$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft File: 09VvB74YTLpS9v3ASegRTSYWwyo.mft (raw, json) Hash identifier: yMPrT0LKepEl8ww0aG7vyisObPeF2FiISFADKYzWl+o= Subject key identifier: 76:1D:D4:1E:BD:4A:A9:15:6E:AD:0C:7D:34:05:0B:91:B4:61:87:DF Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Certificate serial: 0197B77CC034E3B2D2B993270DA3D0069134 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft Manifest number: 15BD Signing time: Sat 28 Jun 2025 17:01:35 +0000 Manifest this update: Sat 28 Jun 2025 17:01:35 +0000 Manifest next update: Sun 29 Jun 2025 17:01:35 +0000 Files and hashes: 1: 09VvB74YTLpS9v3ASegRTSYWwyo.crl (hash: Var5IyBSn6zoDr/TfUXgX1gNWMdlaZKoPD4KCFL2yGs=) 2: 4c68WXa89S9GaEZ3betWtfOynEI.roa (hash: fVAp1PUxEqPq1PXw46ujCE/Pw+4uzGlNeTIsndTtQ4g=) 3: 7kfcYNNoB5VB3-_80xlsWN3weyk.roa (hash: 1wJop1mQ6qBQDepGqT5ANO4tx0iRC5GqiIyWQqeZxiY=) 4: Bs0O01jXAqadcOrA_652_6vgquk.roa (hash: hEdFCfeLg1JToe8V2oyy+hkNpnht00+5NYTQRgNDOq8=) 5: KidN7PJCXFwqwby4fVpHaeAhpFY.roa (hash: rFMoYmqrD8lR5TajeeUqUicyuRT28K2jKIN4IFZHnsU=) 6: NYzishm2ogJfRyzy8nT6kXYmzuI.roa (hash: LaEEfSMmtUB1mBqYxGiYK3KhOkpxYURIQoeWj6Zjkz4=) 7: RIPl0ZcnNzCRnoJoRMQdo7FatJo.roa (hash: V51bdAbDUbCCdG4ap1IngeKOzNBFdbTp51TPAvBkqrE=) 8: eKmkaw2M8tueZ_tzxfDI9F6CNcc.roa (hash: fg34CUb41rhu+065E2VZ9qaIx2X2iqQ2jxGQO4GwQe4=) 9: pq2QS5SBDS3pAxrbz1jylBKYb1c.roa (hash: kdt9b8eHxviCcBXo3alD6ToqY7JvOLmYwFiRPu6twu8=) 10: tpxzfABwHA4uTKjODgtKlvT10t8.roa (hash: /uiIY+OMfjw8MyTKZlNYbS4i9kHVxO0uNCEe4Op3YPE=) 11: xz6DVtU3-Ra9kwVQS1hT5B1NgIk.roa (hash: L6obqobAUv8Kf3w8kISkegiNvXZC3M7YbdVJnQVDNRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:7c:c0:34:e3:b2:d2:b9:93:27:0d:a3:d0:06:91:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Validity Not Before: Jun 28 17:01:35 2025 GMT Not After : Jun 29 17:01:35 2025 GMT Subject: CN=761dd41ebd4aa9156ead0c7d34050b91b46187df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3d:55:5d:78:52:a8:5d:49:b0:42:23:78:cd: 9c:b2:0e:d7:0f:62:9d:15:03:5e:45:0a:c9:f6:c3: 44:10:1e:dc:ab:4a:04:bc:0c:42:8e:85:96:69:57: 81:bb:8d:4c:9e:6e:29:8c:cb:d0:2b:6c:43:27:c3: a1:6b:df:ac:a1:e7:e2:2c:8b:8f:2d:31:09:5b:48: 40:89:3a:93:35:26:21:fb:5e:f0:bf:8e:97:e8:96: 81:a1:b3:4f:5d:07:07:a5:07:a9:19:cb:c8:02:a0: 7a:aa:31:f5:c3:26:e4:9d:90:ea:3f:2f:bc:d8:70: b7:1a:3c:2c:6d:4c:40:bc:c9:0b:b2:ad:44:98:3d: f4:6c:b1:ea:dc:50:bb:b0:1a:3d:bf:ff:79:32:35: ed:39:3c:a0:92:cf:84:7c:02:92:6c:14:52:76:65: 1e:4c:3d:1d:9f:e7:5e:6b:6b:a0:6e:ea:88:05:36: c5:36:4d:cd:e8:c6:3a:e2:81:c9:c5:5e:48:8a:1b: d9:a9:d0:45:6d:c6:94:2f:a0:55:81:2a:3e:9e:91: 