$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft File: cG06u7R4t07yre-bt8QzbjQRHVE.mft (raw, json) Hash identifier: i4Gt17WPOZaAx4xIY/D23VoWH6yqgbfvRjZzx7YLQDY= Subject key identifier: D4:D0:3C:0D:FD:C7:1D:07:4F:68:B9:B3:97:4F:49:1C:4C:EF:E8:C4 Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51 Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51 Certificate serial: 01973BAC622D1BA2631425AE9FBBEA87AECD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft Manifest number: 0F5B Signing time: Wed 04 Jun 2025 16:00:42 +0000 Manifest this update: Wed 04 Jun 2025 16:00:42 +0000 Manifest next update: Thu 05 Jun 2025 16:00:42 +0000 Files and hashes: 1: 1-DdA-do2aUnfFDViNUxhUDqFzbE.roa (hash: BKYK/ZWsPHxxlNPF0PEHOjs0OjsXKAGuBICEBJN+sBU=) 2: KDjWBtfUWmvzACa57cUDNtkrdUA.roa (hash: /glLy7mZaGaTX2OWyQgPV2Cf31NNes0oBZbekJoIYok=) 3: PquNLopkqyd1FPkE6lVSuFZAhHk.roa (hash: cueg/ECXevtubCCHF8NReS6so4hgNR13sPfAmLWyFN8=) 4: SKahOuz63VxzF7gsfLLtP4-dwsQ.roa (hash: tgpfEWxbjIJhXJgvlYzjtjMs+efIHb2DWjDR4Pl22YM=) 5: cG06u7R4t07yre-bt8QzbjQRHVE.crl (hash: arcip5wot5k0k/Qob59EHXdKaZg/UiJG0ffdSkrD8Ok=) 6: dj7XdZh5KETFPQnDms3UxXnRXC4.roa (hash: EpSZ3YEAtJm35+lis2XvA9ik+aj1Kz53yBaF/oXDmdQ=) 7: mx_lz5ePGWdFvRNKMpVlzKIOYgA.roa (hash: g9PhpMZ1NQ6VmU7t7tiyo0S5wdLyY0k3bkBy2uqD7Q8=) 8: nq4bzy4h6lHvAq7WfQfvLT3Lcxs.roa (hash: AUW0hCwolQea98JTwSo4ol+MpnG7tQ7XKxKB7k262zg=) 9: pnzGJ4U9axy4lLwZnaehAwpRVaQ.roa (hash: rLQUf7uZTpB79YDcuBoB9yRmzU3aEUgIa9XP7frMy3M=) 10: rIEcC1yrrtWRE_-aC4aiNaHlF0w.roa (hash: RIIBfBGrMJNxseu/gjjvLy+xu6nPcaesVv59+v9lv30=) 11: wF16Isbo0PTlUouJULLf9fQs6Jw.roa (hash: ujnMHiwDZPQLz7IHlGLCJr2Hydzywx1acJmP/oG/nU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 16:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3b:ac:62:2d:1b:a2:63:14:25:ae:9f:bb:ea:87:ae:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51 Validity Not Before: Jun 4 16:00:42 2025 GMT Not After : Jun 5 16:00:42 2025 GMT Subject: CN=d4d03c0dfdc71d074f68b9b3974f491c4cefe8c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:72:dc:07:9b:31:03:2f:7c:65:dd:b0:23:c2: 0d:cb:cc:bc:ba:38:7a:a1:b4:d1:ed:a2:25:77:e9: ee:d6:24:cf:e1:6e:6c:01:e4:6e:76:e5:3c:8c:49: a0:a3:c8:25:d5:58:ec:04:24:b0:74:8a:bc:e8:ec: 54:25:32:0a:47:ca:d0:72:a6:10:63:d0:21:32:34: 70:01:e4:2d:95:ee:c6:32:35:30:3e:39:b5:b8:96: 6a:d9:7d:dc:5e:c4:19:c1:dc:ee:fa:00:c5:b9:b1: e3:77:70:ba:dd:85:90:8c:c2:91:d0:54:14:2b:1e: e5:b2:29:90:0b:27:1d:08:fc:0b:c3:91:cb:5e:e1: 8f:70:f0:f7:07:cf:d5:40:a2:f0:a8:d9:86:61:35: 05:97:62:77:0b:9d:51:24:a0:d8:35:de:bf:65:ba: 9b:57:e5:e4:6c:03:0f:37:61:d2:e6:e8:10:63:a8: 28:08:a2:9d:55:66:f5:a7:8c:ad:39:5b:cd:f6:e3: 