$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft File: M8NCwGqsw1nTlDn_WN76jqGHV0g.mft (raw, json) Hash identifier: XXoBpDdr//YsZqxM1DsVggVZxkalu9r4uUyd0PUlrYE= Subject key identifier: CE:55:23:B8:A9:A4:E7:98:1E:2E:DC:E1:07:A3:9B:77:96:41:5A:04 Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748 Certificate serial: 0197B821488D561AF3B81FE02C5C6780F382 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft Manifest number: 15B6 Signing time: Sat 28 Jun 2025 20:01:18 +0000 Manifest this update: Sat 28 Jun 2025 20:01:18 +0000 Manifest next update: Sun 29 Jun 2025 20:01:18 +0000 Files and hashes: 1: 1-yS3aYPqpaClbUu2NxEJjasn11w.roa (hash: 5XgaEX1gVaWrfAm4eZoLyJtYysjnny395i7jpZsSAQY=) 2: 1_CHZT9QfuR7tsU-euaK767cklU.roa (hash: 63+eLT9Dw8Qs2m1cc8lHoIY3XMdIir76QzW85Og4v9M=) 3: 2_oHdZTLwl8Ni8dVchp52bQoBP8.roa (hash: 1IGeiz1Jq/CL3kqilbFu1/fy+mEjiI24ecXvvRj4kX4=) 4: 36PcBEuS0YaFeejxK9Rr2Qkonyg.roa (hash: crvn7STBSQ8hyIYObc7IEiRjwRLGGVAHLgb6Zwn91c8=) 5: 4CLeeil6rnYYbSXDioOdMRk-fu0.roa (hash: nA2tspg1OX/8GxIGauCnmSzDzS8p+XC3M6EwX+K2Zuc=) 6: 7Lq5thg4GVm1ghsW2nTmTfntl7Q.roa (hash: Cug0ydNU1zlYNhdljKnKemuyYIF9W9jlVIkuddLMlTQ=) 7: 7usS4n2wTmwQKN_FfLFrT2gzTes.roa (hash: rmvLzeLSfvnfViQvQG0evozZFVJcIY19+X8a4fI9x4Q=) 8: 8YSnvyCLvUiHNjAw1eWuFCNdk2c.roa (hash: PTMxJnzevVSgZNxZ+M3p3kXGLUbEbhxizVHAA+Gkp9w=) 9: DbP7K2VtNw3kapyPyuFvQE7JBSM.roa (hash: 2fzeTpuJWnP6/gv4fT9R5JKUn/1ALgN/OCuPkiMy+VY=) 10: M8NCwGqsw1nTlDn_WN76jqGHV0g.crl (hash: u/V2bdqO5nvuBK8427IMsudRJC8rb/jnWj7NKuT2fFk=) 11: PtdarDr91PAic9ExXEPtp5rDR90.roa (hash: pCWRE4xl0SCTzuH+d2oTniDVCc4UbcqvXbr0am8wd2E=) 12: XHw85hniBF8TOIktC8VH-K5Sz7M.roa (hash: Ea6SLJBNB8kXoImOZvy4ZtmOcm4IPMCnAht2m4dCzfQ=) 13: _Cb6FUCoQ03XQzWaAGVZCL11bhk.roa (hash: 7DHJ0ftYg5chCGMOY75jI68kzxP7FSC041EsKG1o0UA=) 14: hmKd6LubvseWFnch4vVN9v-GR6U.roa (hash: eqD+J0wg0iQNL4Cg+PT3/sHzu0dI9aBjTjQ//aaCFJQ=) 15: ixgQ7SiQi_wWeVAAXtTKU7XdZIk.roa (hash: 96bA0cNzp2CN/kCqbjKPaK+FRxIBqzNEUGIfvg5EFb4=) 16: qmxFyvD5jjibZjJM1ZLLs4anyDg.roa (hash: y/C7QUn/kfSJX+tk2XBXNZQ/E3dp0hw1Ap5O7ikQtfw=) 17: v9Lrt2SfuAlXzVot4u7KvPVgY2M.roa (hash: Y7iaJQnKOEgRwNsqfZadHFtG6v/ZxO1cSgSJLizeQ/g=) 18: vmLDD1TBTYG-hEjE6Ab3SFuTYs0.roa (hash: NyOwpcin3g/lVGCyaCZG0ziR33wb6JD1mwKtweMIjl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:21:48:8d:56:1a:f3:b8:1f:e0:2c:5c:67:80:f3:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748 Validity Not Before: Jun 28 20:01:18 2025 GMT Not After : Jun 29 20:01:18 2025 GMT Subject: CN=ce5523b8a9a4e7981e2edce107a39b7796415a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:58:b0:f1:cf:40:82:f9:d3:1f:2b:89:25:02: de:44:cc:d9:c9:11:a2:cb:3b:b1:be:89:8c:9a:47: 90:7f:d4:49:28:8f:a9:d9:1f:11:8a:8c:6b:5a:68: 5a:c6:bb:5b:a8:5d:22:5e:68:26:7f:7c:9b:c4:2b: b4:33:46:ed:f6:35:07:7f:23:f8:e8:52:81:f3:1f: 9a:60:be:55:28:01:ab:71:f2:85:e3:fa:f3:3d:3e: 38:fc:ea:31:5f:46:42:71:24:31:1d:8c:9a:36:b1: 