$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft File: 02AMuv0m_uUGT8ifMB38jjwdPKU.mft (raw, json) Hash identifier: jxnaIQM1RusvTkI13NT465Ehi2BL8f4xp3A0UVdiKuE= Subject key identifier: 66:FD:25:93:36:C9:9F:BE:23:59:DD:63:2F:6A:9A:28:F9:94:49:D2 Authority key identifier: D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5 Certificate issuer: /CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5 Certificate serial: 0197B5FC00D9B3A4C98432B184B53C3B67C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft Manifest number: 15C1 Signing time: Sat 28 Jun 2025 10:01:20 +0000 Manifest this update: Sat 28 Jun 2025 10:01:20 +0000 Manifest next update: Sun 29 Jun 2025 10:01:20 +0000 Files and hashes: 1: 02AMuv0m_uUGT8ifMB38jjwdPKU.crl (hash: e6OvEiwDjIc37fcA+/y8a+riHzlBpetpkUOuPGNadbY=) 2: 2WkxZ6d8ewxrLWO8WH12o0AY6xw.roa (hash: nbEjkYORzyFd58OrYmjVC1fHN4kRwapxAIIPY/slelc=) 3: 4kCyuSPPrXsbU9QOAHaicAmHwD0.roa (hash: UItrJSqbNqJpjVkVyURO/DW/ecr4i3goD+N+znJcDDg=) 4: 7WBr1YnHsoup1UkbmIJWHNzDX0E.roa (hash: W4SWAwkwaa5kcD/y0ZmDJSccOFKGfkQE9QaUWTtSQO4=) 5: AG97hJvhy0UeDTt3HIas70L9MWQ.roa (hash: CpGaF4KcigctK1KLFQXtXWhD0jjodHuaq3LolhI5NC8=) 6: EEkMm6nCb9R4YLtB4IXzgCR8OOM.roa (hash: 7A7HQmXagHkrgjRynPlWf1aNJTOS5cJM4PvFKY2czsg=) 7: JdavXfgS1C88UGPje2KGgh-CbRs.roa (hash: fsvo1+m2SxrjapW7ugn4l/vkPt8HqDS/T913gxJRh4I=) 8: M-yd6Ugm4j37VvR5jMt-KNJrmEI.roa (hash: vqjDdTSN4DxJrQed7BY7JJ0opDc9Ee98YYBmwBxXED4=) 9: Nedx1_M66uIc0vDKNZQnQXlLIdM.roa (hash: zJ8+VfMNsVLvkhPB7kvPUzmVC3uoyAUluiAWRCM46n4=) 10: Qi9XVq-dT2o75N7dfhs2g5GBACU.roa (hash: ZA6fIgi4q3HA9rAbCvC+Xiwj/72PmBX2B2EUlsP/w2Q=) 11: jLnip0BdB36NRqrdIhQucDZy8-A.roa (hash: PgGmCULcevmCru0Kv0QVroNMx8/gH95JrLZ6JaAFDWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b5:fc:00:d9:b3:a4:c9:84:32:b1:84:b5:3c:3b:67:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5 Validity Not Before: Jun 28 10:01:20 2025 GMT Not After : Jun 29 10:01:20 2025 GMT Subject: CN=66fd259336c99fbe2359dd632f6a9a28f99449d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:82:04:cd:f9:77:e3:16:ad:22:0c:66:44:b1: fe:df:c4:41:df:3e:58:f0:04:04:56:6d:c5:1b:4f: af:d4:55:97:25:5c:02:fa:9b:28:d5:d1:fd:4f:fb: 66:00:e2:89:5a:22:e9:86:20:62:4b:86:26:6f:70: 97:fa:6b:7b:44:ca:b7:f9:d3:1f:72:11:53:c2:8e: 6b:c0:17:c4:26:1d:bf:04:e5:48:42:8e:84:a4:cf: 06:74:51:c1:29:97:f0:8c:e3:6c:4a:72:71:20:9c: d7:d1:a3:eb:84:d5:8b:50:ea:77:1e:84:28:be:99: d7:d5:26:02:a8:e2:c8:61:f9:4a:15:eb:2b:8a:3c: 1e:92:63:64:06:70:bf:db:21:4d:ea:8c:cf:3f:2f: d2:35:33:84:0e:07:24:c8:ee:3b:a2:f4:de:be:94: b5:d1:bf:d2:fb:f7:9d:7c:cd:e6:7d:2e:7d:ee:fa: a0:a3:2d:07:9f:23:1b:14:9e:48:99:fc:f9:e7:1f: 90:82:ad:d0:09:e4:c2:6c:e7:18:9d:91:54:e7:96: 