$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft File: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft (raw, json) Hash identifier: KLZEJdTT2QPKiJ9zNzWJu7Ttnpbvde0LyaSYzP6+1mY= Subject key identifier: 52:F1:C9:58:72:EF:2E:A4:E3:97:42:AA:43:3B:F3:10:4F:CC:E0:FA Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Certificate serial: 0197B70E9281675988B102F3080365C22617 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft Manifest number: 0AB5 Signing time: Sat 28 Jun 2025 15:01:14 +0000 Manifest this update: Sat 28 Jun 2025 15:01:14 +0000 Manifest next update: Sun 29 Jun 2025 15:01:14 +0000 Files and hashes: 1: 2m_CYVmLsPzF7bcN6vIid84YZD8.roa (hash: LBmz6BkcC+hYAgg9NpyTpTiVYvW2FI/a+Z33OiNH3bM=) 2: 4nVbm_9mW8-MAn0I_kGjdBfxhVw.roa (hash: pTL9FLQm2ArdSOx4IvTJl5dYC4wcCTYCswuw3GEGHMQ=) 3: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl (hash: UMWUo2rVXWqiGLm2EmiwMJDSrtxaON0wUGxCe/hkREU=) 4: ASUGNfdEr-zmHuBMKbmczWEEyX0.roa (hash: XbBf6Nfds25faGeda9A9EZrA0jUpRsOTRIO73TfrGdU=) 5: D_RGKNjU3HO1804H_N4lL39f8xU.roa (hash: lQxsMyLpAGFJHo/y+xtaq8v1/ZEVry9ym0LdrZC/Bgk=) 6: Di4BCmfwCebJmpiiwQVl8kD1SGY.roa (hash: YROnCwrXQNQ5Na/T+Qstm6PeSLYo1KpF7+7yHOQYHZY=) 7: GPFpap7M0DbSFtJBpaKp67RfOgs.roa (hash: 6C0EKVC4/wJ0awCJ51hmh22riQaO8QV9e+LjKWFhq3o=) 8: IrnZpWugwiVaDWE0Y8y2HTk6myM.roa (hash: hz4dzGEJlp9nAI/PksWqX4be/cNB9cFXoUk0RTppUW4=) 9: UPL7qImi1Ys3kJpNeUneyjua3iE.roa (hash: yEbc7GI9w/HHKG7S49YH0IbZWjyzBWFPN0Ij4so55ao=) 10: Wqi1dLZsHvoMXUpSlZaZNHPgS_4.roa (hash: uMbe0TM0fIuYtnHf63Llp9sJ+CZVXJ/tOzlQU2AOjts=) 11: gqYJ1QlxZp2sfbvxF5yVPiDZ3Dk.roa (hash: +mkHl1F4HLXN9PfWQktZtYiROfsgXfptEmlNuP4F0GM=) 12: hrJ9G8LdPfpuv4HEnlrj0UM1FZI.roa (hash: Ap/wGOk300z33ESWLkwykljx6YcmZDQ+kuaPYGOBuOE=) 13: ip51KpcMdfOcRWLVf2HbT1-y1Tk.roa (hash: w96a29aqdZpAZsW1TalxljppYBFpY8XCQQF21I+O+bg=) 14: qOKY-IzakK8b3r-fGGAM7SuFUFM.roa (hash: 0xmS3lTVgR47MEU89O0ODLmZ+nEhlRcq1hkGVTaLD7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:0e:92:81:67:59:88:b1:02:f3:08:03:65:c2:26:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Validity Not Before: Jun 28 15:01:14 2025 GMT Not After : Jun 29 15:01:14 2025 GMT Subject: CN=52f1c95872ef2ea4e39742aa433bf3104fcce0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:23:8d:6f:60:d6:ef:30:aa:6c:19:17:ba:ac: ba:06:ef:5a:5f:ee:1a:05:90:f1:48:e4:3d:a2:18: 24:70:f1:e8:7b:8e:c8:a1:cb:5a:81:7b:fa:1f:41: 90:39:c7:93:84:af:31:55:1b:27:a0:f8:5f:c7:fb: 8f:51:70:5c:0e:34:76:e8:cc:9c:b9:3a:91:6a:93: 25:f4:56:1d:0d:3b:54:30:f1:df:af:79:5f:cf:7e: bf:49:47:9c:55:3d:e4:f6:44:08:0e:14:71:aa:e5: 14:7f:b9:3b:c4:e3:94:71:d3:c8:2b:3d:3a:97:a8: ae:e2:35:0b:c7:76:1a:ce:c4:fc:66:9e:e0:f2:48: