$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft File: C047O4QkIliGMULtOhl5LZfLvHQ.mft (raw, json) Hash identifier: mdVz/u5ni7pv1uu1Lj1Suww8RpncMnZqqgj2BMMXZI4= Subject key identifier: EB:12:A8:BA:3A:58:B5:94:B5:2B:3E:EB:10:CC:C1:66:DF:73:E2:AC Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 019751FD009C54273AC3CFB18280D77F9F88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft Manifest number: 0248 Signing time: Mon 09 Jun 2025 00:00:24 +0000 Manifest this update: Mon 09 Jun 2025 00:00:24 +0000 Manifest next update: Tue 10 Jun 2025 00:00:24 +0000 Files and hashes: 1: 4EVIucA70gYtRBC_kvd8S_jO4G4.roa (hash: f24fNYbERcDJzGGGVxLcXRg46QfyX7NJWLWSxrMNmcw=) 2: 6vUhZWGddxVPIIeeH6-Dbc9jpk4.roa (hash: WfzTHJzN03ulxZw9x6atlyLctl8HtDch71VvQgIPbKM=) 3: BEBIiS8kF8YsGnU_xtcNUlRLrD4.roa (hash: jOHIlKdvXIgJGWM14XmaB7UsAMXtqbb4a2RVgY2if5A=) 4: BjqTHtTtBtZx2Y5CozNWD3CEBt0.roa (hash: eW/XcbSH0tDYIAlNaQxhj837cfdUxkfKds65F/54mgM=) 5: C047O4QkIliGMULtOhl5LZfLvHQ.crl (hash: KAnqhX22k/c4LyqsKhAveKqj+OH+LvKAQa6W5RPBeS0=) 6: EvZmdpYLd03WERL_L0i0mrtj944.roa (hash: CV2qEuFjtfL/Sdsin89UXRGI8h47pjbkcQWbmiCWOHY=) 7: H49hyQPEQJXxJVi2iR8A2ADQ41U.roa (hash: eqi7i//uHcpOg1OfB0kupkpo9kTQKxZE6a6NNvU+Pyg=) 8: LWsi3KmW8bzkCxEOXVP0T6JNl74.roa (hash: ++a3kmsuF/zJu9wF6l25AqVnQ10r4JeQqeeIizqUJQ4=) 9: Tv3eHkTibu1-NKazXj-AMkMj7Sw.roa (hash: lHAqhVPifaQjD9rLTD+uDdEniFd0R32cYJ3zWnuqKHM=) 10: b7g_AfGKRKl1uxe-BoiQM3sl0nw.roa (hash: Zf9ZuQPGxN3TX6S4uzmoIy9WChIwMZZm6ZNHezb6N+U=) 11: bCaBS4aQHjuaa_tTVMTRXq8OR_U.roa (hash: 7H4q9uVHSlMkwQO5xRA3Q4nmZoDkIn1SJmtZoSSXixQ=) 12: eXJnpYMa-IdGpU12uxGCY5NDT2Y.roa (hash: M3Nh2BNY8AV/HHul6zfhbO6slqPj10KjIlafndI4MS8=) 13: ilbTbKDw7TN7XTGmwqbvNDRO4fw.roa (hash: 4N4i1l9+mBJiqdctdVubAmlboOr8e2raVm5nIrlAgsQ=) 14: n0559nrrxWlTiJJeG18heWs2pIU.roa (hash: MAU9xz4lV/zxBb8iBC0mDqVvEPA9rfYw9hMbacTD5Ec=) 15: sbkxRvSrfQGNdpGANqUogURHroU.roa (hash: GVO8i7AC/aFii+I0dhy+QGbxHH4AqRNBV/o41DJJYK4=) 16: uSB4Q9lZ5N_vUTK7fY2jb9w2g4Y.roa (hash: br5Lt3idKAa3r0A/AYPd7r0VCPVHp7gxtlokiM1B+jU=) 17: uuTcIhmMVylXKoo0d8I18SaHjWU.roa (hash: a8ZKg1ASt06tQrhILg7SaB6+2r8ufbJSPrndEQoQ7X4=) 18: znAyt_jBZAhoDnHzql64kcQWok8.roa (hash: rGr5XZMR5/sQ+wZVgQmYXlbzsOXYooLIJ9FAXBZkAjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Jun 2025 00:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:51:fd:00:9c:54:27:3a:c3:cf:b1:82:80:d7:7f:9f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Jun 9 00:00:24 2025 GMT Not After : Jun 10 00:00:24 2025 GMT Subject: CN=eb12a8ba3a58b594b52b3eeb10ccc166df73e2ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6f:8d:c1:fb:49:15:6a:1d:8b:f3:2f:70:42: ba:c7:9b:f3:f1:d0:1e:a6:91:cd:9d:39:3c:b1:38: 24:9d:68:e1:52:24:70:ee:57:61:29:d6:3a:0c:1e: 97:d0:8f:d5:f2:f1:05:25:81:42:66:36:3f:32:a5: 