$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft File: 1g9F98xLaR_UoxwfHAtPYF13pu8.mft (raw, json) Hash identifier: m92pSGDrIeV5SKUcqzi27trycg0r9eXKG8/mEBlsZu0= Subject key identifier: 1E:92:DB:0B:51:92:EC:13:A2:66:D0:89:08:90:1A:6A:52:5C:95:CD Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Certificate serial: 0197B632E47699CAA16128437C45FFA4A382 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft Manifest number: 15BE Signing time: Sat 28 Jun 2025 11:01:17 +0000 Manifest this update: Sat 28 Jun 2025 11:01:17 +0000 Manifest next update: Sun 29 Jun 2025 11:01:17 +0000 Files and hashes: 1: 1g9F98xLaR_UoxwfHAtPYF13pu8.crl (hash: gGMElmrp2p86Nr5Aisf1zNE9LtvTrJxbBV/uDeN0AeE=) 2: GMAT5cnP7VsDriW3_zL3dmojRH8.roa (hash: 9OZgqMWwoj0IlbvwNkLekurnPx7RT1aRlKGSPHOL6N4=) 3: IoE67Ac0pXcZcF9gBBC8VKka1vE.roa (hash: kt4XWZcgrYkLHsaAC2c2z5iyqyhmqC0zJwGvhSrnQ3E=) 4: MnG_2GzorHPsXNp5Vum7-rUjReY.roa (hash: D3z8cv+XlClqN6b2gc/ybPBfC33Ewbb6orbavaJ/jxk=) 5: PPMANDrLvF7lVgznicSOoAT3-3U.roa (hash: goEhx/poAjkzaQRi2RGACZSEuEQ6nJJ0p5PoSp7o6bo=) 6: b5u0PP2LUmpbpNJ4qAdIl3s9IjI.roa (hash: 4ZbWUTDO0hiozFSxacFGW2XCjTl1RPjd3yDPIUYji9M=) 7: jfxb2BR-CQiCSpU8DpDydbDz1b0.roa (hash: fObbuEbq3/zFmHWpgeQlp5JFopCYl+4GEGdq5exW77c=) 8: rrmPFSxVt5xEtowDvlnYGvxrH3s.roa (hash: mhHuydqllyBkMxNXx9HLabM7W+Fte6mEhiiQe0n8fRA=) 9: th1p5jE1fl21GfKXyCflURpVpo0.roa (hash: w4pXoPCT9slYbdDvFiyPewBrsldI3f9m6umM8Wv0SkE=) 10: viBgIC4abJYY7C__L2VefsiYSYI.roa (hash: r+Hi34v0Qt4A/ODVfo4uFHb77CXM38aMXnF2F0o4IcY=) 11: xNr5I0Wokl-j2aBAEkjZmpNRVng.roa (hash: epmYMuuR7FlxzNy/fvLKPn2AzgVlFDZhQf7tXXleECM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:32:e4:76:99:ca:a1:61:28:43:7c:45:ff:a4:a3:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Validity Not Before: Jun 28 11:01:17 2025 GMT Not After : Jun 29 11:01:17 2025 GMT Subject: CN=1e92db0b5192ec13a266d08908901a6a525c95cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f2:13:27:47:75:72:32:35:58:27:c9:a2:29: 58:c5:f0:f2:2f:69:0d:2a:46:51:96:0c:8d:28:81: 83:7e:ad:33:9e:b4:c0:e1:aa:5f:b2:d7:b8:2b:ce: e6:e2:5f:21:29:41:fb:30:dd:d6:9d:7f:ce:25:5b: 29:d0:1c:49:b4:2a:e9:31:07:90:43:85:67:0f:d1: a4:80:90:5b:55:b6:2b:fa:d6:5e:cc:e9:20:b2:ef: f6:f7:0d:2c:b9:0b:28:24:79:95:fe:e7:a7:40:ea: 3a:ff:0c:27:da:e1:c2:53:f2:51:33:ce:14:76:12: f9:37:97:44:34:7a:38:3b:fa:2b:e2:02:b4:72:f8: 55:f0:84:f0:e0:ca:9b:b0:cf:29:bb:64:9c:76:9e: 33:7d:47:5a:e3:6d:1a:c0:29:cb:20:c4:10:04:fb: 05:7e:10:46:4f:0a:5d:56:7b:5b:c7:51:60:61:39: cc:fe:e6:0c:91:e8:da:6a:f4:7e:d5:c9:5e:da:4b: 6f:27:82:47:b6:a0:71:b3:a8:64:02:62:d6:98:ab: a1:69:af:20:10:da:f4:78:f9:ec:fd:63:d1:e6:ff: 71:41:fa:bd:fe:89:75:b8:4a:1f:34:aa:46:fb:22: cd:25:43:b9:bb:9d:ed:49:fb:b4:c2:61:18:9c:69: c5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:92:DB:0B:51:92:EC:13:A2:66:D0:89:08:90:1A:6A:52:5C:95:CD X509v3 Authority Key Identifier: keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:7f:68:c7:a3:7f:03:ea:71:4b:f4:41:f3:7c:53:c0:cb:d0: e6:a7:07:43:33:19:43:7c:14:5f:51:24:b7:25:db:29:ce:3e: ea:af:60:83:8b:4b:be:35:78:92:4b:b1:63:fd:70:97:a2:a0: a1:38:52:65:ca:27:e8:58:e2:69:dc:d8:97:f1:2f:e6:f9:44: 00:30:bd:e6:eb:18:09:3d:f1:e7:3a:04:5e:e4:11:17:e5:5d: df:b3:15:85:df:9c:bc:94:bd:85:7d:42:35:20:da:de:0e:9e: 27:cd:f4:8a:ce:27:c0:6e:82:98:ce:a7:f1:95:a2:a8:7c:78: f4:7f:66:0e:c5:64:06:a6:0f:97:4d:f8:f5:ec:6a:2b:f5:fb: 9b:99:4e:8b:d8:80:ed:9a:ec:fc:69:f9:d1:00:56:64:63:c1: ce:1f:92:b9:11:89:b0:fe:a1:d5:f0:db:a7:9f:d0:7c:8c:95: 48:23:38:50:86:81:26:80:38:f8:60:a0:40:c5:d1:c5:94:68: 70:bd:7c:34:f1:df:b0:ac:8d:f3:1a:50:78:76:c4:58:6c:18: f9:99:09:0e:ae:28:74:ef:4b:8a:f2:7e:b5:e3:fe:10:9d:2c: 7b:f2:e2:ac:b0:a4:3c:82:bd:43:7e:67:22:f2:35:e7:7b:cc: a6:fa:1f:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2MuR2mcqhYShDfEX/pKOCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MGY0NWY3Y2M0YjY5MWZkNGEzMWMxZjFjMGI0ZjYwNWQ3 N2E2ZWYwHhcNMjUwNjI4MTEwMTE3WhcNMjUwNjI5MTEwMTE3WjAzMTEwLwYDVQQD EygxZTkyZGIwYjUxOTJlYzEzYTI2NmQwODkwODkwMWE2YTUyNWM5NWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/ITJ0d1cjI1WCfJoilYxfDyL2kN KkZRlgyNKIGDfq0znrTA4apfste4K87m4l8hKUH7MN3WnX/OJVsp0BxJtCrpMQeQ Q4VnD9GkgJBbVbYr+tZezOkgsu/29w0suQsoJHmV/uenQOo6/wwn2uHCU/JRM84U dhL5N5dENHo4O/or4gK0cvhV8ITw4MqbsM8pu2Scdp4zfUda420awCnLIMQQBPsF fhBGTwpdVntbx1FgYTnM/uYMkejaavR+1cle2ktvJ4JHtqBxs6hkAmLWmKuhaa8g ENr0ePns/WPR5v9xQfq9/ol1uEofNKpG+yLNJUO5u53tSfu0wmEYnGnFyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6S2wtRkuwTombQiQiQGmpSXJXNMB8GA1UdIwQY MBaAFNYPRffMS2kf1KMcHxwLT2Bdd6bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzkt YTk1NGQwNTM5OTRhLzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzktYTk1NGQwNTM5OTRh LzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU39ox6N/ A+pxS/RB83xTwMvQ5qcHQzMZQ3wUX1EktyXbKc4+6q9gg4tLvjV4kkuxY/1wl6Kg oThSZcon6FjiadzYl/Ev5vlEADC95usYCT3x5zoEXuQRF+Vd37MVhd+cvJS9hX1C NSDa3g6eJ830is4nwG6CmM6n8ZWiqHx49H9mDsVkBqYPl0349exqK/X7m5lOi9iA 7Zrs/Gn50QBWZGPBzh+SuRGJsP6h1fDbp5/QfIyVSCM4UIaBJoA4+GCgQMXRxZRo cL18NPHfsKyN8xpQeHbEWGwY+ZkJDq4odO9LivJ+teP+EJ0se/LirLCkPIK9Q35n IvI153vMpvofcg== -----END CERTIFICATE-----Generated at Sat Jun 28 19:07:33 2025 by rpki-client