$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft File: 5dbG6LztQL0DLRdxjBseOa6EGug.mft (raw, json) Hash identifier: mLB6s+sNEMU2HXnYmR0hX2W1ThdnaeTsM5aE613/UJM= Subject key identifier: 21:C4:1B:05:5D:00:12:5B:1D:09:58:31:F7:F3:B0:08:B8:0A:A1:E9 Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8 Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8 Certificate serial: 019746D506DB19444A389879F32FD12FF4B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft Manifest number: 1583 Signing time: Fri 06 Jun 2025 20:00:55 +0000 Manifest this update: Fri 06 Jun 2025 20:00:55 +0000 Manifest next update: Sat 07 Jun 2025 20:00:55 +0000 Files and hashes: 1: 1-4thfGCfV_85lt2WZkN-l71fwv0.roa (hash: 7cUPpyEsjpN2LkemwyOwpAzp6M6Mod4nt5VJCSxBi3s=) 2: 1-U546Wnv3X2dlqBwiPgmgD5rG0Q.roa (hash: UYLMoDLmtnbaqveYEw4e1FYtKG5Xz2eS50cYOB7habA=) 3: 4wlDChlgzrgFapvpBy46MAFlefc.roa (hash: EYqlVV6MH4EbjLdFRd/br9sG35MzdZTRrWmN3sTJ6/Y=) 4: 5dbG6LztQL0DLRdxjBseOa6EGug.crl (hash: Vp7oNV1u8FF3uKcnUZJspEFMhs4I14cvmP554x/jQIo=) 5: 8j9-L_RONYbO5pct6BaIUP49Jq8.roa (hash: TIaaBWL1jzkAtw/gcAYt5xesS4BiLd6+3AzOv7BVHgs=) 6: A-Fkuj2Ry_3wy9lszQO5iFmpTsM.roa (hash: MqXfL/IjblbyaoanvxCZ0s6/syF5tUBaoXoKEYvO5Ck=) 7: CqQsoC1jFsSbLss7hEFtLKrKDMY.roa (hash: 7YVK/zmpOd/tEBFOBPOhNo6QF1d67oChKSOQOYEoacg=) 8: Grw7nIi6RKNyYj-gX0F5si2FPWg.roa (hash: P3/krGXIhVeYouYxQBpxzM61tb05ZyoVg+B5ZJUx//k=) 9: PPn88xNGN-bL0F7MubjXlyHvb9c.roa (hash: nLdf7Pq2piaIE9RRNqGUwrSH2EAIpbdo6397rklNDK8=) 10: QmD1NuxNLYfmzuhbCU_99CJ-o-k.roa (hash: ugpwTRCdEyAoIefE/m+oUbM/pJjpH0ikF/U5tO+O/jM=) 11: W5W8H6uR-lCCEmn3v-XsPLRNVss.roa (hash: MqFZSzbOqhNyXJIgrbDDE4K1XPvGby9AbWHLANkDs8A=) 12: cKTcZs-U_VD8X5oF6KYi9vL_XPY.roa (hash: Ojplqzn5+rFkagKqgJjGg7MR261z7vGOzqJ6p2GYag4=) 13: dUjWdWqHZ3bB28SlJrHRKXOFumI.roa (hash: L5pkt5HZhPKaDfcEd3yHsIdGb5cnUbqIUW0exwEPLyc=) 14: j3rbxvXK8ctBFBgkYLP92aiT8pc.roa (hash: SkgwXJK38mScZ5LxMMAb0ANPv8t3zcxnc/zFVB7Ba0w=) 15: mza84PKMv0aUDroEfzQZip-9Um8.roa (hash: xfLnRg1sIPVix0oNDyz6FdqLtVqmjxCCvOykxKOTB0s=) 16: u0oJmkSedaonOs5uLkSqqL59uJ4.roa (hash: C6uJzJ3uiAjMgAmGSpBjfqhHJVcbN5byOHdLx08rPTM=) 17: ujwUfZi-j2E7tiXxuxPwDEMg9Do.roa (hash: ZVTJzzTXgsjt6o/MwKVQt8mq4QnG+HkM2MYUgIyYqIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:46:d5:06:db:19:44:4a:38:98:79:f3:2f:d1:2f:f4:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8 Validity Not Before: Jun 6 20:00:55 2025 GMT Not After : Jun 7 20:00:55 2025 GMT Subject: CN=21c41b055d00125b1d095831f7f3b008b80aa1e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4a:09:3f:fc:b6:11:10:84:1a:59:1a:c6:93: c0:f1:e3:c7:8d:49:b1:31:7b:08:07:d8:40:f1:f0: a9:c4:64:a2:6e:c5:1e:04:72:f3:b5:d8:8f:cb:fe: d0:95:b5:fb:70:57:2b:be:a2:a6:62:da:a6:ac:6c: 4f:7a:19:5a:6c:41:99:a0:da:c6:4e:aa:60:16:d6: 43:27:18:de:cb:b5:40:59:84:fb:42:87:b2:75:51: 7f:06:59:f5:a7:ed:fe:b1:9d:7a:51:ca:52:47:a2: 1c:e8:8b:28:74:65:1d:f2:b9:68:43:be:16:de:39: b9:52:de:cd:a6:1d:55:bf:07:75:23:d0:97:b3:f9: c5:78:3e:8f:08:ab:62:24:cc:8b:41:c8:6a:df:32: 7a:9e:c6:40:8f:d4:ac:b7:10:fc:01:8b:e0:35:8f: 21:4b:b0:89:24:41:06:d5:da:1e:36:cb:e9:af:2c: 56:0e:a3:cf:cc:c1:92:9c:d6:ae:3d:56:2b:cd:e8: e8:41:3e:1e:12:69:d3:5a:56:d2:d9:20:16:88:7b: 5e:48:8e:c9:68:03:c4:16:f0:b6:53:fb:6f:77:65: 33:6f:cd:78:1e:4a:94:7d:28:df:57:fa:22:4c:05: fd:d2:dc:b0:ba:ee:d2:92:de:29:b0:dd:2d:19:92: a1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C4:1B:05:5D:00:12:5B:1D:09:58:31:F7:F3:B0:08:B8:0A:A1:E9 X509v3 Authority Key Identifier: keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:61:f8:2c:ef:f6:57:c6:fa:2d:96:d2:5d:1a:f6:57:75:d1: d4:81:1f:15:b4:e1:86:9f:0f:42:b7:4d:4f:d1:e7:03:86:a4: 75:12:5a:98:a7:84:24:f3:41:3a:b0:51:2b:25:dc:a2:c8:fe: 1b:49:ff:c4:4f:00:2b:3c:cb:ee:34:96:1b:cc:60:76:df:54: a3:e3:bc:90:b0:af:a6:da:8a:87:54:85:f5:c3:b3:f6:b6:19: 06:72:9f:8c:88:72:8e:bd:2a:91:96:00:3b:1f:7b:32:68:b6: 09:a0:1c:db:14:02:d0:c1:4a:0a:ff:62:72:2f:a5:d5:95:4d: e7:5a:8c:2e:ea:80:07:b0:a7:00:a3:cc:22:7f:06:c7:d6:02: 90:cc:08:f7:8b:89:27:f9:46:ba:21:0b:50:7f:08:1f:56:7e: 11:59:62:5c:34:6b:92:9b:e7:cb:cc:35:0b:a4:bd:2f:af:4f: e0:bc:85:52:22:e9:b3:65:fb:34:e7:ea:a6:0c:f6:e5:0e:41: a6:95:4f:d4:95:03:b2:8c:c7:ca:56:5a:59:03:8f:c1:02:a9: eb:6b:39:83:08:ae:b5:2b:fb:c6:60:6f:5c:c2:c7:e5:63:9c: 29:62:e3:a4:5f:d9:6d:c2:17:0b:b2:a4:30:ee:b9:fc:36:8b: a7:b0:6a:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdG1QbbGURKOJh58y/RL/S2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZDZjNmU4YmNlZDQwYmQwMzJkMTc3MThjMWIxZTM5YWU4 NDFhZTgwHhcNMjUwNjA2MjAwMDU1WhcNMjUwNjA3MjAwMDU1WjAzMTEwLwYDVQQD EygyMWM0MWIwNTVkMDAxMjViMWQwOTU4MzFmN2YzYjAwOGI4MGFhMWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0oJP/y2ERCEGlkaxpPA8ePHjUmx MXsIB9hA8fCpxGSibsUeBHLztdiPy/7QlbX7cFcrvqKmYtqmrGxPehlabEGZoNrG TqpgFtZDJxjey7VAWYT7QoeydVF/Bln1p+3+sZ16UcpSR6Ic6IsodGUd8rloQ74W 3jm5Ut7Nph1Vvwd1I9CXs/nFeD6PCKtiJMyLQchq3zJ6nsZAj9SstxD8AYvgNY8h S7CJJEEG1doeNsvpryxWDqPPzMGSnNauPVYrzejoQT4eEmnTWlbS2SAWiHteSI7J aAPEFvC2U/tvd2Uzb814HkqUfSjfV/oiTAX90tywuu7Skt4psN0tGZKhlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHEGwVdABJbHQlYMffzsAi4CqHpMB8GA1UdIwQY MBaAFOXWxui87UC9Ay0XcYwbHjmuhBroMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQt YmQyNDliNjI1Nzk3LzEvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQtYmQyNDliNjI1Nzk3 LzEvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApWH4LO/2 V8b6LZbSXRr2V3XR1IEfFbThhp8PQrdNT9HnA4akdRJamKeEJPNBOrBRKyXcosj+ G0n/xE8AKzzL7jSWG8xgdt9Uo+O8kLCvptqKh1SF9cOz9rYZBnKfjIhyjr0qkZYA Ox97Mmi2CaAc2xQC0MFKCv9ici+l1ZVN51qMLuqAB7CnAKPMIn8Gx9YCkMwI94uJ J/lGuiELUH8IH1Z+EVliXDRrkpvny8w1C6S9L69P4LyFUiLps2X7NOfqpgz25Q5B ppVP1JUDsozHylZaWQOPwQKp62s5gwiutSv7xmBvXMLH5WOcKWLjpF/ZbcIXC7Kk MO65/DaLp7BqkQ== -----END CERTIFICATE-----Generated at Sat Jun 7 01:10:16 2025 by rpki-client