$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft File: mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft (raw, json) Hash identifier: Kn16ofDJDAupBvo75lIDdOApd9td39DUVtaC5iRd1bI= Subject key identifier: 0E:1C:33:21:11:07:36:20:CD:42:5A:04:06:C0:B6:62:03:95:2D:51 Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 0197B77C74C62E0DD478AC9DE0F28572DB13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft Manifest number: 1688 Signing time: Sat 28 Jun 2025 17:01:16 +0000 Manifest this update: Sat 28 Jun 2025 17:01:16 +0000 Manifest next update: Sun 29 Jun 2025 17:01:16 +0000 Files and hashes: 1: 1-W8fXv0jttdWKlzJAXVxxYtpRug.roa (hash: gpIh638+Fcd1tAei50b0+8GVpPlev9wrd/g4gdASdjg=) 2: 1UWB6DiO5XdV3re-o8rnuoqA6Ms.roa (hash: acQwekWVQZ/8nvJFITjzBnRus/D8fEtyc11Q6KELe7w=) 3: 21_l98tMuuHtah8-s1GQ4s9w80o.roa (hash: kBh4jdwY3MGZ4Pq8reV1XfNIfs+7zVu2WLUGJ+5lgvc=) 4: 4w30D5KawwaEKeLXCLppZs-985Y.roa (hash: D2Lwmoer5qGID/4i5fsaA6M5CcgJmrhikqoV9diBlTk=) 5: 584_8-MCCtntQOfvULwWZs9O7nE.roa (hash: 2qpHd4/GVV0NiG+wogJB5AQCeDp3yyLGq0zIUvBip28=) 6: Brhkd2-auvvZmCyvxy5ORhHeQ6E.roa (hash: g8WF2m4nW9TPwqD2pE0ddCjVXs1fr0m/MHPrZ/Qj2HI=) 7: CnHjgZKNSNMP8dJ_BtYZ7Xo4ZrM.roa (hash: FqQbIRpVOThM0L1uy/AMjORSqSUsS/5+snA6mZqlQAA=) 8: G5bYAs5-DWEC8k2PerkxyvzK3O8.roa (hash: 0wZ64Natb0gIUfylulMGJdNUBBW0kgaRtyK7K218h3k=) 9: IrnlAQa6M1A96HHiDasRUfVGqbQ.roa (hash: xgq5FcKSqvltS9tf8414o9TbLoeW+VIxwonV5uaPruw=) 10: LOKrZEDDVhVnSlJWlOLgQ5nPcM0.roa (hash: 2CeUB6HU9O6IboYshEwLG/p+jYhiKQ64ZtA5Y3idzrs=) 11: LbbsmkI3GqawDuN3XH6acheMxPw.roa (hash: BqWA3SYDAKLfoYVuIlyCld31iNDXkXCl/KtIv69jNUw=) 12: OOYkNDqqDn1Unj3M-yrjf_S9VlU.roa (hash: oCGvjVeC4FC9ueufaA6bhsrNhxHd2pd306IA0XGXLfs=) 13: QJvPeNzFvPANqEbfkIc8-3zDQLs.roa (hash: felyBGjLHZhYiBLtOS5vAZwi9iqRNucwfxHrWgkMpWA=) 14: TrJv_8fKTcS_JBhUlD0AOoYAAQA.roa (hash: f2kfoia7LPQzOEBZN5rSYHh6gWQLd4Eepwr2rpiJk9c=) 15: UlqMdzKNjKKz7GVAWhNQ0GeC6iE.roa (hash: vyjrNuYYOAehZPhyITO+Q5uPp2e1fJC2nVGYypgHEhg=) 16: WJhqTCUN_AjGjAYRDp33eZN0BY4.roa (hash: 06Htmns2yq5ClkGiqHYQcD9sTifSqYU3RXoOiPSPCkE=) 17: azJgsmdTDF3ELk-I19mAROWoKeE.roa (hash: oh/dgWtIFhqfW7S9fR3cOqTRk0csYkiTH2ALt2aoNhQ=) 18: eChAGDbdQGMbx-CgEa8ktTddF6A.roa (hash: WaY78nyI3A8kBY4pFd0TG8ZJI0s+NCkhF+OV6SV5Crw=) 