84:a0:c1:03:1b:39:fc:83:a3:c8:e0:32:a5:d9:29: 69:bd:c2:c8:f4:e2:bd:23:e2:c6:c0:44:3c:06:a7: 9d:61:cc:db:dd:f2:47:d9:53:9b:5e:e1:03:fd:20: 96:f2:da:0d:76:86:97:49:05:26:b7:0b:21:5b:fc: 0a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D0:3C:0D:FD:C7:1D:07:4F:68:B9:B3:97:4F:49:1C:4C:EF:E8:C4 X509v3 Authority Key Identifier: keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:01:72:12:0a:a5:b7:07:52:67:2f:67:90:a0:09:4d:13:9d: ac:9e:cf:36:e8:7a:15:a4:ea:35:77:72:11:ce:53:c0:44:33: 33:eb:2f:e6:9e:92:ab:e1:0c:97:8f:4c:da:92:19:d8:e2:8a: 51:0d:ca:77:c2:31:40:b0:a7:3f:d3:b2:44:f4:6a:1f:d9:bf: 8e:a2:d7:1c:65:b7:04:a9:d8:76:e2:72:f8:df:9f:72:02:c3: 7e:2e:62:d9:9f:65:ae:62:a1:5d:3e:99:fe:e1:8d:22:37:33: 04:d8:e3:b8:6a:03:c6:0d:87:88:a5:a6:7e:07:ad:4e:1e:26: 76:6f:10:b4:85:ef:98:0b:5a:d9:44:6d:5b:68:8d:87:a4:28: 9c:db:55:c3:43:38:21:e4:c6:14:21:87:d5:fe:6b:ae:1b:47: 8d:9c:68:5e:e3:a5:f1:21:d7:53:93:8a:92:26:fa:0c:7e:3e: ea:02:ea:6f:07:9a:69:85:50:95:da:5e:e6:61:fa:7b:d1:f5: f2:7f:0a:78:05:40:61:ed:ac:e5:fc:c1:2f:18:03:a7:a5:6f: 90:f1:1e:53:d9:af:be:9c:56:d2:dc:b4:a2:79:54:2f:75:74: 71:23:2d:94:4a:4c:3b:b8:9e:03:f3:f1:7a:2c:9e:2c:d8:64: df:c3:35:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc7rGItG6JjFCWun7vqh67NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNmQzYWJiYjQ3OGI3NGVmMmFkZWY5YmI3YzQzMzZlMzQx MTFkNTEwHhcNMjUwNjA0MTYwMDQyWhcNMjUwNjA1MTYwMDQyWjAzMTEwLwYDVQQD EyhkNGQwM2MwZGZkYzcxZDA3NGY2OGI5YjM5NzRmNDkxYzRjZWZlOGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3LcB5sxAy98Zd2wI8INy8y8ujh6 obTR7aIld+nu1iTP4W5sAeRuduU8jEmgo8gl1VjsBCSwdIq86OxUJTIKR8rQcqYQ Y9AhMjRwAeQtle7GMjUwPjm1uJZq2X3cXsQZwdzu+gDFubHjd3C63YWQjMKR0FQU Kx7lsimQCycdCPwLw5HLXuGPcPD3B8/VQKLwqNmGYTUFl2J3C51RJKDYNd6/Zbqb V+XkbAMPN2HS5ugQY6goCKKdVWb1p4ytOVvN9uOEoMEDGzn8g6PI4DKl2SlpvcLI 9OK9I+LGwEQ8BqedYczb3fJH2VObXuED/SCW8toNdoaXSQUmtwshW/wKBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTQPA39xx0HT2i5s5dPSRxM7+jEMB8GA1UdIwQY MBaAFHBtOru0eLdO8q3vm7fEM240ER1RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYt YTQyMTNjOTNmMWY3LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYtYTQyMTNjOTNmMWY3 LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhgFyEgql twdSZy9nkKAJTROdrJ7PNuh6FaTqNXdyEc5TwEQzM+sv5p6Sq+EMl49M2pIZ2OKK UQ3Kd8IxQLCnP9OyRPRqH9m/jqLXHGW3BKnYduJy+N+fcgLDfi5i2Z9lrmKhXT6Z /uGNIjczBNjjuGoDxg2HiKWmfgetTh4mdm8QtIXvmAta2URtW2iNh6QonNtVw0M4 IeTGFCGH1f5rrhtHjZxoXuOl8SHXU5OKkib6DH4+6gLqbweaaYVQldpe5mH6e9H1 8n8KeAVAYe2s5fzBLxgDp6VvkPEeU9mvvpxW0ty0onlUL3V0cSMtlEpMO7ieA/Px eiyeLNhk38M11A== -----END CERTIFICATE-----Generated at Thu Jun 5 00:19:59 2025 by rpki-client