$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft File: s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft (raw, json) Hash identifier: 4B8hykOp+uFZJJQvS6/k6rjjVrxB7P/aSJyfqW5gh8M= Subject key identifier: F4:44:00:B5:A5:D5:49:81:8F:0F:C4:C6:9C:BA:27:95:86:88:33:D7 Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Certificate serial: 01974967FA19317AA459F8A19DA93E719C85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft Manifest number: 1593 Signing time: Sat 07 Jun 2025 08:00:40 +0000 Manifest this update: Sat 07 Jun 2025 08:00:40 +0000 Manifest next update: Sun 08 Jun 2025 08:00:40 +0000 Files and hashes: 1: 1IyxB14_QkLsvmLRx3j-3a6Zjk4.roa (hash: htWKauGvhiwmC3uhHI9F9baGTADLWNpjXIog5aUAkzA=) 2: Hrw24NCuWIUCpkj_ixSA3ykRPr4.roa (hash: EL86DxycBZAbHkapsC+FVYde7DJDbg6IvsLrlIhK4Mg=) 3: HzkqLbs1liYqOOnORyYsONDUWCk.roa (hash: uXYRvHJ6LJgN5jTlxHsTjXJyetqQoAXwubqH0//UAWg=) 4: KW8HM7Vt-viFSQssh-MaAGQ56LI.roa (hash: LVB3HoG1zrGwq6DA6Whlqb+iZJnipajeWgJUkFDtgQ8=) 5: LMWubVuf7cJuSG5rD2NRgzDK5TM.roa (hash: BApiahutiwbQpT3is1YK4Anf4y1KpsDk2PWh/oiETuo=) 6: N8YU9P6afQ3l1ax9yLIDe6D0fIk.roa (hash: EU77Dk5F7GrtkJ85p7yvIHvzXNj6aNgdhN+Tn5j+zs0=) 7: NxaezdRi3ofV0Ea6FtmKMCg4Xno.roa (hash: OxfdQ+cdMI49CYY0Q1jeMkKHuJPcs1w/NoTD4eAZ2MA=) 8: jGaeQ05R3hLIsxNTb7dpc8FaO6w.roa (hash: 4TEbxdiinYCpm4mycPqOwDmBBxQQxUxqZfGO0t4kbOg=) 9: mSsD_9FMfN2LP7M_Mwsa2ue8f54.roa (hash: 9X0dNAuuQyEHvxBMN4gp2QewnB9NGpB0KtQCW0IE4VU=) 10: oRsHwl0lqDdQsW8I1c5igLUyNzs.roa (hash: 8g9A+Hdue1idAErOv1qWZKgEKPMgG/A4+RlDqNfgnkI=) 11: oreGjQwv74g6OpxObQTCv-MnU1M.roa (hash: d1IJwSRdqQjA5VA/VLC7+miffsmnB8Nxer6G7ClHfMc=) 12: p2_R78qfiRDhzvxPsVGCBtVmaJE.roa (hash: AfONkYdMNZkN9Er/D4pbys1uxPQQYlJm+sdpKa5QxNI=) 13: s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl (hash: V5a98itK258Y1NkHX1OcjqLtNj7okKb8W919cmGmS58=) 14: wjy1-qmg6rYR0UilXbPOrktmKnc.roa (hash: OCHLZL4VOIDtWxajhki14b+EkeW6juZq6cOYKpzs8QI=) 15: xMcgE5el8x0M_rTEbVyhY3X3x1c.roa (hash: PGLJrZJLBXcLan5LC1jzJXTcMWQ+drrbyWZOiA3GgNU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:49:67:fa:19:31:7a:a4:59:f8:a1:9d:a9:3e:71:9c:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Validity Not Before: Jun 7 08:00:40 2025 GMT Not After : Jun 8 08:00:40 2025 GMT Subject: CN=f44400b5a5d549818f0fc4c69cba2795868833d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f2:ce:e7:4a:4f:52:01:49:45:35:05:93:8a: 19:68:90:0b:76:f0:ac:60:41:06:02:b4:75:b1:13: 0b:77:86:e9:3b:3b:eb:4c:41:59:bd:6e:e1:fc:e1: 28:da:a4:a6:9c:8f:a8:f0:7e:24:e4:7b:eb:90:76: e9:47:44:39:f7:20:71:29:2f:14:a7:c8:2e:ae:25: 6c:77:ff:46:32:c2:45:4a:d1:d3:f1:3e:da:fe:9a: 4f:2d:3e:94:32:4f:4f:13:31:df:06:0a:77:8a:75: 19:51:b2:26:b7:55:9d:84:f2:36:2d:ff:02:b8:e0: 55:a6:83:93:1e:1a:db:a7:a3:e8:42:60:93:e5:36: 4d:e5:b1:4b:9d:4f:6f:e4:4b:42:05:f2:09:7e:dd: 