$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft File: b8UNDUIGe3arGi6OUz_4SbZdVvU.mft (raw, json) Hash identifier: g6Rl+GU9lBN4SIO0f4QOZySxwe0iG4KmJOl9IaeX99Q= Subject key identifier: 96:A9:28:48:E2:1E:BC:BC:D3:4D:56:A2:D7:3C:E8:5B:65:40:57:AE Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Certificate serial: 0197B77C5FC7366F997FA40AEE1E4A69787F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft Manifest number: 15DD Signing time: Sat 28 Jun 2025 17:01:10 +0000 Manifest this update: Sat 28 Jun 2025 17:01:10 +0000 Manifest next update: Sun 29 Jun 2025 17:01:10 +0000 Files and hashes: 1: 0Abj6PSR4FyJUqM6LoN6KFa-26E.roa (hash: 3N4/akmiC/u7gL1HF+D/mYuikLJRGoPmYVruDqzajtA=) 2: 1-HYjW61poyKPMhvfx7U4CngkbXQ.roa (hash: FgaQ7pllPxrtYs+K7a4T0YujtsmGhQlX0nAW+eszuLQ=) 3: 1X78ozO3_5ULJTTX4ARholYkMtY.roa (hash: 1YfjPO55+mmSYnYEpQNn/8Y7Ymp0JTDMtIPTDKYWHh8=) 4: 3yeC5jM2ksuqKR2Zh5IvhgGT7kM.roa (hash: aly6yVEpJfsikwPOCEOA8sYqzyulJ58cobvGMlp3Pfc=) 5: C5Xs3N6YlAvqeKGXwFJ89E5HGJM.roa (hash: wGkOURT9w38WEveyum+OtHnzUiYwwdwVsQOfo9tkP1M=) 6: H6AhUHbx8OlryRkBD15AK_97AFI.roa (hash: aVuSxMtEE3jtCIFUPkZzKs9s0u5aGihLcG9skQiW4iU=) 7: IE5Ot6kXSpSm_XTJaCWCEcClZ1E.roa (hash: ecVDNUR7HlsILjWVcvUtVx/095hxRc4P38CIzJWANj8=) 8: K8brr-FPsMEnGF0kbZo88qS6lTk.roa (hash: qW/T11RMV283PJtyNsGcccWeoOYrXus8SlIyII3hPJA=) 9: OQtVR-cBTyQL6VvIXAOtawOW2cA.roa (hash: Y4JxghrLsZ564AFIbmlJP5QHypmTlarb7NM9FNTmN7A=) 10: RzzP2UDDSAPrZWNFm6aBz91iMgQ.roa (hash: 1RDkfiEzt2ZEB4LXorNIAFk4fcDKeMEBcQ7w1edzRtU=) 11: XKHgN2jT3_6QMfOgHKrS1JlPtdM.roa (hash: 0/lku7LnO6lIZwW3HNYBW2LCc3aSui+jPA3GCkogDfQ=) 12: b8UNDUIGe3arGi6OUz_4SbZdVvU.crl (hash: M8waP+SlTE9gNfTrLV8ZkLnRnnQx9lgSfFf/w98piFE=) 13: hz97jgo9bqt0uT-ArAt9KzOXsP4.roa (hash: bhze+d6pD3xd6tpzBiM9HUGCjaef6tJylvnHETr5GxE=) 14: iNYkqcS0PNGby4-GJu8UVMQggRY.roa (hash: nyGk+qZgZIHoVA2y4TNTNY21X6xYGa600Okb1SMJu44=) 15: wEFBReYub_TeCbtnkjQHEDS6zaQ.roa (hash: 5e2lfQsxA6BsgP6dDtPIK0Ql9foij6lPOeMn2Q1JhkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:7c:5f:c7:36:6f:99:7f:a4:0a:ee:1e:4a:69:78:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Validity Not Before: Jun 28 17:01:10 2025 GMT Not After : Jun 29 17:01:10 2025 GMT Subject: CN=96a92848e21ebcbcd34d56a2d73ce85b654057ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:be:05:90:4c:a5:84:44:e8:d6:ef:fc:6e:9f: e4:ea:2d:ef:a1:ff:8f:ed:9e:4a:63:f5:cc:4f:47: fa:2e:41:87:b4:26:8a:80:9d:46:d3:82:e0:2c:03: 13:b9:7a:d5:09:e2:c3:4c:d3:f4:47:60:7f:93:6e: 9b:6e:1b:2e:39:71:5b:9e:fb:9a:b2:38:ce:9a:51: 92:73:87:b9:32:66:ac:56:cb:1d:b1:c2:93:fd:93: c8:4a:d7:8d:ab:5d:ad:4b:d2:c7:58:de:57:e1:8c: 81:76:01:d5:65:f1:c0:6d:32:cc:ba:2b:c6:3f:b1: c9:8f:b3:dc:da:60:6b:f5:1a:32:f1:8a:35:2b:16: 