$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft File: ER1oFDdScdGjy9EhVdsR0r1BqNM.mft (raw, json) Hash identifier: MkdUr/dAG8UqavQYcXBctCYNAsWBJg6djJp88OnmyWg= Subject key identifier: AA:2E:38:88:64:F3:30:E7:26:D1:E5:94:4E:43:D9:8E:41:49:B5:C7 Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Certificate serial: 0197B5FC74F8C74336FC4C09356A9E1CADB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft Manifest number: 147A Signing time: Sat 28 Jun 2025 10:01:50 +0000 Manifest this update: Sat 28 Jun 2025 10:01:50 +0000 Manifest next update: Sun 29 Jun 2025 10:01:50 +0000 Files and hashes: 1: 1-Eladd6sj8Y7vq1mtW5h6ASM_tM.roa (hash: auxhruGljCxtN9ijkL9KZ/K4C+RcNKrzhKvUSRg/9HQ=) 2: 1-dpIOgQrHNlMUsxt6C2Ztf5nfuM.roa (hash: pCUJMhojWf39aVt/QyofbsbuGjc8Gizw3ZJ2MSqOsTA=) 3: 1-gUTUj2JpuChCvozdxCQFTR22DM.roa (hash: f/2CCyCRw0ujuPO8AP04nbSH6GVLpL5l8bdrrfS8KoQ=) 4: 4JmdsvBatEpFanHBLwN8tE53B0o.roa (hash: rZ4Y8EU6soeJCyiHjLhVB0iARab8gRMfLlwRpZ6KFuk=) 5: 7ap_QJi20SaGnPgK1pV6_7cP-Uo.roa (hash: BOo8F2wEw4BgZClwTOfUjkt0HIqhHPtSsQJru4E0kFk=) 6: 7pYVLfxDyksCdUmiOhbgviOo3x8.roa (hash: QcPN759vJqixjDGU3gmMeZsCeSMWabiqP3hVma37vPU=) 7: ER1oFDdScdGjy9EhVdsR0r1BqNM.crl (hash: gB5CTAIrcfYc4LC0HmX0jY+eJxMwqLLy9eMGZ/ylsSs=) 8: Hfkubm6yrWEn7gBE9wSMaD_ExXE.roa (hash: FXP2ir2FJkx6oy+MltDsbhNB8kOwwEjeXoSk5fOxlUM=) 9: Kk7xKrzHzx6qmDJI5CVBM_Sl474.roa (hash: m5FUWhJ54zbQwUlYkehhIiOw3x1SXokhdxGSIsx1B6c=) 10: Si8V8khtv0yVUA78DGGzfalNcCk.roa (hash: TuKNETdYYEdxWIcOAjkF1OdADD7zXp4g+mS6E5V7pvo=) 11: XjirH4cwDvxlRkAGxm7FSwAK2sM.roa (hash: YF/U/qPEr6M3Q+MIXQrnfUUKIV5n5WTRe7Dd9hsZTtM=) 12: aaSIhAJHCTwygtdFuXnOQPW6bY4.roa (hash: wv3RWyn/0THt7bCTdq/aMs2HWBM2MxgNANY6nblHNaA=) 13: azpo2jbXZip4fzf6JfxzYCloMXU.roa (hash: lChd9oLNFRupauF5HA1DBK7UGcNDTVpyA1eioCbGUns=) 14: cozXNddBZMRS0D_fVDWk42XqVNI.roa (hash: nP2wP4zibtasbSbsg7EMlMPSKjFkuBzXXdP2DBCONIM=) 15: iwe0kg-crqIWyp2IScMa9LxREgQ.roa (hash: CaVzf6weXzwiNznLUpeTB+QaHcaNjVgYiVjygsUgHxg=) 16: lQoeI3fot2NEOazpcJqwENKoEUU.roa (hash: Elimcemes6spMNky/T+TAYcPtxVw5jFrGcayiuk5D80=) 17: vsEC-C0-IZ2XJzdCqJMyLFlVXyo.roa (hash: 6dyvsyNO+SBB5YmEGzfWoUfWH/YqXAoOIBD3aTROXnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b5:fc:74:f8:c7:43:36:fc:4c:09:35:6a:9e:1c:ad:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Validity Not Before: Jun 28 10:01:50 2025 GMT Not After : Jun 29 10:01:50 2025 GMT Subject: CN=aa2e388864f330e726d1e5944e43d98e4149b5c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1f:f2:54:90:6f:f5:3d:a6:ef:8f:e0:8e:b7: ba:31:c5:0a:6b:0b:57:34:a0:26:2b:95:f6:84:c8: 12:d3:0e:3a:23:ed:0a:46:e4:ed:1d:d0:9b:e2:df: 4e:a4:11:0c:1f:ec:f0:7a:43:d4:53:ff:a9:e2:33: 56:bc:2b:d9:6f:78:b6:83:bf:e8:7b:2a:6f:61:62: 5b:31:86:26:ef:b7:d7:ab:c2:57:4e:8f:56:17:71: 56:6d:e3:ea:8d:10:0e:9b:c0:49:06:28:98:70:b2: 50:5a:7b:00:71:bc:c3:6c:e9:8b:84:e7:17:a5:18: be:a2:94:1e:92:94:4b:41:4d:5c:47:56:6a:d8:84: 1d:2e:9a:c2:c1:17:88:94:39:a8:87:ab:3a:e1:0d: 87:b0:22:c7:49:32:63:fb:9c:9a:3b:f7:30:71:25: c7:fd:59:9b:cf:d9:b9:4d:2f:50:a7:7a:27:c3:d8: 0d:2e:b8:bd:9c:02:6b:35:55:a1:e3:ee:5b:8f:d8: 6e:45:b9:83:be:e8:35:4f:2a:14:26:ff:48:eb:ba: c6:d7:57:70:85:b6:09:82:02:43:91:fa:ee:e4:20: 95:b4:1b:27:06:d0:63:95:4a:8f:6a:d0:33:59:0d: 7a:a4:a3:0c:45:c7:e7:20:37:38:d5:28:9d:8e:75: 25:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2E:38:88:64:F3:30:E7:26:D1:E5:94:4E:43:D9:8E:41:49:B5:C7 X509v3 Authority Key Identifier: keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:11:e5:d8:f4:16:71:4e:18:86:6e:9e:42:e2:af:c2:f8:85: 76:17:a4:57:39:81:e2:67:11:14:53:57:64:35:ba:19:48:8a: 49:74:fd:a9:10:88:e7:65:30:e2:84:73:5a:a7:87:4b:2d:b6: e4:0d:fc:12:de:39:6d:5c:11:74:ab:b3:33:3b:61:ec:6b:2e: 54:d2:be:73:1d:8b:60:55:64:a8:ab:72:81:f4:cf:07:a4:14: 03:68:fe:9d:d4:b9:2f:79:5f:b7:80:ad:6e:7a:d7:fe:bf:e7: c7:a2:d6:9f:4b:39:3b:ae:a9:10:34:e6:06:f8:c5:58:af:f8: ea:df:ec:4d:d5:48:62:11:a3:f7:be:63:61:af:13:36:f3:19: 39:29:0c:75:f5:ba:a9:7b:d7:27:76:a0:36:74:59:10:e4:84: 88:83:f4:e2:69:f9:18:d3:72:8e:24:cf:c4:7d:69:26:b5:18: b3:9c:f6:56:b0:25:f2:22:e2:cd:cb:5b:25:13:a3:f3:cc:94: 30:56:2c:34:ef:ca:47:78:e7:c3:a8:4a:ac:9b:32:44:34:e1: c9:20:ee:27:ed:07:a2:aa:0b:4b:5b:6e:b6:1c:47:b2:14:95: e8:4d:e7:42:1e:0b:38:21:74:b2:5d:77:74:71:8a:db:06:6c: e5:d0:e5:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe1/HT4x0M2/EwJNWqeHK2zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWQ2ODE0Mzc1MjcxZDFhM2NiZDEyMTU1ZGIxMWQyYmQ0 MWE4ZDMwHhcNMjUwNjI4MTAwMTUwWhcNMjUwNjI5MTAwMTUwWjAzMTEwLwYDVQQD EyhhYTJlMzg4ODY0ZjMzMGU3MjZkMWU1OTQ0ZTQzZDk4ZTQxNDliNWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR/yVJBv9T2m74/gjre6McUKawtX NKAmK5X2hMgS0w46I+0KRuTtHdCb4t9OpBEMH+zwekPUU/+p4jNWvCvZb3i2g7/o eypvYWJbMYYm77fXq8JXTo9WF3FWbePqjRAOm8BJBiiYcLJQWnsAcbzDbOmLhOcX pRi+opQekpRLQU1cR1Zq2IQdLprCwReIlDmoh6s64Q2HsCLHSTJj+5yaO/cwcSXH /Vmbz9m5TS9Qp3onw9gNLri9nAJrNVWh4+5bj9huRbmDvug1TyoUJv9I67rG11dw hbYJggJDkfru5CCVtBsnBtBjlUqPatAzWQ16pKMMRcfnIDc41SidjnUlbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKouOIhk8zDnJtHllE5D2Y5BSbXHMB8GA1UdIwQY MBaAFBEdaBQ3UnHRo8vRIVXbEdK9QajTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQt MjcxZDI1ZTIwNTc0LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQtMjcxZDI1ZTIwNTc0 LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArhHl2PQW cU4Yhm6eQuKvwviFdhekVzmB4mcRFFNXZDW6GUiKSXT9qRCI52Uw4oRzWqeHSy22 5A38Et45bVwRdKuzMzth7GsuVNK+cx2LYFVkqKtygfTPB6QUA2j+ndS5L3lft4Ct bnrX/r/nx6LWn0s5O66pEDTmBvjFWK/46t/sTdVIYhGj975jYa8TNvMZOSkMdfW6 qXvXJ3agNnRZEOSEiIP04mn5GNNyjiTPxH1pJrUYs5z2VrAl8iLizctbJROj88yU MFYsNO/KR3jnw6hKrJsyRDThySDuJ+0HoqoLS1tuthxHshSV6E3nQh4LOCF0sl13 dHGK2wZs5dDlIg== -----END CERTIFICATE-----Generated at Sat Jun 28 19:12:19 2025 by rpki-client