40:32:40:cd:fc:ad:d0:a7:d7:e1:fe:d2:1d:c8:bd: e7:04:c4:09:b4:27:34:b8:f3:9d:6a:04:c8:bf:f9: 2d:d0:fb:40:6c:ba:74:f8:f9:d3:05:a6:58:fc:08: 60:7f:af:8d:e2:69:58:fc:3c:4d:32:01:a9:36:8b: 0e:84:88:2d:2a:73:e6:0b:3b:d3:be:ab:c0:08:60: 8d:40:73:97:71:9a:82:1f:a3:14:40:f1:cb:92:1a: cc:56:17:db:97:2a:09:33:52:e3:15:5c:01:7f:e7: db:36:41:89:2b:aa:f1:b4:26:42:b4:ac:43:7f:9a: 99:c8:94:82:88:3c:80:12:17:75:55:df:70:58:7b: 58:d4:42:d8:10:24:ea:84:e7:a8:47:30:6b:c5:42: 8a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:55:23:B8:A9:A4:E7:98:1E:2E:DC:E1:07:A3:9B:77:96:41:5A:04 X509v3 Authority Key Identifier: keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:87:18:6d:12:f3:5b:76:1f:f8:61:67:a4:f4:61:fd:d8:01: 45:7a:42:d6:1d:6f:c2:99:12:cd:c0:0e:46:88:f4:f1:51:bf: a5:46:6c:8d:3f:3b:15:90:82:00:28:c3:8a:82:13:e7:1b:74: 94:7f:da:10:6c:ce:f3:9f:03:38:8f:e4:aa:5b:2c:51:d9:13: 1e:7d:a0:7f:b3:f8:77:0d:8f:d1:44:b1:e9:05:cf:66:61:cc: b4:c3:8b:32:0d:01:6a:c0:72:2a:7c:37:6a:29:39:22:fd:23: a0:53:0a:a0:1a:fb:c0:d9:13:c9:da:23:88:65:ba:28:9e:2c: b1:f2:f3:ad:f3:4a:f1:b2:8e:3a:e5:e8:d9:01:7b:f4:ac:07: f7:7a:5e:67:fd:fb:79:0e:13:e6:7d:a8:6f:4d:35:5f:1f:b3: 05:f0:11:86:6e:51:39:b4:ea:10:28:02:7a:4a:3d:10:6c:ab: f1:ca:a6:4e:a1:7d:e6:e9:f2:29:6e:61:e2:0d:a4:eb:e1:ec: 72:2a:f2:ee:2b:a5:4f:65:cc:25:52:30:36:c3:e6:13:d5:de: 42:d1:a8:49:da:e7:22:45:1c:14:65:c7:f3:bc:88:bd:50:5f: 78:de:11:df:14:35:42:87:05:f2:7a:29:88:9f:f2:59:80:76: 2a:f3:04:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4IUiNVhrzuB/gLFxngPOCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYzM0MmMwNmFhY2MzNTlkMzk0MzlmZjU4ZGVmYThlYTE4 NzU3NDgwHhcNMjUwNjI4MjAwMTE4WhcNMjUwNjI5MjAwMTE4WjAzMTEwLwYDVQQD EyhjZTU1MjNiOGE5YTRlNzk4MWUyZWRjZTEwN2EzOWI3Nzk2NDE1YTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Viw8c9AgvnTHyuJJQLeRMzZyRGi yzuxvomMmkeQf9RJKI+p2R8RioxrWmhaxrtbqF0iXmgmf3ybxCu0M0bt9jUHfyP4 6FKB8x+aYL5VKAGrcfKF4/rzPT44/OoxX0ZCcSQxHYyaNrFAMkDN/K3Qp9fh/tId yL3nBMQJtCc0uPOdagTIv/kt0PtAbLp0+PnTBaZY/Ahgf6+N4mlY/DxNMgGpNosO hIgtKnPmCzvTvqvACGCNQHOXcZqCH6MUQPHLkhrMVhfblyoJM1LjFVwBf+fbNkGJ K6rxtCZCtKxDf5qZyJSCiDyAEhd1Vd9wWHtY1ELYECTqhOeoRzBrxUKK7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5VI7ippOeYHi7c4Qejm3eWQVoEMB8GA1UdIwQY MBaAFDPDQsBqrMNZ05Q5/1je+o6hh1dIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUt N2YyMzMzNjA0OTk3LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUtN2YyMzMzNjA0OTk3 LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIcYbRLz W3Yf+GFnpPRh/dgBRXpC1h1vwpkSzcAORoj08VG/pUZsjT87FZCCACjDioIT5xt0 lH/aEGzO858DOI/kqlssUdkTHn2gf7P4dw2P0USx6QXPZmHMtMOLMg0BasByKnw3 aik5Iv0joFMKoBr7wNkTydojiGW6KJ4ssfLzrfNK8bKOOuXo2QF79KwH93peZ/37 eQ4T5n2ob001Xx+zBfARhm5RObTqECgCeko9EGyr8cqmTqF95unyKW5h4g2k6+Hs ciry7iulT2XMJVIwNsPmE9XeQtGoSdrnIkUcFGXH87yIvVBfeN4R3xQ1QocF8nop iJ/yWYB2KvME2A== -----END CERTIFICATE-----Generated at Sat Jun 28 22:56:52 2025 by rpki-client