08:49:35:d8:2c:6f:16:f0:bb:bd:5b:d8:1a:29:d0: 9d:50:87:55:e2:b8:5b:99:5e:a1:90:ef:9f:6d:af: 4f:21:72:52:f1:92:8c:95:1d:48:00:cf:9f:40:63: f5:80:cf:8f:e9:ca:42:29:48:2e:52:96:82:8f:c6: a0:ed:c5:31:26:9d:00:17:ee:fb:2d:9c:a5:74:af: 94:ba:f6:39:3f:2a:63:e4:09:e5:1b:2f:3f:1e:aa: ab:0f:29:be:a8:c8:5d:74:b4:e7:6e:99:40:17:29: ee:8d:fc:18:d0:8a:26:b9:82:45:a0:73:c9:11:12: 24:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A9:28:48:E2:1E:BC:BC:D3:4D:56:A2:D7:3C:E8:5B:65:40:57:AE X509v3 Authority Key Identifier: keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:1c:f4:c9:2c:84:40:06:b8:5a:14:e5:6a:30:c9:cd:21:f2: 6f:3c:e6:f8:fb:76:db:a0:5c:bb:9e:54:d0:91:df:56:cf:b4: f9:6a:ec:4e:bb:3f:5d:99:ac:f3:52:98:76:53:b1:73:fe:bf: 20:23:47:ce:24:77:e4:ab:42:e5:d9:ab:3e:da:74:35:a6:75: ba:4e:fd:7d:ec:0b:27:8d:27:25:dd:ca:c0:1f:7c:d0:c2:ae: 95:3e:b7:14:5b:aa:80:9c:ed:6f:f8:c3:ff:e9:74:1a:8e:8b: bc:4e:04:97:6d:b7:3a:de:ed:2f:58:2d:4b:aa:83:0b:2f:03: f7:a9:38:8a:21:78:ec:d1:9a:cc:11:2e:bd:28:07:c7:65:cf: e4:90:d6:01:27:0d:cf:16:1c:81:2d:6d:66:f8:38:af:8c:0e: 44:96:09:6c:f6:36:e1:78:c2:e3:13:a6:43:7e:ca:06:90:3e: b0:40:37:35:f2:35:10:9c:c8:6a:ec:67:60:84:2a:64:25:62: c8:36:1c:5b:db:48:b0:b9:b0:c2:0b:ef:34:ef:92:ea:b0:21: 6e:39:12:a6:71:02:93:2c:bd:65:79:75:62:4c:b9:9d:d2:01: 5b:72:8e:9d:70:2c:49:93:2a:84:eb:25:45:17:20:59:e8:cb: af:38:92:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3fF/HNm+Zf6QK7h5KaXh/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1 ZDU2ZjUwHhcNMjUwNjI4MTcwMTEwWhcNMjUwNjI5MTcwMTEwWjAzMTEwLwYDVQQD Eyg5NmE5Mjg0OGUyMWViY2JjZDM0ZDU2YTJkNzNjZTg1YjY1NDA1N2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp74FkEylhETo1u/8bp/k6i3vof+P 7Z5KY/XMT0f6LkGHtCaKgJ1G04LgLAMTuXrVCeLDTNP0R2B/k26bbhsuOXFbnvua sjjOmlGSc4e5MmasVssdscKT/ZPISteNq12tS9LHWN5X4YyBdgHVZfHAbTLMuivG P7HJj7Pc2mBr9Roy8Yo1KxYISTXYLG8W8Lu9W9gaKdCdUIdV4rhbmV6hkO+fba9P IXJS8ZKMlR1IAM+fQGP1gM+P6cpCKUguUpaCj8ag7cUxJp0AF+77LZyldK+UuvY5 Pypj5AnlGy8/HqqrDym+qMhddLTnbplAFynujfwY0IomuYJFoHPJERIk7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJapKEjiHry8001Wotc86FtlQFeuMB8GA1UdIwQY MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt M2MxNmZmODQxYWIyLzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArhz0ySyE QAa4WhTlajDJzSHybzzm+Pt226Bcu55U0JHfVs+0+WrsTrs/XZms81KYdlOxc/6/ ICNHziR35KtC5dmrPtp0NaZ1uk79fewLJ40nJd3KwB980MKulT63FFuqgJztb/jD /+l0Go6LvE4El223Ot7tL1gtS6qDCy8D96k4iiF47NGazBEuvSgHx2XP5JDWAScN zxYcgS1tZvg4r4wORJYJbPY24XjC4xOmQ37KBpA+sEA3NfI1EJzIauxnYIQqZCVi yDYcW9tIsLmwwgvvNO+S6rAhbjkSpnECkyy9ZXl1Yky5ndIBW3KOnXAsSZMqhOsl RRcgWejLrziSLg== -----END CERTIFICATE-----Generated at Sat Jun 28 22:34:01 2025 by rpki-client