$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft File: tIUv-6fVfFqK-7bqW-r33-wMFFo.mft (raw, json) Hash identifier: BnkOVLAVrlTbje+XNasw+kCgg519R+4cL8re3tOGHrA= Subject key identifier: 15:DF:A9:56:C2:56:C3:85:AF:7C:37:5A:B4:E3:C5:65:D9:E2:75:FC Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Certificate serial: 0197B7457B981724C392A69081F30C85EEDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft Manifest number: 15C5 Signing time: Sat 28 Jun 2025 16:01:13 +0000 Manifest this update: Sat 28 Jun 2025 16:01:13 +0000 Manifest next update: Sun 29 Jun 2025 16:01:13 +0000 Files and hashes: 1: 2zBG6wv0zKBe2XlbGkfLL9rOdtY.roa (hash: lxNpEB+wfb/SASGgTTjYX3zTxUdrCP8FyxAXU//G0JE=) 2: 60ZaPiBpi8SxBTjOjQUT9FiEU2Q.roa (hash: +EenJI8/Zu0itO/r18F94M+NWWU8CW03dUIDwunEbUc=) 3: ELder04tNbbgntelOzAhfHduEJQ.roa (hash: EYr754S/llaOJHTStE73M5DFVVB9J1YVjraoxE/z0DE=) 4: EU2O-Gd0BV713EAdFoGJuGMnLgQ.roa (hash: DIGhFlsty46rXCRlbLUopCZPIy0Ap7bO0kln0jsUUZQ=) 5: O3sXFCWDkxRLQArJVgciZYJOH2k.roa (hash: wEiLpu8rEygqvBvHCRoBqicZ9xgf2J+eV7J8nj+KxjA=) 6: ZjHl0XpQM8CCJz6Om67G0wOmvS4.roa (hash: xCetPcOL8RFsZEGexQBgMW05eQfuM1TVnSNp6oyXZtQ=) 7: d8mFLNhZassFfsIT0V6Pg-FoNgA.roa (hash: G1lxk+WJgE19vtZBUhgAhwauP4CikNyKzPmcQ0hwXlc=) 8: dEvm44MVXindQlOEmPEQUDFIhOs.roa (hash: dVgBBC/Rmim2eB3c1PNCO34aKUguzhPQDH4vqUewLA0=) 9: nf_J-Be6PvK26ukKjJl6IQe1MJY.roa (hash: 0NfHfYZttT9eDOJu1RyDhX+/FDw371Nzr/BlGE9d+BA=) 10: tIUv-6fVfFqK-7bqW-r33-wMFFo.crl (hash: 47+kWtf410knhYZ19mH+10jUk7SLs2QHxz/J5YEgZvw=) 11: xBgHl8C3dJGWCJmZHqv6nB5Y8oQ.roa (hash: rI1CEkrztn+BRMtnvWNccs01rdhwia4WvS8p6nZL0z8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 16:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:45:7b:98:17:24:c3:92:a6:90:81:f3:0c:85:ee:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Validity Not Before: Jun 28 16:01:13 2025 GMT Not After : Jun 29 16:01:13 2025 GMT Subject: CN=15dfa956c256c385af7c375ab4e3c565d9e275fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:67:78:d4:b7:15:3e:53:2b:80:00:30:a8:e8: db:5b:56:93:c9:88:2b:31:7e:34:2c:42:70:52:44: 2b:ce:d3:ee:b0:1d:f6:33:ed:d3:7d:d9:3a:05:81: d9:89:dc:39:1f:1d:59:4a:a0:03:f0:c5:6e:87:d6: f6:a1:58:dc:b4:71:b9:0e:3e:3f:ae:67:dd:9a:0e: e7:4a:b7:0e:2d:f0:03:e8:a8:07:a0:f8:8f:05:d8: 0b:83:82:dd:9e:2d:44:c5:f7:eb:8e:a3:5e:05:82: 11:69:3a:3c:24:20:76:b7:68:c2:70:db:30:bf:9f: 06:5f:da:f5:45:40:58:f3:48:70:40:e9:7c:cf:ef: 66:04:4b:57:a7:60:ea:8a:51:d6:20:68:64:3f:be: ca:60:d6:a8:50:58:53:79:b3:52:0d:c0:da:13:ed: 89:f4:20:e3:dd:09:16:f5:3b:be:0a:a9:d3:14:2a: d2:ec:d1:e6:34:72:74:6b:27:82:38:38:5e:23:61: 