$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft File: u6Nc-KtvPqoq663Z4jc97AiTYl4.mft (raw, json) Hash identifier: qLbtzbgsM3Qno2+bBjAtIlpIySYRGfc1YY2ZMSPa2U4= Subject key identifier: 65:0F:5A:53:7D:77:59:41:0C:49:AB:73:47:32:46:74:56:A0:E2:F4 Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Certificate serial: 0197C8389C9F8CCFDDED4658A821DA7DAC0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft Manifest number: 138C Signing time: Tue 01 Jul 2025 23:00:42 +0000 Manifest this update: Tue 01 Jul 2025 23:00:42 +0000 Manifest next update: Wed 02 Jul 2025 23:00:42 +0000 Files and hashes: 1: BrzMotRwWum6-plh7okwXahkOEw.roa (hash: KNrByvrRESfQLIHd88NCHYJK86NO5i3vBaQCBV7EA7E=) 2: GtppMOhe-qj4-qKPQwYM7Bndra0.roa (hash: DZ7bcQ1MagW/CKYzAoT3tgdmQpZud4AtQbSCkk/MCKU=) 3: IICQjXJW2EEkB1v0o8BM6izDgbM.roa (hash: 7Xb1rw7YXZ8yAd+5aXbmrrlzp2Uxli0xSynXq48MEYc=) 4: PZNxNz45jwhU2f2Vk-rUkU1xuZQ.roa (hash: F+PZJf4GxvF8kf0ckwm9Pxo9WyYXyL9ytkInNQ2bSTY=) 5: _8UTREX8Q0a63ua_dGhbhojBdUA.roa (hash: DL1eDSZaMbokl5Ydp9t7oF5cl2AwIO6gEepk09/TZDc=) 6: _kZUir8n1AqIU0qtCf0tRxbZpds.roa (hash: i0Gwqdkr5/j/wsvWbuGrhf4MKjNKMEm96rfhCoH477Y=) 7: c7nY0rggG6raEqDRkehzGz_VYtA.roa (hash: EhNdOxX4vcohdV7gKrHWK7+fsvt8pGFZe0311VfzJ1M=) 8: clWD5iSFcHwGMTWctP6MgbhffFI.roa (hash: XeY9jpVy1coomoksHYwsuAsFdSJEnTf0ShOjmRYUnB0=) 9: hEnYun4dBmY4NXRm3bASEYEJDP0.roa (hash: 9ED8ExgB7hEhZTw92vukURu1ltjtyM6wWC7Qc0GRBP4=) 10: tTkbfZxula834alUiiKULvFUhEY.roa (hash: 53gfHOJtFDupMS3Pl17R4clQixHqHEmtoBj+F2KX9dc=) 11: u6Nc-KtvPqoq663Z4jc97AiTYl4.crl (hash: CsUgp0LKMEcB+f+GtWpDuTYcYGD0iwo+0rrz2t8Sivo=) 12: uZ3gLoi-baUsKV1SOOe_6eXbk4A.roa (hash: DF0imGw170/tpFF5iP4nGcWrEFYm61EvjaRvJ/3jKZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 02 Jul 2025 23:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:c8:38:9c:9f:8c:cf:dd:ed:46:58:a8:21:da:7d:ac:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Validity Not Before: Jul 1 23:00:42 2025 GMT Not After : Jul 2 23:00:42 2025 GMT Subject: CN=650f5a537d7759410c49ab734732467456a0e2f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6a:6a:eb:1e:02:61:15:f4:80:22:00:8b:98: 86:58:3c:f2:91:f6:89:89:e7:9a:a1:74:d1:a5:7d: e5:87:bc:88:7f:8f:07:23:43:56:7d:14:49:66:05: 1f:8c:85:bc:51:09:60:f8:93:bc:f0:50:19:d6:32: f7:23:b7:88:fc:af:15:81:a1:8e:f4:ab:b0:71:ae: 97:2b:60:b2:76:fe:7d:ce:5e:75:a7:84:15:87:1e: 55:58:35:b4:93:b4:c6:cc:1e:29:2c:cb:a5:10:f5: 08:25:e7:77:4d:30:ec:01:72:f6:5a:20:30:0c:d5: 18:ae:0d:54:33:dd:bc:dd:7d:51:80:af:a0:c6:57: cc:66:78:16:fb:34:5f:60:e4:fe:3b:35:b2:40:15: 12:a3:52:3b:ad:7e:de:34:05:44:71:97:8b:bf:97: d8:72:21:47:24:75:eb:da:2f:4f:82:4a:98:09:33: a6:e6:a3:d3:39:61:c1:1b:2e:ac:93:a6:b2:6a:4f: 53:bf:eb:9b:17:97:00:2b:36:b5:6c:17:48:f6:86: 74:4d:23:ab:5d:b0:14:38:b6:1c:f9:5c:10:ed:aa: 95:20:2c:f5:28:88:1e:76:06:93:46:cb:2a:a7:be: 1f:ee:11:80:68:8e:4b:65:3a:1d:8e:c5:80:01:69: 8f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0F:5A:53:7D:77:59:41:0C:49:AB:73:47:32:46:74:56:A0:E2:F4 X509v3 Authority Key Identifier: keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:6e:5f:7b:5a:90:0d:ad:f8:95:d5:c7:70:0d:27:7a:c4:83: 17:37:d6:4e:46:62:f4:88:91:15:41:95:1d:ce:5d:92:10:e4: 62:12:5f:31:67:a0:9c:4d:a2:8d:ea:bc:09:b1:a4:bc:ac:be: 8a:68:f2:90:a2:98:e0:cd:90:8c:da:b2:81:8b:4d:6d:34:0d: b2:6a:70:86:e2:f2:25:6a:9a:59:37:25:58:9c:ad:95:c6:b9: 88:1d:1e:b9:f3:12:8e:f2:21:52:ec:1e:e9:0b:da:c6:e0:79: 88:ab:d6:5a:bd:33:d6:54:4c:be:fe:25:38:13:46:a9:f0:fd: 4e:56:11:39:a1:b2:d2:a1:0f:67:7b:47:b9:d5:11:a0:ff:bb: a5:0c:83:6d:87:82:63:50:00:22:bb:2c:d4:0e:12:54:29:7f: 78:6c:66:3f:3a:aa:90:6c:e6:90:15:f9:8d:d9:94:9d:c2:d9: 2b:6d:47:37:a4:35:45:b3:7b:a4:b2:1b:41:06:a3:3f:a9:1a: 54:96:c8:0e:75:ec:00:29:ad:32:34:fb:37:31:46:c3:25:8d: fd:bb:84:ad:e9:c1:2f:5b:d3:bf:a3:b6:7b:dc:46:32:be:3b: 1a:d8:06:4d:15:c6:5f:7a:4e:1a:b4:c8:e7:32:aa:bb:eb:c6: e6:88:53:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfIOJyfjM/d7UZYqCHafawMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYTM1Y2Y4YWI2ZjNlYWEyYWViYWRkOWUyMzczZGVjMDg5 MzYyNWUwHhcNMjUwNzAxMjMwMDQyWhcNMjUwNzAyMjMwMDQyWjAzMTEwLwYDVQQD Eyg2NTBmNWE1MzdkNzc1OTQxMGM0OWFiNzM0NzMyNDY3NDU2YTBlMmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGpq6x4CYRX0gCIAi5iGWDzykfaJ ieeaoXTRpX3lh7yIf48HI0NWfRRJZgUfjIW8UQlg+JO88FAZ1jL3I7eI/K8VgaGO 9Kuwca6XK2Cydv59zl51p4QVhx5VWDW0k7TGzB4pLMulEPUIJed3TTDsAXL2WiAw DNUYrg1UM9283X1RgK+gxlfMZngW+zRfYOT+OzWyQBUSo1I7rX7eNAVEcZeLv5fY ciFHJHXr2i9PgkqYCTOm5qPTOWHBGy6sk6ayak9Tv+ubF5cAKza1bBdI9oZ0TSOr XbAUOLYc+VwQ7aqVICz1KIgedgaTRssqp74f7hGAaI5LZTodjsWAAWmPvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUPWlN9d1lBDEmrc0cyRnRWoOL0MB8GA1UdIwQY MBaAFLujXPirbz6qKuut2eI3PewIk2JeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMt NTk3YjZlMjQ5MmFiLzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMtNTk3YjZlMjQ5MmFi LzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGm5fe1qQ Da34ldXHcA0nesSDFzfWTkZi9IiRFUGVHc5dkhDkYhJfMWegnE2ijeq8CbGkvKy+ imjykKKY4M2QjNqygYtNbTQNsmpwhuLyJWqaWTclWJytlca5iB0eufMSjvIhUuwe 6QvaxuB5iKvWWr0z1lRMvv4lOBNGqfD9TlYROaGy0qEPZ3tHudURoP+7pQyDbYeC Y1AAIrss1A4SVCl/eGxmPzqqkGzmkBX5jdmUncLZK21HN6Q1RbN7pLIbQQajP6ka VJbIDnXsACmtMjT7NzFGwyWN/buErenBL1vTv6O2e9xGMr47GtgGTRXGX3pOGrTI 5zKqu+vG5ohT8A== -----END CERTIFICATE-----Generated at Wed Jul 2 06:23:29 2025 by rpki-client