9e:e6:b6:d3:a3:63:fc:11:45:86:5a:68:77:fa:9d: b1:6c:b3:73:b3:6a:5f:8f:88:6c:4e:37:17:a1:1e: c5:a4:f9:8a:53:00:18:67:18:47:fb:c1:c9:6f:18: 1b:8a:4e:eb:18:4b:c4:dc:fa:a4:9b:39:b5:3a:a1: 4c:ea:fe:39:d7:d9:ce:5a:cc:52:45:2d:b8:4f:3a: ea:a8:ea:5e:87:92:53:c6:56:c4:9d:18:d0:34:1c: ed:61:a0:22:57:5f:86:b1:e6:2a:70:fb:62:b4:df: 57:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:44:00:B5:A5:D5:49:81:8F:0F:C4:C6:9C:BA:27:95:86:88:33:D7 X509v3 Authority Key Identifier: keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:d7:19:09:ac:45:8c:6c:68:83:a4:cb:5c:5c:87:f3:c9:e0: e7:2f:93:8a:49:9a:40:3e:d8:d1:e9:41:bf:4c:af:d6:07:47: fc:8c:a0:8b:9a:5c:7a:ed:45:30:9d:59:84:2b:7e:db:34:e9: 05:b0:31:f3:32:09:be:d4:47:9c:f1:5f:84:d4:5d:e5:62:f1: 48:ae:e3:77:46:ff:29:4a:5a:2f:be:61:64:1c:8c:a3:9d:ea: 70:9f:49:7c:ee:de:a0:09:9c:7c:7f:c1:e2:42:82:ec:56:11: 75:b4:38:2b:9a:3d:07:12:73:7f:7f:8c:11:23:a3:e3:0a:c1: ac:0a:2b:77:14:76:38:94:00:b5:44:da:42:24:9a:07:36:fe: 70:6a:c3:17:6e:79:75:5d:dd:9b:9a:7a:8b:72:a4:d4:ad:ed: de:0d:fb:20:07:60:eb:63:5a:90:72:5d:3e:8f:3e:8c:f8:9e: 6a:98:8a:65:44:72:39:3a:ec:e6:2e:ee:fe:0d:1a:2e:39:46: 4d:2c:df:4a:c9:ab:bc:30:09:58:15:77:c2:12:46:b9:ba:29: 13:b3:19:bb:57:29:26:0f:5f:f5:be:42:c4:97:0e:28:38:e2: ab:f3:31:61:01:79:af:90:ab:92:1a:4d:8d:c3:f8:36:83:b3: d7:7a:01:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdJZ/oZMXqkWfihnak+cZyFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYTVkOTk4NjNkYjJlNDliNDRmNmMzMjRlYjA0Mzg4ZmM3 NTE1ZDIwHhcNMjUwNjA3MDgwMDQwWhcNMjUwNjA4MDgwMDQwWjAzMTEwLwYDVQQD EyhmNDQ0MDBiNWE1ZDU0OTgxOGYwZmM0YzY5Y2JhMjc5NTg2ODgzM2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPLO50pPUgFJRTUFk4oZaJALdvCs YEEGArR1sRMLd4bpOzvrTEFZvW7h/OEo2qSmnI+o8H4k5HvrkHbpR0Q59yBxKS8U p8guriVsd/9GMsJFStHT8T7a/ppPLT6UMk9PEzHfBgp3inUZUbImt1WdhPI2Lf8C uOBVpoOTHhrbp6PoQmCT5TZN5bFLnU9v5EtCBfIJft2e5rbTo2P8EUWGWmh3+p2x bLNzs2pfj4hsTjcXoR7FpPmKUwAYZxhH+8HJbxgbik7rGEvE3Pqkmzm1OqFM6v45 19nOWsxSRS24TzrqqOpeh5JTxlbEnRjQNBztYaAiV1+GseYqcPtitN9XyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPREALWl1UmBjw/Expy6J5WGiDPXMB8GA1UdIwQY MBaAFLOl2Zhj2y5JtE9sMk6wQ4j8dRXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAt ZWVjNWQ1MGVmYTk0LzEvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAtZWVjNWQ1MGVmYTk0 LzEvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvdcZCaxF jGxog6TLXFyH88ng5y+TikmaQD7Y0elBv0yv1gdH/Iygi5pceu1FMJ1ZhCt+2zTp BbAx8zIJvtRHnPFfhNRd5WLxSK7jd0b/KUpaL75hZByMo53qcJ9JfO7eoAmcfH/B 4kKC7FYRdbQ4K5o9BxJzf3+MESOj4wrBrAordxR2OJQAtUTaQiSaBzb+cGrDF255 dV3dm5p6i3Kk1K3t3g37IAdg62NakHJdPo8+jPieapiKZURyOTrs5i7u/g0aLjlG TSzfSsmrvDAJWBV3whJGubopE7MZu1cpJg9f9b5CxJcOKDjiq/MxYQF5r5CrkhpN jcP4NoOz13oBug== -----END CERTIFICATE-----Generated at Sat Jun 7 12:38:22 2025 by rpki-client