48:f6:41:1b:66:0e:55:7d:9a:81:e7:55:f3:ba:b9: 5a:13:0d:64:01:3f:69:b3:82:cb:80:09:0a:5f:f7: b3:5d:9e:0e:f7:09:b2:35:39:c6:d0:1f:4b:0d:95: 2d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:1D:D4:1E:BD:4A:A9:15:6E:AD:0C:7D:34:05:0B:91:B4:61:87:DF X509v3 Authority Key Identifier: keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:98:04:cb:45:62:b1:60:55:30:e7:d5:39:60:0b:5c:14:aa: be:a8:51:a0:57:4d:8f:9d:1f:81:36:6d:77:20:a9:e9:de:a4: 5f:80:7c:0a:ed:8d:32:3d:43:b1:44:59:b6:2f:ca:e0:6d:08: f9:e5:2b:32:86:b6:21:36:4f:aa:f9:e3:c8:d9:90:79:2e:81: cb:77:e8:cd:ba:ac:9d:c1:9a:81:c6:f2:cf:10:6d:90:23:45: cf:ee:fe:03:0d:17:2f:26:08:39:e6:55:f0:c7:dd:ae:e0:86: 70:e5:f1:32:e8:1b:10:12:67:50:ef:29:38:e8:fa:b8:17:b0: ab:cd:e0:f7:64:6c:35:ed:9a:a1:ea:19:16:b5:bc:de:0e:7b: 07:85:dd:8b:a5:80:89:95:8e:0e:af:32:0a:20:02:c0:f5:61: eb:91:f7:c9:c7:8f:c2:7c:69:1f:a6:78:65:ce:f5:e9:fe:9c: 6b:87:d3:42:2a:55:12:42:9a:c4:1e:6a:7a:d8:a6:ae:d7:8d: 43:57:b5:1a:b7:ae:59:f2:3f:0c:b1:f5:65:9a:23:a7:37:98: d4:1b:1a:96:fc:87:d7:a8:fb:33:05:41:5c:b1:ec:61:61:49: 87:5b:d3:41:e1:f4:99:51:72:7d:22:00:ac:49:42:46:d6:db: 0a:cd:15:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3fMA047LSuZMnDaPQBpE0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZDU2ZjA3YmUxODRjYmE1MmY2ZmRjMDQ5ZTgxMTRkMjYx NmMzMmEwHhcNMjUwNjI4MTcwMTM1WhcNMjUwNjI5MTcwMTM1WjAzMTEwLwYDVQQD Eyg3NjFkZDQxZWJkNGFhOTE1NmVhZDBjN2QzNDA1MGI5MWI0NjE4N2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj1VXXhSqF1JsEIjeM2csg7XD2Kd FQNeRQrJ9sNEEB7cq0oEvAxCjoWWaVeBu41Mnm4pjMvQK2xDJ8Oha9+soefiLIuP LTEJW0hAiTqTNSYh+17wv46X6JaBobNPXQcHpQepGcvIAqB6qjH1wybknZDqPy+8 2HC3GjwsbUxAvMkLsq1EmD30bLHq3FC7sBo9v/95MjXtOTygks+EfAKSbBRSdmUe TD0dn+dea2ugbuqIBTbFNk3N6MY64oHJxV5IihvZqdBFbcaUL6BVgSo+npFI9kEb Zg5VfZqB51XzurlaEw1kAT9ps4LLgAkKX/ezXZ4O9wmyNTnG0B9LDZUtTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYd1B69SqkVbq0MfTQFC5G0YYffMB8GA1UdIwQY MBaAFNPVbwe+GEy6Uvb9wEnoEU0mFsMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt MWIwNmQxYzcwNGMxLzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx LzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5gEy0Vi sWBVMOfVOWALXBSqvqhRoFdNj50fgTZtdyCp6d6kX4B8Cu2NMj1DsURZti/K4G0I +eUrMoa2ITZPqvnjyNmQeS6By3fozbqsncGagcbyzxBtkCNFz+7+Aw0XLyYIOeZV 8MfdruCGcOXxMugbEBJnUO8pOOj6uBewq83g92RsNe2aoeoZFrW83g57B4Xdi6WA iZWODq8yCiACwPVh65H3ycePwnxpH6Z4Zc716f6ca4fTQipVEkKaxB5qetimrteN Q1e1GreuWfI/DLH1ZZojpzeY1BsalvyH16j7MwVBXLHsYWFJh1vTQeH0mVFyfSIA rElCRtbbCs0Vqw== -----END CERTIFICATE-----Generated at Sat Jun 28 19:55:51 2025 by rpki-client