$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft File: _97EpGpubk-aktC6Lgs6tWWL4b0.mft (raw, json) Hash identifier: iOnMZILjERvU+55CTTXMk+6NKNvxHw52l2VT9WM+SDQ= Subject key identifier: CF:44:61:F0:69:28:54:EF:72:70:7C:B7:A7:52:49:19:BA:D9:08:6A Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Certificate serial: 0197B63291BAC78B51397196A76EA8AC074B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft Manifest number: 15CE Signing time: Sat 28 Jun 2025 11:00:56 +0000 Manifest this update: Sat 28 Jun 2025 11:00:56 +0000 Manifest next update: Sun 29 Jun 2025 11:00:56 +0000 Files and hashes: 1: 1P2Zej4pxQtuIhEVIdzvWNHoMjM.roa (hash: 1V31P+tFYcgF/AzLiAsVDYFl2+asLT680sp7HqmRmh0=) 2: 9LGSNE38RZCTyouOtHVx3qVP6lw.roa (hash: ugV2YTVWDidN8y0vBVq2PfGkhQx7PuXVEwNoZCBbGX8=) 3: OsAkT1Bjc6Bx57ink5LVscASSVM.roa (hash: Me3jYRS4jKNnlOdyWwLlCaXNsCc57NzdmZ5lT79t3Rw=) 4: RmwlFKm2A6wCOU2tiPLTSzuhAA8.roa (hash: NB+w6tJSmFPHFd2FMxkqFpCOapIk+qQqzfmt3QzOsMk=) 5: UobB1JoTOzUGFpCCZFbxasjgqAA.roa (hash: ms0cbPIRl6WuE78I/a1I+geJkM+CYYhZiVIqQ6+fwVY=) 6: VuROyrWs92eKXOizp2Q-0fnpLR0.roa (hash: fMjWZ/dM7054cYWsnjZNa6zVf7FPSoCGvOyM76Sl6Mc=) 7: VxRGHdP__z9RHajqH60awAUqQgg.roa (hash: tIdE9ZmAuCmbV7t2it8DIWQnm6yvOgpE7cprrHK2On0=) 8: _97EpGpubk-aktC6Lgs6tWWL4b0.crl (hash: U9AEZ2dFi3t3hJ5tGtLBKNCqnfVedpIp4GbNyCFzIhw=) 9: iP8ql6ZvDkSsBTs1J-PrJpdHpKo.roa (hash: tXTXKqH5Aew+pK21GPBswq4NS3nwUUaBaQxJqd2WYgg=) 10: pJnO9Ba6alCVKMIllyGL5_n-nHo.roa (hash: cF7/LpWh8txlnJKiWf+FQfbAzOZvclLDIIzD8uyNUD0=) 11: vWqmka3oaZQE1cXhvhKJIPN3ikY.roa (hash: wwmYNtR3Cqpxb6sHd4D0z140EddAwpyxzJ7dHxOqth4=) 12: zwTIjW4kVksFhIqqz0Hm86Td_eI.roa (hash: 4Gmw/YEt79d2ifSjcQjjCNUl4cViPsDbJFWDQ996oV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:32:91:ba:c7:8b:51:39:71:96:a7:6e:a8:ac:07:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Validity Not Before: Jun 28 11:00:56 2025 GMT Not After : Jun 29 11:00:56 2025 GMT Subject: CN=cf4461f0692854ef72707cb7a7524919bad9086a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6b:7a:5c:5d:39:4e:27:97:fc:b8:6d:63:92: 58:a7:55:5b:03:5d:fa:dd:8d:c7:cf:dc:56:71:a1: 52:3f:d6:30:89:b9:a1:43:47:c7:e2:fd:8a:54:29: da:54:2e:66:3c:1e:60:94:5a:7a:b7:86:42:2b:fd: 4d:31:e6:0e:85:24:f4:f5:5e:38:45:6a:d6:b4:49: f2:56:eb:32:44:de:8e:c2:a1:18:86:33:a3:9f:d3: a7:8d:9c:41:6c:92:6d:0b:26:b9:ca:b5:53:00:00: e0:f0:48:d4:df:ab:00:9e:d2:71:ef:3a:5f:f8:64: ff:64:f9:dc:89:66:8d:2f:bd:3c:0c:e8:9d:85:2f: 35:16:6b:3a:d2:0f:3e:6b:5f:0e:6e:9f:47:1b:df: ab:76:51:89:8a:a6:09:c2:9d:aa:66:ed:83:ab:ea: bd:7a:cc:6f:fd:4a:8c:77:90:90:df:25:2f:b6:17: cf:8a:75:bb:1c:b7:f0:78:2e:80:ab:13:e6:c4:7d: 30:bd:6f:53:9a:c7:88:87:42:10:30:d2:29:ef:49: bf:c2:4d:1b:bd:ed:ad:74:18:4a:d0:e7:8e:9f:be: ca:a6:4a:ad:06:14:af:79:2d:4e:a9:23:7e:d6:c0: 04:9b:ee:62:71:0d:f8:17:67:31:e8:09:21:27:d9: 1e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:44:61:F0:69:28:54:EF:72:70:7C:B7:A7:52:49:19:BA:D9:08:6A X509v3 Authority Key Identifier: keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:ba:a6:66:91:7c:8b:63:c8:aa:42:62:4e:be:5c:2b:d8:54: 2b:33:e4:92:ef:c7:34:85:cc:6f:b7:cf:73:78:56:b5:7d:49: 5c:2d:34:fa:f6:26:9a:5f:62:8d:a9:18:0f:59:09:0d:52:e6: 3b:0c:0c:fc:ae:1e:c1:a6:0d:5c:cc:62:5e:fb:58:29:ae:19: a9:3e:3b:21:69:ce:6c:20:62:89:23:94:6f:6e:e8:09:53:2c: 6f:ee:6a:36:05:6d:b2:55:04:ad:03:05:99:c6:e2:55:dc:09: 92:fb:72:a8:ba:79:1f:9c:08:a0:3c:ce:b4:a9:21:66:fd:69: 19:f3:9c:ec:ce:56:c4:9c:19:22:15:88:3d:9f:8c:94:f8:d1: 9e:17:b2:de:12:4c:79:89:2b:6f:d8:b6:65:d9:39:7f:a2:8d: 6a:e8:57:eb:c1:55:23:1b:93:df:41:61:9c:dd:e6:fa:1e:a7: 73:8e:4a:b1:72:a4:52:c2:8a:bb:cf:6e:af:d0:05:54:40:68: 0e:e1:1e:9b:2a:07:c3:69:8c:15:52:7c:c6:d4:5f:3f:0a:55: e1:05:8f:85:7d:c9:06:9c:da:db:03:b9:db:14:14:42:03:da: 2b:71:3a:77:fb:55:7b:73:eb:45:2e:8a:ca:42:70:da:2c:d4: 23:ed:08:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2MpG6x4tROXGWp26orAdLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4 YmUxYmQwHhcNMjUwNjI4MTEwMDU2WhcNMjUwNjI5MTEwMDU2WjAzMTEwLwYDVQQD EyhjZjQ0NjFmMDY5Mjg1NGVmNzI3MDdjYjdhNzUyNDkxOWJhZDkwODZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmt6XF05TieX/LhtY5JYp1VbA136 3Y3Hz9xWcaFSP9YwibmhQ0fH4v2KVCnaVC5mPB5glFp6t4ZCK/1NMeYOhST09V44 RWrWtEnyVusyRN6OwqEYhjOjn9OnjZxBbJJtCya5yrVTAADg8EjU36sAntJx7zpf +GT/ZPnciWaNL708DOidhS81Fms60g8+a18Obp9HG9+rdlGJiqYJwp2qZu2Dq+q9 esxv/UqMd5CQ3yUvthfPinW7HLfweC6AqxPmxH0wvW9TmseIh0IQMNIp70m/wk0b ve2tdBhK0OeOn77KpkqtBhSveS1OqSN+1sAEm+5icQ34F2cx6AkhJ9ketwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9EYfBpKFTvcnB8t6dSSRm62QhqMB8GA1UdIwQY MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt N2U4YzZkNGQ5YmVmLzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArLqmZpF8 i2PIqkJiTr5cK9hUKzPkku/HNIXMb7fPc3hWtX1JXC00+vYmml9ijakYD1kJDVLm OwwM/K4ewaYNXMxiXvtYKa4ZqT47IWnObCBiiSOUb27oCVMsb+5qNgVtslUErQMF mcbiVdwJkvtyqLp5H5wIoDzOtKkhZv1pGfOc7M5WxJwZIhWIPZ+MlPjRnhey3hJM eYkrb9i2Zdk5f6KNauhX68FVIxuT30FhnN3m+h6nc45KsXKkUsKKu89ur9AFVEBo DuEemyoHw2mMFVJ8xtRfPwpV4QWPhX3JBpza2wO52xQUQgPaK3E6d/tVe3PrRS6K ykJw2izUI+0IvQ== -----END CERTIFICATE-----Generated at Sat Jun 28 20:27:28 2025 by rpki-client