$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft File: P-3YXB7Mtf9LqTARenMpCZwP8us.mft (raw, json) Hash identifier: h4ls1qbNxlImSzAEgkGP0eFvqqvrfANbCG81J5h0bRo= Subject key identifier: 70:97:17:4E:97:F1:D0:D2:87:6F:A7:8D:C3:72:1D:FE:B3:EE:9C:4E Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Certificate serial: 019749D5DB3AE0037451178F9BB3BE977357 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft Manifest number: 15A2 Signing time: Sat 07 Jun 2025 10:00:41 +0000 Manifest this update: Sat 07 Jun 2025 10:00:41 +0000 Manifest next update: Sun 08 Jun 2025 10:00:41 +0000 Files and hashes: 1: 4SyAKG9FRt1gAFJy5VgH5PwxTRA.roa (hash: jTSIiH7dSb5EybAsEY+n22bAiKvGllq/AuPJ12+ncpM=) 2: BPvvMmPw0v2RXdpWWHfCuRUXY28.roa (hash: xZBsJjBvf0lTF+79AIT0zRbookilcef0qHIZ5VPCKjo=) 3: BZv8sGCcNALUX5pRivC_EjiidAY.roa (hash: h2vpw3fwMWMbbCOrxK6C72hr7+aeGxdeLm1OT0QOTJY=) 4: DGiTictajwWlIqV1Y3gB4SABHrM.roa (hash: Id5c1uksWgHuNXSqMulTJtxTXfw1/TAJk3AEd7b9YRQ=) 5: Mk65rzu_RkrceH34hYZR24Obsg0.roa (hash: rTzdbjg2prHl5GqIGFCWtd1Ib91ETCuwTrOfSPbAKbI=) 6: P-3YXB7Mtf9LqTARenMpCZwP8us.crl (hash: 8MkuhNNtgjVBp1QtAU1V+2BO4pTDVL9XWz3RwBFahpI=) 7: Q7Kremg5Fgj0SfkKKXdi8FJc68I.roa (hash: wwhqLnVWip/tEomt2waPsqqsK0Xf41SfYznp1QkJ0BM=) 8: VB2zjyzRbVcAI7qwybUzZhlXV-U.roa (hash: cbrJc/4RT0HiKhNiv2HtCVB5MjAEHV6aPZtCJF7/HaM=) 9: fScTC-RTAL4AeGIUFDXeFWgxNOU.roa (hash: LpQDvJVc9hMoS+6x9uoQSz8d+i8pdM/6GrU1p5QPkoU=) 10: gjV1b6nl-2sIdV0OViEWc13VOgw.roa (hash: YJxg+E5odCH0e5CDjaGL8I+42oC/IlpXfOKgoo/xCo4=) 11: i_vdOGwxPt-bikrKCsCq4vU6o1Y.roa (hash: Oi88txSdII7ssSiwm/zvR3/xE/bpdarLSDiFGBrNlqs=) 12: jLM5t3eg01fijHX5BZDxTUjpEGU.roa (hash: zlqEOh5qlKElj+/BR3gY6unzfRt8ygL6XM3lywwcPBU=) 13: jt3cdzogC_GhOHVIdQu1LfkbDrM.roa (hash: 4TbqHgl6LIIhOvKU0Ma8NpMAoh5pYOvW9g1cZnc89eY=) 14: mv1h37MzImfXhXtotGH2l6nUD-c.roa (hash: jma1UU++sReZAO/OYU5m4FrNNXuoRuTByWXR/ZHh5qk=) 15: pPSUgW-kch1wzV-mL74GjoJRYas.roa (hash: 14IsY2Pcu5B3SjJ5ycOJDXddH4w35As15arfEbi1nXc=) 16: sVq7ykDogd7cCsDF--hBK9DnjT4.roa (hash: yntzoQcvzBrX+tVilVNDQYJnh1oAW90RlNAXUQi35Kc=) 17: yUsdU2ULQpT4CaBLrnJG--v6B4k.roa (hash: nFPDGUe2wiSsXpmHy1xpSDCHB5E3thvkbalz4PA2+qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:49:d5:db:3a:e0:03:74:51:17:8f:9b:b3:be:97:73:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Validity Not Before: Jun 7 10:00:41 2025 GMT Not After : Jun 8 10:00:41 2025 GMT Subject: CN=7097174e97f1d0d2876fa78dc3721dfeb3ee9c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:77:ea:41:33:93:de:72:a6:8a:82:80:91:59: 0a:64:ab:a0:7b:bd:5b:b3:0d:dd:ef:a8:4e:7f:3a: 61:34:29:84:3d:a5:e7:44:fb:e6:71:2a:4b:08:f9: ee:e7:08:d3:ec:1d:b5:dc:85:7e:96:89:de:26:16: 72:27:1e:45:02:7f:1c:d4:26:4d:9a:ff:ae:fd:bf: e7:27:e5:ea:e2:3b:8b:49:c0:bc:1d:c6:0f:76:e6: 0c:5c:1f:21:69:ce:66:54:f9:b0:ea:6c:4f:f9:ab: 