$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft File: RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json) Hash identifier: BPC5T+rXSrQsnDnTiY/LY5qJz34/Z4vLWbbXZF7YcJc= Subject key identifier: FA:4E:27:C9:2C:10:AD:AB:B4:9B:39:80:22:60:13:62:22:B1:87:CE Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 0197B7B31E1F38A22961AE7064040A24AB2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft Manifest number: 095F Signing time: Sat 28 Jun 2025 18:00:58 +0000 Manifest this update: Sat 28 Jun 2025 18:00:58 +0000 Manifest next update: Sun 29 Jun 2025 18:00:58 +0000 Files and hashes: 1: 7HWHA8UqwHtsqDMBW-DwrAaDDjM.roa (hash: e8s5o0udkcNi/3gr4/Pby8a6BORkIl6Tk5BcUgdqf98=) 2: 8ZU3bGrm9xWhwMuNBNg_sVSf78w.roa (hash: q1BAPF4hVnnZILV3v3GzNcOP1nX7SZBYfnbCOVjjzwo=) 3: 9-Cs-wlSKolkQOZlHuZ6o38xnW8.roa (hash: /LvilRmKOS6giT5Dw0+bvBLFwH/Vk7jUGiOc4qBQkvY=) 4: CH-MNJ62x7kM2_t2iuWi-Pl441k.roa (hash: HaFXnQzr7MPgH+K0peJzoRzHcSdMpsIno7S1dDVTYls=) 5: F93HK3zZbjyanEiJSO9cArJniew.roa (hash: wrh+x7Klvcmq0ZMqoDo7aM3datdsQCypsCC/kWY8BG4=) 6: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: 0muww4g+oVv8uo4d6JDGTuAVelfxMEz/3dosJeEFn1k=) 7: RocZhE1Sgw4wWmm8LnKO4d7f68w.roa (hash: +rys+d7y9dD2VIYL252iXtWKGL/n4lME4L1WtriVBxI=) 8: U47Wz_LD2xLJywbdswHmPzRJpDo.roa (hash: qCq8pw/dLAXcMlcPqPaGHxhAYIuN8gInNQEcnd7HSIs=) 9: cSOzcJuJznyp0-yCo16vcwC-SO4.roa (hash: /BcpV3CpFg+yHnaLyG3CeUoFmA/RLptEV35Vt1SRJwQ=) 10: g8u27N4QItUirByGNIpicNOy82Y.roa (hash: 86XD7A3oPGKMoD9IAzlfVhw0nOpZrI3Tfibq7N31K6c=) 11: iH3j8qY1-071YfTwOblznlAQw6s.roa (hash: yME8emyVjusbrBjqemdlgI+CwPOa3VlHZpR5ZeMxUWc=) 12: mGSm6WnPN8htR3E3SqRmvrkDAW0.roa (hash: ma8SoOibhRfVHVvLv4aSGOKoznJfyTFPs8hixxk0hN8=) 13: o8lbHUF5p8P0LSI1V6iY7jMTuTg.roa (hash: ZQCfB91uZ1JZ71d13fCWoNRsNQvDiuAzDxXdM3rVpoo=) 14: ryDPDikJ1i_zY_ss9G41qhvN3jc.roa (hash: h94vj7TMlIg5ainHE5mYHmcUUj3Q1WNeWVzGbaI/3Fg=) 15: s34gFp_Dg8YCv8xU55YOYuR_tp0.roa (hash: 6OSop7WtLWi7lLLdg7yDCXvjXq4AkQqEA6GX04GSf58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:b3:1e:1f:38:a2:29:61:ae:70:64:04:0a:24:ab:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Jun 28 18:00:58 2025 GMT Not After : Jun 29 18:00:58 2025 GMT Subject: CN=fa4e27c92c10adabb49b39802260136222b187ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:68:20:ad:16:c4:ed:45:cb:79:c3:23:47:e9: c4:34:01:b6:bd:78:96:30:4e:67:d9:67:90:66:3c: cf:84:49:e3:05:60:f9:7e:df:f5:ef:43:23:95:92: 08:09:a5:47:a1:89:6f:8f:dd:a1:d5:9f:06:55:42: 6b:29:d0:de:25:a5:6b:4c:bd:a3:ca:9c:1d:a0:f0: 5e:5a:4c:6a:8e:48:4a:d5:3c:30:76:1e:fe:f4:de: 55:c2:13:81:cc:0b:23:12:eb:a7:86:39:12:10:fa: 