$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft File: 9LdilQ63kWZou_qNG4cFYLHKdzk.mft (raw, json) Hash identifier: 4ZfdLXHU9TYzmRkKoDddnpSi5OE080O5HPPHZBnjrwI= Subject key identifier: EA:BB:9D:1A:30:92:5D:2D:51:59:CA:B3:44:6C:6B:CC:18:38:C7:E4 Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Certificate serial: 0197B6A0F6AE78C2209073A9964D89F53922 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft Manifest number: 1452 Signing time: Sat 28 Jun 2025 13:01:31 +0000 Manifest this update: Sat 28 Jun 2025 13:01:31 +0000 Manifest next update: Sun 29 Jun 2025 13:01:31 +0000 Files and hashes: 1: 2I_gyEpNZ4JuV81yJRUXBVu-KOA.roa (hash: r49ywNskr+Vb41Ou7x0XARQgE2G5ZH5biPRfE9u4cAc=) 2: 2tZ8QlZM2m2IpNLIvJ0W7pbf-Z0.roa (hash: 9Uhvy9O+l0zHDpQPVkCj98q8JIdj7ZhjiR3rxLVvfII=) 3: 9LdilQ63kWZou_qNG4cFYLHKdzk.crl (hash: YdJd5Dx11KGcPtZPRaKjjA8O7O+0FppajL5il189hUo=) 4: Cqe38rpbTYcW3IBIj3GE-axW20k.roa (hash: rFb4HKGqgMrSh0TmO+Kz12Dni5W90nAeu/GsQNE5QbI=) 5: QvUi-uUyEPClIhL14Tjl4e8kcJ8.roa (hash: JHsP9SRn0z74odoNftVjEsPtUj5FZk/4tMrWE3fymP0=) 6: RW6wxE8PmfS_l7583dlKYTuULiM.roa (hash: NA5N2aFRPb0HCLNpvXiULoI8i28V3/zHm+oTFj2hW9U=) 7: XViXWtM4Qca08fEngqnKAjV8_6k.roa (hash: FX1LXPYDV9yZbUiSRuPd/ffSUdla1CU7pMstvEpaovA=) 8: YcddWRNkcNBtg2GRMDNHHw9mFJ4.roa (hash: G/xopPnzXkAvpcbYnZmulnHRu0yyJM+YK09jXPq59tw=) 9: t292OmKp-GnX0MyFpL72FnDc9MA.roa (hash: uIDL5vQGM8ia+mjLC9CmEE4toRqUWbIawZ8YzQbIFpY=) 10: vyCGGnsFvqliTEx12jYp6lwRAek.roa (hash: l5raYrCV5cZJwg0Ik6+6Zpw1vWa9xl0dKA9pFd0Ksa8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 13:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:a0:f6:ae:78:c2:20:90:73:a9:96:4d:89:f5:39:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Validity Not Before: Jun 28 13:01:31 2025 GMT Not After : Jun 29 13:01:31 2025 GMT Subject: CN=eabb9d1a30925d2d5159cab3446c6bcc1838c7e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:30:5f:5f:56:c7:5a:50:c1:5a:98:a2:ad:4a: 17:36:d0:0b:2f:df:b6:ca:8d:4e:ef:70:b9:c8:6f: 13:00:99:e5:0a:ec:51:3f:a5:b9:60:0c:e3:62:58: e9:5e:1d:2b:47:6f:fb:b5:b7:eb:c0:5a:7b:c6:b7: 09:a7:2b:cb:39:64:a1:27:c2:13:49:2c:53:3a:af: a1:da:21:c3:7f:1f:4b:6e:d9:2b:ec:23:7c:3f:19: 16:34:20:16:89:0c:28:f2:20:dd:35:48:eb:58:75: d1:d7:1d:70:d9:d1:13:8a:a6:8b:e7:d7:14:b1:0a: 78:d9:b0:60:c3:eb:50:18:bc:62:ed:9e:f1:6c:f2: 72:e3:fe:a6:f2:22:35:34:8c:46:29:3b:aa:b9:b9: 46:bd:7b:1d:41:e3:8c:59:95:8a:9e:73:4b:57:a1: ab:a6:5f:98:0f:8e:f0:1c:4e:ef:06:eb:75:28:b9: c2:0a:74:93:ed:2c:a2:2e:11:39:71:30:12:4c:8d: 3e:13:97:58:31:74:05:54:0d:4b:32:43:4a:43:92: 