$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft File: mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft (raw, json) Hash identifier: LRpf/iScpOR24YA0d8S6IPJTcr4vjUFXlLfm4soRngw= Subject key identifier: 2B:34:67:B5:F4:83:67:29:9D:29:BC:5C:5A:83:49:62:6C:B8:A4:71 Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e Certificate serial: 0197B7456DEAC39888BD6F19475859DD97B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft Manifest number: 15D6 Signing time: Sat 28 Jun 2025 16:01:09 +0000 Manifest this update: Sat 28 Jun 2025 16:01:09 +0000 Manifest next update: Sun 29 Jun 2025 16:01:09 +0000 Files and hashes: 1: 7hlWKm8vTIF0LH1H2oS6Admh1TI.roa (hash: JGgMMA+OZIrWq67kkKcLVk/aNndkz3SnG1R5RYOVvj8=) 2: 8Okcs_WzeZSlRzql6-e5V5V7syA.roa (hash: Bgf74cz9Nwo/ctlxM9vVhY3z4DibfYQP6Uszu31EXc8=) 3: AJpw_2i3EoQNYD9kunMPYOdByi8.roa (hash: 2y+udfjFmNVer5C4pJzKndxIM53KHs0ELdljGNxXclM=) 4: BW-ZjApW-eGpyxFEOc0qqC_7S5k.roa (hash: RqpMiCDIPeUSPd1EPbgHwl0XZwlcr7/eFSWcSxO7pPY=) 5: FjCA5Ak9pc8iYQAo2kd8vxWMg2c.roa (hash: LWHCt8fi0ffLNOHRJ69hCW6DNWkN+nY4S8kMpRaQ7ss=) 6: Ik8Kqt-zKfrsdQjyrAjHXX-mlLc.roa (hash: Zg9C0+0W8n0QIjR6RRPkp/OJIpBk8iu2+syGMIoxQyg=) 7: P82-6fcmXy1vqdLrwWWqytTl0TM.roa (hash: z01aDruR3yMRSRzpiGY2CGLWYQwuEAMQJV+YU0LBGGA=) 8: RYdEtsOojE3SXyShhqAjMIQl9xQ.roa (hash: bxAZYk1bj8j4gGSsg9+CUkCHFq1GRl7baVopFxolE0s=) 9: WBeAt2UOvPgAdfpllYF8DBrXsx8.roa (hash: IGhLKO/rQTI4tOBHJDgWqI73xTyqxuZsgF0ztyC/dOc=) 10: bbmenZqkY_bNQyceoK-fLvwWxdc.roa (hash: 5/uuA7PsJ4CyNOajTBR0J1Bkylsmq9V39AJtX9hFgFU=) 11: dMlBq16YcIM7-JR7sVrQGjUo5Ts.roa (hash: i7NU7NT4PhY/w3tg6T+Z3qdRHBm2oFSaLm/74+Urx2g=) 12: f4e7IUwG3JkPasx3oPPOpKnw014.roa (hash: oT75cSQjF7ggxHOJOkz6Sxjs0hfilCF0H6NE1nJtUfo=) 13: mNguxrQSssFTgOvDx-TtVJcngJ0.roa (hash: p4yScE1NaP9LVRZLGH/RikX/bIEDOl76JK/45ns5C9Q=) 14: mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl (hash: kmCS2NdWz6SnfiGnTzhwcXxgifVxOjc2ooXh44kLLCo=) 15: u_mqTybwgy-hqVDwwCNi1Bf-8tI.roa (hash: JZzfV1nFUUQsICoBUJ9//kJmxjSvH3d3D7ybB8QQr/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:45:6d:ea:c3:98:88:bd:6f:19:47:58:59:dd:97:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e Validity Not Before: Jun 28 16:01:09 2025 GMT Not After : Jun 29 16:01:09 2025 GMT Subject: CN=2b3467b5f48367299d29bc5c5a8349626cb8a471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2a:57:37:9f:4a:46:e1:4e:1c:db:04:18:66: 80:3f:6f:05:f4:d2:f1:88:0c:81:fa:00:05:6f:e9: 8d:f2:d8:da:bf:7f:90:97:2c:c5:76:57:90:f7:7a: fb:ed:df:47:62:c2:0b:a0:ef:7c:05:6a:18:10:64: 8d:a6:dd:9d:22:a8:31:4d:90:2a:d2:ac:45:5b:5f: 42:fb:77:94:0c:4d:e6:84:b8:f9:5f:a3:07:e4:41: 5c:2b:e6:0a:91:df:ff:48:66:81:c9:44:ad:bf:74: 84:aa:f1:05:cc:bd:02:36:da:e4:d6:fa:7a:f3:d7: 59:bf:f9:0f:ba:a1:a9:98:2a:d6:94:3a:48:fa:6a: 1f:8a:19:19:21:2e:1f:fb:d2:8f:ec:72:4f:93:8f: cd:e2:ab:e8:72:f9:7c:07:c5:e3:97:9c:66:72:cd: 40:0c:3b:40:54:8b:e0:aa:08:88:87:c0:c5:d1:7a: 6c:d4:4a:d8:9e:d0:00:6b:2c:12:3a:71:ca:d4:8f: de:70:a5:c2:dc:d3:4c:39:8f:4c:9b:cd:c6:bd:74: 8c:4b:bd:fc:7f:f1:fd:34:03:68:8b:fc:a7:a1:91: f7:b5:e8:04:ff:88:a0:ed:ce:b1:77:85:71:e3:24: 5c:67:b4:b9:03:26:05:32:d9:c6:ac:f2:13:26:b2: 67:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:34:67:B5:F4:83:67:29:9D:29:BC:5C:5A:83:49:62:6C:B8:A4:71 X509v3 Authority Key Identifier: keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:12:13:a8:64:b0:33:48:cf:a3:38:2f:00:b8:bb:4b:ad:64: 00:26:39:87:e3:9d:0a:13:cb:14:b0:7f:b1:5b:62:f5:58:cf: 4b:61:4a:b5:9c:8f:db:5c:5f:d1:00:49:e3:3a:36:4e:0f:82: b6:31:d5:42:66:4f:1f:44:51:bf:0e:00:6e:33:c6:2d:05:ea: df:a0:79:14:23:cb:a0:2f:0f:7e:3d:89:24:3a:07:0f:5a:0b: 73:d2:24:ff:91:86:7f:31:2a:73:03:37:27:11:59:c0:89:92: cb:16:70:a0:9d:af:e3:89:3b:68:06:42:33:90:0b:91:0f:09: c2:c0:a2:43:be:ef:15:fa:e6:ca:02:a3:e3:c0:00:d7:39:70: 5b:95:cc:1d:51:67:25:bd:b0:48:04:c1:c6:e6:29:7e:73:4c: 80:50:d9:46:e8:bf:fa:1f:40:60:a4:91:32:1e:1a:52:2e:9c: 51:14:ec:1a:d2:e3:17:f5:82:7d:64:3c:3c:d0:c7:dd:5b:18: 83:e9:7e:29:51:73:48:a3:59:a0:e8:fd:4d:27:0b:72:97:45: 0f:1c:b8:4a:20:93:63:23:d0:cb:53:48:26:c4:00:60:f4:39: 36:49:17:c1:95:7b:c8:61:66:56:c0:90:b8:fa:0b:fc:2e:6c: e5:21:26:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3RW3qw5iIvW8ZR1hZ3Ze4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2U1NjlhMTRjMmRiMzc3MmYyMzE4N2NlNjhlNjU0MWVj MDA0OGUwHhcNMjUwNjI4MTYwMTA5WhcNMjUwNjI5MTYwMTA5WjAzMTEwLwYDVQQD EygyYjM0NjdiNWY0ODM2NzI5OWQyOWJjNWM1YTgzNDk2MjZjYjhhNDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSpXN59KRuFOHNsEGGaAP28F9NLx iAyB+gAFb+mN8tjav3+QlyzFdleQ93r77d9HYsILoO98BWoYEGSNpt2dIqgxTZAq 0qxFW19C+3eUDE3mhLj5X6MH5EFcK+YKkd//SGaByUStv3SEqvEFzL0CNtrk1vp6 89dZv/kPuqGpmCrWlDpI+mofihkZIS4f+9KP7HJPk4/N4qvocvl8B8Xjl5xmcs1A DDtAVIvgqgiIh8DF0Xps1ErYntAAaywSOnHK1I/ecKXC3NNMOY9Mm83GvXSMS738 f/H9NANoi/ynoZH3tegE/4ig7c6xd4Vx4yRcZ7S5AyYFMtnGrPITJrJndwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCs0Z7X0g2cpnSm8XFqDSWJsuKRxMB8GA1UdIwQY MBaAFJnOVpoUwts3cvIxh85o5lQewASOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQt MTA5NTU0NGM2YzUwLzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQtMTA5NTU0NGM2YzUw LzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADBITqGSw M0jPozgvALi7S61kACY5h+OdChPLFLB/sVti9VjPS2FKtZyP21xf0QBJ4zo2Tg+C tjHVQmZPH0RRvw4AbjPGLQXq36B5FCPLoC8Pfj2JJDoHD1oLc9Ik/5GGfzEqcwM3 JxFZwImSyxZwoJ2v44k7aAZCM5ALkQ8JwsCiQ77vFfrmygKj48AA1zlwW5XMHVFn Jb2wSATBxuYpfnNMgFDZRui/+h9AYKSRMh4aUi6cURTsGtLjF/WCfWQ8PNDH3VsY g+l+KVFzSKNZoOj9TScLcpdFDxy4SiCTYyPQy1NIJsQAYPQ5NkkXwZV7yGFmVsCQ uPoL/C5s5SEm+g== -----END CERTIFICATE-----Generated at Sat Jun 28 21:35:29 2025 by rpki-client