$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft File: _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json) Hash identifier: oMpCOfl3Hw3zRVN1q6RDUyXZjh2f5ACkr6JeBrOxpWw= Subject key identifier: A5:6E:A4:CF:14:13:3A:C5:27:9B:DE:7F:7D:49:F6:79:3C:61:69:15 Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Certificate serial: 0197B77C5647327652FCC47A3773E9F8E780 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft Manifest number: 157C Signing time: Sat 28 Jun 2025 17:01:08 +0000 Manifest this update: Sat 28 Jun 2025 17:01:08 +0000 Manifest next update: Sun 29 Jun 2025 17:01:08 +0000 Files and hashes: 1: F_cRK7_FuJ1SOPF-eStGPWamodQ.roa (hash: bwgPCaYQdCUVOLDgCvOHRKGxaq7IRtIbjKPrwDwOiGI=) 2: Itnfb5cOidqPHmrm9ItGmwZzqpE.roa (hash: iss4kvemyRAUGLNEu7CN/erlN+DUp3hzgmc3aCXZAfU=) 3: JaFKfYKslg0WUVhBG8hHu6LqTvw.roa (hash: 4GgDdTVxQxqewTP0EOz1RIPWIQ2EEWazgc1qxopxzyA=) 4: NiD2SDjoMC5kCqhJ0LqUs7rzMnw.roa (hash: 9+KHXzf6QQ6hX/XBCMhmaRntprEYELpBh7Oa+Qw01T4=) 5: ShXwELNENSFmGBdjnWGg5NqouYI.roa (hash: CvtdGpDGnIEThk2qtR3nRVqJ7XKDlnHvbjdMw3b5GEg=) 6: U6O4fPn6akIpWmgc4yJT0O6kLpo.roa (hash: yofA2VyhfSO3CESlgcLfFamVAKarRdUA7fzOcVSh6T0=) 7: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: KI4kvWMrVh2DmniBxijeLw8nc3qasZRdplhbA4FSbF8=) 8: u3VJR1_M7JzYx842qLGTM0en5V0.roa (hash: qbP/xDwKS1NUr1YSZhW1L+ZrVrT39XIk/W4+EAm8kOI=) 9: u78uWSrgAzCPEqQ1a6qiORHkdCM.roa (hash: 9W05Suh8wT4kbf/1UCTyebvUaEuJKmhSKAxlbGzmQ6c=) 10: y4Nw6VYuIuUZOv6I685fKqZhbWQ.roa (hash: JM0RAslsFdrhEKUBmY+ywDM/Jo6q24Igd7pWLFOkC9Q=) 11: zIstcjB0l5dXMsxLJF-PmySyWoY.roa (hash: sZKTonBPo728p5sx2a7KurcsOwIi7QOOMBd8o6TZnS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:7c:56:47:32:76:52:fc:c4:7a:37:73:e9:f8:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Validity Not Before: Jun 28 17:01:08 2025 GMT Not After : Jun 29 17:01:08 2025 GMT Subject: CN=a56ea4cf14133ac5279bde7f7d49f6793c616915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3a:0b:58:b4:d8:f5:05:72:ba:f7:bb:b8:45: 37:00:be:a1:e5:ad:de:93:8a:bb:ce:5b:6f:f5:ca: 4f:bc:2f:bd:95:4b:47:69:7d:40:c2:34:38:56:0c: c8:b5:c0:5e:ff:f0:ec:fc:a7:6b:54:3b:fa:5a:98: 22:a5:d3:96:26:cb:54:02:55:74:6b:3b:dd:35:2d: 40:11:b3:24:8b:b3:0c:95:f5:41:21:c9:6d:eb:b9: 7f:90:f7:be:ae:d0:ea:ab:70:16:50:f2:53:26:c3: 7d:e8:cc:0d:25:3f:c6:17:92:37:38:ff:ab:d5:fd: 08:33:56:ca:6d:74:d3:72:aa:1f:1e:58:93:b4:89: 22:36:5e:f2:ed:9a:d7:41:6f:be:c3:66:4b:a2:b5: 5d:1a:75:2f:1b:98:7f:5b:4a:62:d2:4c:9a:da:dc: ff:f2:b1:d7:3d:7d:9e:d6:95:84:ac:39:fd:7c:8b: fa:6e:45:e8:af:e6:8e:d5:4f:f2:04:43:b3:e3:ba: ae:2e:1c:14:dc:ed:e3:9e:2d:b1:27:af:fc:c5:e5: ae:d8:94:80:f9:54:54:20:bb:1c:de:a3:f0:8d:6b: 27:67:6b:1e:9f:de:e1:4b:3a:32:19:18:d7:3f:ef: 3f:98:7f:1a:21:3e:d3:e3:ad:9f:bc:bf:9d:96:5c: de:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:6E:A4:CF:14:13:3A:C5:27:9B:DE:7F:7D:49:F6:79:3C:61:69:15 X509v3 Authority Key Identifier: keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:04:96:bb:b1:1c:12:84:c0:a1:df:b3:c4:d0:d0:25:05:b1: 7a:10:89:4a:f2:7a:1f:d3:90:2b:de:92:b7:a2:95:4f:64:f3: 65:e2:12:f8:a1:2f:8e:eb:38:47:33:98:26:0d:77:b7:14:3f: 7b:c9:bd:0c:ef:69:60:0b:04:17:ba:ff:85:b8:6d:3e:c8:36: e1:c6:32:d5:3a:44:e6:cd:60:c5:6e:16:85:4b:cc:2c:c7:59: 7b:1a:a6:d5:55:58:9a:5b:8a:e8:af:9a:01:40:40:b2:61:26: 34:0e:82:e1:61:48:10:5e:fa:34:53:00:fa:b6:fc:1a:e4:28: 00:39:2c:b9:bb:39:98:4f:38:14:60:49:18:9f:7d:74:ea:35: d4:9b:f0:88:e6:b9:8c:30:05:b0:e3:40:dd:32:68:93:7e:4e: b7:c7:8b:8d:c5:f4:a1:4e:c7:9f:64:1a:79:01:c8:57:81:78: 1e:dc:fe:a8:af:6c:bc:e9:aa:da:e6:a4:9d:0b:de:0e:03:b2: 93:a5:f4:b7:64:ea:5c:8c:23:87:e2:79:55:b8:72:07:9f:11: 3c:72:d6:18:2f:0b:1f:bc:e3:2b:db:32:7a:45:88:92:c1:6c: 1a:d7:8a:9d:3c:fc:a5:17:58:30:fb:5a:7c:3f:bf:3b:e3:14: dc:0f:20:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3fFZHMnZS/MR6N3Pp+OeAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw YTJiN2UwHhcNMjUwNjI4MTcwMTA4WhcNMjUwNjI5MTcwMTA4WjAzMTEwLwYDVQQD EyhhNTZlYTRjZjE0MTMzYWM1Mjc5YmRlN2Y3ZDQ5ZjY3OTNjNjE2OTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzoLWLTY9QVyuve7uEU3AL6h5a3e k4q7zltv9cpPvC+9lUtHaX1AwjQ4VgzItcBe//Ds/KdrVDv6WpgipdOWJstUAlV0 azvdNS1AEbMki7MMlfVBIclt67l/kPe+rtDqq3AWUPJTJsN96MwNJT/GF5I3OP+r 1f0IM1bKbXTTcqofHliTtIkiNl7y7ZrXQW++w2ZLorVdGnUvG5h/W0pi0kya2tz/ 8rHXPX2e1pWErDn9fIv6bkXor+aO1U/yBEOz47quLhwU3O3jni2xJ6/8xeWu2JSA +VRUILsc3qPwjWsnZ2sen97hSzoyGRjXP+8/mH8aIT7T462fvL+dllzeAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVupM8UEzrFJ5vef31J9nk8YWkVMB8GA1UdIwQY MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct NzNmZDNiYzE5YWE3LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3 LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQSWu7Ec EoTAod+zxNDQJQWxehCJSvJ6H9OQK96St6KVT2TzZeIS+KEvjus4RzOYJg13txQ/ e8m9DO9pYAsEF7r/hbhtPsg24cYy1TpE5s1gxW4WhUvMLMdZexqm1VVYmluK6K+a AUBAsmEmNA6C4WFIEF76NFMA+rb8GuQoADksubs5mE84FGBJGJ99dOo11JvwiOa5 jDAFsONA3TJok35Ot8eLjcX0oU7Hn2QaeQHIV4F4Htz+qK9svOmq2uaknQveDgOy k6X0t2TqXIwjh+J5VbhyB58RPHLWGC8LH7zjK9syekWIksFsGteKnTz8pRdYMPta fD+/O+MU3A8geQ== -----END CERTIFICATE-----Generated at Sat Jun 28 20:44:33 2025 by rpki-client