$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft File: uRuRUEmDCRUGoalERXpFWLlNq38.mft (raw, json) Hash identifier: vNQzriUmwZ421QcxiB08XhsnkLHciYJ+MymP7dWzwd0= Subject key identifier: D7:04:90:80:9D:4E:81:50:B3:AE:D0:5F:7D:7D:8F:BE:07:80:0C:42 Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f Certificate serial: 01974B562FBA05DDC4A62026C819660FDAC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft Manifest number: 15AB Signing time: Sat 07 Jun 2025 17:00:28 +0000 Manifest this update: Sat 07 Jun 2025 17:00:28 +0000 Manifest next update: Sun 08 Jun 2025 17:00:28 +0000 Files and hashes: 1: 3cHkY6M3wghqy0E4fRU4kWGrFkQ.roa (hash: PisxdaF0q8E/ZaKxH7iqkdJWp2eWRH5HsNlfuhmL4YA=) 2: 7XN9wyggBJAAN_phHgYk5ZELjD4.roa (hash: 1wlvTE3rEqXXANBSrqvKUfV7fo/KmcUcs6Xsp62Q0YQ=) 3: CkF_shnLM2M31f9NtC6ofpAehWk.roa (hash: 9XHscVm5GJVGw7mr6oC1JuCI9DQ/dY6py+7xzxUKvgw=) 4: FFJ257cuWQvQOnyedneEzTkSEbg.roa (hash: WRIXzHulc7/3HRlvOUiBPW1I+RRv7EFQWc42kqGWgNE=) 5: RwtCVfFtaPV9RdeIV0kETaXiDzU.roa (hash: qGOs1nAXRnai3SqF63Pp3mOz35yOks9UR3jXK1Ksk+Y=) 6: V-ySkVo6AJD2k7bi0FwLmTw722g.roa (hash: ZQrxU4+RIDKWDuYxdvlV6VUP5fCT7nrPCzOEdrO784k=) 7: mK9ZGFT5MRus9cd9-ZHukBxXa70.roa (hash: bC9fcVsfywX7XSxHtFk/otbdEOU3pNXnqoILIEhH/LY=) 8: oicr-SH4uj1bEvnrrwUj7ri66GU.roa (hash: 1OP0Bnk8WtUk8p0pkwFceXgNGqSThNnA6BUw75ZT3Jk=) 9: uRuRUEmDCRUGoalERXpFWLlNq38.crl (hash: 9aSFM838sRyQ1Dbhh/MMbKJRceAWr/TnvpDkzC17F4M=) 10: wm1WVUXT9pVUrbgtuvUJjNCw7HI.roa (hash: 4A93zZwDOnQwirXpLmuckQTZrNNze07clVzbWfefS6s=) 11: ytRifUfzPmLAaJXJ2__CJPys9bo.roa (hash: 0HrxV+TBxPYNRPY94lk9XCsut+8XflFKvCHLDKEzYNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 11:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4b:56:2f:ba:05:dd:c4:a6:20:26:c8:19:66:0f:da:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f Validity Not Before: Jun 7 17:00:28 2025 GMT Not After : Jun 8 17:00:28 2025 GMT Subject: CN=d70490809d4e8150b3aed05f7d7d8fbe07800c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:59:93:ba:f2:43:1f:a1:2e:f2:27:99:34:77: 68:ac:8c:0b:24:b2:f8:c5:01:a0:81:ed:e2:ff:66: 70:a1:63:d6:49:59:7b:62:88:79:55:5a:7f:5e:ba: 9f:08:94:f5:62:86:ab:45:cb:69:23:1e:b0:a5:c3: d9:7c:e7:48:e2:62:89:5a:4b:2f:5a:ed:12:0f:5c: 52:0a:9e:e7:5c:04:3b:6f:92:c5:85:e5:9a:0a:7e: 88:29:f9:15:32:e4:09:da:41:5b:79:fd:89:b3:3d: 55:6c:e1:5b:86:80:10:da:b8:a4:b4:9c:9a:29:74: e2:b7:c9:1a:5b:14:81:07:db:d1:ac:92:3e:d9:c3: e1:89:6d:81:65:d3:e9:78:20:92:cf:88:62:0e:99: 40:ea:4c:e8:22:ff:3e:30:61:2d:ef:55:39:42:5b: d3:86:c4:e4:e5:1c:d4:bf:60:28:9f:99:a8:25:d1: 