$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft File: h74JMJcJfERX_1qj5Yk8jBVDJhI.mft (raw, json) Hash identifier: ezWCtweJwQF4nEzlaan1ujrhAazp2wygpn0yJXAjzVU= Subject key identifier: 53:3B:3A:5A:B6:BA:C3:C0:2F:48:A8:6E:D6:8D:FF:0D:6F:1C:59:CE Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612 Certificate serial: 01974AE9274BEA26F4B93A233F8CEDD222C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft Manifest number: 120D Signing time: Sat 07 Jun 2025 15:01:23 +0000 Manifest this update: Sat 07 Jun 2025 15:01:23 +0000 Manifest next update: Sun 08 Jun 2025 15:01:23 +0000 Files and hashes: 1: 58EBygRjdS7517jE8ijFSPfVOH4.roa (hash: 7YP7WUOPsrK23qXejFg0a6c2K8s3GbzwWCeuhRLXrr4=) 2: 6gQb_YrXJIkOy1ffV5AywwaDFKA.roa (hash: YBUcx/W2YYWfTW+ZfLh5vpIiC6jkcxCKGBt0nojo2Ok=) 3: CjTW9-CUmuY1lxZ8OqndS2FXSrY.roa (hash: 9DQ0LnRbHYpMYq+dl7Z0Jfv0Jx2DrmotGXluT5sxbiI=) 4: UYD_ol6L79u8glgaI6wKUZit3aI.roa (hash: Gf9BtC+mpY9FQr0OFj9WV8BSFzyS8ChMq/mXIibBTC4=) 5: YxuPih3fAlXVoEE31gDs9iD2i1w.roa (hash: x8butTOJLg1TuADmdhNJfjqeOtty4tQbuYOKyeZNAJI=) 6: cgfWhp9nnNlIFwxwBmM9ufcXLT8.roa (hash: d9o/0tEnmxkRdMrExtvCAvZnhgV08vpjue2h9xSnd5M=) 7: h74JMJcJfERX_1qj5Yk8jBVDJhI.crl (hash: aSv6JHstcVd0wGLE4cAg1zi+FaHB0Ozlo3MC65FOTRc=) 8: jS9AN5oD9gr_onzGTzL8xf4_tCg.roa (hash: L5WRngdm8hXH1GtO9dblNyDW24uvtXBx7hO8Cv9i3R8=) 9: l73XbGk7c4j4MjyLCnCZ2AhSa5g.roa (hash: zN4KADzvP9RDaA1coLbTnlm7K8otMtISf3HRhyFdP4I=) 10: zDYhvUbelcRpqpslUbRSgUjh_fg.roa (hash: oMqhUHMRnzSTRY98vl61orkGgfrk9poSjKlRD++vvbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 15:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4a:e9:27:4b:ea:26:f4:b9:3a:23:3f:8c:ed:d2:22:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612 Validity Not Before: Jun 7 15:01:23 2025 GMT Not After : Jun 8 15:01:23 2025 GMT Subject: CN=533b3a5ab6bac3c02f48a86ed68dff0d6f1c59ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f7:25:a3:b2:9e:4e:80:a1:39:b9:ea:51:83: 6f:27:b3:20:b2:17:53:a1:af:50:ec:87:e3:cd:6b: 05:7e:36:ee:16:23:67:6a:73:4f:0d:73:34:19:a2: bd:74:5d:8f:df:4a:f0:8d:a5:03:bb:34:74:48:25: f5:6f:17:d8:94:08:96:53:31:ef:4f:f1:b6:9c:ff: f9:4a:8a:ac:21:65:7f:89:72:0b:95:b4:d8:73:44: f3:f0:17:42:87:79:f4:a8:ce:39:b5:16:02:9f:fa: 9d:1c:6f:7a:38:3d:bd:9f:3d:8c:6a:ee:8b:67:6d: dd:5e:23:91:91:e3:9f:b0:63:7d:65:c2:eb:4c:cd: 23:59:27:25:b5:08:1b:fa:d5:e3:7f:59:4e:16:00: 86:60:2f:dd:c4:67:5b:f8:a1:0a:3f:02:81:48:c3: f6:09:c7:fd:ac:d8:22:60:8e:6e:c7:10:a6:02:37: fb:5a:a0:8d:ca:28:4b:c8:76:2d:b2:79:4b:22:7a: 31:f0:f2:57:07:4a:0a:ba:d5:9e:6d:02:67:38:9d: 