$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft File: 8MEEBBaR3DhPOxqM35XJZijqba8.mft (raw, json) Hash identifier: 6FZU21ruuJJUogtjZCABP8f50VIdJIcuO1/3svJLD6E= Subject key identifier: 24:B1:DB:FB:41:BC:7D:FD:E6:4F:A2:2B:7D:8E:51:01:C6:5A:73:E2 Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Certificate serial: 0197CE041F9B546B4F2954A4CEF4E7712EEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft Manifest number: 1577 Signing time: Thu 03 Jul 2025 02:01:06 +0000 Manifest this update: Thu 03 Jul 2025 02:01:06 +0000 Manifest next update: Fri 04 Jul 2025 02:01:06 +0000 Files and hashes: 1: 1-jVAuwl23O0NOs1-bK6yeNscKls.roa (hash: Uvxs615yu+WEWoRFMHOzorsioWG8H9U4nAbzC8roX+c=) 2: 8MEEBBaR3DhPOxqM35XJZijqba8.crl (hash: bDqh12JK86ux6Y+B1UtIcEEi/dcBtE6JKb+IvIsgs3c=) 3: Hl-LGslDYIhPlAkXHQHVv-RvB0w.roa (hash: O2E13yhrehXyHLH26oeDji6bWmBZEWAoPwvjmCy5UcQ=) 4: KeGOh-2gcusv29keikRHiEVKS4s.roa (hash: QrPYIqt13xYHx5UZtiEmzISVzXSCi7pxjFZqjccXxgI=) 5: PCT5Mgh2BfqwgaWaY02UF5LaLEs.roa (hash: XaBzd5GEKaiXR6sIMeiAlmk2HwlM0MvOxOjSag3QaY4=) 6: asCMHwRsfFwCKLi99bMyFo21krk.roa (hash: utShPNIu2DvLofXXWk5YOZ1a0OQi1aHbqM+BbMHKgoE=) 7: euk47PXoK5T6-tp0xVlaMzoR2zU.roa (hash: ELFMwMZ6NBCdcRDyZO9f72nzLI4WiJG57xVHtBVDcdU=) 8: fs_wxLugKiT_ydUrQOwGSh335rY.roa (hash: Q5dvvgKthsbcb9JzHMCTpI33x4XiWX2kEMaFSL83EKo=) 9: s-NcW6l6hXn5NOmuFXHN7mTAqcY.roa (hash: Ec6KZfarDMvuXKyozJ8ogUajfjL0rcRRpwLDmiHket8=) 10: xs5EMPFexMMDbg6ZozpAr6uWE70.roa (hash: qg/QvTawYThYqecFxjzESCzrgezKdtEVEc1jID0tLZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 04 Jul 2025 02:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:ce:04:1f:9b:54:6b:4f:29:54:a4:ce:f4:e7:71:2e:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Validity Not Before: Jul 3 02:01:06 2025 GMT Not After : Jul 4 02:01:06 2025 GMT Subject: CN=24b1dbfb41bc7dfde64fa22b7d8e5101c65a73e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c4:2e:8f:83:ed:e4:9f:81:1b:f9:98:4e:ad: 79:df:94:aa:b3:b6:2d:7b:ff:7e:04:ef:43:ad:59: 57:c9:bc:7d:54:e9:e1:45:a3:69:6b:87:64:66:90: a0:31:e2:88:67:3a:13:8e:3f:b8:6c:e6:26:54:0b: f8:96:39:8d:a1:52:7c:7f:e4:97:67:42:5d:7a:46: 07:dc:3d:51:86:dc:62:bc:95:0c:4b:ee:0c:09:2b: 36:2e:9a:d5:8c:00:78:e5:ba:1d:44:29:3f:ee:0a: 70:c4:2a:19:9d:66:c5:ca:f7:56:f8:44:d1:0b:a9: e2:1d:12:a7:81:db:5e:c3:13:2c:cd:64:49:19:56: 81:5e:27:a5:29:f0:24:0b:31:12:a3:75:4e:0f:53: f1:0f:04:38:fd:92:bf:7f:66:13:c0:34:71:a9:f7: 97:be:a4:2f:3a:e0:31:ae:87:0b:fa:cd:ad:03:a4: 61:3c:c7:51:f1:e9:d7:b9:9a:fd:65:8d:a5:15:96: 