$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft File: opAORlWrNJpGMrFAcZ3JcjBDFyU.mft (raw, json) Hash identifier: fU8IQFPeWa72Z2JVI7jSNOUsEcDbfclYdVRFaZ283hw= Subject key identifier: 20:6B:8C:E9:43:F2:F1:55:86:B3:8A:46:1E:7B:AE:52:FB:15:4D:4E Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725 Certificate serial: 0197B88F3F6F2F84337E56624DFE92254BCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft Manifest number: 15BC Signing time: Sat 28 Jun 2025 22:01:24 +0000 Manifest this update: Sat 28 Jun 2025 22:01:24 +0000 Manifest next update: Sun 29 Jun 2025 22:01:24 +0000 Files and hashes: 1: 8loW5HN3rlQsgDTApUmX4zxMYVo.roa (hash: LKWZ8SK1V+gZE1QR5SYwO3Jiw4zJ7265yXeEGQlZ8zw=) 2: Ah3KLJm-LKDPU2A-ukfbltAbHHE.roa (hash: swE4PQqkYwr3g++5aj4+DHREVDMSOVCdaIbmuqijBx8=) 3: DDAn0V8SSoUAqqE5fzd6yTf6vio.roa (hash: rVCSbprtHlhgRB9AzbTbTHTH0ZbS3aC9A5gq4r3O14U=) 4: EFQvVvsmK2CnxaFWECLQzIRuaoA.roa (hash: z5MySgQN1+YGDxUko6xG8KGFZh9NwMFl3FNcAcreE/w=) 5: Ptk1juvR6AU_vl6lr4RswBAQK74.roa (hash: 7usWDVylXyYylG7CWiaUKOpGSZfMt4/Ahvv6lHEknXQ=) 6: aQrQOxkAHRHWvV6SAv8MhUo2FEk.roa (hash: A+zK69O6Xa28jcWgz6jSMTN0CwLXk1uRy8YJFifVFB8=) 7: gH9l_Olu7Z11QNfATlwel8_lHng.roa (hash: Qy7a8ybAWRGH/C9L4lBi8o0qao1M7eUnSgkK9WeGPzo=) 8: jtloUH3GHj6agPnwXpuohh661-Y.roa (hash: KrxUqRlvQiFZKDH37ecvZbfFbOWCQq6UJlz8kh7LUL8=) 9: kwOU6n2U0tlOOT5S3nqF-ntVFYQ.roa (hash: tJWykZcdes0s9amE0to1DThjyvp5rw7kHFWEXdqGdBw=) 10: opAORlWrNJpGMrFAcZ3JcjBDFyU.crl (hash: nJEF2xqcUIb5xpvzRx7i66jLKIAKNovDqIgUi2W8KdQ=) 11: u3fVEc-RK0U4DFHiTlygDyKj4rI.roa (hash: Us98OeKKFK/pD4hLHv0TSn5RO0cC7LOagG2XI+ndne0=) 12: v40G9p22ghWMe8UKdX_wMiyNMek.roa (hash: jreCJmIVZHIjE2eJf4y2q1RHo2Hv3JjWpFOiAElZPd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 22:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:8f:3f:6f:2f:84:33:7e:56:62:4d:fe:92:25:4b:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2900e4655ab349a4632b140719dc97230431725 Validity Not Before: Jun 28 22:01:24 2025 GMT Not After : Jun 29 22:01:24 2025 GMT Subject: CN=206b8ce943f2f15586b38a461e7bae52fb154d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:94:1d:a2:fc:37:7a:87:eb:5a:2b:53:c2:95: a9:82:fe:40:11:ec:ac:0d:3b:bb:b3:a9:24:5f:fd: 9d:1e:ca:12:f9:a2:bc:6f:e9:ab:8b:66:14:d4:4e: bf:38:91:53:92:cf:44:ce:8d:fa:fa:a8:bd:9b:93: df:fa:b0:10:b5:6d:5b:ab:ca:1f:14:8b:7e:ee:53: d1:75:85:a1:c7:cc:46:29:f9:8c:a5:5a:99:44:c9: 84:d1:18:94:a6:92:7a:db:31:39:0b:db:42:ea:0e: 51:eb:c2:53:15:fb:4d:ad:ee:0f:9f:e4:f8:07:6a: 02:97:c6:40:1c:61:c1:71:8e:a6:14:6c:9d:c6:12: 52:9a:f8:0f:c3:51:51:37:88:72:47:91:25:79:9e: b0:69:ec:75:8d:58:f8:2e:d6:6f:37:b8:dc:e2:8b: 42:26:02:df:ab:1b:6d:63:61:9d:0e:4b:6a:45:2f: 