$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft File: rr85Ti8bJRyI2YiocWEIRYB4bvU.mft (raw, json) Hash identifier: tdZ4P6DLZYq4RdHs+BpqmLmYROEjl51UWsxD8sM3L5U= Subject key identifier: 10:91:64:C2:A5:35:2F:32:A1:44:6D:A6:20:69:3A:A1:78:AF:62:4E Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5 Certificate serial: 0197B70ED4ACFEF7E3EB0B7830B5389AE266 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft Manifest number: 15CA Signing time: Sat 28 Jun 2025 15:01:31 +0000 Manifest this update: Sat 28 Jun 2025 15:01:31 +0000 Manifest next update: Sun 29 Jun 2025 15:01:31 +0000 Files and hashes: 1: 1-_mCNfP9_HNiBcEsvWHOFnGkC9I.roa (hash: JsQNy89vRBMXhfgHBZLMyPK1KVQmDn747eH7PkqTbv4=) 2: 499vYtwuw8upiAA2ubHtry-MPMw.roa (hash: Z3mdQWlNWDCy7MpQvjVwxOFHXRgVUsKCd9CYyZydkdQ=) 3: BV9MkYw-noIEhqphKumJe_rAYPw.roa (hash: cTycQR7uMvIZ+ka9U/Z707XPur1pq5RdGRaj9s/WBEk=) 4: BqTGXwEy0NGO0YDBi2enWJEpe9k.roa (hash: NYaAEL0V4uNdZmz3A2gD5aCaRjRzazsS2Zn8GlYp1k0=) 5: C9bq6HqiO8wvPt8Ohvw7Ya0CzfI.roa (hash: eBedAMyLvvyEc8yS2VDwWUUS44f1pIhLP9yn06vWvAA=) 6: L3ZGNHnhgVbtJA6v9_KfCLPdQu4.roa (hash: tRfv/CcITA5fhGSfuor8bEI1B/6QYSwrTAH88Vxz5+8=) 7: c_qSQSef9yQq7ko-zsOrz05POQI.roa (hash: FNYiHqlJ6193udyi9UzOaM0voKaXuvqgwAhp2rGz6i4=) 8: imE36QLRTMX_BQ-hGxHCq-HzUSs.roa (hash: 9oBmGg8MmifOi5UePbS9lDJePGL5vAfP7BimBla3w98=) 9: lmrSRQ5ihg55QvYqat1AjaV_GvQ.roa (hash: hnfw4d4vCZD3abd8/WtjTv2gdPGfcl5xx0Mpy2oIhPc=) 10: rr85Ti8bJRyI2YiocWEIRYB4bvU.crl (hash: cGdBGBUCs/K7t4id9qU80UmS3Gk+as+8A4DBy/wc1f8=) 11: uFaCHWPgxrsotozK3-PvWIlEI14.roa (hash: E71w1Kj/9g7CI68LBGPMUUdmv1Dhxwi441Gs522xPmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:0e:d4:ac:fe:f7:e3:eb:0b:78:30:b5:38:9a:e2:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5 Validity Not Before: Jun 28 15:01:31 2025 GMT Not After : Jun 29 15:01:31 2025 GMT Subject: CN=109164c2a5352f32a1446da620693aa178af624e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b8:b6:c8:9d:d7:a0:ca:b8:77:51:a9:76:81: 21:ba:95:01:1c:87:df:61:31:06:58:ad:e0:c2:47: f6:84:0f:eb:51:21:90:f9:7e:21:7d:b4:b9:c2:79: a6:08:03:9c:16:07:56:b4:b0:3e:d0:f6:a3:7f:2e: b1:aa:f8:2a:35:5d:0a:5a:0e:f6:20:c9:f3:e1:cc: e5:cd:da:b9:5b:6c:a6:e7:f4:cb:5a:c6:6d:43:5f: 87:bd:0c:b1:98:58:95:cc:f3:67:88:6b:e5:fc:f6: 53:3a:a6:ca:c9:0f:c7:f4:ba:9f:92:18:b6:ba:a2: b0:18:eb:f5:61:dd:91:c9:a9:27:fd:76:ed:22:a4: ab:06:3e:13:ad:6a:37:62:56:f0:01:06:a0:09:aa: 88:8c:a7:45:e7:0c:fd:f4:c1:13:43:f8:4b:91:87: 6c:6a:4e:ae:39:1f:c6:91:49:d0:43:f8:26:18:05: 13:28:06:86:bd:f8:7a:fc:75:40:c5:77:99:ef:6c: 23:e2:4a:58:d8:28:87:f7:74:35:69:4b:de:b2:db: 