$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft File: kiIItHtqhk2dH_M-BqqB0TgZp04.mft (raw, json) Hash identifier: ZNfhPV6dOwXoXcS+YJaYrogV9irsnB2k6s0XQJszTBY= Subject key identifier: 42:3E:21:38:29:8A:CE:08:32:4D:34:08:64:1F:11:7C:58:73:31:7F Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Certificate serial: 0197C2DB8AFD4A0FE8863F6E8F84B8104531 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft Manifest number: 1601 Signing time: Mon 30 Jun 2025 22:00:57 +0000 Manifest this update: Mon 30 Jun 2025 22:00:57 +0000 Manifest next update: Tue 01 Jul 2025 22:00:57 +0000 Files and hashes: 1: 1-rtI9dIBDPGpB7XLgp5LO6PPhNw.roa (hash: ZOyoK37XAa4AMrftPMDpS57217i8QyMPPSqOrLIuDh0=) 2: 1MqnWOr2XX863k_xrrBNGhpSTM8.roa (hash: ZAHJz2QsnnKlOkhGF4MOgyBVqnyxAgqsRswDwRAbn1Q=) 3: Af6rgn7gOSO6b9yJTE82-PCW8cY.roa (hash: yvanfAEMgiAgFfICebeCl0yyBYWNTVGEo6Cci4GOC2Q=) 4: ETJiLj_FPEXG5No5WrAoxGg_y_w.roa (hash: 662t7NLUufLVnPvlW5VowqyxEXMWNP4WIugo2zvrIGE=) 5: QX1PzB0slLNh42gV_9Uq9W7-NNU.roa (hash: 42Me4JYy4dGGMwi/uXUY8iDNdYDcztDyEjfKcP1cPGo=) 6: XPCmvArgHR13v_k02Z1LW1lWJx8.roa (hash: 9yrs8EgUGCgumASichQb2a43gXVQMGz8ZJNkpOkb3cg=) 7: XWYIJ6UuSY9_AQiT-hJINBObDQE.roa (hash: PdxLhxNEU7vSAkCuLaQWVId/t5OMWmj8bekrOqUDrSs=) 8: cOLPd5Lu_3ww7o-cdhWB7-TfdNY.roa (hash: S/36KJdTMQ8aIP0tPHIBx2zWJTQd/RRNG/oJA1iTyvo=) 9: iCgmGpyhGXjIvVkyeLmT7N8_y-4.roa (hash: jOahkOswhpSU7ry2oaBtzcTaxYOf5EimbWn3HXDfD9I=) 10: j-60Smkd34pUp65Reim9QN1pXBY.roa (hash: M2tsmNC79ATfwuHh7j2unUzS2isZxvxmhlA+F7YtpNY=) 11: jT8TtCFNTlKwPMmqlrycg4pd3Ks.roa (hash: Z/6XZMJC3dE7VsH6nt9a6dKmCPvrRaks+OkbIUHxD+w=) 12: kiIItHtqhk2dH_M-BqqB0TgZp04.crl (hash: Pu3Varde0VKffrrYXbJZQICjz4nKcLtifUTVEgmY1fE=) 13: knSytMRDBBEnCJmSSPDhHWtHg0c.roa (hash: xgKSyUyWK6rR5NEa7nVIywiPdyu/cPSGzuk49MX8f0A=) 14: vBAure0FxWxWdTfj2W3O6_7De24.roa (hash: yikPG1Koq3q/WuhD/GCuT4mpPwhtQgx1jshmNW1jKHY=) 15: yyPUAj_dCWAktPW0jmBjCiRvIJg.roa (hash: H8oCA9x6vnmIvl4HatB3uvnypYSjgIN9/CrfMgatutI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Jul 2025 22:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:c2:db:8a:fd:4a:0f:e8:86:3f:6e:8f:84:b8:10:45:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Validity Not Before: Jun 30 22:00:57 2025 GMT Not After : Jul 1 22:00:57 2025 GMT Subject: CN=423e2138298ace08324d3408641f117c5873317f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5e:67:bb:5d:75:7b:80:f7:86:f5:1a:e4:29: fb:6c:01:c2:c9:7a:6f:88:c4:d4:11:e6:b2:85:55: 60:9a:9f:e0:31:b8:a6:19:28:f6:f7:5d:4c:5a:a2: 6c:13:3f:5d:e0:33:29:24:f1:ad:55:4c:ce:fc:ee: 5e:21:93:99:2c:68:e2:e3:69:de:d0:36:d9:9c:b8: 1b:dd:b9:07:e4:43:88:ef:ea:1d:bb:7e:ac:8e:60: 5f:96:2f:27:f6:76:53:b0:eb:0d:b3:e6:20:b3:2f: 15:91:ec:f9:fa:db:da:36:8a:55:64:b0:f3:70:9a: 