51:f4:7c:bf:b1:57:2c:b4:8c:6a:25:55:65:cb:a1: 05:74:cc:e3:8c:0b:bb:b0:5a:ea:ef:a5:1b:36:6f: 50:18:f0:3d:4f:a4:28:8d:6f:e2:4c:89:29:ee:96: 56:78:ee:01:28:c1:c6:77:b2:21:99:ec:91:fc:84: 94:9d:4c:11:2a:70:86:39:61:10:f5:b4:3f:e9:13: ad:ae:c5:a6:17:3b:da:04:90:8f:70:0f:51:14:d9: 97:62:a0:cd:5b:98:e8:cd:b5:c6:0f:78:0f:3e:55: ca:ae:32:87:47:24:f3:6a:89:8c:dc:b9:1d:d8:c1: b1:98:8e:5d:f3:c4:dc:04:cd:b7:5c:d8:94:3c:81: 92:af:71:02:ae:e8:79:a3:15:03:e0:e5:7d:bb:ff: d6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:97:17:4E:97:F1:D0:D2:87:6F:A7:8D:C3:72:1D:FE:B3:EE:9C:4E X509v3 Authority Key Identifier: keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:75:3a:b3:0c:38:de:fa:ac:62:f5:66:40:27:47:91:e5:de: 2a:81:f6:e5:6a:93:85:6e:a3:15:7f:a3:cc:e2:0e:ad:bc:7e: ce:86:c5:b4:80:f9:a8:01:c8:6b:c3:71:95:c3:24:d6:da:17: 43:95:ad:25:d7:2d:3f:74:73:7b:63:51:02:88:ad:6b:7c:35: 2e:86:b7:db:bc:a7:e5:eb:82:00:0f:33:d4:64:7f:94:1a:f2: 97:8e:52:f9:a6:c4:91:de:f5:97:62:62:98:12:d3:7b:0e:d7: 68:5c:a5:c1:ba:2d:88:96:7d:4e:cd:4c:7a:04:a7:14:9a:fc: 06:48:8c:79:3d:28:b1:e3:91:35:cc:58:d6:43:4d:17:21:02: c3:ab:ed:40:b4:12:1e:15:63:01:f1:39:82:38:c5:55:cd:24: a9:3b:21:25:2f:bf:da:c2:a6:da:4a:6a:06:e3:1b:2e:08:9a: e5:6d:6c:6e:18:b9:49:34:87:9f:d6:a8:3d:f0:0c:da:df:0c: 10:5b:09:db:11:7b:cb:ae:89:d0:f3:02:b1:4c:03:f7:9c:e5: 80:60:b9:9a:07:15:c0:ae:ac:12:b2:68:1d:9e:fd:68:cf:cd: a8:ab:81:3f:e0:4f:50:73:6d:aa:d5:58:f8:92:e7:e3:bd:bf: ee:ca:f3:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdJ1ds64AN0URePm7O+l3NXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw ZmYyZWIwHhcNMjUwNjA3MTAwMDQxWhcNMjUwNjA4MTAwMDQxWjAzMTEwLwYDVQQD Eyg3MDk3MTc0ZTk3ZjFkMGQyODc2ZmE3OGRjMzcyMWRmZWIzZWU5YzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3fqQTOT3nKmioKAkVkKZKuge71b sw3d76hOfzphNCmEPaXnRPvmcSpLCPnu5wjT7B213IV+loneJhZyJx5FAn8c1CZN mv+u/b/nJ+Xq4juLScC8HcYPduYMXB8hac5mVPmw6mxP+atR9Hy/sVcstIxqJVVl y6EFdMzjjAu7sFrq76UbNm9QGPA9T6QojW/iTIkp7pZWeO4BKMHGd7IhmeyR/ISU nUwRKnCGOWEQ9bQ/6ROtrsWmFzvaBJCPcA9RFNmXYqDNW5jozbXGD3gPPlXKrjKH RyTzaomM3Lkd2MGxmI5d88TcBM23XNiUPIGSr3ECruh5oxUD4OV9u//WzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCXF06X8dDSh2+njcNyHf6z7pxOMB8GA1UdIwQY MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt ZTJiNTI3NzI4ZTk2LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2 LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3U6sww4 3vqsYvVmQCdHkeXeKoH25WqThW6jFX+jzOIOrbx+zobFtID5qAHIa8NxlcMk1toX Q5WtJdctP3Rze2NRAoita3w1Loa327yn5euCAA8z1GR/lBryl45S+abEkd71l2Ji mBLTew7XaFylwbotiJZ9Ts1MegSnFJr8BkiMeT0oseORNcxY1kNNFyECw6vtQLQS HhVjAfE5gjjFVc0kqTshJS+/2sKm2kpqBuMbLgia5W1sbhi5STSHn9aoPfAM2t8M EFsJ2xF7y66J0PMCsUwD95zlgGC5mgcVwK6sErJoHZ79aM/NqKuBP+BPUHNtqtVY +JLn472/7srzdQ== -----END CERTIFICATE-----Generated at Sat Jun 7 16:13:16 2025 by rpki-client