$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft File: 8uKBD0mzb91kHDJr0d5OQtEosEY.mft (raw, json) Hash identifier: aASQhirmLd4HDNJ+bX5hu6oFW0mY8YubDhrHr3GIpdU= Subject key identifier: 36:80:B6:8B:09:1D:D1:0A:D4:BE:07:CA:F4:75:B4:2B:BA:6E:01:A1 Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46 Certificate issuer: /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046 Certificate serial: 0197B6A0D953E4BC40BADDB01509B6F8FBBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft Manifest number: 15C0 Signing time: Sat 28 Jun 2025 13:01:24 +0000 Manifest this update: Sat 28 Jun 2025 13:01:24 +0000 Manifest next update: Sun 29 Jun 2025 13:01:24 +0000 Files and hashes: 1: 1nLm5M5xfJ_suNGM5E1Zv1P9buc.roa (hash: 8x4G+E8iExmOXonfPhkgFAssRVwUmXgRDU/QwrPhfTc=) 2: 8uKBD0mzb91kHDJr0d5OQtEosEY.crl (hash: NAVAbAUPGxUmOWhsTEdrpem6RjQeL6qnWs1yjLvDy7I=) 3: Lfi2kFGwKCjTFh-UgGwG9fE3y28.roa (hash: vsaKPg/3Dci9H1drLTZRN5KQySI72yp3XcQ7k6Dlcjo=) 4: _nUioJBQYiP_fVr8BJqtm1b4PRs.roa (hash: 8TwcjLFByQyQOwz+CZFr+OHfzp46TUFKqsAmkEkj8SM=) 5: aTc8S3bYqZoD9jiepL9oUB_LXc8.roa (hash: ZM0nvVCM2yUnFFGdw51jOTnM2p1Qj9SS/GteRoRmdLI=) 6: cSIsSraiS7nIkZaNHDPeLhmfWzw.roa (hash: 6RDnXeZI7Aggjdy420rt58R6tW8oEB+ao9gxbA9zhLY=) 7: cT2NBd6CzvlyjEEfvaGsHGPxIbc.roa (hash: 5qkGkFqB6MaSnnKFQR4ILKQDwkrOhYsEol0WfvvJ+hs=) 8: mgsVdxyrFBjubnGQwn9ZD0Aa8KQ.roa (hash: WUYiTP5VTCdXuJgIU+Sgp6znUUnvoPyUsuU1tYAduHA=) 9: qhtmZa0GBJu-LNeg5d5k1hem6bE.roa (hash: Uh/IbFG52qMt7jSUYgnpbLvKrotH1qlqQb6PDTI4TP4=) 10: wodM1-EUQJUVgPu2FeLNzhcjNAQ.roa (hash: oqpoLkjU7X7RENp32UMSCTEvk2YhpXGRDxHAfJ9Hiks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 13:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:a0:d9:53:e4:bc:40:ba:dd:b0:15:09:b6:f8:fb:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046 Validity Not Before: Jun 28 13:01:24 2025 GMT Not After : Jun 29 13:01:24 2025 GMT Subject: CN=3680b68b091dd10ad4be07caf475b42bba6e01a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8c:7e:7e:ac:64:40:b2:70:6c:f0:c8:cd:92: 0c:69:ea:01:c3:51:42:62:ba:23:e7:7b:1a:51:f1: 16:33:46:a8:b8:31:c8:6c:b9:23:e5:3f:ed:a5:30: 26:c9:56:f9:24:a0:62:b0:6f:15:b4:3f:a6:ef:82: 87:26:e6:b6:c7:2b:15:63:cf:1a:08:ca:bf:a2:71: 38:27:e4:c5:4b:bf:64:46:6d:7a:7c:6f:81:01:2c: e3:46:5a:26:23:d7:dc:9c:fa:9e:3f:39:68:0d:64: 7e:c3:85:aa:3e:c2:8e:07:cf:fe:e2:aa:b2:29:c9: 90:47:6f:11:29:20:89:b1:91:fd:58:ba:d8:7d:92: 78:5d:fe:de:e0:2e:bd:41:9b:65:d9:ee:c1:4b:78: 32:a7:f8:68:cf:ae:b4:c5:4e:9c:88:27:a0:02:70: 5b:f8:cd:42:3d:6c:eb:fc:5c:96:d5:e5:10:3b:01: b4:50:54:21:98:f8:4a:88:15:ab:9d:54:e7:27:b8: d3:24:3d:7c:aa:2b:5e:e4:a2:bc:54:2c:c1:cc:22: 