99:57:7e:5e:33:c4:bc:d1:cb:0f:9b:fe:b1:c5:c6: b0:eb:85:31:69:70:26:5d:1b:d7:7e:2c:d1:05:1f: c6:6b:1a:13:c3:c8:dc:75:1c:dc:06:c9:5f:8c:6f: 9f:de:4b:4f:e7:06:05:a6:12:de:e6:90:70:35:f6: 49:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:DF:A9:56:C2:56:C3:85:AF:7C:37:5A:B4:E3:C5:65:D9:E2:75:FC X509v3 Authority Key Identifier: keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:9b:0e:8c:87:a1:da:d1:c3:24:08:0b:b3:f8:6b:84:ca:ac: e5:68:82:ff:de:2e:8a:50:c4:a9:b2:dc:63:0b:c2:6f:2c:07: 5e:06:2a:2a:77:57:04:e3:c9:73:c2:07:96:93:d6:40:12:2e: 41:2f:23:bf:75:d0:f3:a8:ad:67:77:91:e0:fd:98:a5:d4:32: a1:45:fb:e4:e0:53:85:66:6d:c0:a5:b9:f3:27:83:7f:4a:7c: d2:a2:09:fe:01:ae:20:fe:98:5f:1b:40:59:83:af:ca:f3:31: c1:96:e5:09:59:58:58:ef:ad:9a:20:f3:55:77:bd:9f:e1:fa: f4:f5:6d:83:46:fe:af:f4:c5:f5:8c:38:e1:d9:07:f5:36:16: 26:4d:59:e4:70:d3:ed:78:72:02:32:b6:ab:4c:77:f4:c8:c4: 63:35:75:ee:de:a7:7b:97:2c:9e:39:e7:0a:1e:13:6f:b7:d8: 4e:d6:54:cd:84:08:45:0a:82:48:f1:72:36:86:db:bb:02:2c: 90:c6:b7:b5:9a:60:5a:95:ee:97:c0:6f:03:d0:a9:3a:00:c5: fa:13:ac:ee:c2:bd:1c:56:29:07:e1:29:f8:6c:20:6c:6d:b8: 21:eb:ac:4e:76:ba:40:e8:bd:6f:78:6c:56:c6:f1:fb:9f:65: 3b:37:aa:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3RXuYFyTDkqaQgfMMhe7fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODUyZmZiYTdkNTdjNWE4YWZiYjZlYTViZWFmN2RmZWMw YzE0NWEwHhcNMjUwNjI4MTYwMTEzWhcNMjUwNjI5MTYwMTEzWjAzMTEwLwYDVQQD EygxNWRmYTk1NmMyNTZjMzg1YWY3YzM3NWFiNGUzYzU2NWQ5ZTI3NWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWd41LcVPlMrgAAwqOjbW1aTyYgr MX40LEJwUkQrztPusB32M+3Tfdk6BYHZidw5Hx1ZSqAD8MVuh9b2oVjctHG5Dj4/ rmfdmg7nSrcOLfAD6KgHoPiPBdgLg4Ldni1ExffrjqNeBYIRaTo8JCB2t2jCcNsw v58GX9r1RUBY80hwQOl8z+9mBEtXp2DqilHWIGhkP77KYNaoUFhTebNSDcDaE+2J 9CDj3QkW9Tu+CqnTFCrS7NHmNHJ0ayeCODheI2GZV35eM8S80csPm/6xxcaw64Ux aXAmXRvXfizRBR/GaxoTw8jcdRzcBslfjG+f3ktP5wYFphLe5pBwNfZJ8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXfqVbCVsOFr3w3WrTjxWXZ4nX8MB8GA1UdIwQY MBaAFLSFL/un1Xxaivu26lvq99/sDBRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQt ZjcxMDM4ZTk2N2E0LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQtZjcxMDM4ZTk2N2E0 LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAppsOjIeh 2tHDJAgLs/hrhMqs5WiC/94uilDEqbLcYwvCbywHXgYqKndXBOPJc8IHlpPWQBIu QS8jv3XQ86itZ3eR4P2YpdQyoUX75OBThWZtwKW58yeDf0p80qIJ/gGuIP6YXxtA WYOvyvMxwZblCVlYWO+tmiDzVXe9n+H69PVtg0b+r/TF9Yw44dkH9TYWJk1Z5HDT 7XhyAjK2q0x39MjEYzV17t6ne5csnjnnCh4Tb7fYTtZUzYQIRQqCSPFyNobbuwIs kMa3tZpgWpXul8BvA9CpOgDF+hOs7sK9HFYpB+Ep+GwgbG24IeusTna6QOi9b3hs Vsbx+59lOzeq5Q== -----END CERTIFICATE-----Generated at Sun Jun 29 02:02:24 2025 by rpki-client