5e:39:5a:f1:d0:50:22:38:6a:0a:1f:83:68:cf:a1: 6d:b3:54:8d:e1:3e:6f:f9:0f:cc:ef:dd:38:0d:80: 14:f5:ad:b6:1c:94:d9:f7:21:de:36:db:73:7d:02: ab:f9:63:b4:6a:81:1b:31:1c:9f:b2:96:e8:0e:6b: fc:ec:28:6d:89:66:d5:8f:f6:e6:f1:0f:01:aa:50: 7c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6B:8C:E9:43:F2:F1:55:86:B3:8A:46:1E:7B:AE:52:FB:15:4D:4E X509v3 Authority Key Identifier: keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:e6:c9:fe:29:80:fe:1b:12:08:f3:81:56:80:b7:ab:b3:53: e3:e7:e5:ec:f8:25:2f:33:49:ab:85:fb:f6:bc:63:b8:49:30: 85:5a:34:df:85:23:bf:45:61:81:81:9c:fe:2a:c7:6a:9a:20: 6e:46:a8:22:76:b2:94:6e:a5:3c:ee:f1:35:0e:48:f1:25:cd: a2:ad:6d:b6:42:55:51:64:e3:5b:24:6c:fd:3c:9c:98:f7:00: 61:4b:56:97:f7:d5:6d:c3:c3:ca:0c:15:b3:8a:e7:0d:c4:26: 78:52:a7:f5:bd:3d:66:f7:bf:11:d1:c1:44:07:2a:07:65:6c: c2:77:a3:8a:f5:02:6e:59:1f:e6:e5:f0:d1:52:ef:8a:86:b7: eb:5d:b2:98:8f:f4:a9:36:67:45:7a:f0:4a:d4:31:ad:44:7f: 4e:21:e1:1e:22:d2:74:07:3d:9e:df:bd:07:b8:25:60:b7:7c: dc:77:dd:55:1b:de:d3:6b:bc:ea:1c:dc:80:da:f5:23:2d:a0: da:87:f8:26:37:69:cb:0f:30:47:46:9f:4c:6d:7d:3f:da:c1: 44:1a:35:60:d9:8a:7c:81:94:ee:5a:e7:ca:6b:fe:f7:8a:f5: d6:a3:81:b9:76:17:eb:c8:63:36:52:7d:4a:f7:ad:8c:c3:81: 01:a1:ed:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4jz9vL4QzflZiTf6SJUvKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyOTAwZTQ2NTVhYjM0OWE0NjMyYjE0MDcxOWRjOTcyMzA0 MzE3MjUwHhcNMjUwNjI4MjIwMTI0WhcNMjUwNjI5MjIwMTI0WjAzMTEwLwYDVQQD EygyMDZiOGNlOTQzZjJmMTU1ODZiMzhhNDYxZTdiYWU1MmZiMTU0ZDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5Qdovw3eofrWitTwpWpgv5AEeys DTu7s6kkX/2dHsoS+aK8b+mri2YU1E6/OJFTks9Ezo36+qi9m5Pf+rAQtW1bq8of FIt+7lPRdYWhx8xGKfmMpVqZRMmE0RiUppJ62zE5C9tC6g5R68JTFftNre4Pn+T4 B2oCl8ZAHGHBcY6mFGydxhJSmvgPw1FRN4hyR5EleZ6waex1jVj4LtZvN7jc4otC JgLfqxttY2GdDktqRS9eOVrx0FAiOGoKH4Noz6Fts1SN4T5v+Q/M7904DYAU9a22 HJTZ9yHeNttzfQKr+WO0aoEbMRyfspboDmv87ChtiWbVj/bm8Q8BqlB8ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBrjOlD8vFVhrOKRh57rlL7FU1OMB8GA1UdIwQY MBaAFKKQDkZVqzSaRjKxQHGdyXIwQxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMt ZjRjNWZjM2NhMmM0LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMtZjRjNWZjM2NhMmM0 LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtubJ/imA /hsSCPOBVoC3q7NT4+fl7PglLzNJq4X79rxjuEkwhVo034Ujv0VhgYGc/irHapog bkaoInaylG6lPO7xNQ5I8SXNoq1ttkJVUWTjWyRs/TycmPcAYUtWl/fVbcPDygwV s4rnDcQmeFKn9b09Zve/EdHBRAcqB2VswnejivUCblkf5uXw0VLvioa3612ymI/0 qTZnRXrwStQxrUR/TiHhHiLSdAc9nt+9B7glYLd83HfdVRve02u86hzcgNr1Iy2g 2of4Jjdpyw8wR0afTG19P9rBRBo1YNmKfIGU7lrnymv+94r11qOBuXYX68hjNlJ9 SvetjMOBAaHtKA== -----END CERTIFICATE-----Generated at Sun Jun 29 06:13:49 2025 by rpki-client