$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft File: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft (raw, json) Hash identifier: NdJ5JdeZ12XEb/AMaCw9Wcc+LjpXCbGeiN4lNdhVW9U= Subject key identifier: 7A:55:B2:68:EA:C8:19:2E:4A:F0:B8:1C:B3:FA:1F:A5:F5:9F:8C:81 Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 0197B632C27AE2974AB0FB2387353D3A197D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft Manifest number: 15B9 Signing time: Sat 28 Jun 2025 11:01:09 +0000 Manifest this update: Sat 28 Jun 2025 11:01:09 +0000 Manifest next update: Sun 29 Jun 2025 11:01:09 +0000 Files and hashes: 1: 00x2a7vYcUP_RgzqZlJDShLq9Do.roa (hash: cq08qt5t6pt7+g4zB6xtHZuctjeJqy9pw/L/lk8TYFo=) 2: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl (hash: dLDW+lqhGWH69mvW1CdVlYnQBPp/TpRAIWvvKmBz58U=) 3: KVMzJG-tiBiXKGfDbX7s-fqSUcs.roa (hash: izdiO/l04uY0Tl9GP7xbaa4HsWMYkrOgbs0SiG0a1K8=) 4: OBC2jp5FIHT7G9c2m1xsJUD2ivs.roa (hash: DrwuyysosoB70lBjSllnHo3rVU0U0NusilzO8tRi9Q0=) 5: OxF-ngX6YGUArZrbAYmh9hpGzkU.roa (hash: zhEaR7GNPbf+2lOaH8uFUPJFKzbpuLS5x4CvU7dkxPs=) 6: Q2Pg2GNHELVKyFoNgxOuT8YFvLY.roa (hash: DsyRU7FSw+3XDKbBM9HrtgkzYSVPnqWwqknbD6CWVSU=) 7: RO-InVXPYoHaB1ZpM-19yr94dQs.roa (hash: 8Y6VcUcgO4alufdIJ4djN2KAnB4AyYetp1VZzDDuyNk=) 8: TbcAJ-7kgZbLEMeBArn-aI2s0Oc.roa (hash: ebCgIhbDpPxtlRtDjitUarjC0W1nxe0ujpocy11Koxs=) 9: _gM5SG_4QQqKocZtcQPCR80SAmI.roa (hash: ee8TJS3VrEj5YXrt15hISXpN3dVXM3P5ROyjlVEMHSs=) 10: fG6If6WZh4pXAVRu1gEQ7wbPbEs.roa (hash: OIBSpF8oXZotrR8RVX6KacBPnJZCoNiFLIZ7aWyayQU=) 11: gfQeyx6Q7sjS4Xpny9IUQ8tQxLY.roa (hash: zrq/geD7ajZHxMLm7OvFbnGGXeIS14GfMNfAscurlR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:32:c2:7a:e2:97:4a:b0:fb:23:87:35:3d:3a:19:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Jun 28 11:01:09 2025 GMT Not After : Jun 29 11:01:09 2025 GMT Subject: CN=7a55b268eac8192e4af0b81cb3fa1fa5f59f8c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ca:53:ed:fb:9c:30:34:1a:03:ff:42:24:54: ff:54:5b:15:a5:d9:cc:7e:b4:1e:dc:4c:23:ce:8e: 6d:66:19:9c:24:1e:e0:69:f3:7e:26:df:2e:12:11: bd:0f:3b:2d:22:a2:85:1d:05:f3:c8:40:e4:84:8e: f1:7a:df:5a:f4:5e:38:a0:60:7e:d7:ea:5b:4c:97: 91:3a:89:1f:bf:0e:b2:49:19:21:74:1d:5a:e4:40: cc:95:e5:ea:7a:5b:1e:d4:79:fc:5a:60:9d:2d:30: 22:dc:55:16:a3:f2:2d:92:13:7a:30:78:7f:d1:6b: 82:ed:08:5e:d1:7b:39:64:4c:37:03:4c:03:33:b3: 31:e7:99:73:ae:1e:d4:fe:77:83:54:2f:e7:da:ee: 27:63:ee:a0:85:d7:0e:52:fd:0f:49:a7:1d:c9:89: b7:14:c7:e0:97:ca:48:67:4f:07:b6:19:4c:0f:02: 6f:44:b9:0a:23:0d:d7:0c:ef:79:80:fa:59:ca:f7: 26:e7:fb:21:d4:62:1b:63:de:c0:32:22:b4:94:6a: 32:06:38:c2:fc:e2:8c:d5:8b:7b:f0:43:4f:5e:75: af:7a:4e:4c:30:3e:07:d8:ba:da:4d:29:68:ad:e6: d9:e6:b4:9b:c6:8a:86:fe:b2:b4:33:f7:a6:8f:e9: a8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:55:B2:68:EA:C8:19:2E:4A:F0:B8:1C:B3:FA:1F:A5:F5:9F:8C:81 X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:82:57:15:fd:8e:0c:09:09:50:7e:50:96:63:e4:9d:bb:14: b4:b5:ec:68:54:53:d6:4e:e4:b3:d2:65:0a:b0:d8:1b:b2:9a: b5:1c:b1:3f:5e:2f:52:10:eb:33:4d:26:52:f0:0c:4e:93:c4: 96:82:b0:87:23:20:db:0c:70:43:e0:bc:9b:79:da:2d:d8:db: 69:6b:98:f6:45:64:41:92:31:da:13:19:ec:f5:16:a4:87:38: 2d:9e:c3:cc:a4:9b:06:65:5c:7a:3d:74:98:61:04:9b:30:01: c7:1f:f5:50:6d:12:a5:fa:fe:4b:17:63:13:99:41:9e:7c:b6: d4:ea:d2:24:da:51:bc:cc:59:3a:40:f3:33:5a:8b:5c:27:23: 79:a4:9d:19:08:07:32:2d:23:1c:fb:c8:ca:b9:db:c9:64:02: 53:99:cb:cb:ab:f0:9a:c4:70:e6:63:78:97:f4:12:c7:70:26: 85:37:2b:95:e1:26:c4:9c:45:68:63:2a:df:74:ad:f3:64:85: 4f:83:31:6b:f2:d3:4f:06:6d:0c:38:a9:68:12:eb:29:96:10: ae:d3:58:5b:e1:96:dd:84:d4:80:d3:82:a9:34:0e:9c:98:1e: 81:f8:d9:d8:b3:ef:d8:1c:39:db:e5:11:75:a4:98:d4:ce:ac: a7:68:99:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2MsJ64pdKsPsjhzU9Ohl9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjUwNjI4MTEwMTA5WhcNMjUwNjI5MTEwMTA5WjAzMTEwLwYDVQQD Eyg3YTU1YjI2OGVhYzgxOTJlNGFmMGI4MWNiM2ZhMWZhNWY1OWY4YzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvspT7fucMDQaA/9CJFT/VFsVpdnM frQe3Ewjzo5tZhmcJB7gafN+Jt8uEhG9DzstIqKFHQXzyEDkhI7xet9a9F44oGB+ 1+pbTJeROokfvw6ySRkhdB1a5EDMleXqelse1Hn8WmCdLTAi3FUWo/ItkhN6MHh/ 0WuC7Qhe0Xs5ZEw3A0wDM7Mx55lzrh7U/neDVC/n2u4nY+6ghdcOUv0PSacdyYm3 FMfgl8pIZ08HthlMDwJvRLkKIw3XDO95gPpZyvcm5/sh1GIbY97AMiK0lGoyBjjC /OKM1Yt78ENPXnWvek5MMD4H2LraTSlorebZ5rSbxoqG/rK0M/emj+mohwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpVsmjqyBkuSvC4HLP6H6X1n4yBMB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXoJXFf2O DAkJUH5QlmPknbsUtLXsaFRT1k7ks9JlCrDYG7KatRyxP14vUhDrM00mUvAMTpPE loKwhyMg2wxwQ+C8m3naLdjbaWuY9kVkQZIx2hMZ7PUWpIc4LZ7DzKSbBmVcej10 mGEEmzABxx/1UG0Spfr+SxdjE5lBnny21OrSJNpRvMxZOkDzM1qLXCcjeaSdGQgH Mi0jHPvIyrnbyWQCU5nLy6vwmsRw5mN4l/QSx3AmhTcrleEmxJxFaGMq33St82SF T4Mxa/LTTwZtDDipaBLrKZYQrtNYW+GW3YTUgNOCqTQOnJgegfjZ2LPv2Bw52+UR daSY1M6sp2iZZQ== -----END CERTIFICATE-----Generated at Sat Jun 28 19:19:22 2025 by rpki-client