$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft File: rrZuxejyQF9vjUhuc_uCuN4N7g8.mft (raw, json) Hash identifier: azjsWNUk3fw4aJTVDtSjOyM2lQzW/0/b3AJwHV9Xp8Q= Subject key identifier: BA:58:8B:63:1E:B6:CF:30:17:AB:D6:70:1F:AF:AD:B6:16:9B:63:1B Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f Certificate serial: 019762831486C77EB1B7539B1883C53F5F8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft Manifest number: 158D Signing time: Thu 12 Jun 2025 05:00:46 +0000 Manifest this update: Thu 12 Jun 2025 05:00:46 +0000 Manifest next update: Fri 13 Jun 2025 05:00:46 +0000 Files and hashes: 1: 0xAeo2a2iLttbU-9qLwxhP3W5ss.roa (hash: KCgM9KWWYMbjy0SQJWIlI1gevbRgwTSQjmHIQMhZOFo=) 2: 1GGtyTPgPlDy6MPQ5o0gS_2Q9UM.roa (hash: gOi5uzaamNISRfWC/jzX0CQnB58FX9BTQozvqpu683k=) 3: 1VO0RuZDCw_d3nrvSLXPJBFpELM.roa (hash: RVMlSLh90fckV0ULVrxGXrllRUKBMW1qpE2aUDAMp18=) 4: MHaB6YDK7hMFt-_1LMKEcRnolXY.roa (hash: HMU04XiVIqiavwZxk6eCzMS/VCWuh3NjcyT+luDuzS0=) 5: XFEEccbEsmiETxVTXsuQHob0Ig8.roa (hash: gNVdhv6luqDbEY/yZdldKTkFqgtu7cFYTeubRvuYlMs=) 6: XYvBe2DkMF52qzkhOJvtRBiIQio.roa (hash: vc4GpSOFPSWnmLVNnXKMqCyW7C32uripWcLl8WvCvmE=) 7: cgoioMwhBMFnR_o18uz7lh61zXU.roa (hash: muq8Pq9FVp8y13ZY1OD1P/qR19HpxP198AkqSx2L6EM=) 8: rrZuxejyQF9vjUhuc_uCuN4N7g8.crl (hash: XxlugO1nEseVR3Qtea33Bc9FpVGLWxL8xcLK0oBJiUg=) 9: s1oFGEPvL8IMjYASLXkMEl3bONc.roa (hash: ID8ZOvyObfK0KrvTgF7I419RUO3QA/UAdGzXegtjwU0=) 10: upooLs-mDkOyiBT2fNGHj5cQ7E4.roa (hash: cglav+FWNX7UNTqPwwJsYgYuI7r/rTbr7vfv4F0chKo=) 11: vVMu6Hcqt_WNniCkUUd49xRBXDg.roa (hash: PFqhmo3voRuIoBNZ1c/3YzTjWO4jWVlUC05kdiWQzXU=) 12: vzw_vkrK3T6hMf3CfVO_XMRDNQY.roa (hash: TyRzYsx0I5A5DgLqk0b56yUe558XEXu6adROBLfEbBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Jun 2025 05:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:62:83:14:86:c7:7e:b1:b7:53:9b:18:83:c5:3f:5f:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f Validity Not Before: Jun 12 05:00:46 2025 GMT Not After : Jun 13 05:00:46 2025 GMT Subject: CN=ba588b631eb6cf3017abd6701fafadb6169b631b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d3:33:9c:95:0f:e7:3b:f7:0f:87:11:51:c4: 89:62:84:62:ac:4c:76:7d:20:e8:31:7a:7a:46:9d: 59:4b:ee:62:34:74:cf:e3:fd:73:46:bd:d3:52:75: bb:a5:ed:7a:46:1f:c7:30:5c:72:41:78:47:88:90: 25:e3:f8:27:af:8c:d6:10:ec:3d:71:30:8a:9c:f0: 45:c2:f4:c9:e7:cd:32:52:83:79:65:f4:a1:15:ad: bf:17:06:dd:71:59:c6:7d:7e:e6:93:05:6a:50:f1: 2b:79:82:1f:99:41:64:4d:cb:33:d1:7f:67:15:b0: 0a:78:bc:bd:c2:cf:01:98:46:b9:82:45:87:f8:2b: c9:df:55:07:d3:fb:7d:51:b8:65:3c:e0:7b:18:40: cd:30:f5:11:3e:42:57:f7:1f:9e:4a:25:5d:c4:d5: db:8b:49:ad:86:25:64:10:a6:0b:b2:22:df:9c:12: b3:23:ae:55:f5:68:07:32:81:a7:a9:24:cf:60:3d: d4:a0:a3:c2:bd:eb:0d:a9:b9:04:20:c6:74:cd:20: 98:87:be:39:3d:f5:9a:c1:92:64:2a:ac:a1:db:a0: e4:32:d7:8e:14:d5:08:eb:3a:21:de:0e:a0:7d:65: bc:58:cd:f9:c8:87:4d:92:99:59:e7:b6:72:fe:85: 46:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:58:8B:63:1E:B6:CF:30:17:AB:D6:70:1F:AF:AD:B6:16:9B:63:1B X509v3 Authority Key Identifier: keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:95:66:39:53:4f:29:14:a0:96:bc:43:12:23:3c:34:e0:8e: d1:32:13:0a:9d:29:ce:20:ed:cd:0c:6f:00:46:54:18:46:b0: f6:67:35:59:12:09:dc:e8:2e:36:a4:47:2c:f9:73:8a:47:55: 5b:20:e5:fe:14:40:d5:8e:2f:c1:aa:ec:c3:e4:0d:1f:64:28: a7:75:0c:3b:ee:45:09:26:89:0e:3b:37:62:39:a3:e6:67:45: 50:6c:1f:67:d8:72:ef:a2:fd:8a:f4:2d:f6:d8:bd:97:05:9c: 1d:ee:08:3f:b3:82:5d:e3:f8:95:1b:c2:14:06:14:98:32:2f: 6f:4e:1d:0c:73:c4:45:8f:40:7f:8f:f3:61:5b:74:6e:30:3c: 7b:59:ab:76:6a:5d:92:37:e6:70:e0:1f:ff:b5:02:f3:f2:6e: b8:42:e0:09:20:29:5c:ad:41:52:86:81:52:30:7f:62:a3:61: 16:2c:33:55:da:5a:83:c9:e1:b7:15:3a:46:7d:fa:e8:4a:4a: 6f:b7:64:91:05:72:c3:b2:3c:e3:08:c0:63:f3:78:26:db:e3: 00:4b:15:cb:a6:32:91:a5:31:b4:31:f1:c9:1d:6a:02:5b:bb: 4e:b1:7e:07:30:c0:b2:ef:5a:99:06:99:b7:de:61:79:c1:88: 15:45:6b:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdigxSGx36xt1ObGIPFP1+NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYjY2ZWM1ZThmMjQwNWY2ZjhkNDg2ZTczZmI4MmI4ZGUw ZGVlMGYwHhcNMjUwNjEyMDUwMDQ2WhcNMjUwNjEzMDUwMDQ2WjAzMTEwLwYDVQQD EyhiYTU4OGI2MzFlYjZjZjMwMTdhYmQ2NzAxZmFmYWRiNjE2OWI2MzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNMznJUP5zv3D4cRUcSJYoRirEx2 fSDoMXp6Rp1ZS+5iNHTP4/1zRr3TUnW7pe16Rh/HMFxyQXhHiJAl4/gnr4zWEOw9 cTCKnPBFwvTJ580yUoN5ZfShFa2/FwbdcVnGfX7mkwVqUPEreYIfmUFkTcsz0X9n FbAKeLy9ws8BmEa5gkWH+CvJ31UH0/t9UbhlPOB7GEDNMPURPkJX9x+eSiVdxNXb i0mthiVkEKYLsiLfnBKzI65V9WgHMoGnqSTPYD3UoKPCvesNqbkEIMZ0zSCYh745 PfWawZJkKqyh26DkMteOFNUI6zoh3g6gfWW8WM35yIdNkplZ57Zy/oVGBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpYi2Mets8wF6vWcB+vrbYWm2MbMB8GA1UdIwQY MBaAFK62bsXo8kBfb41IbnP7grjeDe4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUt NmFlYTkwNTdjODAwLzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUtNmFlYTkwNTdjODAw LzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUpVmOVNP KRSglrxDEiM8NOCO0TITCp0pziDtzQxvAEZUGEaw9mc1WRIJ3OguNqRHLPlzikdV WyDl/hRA1Y4vwarsw+QNH2Qop3UMO+5FCSaJDjs3Yjmj5mdFUGwfZ9hy76L9ivQt 9ti9lwWcHe4IP7OCXeP4lRvCFAYUmDIvb04dDHPERY9Af4/zYVt0bjA8e1mrdmpd kjfmcOAf/7UC8/JuuELgCSApXK1BUoaBUjB/YqNhFiwzVdpag8nhtxU6Rn366EpK b7dkkQVyw7I84wjAY/N4JtvjAEsVy6YykaUxtDHxyR1qAlu7TrF+BzDAsu9amQaZ t95hecGIFUVrOQ== -----END CERTIFICATE-----Generated at Thu Jun 12 12:55:52 2025 by rpki-client