63:9d:a3:6b:df:44:7d:ed:58:ef:78:9c:b0:aa:3f: 0c:37:08:8a:67:c8:cf:a8:a0:94:d0:bf:ec:06:8c: ef:cd:6b:df:9b:05:da:a8:ff:41:f6:e1:23:95:8e: 50:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FD:25:93:36:C9:9F:BE:23:59:DD:63:2F:6A:9A:28:F9:94:49:D2 X509v3 Authority Key Identifier: keyid:D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:50:57:f7:41:5b:43:bf:19:14:74:87:3b:6b:07:94:ea:c2: 74:72:88:de:39:62:ad:99:81:68:b1:f6:8a:8b:bf:9b:41:24: d1:e8:ff:b6:4b:f7:f7:86:f0:77:da:db:70:9d:d2:e5:25:12: d5:20:8d:b1:7b:32:5d:86:07:77:77:74:3e:8e:b1:ff:de:8d: 0a:f1:7e:c8:c6:74:0c:df:d4:0b:2b:9f:46:da:56:54:a3:8d: 1f:45:45:7f:a7:aa:c0:7b:f8:8f:03:d5:3e:06:f7:a6:01:3a: 86:ac:3d:09:88:b9:ea:90:9d:20:fb:84:ef:7e:63:5d:49:2c: 89:fd:cb:69:ab:1a:07:df:3f:f0:bf:d0:c6:cd:3b:40:30:b9: e1:71:fc:3a:b5:20:60:59:75:3c:0c:10:fa:76:77:db:45:a8: f2:a4:8b:3d:8a:f9:d2:1c:43:5f:7b:20:52:30:66:28:6e:13: 5b:8c:51:1d:ed:bf:9e:8f:3d:50:a9:cc:2f:5d:4a:db:87:d8: 11:dd:a9:ef:22:de:a3:1f:01:8c:97:6c:28:93:77:95:7d:25: f0:e8:d5:7a:06:5b:cd:4a:f5:7c:2d:a7:b4:4c:8a:f7:dc:a4: e0:b3:f7:6f:dc:d1:0f:a6:65:75:4e:a2:f1:4e:da:65:c6:e7: ac:94:b8:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe1/ADZs6TJhDKxhLU8O2fEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNjAwY2JhZmQyNmZlZTUwNjRmYzg5ZjMwMWRmYzhlM2Mx ZDNjYTUwHhcNMjUwNjI4MTAwMTIwWhcNMjUwNjI5MTAwMTIwWjAzMTEwLwYDVQQD Eyg2NmZkMjU5MzM2Yzk5ZmJlMjM1OWRkNjMyZjZhOWEyOGY5OTQ0OWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YIEzfl34xatIgxmRLH+38RB3z5Y 8AQEVm3FG0+v1FWXJVwC+pso1dH9T/tmAOKJWiLphiBiS4Ymb3CX+mt7RMq3+dMf chFTwo5rwBfEJh2/BOVIQo6EpM8GdFHBKZfwjONsSnJxIJzX0aPrhNWLUOp3HoQo vpnX1SYCqOLIYflKFesrijwekmNkBnC/2yFN6ozPPy/SNTOEDgckyO47ovTevpS1 0b/S+/edfM3mfS597vqgoy0HnyMbFJ5Imfz55x+Qgq3QCeTCbOcYnZFU55ZjnaNr 30R97VjveJywqj8MNwiKZ8jPqKCU0L/sBozvzWvfmwXaqP9B9uEjlY5QzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGb9JZM2yZ++I1ndYy9qmij5lEnSMB8GA1UdIwQY MBaAFNNgDLr9Jv7lBk/InzAd/I48HTylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9iNzA2NTgtZTFkYy00OTQ0LWEwNmIt MWM2ODBhZGY3YTI2LzEvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9iNzA2NTgtZTFkYy00OTQ0LWEwNmItMWM2ODBhZGY3YTI2 LzEvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkFBX90Fb Q78ZFHSHO2sHlOrCdHKI3jlirZmBaLH2iou/m0Ek0ej/tkv394bwd9rbcJ3S5SUS 1SCNsXsyXYYHd3d0Po6x/96NCvF+yMZ0DN/UCyufRtpWVKONH0VFf6eqwHv4jwPV Pgb3pgE6hqw9CYi56pCdIPuE735jXUksif3LaasaB98/8L/Qxs07QDC54XH8OrUg YFl1PAwQ+nZ320Wo8qSLPYr50hxDX3sgUjBmKG4TW4xRHe2/no89UKnML11K24fY Ed2p7yLeox8BjJdsKJN3lX0l8OjVegZbzUr1fC2ntEyK99yk4LP3b9zRD6ZldU6i 8U7aZcbnrJS4cA== -----END CERTIFICATE-----Generated at Sat Jun 28 19:08:33 2025 by rpki-client