$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft File: yE1hzRftkuVLszl_HlprOQSsbwU.mft (raw, json) Hash identifier: 358gZJ95lxtoGiCl5ysLV9dYGe9aZLq0C/0pxDgg5tA= Subject key identifier: 21:D8:44:A7:33:AF:E4:39:D8:D7:29:11:7A:A4:EE:2B:8A:68:CB:79 Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05 Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05 Certificate serial: 01974E579B320DE82DD032BA213B55D6F918 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft Manifest number: 1589 Signing time: Sun 08 Jun 2025 07:00:53 +0000 Manifest this update: Sun 08 Jun 2025 07:00:53 +0000 Manifest next update: Mon 09 Jun 2025 07:00:53 +0000 Files and hashes: 1: 7lgq0ctAzIlTDcpOLaQGdaGThZk.roa (hash: e5z2Mfd4VCKCw2JmNleVEdAAScHXO8Xd9p2GShP5Y6E=) 2: IGLb7JdpoxpYlnFXvXAzGRRfnEo.roa (hash: 0HJkbHEqR9KGOAfONOEGNISfFQwVd9M/ZUhb0aiOuaQ=) 3: L_lziZvf0rcW2nhVL69U2cxHt5E.roa (hash: pANePALmK/hOXRwbvUEA/qtpc0qlGhfdWdBBREZqc1k=) 4: YtSu06eBvsaI_VOFmqz1IslXnNc.roa (hash: 0dn7VD8ICYAbfWAEObXxBVJEjbsCWfJ8U7nwROGAGsU=) 5: ckan5dvz7J1ZSK30Drxlo4PWhMs.roa (hash: F1BRb89WpgPtx0JUztwDXeDnh4+IrOFx75odNR04usQ=) 6: dLz_hs_QORbsBLSIa-GqwYxnFoY.roa (hash: +fTN+O03RfwmbM+R0hQdMI6NFyRIvlQwmN4JSANhNh0=) 7: flXkvhrZJ0ZeBKtpmmtVGzFsQKI.roa (hash: Y9UGCFlpeU/Vq7d3cJo997/pq2lWNIQ3AFJn/rIco44=) 8: ikN4SSSIJdpATfbTuF1aqPVQm8w.roa (hash: gunzQ7zSHNaZSvXp8QC6wdbsRU0gF2fXQubVjTHi9K8=) 9: nBGnunXHIlzfqmh1yvjBYc2bnwI.roa (hash: AE0YoKWgcnhxm5wM19OntmREG6LsPgDjKTOjRjiZyzs=) 10: yE1hzRftkuVLszl_HlprOQSsbwU.crl (hash: WOr7QhrSOb4uE762xYq1E8RTHxgFBOSMSEVgMRI3szk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Jun 2025 07:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4e:57:9b:32:0d:e8:2d:d0:32:ba:21:3b:55:d6:f9:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05 Validity Not Before: Jun 8 07:00:53 2025 GMT Not After : Jun 9 07:00:53 2025 GMT Subject: CN=21d844a733afe439d8d729117aa4ee2b8a68cb79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0d:9d:6e:0a:23:01:fb:c3:ef:6f:2a:7e:9f: 4c:a6:b3:8d:57:a1:36:bf:9e:78:67:65:4c:63:fc: 35:8f:71:8c:c8:69:a7:7c:49:98:31:e6:83:be:cc: 70:c4:3a:a1:d5:9c:61:d8:4a:31:90:c1:f5:a5:48: d9:ef:fe:c4:7d:e4:83:56:5a:b8:95:96:15:b6:d6: ba:2c:e5:1d:99:1e:89:6e:2f:3c:47:f6:df:4f:2e: a6:e2:6a:09:d1:59:b8:0c:7f:0e:17:c5:17:dd:43: 3e:26:55:7c:00:00:ac:a6:75:53:ba:f9:e1:a6:da: d2:07:f8:dd:e3:2a:b3:40:92:de:78:16:0d:5d:1a: d8:72:f6:b1:85:72:e0:d5:83:ac:5f:57:98:a0:ad: fd:8d:28:2f:c0:27:93:c9:e1:67:5a:95:56:6a:1e: 5f:ed:da:d3:10:3e:3c:00:3f:e8:d8:87:a3:7a:db: 19:f6:2a:8c:99:d7:e8:ce:d0:f4:68:a3:32:f2:dc: 3e:21:49:b8:0f:c1:43:94:69:d6:95:e3:3f:7c:ae: 