37:7f:aa:4f:de:b1:1d:30:15:86:90:af:b2:50:09: ea:82:c3:de:e9:4e:d5:c1:66:9f:20:40:95:4a:cd: 3f:0e:f6:30:12:af:fa:63:90:d1:50:93:03:ea:c5: 8a:a7:fa:a4:0b:79:ce:e2:e1:1e:0b:4c:a8:15:e8: 9e:46:db:51:98:10:3f:3b:7f:e6:52:a2:62:f2:1b: 39:cd:7b:68:69:2b:45:fc:15:4b:be:e8:55:2a:82: 27:54:93:98:6b:f2:a0:21:41:a4:fd:71:33:9b:80: 8a:24:09:b1:5a:b9:3d:97:32:73:11:6d:8e:ed:2a: 2a:f8:77:b1:75:82:42:d8:c3:d7:5c:c6:30:93:22: 11:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3E:21:38:29:8A:CE:08:32:4D:34:08:64:1F:11:7C:58:73:31:7F X509v3 Authority Key Identifier: keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:e8:a0:0d:cd:ac:a4:30:6e:5f:02:55:84:16:b9:aa:f2:5a: 52:81:01:de:bb:57:70:ef:73:38:d0:6c:bb:ff:7b:93:5f:ac: 20:e0:b1:be:43:e0:0b:a2:af:c8:04:9a:74:18:2a:bc:00:f4: e6:1a:29:e0:32:ef:01:66:66:28:f3:f5:b4:27:1f:61:5e:bf: 86:32:21:cd:3f:5c:c8:23:cd:c2:70:46:5f:b1:9c:c4:28:7a: d1:16:9c:d8:68:b2:56:59:e8:67:76:50:f1:9c:24:63:0d:cf: ed:43:d9:23:05:49:50:3b:34:ad:35:67:ef:80:3f:bf:20:e3: fd:f6:8f:a1:25:3d:bc:e4:33:3b:84:66:38:a4:04:3a:5b:62: 71:48:7d:fe:a7:9e:8e:7c:08:ff:92:4e:37:02:10:41:e6:26: 33:ba:9a:a9:69:a3:dc:ba:b6:37:ff:73:a4:ef:d4:45:98:a9: e3:ad:a9:00:70:4b:1e:9b:4b:96:ad:29:07:a0:e8:c7:47:01: 19:54:65:e4:68:25:7e:13:53:e8:c8:a8:53:cd:1f:37:d6:ad: cd:ae:aa:b0:8a:d8:c5:d7:a3:0a:2f:5b:50:dd:da:78:32:f2: 68:6e:59:c6:99:10:f7:75:32:d6:06:b2:f2:d3:d9:55:da:ba: 00:89:46:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfC24r9Sg/ohj9uj4S4EEUxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx OWE3NGUwHhcNMjUwNjMwMjIwMDU3WhcNMjUwNzAxMjIwMDU3WjAzMTEwLwYDVQQD Eyg0MjNlMjEzODI5OGFjZTA4MzI0ZDM0MDg2NDFmMTE3YzU4NzMzMTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF5nu111e4D3hvUa5Cn7bAHCyXpv iMTUEeayhVVgmp/gMbimGSj2911MWqJsEz9d4DMpJPGtVUzO/O5eIZOZLGji42ne 0DbZnLgb3bkH5EOI7+odu36sjmBfli8n9nZTsOsNs+Ygsy8Vkez5+tvaNopVZLDz cJo3f6pP3rEdMBWGkK+yUAnqgsPe6U7VwWafIECVSs0/DvYwEq/6Y5DRUJMD6sWK p/qkC3nO4uEeC0yoFeieRttRmBA/O3/mUqJi8hs5zXtoaStF/BVLvuhVKoInVJOY a/KgIUGk/XEzm4CKJAmxWrk9lzJzEW2O7Soq+HexdYJC2MPXXMYwkyIRUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEI+ITgpis4IMk00CGQfEXxYczF/MB8GA1UdIwQY MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct OTViMDhlMzY2MGNmLzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD+igDc2s pDBuXwJVhBa5qvJaUoEB3rtXcO9zONBsu/97k1+sIOCxvkPgC6KvyASadBgqvAD0 5hop4DLvAWZmKPP1tCcfYV6/hjIhzT9cyCPNwnBGX7GcxCh60Rac2GiyVlnoZ3ZQ 8ZwkYw3P7UPZIwVJUDs0rTVn74A/vyDj/faPoSU9vOQzO4RmOKQEOlticUh9/qee jnwI/5JONwIQQeYmM7qaqWmj3Lq2N/9zpO/URZip462pAHBLHptLlq0pB6Dox0cB GVRl5GglfhNT6MioU80fN9atza6qsIrYxdejCi9bUN3aeDLyaG5ZxpkQ93Uy1gay 8tPZVdq6AIlGfw== -----END CERTIFICATE-----Generated at Tue Jul 1 06:49:20 2025 by rpki-client