64:7c:c7:8e:dd:e4:22:3b:5c:99:96:72:ee:66:60: 7b:73:79:05:42:00:44:81:7f:d4:34:d8:a5:90:c9: 73:d1:c6:9f:24:e2:f6:e1:86:c3:3a:c0:28:b3:77: 91:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:91:64:C2:A5:35:2F:32:A1:44:6D:A6:20:69:3A:A1:78:AF:62:4E X509v3 Authority Key Identifier: keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:2e:a3:9e:9c:87:d7:88:05:a2:22:4d:dc:54:a1:11:d1:b7: 55:b1:4d:8a:6a:9c:ac:30:5c:07:23:db:25:f3:4a:af:47:d5: d5:7b:6a:0b:c4:91:75:d2:bc:97:ab:c5:d2:2f:dc:65:71:45: 32:5a:ee:62:fc:5d:89:05:44:ad:68:f2:92:99:49:c7:2f:33: 09:55:20:b8:fe:2c:46:d5:aa:3e:a5:38:4c:a5:82:43:63:19: 64:36:1d:12:da:44:19:ab:d3:25:e8:c0:06:d3:55:01:09:96: 7e:57:2e:0b:12:66:d3:79:5d:42:6a:ad:c4:ba:22:3b:55:0e: 31:52:cb:26:7d:69:f9:ea:8c:4c:b1:9a:cc:57:ca:f7:97:2b: f1:c7:ff:70:9e:0c:e3:0b:be:52:a6:8c:48:53:ee:16:bb:5a: 19:7f:61:01:6e:79:7d:05:e3:59:cd:10:48:31:7e:a6:bf:3d: 33:6f:c6:5e:dd:ef:d2:8d:68:b0:b7:f0:67:9e:4e:cb:03:47: 95:31:7c:31:f0:ce:99:87:03:e8:e9:a4:84:54:ee:e4:0d:87: ad:1d:06:77:61:49:57:32:ac:c6:f3:1c:1c:5b:e0:3c:28:d4: 7b:7b:98:63:73:2c:10:7b:05:b5:04:da:8e:e7:bc:2f:6a:ad: 8e:cd:08:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3DtSs/vfj6wt4MLU4muJmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmYzOTRlMmYxYjI1MWM4OGQ5ODhhODcxNjEwODQ1ODA3 ODZlZjUwHhcNMjUwNjI4MTUwMTMxWhcNMjUwNjI5MTUwMTMxWjAzMTEwLwYDVQQD EygxMDkxNjRjMmE1MzUyZjMyYTE0NDZkYTYyMDY5M2FhMTc4YWY2MjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArri2yJ3XoMq4d1GpdoEhupUBHIff YTEGWK3gwkf2hA/rUSGQ+X4hfbS5wnmmCAOcFgdWtLA+0Pajfy6xqvgqNV0KWg72 IMnz4czlzdq5W2ym5/TLWsZtQ1+HvQyxmFiVzPNniGvl/PZTOqbKyQ/H9Lqfkhi2 uqKwGOv1Yd2Ryakn/XbtIqSrBj4TrWo3YlbwAQagCaqIjKdF5wz99METQ/hLkYds ak6uOR/GkUnQQ/gmGAUTKAaGvfh6/HVAxXeZ72wj4kpY2CiH93Q1aUvesttkfMeO 3eQiO1yZlnLuZmB7c3kFQgBEgX/UNNilkMlz0cafJOL24YbDOsAos3eRFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCRZMKlNS8yoURtpiBpOqF4r2JOMB8GA1UdIwQY MBaAFK6/OU4vGyUciNmIqHFhCEWAeG71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2It NjFlN2Y0MGQ1ZGQ2LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2ItNjFlN2Y0MGQ1ZGQ2 LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfy6jnpyH 14gFoiJN3FShEdG3VbFNimqcrDBcByPbJfNKr0fV1XtqC8SRddK8l6vF0i/cZXFF MlruYvxdiQVErWjykplJxy8zCVUguP4sRtWqPqU4TKWCQ2MZZDYdEtpEGavTJejA BtNVAQmWflcuCxJm03ldQmqtxLoiO1UOMVLLJn1p+eqMTLGazFfK95cr8cf/cJ4M 4wu+UqaMSFPuFrtaGX9hAW55fQXjWc0QSDF+pr89M2/GXt3v0o1osLfwZ55OywNH lTF8MfDOmYcD6OmkhFTu5A2HrR0Gd2FJVzKsxvMcHFvgPCjUe3uYY3MsEHsFtQTa jue8L2qtjs0IrQ== -----END CERTIFICATE-----Generated at Sat Jun 28 22:02:02 2025 by rpki-client