$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft File: crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json) Hash identifier: URTnqVu4TFJ+BfTwK+E0KQ29DLf63+yJnHKMijfN7gQ= Subject key identifier: 24:FC:E4:30:E2:E8:32:9D:1C:B2:D4:B7:FE:E2:A5:91:37:45:05:27 Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 0197B7458E4E3F2E55B41CFC8F09ED2B81A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft Manifest number: 1658 Signing time: Sat 28 Jun 2025 16:01:18 +0000 Manifest this update: Sat 28 Jun 2025 16:01:18 +0000 Manifest next update: Sun 29 Jun 2025 16:01:18 +0000 Files and hashes: 1: 0OZkbbyiMfqEfV6yyCrB9dZN96k.roa (hash: yh5A+U+9EnV2n5u+gDax0tr2hQqxxV1tomwYV6gGiGM=) 2: 58pgEzEV4itxzFdqyuzKp1koy9E.roa (hash: tH6QFOaJ/p4keTuKKE46gn/xyoU7W70E/+/4aSveeLE=) 3: AGmA39KwwTaMo71xV9rDHmreSZs.roa (hash: Ryun1mCIWyFFcbzTBG9eqylu4psXL7qEbax/r+ERVGA=) 4: BL8I68n0S5EatljR0k4XZsKHA24.roa (hash: iOoLcUwIbkzuVCDzFIpNedtLQogspd3V7HdfhJiPZWg=) 5: BxtsjwaylqDgyShxS785H67TnbY.roa (hash: tVOA9jGSji8cVYr6ivVtJAHBG6QSJ270Wt89fBmSzFA=) 6: DS5gBLYyptdZ9y27hbFJurp9kuI.roa (hash: zoDKZtl19sULYhyiEZp0I4zijHRFp+OWa8jMMxoXiV0=) 7: DskJ3QKfzbRX76wY5Y62eU4erR4.roa (hash: Om0rFiAWDXCVX1P62G7M/6mKMjWs5VmA/8EV8q++G+4=) 8: Idxg_WiqnQ5z7a1AWZhBBpr3d0o.roa (hash: 7UHbsVvn5Ys5iN7EIcL0ZbXVx08urNpR/8wxUpFwdH8=) 9: InrDEGCfKU8jJed9KnH2vx-d78Y.roa (hash: NgTZkZMP5rtVotSPrvAaVc/98gXGQA3bDBX67D3E0+U=) 10: JkkRBzU6KqC4iLmQvNFLg1pZbqQ.roa (hash: qQIWTHDKXS9dJmmc6TGCroCf2SQogHaE6HLb5eCxiv8=) 11: KrudkOICJ6o23J172JFVZgrTE8Q.roa (hash: LOElKXAo1zxfoDmHY1gKUaU9NBQHXV4qqyUFnydMwws=) 12: NcVlekWCiF1MqD0pMFbt8sBm4xk.roa (hash: zMGQInzAKzEgCcQ8IjKoVLyb75jlj1C6HwQ11XN+6E8=) 13: Q-cb4AjNFoWCznmTrkTd9_2MtQ8.roa (hash: 2USY3xNUmziDvmtALMRGKfhIKkZceNSRez2thcTQVsI=) 14: Q7A84Re88TEGuWZsIYTnNdLRtqQ.roa (hash: 62XanU5j/TVPu9hICaR497zqHzXQbEaOUBFnOheHiVs=) 15: U1dZiJQ-sCfZlcybNwHIMoVg7mU.roa (hash: V0t6ji4+oFj9qeofPxTRdRG8LndbBllIM0CiNf6vz94=) 16: Vb_RpJ-2VDeLhxtyu1EnKEq8cTI.roa (hash: H3HLjc2fYtCp8h81NRRKqe5UGP2PQxcS5tkL3rkueM8=) 17: XQSdpYywXniH-4RrFE8ADb_IkFg.roa (hash: p9OQSem/8VfhwT/7ja70OsbXAHFO0qdQ0IRvRySU44M=) 18: acgWZk7QsmW2aj_bCsaJjnM5BPc.roa (hash: HUCf1r1zAbFUe3WPNLagsH4LPR/2P6TikCHZR4iIaH0=) 19: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: 4kemx9YhSPdKSmTIL316YM3j/dcrg4pLJYFcXFzT2ww=) 20: f9zO6CoqO3IdDJ2sCc8aCS7MLYo.roa (hash: 0lS/IGd/1FNWeyp8qTQLTXLYoqsEWJxdvhxxV1xrQj4=) 21: fFDNE0jBCsbuSwHbNND790VHIUs.roa (hash: b2he0HY8iZ5ebk1T/0G0aRJSFCMcs4PxhlyzHEE/x2Q=) 22: hHcyNgOmxrhkn3DhNfaigHX94g8.roa (hash: B65e/+ApHFBG2pXE/i7USQDriRyCgT5A9AG/tPBTPh8=) 23: mJ-PnuZffkBvMXhplb_lo8QtEyc.roa (hash: cnmwpchuXHms2rojiNGzRDXyf/+oMqIEDUIf1Odq2us=) 24: qpXqPI2Lm4U2S7PWScdAxzqLkns.roa (hash: Bzilqha0faSvo6uHWLbDknjpYoOKZ5PiVLmh9/Jq3LE=) 25: tVVPJt8BYRtl2dfGI34tW-1ncpU.roa (hash: eJCGFadx+OvG3OgK6PxfcX9iXCcThEI+1VCJ4h+/DrY=) 26: tc7szezkYqgXsem-emQpM9XcR9c.roa (hash: O2yXB3yzO1tbqMoeSHRvGfT3YmTyzVXNjGllWoLMqq0=) 27: ur6JY6LTt9bSdFyx_2wS6ELsIzA.roa (hash: b219K+gQY2uaL3+siADKQhZv8ifl18rx5LHYKsxXYxA=) 28: uyXQtDlM4ZwnqdZAtXrlk36c7e4.roa (hash: YXJ2U0awsdiqeieBuuyLP082uokuubFdWDICnN4d+bI=) 29: zAHjS8tPU8HEmTCCDINtaHrVJIM.roa (hash: 0QsNUBchy9W2sgLs15kxSXqG8C8jBUSbYSVE7+dh+t0=) 30: zDVyzwRVn1CT-RP9xlaFiJNPMHE.roa (hash: OeT1n7LBHt2BLA6NJKyqqdEda9ZFBBnrzNwADjp7exA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:45:8e:4e:3f:2e:55:b4:1c:fc:8f:09:ed:2b:81:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Jun 28 16:01:18 2025 GMT Not After : Jun 29 16:01:18 2025 GMT Subject: CN=24fce430e2e8329d1cb2d4b7fee2a59137450527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9f:a7:91:4f:a7:5d:af:bb:a5:34:93:13:d9: ff:61:0e:c6:ad:eb:88:04:a7:71:04:4e:81:ba:ac: 3e:2d:41:4a:86:99:0d:b3:aa:a6:88:ae:82:9c:f3: 73:f3:2d:65:43:01:db:a3:47:58:6c:16:40:e1:89: de:5d:0f:06:01:f6:3b:da:25:78:ad:21:86:03:77: ca:47:9b:3a:da:af:87:dc:09:9f:98:6c:ac:43:42: 96:e9:b3:55:9e:30:be:a7:0d:ca:ff:42:20:f6:9f: c1:9e:c3:49:05:90:f7:dd:20:9f:91:6a:98:59:12: 39:02:ca:c9:ea:0d:fc:ae:13:fd:2a:23:00:48:cc: 89:ef:04:d5:dd:f8:65:c3:19:23:7a:85:3a:28:4d: 9d:96:1d:bd:03:d3:19:51:12:6d:18:40:14:c2:e6: af:c9:eb:ac:31:1e:e8:56:d1:76:40:cd:26:15:53: e4:90:06:99:3a:3a:ec:b3:eb:c9:e0:f6:dc:33:3b: 51:76:d7:da:f0:ef:b3:03:a1:16:a1:c5:20:75:10: 50:d2:4e:91:09:03:ec:9e:04:d4:b6:aa:64:cc:6e: b4:81:8a:1e:a5:27:24:f6:c0:cb:0b:e7:72:40:c7: b2:48:1c:bc:c2:d6:22:79:62:57:35:89:ba:2d:34: 65:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:FC:E4:30:E2:E8:32:9D:1C:B2:D4:B7:FE:E2:A5:91:37:45:05:27 X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:6b:fe:6e:13:eb:e2:6c:4e:36:bd:a7:70:cd:1e:3a:fc:9b: 81:a7:c3:11:62:67:ea:db:97:cd:2b:dc:22:aa:96:77:8e:fc: 96:43:ce:82:a3:7f:01:b7:a1:e3:bf:ea:b4:0d:91:06:a4:e0: 8a:e8:f3:d7:75:f0:68:71:8d:df:27:1a:9f:24:75:22:a3:15: b8:c2:63:b1:8b:26:af:e8:e6:25:fc:7e:dd:4c:9d:d1:7f:3a: c9:36:b3:35:81:f4:46:33:6b:dc:69:69:a2:10:59:70:52:8c: b8:fd:be:9a:02:78:82:ae:3f:1e:c5:7e:36:61:78:e4:68:6c: aa:6f:2a:f0:b5:b0:3b:9c:00:9b:e4:5e:d4:9b:a2:c8:d4:40: 09:dd:1f:b1:95:ca:da:2b:cd:6f:7b:e3:ad:26:28:89:43:3f: 68:44:6e:6b:4a:32:a2:3c:bf:a7:1a:67:f2:fc:54:15:91:bd: 70:75:78:f6:eb:df:37:be:12:0e:90:fe:f1:ed:e8:79:52:ba: 50:ae:99:a4:91:8c:cf:c5:89:ef:67:7a:d9:2e:3c:e7:84:f3: 0e:b6:e2:c3:61:c4:44:33:a4:6a:a6:b2:2e:d7:1b:0a:03:63: 8e:2d:a2:5d:55:37:68:7d:36:bb:a8:a5:2a:c8:09:87:08:ad: 51:38:77:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3RY5OPy5VtBz8jwntK4GhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjUwNjI4MTYwMTE4WhcNMjUwNjI5MTYwMTE4WjAzMTEwLwYDVQQD EygyNGZjZTQzMGUyZTgzMjlkMWNiMmQ0YjdmZWUyYTU5MTM3NDUwNTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp+nkU+nXa+7pTSTE9n/YQ7GreuI BKdxBE6Buqw+LUFKhpkNs6qmiK6CnPNz8y1lQwHbo0dYbBZA4YneXQ8GAfY72iV4 rSGGA3fKR5s62q+H3AmfmGysQ0KW6bNVnjC+pw3K/0Ig9p/BnsNJBZD33SCfkWqY WRI5AsrJ6g38rhP9KiMASMyJ7wTV3fhlwxkjeoU6KE2dlh29A9MZURJtGEAUwuav yeusMR7oVtF2QM0mFVPkkAaZOjrss+vJ4PbcMztRdtfa8O+zA6EWocUgdRBQ0k6R CQPsngTUtqpkzG60gYoepSck9sDLC+dyQMeySBy8wtYieWJXNYm6LTRldQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCT85DDi6DKdHLLUt/7ipZE3RQUnMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXWv+bhPr 4mxONr2ncM0eOvybgafDEWJn6tuXzSvcIqqWd478lkPOgqN/Abeh47/qtA2RBqTg iujz13XwaHGN3ycanyR1IqMVuMJjsYsmr+jmJfx+3Uyd0X86yTazNYH0RjNr3Glp ohBZcFKMuP2+mgJ4gq4/HsV+NmF45Ghsqm8q8LWwO5wAm+Re1JuiyNRACd0fsZXK 2ivNb3vjrSYoiUM/aERua0oyojy/pxpn8vxUFZG9cHV49uvfN74SDpD+8e3oeVK6 UK6ZpJGMz8WJ72d62S4854TzDrbiw2HERDOkaqayLtcbCgNjji2iXVU3aH02u6il KsgJhwitUTh3tw== -----END CERTIFICATE-----Generated at Sat Jun 28 21:47:17 2025 by rpki-client