$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft File: zRCMIl8keM1CMBeYkNByhL4WNs0.mft (raw, json) Hash identifier: H4SYL389fVPdUVieBzPZnAiKSXaOgvtXNOQgxd5VB1w= Subject key identifier: 1B:EE:E0:1E:6D:47:31:16:36:5F:5C:6F:07:F9:7E:39:26:62:33:D6 Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 019747E781A06B4B5172CD43DBA900979DDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft Manifest number: 0DCE Signing time: Sat 07 Jun 2025 01:00:43 +0000 Manifest this update: Sat 07 Jun 2025 01:00:43 +0000 Manifest next update: Sun 08 Jun 2025 01:00:43 +0000 Files and hashes: 1: 5WcQI-96O5FH1qX3Ok9ZLqqGV90.roa (hash: 6fOcHEhBTxH3iUZb4U4KYnoW42okdMilfcyFdKyUUCo=) 2: 6w6GslstW7dP-hGd9Y6a0xOTJ1Q.roa (hash: c/YkJLvVjnK6oPthfFlSxGHPywR+uY+AcXy43DN7bDA=) 3: 9pK-UIM-H6tNfktNjnY3n3eplHo.roa (hash: uVmuFNCMVIRszRB0UyxXgi1VNyC51j94Uds90LHBjSU=) 4: Qhq_Pkdg0_FY8PGZVpcBxgOpInw.roa (hash: B2o4MvsdpbkjfyfBKv+85v4Kp2E1LTKylYWaH/ffkEQ=) 5: TrRa3mOQMzvIbozJzmyBJZ6tULw.roa (hash: d1WpoK6cobO04MOKczILPk89idxmBxtIOoIeGxHI9HI=) 6: WxkR99ND6hkg9zjVGX3QR8_P3Sg.roa (hash: kx4fWFzO9g7cyAxp6MdcGUoII+Luoha51Ph8bVepefA=) 7: bV7wiXISBEG2SHcG3dNKC6Wy_3Y.roa (hash: nmxCRUNayEJiwBjnfgLQZj2sJPp5WltkD5SdU2gQZ9k=) 8: bel6Fk2PBFF8iK4X4dPcB_YL-p8.roa (hash: whSoMvRfcwg1zlxaNwdPk6EU1wdOECDElkdNcqQV/CE=) 9: dguhelyeA7h-WKBbQzBkNq3_W40.roa (hash: xeizpLm1WM753pH0+O915Rj+oI7hkint9s/onXzL15U=) 10: hBKsbi06dqWQsHOJ9T-z_RIbUjA.roa (hash: uWUX6xGjuFBVk0pdcf+5Gpk/beOEbACzQvY2ZU/EXNs=) 11: uOq6i2-TnOYCsxAxwvHpJmAlTfg.roa (hash: 9inVtd7SVRI0UIGAJNZs9aNl1wsnYwDi5iWNfEOoDLM=) 12: yoNL7-5tCOlQ2k6SSzI3Bw-Kl9o.roa (hash: ZyshyOfvs12ZYQKuRmc4qW+/EYU6jHrxeUY751HiXsY=) 13: zRCMIl8keM1CMBeYkNByhL4WNs0.crl (hash: l1gMpcefiDSeLNfyLh/VN13IASHZ4OYgu9Kf6PTLk1s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 22:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:47:e7:81:a0:6b:4b:51:72:cd:43:db:a9:00:97:9d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Jun 7 01:00:43 2025 GMT Not After : Jun 8 01:00:43 2025 GMT Subject: CN=1beee01e6d473116365f5c6f07f97e39266233d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9d:80:3c:41:a5:e4:d2:93:eb:b0:c5:80:1a: 3b:4e:e8:cc:05:ec:09:2d:3d:2b:bd:66:c6:ff:d1: 0c:51:02:83:3e:cc:3e:1b:84:09:13:1e:5d:45:1e: 58:4f:9b:13:e2:f2:4a:b9:e2:e1:70:32:38:71:79: 2d:bb:75:1c:cc:90:51:b5:ed:27:dd:ef:84:ba:75: 96:27:7b:33:f7:0b:25:01:52:51:96:ee:ae:65:5a: c9:0c:f5:eb:9c:12:e0:8c:32:99:48:68:8f:a5:58: 2f:97:00:db:83:71:b6:72:da:c4:bc:31:c2:86:e4: e5:e7:1e:70:3c:13:43:47:77:28:55:50:62:97:2a: 