$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft File: XaQypOw7CsTKTk7OwOn01GtJevA.mft (raw, json) Hash identifier: aItmoOZhbjyyvzEgXh0kMCim6hPrywKR73nSF47wCvU= Subject key identifier: A7:E4:E0:60:29:09:C4:E0:6C:81:A5:09:6D:72:D3:28:9C:FE:FD:51 Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0 Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0 Certificate serial: 01975CEEF6120C0BD17B6D10DBC71C44343B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft Manifest number: 159D Signing time: Wed 11 Jun 2025 03:00:53 +0000 Manifest this update: Wed 11 Jun 2025 03:00:53 +0000 Manifest next update: Thu 12 Jun 2025 03:00:53 +0000 Files and hashes: 1: 0Je5Z-nMCx0Zkd418v5HueEhd54.roa (hash: pEX7Z7nPaiJOWyIs9b/nPIQ3gi19xivW2mZ533J3DJo=) 2: 14hghSYuKbF7DLMEPWygMHVGP7A.roa (hash: +lIfYCGzEu7fKfBEKYs45/U/OMBrFfQnzzBOsngrbkg=) 3: 7wCIILVV_KizMvEXiqEvvxC6Jr4.roa (hash: QBaOmpq6h8G9bZnJd7hH6tV1LQuldiouVWbU53bSAF8=) 4: NX-lJMVuq0hFJuXhiTDNigiTMiI.roa (hash: 32i5zz/HrQnOcYVXyjhBgA5WXVmw5qyUgDPkRo/rTuU=) 5: PCD0p_UNZon9aCxoq1egSeAnxBA.roa (hash: i0uT3nEejd+UeJVQ6gjyXxFUUCw66ysdAWzGYAGx+Mk=) 6: PYemKJWEUk-HkJO5Mj9UiDiPJ_4.roa (hash: QhKEDEG5e1WSPoJeyCcT8wLZHkvtF03JkUepmJw6Zxw=) 7: Rr0zbCWANGdldNBvrAd88RpS1U4.roa (hash: 9No9czOGF999cDISmqzMXCL5W1XMeYJzBnZLfRLwac4=) 8: Vl_3r99z42NwQ-24ZhXRiYXhqjY.roa (hash: GXmfSPtN6tufP5/kLCHIzO4q0RbIH3Sr/fl4Xj29EAo=) 9: WZNFgwpO480t4avTSei-zYnVVOY.roa (hash: 373H0BKFYtzTiKGrZaryv56z6bhznrJd/cnBel6rbT0=) 10: XaQypOw7CsTKTk7OwOn01GtJevA.crl (hash: YiIhYiWKN9Us1HUfT1H9Td/bqVLEbH2rknxIQM0Wurk=) 11: _uatClMcwC0uM9W8YXO5Qitmm-A.roa (hash: k5ie8fXmVl+ckXH05aUk9WqiZ3RnKPMqOUpy2XuoG7w=) 12: aHlGWauXADsFIjPBDWSnc29nHv8.roa (hash: y3CvDF1nTLBg2ldBPSyHCPUtAaI+qzww7+4uWAz8ztY=) 13: ea0vEI_fGMyg1jPZV-hKH8IC-2Q.roa (hash: lMsvTL1IJXE7hi4D1D2VQP7nQy14aHmJmR8i7R04mRU=) 14: sZ40szF_81b8iZ343Q6aVpk7QZc.roa (hash: ieSiCVj+T4ruST7AZXMVQI1ECh5LKhbuRyks+nO6HIc=) 15: xf4c83s9BhHDRES5-deoHo90fx8.roa (hash: Nc+I2Laa6OeGUM7r8e6LlLMHSt+btJK/FMAVLnkCxPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 12 Jun 2025 03:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:5c:ee:f6:12:0c:0b:d1:7b:6d:10:db:c7:1c:44:34:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0 Validity Not Before: Jun 11 03:00:53 2025 GMT Not After : Jun 12 03:00:53 2025 GMT Subject: CN=a7e4e0602909c4e06c81a5096d72d3289cfefd51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e0:fc:79:24:12:f3:ae:92:d7:81:45:d9:05: 90:72:79:60:35:39:f8:20:df:d3:56:5e:18:6f:1b: fa:91:a2:a3:7c:95:a1:de:5a:e0:c0:97:81:97:c8: ed:16:1e:a1:53:ef:66:21:c6:18:7a:dd:1a:61:7f: 8c:49:ec:d3:61:d4:a5:95:17:4f:eb:86:c2:ed:4f: ff:98:69:19:97:cd:5c:69:3a:ce:4d:2b:32:dd:66: 40:a1:cd:b6:03:b0:1c:80:81:c7:4c:1b:88:22:e9: 76:57:01:29:e5:26:1d:2c:15:2d:ee:7e:b8:ea:0c: fb:7e:ff:c5:6a:af:92:02:f2:de:da:51:97:3f:a1: 