1a:f7:b8:8e:7e:d6:fd:be:0c:29:9b:7c:be:ba:df: 22:05:2a:8b:7d:19:08:aa:5a:c4:7c:86:bd:ed:11: 42:3c:f9:7b:b9:e9:7a:55:98:a6:07:08:b0:02:95: cb:e8:6d:e0:f0:09:08:67:71:bf:4f:8b:c4:ed:62: 01:22:de:19:77:b4:83:f3:e5:7e:40:f9:cb:e1:5f: 64:d7:b0:f9:09:20:20:ae:dc:c3:03:f9:90:e9:ea: 1a:f3:dd:4d:08:45:de:b3:09:0d:9f:dc:8a:4c:d7: b7:d3:7e:af:12:6e:bb:4d:12:fd:db:61:9b:06:35: 81:a0:74:c1:a7:f2:48:04:68:a8:19:da:a7:97:39: f9:1b:41:c8:40:35:79:90:68:6d:c4:b6:e8:8b:22: cc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4E:27:C9:2C:10:AD:AB:B4:9B:39:80:22:60:13:62:22:B1:87:CE X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:52:66:a2:34:ff:63:68:07:58:64:5a:d7:96:c1:63:2d:da: 61:d3:79:13:9f:55:07:0a:77:27:ed:48:a5:b2:1e:00:cf:bf: 94:88:94:82:33:52:61:f9:7c:bf:21:2b:67:32:63:42:51:c5: 2a:04:78:f7:af:ff:7b:c0:9f:33:80:5e:29:1c:55:e0:1c:f0: 93:2d:0b:34:fe:f2:dc:3d:b8:14:54:06:ee:7e:90:48:dd:07: 40:0d:8c:60:cd:3d:ad:f9:bc:6c:0d:68:89:7d:50:5e:cb:ae: 2f:74:92:ba:c7:7a:4a:e9:75:c0:fa:63:be:25:16:97:8f:6b: 21:8e:c3:41:9c:c2:7c:9a:dc:80:2b:f6:21:46:37:93:1c:68: c8:e7:a3:01:a2:d3:0f:1b:4c:92:67:22:ef:1d:42:8a:11:e7: 11:82:89:fb:b6:e8:a9:c0:d7:2a:2c:0c:1e:1d:df:d9:2c:d8: 31:83:c0:1c:99:c3:f5:cc:a0:23:4d:ae:b8:49:14:8e:0b:4c: e3:cc:e6:42:30:c9:de:7a:98:c7:b7:a1:12:ca:f7:43:a1:4a: 54:09:d3:73:47:5a:c5:51:e4:ae:dd:5b:ef:09:ef:fe:94:9d: 48:8d:25:c1:9b:59:10:b4:81:a3:11:8b:a4:d9:82:61:6d:d8: 0d:ed:97:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3sx4fOKIpYa5wZAQKJKsrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjUwNjI4MTgwMDU4WhcNMjUwNjI5MTgwMDU4WjAzMTEwLwYDVQQD EyhmYTRlMjdjOTJjMTBhZGFiYjQ5YjM5ODAyMjYwMTM2MjIyYjE4N2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWggrRbE7UXLecMjR+nENAG2vXiW ME5n2WeQZjzPhEnjBWD5ft/170MjlZIICaVHoYlvj92h1Z8GVUJrKdDeJaVrTL2j ypwdoPBeWkxqjkhK1Twwdh7+9N5VwhOBzAsjEuunhjkSEPoa97iOftb9vgwpm3y+ ut8iBSqLfRkIqlrEfIa97RFCPPl7uel6VZimBwiwApXL6G3g8AkIZ3G/T4vE7WIB It4Zd7SD8+V+QPnL4V9k17D5CSAgrtzDA/mQ6eoa891NCEXeswkNn9yKTNe3036v Em67TRL922GbBjWBoHTBp/JIBGioGdqnlzn5G0HIQDV5kGhtxLboiyLMcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpOJ8ksEK2rtJs5gCJgE2IisYfOMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVJmojT/ Y2gHWGRa15bBYy3aYdN5E59VBwp3J+1IpbIeAM+/lIiUgjNSYfl8vyErZzJjQlHF KgR496//e8CfM4BeKRxV4Bzwky0LNP7y3D24FFQG7n6QSN0HQA2MYM09rfm8bA1o iX1QXsuuL3SSusd6Sul1wPpjviUWl49rIY7DQZzCfJrcgCv2IUY3kxxoyOejAaLT DxtMkmci7x1CihHnEYKJ+7boqcDXKiwMHh3f2SzYMYPAHJnD9cygI02uuEkUjgtM 48zmQjDJ3nqYx7ehEsr3Q6FKVAnTc0daxVHkrt1b7wnv/pSdSI0lwZtZELSBoxGL pNmCYW3YDe2XiA== -----END CERTIFICATE-----Generated at Sat Jun 28 23:33:50 2025 by rpki-client