$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft File: KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json) Hash identifier: /Qdh4SpJuC2fkgG8X+L1eIL3Oi4Eq4eb+bT1mT9az8s= Subject key identifier: 04:71:3D:4A:2C:82:9D:88:F5:60:87:48:1A:10:43:67:31:02:C2:F8 Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce Certificate serial: 0197B6A1B45F3414039DBDDCF61A2627B9C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft Manifest number: 1206 Signing time: Sat 28 Jun 2025 13:02:20 +0000 Manifest this update: Sat 28 Jun 2025 13:02:20 +0000 Manifest next update: Sun 29 Jun 2025 13:02:20 +0000 Files and hashes: 1: 1ovUioPSRpwIq2x5dlTtKSWuJt4.roa (hash: glwS98kItQ5aoRJZQt2/p+Tl6Vu2+KBQ6fnWyRCpxeE=) 2: 5ukXNC3ufs5Ifk5kp-hI7U2U8bk.roa (hash: 7ZgXZStDcuyKQtO7JFrlQRnqUqaRLXXlsW/IZ58nkBY=) 3: 6RkSnq1YobTmQ_SgAx2wlTkM2hY.roa (hash: Qt/KZiThTuHL2rOKsl4Ng5FOwbzizcKz0/dUQrpTSQc=) 4: B5wkeGWZjqgz1y_Wsk4MaKTCZiQ.roa (hash: ygucH/c6MgSrKR9IgUN2NMGsbIDgc3W5HpOJEaJUGPw=) 5: BXsWIMS27-emUbxg3N856ta0Zhs.roa (hash: VLEvZClMBOllgwcFIEd17EnHHY/+y56YDL+ioA9gy2o=) 6: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: LkUu/2QkW6mpcXciUqBQiM7J8OpQC7ZMgCuYqNCZksE=) 7: YCe-DX5vspCo53n_t9ku3ipwr0c.roa (hash: bsw052ayicKeBY1zBDEewyIk2nJP8d+tgqf/wW7oirc=) 8: i4f1t__SHD-QTSI70hcDe0-iLuE.roa (hash: x5mSq7hcGWnjVGsMlKR9T5XBSWXyZ8MGhLOD1IalJyI=) 9: nlwD__Rr_Kz3vDBdg3j2YS8w3UU.roa (hash: oYim5zXBclNnekk/jArnYzaiEFQpBbNaF9nzqE+fJWU=) 10: t_T_n2rHgRaUg9w286JLApHuPsY.roa (hash: Xw7YLCCdVoaSNcuVfBLtogrNakQDxTgFieuFH7n8sSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 13:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:a1:b4:5f:34:14:03:9d:bd:dc:f6:1a:26:27:b9:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce Validity Not Before: Jun 28 13:02:20 2025 GMT Not After : Jun 29 13:02:20 2025 GMT Subject: CN=04713d4a2c829d88f56087481a1043673102c2f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:37:33:97:bc:87:d1:ad:4a:44:c8:47:36:28: 3a:d9:e3:e4:74:16:ff:79:8c:50:5f:fa:9d:ca:ea: b0:d1:fb:87:0a:3f:49:19:98:ae:1e:19:f5:e4:07: 1d:6e:d3:75:b7:75:d9:8d:7a:33:fe:f5:83:2d:4f: dd:c9:20:fe:67:5b:fe:65:d3:cb:e0:c3:06:db:48: f8:a3:26:23:9f:25:33:63:9b:90:6b:d5:5d:f4:a1: b0:23:87:f0:8e:b7:97:b5:1b:47:6e:55:df:7d:94: 00:84:88:2c:a6:c1:7e:e0:47:7c:97:2f:39:38:1a: 23:be:19:ac:24:a5:7d:db:e3:fb:96:9c:12:a4:a7: 42:e4:65:76:ea:fe:80:b6:b7:3e:4b:da:08:19:56: fd:d9:c1:56:b5:4b:7f:23:25:9f:e4:3a:53:da:80: f2:a3:21:e4:27:60:99:b9:27:ae:78:30:b5:0b:bd: 