$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft File: 8E6yBPNYAEeIIk4vsY5NXnS-v40.mft (raw, json) Hash identifier: U1bWRnav65K2gW0Lk6wBbMGB1u4XBCK/VRZOfk3Ldyo= Subject key identifier: 9F:47:71:02:79:85:38:BD:05:54:26:D5:2F:A5:87:E3:41:51:6F:F1 Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d Certificate serial: 0197B70E66F795F6C2E3D8C2899DD718FEAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft Manifest number: 0FD6 Signing time: Sat 28 Jun 2025 15:01:03 +0000 Manifest this update: Sat 28 Jun 2025 15:01:03 +0000 Manifest next update: Sun 29 Jun 2025 15:01:03 +0000 Files and hashes: 1: 1gtsCJyHdZ_mz1Vmc6aYSOZRTug.roa (hash: i5FmepCDxpYMWJtIWumi8I2WhRPEkV925D+zrSFUKqc=) 2: 8E6yBPNYAEeIIk4vsY5NXnS-v40.crl (hash: wOoaw/rdgCiI9KYzU5zwIttIZ0Az6YkbXPSeMaH4CM0=) 3: AFN8OqvwZcsViNN-78O6BvKElME.roa (hash: gpOsJUC88/6LJdG6QKOWEGeO9P8/YN9o1I8OET+li9E=) 4: HzrOiNg5IGbvxaY6EJtaFTiPwJc.roa (hash: YVHrJ9qFMIVBjiboinqQXWeAb+UlfN0QhYG5EqTl3JU=) 5: KuzmOknbrD4Lg71OoDCO-y0GoDQ.roa (hash: L4TpWALjC8fwxZDKVNiQiJm1WAVC/DpX7t4BNMww1vk=) 6: N-Bn6UoZzfA4_e9vqjwupkidrwM.roa (hash: P0ucGjyfHx1AsSd/Hp9hPmA5fgW6WVVitbxsp2xrVOM=) 7: Xw6d5Q0Ua1XRZl5MjugABbqCL-g.roa (hash: 7lcJjOAWe6HvAJ8ku7/K4ZXcDrrbdwoOF4w1DXALzIA=) 8: Y1odvpmyDgd_SZNft3LtP_Y9m5Q.roa (hash: 6tgo1juOE3j4wf1OK40ZNiTNEBkar47yAuVkY/NJHx0=) 9: hFAl1HVJl_9l3iGKDXy7Q3YLL-4.roa (hash: t3lebss2cDykApymCPDX/VFxLKKQQSAwSa+9uLLWAvg=) 10: lmLPjrfNDPS9XohB9eEXKDTvTVw.roa (hash: YUDeNZCjz7C+nv1yj/KNPiCOaWxteb6jP1PE6tH/qfc=) 11: vir9lXd95VlX33FtFKeYsF-pV7c.roa (hash: qWwJG4kSEBMq0oRm7MvhT+tJgjjEqP9pDam2i3CMe+g=) 12: vwnatcxNwSZQjN_EAgtCA6gLjGQ.roa (hash: is+QjkNRgmAAQFm1WLdb+VI9EY3XXeS9tjv/htKBkks=) 13: wOKO5BfevHhq6oErWALub8pu8xU.roa (hash: JFoG8SyIRYLSlAyJTBoEWjYzWkPzFQdNMJLWFlUmxRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:0e:66:f7:95:f6:c2:e3:d8:c2:89:9d:d7:18:fe:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d Validity Not Before: Jun 28 15:01:03 2025 GMT Not After : Jun 29 15:01:03 2025 GMT Subject: CN=9f477102798538bd055426d52fa587e341516ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e6:55:b5:4d:0b:2d:cb:56:dd:54:ad:fb:fe: d3:6f:8c:76:2a:b3:4a:86:3a:d4:f4:22:5f:ad:f5: 8f:aa:db:31:58:37:6d:12:c4:f3:9c:46:e3:0f:ac: 85:26:c0:e9:06:53:f0:21:62:c4:15:9a:9b:f0:ab: e1:e5:2f:03:bd:b1:3f:10:ac:61:00:86:e6:c0:5f: c4:23:b4:9c:33:2e:c9:40:93:17:f6:d6:8a:fd:0a: a1:19:0a:38:3f:52:7a:fc:09:9b:5f:30:f8:38:74: 7b:d6:52:1a:47:6c:6f:75:59:e0:18:14:a5:6f:e6: dc:4a:fe:40:72:73:24:05:85:fd:c5:e2:77:87:35: 48:43:66:77:ea:aa:9e:a3:fe:47:33:25:51:f1:31: 4c:14:49:a7:5a:7e:13:a3:95:e1:02:3d:39:5e:f0: a6:48:59:d7:59:95:27:b0:0a:d1:03:3c:2f:9b:94: 