9b:e8:8b:f6:cb:46:25:e9:4c:c9:e9:84:85:75:c2: 6f:a8:28:60:42:5b:15:0e:dc:02:c5:c9:dd:63:26: 0a:88:14:c6:c6:97:47:1c:6c:25:92:bb:7e:37:77: f4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:BB:9D:1A:30:92:5D:2D:51:59:CA:B3:44:6C:6B:CC:18:38:C7:E4 X509v3 Authority Key Identifier: keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:0b:85:6e:56:30:36:ee:94:4e:20:6f:56:49:cd:1d:bb:ee: 76:88:8b:48:08:02:5b:c9:2d:6f:a4:7d:d6:48:f9:6f:b3:e3: ea:7c:3f:12:24:54:02:7b:68:d2:3a:69:70:c2:39:d9:24:a7: 93:4d:24:be:c4:7b:d8:b2:7d:7d:2d:8a:2b:46:50:31:1a:34: 23:05:96:9e:65:84:91:5d:ef:15:c5:12:81:92:49:da:83:4f: 43:3f:26:71:64:7a:76:26:72:8b:fb:d5:41:aa:11:05:a9:b7: 44:ad:ac:cf:5e:f8:75:94:79:5e:44:35:b0:93:f9:a7:3c:68: 8d:c7:90:f4:a1:99:97:eb:40:21:53:d0:89:4b:63:9f:14:c6: c2:fa:c6:46:19:96:ea:9c:c5:22:37:f5:1f:c1:51:45:75:e6: 18:33:e9:81:23:97:d6:cb:22:cf:4a:8f:90:e0:26:d5:5c:31: 31:88:31:f0:8c:55:c9:e1:f2:19:c1:99:a3:94:c5:d0:81:fa: f7:71:a9:36:88:ce:8a:ed:30:80:c8:43:7e:09:6d:9d:bb:64: 08:77:d5:9c:81:a5:e7:aa:b9:85:7b:d0:6e:87:87:35:8f:4c: a1:6a:b7:06:99:2b:5f:60:7f:da:b5:64:ce:24:a6:ce:38:12: ed:99:9b:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2oPaueMIgkHOplk2J9TkiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Yjc2Mjk1MGViNzkxNjY2OGJiZmE4ZDFiODcwNTYwYjFj YTc3MzkwHhcNMjUwNjI4MTMwMTMxWhcNMjUwNjI5MTMwMTMxWjAzMTEwLwYDVQQD EyhlYWJiOWQxYTMwOTI1ZDJkNTE1OWNhYjM0NDZjNmJjYzE4MzhjN2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjBfX1bHWlDBWpiirUoXNtALL9+2 yo1O73C5yG8TAJnlCuxRP6W5YAzjYljpXh0rR2/7tbfrwFp7xrcJpyvLOWShJ8IT SSxTOq+h2iHDfx9Lbtkr7CN8PxkWNCAWiQwo8iDdNUjrWHXR1x1w2dETiqaL59cU sQp42bBgw+tQGLxi7Z7xbPJy4/6m8iI1NIxGKTuqublGvXsdQeOMWZWKnnNLV6Gr pl+YD47wHE7vBut1KLnCCnST7SyiLhE5cTASTI0+E5dYMXQFVA1LMkNKQ5Kb6Iv2 y0Yl6UzJ6YSFdcJvqChgQlsVDtwCxcndYyYKiBTGxpdHHGwlkrt+N3f0RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOq7nRowkl0tUVnKs0Rsa8wYOMfkMB8GA1UdIwQY MBaAFPS3YpUOt5FmaLv6jRuHBWCxync5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAt MmY4ZGYxODdmOThiLzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAtMmY4ZGYxODdmOThi LzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADAuFblYw Nu6UTiBvVknNHbvudoiLSAgCW8ktb6R91kj5b7Pj6nw/EiRUAnto0jppcMI52SSn k00kvsR72LJ9fS2KK0ZQMRo0IwWWnmWEkV3vFcUSgZJJ2oNPQz8mcWR6diZyi/vV QaoRBam3RK2sz174dZR5XkQ1sJP5pzxojceQ9KGZl+tAIVPQiUtjnxTGwvrGRhmW 6pzFIjf1H8FRRXXmGDPpgSOX1ssiz0qPkOAm1VwxMYgx8IxVyeHyGcGZo5TF0IH6 93GpNojOiu0wgMhDfgltnbtkCHfVnIGl56q5hXvQboeHNY9MoWq3BpkrX2B/2rVk ziSmzjgS7Zmb1g== -----END CERTIFICATE-----Generated at Sat Jun 28 22:21:25 2025 by rpki-client