$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft File: 3_JHJt8-d_b0yOBDZhOzURDurzg.mft (raw, json) Hash identifier: LsAH4qGJwqbxb+HQqRYJl6wLAqLh8LCA6Q4X2CtmV/8= Subject key identifier: 82:11:F9:68:A1:36:FB:ED:66:16:61:BC:05:85:5B:58:47:52:43:79 Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Certificate serial: 0197B6A25254684AD65D7C344118AE13EEE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft Manifest number: 11AA Signing time: Sat 28 Jun 2025 13:03:00 +0000 Manifest this update: Sat 28 Jun 2025 13:03:00 +0000 Manifest next update: Sun 29 Jun 2025 13:03:00 +0000 Files and hashes: 1: 3_HM3LXI2dI7yCUkbwsS0LVmtPQ.roa (hash: dlvoBhBeGam9xbjGOiUpXKoso+XH3qNTVfnBCvdbd3Q=) 2: 3_JHJt8-d_b0yOBDZhOzURDurzg.crl (hash: 4irW12EbvBFvaRBLc7tjszvssSL4WxVcwEWn1Z9Cpu4=) 3: E_7EA8UJkxlGETtzRt_qHmFJYsI.roa (hash: 407g7UlI6CqSY6AOA+kHrysQofaOwh0+lRwTxsDvEPM=) 4: EgzHUocwnSDaTR0mcH1N2AahbPA.roa (hash: qnns/hwFAonNH2cGnXK7MoaWY9Y+ZF5REF6qTFex00M=) 5: EqWJbW00yHom-8ojBy6QYR1H3FM.roa (hash: jchk7todvo3pxE5MJlQ/7M5jHRN15mY+WmGn6RIiL74=) 6: LBBRl1_5PTCAndMsefaH2qIgsWI.roa (hash: P4yu/hSYw0dip59FJgO1wKqB51hJxMddEa7BdAJON18=) 7: SFJQLYtyuvLa-Z-_p6GETmClzzQ.roa (hash: TpY/D4v+35T3Gg8FMD0C6YxKf8fx/yuDpF1EWp6QNws=) 8: SW2UHW6XXrCRSFkNV0CVmfSilT8.roa (hash: OU29d/hqTbWW7Cob/3TqpwPxH+8rWvDwLVXV+Khg58o=) 9: gLpL93_717seB53wtn-PIYRSJpQ.roa (hash: BEBryS8Pk5M96RkjmV9ApUKiEfxXTgBuMMQoR0rPtvE=) 10: sl5VJ3i7CbF6mq-XTH5pxWMmK5o.roa (hash: 4bfJxuYHYnVskQrhNVV+ZwN1afVTdgzyH0yWLAaqMRM=) 11: ve4kS1FSpKOZDfPOmvEJot6T9gc.roa (hash: /8G7vYP5BGzfa/caGIr/zNwzv8N1oQfYQzWhKIYfL+g=) 12: yiW-kmeX6T3jx-yL7EZZYoVvwps.roa (hash: QstF1sZuORe/6EM2aW5TGBrHuj8rjUHPJQAAamVQG0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 13:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:a2:52:54:68:4a:d6:5d:7c:34:41:18:ae:13:ee:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Validity Not Before: Jun 28 13:03:00 2025 GMT Not After : Jun 29 13:03:00 2025 GMT Subject: CN=8211f968a136fbed661661bc05855b5847524379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ca:9e:90:c4:b5:5d:03:bd:5f:ff:fc:44:8a: a5:69:0d:c7:49:14:bd:0c:86:56:90:ec:2f:df:be: 43:e2:f1:f6:a0:95:b5:87:8d:97:d7:c7:23:ff:22: a7:a9:8b:cf:f9:18:1e:bc:7d:34:ba:80:69:22:0e: 66:0e:4b:11:da:e0:4c:66:37:24:d9:1d:17:4f:57: d2:b3:9d:72:a7:e9:f6:e8:5b:59:aa:10:39:e1:6e: 39:2d:36:ae:3b:66:f8:9d:7d:b0:6b:ad:f0:4f:94: 43:63:b9:d5:cf:99:6e:09:87:a0:fe:bb:f1:1d:15: 6e:1a:08:7d:ec:7a:96:42:65:ea:e3:19:5a:3e:3d: 8d:5a:79:35:0b:30:f4:96:2c:67:3f:92:0f:48:47: d0:32:34:0a:15:7e:06:9c:bc:23:0d:ad:8b:05:94: ca:21:f9:3b:89:22:c1:11:af:6d:81:c9:f4:fd:0b: 92:91:87:15:e0:3e:b2:a4:01:79:91:7d:c3:97:78: b2:bc:ad:50:8b:9a:e2:aa:3e:29:c7:e0:ff:33:11: b5:36:1b:e1:ec:4e:b9:e6:a8:ad:0e:bb:d5:ab:f6: 14:af:f9:e2:00:e2:45:74:57:72:37:35:aa:93:70: ce:3f:3a:8c:25:85:16:41:0e:ae:b0:6e:d2:72:c5: 68:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:11:F9:68:A1:36:FB:ED:66:16:61:BC:05:85:5B:58:47:52:43:79 X509v3 Authority Key Identifier: keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:04:79:5a:4f:40:65:fe:f3:e3:d7:78:d4:ce:c8:9b:4f:8d: f6:f6:93:c2:bc:9a:73:7a:db:7a:22:15:7c:aa:13:8f:fe:5a: 4f:32:9e:a8:68:4a:dd:b6:36:d2:ab:75:8b:ac:1d:82:b6:c6: e2:47:9c:aa:11:64:38:78:9f:21:60:88:36:05:35:f1:52:2d: d1:71:f1:8b:51:99:6d:e8:81:29:d3:16:9e:79:6b:65:cb:9c: 0f:3c:31:41:4d:e2:15:a4:b1:0c:37:9f:55:9f:f0:54:a3:0d: a5:b9:48:25:1d:a3:8f:2f:8a:08:c7:66:f4:d5:7a:ba:17:90: 5c:f4:ef:99:f2:60:62:2c:a0:6a:71:66:02:37:1d:a7:6e:d2: 23:f6:c2:fe:72:1e:a4:00:7a:bd:8f:b1:26:ef:a1:4e:2b:34: 66:1e:2f:ad:ec:69:70:24:0f:d3:00:d1:2b:83:69:22:b1:e0: ec:5d:cd:e4:e8:72:cc:4c:df:09:46:fb:c1:0f:b4:be:ed:60: 73:9b:cf:96:27:98:af:b5:12:07:8b:66:ff:39:ca:1b:d1:2b: 58:0c:52:f8:90:29:d9:fc:32:29:25:5d:9d:5c:f9:d8:56:bc: 79:3b:b4:83:54:ab:72:39:a9:0e:6e:cb:71:c3:c1:70:1e:d6: 3c:fb:38:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2olJUaErWXXw0QRiuE+7pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl ZWFmMzgwHhcNMjUwNjI4MTMwMzAwWhcNMjUwNjI5MTMwMzAwWjAzMTEwLwYDVQQD Eyg4MjExZjk2OGExMzZmYmVkNjYxNjYxYmMwNTg1NWI1ODQ3NTI0Mzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcqekMS1XQO9X//8RIqlaQ3HSRS9 DIZWkOwv375D4vH2oJW1h42X18cj/yKnqYvP+RgevH00uoBpIg5mDksR2uBMZjck 2R0XT1fSs51yp+n26FtZqhA54W45LTauO2b4nX2wa63wT5RDY7nVz5luCYeg/rvx HRVuGgh97HqWQmXq4xlaPj2NWnk1CzD0lixnP5IPSEfQMjQKFX4GnLwjDa2LBZTK Ifk7iSLBEa9tgcn0/QuSkYcV4D6ypAF5kX3Dl3iyvK1Qi5riqj4px+D/MxG1Nhvh 7E655qitDrvVq/YUr/niAOJFdFdyNzWqk3DOPzqMJYUWQQ6usG7ScsVolQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIIR+WihNvvtZhZhvAWFW1hHUkN5MB8GA1UdIwQY MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct NjJiYjZkNjNlNTlkLzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlwR5Wk9A Zf7z49d41M7Im0+N9vaTwryac3rbeiIVfKoTj/5aTzKeqGhK3bY20qt1i6wdgrbG 4kecqhFkOHifIWCINgU18VIt0XHxi1GZbeiBKdMWnnlrZcucDzwxQU3iFaSxDDef VZ/wVKMNpblIJR2jjy+KCMdm9NV6uheQXPTvmfJgYiyganFmAjcdp27SI/bC/nIe pAB6vY+xJu+hTis0Zh4vrexpcCQP0wDRK4NpIrHg7F3N5OhyzEzfCUb7wQ+0vu1g c5vPlieYr7USB4tm/znKG9ErWAxS+JAp2fwyKSVdnVz52Fa8eTu0g1SrcjmpDm7L ccPBcB7WPPs4tA== -----END CERTIFICATE-----Generated at Sat Jun 28 20:18:17 2025 by rpki-client