$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft File: o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft (raw, json) Hash identifier: aFJOztO7pqYnCdr+DsbGBm1EGTmt4CpaaxkS5drACs4= Subject key identifier: 23:E7:68:6B:01:DD:02:41:64:BD:F5:05:A2:C2:BA:FF:50:3B:88:56 Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4 Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4 Certificate serial: 0197D3CF6E09E06EF025C4761C0FBFF41DD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft Manifest number: 14F4 Signing time: Fri 04 Jul 2025 05:01:16 +0000 Manifest this update: Fri 04 Jul 2025 05:01:16 +0000 Manifest next update: Sat 05 Jul 2025 05:01:16 +0000 Files and hashes: 1: A-6dGixYiVjP5SArd3OOXzF_y94.roa (hash: dHKBVyiR8mv13Z7wTMxDvJhUaTAdj4JJSYSEmomSgRI=) 2: EdyN193XAqCuwUeh3uoqwgMp6YM.roa (hash: aMp83WD7+8DMvO0EZKm2i6yVdt39wHGmWPL1VSmKtjM=) 3: KWzqOLtIWSWtWkByhLp85FW_7rM.roa (hash: +yMm4K7E6517qc0jJ3daW8uChLhsqKi3MVBCXwIyDXI=) 4: ZMT2qJeQlu-C5i0G01EBCNd-g6M.roa (hash: Jul8wggfGDzUNFRFlHhNzs2me0GUF4GTUbIsvxzWDwQ=) 5: adPv80nsAvDoMdbWFhmbQrTYx_c.roa (hash: 4ui5pcCs9o10PJAGBjhy0LQC0IJvn6eEg11QBgbYrhM=) 6: ayrwJOZcqXwPotZkkftDNJvjVWI.roa (hash: u8hehMe3mSy7WRp8JZKZ+vW+iYZYC7RSsKKYne4ZeUk=) 7: dBRyMZmE2MJby6jWlOxwaQP0Xaw.roa (hash: n5MzTBEIB9PdMNKBfe5+OAUwctGrct8tICmAF1a6F9E=) 8: fnuqhATdgk7065LZ-MFpw_mk_Sk.roa (hash: MF0/pFOYDoQu2nRxFXy3gK33SujqFiXhgPkh2E7fsqk=) 9: mPlgxbWD56Le2xy3b_FhRsqSxsc.roa (hash: AfWfwIbPTYGoiVxVmMF6d4mso8lDoU2eXTIxJq7pZSw=) 10: o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl (hash: waME8OkZJIh7UU/QkC3kAL9ZZvrLxg+fUp/OIdG/2Lw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 05:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:d3:cf:6e:09:e0:6e:f0:25:c4:76:1c:0f:bf:f4:1d:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4 Validity Not Before: Jul 4 05:01:16 2025 GMT Not After : Jul 5 05:01:16 2025 GMT Subject: CN=23e7686b01dd024164bdf505a2c2baff503b8856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:99:8b:3b:cb:4f:ed:4f:d3:10:37:08:78:92: 28:a2:1c:74:52:4e:9d:79:61:87:d6:09:f2:95:eb: 7b:af:e5:12:5b:e3:08:7d:ef:71:8a:b7:26:40:8c: 68:de:7e:87:52:f4:40:80:33:d1:1e:31:62:2c:cb: 09:aa:53:10:07:f4:cf:a7:e9:ca:d4:a4:b5:21:4a: 26:98:1a:3e:ea:7f:a8:c4:ed:36:79:31:0a:82:3d: a3:58:cc:b3:38:03:a9:ec:6c:15:d2:44:4a:e4:6d: 8f:09:90:5d:5c:03:1b:1b:d6:72:68:47:fd:e3:7a: bb:6d:70:b4:aa:00:82:09:f9:ba:ef:e4:e4:7e:a5: be:72:eb:51:2e:02:31:28:4e:24:5b:be:3e:62:d1: 8b:93:30:8d:c8:3a:dc:22:8e:fb:65:ec:59:20:48: 3d:94:54:68:f2:0d:06:11:ff:91:3b:08:c9:af:74: 1b:38:16:f6:7f:29:80:5f:ab:b1:9b:c7:74:cf:f7: cf:d6:57:0f:f7:ca:05:7e:d5:42:a5:c5:69:93:e1: 7d:ce:d5:7e:f9:98:c8:1a:80:3e:d1:6f:31:23:fb: af:6d:bd:35:3c:a5:9e:b5:12:86:e5:23:f8:bc:41: 35:ce:da:46:26:60:31:9e:23:6f:65:3a:e9:f3:0c: 59:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E7:68:6B:01:DD:02:41:64:BD:F5:05:A2:C2:BA:FF:50:3B:88:56 X509v3 Authority Key Identifier: keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:0d:21:f1:ed:09:46:60:aa:ea:08:73:82:73:b8:75:94:56: f7:02:27:66:b9:f9:24:8c:4a:81:5f:b8:de:2c:ce:62:8d:a3: 3d:5a:d6:80:a5:05:0d:47:b9:dd:c6:c1:71:a2:67:08:94:2b: 26:d7:2b:b9:cd:00:d9:77:2a:dd:69:4c:65:0a:e7:12:6f:22: ac:cc:e0:98:66:2e:b7:53:d4:d0:a9:ac:81:fd:3e:29:a5:5d: bb:92:ee:ce:6b:bf:19:a0:4f:62:0a:5a:9a:71:da:28:64:b0: 02:44:71:a3:ea:6b:94:74:1e:4c:fc:e4:00:61:9d:ca:34:ff: f6:3b:e5:8e:e1:37:46:9b:5f:a4:cd:41:ec:09:b5:14:1f:71: c1:e6:74:c0:0f:f9:de:6e:9b:16:25:0d:f4:9b:cb:ca:aa:7e: fc:07:c5:ca:c9:89:43:2a:be:41:91:27:93:c3:d6:6b:fe:94: 29:fe:34:f6:13:1e:af:ea:48:cc:6a:91:6d:a0:32:7a:8c:e1: 0f:17:f5:66:f9:c5:a9:58:1b:ba:90:62:88:e1:d7:78:2a:5f: c6:17:13:d1:e7:95:43:48:01:64:2e:cb:60:aa:dc:55:7d:15: cb:c0:6b:de:cb:5f:07:7f:f9:44:c4:4f:f6:6a:b7:31:1a:e4: bf:3d:b6:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfTz24J4G7wJcR2HA+/9B3VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzODllNzAzNWIwOGUxODFhMzQxZjM3ZWRhNzM0M2QyM2Yx Y2FmYTQwHhcNMjUwNzA0MDUwMTE2WhcNMjUwNzA1MDUwMTE2WjAzMTEwLwYDVQQD EygyM2U3Njg2YjAxZGQwMjQxNjRiZGY1MDVhMmMyYmFmZjUwM2I4ODU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJmLO8tP7U/TEDcIeJIoohx0Uk6d eWGH1gnylet7r+USW+MIfe9xircmQIxo3n6HUvRAgDPRHjFiLMsJqlMQB/TPp+nK 1KS1IUommBo+6n+oxO02eTEKgj2jWMyzOAOp7GwV0kRK5G2PCZBdXAMbG9ZyaEf9 43q7bXC0qgCCCfm67+TkfqW+cutRLgIxKE4kW74+YtGLkzCNyDrcIo77ZexZIEg9 lFRo8g0GEf+ROwjJr3QbOBb2fymAX6uxm8d0z/fP1lcP98oFftVCpcVpk+F9ztV+ +ZjIGoA+0W8xI/uvbb01PKWetRKG5SP4vEE1ztpGJmAxniNvZTrp8wxZhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPnaGsB3QJBZL31BaLCuv9QO4hWMB8GA1UdIwQY MBaAFKOJ5wNbCOGBo0HzftpzQ9I/HK+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWIt MGU3MjQxNmI0ZGM3LzEvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWItMGU3MjQxNmI0ZGM3 LzEvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPg0h8e0J RmCq6ghzgnO4dZRW9wInZrn5JIxKgV+43izOYo2jPVrWgKUFDUe53cbBcaJnCJQr Jtcruc0A2Xcq3WlMZQrnEm8irMzgmGYut1PU0Kmsgf0+KaVdu5Luzmu/GaBPYgpa mnHaKGSwAkRxo+prlHQeTPzkAGGdyjT/9jvljuE3RptfpM1B7Am1FB9xweZ0wA/5 3m6bFiUN9JvLyqp+/AfFysmJQyq+QZEnk8PWa/6UKf409hMer+pIzGqRbaAyeozh Dxf1ZvnFqVgbupBiiOHXeCpfxhcT0eeVQ0gBZC7LYKrcVX0Vy8Br3stfB3/5RMRP 9mq3MRrkvz22OQ== -----END CERTIFICATE-----Generated at Fri Jul 4 14:19:48 2025 by rpki-client