5a:a9:09:a8:52:31:65:65:f6:22:72:71:4c:dd:76: 26:9e:f4:fb:1e:14:16:75:de:62:ad:e2:6a:f8:8b: 47:31:3e:e7:d1:c4:cf:4e:e3:86:d1:7c:88:e7:55: bc:f0:10:47:f6:0f:ba:09:f7:d5:f2:90:ac:95:5b: ff:fb:da:74:b3:28:57:b0:e5:93:57:4b:f5:cd:73: 89:75:3d:de:f1:50:25:67:7e:dd:29:09:e1:08:07: ee:4a:4c:40:f0:51:87:08:b1:90:94:65:22:94:ed: 87:ed:27:13:7b:93:38:c4:45:5d:a7:02:8f:56:c2: 2f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E4:E0:60:29:09:C4:E0:6C:81:A5:09:6D:72:D3:28:9C:FE:FD:51 X509v3 Authority Key Identifier: keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:0a:53:11:2a:d0:4f:27:7c:1c:ba:74:93:0f:09:51:77:91: 21:03:98:a2:86:69:05:ea:44:c5:58:8e:df:5c:26:bd:46:7a: 75:f1:7b:b0:7a:cf:ed:d2:d3:da:3e:21:5c:03:49:e4:27:57: 1a:e6:b1:c7:10:01:b0:83:59:d0:bb:78:51:26:97:59:c2:7d: af:20:af:e6:8d:a1:3a:59:b8:c7:59:21:a2:50:16:cf:92:e1: a7:cc:fd:1d:94:c3:03:15:6b:16:72:79:e3:b9:e1:71:6a:5c: bf:a0:1f:eb:64:9b:d3:69:22:14:cb:f7:23:3d:7e:7f:29:db: 0a:28:7f:e6:a2:f0:96:fb:c4:66:bc:55:c1:6e:75:4d:48:18: a1:39:b8:c3:4a:25:51:70:4b:f6:9a:05:5e:23:59:48:cb:b4: 7f:6f:dc:18:27:ef:2b:e3:98:85:90:72:4d:fa:bd:17:0f:bf: 01:a1:5b:33:33:93:a8:0c:79:07:be:85:43:1f:b6:33:dd:5e: 89:22:e1:1f:f5:1e:87:ad:e5:ac:17:2c:28:7a:a1:71:b6:92: a8:b6:07:39:29:2e:ad:fc:91:52:a4:45:81:16:6c:a5:c2:c7: 01:e0:7c:42:29:f7:0e:37:d7:28:f9:36:a3:21:0e:be:49:6a: a4:72:62:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdc7vYSDAvRe20Q28ccRDQ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYTQzMmE0ZWMzYjBhYzRjYTRlNGVjZWMwZTlmNGQ0NmI0 OTdhZjAwHhcNMjUwNjExMDMwMDUzWhcNMjUwNjEyMDMwMDUzWjAzMTEwLwYDVQQD EyhhN2U0ZTA2MDI5MDljNGUwNmM4MWE1MDk2ZDcyZDMyODljZmVmZDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6uD8eSQS866S14FF2QWQcnlgNTn4 IN/TVl4Ybxv6kaKjfJWh3lrgwJeBl8jtFh6hU+9mIcYYet0aYX+MSezTYdSllRdP 64bC7U//mGkZl81caTrOTSsy3WZAoc22A7AcgIHHTBuIIul2VwEp5SYdLBUt7n64 6gz7fv/Faq+SAvLe2lGXP6FaqQmoUjFlZfYicnFM3XYmnvT7HhQWdd5ireJq+ItH MT7n0cTPTuOG0XyI51W88BBH9g+6CffV8pCslVv/+9p0syhXsOWTV0v1zXOJdT3e 8VAlZ37dKQnhCAfuSkxA8FGHCLGQlGUilO2H7ScTe5M4xEVdpwKPVsIvDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfk4GApCcTgbIGlCW1y0yic/v1RMB8GA1UdIwQY MBaAFF2kMqTsOwrEyk5OzsDp9NRrSXrwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85ZTg0N2YtNDE0Ni00NTY2LThjM2Ut MWJhNTQzZWVhZWQ3LzEvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85ZTg0N2YtNDE0Ni00NTY2LThjM2UtMWJhNTQzZWVhZWQ3 LzEvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMgpTESrQ Tyd8HLp0kw8JUXeRIQOYooZpBepExViO31wmvUZ6dfF7sHrP7dLT2j4hXANJ5CdX GuaxxxABsINZ0Lt4USaXWcJ9ryCv5o2hOlm4x1kholAWz5Lhp8z9HZTDAxVrFnJ5 47nhcWpcv6Af62Sb02kiFMv3Iz1+fynbCih/5qLwlvvEZrxVwW51TUgYoTm4w0ol UXBL9poFXiNZSMu0f2/cGCfvK+OYhZByTfq9Fw+/AaFbMzOTqAx5B76FQx+2M91e iSLhH/Ueh63lrBcsKHqhcbaSqLYHOSkurfyRUqRFgRZspcLHAeB8Qin3DjfXKPk2 oyEOvklqpHJicw== -----END CERTIFICATE-----Generated at Wed Jun 11 11:05:30 2025 by rpki-client