57:e1:05:32:cf:df:72:ef:f2:f8:a9:1f:42:80:71: 4b:f2:b4:a9:9a:f5:df:e7:94:d6:06:15:b6:2e:ad: 5e:a5:22:fa:cd:fb:bf:8f:c9:2c:63:27:e2:2a:e7: a9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D8:44:A7:33:AF:E4:39:D8:D7:29:11:7A:A4:EE:2B:8A:68:CB:79 X509v3 Authority Key Identifier: keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:d3:97:45:ef:5f:19:29:ba:7e:0a:a4:e1:90:32:7b:47:b8: 48:05:8d:4b:6c:fb:0e:76:fb:0c:57:cf:b5:ea:19:7c:67:f9: d8:98:52:2a:19:8e:52:29:55:3c:09:6b:59:7f:21:bb:ef:10: 1b:54:c9:81:f9:1c:4a:34:13:53:c4:58:4d:66:c3:71:4d:a3: 65:a5:02:e9:8e:4f:25:09:13:19:2c:00:d3:72:6b:52:0a:e2: 95:d3:73:6a:11:4a:ae:2e:3a:ca:4d:95:b6:a9:08:a7:05:be: f5:67:6e:03:31:92:b6:73:e1:c4:a3:d7:e3:df:1f:ed:0f:f2: 19:36:7b:05:07:8b:03:70:b0:be:da:1f:f5:66:01:03:74:40: 2d:20:ed:9a:2a:24:ed:15:00:b0:35:33:f3:1b:87:40:a6:d4: 19:d3:86:e0:1e:b0:d9:09:ec:ab:09:7f:c9:8f:92:f0:1d:d3: af:6c:02:a9:38:3e:73:d7:56:b3:96:9a:95:11:c2:e5:61:64: 95:66:c3:c0:f3:a5:18:b3:a1:35:c2:41:12:03:3f:66:39:40: 50:4f:e0:0d:6d:18:6c:c1:cc:30:64:05:92:27:f1:5e:5c:e6: 87:85:3f:ae:57:23:9b:52:77:e8:e4:c6:94:87:f9:aa:45:a3: 6c:53:7d:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdOV5syDegt0DK6ITtV1vkYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NGQ2MWNkMTdlZDkyZTU0YmIzMzk3ZjFlNWE2YjM5MDRh YzZmMDUwHhcNMjUwNjA4MDcwMDUzWhcNMjUwNjA5MDcwMDUzWjAzMTEwLwYDVQQD EygyMWQ4NDRhNzMzYWZlNDM5ZDhkNzI5MTE3YWE0ZWUyYjhhNjhjYjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzw2dbgojAfvD728qfp9MprONV6E2 v554Z2VMY/w1j3GMyGmnfEmYMeaDvsxwxDqh1Zxh2EoxkMH1pUjZ7/7EfeSDVlq4 lZYVtta6LOUdmR6Jbi88R/bfTy6m4moJ0Vm4DH8OF8UX3UM+JlV8AACspnVTuvnh ptrSB/jd4yqzQJLeeBYNXRrYcvaxhXLg1YOsX1eYoK39jSgvwCeTyeFnWpVWah5f 7drTED48AD/o2IejetsZ9iqMmdfoztD0aKMy8tw+IUm4D8FDlGnWleM/fK5X4QUy z99y7/L4qR9CgHFL8rSpmvXf55TWBhW2Lq1epSL6zfu/j8ksYyfiKuepXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHYRKczr+Q52NcpEXqk7iuKaMt5MB8GA1UdIwQY MBaAFMhNYc0X7ZLlS7M5fx5aazkErG8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGIt YzI1Nzc5MmRhZGM0LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGItYzI1Nzc5MmRhZGM0 LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtOXRe9f GSm6fgqk4ZAye0e4SAWNS2z7Dnb7DFfPteoZfGf52JhSKhmOUilVPAlrWX8hu+8Q G1TJgfkcSjQTU8RYTWbDcU2jZaUC6Y5PJQkTGSwA03JrUgrildNzahFKri46yk2V tqkIpwW+9WduAzGStnPhxKPX498f7Q/yGTZ7BQeLA3Cwvtof9WYBA3RALSDtmiok 7RUAsDUz8xuHQKbUGdOG4B6w2Qnsqwl/yY+S8B3Tr2wCqTg+c9dWs5aalRHC5WFk lWbDwPOlGLOhNcJBEgM/ZjlAUE/gDW0YbMHMMGQFkifxXlzmh4U/rlcjm1J36OTG lIf5qkWjbFN9dQ== -----END CERTIFICATE-----Generated at Sun Jun 8 17:48:04 2025 by rpki-client