$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft File: c_IQ8SmaHgrucdwdeeX7EgktMKk.mft (raw, json) Hash identifier: xMU40xmsSGv/6H4S3Qy/LjLREQ/rZqHN0FuRBjWMo8E= Subject key identifier: 74:D6:4E:3A:78:34:5F:9D:C0:64:36:39:CA:37:75:77:47:05:D6:50 Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Certificate serial: 01974666A4610E52328B5ABFB0C254ECCEF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft Manifest number: 15A1 Signing time: Fri 06 Jun 2025 18:00:20 +0000 Manifest this update: Fri 06 Jun 2025 18:00:20 +0000 Manifest next update: Sat 07 Jun 2025 18:00:20 +0000 Files and hashes: 1: 6nJsdCD8UqPnq5PnnkZ0pekfgbI.roa (hash: QJyYYZrsFZdqG5eWMInfq1ojVGkd+YFj6E1+fuXInNY=) 2: H74wGZKnnU6XEP7nVKoqw4XaEjE.roa (hash: zhm555s3zw/KlbcjZuumbYd6+z6n6717Q/inEo++9C0=) 3: JFyb9vOEShiklCUE-xhXQcKys24.roa (hash: yRt2GvdxkvGMHkQaqbdXsuANeN2IU6ZvnsT36x7jpNo=) 4: KFKPGq8CDIQff00UekrfFEmWWU4.roa (hash: pndCMKJbI0Ffrf6VYH3lHviYtYItndyotazCLP7aZyE=) 5: TLCOp8VQQYT-sDLZMkb_dNE0wJI.roa (hash: 8TF1RbnrjzrAYcRglOW5PIK7TmKRhUoFu7HvQr3ZHoA=) 6: XfGBei_fvFP0LcnT4xlGOunfSHY.roa (hash: ApG5cEMi+MNJR6ahm8kTy/uN64zS0fv0zRdzd/i6biA=) 7: ZrwHnbp0cmRv-8Aq-3dTrUs96b8.roa (hash: laG521bBX3KOp9w13a5/N7g1SD2gsHS2KdTqelNAv1g=) 8: c_IQ8SmaHgrucdwdeeX7EgktMKk.crl (hash: 9yN+fVAkQwP1JqgnsAQqdkmprn3ZiRjWu4oHf9pa7EQ=) 9: h5UPb41WBJf3smLRT3WauyTJhZk.roa (hash: 7y7FascFoSESS5H+heHuGPqwY6CoIfeWFtJUfTaH8Lg=) 10: nT9Kl7qa4avyYi6PobndNFEx2JI.roa (hash: 4NhOocRVxQsq48Sjltw5zBhFh6NiUij1mxelAtmoUp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 18:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:46:66:a4:61:0e:52:32:8b:5a:bf:b0:c2:54:ec:ce:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Validity Not Before: Jun 6 18:00:20 2025 GMT Not After : Jun 7 18:00:20 2025 GMT Subject: CN=74d64e3a78345f9dc0643639ca3775774705d650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5f:88:90:f2:56:c8:63:93:fa:52:3b:24:ca: 3c:30:d8:8a:fd:6a:ed:b2:59:8e:47:87:e8:98:d2: 19:c4:cc:aa:1a:14:92:c1:10:63:73:ef:1c:cd:c1: 48:ff:ef:b3:97:33:1f:eb:c0:59:46:23:76:5b:ff: 5e:4f:d8:7d:fd:cb:99:8c:b5:89:5c:97:24:f2:6f: 79:6f:5f:f7:f7:56:b5:1e:7f:e1:49:28:c4:d0:98: 51:4f:eb:6f:cd:b3:e9:e5:38:35:fb:3b:4c:b7:1d: 0d:51:95:aa:87:4e:bc:2f:0a:a9:5f:d3:26:fd:d4: d9:af:55:64:e7:33:f3:97:b6:06:bd:da:87:bd:a4: 7c:51:60:05:fb:21:35:6f:66:a5:c4:ce:81:5c:27: e5:fa:cd:33:e7:24:24:6d:cf:82:0e:dc:65:2e:d1: 01:48:f3:6e:43:10:95:3c:3e:ca:23:f2:83:91:36: 62:db:a7:f1:61:d6:2a:f8:5f:c0:ba:8c:3b:42:63: f6:a4:85:65:e7:34:64:5a:a1:94:f5:52:18:fb:91: ec:58:e2:19:e1:c8:bd:da:3b:99:8a:ed:c4:d0:56: 14:e7:46:61:ce:ec:cd:4e:5c:cc:df:a4:b6:7b:10: a9:c9:a5:3a:3e:5b:70:7f:ee:c0:af:8f:bc:ea:08: 70:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D6:4E:3A:78:34:5F:9D:C0:64:36:39:CA:37:75:77:47:05:D6:50 X509v3 Authority Key Identifier: keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:1a:1d:fb:72:ae:df:79:8e:77:f7:94:43:aa:3e:eb:02:5e: 92:5c:c7:b7:10:46:68:e0:fa:4d:d0:06:c0:2c:6a:01:3e:b0: 52:0f:41:3b:5c:4b:86:82:a5:be:8d:24:dc:dd:94:a8:66:d9: 74:2d:4b:d5:1d:9c:fd:0e:3a:49:e7:3c:b0:43:b9:ca:e1:13: c7:70:c0:b6:9a:f3:d7:cf:f2:40:89:b5:8e:14:5f:fe:d8:1c: 17:36:40:2f:87:71:e7:e8:fe:59:80:7e:a7:44:7e:cc:ba:32: 47:0a:bd:55:a8:d4:23:7b:f5:b9:a2:2b:8b:d3:43:7f:3a:9f: c2:93:0d:89:fa:aa:8d:a6:b4:e1:e2:a4:5d:90:c3:4c:85:e5: 0d:cc:36:07:22:91:e0:1d:05:46:91:0c:30:23:af:88:5e:47: 7f:87:75:9c:46:57:6b:54:4c:26:71:46:8c:ad:12:4d:26:9d: 4c:3d:91:f5:30:b6:4a:d7:8c:41:15:30:0f:4c:e5:10:77:69: 21:a4:03:b1:65:f2:8f:4e:df:27:4c:f9:63:b3:32:5f:94:d9: 27:2b:f0:7c:b1:af:d8:9c:8a:e1:5f:52:56:b5:3c:5e:ab:dc: 86:9c:a4:27:b6:86:c0:14:fc:57:b1:ec:58:b9:e0:35:39:fa: 84:6b:15:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdGZqRhDlIyi1q/sMJU7M73MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky ZDMwYTkwHhcNMjUwNjA2MTgwMDIwWhcNMjUwNjA3MTgwMDIwWjAzMTEwLwYDVQQD Eyg3NGQ2NGUzYTc4MzQ1ZjlkYzA2NDM2MzljYTM3NzU3NzQ3MDVkNjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F+IkPJWyGOT+lI7JMo8MNiK/Wrt slmOR4fomNIZxMyqGhSSwRBjc+8czcFI/++zlzMf68BZRiN2W/9eT9h9/cuZjLWJ XJck8m95b1/391a1Hn/hSSjE0JhRT+tvzbPp5Tg1+ztMtx0NUZWqh068LwqpX9Mm /dTZr1Vk5zPzl7YGvdqHvaR8UWAF+yE1b2alxM6BXCfl+s0z5yQkbc+CDtxlLtEB SPNuQxCVPD7KI/KDkTZi26fxYdYq+F/Auow7QmP2pIVl5zRkWqGU9VIY+5HsWOIZ 4ci92juZiu3E0FYU50ZhzuzNTlzM36S2exCpyaU6Pltwf+7Ar4+86ghwewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTWTjp4NF+dwGQ2Oco3dXdHBdZQMB8GA1UdIwQY MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt Yjk0NjQ3MThiYTM3LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3 LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMRod+3Ku 33mOd/eUQ6o+6wJeklzHtxBGaOD6TdAGwCxqAT6wUg9BO1xLhoKlvo0k3N2UqGbZ dC1L1R2c/Q46Sec8sEO5yuETx3DAtprz18/yQIm1jhRf/tgcFzZAL4dx5+j+WYB+ p0R+zLoyRwq9VajUI3v1uaIri9NDfzqfwpMNifqqjaa04eKkXZDDTIXlDcw2ByKR 4B0FRpEMMCOviF5Hf4d1nEZXa1RMJnFGjK0STSadTD2R9TC2SteMQRUwD0zlEHdp IaQDsWXyj07fJ0z5Y7MyX5TZJyvwfLGv2JyK4V9SVrU8XqvchpykJ7aGwBT8V7Hs WLngNTn6hGsVbQ== -----END CERTIFICATE-----Generated at Sat Jun 7 03:40:56 2025 by rpki-client