87:01:56:e6:cf:1b:43:8b:76:eb:a5:4a:b9:1e:68: 39:8b:b7:0a:bd:4e:aa:96:b6:d2:f1:09:c4:2b:14: 7d:f5:6d:3b:1e:68:cd:13:a2:4c:ae:90:84:08:ea: 08:77:67:04:28:4e:6a:e4:aa:a1:f3:82:d3:b7:ba: 15:55:66:c9:2e:94:1c:28:6b:53:20:48:9b:a9:a3: e5:36:c2:45:0d:b1:2c:56:51:11:83:dc:1c:b0:f7: 89:8a:69:8c:cc:42:27:e6:03:44:4f:a6:6f:7f:a7: c3:9d:e0:78:04:b2:7c:9d:86:23:df:41:6b:75:21: d4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:EE:E0:1E:6D:47:31:16:36:5F:5C:6F:07:F9:7E:39:26:62:33:D6 X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:19:b5:de:ca:17:a4:89:f0:64:29:e7:cc:ad:08:10:69:f7: bc:2c:fc:f4:c1:c5:54:30:d8:15:31:7c:a4:f7:0d:bc:92:14: a5:c8:8c:71:1c:1d:74:f8:32:39:6f:d6:30:1e:da:bf:3f:74: ae:18:2d:e3:07:91:3e:6c:19:30:04:4a:ee:44:f1:43:8d:22: 20:fe:dd:b2:41:37:4a:85:02:49:d9:86:af:6d:cc:19:96:40: 17:06:dd:4d:9c:8e:cc:69:98:b0:7a:28:45:f3:c6:3a:e3:30: ce:42:12:71:b2:fc:ac:f8:ff:80:e3:e0:58:92:c3:bf:c2:d7: ac:88:87:cf:a6:a2:5e:3d:dc:5d:b9:e6:2c:e4:d9:b9:de:1c: 38:55:61:ac:f3:b2:a2:0e:58:2f:de:42:5b:7b:77:38:b2:3e: fb:00:9d:4b:db:40:8f:a3:bc:2a:b3:97:61:fe:3a:c8:a4:6a: cb:e8:d8:ab:ed:41:04:d5:eb:27:c5:dc:b7:da:89:9f:a2:e6: bf:73:a4:28:18:ed:ba:07:22:1e:7f:ee:b1:26:8d:c8:e3:b6: 61:73:cd:ab:c6:b9:9b:5f:15:e5:5d:7a:62:aa:df:3d:b2:fc: c0:c7:b5:2a:e4:22:ec:f6:1b:98:c2:d4:74:39:ce:c3:91:7f: 2a:d0:44:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdH54Gga0tRcs1D26kAl53eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjUwNjA3MDEwMDQzWhcNMjUwNjA4MDEwMDQzWjAzMTEwLwYDVQQD EygxYmVlZTAxZTZkNDczMTE2MzY1ZjVjNmYwN2Y5N2UzOTI2NjIzM2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ2APEGl5NKT67DFgBo7TujMBewJ LT0rvWbG/9EMUQKDPsw+G4QJEx5dRR5YT5sT4vJKueLhcDI4cXktu3UczJBRte0n 3e+EunWWJ3sz9wslAVJRlu6uZVrJDPXrnBLgjDKZSGiPpVgvlwDbg3G2ctrEvDHC huTl5x5wPBNDR3coVVBilyqHAVbmzxtDi3brpUq5Hmg5i7cKvU6qlrbS8QnEKxR9 9W07HmjNE6JMrpCECOoId2cEKE5q5Kqh84LTt7oVVWbJLpQcKGtTIEibqaPlNsJF DbEsVlERg9wcsPeJimmMzEIn5gNET6Zvf6fDneB4BLJ8nYYj30FrdSHUyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvu4B5tRzEWNl9cbwf5fjkmYjPWMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWRm13soX pInwZCnnzK0IEGn3vCz89MHFVDDYFTF8pPcNvJIUpciMcRwddPgyOW/WMB7avz90 rhgt4weRPmwZMARK7kTxQ40iIP7dskE3SoUCSdmGr23MGZZAFwbdTZyOzGmYsHoo RfPGOuMwzkIScbL8rPj/gOPgWJLDv8LXrIiHz6aiXj3cXbnmLOTZud4cOFVhrPOy og5YL95CW3t3OLI++wCdS9tAj6O8KrOXYf46yKRqy+jYq+1BBNXrJ8Xct9qJn6Lm v3OkKBjtugciHn/usSaNyOO2YXPNq8a5m18V5V16YqrfPbL8wMe1KuQi7PYbmMLU dDnOw5F/KtBEgA== -----END CERTIFICATE-----Generated at Sat Jun 7 06:11:40 2025 by rpki-client