35:2a:3e:c8:5d:b3:8f:dd:96:ed:10:5b:52:df:f8: 74:2e:27:23:66:57:ce:85:db:6d:4c:dc:c5:6e:bb: a6:f7:ec:91:d8:04:01:29:d3:c4:3c:97:47:47:31: 83:7c:fc:ad:5b:e8:37:d6:06:96:46:30:83:ae:cb: 0f:07:87:cb:2f:4b:59:50:b0:52:65:55:0f:38:0e: 63:ea:51:f6:53:29:f1:6c:83:35:d6:6c:9e:9c:9a: 8a:65:ba:9c:89:66:00:f3:2c:9f:fc:68:8e:db:c9: e0:53:6d:b5:4b:ad:6a:37:ed:f1:ae:28:91:95:2e: a1:07:98:6a:7c:dc:75:28:99:68:e1:52:cf:33:8e: 5d:cf:c3:c0:4a:2a:91:44:e1:aa:97:9e:98:38:60: 3c:2d:de:5a:91:73:6c:0b:ec:20:60:4e:86:9c:46: 86:b5:68:95:e7:82:98:9a:7c:03:44:b9:a6:fa:2c: 12:5f:07:8a:82:c6:37:a9:5c:80:fa:f4:35:ed:35: 08:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:12:A8:BA:3A:58:B5:94:B5:2B:3E:EB:10:CC:C1:66:DF:73:E2:AC X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e3:35:81:35:bf:e8:af:f5:25:04:91:cc:7e:5e:f1:fd:ef:90: 36:70:b0:8f:7e:b0:d8:17:63:56:66:52:4a:bb:68:48:03:dc: 7f:d1:05:b1:3f:2c:43:9e:19:8d:42:f7:5c:e3:b8:21:a7:f8: 02:ff:f6:c3:65:72:0a:46:5a:0c:f6:af:a8:0e:f4:0e:0b:8f: a9:f7:5f:f2:8c:41:8b:0d:21:6c:24:65:64:04:c4:a5:60:f3: 50:21:4b:8d:9b:4d:92:9f:91:52:9c:4e:40:8b:88:17:7d:a9: 94:51:99:d2:d4:1e:aa:7f:37:92:b1:d6:aa:8f:b0:21:8e:3d: 91:a6:bf:6a:7e:f9:66:26:fb:8e:13:01:ec:f2:83:0d:05:37: 4c:75:f4:34:3d:94:c2:b4:52:1a:30:fe:bf:44:94:ee:64:0b: c8:bd:6e:98:92:ff:cd:61:d2:fb:02:41:88:83:46:63:c2:78: d1:65:ee:68:b1:3e:ba:c6:06:86:a6:3a:30:82:cc:20:de:ad: 1e:ae:20:f6:4b:94:f3:2f:72:a2:9e:15:e2:63:d1:4a:fe:d4: b9:fa:2f:08:19:3a:e3:e2:3c:1f:9f:04:b7:59:80:6f:82:18: 9a:f8:d6:67:72:38:68:bd:bc:d4:d9:1c:b1:fc:d0:f2:0d:58: 4e:0b:ac:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdR/QCcVCc6w8+xgoDXf5+IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjUwNjA5MDAwMDI0WhcNMjUwNjEwMDAwMDI0WjAzMTEwLwYDVQQD EyhlYjEyYThiYTNhNThiNTk0YjUyYjNlZWIxMGNjYzE2NmRmNzNlMmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhm+NwftJFWodi/MvcEK6x5vz8dAe ppHNnTk8sTgknWjhUiRw7ldhKdY6DB6X0I/V8vEFJYFCZjY/MqU1Kj7IXbOP3Zbt EFtS3/h0LicjZlfOhdttTNzFbrum9+yR2AQBKdPEPJdHRzGDfPytW+g31gaWRjCD rssPB4fLL0tZULBSZVUPOA5j6lH2UynxbIM11myenJqKZbqciWYA8yyf/GiO28ng U221S61qN+3xriiRlS6hB5hqfNx1KJlo4VLPM45dz8PASiqRROGql56YOGA8Ld5a kXNsC+wgYE6GnEaGtWiV54KYmnwDRLmm+iwSXweKgsY3qVyA+vQ17TUIbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsSqLo6WLWUtSs+6xDMwWbfc+KsMB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4zWBNb/o r/UlBJHMfl7x/e+QNnCwj36w2BdjVmZSSrtoSAPcf9EFsT8sQ54ZjUL3XOO4Iaf4 Av/2w2VyCkZaDPavqA70DguPqfdf8oxBiw0hbCRlZATEpWDzUCFLjZtNkp+RUpxO QIuIF32plFGZ0tQeqn83krHWqo+wIY49kaa/an75Zib7jhMB7PKDDQU3THX0ND2U wrRSGjD+v0SU7mQLyL1umJL/zWHS+wJBiINGY8J40WXuaLE+usYGhqY6MILMIN6t Hq4g9kuU8y9yop4V4mPRSv7UufovCBk64+I8H58Et1mAb4IYmvjWZ3I4aL281Nkc sfzQ8g1YTgusJg== -----END CERTIFICATE-----Generated at Mon Jun 9 09:03:13 2025 by rpki-client