$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft File: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft (raw, json) Hash identifier: fyjzzJWHBHV4ljSR1n7IRrHNoVDJKYWsCX/mZTMrFRY= Subject key identifier: B0:33:09:E2:84:9E:56:4A:BF:96:F8:1F:3D:43:AC:BE:06:C4:30:8A Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2 Certificate serial: 01973C514790728411ECA1EA1CA63695B977 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft Manifest number: 1583 Signing time: Wed 04 Jun 2025 19:00:49 +0000 Manifest this update: Wed 04 Jun 2025 19:00:49 +0000 Manifest next update: Thu 05 Jun 2025 19:00:49 +0000 Files and hashes: 1: 0bSG1GbQSr3JP2M9BW2A6zWEmWQ.roa (hash: m8/KEzPrRo4PqG3DFfILeyvmSqlK6Zrphut5P8ccG8c=) 2: 9lwL98-HDVBrZzYLRCpSdOAFXpo.roa (hash: Za/9eX9VNb3FiSxJk6MAE/CpFGWxRO5mjghE1elRivc=) 3: B0iUIhkwv2ZZdyXRyu9yUh7Z61o.roa (hash: F6O6OkDRyyyGqFimHsLztSYsh0AUNFPNkRW3jSPwvEw=) 4: I1EoUAseUd3MHO-sI_txqICBiwc.roa (hash: khM+HdjIw9WozXCqEk/wtCOtMrpNfxWXErjSXn8BT5M=) 5: KQ7nGqqdl8DwDw35UdDbOJPZhfY.roa (hash: 8pIf1gsysAeCO62ayw5k2bU+b1g8t0mrR6+zNCtTibQ=) 6: LS_oKjOyENRZwn9y786G7x_fDEc.roa (hash: qwrjawF9Z67WE+ivjm8mPIl3xqaLReHxca9+SNnwKPE=) 7: Pvub5ztTS47f0XG6tBZE9ngX8Rw.roa (hash: euQ5dqT6xwCfoTsPu9P7kfQ9UGdbPzkkEJWSyFwCBTw=) 8: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl (hash: Nn23Hrtn9dDbZeE5WHkHD5brXA5Or4mHsPCouZTGLns=) 9: lqxGizsVmZbvi7xpd3yzs2I4ILw.roa (hash: aTi4SECMvkjegR9/FyzL9HTmeGkM0AsiVgyipWCsYrY=) 10: sFnlwbiQ75y8_114DKwn3kP_iWc.roa (hash: dkHr9wKemXLLSQfaJK2+kCvWwELtA6u+nMBynz2rXgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3c:51:47:90:72:84:11:ec:a1:ea:1c:a6:36:95:b9:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2 Validity Not Before: Jun 4 19:00:49 2025 GMT Not After : Jun 5 19:00:49 2025 GMT Subject: CN=b03309e2849e564abf96f81f3d43acbe06c4308a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b4:01:57:7f:f1:40:cb:32:dd:3d:90:50:49: ae:f7:a1:90:4f:75:47:d1:05:fc:67:6b:5c:b8:65: db:a4:19:83:34:e6:89:f0:c6:63:47:9f:fd:0d:7c: 88:8d:50:18:c8:02:6c:2d:11:07:d8:b0:ee:28:59: 31:1f:36:26:3b:e3:06:4a:e9:91:e1:21:57:1a:3a: 75:6a:52:6f:4b:75:a4:9f:6c:c0:d9:af:38:e6:c5: 84:86:19:22:81:56:5e:ed:64:e5:db:29:7d:a3:b3: 45:6b:80:3f:c4:e6:4a:bb:70:aa:67:95:96:1b:9e: ac:c3:1d:c1:11:b8:de:6a:79:03:b2:fe:0d:f5:f1: f9:49:b8:ab:e7:1a:60:67:da:c6:3d:94:5f:10:e2: 1c:50:a5:ce:44:81:ff:03:5d:f9:40:71:7f:f7:15: f1:74:49:c9:eb:00:c8:9c:d8:04:6b:46:8d:3e:4d: ae:f6:cc:d7:c1:1f:18:c1:14:e0:07:c4:a1:3e:0d: e6:19:29:41:77:7a:c8:0d:b0:2d:4e:f4:59:49:16: a6:47:c7:d8:77:92:30:4d:2d:35:ab:72:7b:f9:da: eb:f1:6b:7d:9a:0a:17:9b:56:ee:27:b3:f5:e1:12: ba:10:e6:9b:97:1a:a6:ae:b4:bd:c2:76:f7:20:9b: 00:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:33:09:E2:84:9E:56:4A:BF:96:F8:1F:3D:43:AC:BE:06:C4:30:8A X509v3 Authority Key Identifier: keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:f4:14:e9:7b:54:6a:70:83:9f:e0:b6:e3:9e:bc:42:d5:6e: 01:18:58:7a:9c:7c:bc:eb:b2:b2:4d:6a:bb:ac:6c:c8:49:5a: 14:d8:a1:c6:4e:65:50:c9:03:69:84:f5:3f:56:b9:a9:09:5b: d7:ce:52:2e:ea:50:6b:04:8d:00:24:87:8a:57:34:99:d5:cc: a1:67:0a:c8:e1:e3:21:d9:c3:a8:8e:0f:88:91:73:b6:35:b6: 2b:bd:90:6b:22:a6:16:91:9a:33:6a:88:e4:c4:d9:72:48:c3: c8:22:dd:c0:24:cc:14:a9:45:04:76:00:08:1d:0d:1d:6c:5f: 61:b9:35:a9:db:01:db:0c:16:ca:c7:79:0e:94:28:20:da:0d: cd:4f:37:7a:8e:5d:3f:36:12:32:53:ff:20:2c:ab:07:dc:2e: c2:eb:11:bf:6a:08:26:06:6c:4b:a6:34:ac:b5:e6:23:7d:a5: ca:61:4a:13:64:38:5e:fc:d5:ac:0a:dd:de:73:8e:c3:6e:3e: 30:b0:3b:69:a3:60:48:1c:13:cd:d6:c1:bd:83:27:24:b0:39: 52:d8:7f:f5:7b:9e:c7:ac:9f:62:88:f5:3d:1b:fb:66:af:63: 2b:98:44:17:0e:b1:d7:9d:ad:3f:70:78:30:74:4d:e4:37:a4: 4f:48:2b:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc8UUeQcoQR7KHqHKY2lbl3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy MWZjZjIwHhcNMjUwNjA0MTkwMDQ5WhcNMjUwNjA1MTkwMDQ5WjAzMTEwLwYDVQQD EyhiMDMzMDllMjg0OWU1NjRhYmY5NmY4MWYzZDQzYWNiZTA2YzQzMDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbQBV3/xQMsy3T2QUEmu96GQT3VH 0QX8Z2tcuGXbpBmDNOaJ8MZjR5/9DXyIjVAYyAJsLREH2LDuKFkxHzYmO+MGSumR 4SFXGjp1alJvS3Wkn2zA2a845sWEhhkigVZe7WTl2yl9o7NFa4A/xOZKu3CqZ5WW G56swx3BEbjeankDsv4N9fH5Sbir5xpgZ9rGPZRfEOIcUKXORIH/A135QHF/9xXx dEnJ6wDInNgEa0aNPk2u9szXwR8YwRTgB8ShPg3mGSlBd3rIDbAtTvRZSRamR8fY d5IwTS01q3J7+drr8Wt9mgoXm1buJ7P14RK6EOablxqmrrS9wnb3IJsAVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAzCeKEnlZKv5b4Hz1DrL4GxDCKMB8GA1UdIwQY MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt Mzk1NTk1OWVhZjgxLzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/QU6XtU anCDn+C24568QtVuARhYepx8vOuysk1qu6xsyElaFNihxk5lUMkDaYT1P1a5qQlb 185SLupQawSNACSHilc0mdXMoWcKyOHjIdnDqI4PiJFztjW2K72QayKmFpGaM2qI 5MTZckjDyCLdwCTMFKlFBHYACB0NHWxfYbk1qdsB2wwWysd5DpQoINoNzU83eo5d PzYSMlP/ICyrB9wuwusRv2oIJgZsS6Y0rLXmI32lymFKE2Q4XvzVrArd3nOOw24+ MLA7aaNgSBwTzdbBvYMnJLA5Uth/9Xuex6yfYoj1PRv7Zq9jK5hEFw6x152tP3B4 MHRN5DekT0gr4A== -----END CERTIFICATE-----Generated at Thu Jun 5 05:25:21 2025 by rpki-client