ac:26:2d:d8:54:d2:53:93:e5:4e:d1:5c:c0:04:cf: 0e:8c:e5:6c:0e:3f:4d:23:03:33:4e:85:c5:e2:43: e4:b5:d2:6c:87:fd:dd:2e:1c:2a:82:fe:60:81:11: a6:d5:25:bb:d5:1a:cb:40:fc:c7:bf:c4:28:f2:25: 75:d4:93:96:ee:02:cb:8c:f1:02:fa:f9:62:cc:74: 60:f4:97:91:17:3a:26:34:23:37:8c:ed:e7:f0:6c: d1:f8:dd:59:85:aa:6e:b3:7e:95:1e:1a:1c:a0:00: 33:c0:5f:ba:cd:7d:58:17:a7:31:38:eb:ad:5d:a0: f7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F1:C9:58:72:EF:2E:A4:E3:97:42:AA:43:3B:F3:10:4F:CC:E0:FA X509v3 Authority Key Identifier: keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:34:ed:4a:96:7c:9a:fd:f3:dd:d3:a5:76:84:83:3d:35:d4: 4c:f7:a3:9b:ea:22:a2:09:67:50:b7:76:80:4a:27:8b:4d:bf: 19:16:66:d1:89:ef:89:0c:34:57:e1:84:e4:81:22:62:7c:f2: ad:65:eb:b5:94:e8:2b:0d:1a:b6:bb:40:b6:c4:ef:69:4a:10: 91:1b:9f:a6:81:06:fe:82:e7:10:bc:df:e2:e6:06:d7:2b:1d: e9:01:38:2c:9e:fd:71:5b:d0:a8:d8:73:3e:23:dd:c0:98:fd: 81:df:30:d0:ba:25:5f:29:b2:ff:a7:1d:78:91:37:2b:89:7a: 9e:43:a6:49:94:1b:35:af:d5:77:b3:dd:86:9f:d7:3c:34:2a: d5:24:e7:2a:6a:d4:5e:b9:4d:97:dd:e1:fe:1e:47:5f:ff:b9: 90:81:1f:b5:55:ff:d0:5f:d7:15:c9:f1:56:07:47:2a:4c:c9: 69:27:e8:c4:0e:c9:1b:ab:da:c7:29:76:c1:cb:c3:aa:e9:70: 38:3e:16:f4:b9:fa:ca:54:32:ef:35:84:0e:e9:27:92:57:de: 64:03:a8:0d:f8:a4:12:c6:de:ca:df:d3:6d:fb:35:1d:53:92: ef:a2:fe:05:73:2a:6c:0e:64:54:01:7e:bc:06:4c:13:7b:04: cd:0b:23:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3DpKBZ1mIsQLzCANlwiYXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh N2IwYmEwHhcNMjUwNjI4MTUwMTE0WhcNMjUwNjI5MTUwMTE0WjAzMTEwLwYDVQQD Eyg1MmYxYzk1ODcyZWYyZWE0ZTM5NzQyYWE0MzNiZjMxMDRmY2NlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSONb2DW7zCqbBkXuqy6Bu9aX+4a BZDxSOQ9ohgkcPHoe47IoctagXv6H0GQOceThK8xVRsnoPhfx/uPUXBcDjR26Myc uTqRapMl9FYdDTtUMPHfr3lfz36/SUecVT3k9kQIDhRxquUUf7k7xOOUcdPIKz06 l6iu4jULx3YazsT8Zp7g8kisJi3YVNJTk+VO0VzABM8OjOVsDj9NIwMzToXF4kPk tdJsh/3dLhwqgv5ggRGm1SW71RrLQPzHv8Qo8iV11JOW7gLLjPEC+vlizHRg9JeR FzomNCM3jO3n8GzR+N1Zhapus36VHhocoAAzwF+6zX1YF6cxOOutXaD3YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLxyVhy7y6k45dCqkM78xBPzOD6MB8GA1UdIwQY MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt ZGZiZmEzZmNmMDIxLzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAejTtSpZ8 mv3z3dOldoSDPTXUTPejm+oioglnULd2gEoni02/GRZm0YnviQw0V+GE5IEiYnzy rWXrtZToKw0atrtAtsTvaUoQkRufpoEG/oLnELzf4uYG1ysd6QE4LJ79cVvQqNhz PiPdwJj9gd8w0LolXymy/6cdeJE3K4l6nkOmSZQbNa/Vd7Pdhp/XPDQq1STnKmrU XrlNl93h/h5HX/+5kIEftVX/0F/XFcnxVgdHKkzJaSfoxA7JG6vaxyl2wcvDqulw OD4W9Ln6ylQy7zWEDuknklfeZAOoDfikEsbeyt/Tbfs1HVOS76L+BXMqbA5kVAF+ vAZME3sEzQsjEA== -----END CERTIFICATE-----Generated at Sat Jun 28 22:51:20 2025 by rpki-client