$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft File: o20K5eL7_8zgh3Drwgwha5-_lIU.mft (raw, json) Hash identifier: 9fLj7MbLeBMiNYMn7NlHcpGpzaHUVzdLtEiPrXo/VGo= Subject key identifier: 6A:D9:48:7E:82:E8:3A:29:47:99:EE:0C:11:69:A0:D4:BA:6E:58:56 Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Certificate serial: 0197B7EA99E058AB51A84E8E6BAB4000C0C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft Manifest number: 15E4 Signing time: Sat 28 Jun 2025 19:01:34 +0000 Manifest this update: Sat 28 Jun 2025 19:01:34 +0000 Manifest next update: Sun 29 Jun 2025 19:01:34 +0000 Files and hashes: 1: 1XbIXlsc12j6nm66ObHlANu1FxM.roa (hash: lxZWGjYaWrGULnJUqbEWkt5IyYC/5a04fccF0g2Mp+o=) 2: 3RFddkozoZGvDJWQRcnS3tQnN6k.roa (hash: KSM4qOmDj4X6PN9gZp6oxzJSTfcXsGzAsnDPsOPcYvo=) 3: 5Ni6TTomkpPGcPlO3kSvRsrQu-U.roa (hash: 1JbN0aQZgu8I5lbFUp1QWBBO58Y4WN7qnz2P+FqHbJQ=) 4: BUbLcDK2mlbMmQrWrXK_KkB_Z8I.roa (hash: 5p58mg305UQz5j2iOVYn7ENJmD3sfGRtf406Z23M5Fg=) 5: DlEN3D6ABTKOQAUtaBMUB9rDXTg.roa (hash: 7Z/Q1II+IY41ZQNrl/gNVuPJHIVrAlLxhLrLlp3uHJ8=) 6: RdqjtJDLFWOt3Phx5mE_iQ2n2ac.roa (hash: lxo1VRjxzcOyUQlNG+1uXakzpre9ZL0uw2/WRhwVovc=) 7: fz5OQX3YNuZKli23fQPsHJMHAjg.roa (hash: 2W1jdhiJm6VJW0yfAkLiyNtl6yjC+Bfx3j0Hv8QWt58=) 8: o20K5eL7_8zgh3Drwgwha5-_lIU.crl (hash: TWJ0y4Ye/XjsRqitn4U2rBxanHycMPPf7213zzTgG8k=) 9: tn7ZdWo9WQgYlB0Z6sOK2If7PKQ.roa (hash: 8aBGWuWam9C6QXOPco15OTid7ItEiEbxf2K863xiGIk=) 10: uxPuBCLIiL0vvpcp5iG57n6Nxl8.roa (hash: 9FJQPnJf1+iHQwAWGEeso0fULqarFlyxqNgrRoa6pYY=) 11: v8yHhVnQZ24d3Hqq-_MmljsyF-o.roa (hash: ldyVLPmDRLippOD+hn4EjHJmd9dcu8cUfl/mwJelT5M=) 12: vOg7pIai3eYlqI8nGfkYR-448qE.roa (hash: k2twTqEvKHP86X8yabE26RQnv5iqhvXZjH+b4EIuDog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:ea:99:e0:58:ab:51:a8:4e:8e:6b:ab:40:00:c0:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Validity Not Before: Jun 28 19:01:34 2025 GMT Not After : Jun 29 19:01:34 2025 GMT Subject: CN=6ad9487e82e83a294799ee0c1169a0d4ba6e5856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:58:61:80:f6:ca:32:34:cf:33:8f:da:05:65: ac:e1:21:13:e4:7a:79:30:7d:26:bb:74:fa:5e:a1: 4d:88:37:59:55:3e:83:74:25:a3:89:12:0b:24:c4: e4:c9:72:09:e3:ce:1d:5b:ef:e8:11:5d:ef:f4:67: 43:25:ab:10:92:c1:f2:0f:cb:f6:6d:b3:da:d0:16: 48:c8:6c:65:78:ca:5d:d3:4b:e7:bc:65:31:a7:83: 20:5b:f4:b4:b6:a3:ae:4f:69:dd:52:ba:c8:7c:28: 7c:90:17:f7:79:e5:e9:10:fe:b2:25:48:09:b5:a4: 5c:de:ea:51:49:07:d8:76:b5:61:8b:ad:86:93:80: 0f:0e:8b:e6:e5:1a:8f:ac:f5:b4:e4:ee:6d:10:f1: ee:e2:2f:26:67:23:e7:f2:73:89:8c:70:7b:48:89: 25:d3:50:28:41:14:79:00:18:2a:9b:37:76:73:ca: 2d:94:61:8c:72:e1:fb:83:25:79:e6:b9:b3:c8:aa: 