$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft File: h0v4BwzuQwXRo4npEPtRArvMGUE.mft (raw, json) Hash identifier: fRmXG3sP5cIpXFovjFZ5zRHYzBw5fqKggsiiNw5j7jI= Subject key identifier: 83:E7:06:48:20:44:89:B4:4F:33:2B:62:2A:9C:B6:A1:1A:69:8C:DA Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Certificate serial: 0197C3B787B9EA246DDEB6779AA5A65DFAD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft Manifest number: 0F4B Signing time: Tue 01 Jul 2025 02:01:14 +0000 Manifest this update: Tue 01 Jul 2025 02:01:14 +0000 Manifest next update: Wed 02 Jul 2025 02:01:14 +0000 Files and hashes: 1: 0OKEEKGhx09vrOl7RYzWo3_wxgQ.roa (hash: bVmqeltj/mUgRyI/UDd3qXuGmM6ZNTUv7NHdJ5Ecm14=) 2: 0na0952KGc1H37d43sfmQKJLL00.roa (hash: corUkZBv/wXf0UWamqTqW2vCXAO7jctIMZRyOPGvfMc=) 3: 0nyuKNwkHdjNx58vqjYZWHgdk04.roa (hash: IJwrVyR1/3bxuDIXcjl0pqsWJYg81ab8+TgzpFzMgak=) 4: 50gtoTdhN9nO756-F4DP2ztZ9co.roa (hash: PoNPNVOdbr6ZQt1a8yzQyLs5SXzvoUcV/tLE/CbCBRA=) 5: 5WW9l5SbU7Xc5dzcJPOjnh-Ti1k.roa (hash: 2mR14FDC49JE9sKTdrARapGEl+mL/ykOGzFFu5F/fQM=) 6: GPQpLDssO6fTD1dGaJR05RFssa4.roa (hash: fp71tS0Tf+vhKpm3TY4BWXK7QdJ3Wg7DCBdUoQ7F5lg=) 7: J9C16lcx8PgyurfKUP9kuPkC8qk.roa (hash: FgZNOU0gXFenPcB6tHkqCpKLWPVhc0a8myZew2TEgCo=) 8: LumIDmC9KaTmO5EmvKNIDB_MJ6I.roa (hash: T1v6ldOgSnHm0ILMw4lezNqfO7yaUlFFJv2DMeUijuQ=) 9: VvF4Vi4FweHBoF6fwzvWsqkmd1g.roa (hash: 0iNsEJDKXYV/LCkoqqh7O11YVgjXO/OY9nxGaKpwAV8=) 10: h0v4BwzuQwXRo4npEPtRArvMGUE.crl (hash: DQ1ovuZzmz/RPj3YLepf+lkP3TSYnGpjUKx/z5BzqgY=) 11: vevN_FQh1oLDczAFJHEKh5hEOxE.roa (hash: T6+n5imfk+pQSeT5Osi01ihP8snYGAynnv1xpTuEaoU=) 12: xER0K9I9xK8DBLC6KDcI75JR9LY.roa (hash: OqOr60qixfUKi1rv4+JZ/v9458y498eM0Dbfd2dxyz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Jul 2025 23:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:c3:b7:87:b9:ea:24:6d:de:b6:77:9a:a5:a6:5d:fa:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Validity Not Before: Jul 1 02:01:14 2025 GMT Not After : Jul 2 02:01:14 2025 GMT Subject: CN=83e70648204489b44f332b622a9cb6a11a698cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ca:3b:fd:41:e4:48:f6:7e:bf:8f:67:1b:6e: 16:90:89:06:ab:bb:c2:d6:ad:7a:dc:88:70:ce:20: c9:85:9f:3f:04:d8:d4:ce:f6:4e:da:dc:f0:6e:65: 0c:8d:53:2e:a8:e8:f0:86:1c:49:6b:29:eb:45:b7: bd:d8:0c:8f:dc:a7:11:47:09:95:a2:28:99:f4:ca: 62:74:8b:f0:4d:1b:1d:6e:b3:ef:a3:ad:f2:54:79: db:17:2e:af:45:ff:7a:3e:5c:27:89:79:2c:01:fd: 15:05:9e:a2:5a:bc:4b:ca:15:58:de:39:03:56:09: 9a:86:48:ef:0b:07:33:67:a0:28:cc:25:94:18:96: 99:70:3f:78:1d:b9:16:78:77:ce:cd:91:ed:72:da: 7b:a6:ab:cf:d8:f1:23:6d:d7:d9:99:46:a0:8a:35: bd:42:d7:23:c4:79:7d:d1:c0:37:43:4a:bd:8b:95: b3:a9:ec:79:58:aa:cd:81:e4:75:39:65:92:c1:39: 8a:46:74:b0:fe:b1:29:6d:67:58:16:12:83:2c:6d: d1:ee:e4:13:65:2e:fa:b7:5a:26:90:ec:7f:e1:38: c4:7b:c9:d0:8c:e0:7d:b7:07:6d:fc:97:bf:5c:92: e8:28:60:3c:46:7d:28:39:7d:4c:36:d2:16:54:c7: 74:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E7:06:48:20:44:89:B4:4F:33:2B:62:2A:9C:B6:A1:1A:69:8C:DA X509v3 Authority Key Identifier: keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:19:de:1f:dc:a9:98:3f:d7:39:45:f0:86:d0:bd:23:87:e6: 31:c6:88:77:98:97:91:12:09:48:10:27:6c:3b:ab:f7:bd:fb: a4:1d:57:47:97:2f:b7:72:22:30:4b:66:6b:08:8a:d1:65:78: e9:21:86:cc:0e:8e:3f:ab:90:b5:20:91:80:f8:f8:d2:a4:d1: b0:32:7f:be:a0:16:f6:6f:ca:f6:bf:db:14:f3:16:54:52:8b: 7f:d4:cd:63:35:03:dd:b0:2e:c3:ce:ef:ef:14:8d:a8:90:60: 06:62:10:ed:b7:9e:e8:66:8c:97:3f:74:8b:36:4a:79:d2:1c: 73:c0:9d:aa:83:c3:25:61:34:14:4f:e5:71:45:66:bc:22:a4: 0d:20:8a:ef:3d:29:59:88:b7:64:33:13:90:bd:f2:d7:90:11: 37:22:25:7a:e6:65:4d:01:a4:47:fa:97:ca:25:26:71:dd:a5: 6b:eb:ed:58:1d:48:ae:7a:07:ad:13:61:6b:52:b2:7f:17:87: f5:ab:48:03:15:14:1b:3e:ac:67:e1:6b:ec:6c:d4:8a:4d:ec: 78:e4:4f:27:24:32:9e:4f:93:29:1b:e9:5e:97:81:37:56:19: ae:c9:28:8f:2e:14:d4:b2:b8:7a:93:97:82:6a:ee:8a:82:cf: 0b:eb:14:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfDt4e56iRt3rZ3mqWmXfrYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj YzE5NDEwHhcNMjUwNzAxMDIwMTE0WhcNMjUwNzAyMDIwMTE0WjAzMTEwLwYDVQQD Eyg4M2U3MDY0ODIwNDQ4OWI0NGYzMzJiNjIyYTljYjZhMTFhNjk4Y2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1so7/UHkSPZ+v49nG24WkIkGq7vC 1q163IhwziDJhZ8/BNjUzvZO2tzwbmUMjVMuqOjwhhxJaynrRbe92AyP3KcRRwmV oiiZ9MpidIvwTRsdbrPvo63yVHnbFy6vRf96PlwniXksAf0VBZ6iWrxLyhVY3jkD VgmahkjvCwczZ6AozCWUGJaZcD94HbkWeHfOzZHtctp7pqvP2PEjbdfZmUagijW9 QtcjxHl90cA3Q0q9i5Wzqex5WKrNgeR1OWWSwTmKRnSw/rEpbWdYFhKDLG3R7uQT ZS76t1omkOx/4TjEe8nQjOB9twdt/Je/XJLoKGA8Rn0oOX1MNtIWVMd0OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIPnBkggRIm0TzMrYiqctqEaaYzaMB8GA1UdIwQY MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt NmZlNGQ4ZmVkMTYwLzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHBneH9yp mD/XOUXwhtC9I4fmMcaId5iXkRIJSBAnbDur9737pB1XR5cvt3IiMEtmawiK0WV4 6SGGzA6OP6uQtSCRgPj40qTRsDJ/vqAW9m/K9r/bFPMWVFKLf9TNYzUD3bAuw87v 7xSNqJBgBmIQ7bee6GaMlz90izZKedIcc8CdqoPDJWE0FE/lcUVmvCKkDSCK7z0p WYi3ZDMTkL3y15ARNyIleuZlTQGkR/qXyiUmcd2la+vtWB1IrnoHrRNha1KyfxeH 9atIAxUUGz6sZ+Fr7GzUik3seORPJyQynk+TKRvpXpeBN1YZrskojy4U1LK4epOX gmruioLPC+sUVg== -----END CERTIFICATE-----Generated at Tue Jul 1 07:03:53 2025 by rpki-client