19: gN00iWVZ4X9ImdixtPXeB88eR_k.roa (hash: DPVgneYPbYS00UaxJyd5C7zkqYJRRcPWgn4xBTn6bHk=) 20: gnHztlWIUEkbfP_VpJDgy1aZ-q8.roa (hash: 8IEq5Il4ymKT0XR1RNf3aEeBm7YPqbccSq4VWhr/cXU=) 21: mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl (hash: Fzv0dkIcYdCUfLqOxAmiNieh7CRhcR2yeD3w42IkzS0=) 22: owD2F5PTIfIuOH1ResHlD6bHqfw.roa (hash: FwwD5nwDxuakINFZYh01TzvwO9abW6HL7q42RgazHtQ=) 23: qjM14mHgk1Edy0idzb8PcMe4oBE.roa (hash: pcsI+0E79qmlWXPdLST7nM+67d24tKTfwvx2fxrvqMw=) 24: s5Ai9g5eYYL8Bgx7ZWiTovq-xxE.roa (hash: BtApyhPvW43mqLBFeRPcKdPRw6DTk5KYzme6TZtVXns=) 25: sW7iMiWbwjQZ4JTr9eqMstrH0fY.roa (hash: fl3fF4gUVsev8QdVZnLOIu5u/5rzRWGxzrZRrAPXabs=) 26: tdG4gwbiCDTl2DZU4EFrqi-57Fc.roa (hash: HXWAwqtUcnHFWl+ei5dmWCUQV5Bz5IiYmO9iAB6ydxI=) 27: w23_TR4dcsNa31LTX8HVMLWRN_w.roa (hash: rfdkH9NAgBWGbrUS8/d8Rmrz5XY4u8KepKOXwjiNknw=) 28: wWRDfWHup1u0k3UjICPfUYIPuSY.roa (hash: yzH1M2v1GGWQRBkb4bWaRfefbh3n4eH1xoy+GhWge5A=) 29: wYxMdXSUEDjU1Cv3_j8xQDvi1yg.roa (hash: WyaQu0KrdFh/xZS6g5xHvbw77OL9Wai9qSXwo4Oty1g=) 30: xeXsIqRyNQ8tCJjLiS_SWkibat0.roa (hash: JByqNQHgtIum6mQVh/2h0Z7sUMkRsbp23RZvkf78Q8U=) 31: zA8L3Jvv9SEACC4CD6D8SPMP2Sk.roa (hash: Tngvw9PMaTEzEGc2VaqgRFM8azKZIG82ga5hio7GHN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:7c:74:c6:2e:0d:d4:78:ac:9d:e0:f2:85:72:db:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Jun 28 17:01:16 2025 GMT Not After : Jun 29 17:01:16 2025 GMT Subject: CN=0e1c332111073620cd425a0406c0b66203952d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:67:5c:1d:04:de:93:40:88:94:ee:87:fe:24: cb:cd:88:ba:f2:d4:21:ad:3f:99:80:32:2c:a8:e3: 4d:ac:90:45:59:8b:65:9b:1f:75:c3:e1:e5:29:fe: b3:2f:c1:f0:41:44:ff:b1:6b:e3:ad:c4:56:63:2e: 9e:41:48:78:f6:f3:2b:66:21:bb:86:ce:26:96:d6: d1:7e:be:f1:1e:57:ce:e5:a5:82:3d:b8:10:be:97: 4f:8a:f5:72:97:7d:0b:1a:95:fa:64:74:8e:b2:d4: 8f:76:19:9b:2f:eb:24:de:8d:71:ea:2f:d5:33:e0: 6e:d4:a7:43:7c:b3:c5:ac:36:1c:d7:93:79:96:a7: 73:49:c1:3f:49:f8:6e:6d:ff:97:af:e1:c4:d4:a4: 44:fc:55:ad:f8:f4:27:b6:5b:7a:11:62:bb:61:5e: c5:5e:11:f9:ee:2b:59:e7:3c:90:07:f2:e9:75:78: db:fd:f5:be:0d:ed:c9:f7:78:b0:9a:69:37:66:f7: 2f:fa:c1:c4:53:d5:29:4d:51:cc:77:16:0b:f0:bf: 77:6c:40:b7:18:df:52:c5:a7:fd:f6:c5:b0:ee:1d: 3b:98:ff:ab:d0:2b:dc:24:11:92:d9:6f:74:7b:6f: ff:b6:72:8c:b2:83:e8:d2:c3:f2:86:18:af:80:0d: 3d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1C:33:21:11:07:36:20:CD:42:5A:04:06:C0:B6:62:03:95:2D:51 X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:df:dd:c1:eb:5c:a4:66:5f:2f:62:0e:09:6e:8e:a9:15:3d: ed:35:db:57:40:ac:2f:f6:f9:c1:f9:b7:38:26:ac:10:3e:49: 83:d6:a0:1d:7f:c3:2f:44:e1:8a:aa:f8:c9:b3:3a:55:48:1b: 9c:12:7a:f9:ad:48:f1:ae:01:8c:f9:9c:aa:0a:59:ab:a9:3b: fb:08:58:f8:76:7b:b1:e3:b3:09:e5:a6:e2:04:f2:93:70:86: d0:db:78:b9:ed:bb:62:8d:0e:b9:a8:a2:7c:32:e0:91:b7:19: 63:b7:ed:2f:8b:0b:ad:bf:14:8a:f3:99:5b:75:a5:83:22:2e: 93:2d:6a:25:32:ea:67:60:d9:a1:25:61:59:63:15:4f:45:1f: 00:e2:cf:96:7c:c9:54:7a:25:e1:ce:a0:51:a6:fc:16:f7:46: d1:5f:d1:60:eb:40:23:cc:f9:15:43:f1:3c:8b:f0:96:02:2a: e1:43:de:82:7c:f6:e0:97:c2:9a:9a:8d:ab:4b:90:c0:b1:5f: d4:b3:cc:80:a6:05:e6:d3:98:a8:7b:9e:fd:4a:1c:e3:d3:46: 1b:0d:a6:ff:a3:2d:2e:94:29:ba:c6:f3:47:9d:5f:db:1e:66: e5:55:6d:a7:a5:5e:70:69:6e:de:9f:8f:5d:90:19:5a:83:ae: 2b:8e:ed:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3fHTGLg3UeKyd4PKFctsTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjUwNjI4MTcwMTE2WhcNMjUwNjI5MTcwMTE2WjAzMTEwLwYDVQQD EygwZTFjMzMyMTExMDczNjIwY2Q0MjVhMDQwNmMwYjY2MjAzOTUyZDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mdcHQTek0CIlO6H/iTLzYi68tQh rT+ZgDIsqONNrJBFWYtlmx91w+HlKf6zL8HwQUT/sWvjrcRWYy6eQUh49vMrZiG7 hs4mltbRfr7xHlfO5aWCPbgQvpdPivVyl30LGpX6ZHSOstSPdhmbL+sk3o1x6i/V M+Bu1KdDfLPFrDYc15N5lqdzScE/Sfhubf+Xr+HE1KRE/FWt+PQntlt6EWK7YV7F XhH57itZ5zyQB/LpdXjb/fW+De3J93iwmmk3Zvcv+sHEU9UpTVHMdxYL8L93bEC3 GN9Sxaf99sWw7h07mP+r0CvcJBGS2W90e2//tnKMsoPo0sPyhhivgA09XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4cMyERBzYgzUJaBAbAtmIDlS1RMB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfN/dwetc pGZfL2IOCW6OqRU97TXbV0CsL/b5wfm3OCasED5Jg9agHX/DL0Thiqr4ybM6VUgb nBJ6+a1I8a4BjPmcqgpZq6k7+whY+HZ7seOzCeWm4gTyk3CG0Nt4ue27Yo0Ouaii fDLgkbcZY7ftL4sLrb8UivOZW3WlgyIuky1qJTLqZ2DZoSVhWWMVT0UfAOLPlnzJ VHol4c6gUab8FvdG0V/RYOtAI8z5FUPxPIvwlgIq4UPegnz24JfCmpqNq0uQwLFf 1LPMgKYF5tOYqHue/Uoc49NGGw2m/6MtLpQpusbzR51f2x5m5VVtp6VecGlu3p+P XZAZWoOuK47tLQ== -----END CERTIFICATE-----Generated at Sat Jun 28 22:17:55 2025 by rpki-client