41:75:3e:a7:85:5a:a0:b1:23:8d:15:80:9c:97:3e: 6e:79:81:94:96:84:fd:13:32:74:8b:d9:25:c0:14: 47:55:a8:c2:af:ca:63:f6:03:63:21:ae:c7:89:29: 68:86:02:d8:f3:7c:29:97:4e:91:f0:0f:14:5c:56: fd:c1:0e:66:fd:da:94:fd:28:a9:8e:7a:80:f9:25: 5c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:04:90:80:9D:4E:81:50:B3:AE:D0:5F:7D:7D:8F:BE:07:80:0C:42 X509v3 Authority Key Identifier: keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:c0:06:37:8c:35:49:90:7b:77:19:e5:11:06:1b:94:b8:d8: 87:fe:58:b9:24:4a:a7:1d:71:32:16:7b:45:5b:af:07:71:cf: 57:10:8b:96:a2:b6:54:4a:a8:38:68:62:35:5c:4d:2b:5e:ae: 08:eb:be:a3:4c:fc:1c:1c:39:bf:80:0a:91:2c:93:7f:96:60: 71:af:b2:cd:78:aa:0f:f9:93:76:f1:e4:f5:43:00:a2:2a:49: 24:a6:ba:c7:7e:95:6f:70:5d:f6:5d:a8:29:61:70:28:5d:ea: 14:22:ec:37:b6:ef:c3:ee:e2:f1:45:af:86:70:f0:43:99:1f: e7:9e:b2:15:f9:2e:f7:9b:9b:a5:cd:59:d6:87:2c:52:6b:9a: b3:e8:1e:2d:a6:f6:91:2d:f3:42:87:70:d3:1a:d9:52:35:05: 40:b3:c2:c9:46:a7:4d:92:9f:f4:36:80:45:ca:f5:2d:68:3d: d9:21:50:f2:b6:aa:19:3e:66:9b:b3:40:e9:6d:d8:22:f9:19: 2e:5f:a4:ed:b6:14:c5:e2:3f:68:04:d3:c6:78:7c:17:af:98: 5b:c5:b2:8c:5f:20:f0:0d:53:0c:64:67:a9:92:f3:49:7f:81: 4a:95:81:53:c3:9c:bf:da:87:04:0d:95:8e:1d:a6:f6:11:dd: 0b:9f:45:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdLVi+6Bd3EpiAmyBlmD9rCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0 ZGFiN2YwHhcNMjUwNjA3MTcwMDI4WhcNMjUwNjA4MTcwMDI4WjAzMTEwLwYDVQQD EyhkNzA0OTA4MDlkNGU4MTUwYjNhZWQwNWY3ZDdkOGZiZTA3ODAwYzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVmTuvJDH6Eu8ieZNHdorIwLJLL4 xQGgge3i/2ZwoWPWSVl7Yoh5VVp/XrqfCJT1YoarRctpIx6wpcPZfOdI4mKJWksv Wu0SD1xSCp7nXAQ7b5LFheWaCn6IKfkVMuQJ2kFbef2Jsz1VbOFbhoAQ2riktJya KXTit8kaWxSBB9vRrJI+2cPhiW2BZdPpeCCSz4hiDplA6kzoIv8+MGEt71U5QlvT hsTk5RzUv2Aon5moJdFBdT6nhVqgsSONFYCclz5ueYGUloT9EzJ0i9klwBRHVajC r8pj9gNjIa7HiSlohgLY83wpl06R8A8UXFb9wQ5m/dqU/SipjnqA+SVcuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcEkICdToFQs67QX319j74HgAxCMB8GA1UdIwQY MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct OWRkNmU4OGZjYzhkLzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcAGN4w1 SZB7dxnlEQYblLjYh/5YuSRKpx1xMhZ7RVuvB3HPVxCLlqK2VEqoOGhiNVxNK16u COu+o0z8HBw5v4AKkSyTf5Zgca+yzXiqD/mTdvHk9UMAoipJJKa6x36Vb3Bd9l2o KWFwKF3qFCLsN7bvw+7i8UWvhnDwQ5kf556yFfku95ubpc1Z1ocsUmuas+geLab2 kS3zQodw0xrZUjUFQLPCyUanTZKf9DaARcr1LWg92SFQ8raqGT5mm7NA6W3YIvkZ Ll+k7bYUxeI/aATTxnh8F6+YW8WyjF8g8A1TDGRnqZLzSX+BSpWBU8Ocv9qHBA2V jh2m9hHdC59FjQ== -----END CERTIFICATE-----Generated at Sat Jun 7 22:17:46 2025 by rpki-client