0d:6e:61:0a:d2:82:57:7e:fd:90:bc:cc:77:86:5f: 08:9b:fa:57:9e:e6:e6:ba:de:56:44:57:4d:f8:81: a6:e4:80:63:ff:1a:2e:26:01:c1:27:da:d2:ca:d6: a1:e6:4b:04:f4:b6:50:cc:7a:87:bb:9b:ec:52:ea: 66:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B1:DB:FB:41:BC:7D:FD:E6:4F:A2:2B:7D:8E:51:01:C6:5A:73:E2 X509v3 Authority Key Identifier: keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:13:63:d4:28:a0:bf:ef:52:46:d1:fb:c5:77:c6:b7:9c:ba: c9:95:54:04:2f:63:c8:63:f8:83:35:b9:2f:d6:a2:20:68:2e: 0f:6b:de:a1:85:05:8f:2f:63:3c:59:e8:de:ec:e3:bd:c8:ab: 42:e7:c5:5d:82:ef:bd:69:8a:37:a6:a7:a7:fb:e0:74:ee:b8: e8:83:3c:3d:47:ec:dc:d4:d6:16:7b:0c:ea:4a:27:20:a2:b5: d2:43:0b:f6:6e:01:72:5f:fb:5e:f1:d0:c1:a8:37:b5:5a:4e: 77:8b:90:26:de:b1:8d:cb:b9:f4:4d:76:fa:2f:b8:ef:fd:30: 50:fc:3e:9b:cf:b6:9a:b5:02:e6:ae:a1:c2:9e:99:97:09:de: b8:25:a7:77:e9:2e:86:13:04:89:35:ab:a9:1d:15:ea:6d:96: c3:73:9d:45:18:c4:24:b4:ab:99:9e:3e:dd:ff:39:56:10:df: 56:33:a2:8c:ea:19:4b:0a:57:5e:87:7d:37:8b:9a:a3:cd:71: f5:45:7a:d3:c8:a3:5d:e6:7d:d0:a4:b7:f0:a0:a4:42:1f:27: 1a:95:62:c5:50:cd:7c:d3:f5:65:70:f2:f6:84:35:e4:e9:55: 0a:64:d3:5c:56:c4:14:04:b0:a4:36:8d:87:3a:5d:4d:30:cc: 11:de:ff:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfOBB+bVGtPKVSkzvTncS7sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl YTZkYWYwHhcNMjUwNzAzMDIwMTA2WhcNMjUwNzA0MDIwMTA2WjAzMTEwLwYDVQQD EygyNGIxZGJmYjQxYmM3ZGZkZTY0ZmEyMmI3ZDhlNTEwMWM2NWE3M2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsQuj4Pt5J+BG/mYTq1535Sqs7Yt e/9+BO9DrVlXybx9VOnhRaNpa4dkZpCgMeKIZzoTjj+4bOYmVAv4ljmNoVJ8f+SX Z0JdekYH3D1RhtxivJUMS+4MCSs2LprVjAB45bodRCk/7gpwxCoZnWbFyvdW+ETR C6niHRKngdtewxMszWRJGVaBXielKfAkCzESo3VOD1PxDwQ4/ZK/f2YTwDRxqfeX vqQvOuAxrocL+s2tA6RhPMdR8enXuZr9ZY2lFZYNbmEK0oJXfv2QvMx3hl8Im/pX nubmut5WRFdN+IGm5IBj/xouJgHBJ9rSytah5ksE9LZQzHqHu5vsUupmEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSx2/tBvH395k+iK32OUQHGWnPiMB8GA1UdIwQY MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt NjkxNDIyMzExNzI5LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5 LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRNj1Cig v+9SRtH7xXfGt5y6yZVUBC9jyGP4gzW5L9aiIGguD2veoYUFjy9jPFno3uzjvcir QufFXYLvvWmKN6anp/vgdO646IM8PUfs3NTWFnsM6konIKK10kML9m4Bcl/7XvHQ wag3tVpOd4uQJt6xjcu59E12+i+47/0wUPw+m8+2mrUC5q6hwp6ZlwneuCWnd+ku hhMEiTWrqR0V6m2Ww3OdRRjEJLSrmZ4+3f85VhDfVjOijOoZSwpXXod9N4uao81x 9UV608ijXeZ90KS38KCkQh8nGpVixVDNfNP1ZXDy9oQ15OlVCmTTXFbEFASwpDaN hzpdTTDMEd7/iA== -----END CERTIFICATE-----Generated at Thu Jul 3 08:07:55 2025 by rpki-client