$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft File: V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft (raw, json) Hash identifier: EO1+i3O/UcBNcOXCyJOb2WbVMsrTNDQsWq4Nv8k5aSk= Subject key identifier: D1:B3:26:45:BF:64:50:AF:71:41:5D:AE:1D:95:F6:7D:C3:9F:A5:39 Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47 Certificate serial: 0197B6A0B68985DC3ED6E06F7DFD4B232DD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft Manifest number: 11A8 Signing time: Sat 28 Jun 2025 13:01:15 +0000 Manifest this update: Sat 28 Jun 2025 13:01:15 +0000 Manifest next update: Sun 29 Jun 2025 13:01:15 +0000 Files and hashes: 1: 1-2ze8RFqsfXiBAT11ime5104BjY.roa (hash: 1G/91kNwXr6Euhuawe1vb8XkKyyCivckcaN+MUB7G0c=) 2: 5lDpUUbHXzya0fMquFYbFulqqVs.roa (hash: f1hht89a/wconxQu5KNK8QHufJfhYi0HFOvBnekJIq0=) 3: FHAcQ1hSwnBkPa_1eYwrasvDBAI.roa (hash: UEqpRdrSw3UNWb3wNwi2VW+eLR/IeGW0ScqzLsmeYpU=) 4: FeD_-2NSvz_oTh1LHrP44NqzWIo.roa (hash: M0rfgf8nLa/Z7WmSdsaO8N+Wk6yxPhPTCcsAwupLmJk=) 5: G0XtWDoXmf3g4WPOe4oJBWwD53c.roa (hash: ah5ed8JgyczAK0ktQp/XfJNbJde2PQoHxbYeBWCDQq0=) 6: HlClfikOJrfktj0svDKphR0_6Ic.roa (hash: g1qw7C3eBB8cA1eir2ZaMGGhWvD9jq2Y2uAjecDMYHM=) 7: JHZeQoZfAbaLUlrZmCxtZ1ApkWo.roa (hash: +VPqWsWngmfKHIzBC3GFe6m9tn9RXpVp3jH9A+hxoC0=) 8: LXaOacmSywqNlfh5CO5J1YXXGmI.roa (hash: jtQHK2Bwk3+TO9AZet3mFNI8IuZDJg2fZaIIhEkYoQM=) 9: OXCR5eZAjAKFe_5_WqZvsLDsIGw.roa (hash: +dX5GIlPaHoX8hOklKsClO3JcTsDNTNWJiq3yrlcruo=) 10: V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl (hash: IFhwLbEi93puKxnU83JnCzTZl6lAxoQVpV64UqJ2umQ=) 11: Xdc1GXsEPiQ6GE6eHjFDA0ZgS3w.roa (hash: OE+tVEQ0oQcFP5VxqAmEpxiSoF7RE792pp1YSKmB2O0=) 12: ctU4FIR-r7525NdQcQhV07S1InU.roa (hash: AU7Mc04mkVMs25EZU4CCsCrYPVp1VtWzfOi9wTwg8to=) 13: ftQ60SsjWVubYA-VxNEHamWbBek.roa (hash: jmvMdMMJCzUDXr3r5E5qmHQUJ9DFMdQTkl3lYF+bB84=) 14: s6UOiaPwRDDgS4GdUQJjrNxDCkA.roa (hash: MfReyFTsbPeeVwKX4SeLCT5vdQejZ0/27SaFtWWlLKo=) 15: valOsPAluNa3RG5X659q6dsU_FA.roa (hash: fkBC+Rvf3Gv+oy6BC36LsnU6WeruMquhW06fi/seA5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 13:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:a0:b6:89:85:dc:3e:d6:e0:6f:7d:fd:4b:23:2d:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47 Validity Not Before: Jun 28 13:01:15 2025 GMT Not After : Jun 29 13:01:15 2025 GMT Subject: CN=d1b32645bf6450af71415dae1d95f67dc39fa539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0b:a0:2e:dd:93:68:f9:67:66:f6:5a:dc:64: 76:ab:e9:ef:e3:60:0a:8f:a2:c6:ea:e4:b8:bf:1a: 13:8a:b0:8a:21:68:b0:33:8b:be:2b:fb:89:d0:4f: 45:f7:3a:63:70:53:5a:56:55:44:a7:44:0d:78:df: df:52:81:84:58:d2:bf:f5:ed:0e:e1:fe:3c:67:81: af:33:35:b7:43:1b:80:1c:69:02:3c:3d:fb:50:38: d5:06:37:f8:84:f9:72:84:79:e8:6d:c3:09:91:e7: 5b:21:dc:de:2e:17:fb:c8:ce:8e:d1:9b:6a:6a:4c: 