01:26:bb:14:3b:32:8c:ad:93:07:35:be:05:3b:cc: 1f:a9:b2:e4:3c:cb:31:08:c7:a0:80:88:b6:31:b1: a2:3b:a0:66:2f:57:06:6f:c7:f9:36:46:1e:73:e5: da:b1:3d:13:1e:50:65:08:e8:a6:60:d8:4a:64:94: f6:ad:b5:00:8c:5d:d5:08:45:40:51:b1:ff:0b:2e: 0c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:71:3D:4A:2C:82:9D:88:F5:60:87:48:1A:10:43:67:31:02:C2:F8 X509v3 Authority Key Identifier: keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:17:04:d7:91:70:36:15:24:bc:aa:33:76:7f:32:77:26:06: 36:4b:1a:62:85:3b:0d:52:75:f0:f6:68:2f:d8:0b:e6:fe:9f: e1:e5:a3:0f:73:0b:5b:89:bc:b7:a4:62:de:34:16:8b:fa:5c: c9:52:80:ea:38:3e:dc:17:75:11:a4:a8:04:f6:ee:83:d1:09: b6:ed:d0:b7:ef:28:11:9d:d6:97:11:04:ee:3d:50:27:c1:38: f7:70:e6:32:25:2a:6e:c6:5e:33:c1:34:0e:0a:4f:d1:53:8c: 01:00:b2:b2:eb:db:fc:3e:69:6a:9f:d0:a7:29:07:19:f7:19: 65:e3:e7:65:de:ca:1d:ee:05:a8:a5:31:5f:05:23:57:ae:3f: 92:06:6e:77:99:c3:e7:73:8a:1b:99:38:5c:a1:1c:b0:be:47: 71:3c:df:d1:1e:92:26:5d:be:a4:48:a4:16:58:5e:ac:8d:68: 7f:7d:b6:d4:98:68:d4:1b:6b:2e:50:48:cd:30:a4:e2:01:2e: c4:7b:df:9d:b2:70:28:45:28:ba:64:cc:4d:78:2b:56:b0:79: c0:7f:6c:64:41:61:0d:ff:b3:2d:6d:ed:34:69:b5:7a:f1:b9: df:84:c8:5a:6e:35:06:b7:af:d9:f4:59:f6:5f:2b:00:76:67: 00:9f:da:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2obRfNBQDnb3c9homJ7nFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi ZTU3Y2UwHhcNMjUwNjI4MTMwMjIwWhcNMjUwNjI5MTMwMjIwWjAzMTEwLwYDVQQD EygwNDcxM2Q0YTJjODI5ZDg4ZjU2MDg3NDgxYTEwNDM2NzMxMDJjMmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjczl7yH0a1KRMhHNig62ePkdBb/ eYxQX/qdyuqw0fuHCj9JGZiuHhn15AcdbtN1t3XZjXoz/vWDLU/dySD+Z1v+ZdPL 4MMG20j4oyYjnyUzY5uQa9Vd9KGwI4fwjreXtRtHblXffZQAhIgspsF+4Ed8ly85 OBojvhmsJKV92+P7lpwSpKdC5GV26v6Atrc+S9oIGVb92cFWtUt/IyWf5DpT2oDy oyHkJ2CZuSeueDC1C70BJrsUOzKMrZMHNb4FO8wfqbLkPMsxCMeggIi2MbGiO6Bm L1cGb8f5NkYec+XasT0THlBlCOimYNhKZJT2rbUAjF3VCEVAUbH/Cy4M3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARxPUosgp2I9WCHSBoQQ2cxAsL4MB8GA1UdIwQY MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt MjdjMWEzNTk3NmRlLzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhcE15Fw NhUkvKozdn8ydyYGNksaYoU7DVJ18PZoL9gL5v6f4eWjD3MLW4m8t6Ri3jQWi/pc yVKA6jg+3Bd1EaSoBPbug9EJtu3Qt+8oEZ3WlxEE7j1QJ8E493DmMiUqbsZeM8E0 DgpP0VOMAQCysuvb/D5pap/QpykHGfcZZePnZd7KHe4FqKUxXwUjV64/kgZud5nD 53OKG5k4XKEcsL5HcTzf0R6SJl2+pEikFlherI1of3221Jho1BtrLlBIzTCk4gEu xHvfnbJwKEUoumTMTXgrVrB5wH9sZEFhDf+zLW3tNGm1evG534TIWm41Brev2fRZ 9l8rAHZnAJ/awQ== -----END CERTIFICATE-----Generated at Sat Jun 28 20:48:12 2025 by rpki-client