$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft File: 5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft (raw, json) Hash identifier: oSEuHt1CeP7ERHw5N62ZECHuBRUBd6XgvoI6++p0wmE= Subject key identifier: BF:86:7E:C6:33:09:14:D0:46:DF:D4:1D:9E:9D:BB:AE:E3:09:27:84 Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e Certificate serial: 0197B933C93846F50B3A78B1E9C62DF3BC4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft Manifest number: 15C3 Signing time: Sun 29 Jun 2025 01:01:08 +0000 Manifest this update: Sun 29 Jun 2025 01:01:08 +0000 Manifest next update: Mon 30 Jun 2025 01:01:08 +0000 Files and hashes: 1: 53Sw43oc54bFdYl3J8aYgPuTq1A.roa (hash: F/vDAf5IclENw5iT+CZVjqI+jpZyrwkuo7GV9LGXD0M=) 2: 5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl (hash: 1nhOUIeXMMaEh1gKfXxEVqcjFxmko+zVYBMl/DkDHiI=) 3: 8bzVTIvU7VLto519WM6kmb1aC88.roa (hash: RKtsKte4GFMP8uvXTysNKUtwWTqGBn/sT3xSLBAL7kc=) 4: 9Xnf0_RPB7rW94Ti4f7tLJoLt5Y.roa (hash: 6HzGHL3rDmh0KnGoCjxpw3uQutKsEpK/x9u0157VNyI=) 5: KDN_6FFPENk8-bDnIrfpP21-8VE.roa (hash: RLkioT2IjSMiI+bndKsLWNSNLlPwCFxgUoWcDB4O4GA=) 6: L9WBYojbvLbnk987LNP8zQZEzQg.roa (hash: 2vRXimXnDZGXHdopycsq1UqK3u4zkQKmcrWliNbOkFI=) 7: WOy4XXuLEMlJp9KBWwhDiF407tA.roa (hash: 6fZWXR6YTfGld6EIK4/PHGRBk1q4g1SRUcUmJfhoCkw=) 8: ZpjDQL4nsFw5QzvH0G3r2a1GNlk.roa (hash: CAm7uW2+Hk0sF/LHF5dzV4+B9Tz215MhOa+XlD6Ei5U=) 9: _-8ya1uGdNGiht7Yn5oHbq29tkc.roa (hash: HJnr22vqmqJofZlvbL2aClJAV7UWIehW5NjhEYtzTto=) 10: _KM3VWtbdBYw-7ONqWep42LzJbM.roa (hash: e0kdHEeKs2calKvQRylwRCnRtRK5mFt57DwvVj7HLtU=) 11: cVKkCDaARUtvYDXoV4X9N2Ey2ZE.roa (hash: QIVK0slO8PFSnaXnlK3EvRckSMInnvVoSayFBWoxzeo=) 12: qepQI1x3-VZdN4tY2IgS2Qt0QxA.roa (hash: bg52ywo15jKHz/Ym+vNWwgmJcwLyfvK3SRvTyb5JixQ=) 13: uo3I45HXu40pb8JAg4x-iMt72NU.roa (hash: DCwRNzAYt7btk9pb3J4DQg/DLUtwWKO6Tv+fQC/dgO4=) 14: wf1azGdbs6KejpsvGDcmKSTTHpQ.roa (hash: q5SxtkKD9yNoBx9Nh1XxgTUv7m8d3XBZq8krtOYc6Wk=) 15: xLOovb_V_553mPyCa2MPaJ6AL4o.roa (hash: N6NgzmGF9X7Oq9bKLoPjt2ok22T8qTteZuv/qrOneTE=) 16: yQ-AQ94E1D9Tv3q18wm7Fve1ObI.roa (hash: H8VQOZeeUDRGGEzlonPzEMZCTDLV4o0msTIPImbqpx8=) 17: zmQcXGUtGhS1_tiNEBK-z0ub5Is.roa (hash: w9Y2nBHc4Olve6gCgm/MbgZTbOJSTsJeyEW3ubYEBD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 19:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b9:33:c9:38:46:f5:0b:3a:78:b1:e9:c6:2d:f3:bc:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e Validity Not Before: Jun 29 01:01:08 2025 GMT Not After : Jun 30 01:01:08 2025 GMT Subject: CN=bf867ec6330914d046dfd41d9e9dbbaee3092784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:24:50:a7:d9:22:4e:ef:66:7d:ff:f9:4a:ae: 57:cd:54:54:ec:5b:18:29:ee:17:76:ab:91:91:2e: 0e:07:6b:db:d8:72:26:36:30:b7:d2:e3:2c:ed:5a: a3:1a:ea:f6:e8:a6:94:ab:a7:51:30:c9:92:81:24: df:3c:ff:4a:23:78:23:69:b6:55:02:33:0d:e8:21: fe:18:0b:2f:af:db:6e:e4:0e:f2:8e:85:0d:5d:ef: 6b:18:59:02:b6:4a:37:22:26:65:55:5d:fd:19:36: a2:35:6e:30:59:a2:af:e4:3b:82:fc:13:87:df:29: 31:c0:87:17:9f:f6:97:93:b1:5e:92:4b:02:a7:d9: 49:d9:0c:bb:20:4c:fa:53:f7:0d:7a:d4:98:e7:da: 19:7d:7e:4a:d8:49:69:79:5d:e3:da:b9:be:4d:0d: 49:4a:99:de:ed:05:76:c4:c6:d2:65:c6:d8:aa:6c: 24:a2:39:7d:79:e7:e0:f0:58:f1:0c:66:4b:32:56: 04:f4:b5:7c:2a:9c:ad:e0:15:bf:a6:89:61:db:22: 32:d3:69:27:26:3f:e0:80:4d:54:38:c2:07:90:07: 2b:53:a8:15:3e:e2:d4:b4:db:93:8c:4a:87:b6:df: 38:f9:81:95:c3:12:e0:de:b9:1b:3f:5f:81:a3:1b: 40:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:86:7E:C6:33:09:14:D0:46:DF:D4:1D:9E:9D:BB:AE:E3:09:27:84 X509v3 Authority Key Identifier: keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:c3:02:2c:f5:73:2f:1c:a2:17:9e:94:e1:ad:70:a2:1d:6c: 65:c0:9c:89:6f:3f:9e:d9:ca:45:c7:2a:ba:ab:5f:ec:b4:8b: fc:f1:12:60:8d:8e:e5:d6:c5:a4:fe:1f:52:9d:39:c7:1b:25: 3e:2d:72:8c:a6:35:fe:c1:9d:e9:1e:d2:e8:39:75:30:d1:78: 98:c3:b7:23:66:b1:b1:6b:cb:a8:40:e1:96:89:29:d8:c9:cf: 3e:c2:19:8e:78:ea:fb:ac:e6:6a:56:18:43:1d:c8:b5:5a:88: 35:b1:aa:54:2e:0c:26:c9:aa:52:4d:d2:5d:5f:3a:85:a3:f0: a2:c0:d2:67:ab:c0:13:2e:96:4a:67:35:2c:61:d5:d2:c3:c3: 10:e7:78:66:15:20:6d:ec:4d:ae:d2:27:48:ca:41:e2:54:68: 1b:d6:b1:cc:af:ed:a0:c3:19:85:95:7f:26:9d:10:0d:4e:9b: 8a:ea:92:49:df:92:98:a3:d6:5f:28:8b:6d:15:38:15:d9:61: 8d:94:40:0f:81:51:55:06:cc:9b:02:f3:5c:31:e0:e4:ff:3e: d5:97:91:5d:33:c2:37:96:32:66:ea:18:0e:b1:c3:e5:23:4d: 28:9f:5a:1e:a4:7b:4b:58:fe:2a:e0:42:24:65:c7:c2:e1:7e: 75:2b:c2:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe5M8k4RvULOnix6cYt87xNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODAyNGI3MjlkOTlmMDUxMzNlYzZkMTQzOTBjNzNlYjM2 ZGI5OWUwHhcNMjUwNjI5MDEwMTA4WhcNMjUwNjMwMDEwMTA4WjAzMTEwLwYDVQQD EyhiZjg2N2VjNjMzMDkxNGQwNDZkZmQ0MWQ5ZTlkYmJhZWUzMDkyNzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySRQp9kiTu9mff/5Sq5XzVRU7FsY Ke4XdquRkS4OB2vb2HImNjC30uMs7VqjGur26KaUq6dRMMmSgSTfPP9KI3gjabZV AjMN6CH+GAsvr9tu5A7yjoUNXe9rGFkCtko3IiZlVV39GTaiNW4wWaKv5DuC/BOH 3ykxwIcXn/aXk7FekksCp9lJ2Qy7IEz6U/cNetSY59oZfX5K2ElpeV3j2rm+TQ1J Spne7QV2xMbSZcbYqmwkojl9eefg8FjxDGZLMlYE9LV8Kpyt4BW/polh2yIy02kn Jj/ggE1UOMIHkAcrU6gVPuLUtNuTjEqHtt84+YGVwxLg3rkbP1+BoxtAlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+GfsYzCRTQRt/UHZ6du67jCSeEMB8GA1UdIwQY MBaAFOWAJLcp2Z8FEz7G0UOQxz6zbbmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQt OTU2ZjZiNWM2MTcwLzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQtOTU2ZjZiNWM2MTcw LzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVsMCLPVz LxyiF56U4a1woh1sZcCciW8/ntnKRccquqtf7LSL/PESYI2O5dbFpP4fUp05xxsl Pi1yjKY1/sGd6R7S6Dl1MNF4mMO3I2axsWvLqEDhlokp2MnPPsIZjnjq+6zmalYY Qx3ItVqINbGqVC4MJsmqUk3SXV86haPwosDSZ6vAEy6WSmc1LGHV0sPDEOd4ZhUg bexNrtInSMpB4lRoG9axzK/toMMZhZV/Jp0QDU6biuqSSd+SmKPWXyiLbRU4Fdlh jZRAD4FRVQbMmwLzXDHg5P8+1ZeRXTPCN5YyZuoYDrHD5SNNKJ9aHqR7S1j+KuBC JGXHwuF+dSvCzg== -----END CERTIFICATE-----Generated at Sun Jun 29 04:27:36 2025 by rpki-client