15:87:f3:cd:0f:cd:ef:c0:e7:9f:79:d9:73:aa:10: 63:58:00:fc:48:a0:e0:c0:2a:b5:2f:18:9a:1d:62: b6:e7:6f:3d:70:68:39:fb:43:99:99:39:02:4e:da: e7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:80:B6:8B:09:1D:D1:0A:D4:BE:07:CA:F4:75:B4:2B:BA:6E:01:A1 X509v3 Authority Key Identifier: keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:e7:4f:3d:fc:88:91:c2:48:ac:5c:3b:16:7f:50:95:fc:e9: 64:b5:ef:c5:2e:e9:e7:00:76:90:8a:56:68:c1:34:1a:df:8c: a5:c8:8f:a4:ac:95:9f:38:98:45:8c:b6:a4:af:3d:b4:78:e5: 26:6a:95:a9:43:bf:da:3b:d8:08:41:3b:ff:79:c9:1c:c0:35: 82:81:8d:9d:9b:bb:6a:81:7b:8c:44:de:fc:96:54:15:40:fb: 78:77:fb:0a:6a:4a:f2:db:cd:42:81:4b:2d:7e:67:d1:f3:22: 48:a6:c0:b0:d2:e7:66:9f:c4:34:66:61:b3:46:88:49:33:b8: 1a:46:61:19:10:4e:33:ed:6a:76:53:7c:85:b3:1e:4b:01:f1: 46:0f:f1:21:74:09:e8:3b:dc:cf:16:f2:2b:c8:dc:df:d8:6f: 57:5d:4a:8f:1c:56:9f:a8:f8:55:e0:c2:81:32:1c:0b:15:28: 95:db:f1:18:3f:05:1b:10:0d:f6:69:6c:7a:fc:c7:dc:fc:c7: 84:65:c6:92:d0:28:70:ee:e1:cb:b3:b3:e7:08:9f:3e:37:eb: b0:f5:c1:30:69:2f:9e:48:b6:83:e2:73:30:51:3f:23:ff:c2: 9b:c9:8a:ce:43:d5:d3:7d:b1:f7:51:ad:a7:70:00:8a:b2:49: 3d:49:2b:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2oNlT5LxAut2wFQm2+Pu8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZTI4MTBmNDliMzZmZGQ2NDFjMzI2YmQxZGU0ZTQyZDEy OGIwNDYwHhcNMjUwNjI4MTMwMTI0WhcNMjUwNjI5MTMwMTI0WjAzMTEwLwYDVQQD EygzNjgwYjY4YjA5MWRkMTBhZDRiZTA3Y2FmNDc1YjQyYmJhNmUwMWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIx+fqxkQLJwbPDIzZIMaeoBw1FC Yroj53saUfEWM0aouDHIbLkj5T/tpTAmyVb5JKBisG8VtD+m74KHJua2xysVY88a CMq/onE4J+TFS79kRm16fG+BASzjRlomI9fcnPqePzloDWR+w4WqPsKOB8/+4qqy KcmQR28RKSCJsZH9WLrYfZJ4Xf7e4C69QZtl2e7BS3gyp/hoz660xU6ciCegAnBb +M1CPWzr/FyW1eUQOwG0UFQhmPhKiBWrnVTnJ7jTJD18qite5KK8VCzBzCIVh/PN D83vwOefedlzqhBjWAD8SKDgwCq1LxiaHWK25289cGg5+0OZmTkCTtrnsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDaAtosJHdEK1L4HyvR1tCu6bgGhMB8GA1UdIwQY MBaAFPLigQ9Js2/dZBwya9HeTkLRKLBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAt NTBkMmI3MGJjZjMxLzEvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAtNTBkMmI3MGJjZjMx LzEvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeedPPfyI kcJIrFw7Fn9QlfzpZLXvxS7p5wB2kIpWaME0Gt+MpciPpKyVnziYRYy2pK89tHjl JmqVqUO/2jvYCEE7/3nJHMA1goGNnZu7aoF7jETe/JZUFUD7eHf7CmpK8tvNQoFL LX5n0fMiSKbAsNLnZp/ENGZhs0aISTO4GkZhGRBOM+1qdlN8hbMeSwHxRg/xIXQJ 6DvczxbyK8jc39hvV11KjxxWn6j4VeDCgTIcCxUoldvxGD8FGxAN9mlsevzH3PzH hGXGktAocO7hy7Oz5wifPjfrsPXBMGkvnki2g+JzMFE/I//Cm8mKzkPV032x91Gt p3AAirJJPUkrbA== -----END CERTIFICATE-----Generated at Sat Jun 28 20:59:19 2025 by rpki-client