8e:a5:af:5c:69:13:e0:73:4e:40:2b:06:4c:d2:70: 5c:83:61:68:b6:8f:3f:fe:db:4e:0a:5f:73:b1:68: 05:fb:fa:e4:78:3d:42:e1:1d:61:92:1e:16:2e:c9: 16:8d:c7:ac:b5:8b:03:1d:f1:92:06:6d:35:45:f6: f5:1f:41:4f:b8:01:7e:7c:8c:96:0f:75:d8:d6:81: 57:ca:83:df:07:f2:01:d0:c3:a1:1e:1c:33:7f:c5: 96:c7:47:8d:08:f8:57:57:39:b2:b2:f9:97:54:d9: 04:1f:e7:f5:17:5a:4a:9c:c3:d3:b2:e5:09:ff:7e: 0f:e5:55:a8:4a:3c:50:1d:14:27:6e:6f:8a:ee:8a: a2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B3:26:45:BF:64:50:AF:71:41:5D:AE:1D:95:F6:7D:C3:9F:A5:39 X509v3 Authority Key Identifier: keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:f3:27:00:9b:03:77:2d:29:dd:fd:37:db:f3:7d:2a:34:58: d1:a8:74:ac:03:d5:92:7b:22:24:84:da:d3:bb:70:83:de:14: fe:ea:2d:b4:8e:56:d1:39:57:61:e2:a6:d2:bc:06:30:41:df: 0e:56:b1:75:a6:8c:c0:32:d9:e5:75:62:48:f7:11:c6:7a:81: 54:8c:3f:c9:bb:44:09:cd:ae:ea:6f:a8:d8:fb:ec:d0:7d:38: 05:77:76:08:b5:bd:9c:6b:ae:fa:90:e0:29:95:31:da:98:d1: 62:c4:b3:2a:16:49:22:43:bf:21:b6:b5:fb:4a:23:df:53:ad: 25:8c:65:56:29:61:a0:a5:3e:d5:8d:1f:91:ce:b1:76:3c:8b: c7:d9:80:29:03:ed:dd:1a:42:3e:3a:13:13:b7:c6:50:c2:46: 2c:06:6d:16:24:fd:88:c5:bf:1f:ba:13:e8:90:e4:19:a4:4e: 8d:c9:c6:21:8e:9c:9c:c5:b7:91:b6:28:18:b8:11:cf:c2:2e: 83:46:d0:d4:27:2d:15:99:7e:18:07:42:a2:22:a4:16:09:f8: 5a:f0:df:74:f4:24:cf:d7:35:94:2b:97:8b:08:57:e9:1f:09: 59:21:11:db:e4:14:b4:87:e7:eb:01:ef:8a:57:d1:71:48:ac: ff:5d:82:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2oLaJhdw+1uBvff1LIy3VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1 MzhkNDcwHhcNMjUwNjI4MTMwMTE1WhcNMjUwNjI5MTMwMTE1WjAzMTEwLwYDVQQD EyhkMWIzMjY0NWJmNjQ1MGFmNzE0MTVkYWUxZDk1ZjY3ZGMzOWZhNTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wugLt2TaPlnZvZa3GR2q+nv42AK j6LG6uS4vxoTirCKIWiwM4u+K/uJ0E9F9zpjcFNaVlVEp0QNeN/fUoGEWNK/9e0O 4f48Z4GvMzW3QxuAHGkCPD37UDjVBjf4hPlyhHnobcMJkedbIdzeLhf7yM6O0Ztq akyOpa9caRPgc05AKwZM0nBcg2Foto8//ttOCl9zsWgF+/rkeD1C4R1hkh4WLskW jcestYsDHfGSBm01Rfb1H0FPuAF+fIyWD3XY1oFXyoPfB/IB0MOhHhwzf8WWx0eN CPhXVzmysvmXVNkEH+f1F1pKnMPTsuUJ/34P5VWoSjxQHRQnbm+K7oqiAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGzJkW/ZFCvcUFdrh2V9n3Dn6U5MB8GA1UdIwQY MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It MWVkMTA5NTRiZDk2LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2 LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKfMnAJsD dy0p3f032/N9KjRY0ah0rAPVknsiJITa07twg94U/uottI5W0TlXYeKm0rwGMEHf DlaxdaaMwDLZ5XViSPcRxnqBVIw/ybtECc2u6m+o2Pvs0H04BXd2CLW9nGuu+pDg KZUx2pjRYsSzKhZJIkO/Iba1+0oj31OtJYxlVilhoKU+1Y0fkc6xdjyLx9mAKQPt 3RpCPjoTE7fGUMJGLAZtFiT9iMW/H7oT6JDkGaROjcnGIY6cnMW3kbYoGLgRz8Iu g0bQ1CctFZl+GAdCoiKkFgn4WvDfdPQkz9c1lCuXiwhX6R8JWSER2+QUtIfn6wHv ilfRcUis/12C/g== -----END CERTIFICATE-----Generated at Sat Jun 28 22:23:50 2025 by rpki-client