81:b6:b1:c3:c0:c3:0a:a2:76:8a:c6:c5:8f:e6:b7: 20:d0:8e:59:9f:5e:c2:f7:e1:cc:25:40:95:1b:84: 84:21:59:eb:5f:75:cd:bd:b2:ea:30:17:e4:6e:44: 0d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:3B:3A:5A:B6:BA:C3:C0:2F:48:A8:6E:D6:8D:FF:0D:6F:1C:59:CE X509v3 Authority Key Identifier: keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:1f:74:34:09:4b:33:60:27:cc:67:ca:53:7c:aa:1d:11:59: 76:e4:ec:87:b5:d7:2c:79:b7:7c:93:af:8d:81:5d:ca:6b:06: 77:95:87:f6:bf:d6:73:6f:a8:36:f3:87:48:f5:0f:3f:da:cb: 2b:e6:44:da:b5:e5:68:c5:f6:f0:01:01:d8:8a:34:c6:1c:8d: d7:4e:65:68:9f:27:b8:86:9b:7a:22:b4:d5:ec:9c:5e:47:82: 81:4e:9a:ff:40:e1:6b:c6:8a:67:fe:c9:3b:b1:ae:ae:ac:60: 86:32:b1:7b:6f:53:db:f6:b4:8d:62:46:44:02:fa:45:3c:03: fc:a6:8c:06:30:8b:5e:d3:9d:05:42:4e:3a:16:59:8f:ba:f9: 99:10:4c:de:ca:3e:94:c9:ac:ad:24:40:11:74:b5:88:83:c3: b3:68:ff:55:9c:89:54:e4:cd:81:db:29:a0:9f:29:a3:a6:79: f7:3e:15:a2:6f:fa:b3:5c:0e:db:f6:35:eb:bd:0e:1c:10:3b: b3:40:48:95:65:d1:07:78:d4:b9:f2:ec:54:0d:2f:60:22:8e: 8f:2e:d5:12:be:31:60:a1:f7:d5:b5:d1:e4:04:96:21:72:00: 9d:f7:a1:b7:f3:b5:5b:ee:1f:58:1a:39:3e:78:f8:f6:88:01: 97:0a:25:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdK6SdL6ib0uTojP4zt0iLGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YmUwOTMwOTcwOTdjNDQ1N2ZmNWFhM2U1ODkzYzhjMTU0 MzI2MTIwHhcNMjUwNjA3MTUwMTIzWhcNMjUwNjA4MTUwMTIzWjAzMTEwLwYDVQQD Eyg1MzNiM2E1YWI2YmFjM2MwMmY0OGE4NmVkNjhkZmYwZDZmMWM1OWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvclo7KeToChObnqUYNvJ7MgshdT oa9Q7IfjzWsFfjbuFiNnanNPDXM0GaK9dF2P30rwjaUDuzR0SCX1bxfYlAiWUzHv T/G2nP/5SoqsIWV/iXILlbTYc0Tz8BdCh3n0qM45tRYCn/qdHG96OD29nz2Mau6L Z23dXiORkeOfsGN9ZcLrTM0jWScltQgb+tXjf1lOFgCGYC/dxGdb+KEKPwKBSMP2 Ccf9rNgiYI5uxxCmAjf7WqCNyihLyHYtsnlLInox8PJXB0oKutWebQJnOJ2BtrHD wMMKonaKxsWP5rcg0I5Zn17C9+HMJUCVG4SEIVnrX3XNvbLqMBfkbkQNQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFM7Olq2usPAL0iobtaN/w1vHFnOMB8GA1UdIwQY MBaAFIe+CTCXCXxEV/9ao+WJPIwVQyYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMt MmNkZTY1ZjMxMTJhLzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMtMmNkZTY1ZjMxMTJh LzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArR90NAlL M2AnzGfKU3yqHRFZduTsh7XXLHm3fJOvjYFdymsGd5WH9r/Wc2+oNvOHSPUPP9rL K+ZE2rXlaMX28AEB2Io0xhyN105laJ8nuIabeiK01eycXkeCgU6a/0Dha8aKZ/7J O7GurqxghjKxe29T2/a0jWJGRAL6RTwD/KaMBjCLXtOdBUJOOhZZj7r5mRBM3so+ lMmsrSRAEXS1iIPDs2j/VZyJVOTNgdspoJ8po6Z59z4Vom/6s1wO2/Y1670OHBA7 s0BIlWXRB3jUufLsVA0vYCKOjy7VEr4xYKH31bXR5ASWIXIAnfeht/O1W+4fWBo5 Pnj49ogBlwolnQ== -----END CERTIFICATE-----Generated at Sun Jun 8 01:00:03 2025 by rpki-client