$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft File: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft (raw, json) Hash identifier: ZwNA2K3hJ4VN9AZdS5Q1sbirMJPlUS0v6NCl29uw668= Subject key identifier: 0D:23:5F:6F:B6:36:E0:D9:61:B5:FE:28:D5:91:9E:BC:2A:26:43:CD Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Certificate serial: 01974D44E1420E60D2AEA2BF69123B0092F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft Manifest number: 128E Signing time: Sun 08 Jun 2025 02:00:49 +0000 Manifest this update: Sun 08 Jun 2025 02:00:49 +0000 Manifest next update: Mon 09 Jun 2025 02:00:49 +0000 Files and hashes: 1: 8Fk9kDKNu_wHTuVpwQ1FTDYEEUM.roa (hash: R9lk1OKBJor+p6Fk8Cm9760Y52YkNlkiK4HwLBjauEw=) 2: LCMzGb8KK1XAn7ueElCREh4ehR0.roa (hash: 9Gw2b+IOeGIlGw5y7XNoxgCnQ7hXETrnIXJowIYGjqA=) 3: LShVVLJCwZTpOQVpRu4BHXCMY5o.roa (hash: qOW5Q7zU6W8XRrp7RUj6wZmvzkpmHb4NVAohhcOeaxY=) 4: bmuOfACYZiZOnCTz9ES9s06c_ac.roa (hash: kxF+XBYjW7ExfLjJidwuYPma+i/t1erJy7+ooTz+eSY=) 5: dqSVfYV4r9M8RMZopTNsSTKHeIY.roa (hash: XrN+1wwdRwyX8n7r+VHCtW4D45jLjIPlWVhNaBZnVwQ=) 6: h9mNIwplN3HJblv2au9Os6COmfk.roa (hash: MUN1yxszebSMcti0G9u7TeXrwfcHsFyRaIzpQnCM9XQ=) 7: mUZj0w-uWUstpfqo5cH06vK19uA.roa (hash: MzyNzzDoUFyK/QZw2a/+HQPhRLTClRfb/mdHjVRhByQ=) 8: r0mTEa6qt-IyELm4t03iQrSQvaU.roa (hash: 5O0ZRSkH9lwLC8LUcZsdLUDFOU7u/lNlnWwcFjFATOs=) 9: rHoYFPQ0T9Hef-z6s-pJ7i0yyQo.roa (hash: xQJ9yww4YSKaaEyQBdYXA5up0iEVqjr/At6e2xJMUB8=) 10: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl (hash: cuTcp2VLnf7HuNI0ewCWVuHe1mIMKHhPTRIyQI19wBc=) 11: vfYaTtc4brt0Ov1kx9oCUOHIJXI.roa (hash: eB+hXGbiqW76z1VHwcXpM+YfyI+lZHNYCy9KL7CJ5lM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Jun 2025 02:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4d:44:e1:42:0e:60:d2:ae:a2:bf:69:12:3b:00:92:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Validity Not Before: Jun 8 02:00:49 2025 GMT Not After : Jun 9 02:00:49 2025 GMT Subject: CN=0d235f6fb636e0d961b5fe28d5919ebc2a2643cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2b:92:54:e6:f6:ed:16:8f:61:bd:c2:2f:fe: a8:37:e6:f7:79:19:3b:92:59:03:88:ae:65:31:04: 29:e7:b6:50:e9:34:27:78:89:eb:7e:df:c6:71:b4: 25:f2:23:dc:e3:1d:04:fe:a6:c1:e6:22:47:1b:bd: bb:b4:d4:8c:8b:da:69:2f:3b:0f:81:99:35:71:ed: 1e:dd:b3:7c:72:d8:59:c9:bc:df:42:a8:aa:e9:c6: e5:10:86:55:7a:0d:30:98:e3:16:cd:b7:4d:ae:fa: 86:7b:48:2f:db:cd:ac:e8:f5:86:c8:dd:44:e7:da: b1:e9:2a:c3:35:bb:30:7e:76:02:2e:15:0e:f5:17: 89:b0:32:53:2d:fc:24:4b:ec:68:d0:75:74:cd:54: 0b:39:53:9f:14:9d:33:b3:66:ef:43:a7:13:2a:cf: 13:c2:a3:e2:2a:c9:65:23:36:81:22:14:4b:fc:5c: f2:82:8d:b7:ac:bb:b1:66:bd:46:dd:e3:fc:1c:e9: 5e:43:5a:c4:08:7a:4c:b8:88:a6:39:e3:20:1c:86: b1:bf:37:52:f8:44:aa:ee:fc:6d:a7:8a:6f:e1:e7: 67:2e:9c:a7:de:c8:de:23:9f:a6:a4:c9:2b:bc:d0: d6:59:1e:31:04:e9:56:d8:86:fa:39:e6:0a:eb:d3: 2e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:23:5F:6F:B6:36:E0:D9:61:B5:FE:28:D5:91:9E:BC:2A:26:43:CD X509v3 Authority Key Identifier: keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:e1:24:78:8d:c9:78:8d:62:4d:fe:b0:b8:fe:32:d9:31:ea: cd:a4:de:88:5e:49:59:1d:42:04:e4:5e:b8:51:45:8c:7d:a8: ee:54:a5:89:ed:a0:2e:1c:d3:ac:86:c9:ce:84:f1:06:b9:35: c7:30:72:1c:27:ba:d7:0d:05:47:c3:1f:31:eb:c3:95:3c:ec: 65:a2:f1:0b:7d:e1:34:ea:85:c0:8c:b6:4e:66:94:70:44:3f: 75:b2:ca:89:75:1c:0f:31:c9:15:94:06:2a:bf:6f:6a:79:4e: ad:0d:ed:bd:46:f3:f3:1d:8a:8a:ec:1f:fd:d1:a7:3b:f5:1f: e8:8c:2f:71:e3:3e:ed:a4:4f:19:3f:ee:d1:6a:4e:54:23:42: bd:35:d1:af:d1:15:6f:aa:d0:5f:e1:ef:2f:90:c5:ae:e7:cd: 2b:42:2e:c8:98:35:67:fc:77:3f:57:1e:e5:e5:29:77:00:a7: a4:0d:29:ac:9c:d7:fe:d6:12:b4:3d:a9:db:f2:3b:f7:49:59: fa:aa:a2:f8:98:4c:ed:f7:f5:f2:3c:42:b6:a8:62:28:03:6c: 57:ec:58:61:f2:2f:7d:6f:76:34:12:1c:58:37:37:81:ce:0c: fc:52:48:46:27:bd:cf:9e:b3:43:10:bd:e8:84:62:44:76:42: 06:1f:1d:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdNROFCDmDSrqK/aRI7AJLxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj ZGM2NWMwHhcNMjUwNjA4MDIwMDQ5WhcNMjUwNjA5MDIwMDQ5WjAzMTEwLwYDVQQD EygwZDIzNWY2ZmI2MzZlMGQ5NjFiNWZlMjhkNTkxOWViYzJhMjY0M2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSuSVOb27RaPYb3CL/6oN+b3eRk7 klkDiK5lMQQp57ZQ6TQneInrft/GcbQl8iPc4x0E/qbB5iJHG727tNSMi9ppLzsP gZk1ce0e3bN8cthZybzfQqiq6cblEIZVeg0wmOMWzbdNrvqGe0gv282s6PWGyN1E 59qx6SrDNbswfnYCLhUO9ReJsDJTLfwkS+xo0HV0zVQLOVOfFJ0zs2bvQ6cTKs8T wqPiKsllIzaBIhRL/Fzygo23rLuxZr1G3eP8HOleQ1rECHpMuIimOeMgHIaxvzdS +ESq7vxtp4pv4ednLpyn3sjeI5+mpMkrvNDWWR4xBOlW2Ib6OeYK69MujwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0jX2+2NuDZYbX+KNWRnrwqJkPNMB8GA1UdIwQY MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct NjZlZGEyMjhmZWM3LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3 LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVOEkeI3J eI1iTf6wuP4y2THqzaTeiF5JWR1CBOReuFFFjH2o7lSlie2gLhzTrIbJzoTxBrk1 xzByHCe61w0FR8MfMevDlTzsZaLxC33hNOqFwIy2TmaUcEQ/dbLKiXUcDzHJFZQG Kr9vanlOrQ3tvUbz8x2Kiuwf/dGnO/Uf6IwvceM+7aRPGT/u0WpOVCNCvTXRr9EV b6rQX+HvL5DFrufNK0IuyJg1Z/x3P1ce5eUpdwCnpA0prJzX/tYStD2p2/I790lZ +qqi+JhM7ff18jxCtqhiKANsV+xYYfIvfW92NBIcWDc3gc4M/FJIRie9z56zQxC9 6IRiRHZCBh8dVQ== -----END CERTIFICATE-----Generated at Sun Jun 8 12:39:44 2025 by rpki-client