22:9b:60:95:c8:5b:4a:6a:cb:8b:f5:f5:38:f7:33: c4:ad:26:58:2f:7b:4b:a9:d3:87:d4:e6:56:54:6f: 94:c5:f8:5d:c2:ac:55:61:1f:d1:8d:6c:f3:06:01: 37:fd:c1:e8:b0:40:6a:39:0c:22:6c:d7:93:fc:ac: 22:38:65:3b:e5:27:05:b1:4a:93:10:17:a1:54:1f: fd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:47:71:02:79:85:38:BD:05:54:26:D5:2F:A5:87:E3:41:51:6F:F1 X509v3 Authority Key Identifier: keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:66:1f:d7:47:49:f0:f8:12:76:27:1f:11:88:fd:e9:10:b6: 09:3d:91:87:0d:d5:2e:c9:1c:f1:27:6d:2f:f9:07:6e:4e:fb: 8e:ba:db:4f:a5:f9:f3:e2:42:9b:1f:98:96:0b:1c:8e:ab:e2: bc:bf:9d:6f:2c:88:56:63:15:cc:8c:28:8a:d8:49:0c:37:ae: 45:c6:44:c3:9c:15:e9:48:4d:25:ac:56:5b:43:28:aa:5c:7e: 9b:42:09:ab:82:40:7c:a2:57:2c:23:08:74:60:13:d1:71:04: bb:46:1c:c5:0f:84:e0:6c:b6:2a:57:0f:97:f1:0a:1c:75:00: 21:c3:18:1f:ae:57:c3:9e:19:ab:73:a7:6e:e4:6d:47:6e:6e: af:e7:be:53:c4:92:83:1e:f9:ca:a7:4f:c6:24:fb:8c:71:e6: c4:67:62:e9:55:fa:b4:fb:54:61:d7:c6:e2:25:c3:c9:b2:ad: 83:4f:4c:a3:6c:e0:6e:fb:9d:9f:bb:9e:75:12:8a:7d:2f:cb: 8c:8a:f9:e3:cc:05:1d:38:ba:79:ed:63:72:59:c1:b0:29:cf: d1:cb:c9:87:64:59:bb:76:16:d0:f8:ba:e8:ff:07:95:31:58: 3b:4f:4e:05:d6:32:d4:21:e8:af:a5:3d:f2:68:42:d3:f0:99: 3c:3f:97:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3Dmb3lfbC49jCiZ3XGP6vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGViMjA0ZjM1ODAwNDc4ODIyNGUyZmIxOGU0ZDVlNzRi ZWJmOGQwHhcNMjUwNjI4MTUwMTAzWhcNMjUwNjI5MTUwMTAzWjAzMTEwLwYDVQQD Eyg5ZjQ3NzEwMjc5ODUzOGJkMDU1NDI2ZDUyZmE1ODdlMzQxNTE2ZmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uZVtU0LLctW3VSt+/7Tb4x2KrNK hjrU9CJfrfWPqtsxWDdtEsTznEbjD6yFJsDpBlPwIWLEFZqb8Kvh5S8DvbE/EKxh AIbmwF/EI7ScMy7JQJMX9taK/QqhGQo4P1J6/AmbXzD4OHR71lIaR2xvdVngGBSl b+bcSv5AcnMkBYX9xeJ3hzVIQ2Z36qqeo/5HMyVR8TFMFEmnWn4To5XhAj05XvCm SFnXWZUnsArRAzwvm5Qim2CVyFtKasuL9fU49zPErSZYL3tLqdOH1OZWVG+Uxfhd wqxVYR/RjWzzBgE3/cHosEBqOQwibNeT/KwiOGU75ScFsUqTEBehVB/92QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9HcQJ5hTi9BVQm1S+lh+NBUW/xMB8GA1UdIwQY MBaAFPBOsgTzWABHiCJOL7GOTV50vr+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMt NWM1ODkyYWZhNDg3LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMtNWM1ODkyYWZhNDg3 LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGYf10dJ 8PgSdicfEYj96RC2CT2Rhw3VLskc8SdtL/kHbk77jrrbT6X58+JCmx+Ylgscjqvi vL+dbyyIVmMVzIwoithJDDeuRcZEw5wV6UhNJaxWW0Moqlx+m0IJq4JAfKJXLCMI dGAT0XEEu0YcxQ+E4Gy2KlcPl/EKHHUAIcMYH65Xw54Zq3OnbuRtR25ur+e+U8SS gx75yqdPxiT7jHHmxGdi6VX6tPtUYdfG4iXDybKtg09Mo2zgbvudn7uedRKKfS/L jIr548wFHTi6ee1jclnBsCnP0cvJh2RZu3YW0Pi66P8HlTFYO09OBdYy1CHor6U9 8mhC0/CZPD+X2w== -----END CERTIFICATE-----Generated at Sat Jun 28 22:54:32 2025 by rpki-client