client