7c:91:21:3b:53:07:a6:4d:21:9d:07:e8:d0:2f:2d: 01:1d:2c:c4:fd:18:5d:9e:30:d0:ca:d5:cb:91:9b: d0:87:ab:3e:c0:4a:2f:e6:8a:bf:22:58:e6:05:3f: 53:b2:b9:7c:e3:b2:7d:a1:1b:9e:cb:cf:91:4d:14: 9e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D9:48:7E:82:E8:3A:29:47:99:EE:0C:11:69:A0:D4:BA:6E:58:56 X509v3 Authority Key Identifier: keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:d7:13:b4:22:06:9f:0b:47:b5:f9:38:50:9c:09:4d:67:cd: 81:d1:d6:02:80:d1:96:8b:3e:a4:0e:2c:e7:ac:74:1f:d5:34: 30:55:cc:ad:a8:5e:47:89:82:b4:d0:0a:79:1c:2b:00:4b:51: ad:18:71:5e:06:18:4c:8b:67:09:81:6a:13:6e:54:4c:b6:28: 8e:77:78:77:7d:21:54:b8:e0:94:37:eb:5b:d1:63:0d:c2:c8: 31:6e:0b:bd:74:ab:48:99:74:56:b7:ba:20:ab:81:a4:a0:b4: 2b:2e:67:5d:e1:42:e2:dc:a2:00:fe:86:33:06:80:c8:ef:ca: 06:e5:55:c3:79:da:92:97:29:48:bd:b0:05:41:7e:36:4c:83: 9b:71:1e:f4:e4:d5:25:5d:1e:72:8c:74:c8:97:ea:fb:65:a3: d4:f2:07:0a:c1:d4:c5:38:33:91:0d:b9:cf:8e:81:aa:8c:c8: db:ec:9e:de:e2:87:b9:72:42:41:b0:46:33:b8:fe:d3:9d:13: 92:80:1b:6e:1d:7d:0d:39:35:cd:02:8c:76:50:99:1a:f4:9e: c5:47:e9:47:4e:e5:d5:c7:4e:b4:6c:50:bc:60:34:d3:25:e4: 6e:24:5e:50:98:53:d4:24:ac:3c:9a:c8:1d:71:ed:26:16:08: 1f:c8:72:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe36pngWKtRqE6Oa6tAAMDDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNmQwYWU1ZTJmYmZmY2NlMDg3NzBlYmMyMGMyMTZiOWZi Zjk0ODUwHhcNMjUwNjI4MTkwMTM0WhcNMjUwNjI5MTkwMTM0WjAzMTEwLwYDVQQD Eyg2YWQ5NDg3ZTgyZTgzYTI5NDc5OWVlMGMxMTY5YTBkNGJhNmU1ODU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolhhgPbKMjTPM4/aBWWs4SET5Hp5 MH0mu3T6XqFNiDdZVT6DdCWjiRILJMTkyXIJ484dW+/oEV3v9GdDJasQksHyD8v2 bbPa0BZIyGxleMpd00vnvGUxp4MgW/S0tqOuT2ndUrrIfCh8kBf3eeXpEP6yJUgJ taRc3upRSQfYdrVhi62Gk4APDovm5RqPrPW05O5tEPHu4i8mZyPn8nOJjHB7SIkl 01AoQRR5ABgqmzd2c8otlGGMcuH7gyV55rmzyKp8kSE7UwemTSGdB+jQLy0BHSzE /RhdnjDQytXLkZvQh6s+wEov5oq/IljmBT9Tsrl847J9oRuey8+RTRSePwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrZSH6C6DopR5nuDBFpoNS6blhWMB8GA1UdIwQY MBaAFKNtCuXi+//M4Idw68IMIWufv5SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt Y2JiOTUxODNiMjdhLzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh LzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKtcTtCIG nwtHtfk4UJwJTWfNgdHWAoDRlos+pA4s56x0H9U0MFXMraheR4mCtNAKeRwrAEtR rRhxXgYYTItnCYFqE25UTLYojnd4d30hVLjglDfrW9FjDcLIMW4LvXSrSJl0Vre6 IKuBpKC0Ky5nXeFC4tyiAP6GMwaAyO/KBuVVw3nakpcpSL2wBUF+NkyDm3Ee9OTV JV0ecox0yJfq+2Wj1PIHCsHUxTgzkQ25z46BqozI2+ye3uKHuXJCQbBGM7j+050T koAbbh19DTk1zQKMdlCZGvSexUfpR07l1cdOtGxQvGA00yXkbiReUJhT1CSsPJrI HXHtJhYIH8hyqw== -----END CERTIFICATE-----Generated at Sat Jun 28 21:38:07 2025 by rpki-client