$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft File: p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft (raw, json) Hash identifier: SWVZat15mpPxxURpD8Df/IQ5pcKWaaUgRNsZSW2QKrM= Subject key identifier: 0E:74:D6:85:52:7D:04:0D:75:9F:3B:29:7E:01:4F:AF:A8:02:1D:9F Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93 Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093 Certificate serial: 0197B77C4B8468C67190B2630CFBBDFB4026 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft Manifest number: 15CB Signing time: Sat 28 Jun 2025 17:01:05 +0000 Manifest this update: Sat 28 Jun 2025 17:01:05 +0000 Manifest next update: Sun 29 Jun 2025 17:01:05 +0000 Files and hashes: 1: D-RIX_FD-SN5SshOisKYwCgAV_I.roa (hash: x033PUL0ZGG5mDhT/he8/ieNNlTHX9WAHAFDtaJQ278=) 2: DzfEbFPfYy4xpas3bsxIDlFZktA.roa (hash: THhbtWRVoUEwxJC8CZKbYrVSasGjOcgtKoQ/LVP3UKA=) 3: E9n95xnL19yX1B4Vk9ExkIt3f-c.roa (hash: ouMNy3kdRPfar+w1HNS2jM0LMO/r+ZZQenoBAODEfBY=) 4: EAoNPZ8TpgdLFjCSj501GJeuEXI.roa (hash: pO6PSYGesSNZg2BIOmFMIZ89ZMsZTFVJdrF49KPq8PA=) 5: FFaDrp2TE8Iso6bJlqnb0FqxMJo.roa (hash: Jw9G+J8hnCo8w1musIzxpySO6bTcvYrzNLckyhAd2sE=) 6: FXDFb34PBHFpzXqxsfO-MRRoL1w.roa (hash: oabg5c6EyRNzxsL44FI1GqhM5cn4+01B5g9m9wTra50=) 7: IUh9_C97qpOKm_8AV-AspCaoEAg.roa (hash: c2S3m+7nRWXLhOWwBs+WGI3pFEVCypK98I+qc9J+WoQ=) 8: Nbis52_bGmBIGC7k7OWz54ZVymo.roa (hash: aH/DSjSBHo+CUhmGlittWaZYo1UBwB3kdgrpakh3geQ=) 9: PPsYUSjJ6B10FlewER5Ai8nn-_A.roa (hash: 10T1YdRCwRDgbSqL2l2y0wL7RPOmP97+IJQfqf219GY=) 10: oJr4DCeqtN2tV6Ugf36L9eXTcTI.roa (hash: vOwTJ+3Vsj2ap8ElFcEgLM26b3Nku6y6ruqjJGc7XJs=) 11: p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl (hash: 7eh6oQZh7VHJv2NovJaYsM4Gs8R0ArC2XwdhIrznFBA=) 12: pY29XiCKfPgxYFYQ6-Ey_qrcL8w.roa (hash: UStN0NQIs1Hh3GK9cdElOtzaqGJ6jlYdtTPTd6s3Eic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:7c:4b:84:68:c6:71:90:b2:63:0c:fb:bd:fb:40:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093 Validity Not Before: Jun 28 17:01:05 2025 GMT Not After : Jun 29 17:01:05 2025 GMT Subject: CN=0e74d685527d040d759f3b297e014fafa8021d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0a:77:86:37:6c:a5:90:a2:60:dc:9b:5a:31: 6e:f2:43:f0:99:d4:cf:7c:28:61:2d:4e:34:2a:02: cc:2e:51:80:e4:d4:e6:04:8f:f7:5d:dd:3f:24:d4: 2d:eb:6a:ac:b2:df:ee:ff:70:02:06:1a:55:2d:45: c1:66:81:65:15:f8:05:c5:ad:d9:b5:5b:d5:f6:5d: e0:b0:8b:56:61:69:e6:68:2f:6f:7a:1a:74:c7:8d: 60:3c:7e:d2:b3:ee:e1:b2:a5:d6:6e:16:8c:15:3d: 01:a1:bf:5a:34:94:c2:73:fd:b3:67:d2:7a:9d:a4: df:e0:05:1c:77:97:06:a6:51:ad:8f:61:44:8e:72: b6:ed:6e:cb:f9:f2:ae:ff:ba:21:aa:3e:92:1d:8a: 91:32:0f:c4:fc:99:d7:45:f9:1c:06:55:09:7e:4e: 02:6d:80:4b:e9:00:97:e7:72:ec:22:bd:17:78:40: d2:60:6e:03:26:1d:47:69:41:20:14:5f:d5:e5:f1: d9:03:9d:08:a6:d6:b0:ef:30:86:e9:bb:0d:d8:f9: 42:2d:44:c6:6f:8e:9f:42:2e:22:f2:62:89:8c:b1: f0:7d:d8:c6:c2:24:6a:9f:cd:1d:5b:7a:37:23:bd: 47:57:1e:55:fa:35:fe:74:41:b2:00:03:e8:da:2b: b8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:74:D6:85:52:7D:04:0D:75:9F:3B:29:7E:01:4F:AF:A8:02:1D:9F X509v3 Authority Key Identifier: keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:92:bc:f9:db:26:73:f1:9b:7d:de:ed:c4:d9:14:14:d0:04: a0:82:f6:4d:cb:e9:4a:b9:1c:1c:06:3c:c9:2f:7e:56:03:15: be:02:b7:80:e9:28:b3:79:53:74:43:9b:0f:71:7d:f0:45:44: ee:b6:6d:bb:4b:82:0f:30:da:37:11:bf:2a:67:56:33:2c:2e: 9b:7d:a3:bf:fe:84:b7:08:5e:dc:23:de:23:ad:ed:57:c2:fa: e9:81:de:9e:bc:ad:a7:2f:f9:fc:4c:85:18:df:fa:99:cd:4b: 95:21:11:91:40:9d:9e:ee:56:72:38:39:44:b9:ba:9b:35:13: 98:e8:8b:da:82:5a:46:54:57:cd:d7:87:38:16:c0:46:fd:8d: 53:ca:a9:fe:f4:08:f1:27:38:0d:31:c0:de:6c:d0:2d:d0:ee: 49:1e:b1:e0:5d:d5:ac:3d:6b:0e:08:e4:5b:33:93:22:e3:f8: 00:25:53:61:2d:14:3c:4b:8d:e1:eb:d8:75:91:36:8d:b5:46: 47:9c:35:c8:2f:df:96:7b:7c:29:14:c4:66:ce:81:7f:48:0d: 0a:4d:4d:46:1a:ae:24:79:d2:40:cd:cd:00:5f:54:c6:70:9a: 37:d7:8e:7d:5e:7e:53:54:64:5d:50:8b:e9:90:93:e3:85:01: 0d:f5:58:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3fEuEaMZxkLJjDPu9+0AmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3OWJiYTI4MDVhOTg4OTU0ZTRmZWM0MjU3MDUzMGYxNmY5 ZTcwOTMwHhcNMjUwNjI4MTcwMTA1WhcNMjUwNjI5MTcwMTA1WjAzMTEwLwYDVQQD EygwZTc0ZDY4NTUyN2QwNDBkNzU5ZjNiMjk3ZTAxNGZhZmE4MDIxZDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwp3hjdspZCiYNybWjFu8kPwmdTP fChhLU40KgLMLlGA5NTmBI/3Xd0/JNQt62qsst/u/3ACBhpVLUXBZoFlFfgFxa3Z tVvV9l3gsItWYWnmaC9vehp0x41gPH7Ss+7hsqXWbhaMFT0Bob9aNJTCc/2zZ9J6 naTf4AUcd5cGplGtj2FEjnK27W7L+fKu/7ohqj6SHYqRMg/E/JnXRfkcBlUJfk4C bYBL6QCX53LsIr0XeEDSYG4DJh1HaUEgFF/V5fHZA50Iptaw7zCG6bsN2PlCLUTG b46fQi4i8mKJjLHwfdjGwiRqn80dW3o3I71HVx5V+jX+dEGyAAPo2iu4WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA501oVSfQQNdZ87KX4BT6+oAh2fMB8GA1UdIwQY MBaAFKebuigFqYiVTk/sQlcFMPFvnnCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMt ZTFlZDlkZDJhMDJhLzEvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMtZTFlZDlkZDJhMDJh LzEvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtZK8+dsm c/Gbfd7txNkUFNAEoIL2TcvpSrkcHAY8yS9+VgMVvgK3gOkos3lTdEObD3F98EVE 7rZtu0uCDzDaNxG/KmdWMywum32jv/6Etwhe3CPeI63tV8L66YHenrytpy/5/EyF GN/6mc1LlSERkUCdnu5Wcjg5RLm6mzUTmOiL2oJaRlRXzdeHOBbARv2NU8qp/vQI 8Sc4DTHA3mzQLdDuSR6x4F3VrD1rDgjkWzOTIuP4ACVTYS0UPEuN4evYdZE2jbVG R5w1yC/flnt8KRTEZs6Bf0gNCk1NRhquJHnSQM3NAF9UxnCaN9eOfV5+U1RkXVCL 6ZCT44UBDfVYeg== -----END CERTIFICATE-----Generated at Sun Jun 29 00:29:17 2025 by rpki-client