$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft File: 5884hLeAB6Jdvi4s7wzHO2mSH4g.mft (raw, json) Hash identifier: HneBuUTIQ7WVyzg0KbsvcWvy+wfDRBZjkPmJo3ooDuM= Subject key identifier: DF:71:92:52:37:70:05:24:11:6F:DE:FD:3F:2E:E9:7C:74:24:C2:92 Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Certificate serial: 01973C1A9219BA6968AF2586628366CFCBFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft Manifest number: 1531 Signing time: Wed 04 Jun 2025 18:01:03 +0000 Manifest this update: Wed 04 Jun 2025 18:01:03 +0000 Manifest next update: Thu 05 Jun 2025 18:01:03 +0000 Files and hashes: 1: 0LDsu8q8BNCVXMdgo8IAmxRh6lg.roa (hash: G5jGPy0QrJ03EB2ETPwF643gtEqN7L0Vq2ZY/sUU8MU=) 2: 5884hLeAB6Jdvi4s7wzHO2mSH4g.crl (hash: uIxYZPSulJZycbo6fAlShj0JvBpyfMCUYKMuQBmNEa4=) 3: B6snV1O7L6xN7jjaiNZWbxtP82Q.roa (hash: Z+4+/9OXk8fDzA3Dm2Dl/g02UpTK3tqTpOQvWThJM1E=) 4: MYlZiK8j4I-CRpNK84XFADjqS_Q.roa (hash: sHYzc9/ggp3cDmlo2cdq6sgs+CvgzddIutlRUEG3Jro=) 5: SNfpSksRdeq_X6alujKtqxhgfmI.roa (hash: Ma1Hn2WiNgfoHoDq7NgShnN2PavA2o6Q6gAsmbAJ6uM=) 6: Xxx-aLbVPMFeFACAuRgkyYhKGZ4.roa (hash: Qjsr5YH+eP1GQSztBosIVdbSouCX9Gvl5XQ/f3iIe+4=) 7: bFYSJ_I4YgMVW4I9mBgSvFA_y-8.roa (hash: H2VlaHHW6c4b4Aq4JHISuCEj338oIr6DsQEFdgqSCMc=) 8: fUwIM0sp1GFSdwqWjPbX7BRcPzQ.roa (hash: Xh0ESEMvO/UeKqHJNYyYyUnRbpIWXGZSxLiX7rQbHOo=) 9: hpwDn8YGTUmpFxnE0VT2lU7HVA0.roa (hash: tWHBC5BsH2Dh86+jd4z/xUkpeNlarvJmfP1oQFYSFgg=) 10: z2F52wGzH9BMrpqKt2YykAg8u8Y.roa (hash: bvYJ2BHirZKw/0tfOS28eGnj6Ugji4ZaJ639S6rbz9g=) 11: zBe1zgNHDCKtxdrkxgm3eBXCBPU.roa (hash: BXmYyj4eoSdWaSTfE6Ragmw+4eV3ZTlYx1CDpgMgYSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3c:1a:92:19:ba:69:68:af:25:86:62:83:66:cf:cb:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Validity Not Before: Jun 4 18:01:03 2025 GMT Not After : Jun 5 18:01:03 2025 GMT Subject: CN=df71925237700524116fdefd3f2ee97c7424c292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:00:28:ef:25:bf:7e:3a:47:c8:42:20:d2:50: 52:c0:dc:01:c0:90:0e:e9:a6:43:7f:77:fa:87:39: c0:63:6a:7b:7d:12:76:72:17:b8:18:b4:05:a8:b7: ef:12:1b:25:46:63:15:ad:33:8b:b7:45:6f:0d:0c: a9:ea:72:39:b5:4d:59:d5:80:56:f0:9f:f8:be:b6: f7:bd:ce:1c:56:ff:8f:a9:c5:81:d9:2c:65:97:4a: df:9e:95:eb:1f:60:79:22:6c:f4:11:3f:23:d3:15: 18:79:ac:9e:0d:98:64:72:23:aa:9c:2a:e1:04:12: 12:ab:da:9b:45:21:d6:2f:8d:d7:a8:21:a3:4f:2a: 76:ca:48:37:64:ea:9e:98:cc:a6:b2:77:90:c9:ab: 09:71:c1:24:f9:59:f8:1c:61:3e:1f:62:b5:45:71: 7f:60:58:01:8f:e1:93:12:b3:28:e3:c1:8a:8f:78: d4:1f:c8:01:7d:5f:35:71:a5:b7:53:f6:47:b2:4b: eb:2f:3a:dc:65:e8:c4:b8:2b:34:c3:6a:2f:20:03: b2:e7:13:93:15:ff:5f:63:13:d1:82:55:c8:7b:ca: a0:15:59:74:c5:3d:b7:60:60:07:92:4d:e0:c6:28: cb:1c:71:78:06:7b:b8:73:fa:ed:80:69:99:20:b8: 0a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:71:92:52:37:70:05:24:11:6F:DE:FD:3F:2E:E9:7C:74:24:C2:92 X509v3 Authority Key Identifier: keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:47:95:6d:c6:63:67:73:7e:54:7d:0b:40:5f:d0:10:7c:a6: 76:c3:c7:d8:d0:96:a6:48:25:17:52:49:65:f9:e6:2c:f3:d4: e2:b8:77:ca:47:58:da:3a:a8:ae:13:10:87:c0:b3:2a:38:e3: f6:ff:f8:dc:07:a9:66:62:a6:96:ff:a7:ce:6b:93:c6:0c:ef: 00:b7:ba:9b:7e:87:85:09:e7:3d:63:1d:5d:80:98:62:37:69: a7:62:c9:e0:19:15:f4:6d:1e:d9:9c:c2:a0:1d:cb:26:e2:72: 6c:0e:a9:c8:a0:65:0c:1b:f9:19:db:63:14:04:4f:dc:56:87: 04:e8:1b:db:e2:a0:38:bb:56:c1:69:89:46:8b:f2:db:90:2b: 2a:7b:2c:51:ef:5a:7b:e3:51:a3:ab:b8:0c:21:cb:92:20:e1: 5f:28:55:32:d1:3f:a9:8e:a4:6e:95:1f:c0:ec:9f:c6:20:8b: 8d:be:d6:6b:e3:72:ac:b2:36:3b:48:8c:17:fe:05:cd:a5:38: d6:47:7c:de:2c:d1:ea:b2:8d:b4:1b:1f:3e:77:35:a5:a6:f7: f4:5b:7e:29:e0:bb:9f:62:50:f7:82:c4:66:27:c5:52:ae:46: ef:c3:4e:52:9d:72:94:92:41:f3:dc:7c:96:ed:bd:7e:90:82: 39:42:ce:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc8GpIZumloryWGYoNmz8v9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5 MjFmODgwHhcNMjUwNjA0MTgwMTAzWhcNMjUwNjA1MTgwMTAzWjAzMTEwLwYDVQQD EyhkZjcxOTI1MjM3NzAwNTI0MTE2ZmRlZmQzZjJlZTk3Yzc0MjRjMjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwAo7yW/fjpHyEIg0lBSwNwBwJAO 6aZDf3f6hznAY2p7fRJ2che4GLQFqLfvEhslRmMVrTOLt0VvDQyp6nI5tU1Z1YBW 8J/4vrb3vc4cVv+PqcWB2Sxll0rfnpXrH2B5Imz0ET8j0xUYeayeDZhkciOqnCrh BBISq9qbRSHWL43XqCGjTyp2ykg3ZOqemMymsneQyasJccEk+Vn4HGE+H2K1RXF/ YFgBj+GTErMo48GKj3jUH8gBfV81caW3U/ZHskvrLzrcZejEuCs0w2ovIAOy5xOT Ff9fYxPRglXIe8qgFVl0xT23YGAHkk3gxijLHHF4Bnu4c/rtgGmZILgKfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9xklI3cAUkEW/e/T8u6Xx0JMKSMB8GA1UdIwQY MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt YTE4NGYzNTU2ZTQzLzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP0eVbcZj Z3N+VH0LQF/QEHymdsPH2NCWpkglF1JJZfnmLPPU4rh3ykdY2jqorhMQh8CzKjjj 9v/43AepZmKmlv+nzmuTxgzvALe6m36HhQnnPWMdXYCYYjdpp2LJ4BkV9G0e2ZzC oB3LJuJybA6pyKBlDBv5GdtjFARP3FaHBOgb2+KgOLtWwWmJRovy25ArKnssUe9a e+NRo6u4DCHLkiDhXyhVMtE/qY6kbpUfwOyfxiCLjb7Wa+NyrLI2O0iMF/4FzaU4 1kd83izR6rKNtBsfPnc1pab39Ft+KeC7n2JQ94LEZifFUq5G78NOUp1ylJJB89x8 lu29fpCCOULOSw== -----END CERTIFICATE-----Generated at Thu Jun 5 05:20:16 2025 by rpki-client