$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft File: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft (raw, json) Hash identifier: 3MAI35JKYvyLYiD4eAjrTvZa/1GfaRmjrgOUeynr/7g= Subject key identifier: D0:F3:0E:B2:A9:9A:D3:37:AB:DA:86:42:AA:E8:D0:03:01:8B:53:65 Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Certificate serial: 01974A0CB1194A0C457ED030CB6D1AED8E17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft Manifest number: 1582 Signing time: Sat 07 Jun 2025 11:00:35 +0000 Manifest this update: Sat 07 Jun 2025 11:00:35 +0000 Manifest next update: Sun 08 Jun 2025 11:00:35 +0000 Files and hashes: 1: 6-rA5MgZK44IjZPlgXpkxE7B8Yw.roa (hash: wuMAUh2Zz1xwb4YouTzXWPOq/mZIhjwk19/myb4Z5q8=) 2: 6QFd9IdVpCQmItNCPxRFCrp9nKQ.roa (hash: bGmgyU+MRUomnlmMA4u5BiNJcGHkzxHgj+I3pHeo+G0=) 3: 7dsX1_uj3CI2OL3ZR-YysHvbwJk.roa (hash: /UJ2jaPIsh9LABzhutyiOz6tqO3pebNJplX7fsJ15q4=) 4: 9x0cjGr7YULmSfzI3dcYG9w_06I.roa (hash: nZkDj/8oM/37FYrz8May17dhFjnT3DNeVQBgn2oaZf0=) 5: EBjZlhPdImN_fmswrc4n1qFbaJc.roa (hash: tUvTqcEJd5jRcaH6HCXAi4EQUm+eSxMyHWyd2ocWiV8=) 6: GNcbaUuI19-wbs7GLcE1lajDv-k.roa (hash: JkYHzX+XVOiUvpRyMV+wrBz6xce9nKA7hPNlot5aQZ4=) 7: PX0DpkBl9yg1gQzNf2fXaFsswv8.roa (hash: fegY3SzHduBrH8eO5Wo9IcX0cjRfR9p14sX7mhpiZ8U=) 8: SHXtPV4kgZiSMLrfaQNfttE3YEg.roa (hash: vCULHOU0pm0NUpWsnrVNz86sxtEUOZpw65hpej3MIxs=) 9: TEHPMPoZisl9vOiLWV_tB3SmWaI.roa (hash: /q8DB82i9XChVszHx+lvwBEwJCoXbxAKUBSDji6t9Ek=) 10: VAwOmXBu3_hb-94kaLmxAE_i7pI.roa (hash: IZvIAsZ3NFMGzz4y4fdnumBCA9Bj3yp20yIaQmXg3Fo=) 11: YTPIeKA6vN8bBsCmmqzk6w3bpmU.roa (hash: Mo6Tf23Yod2O05O4042OzPfIL4jXB8/HVLdp8MJUwtk=) 12: YrZdH5pglRx66b5p9JGRz_SyZts.roa (hash: mhtrEJveZQw15THeEWaXosd9inWt6asg5tmlg7bP8KA=) 13: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl (hash: mDCATwv+9R2QWD4SQ2xXhfq1FmpwrkJBdeZL7NAapco=) 14: k34T0BOxtuolFGK7D9gfPSVqjyg.roa (hash: zRGBGpZvNTWiV1L4FpZxoKUzkhe3V2xnMgLC1QF7Yns=) 15: rm3UHUFplAChrToLa297UrTCIuo.roa (hash: HHiyje/4Xaq3L0LGhP0VYLYtVuy3S8HWVlC7cJ7pBgA=) 16: yKPpEfXuR3hgVnHrW-SosrWvchI.roa (hash: JRlziFyrSVh96Xmb3+ZOE6HFj6jm/zMUIwmBAAhdoq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 11:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4a:0c:b1:19:4a:0c:45:7e:d0:30:cb:6d:1a:ed:8e:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Validity Not Before: Jun 7 11:00:35 2025 GMT Not After : Jun 8 11:00:35 2025 GMT Subject: CN=d0f30eb2a99ad337abda8642aae8d003018b5365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9d:d1:10:ac:ed:9c:71:80:4c:78:1f:95:4f: 01:48:7e:d2:8b:2b:57:58:85:78:9b:cb:c7:d7:5b: 60:57:3f:be:f1:21:7c:52:78:8d:89:de:d9:1c:6e: 86:af:2a:3d:b8:1a:fb:2f:8c:43:51:1a:6c:2c:26: 40:65:52:39:d9:86:e9:c9:ab:b3:a6:9d:56:1b:e1: 17:2a:cf:77:ba:79:0c:60:5b:52:29:7a:a0:a6:a7: ee:da:1c:b5:cb:67:54:98:ec:ab:34:ed:54:a4:d3: 57:2c:48:18:32:8b:ac:0e:67:2e:91:de:e3:06:9c: 7f:be:64:2b:b9:ae:6a:02:06:4e:7f:34:7e:f8:a1: fc:08:6f:8d:7e:01:d6:3c:60:b6:bb:4c:60:d5:4b: 2f:b0:21:40:54:31:8b:85:64:a3:5d:3a:3e:04:f9: 2a:89:1c:60:ff:5d:4e:ea:97:7c:8a:0e:a9:f4:82: 0a:79:9b:71:d0:25:6a:54:e7:e5:de:71:fc:03:66: 8b:ab:cb:d6:57:8c:12:a4:20:88:68:a6:ce:aa:51: 74:80:cd:54:4e:6e:1a:bf:ab:00:87:e2:92:b3:dd: ae:30:eb:27:35:29:e3:c0:39:4c:86:81:1d:11:49: 00:da:27:7c:95:64:0a:66:d3:24:b8:0a:ba:ec:52: 40:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F3:0E:B2:A9:9A:D3:37:AB:DA:86:42:AA:E8:D0:03:01:8B:53:65 X509v3 Authority Key Identifier: keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:7b:bc:9a:d0:cc:ac:34:e7:60:c6:4b:7a:81:83:48:50:e8: dd:fd:5b:7c:79:a0:83:76:14:39:9c:20:c7:34:f0:63:a4:0a: cb:be:ae:cb:95:5f:cd:e7:b7:01:d8:df:48:34:80:1b:b8:fd: 30:98:f7:19:75:2b:ce:f2:d4:03:c4:cc:05:09:56:5b:21:47: 2a:e9:95:53:2e:16:46:0c:f1:de:c2:83:38:c4:ea:26:3a:2b: 38:64:88:c2:9b:e0:b3:6f:56:71:7e:06:96:cb:fc:c0:1a:7b: e0:67:ed:bc:e9:59:b4:9d:f1:82:6f:e9:b4:fa:6c:fe:91:98: 77:eb:99:4a:19:24:d4:0e:81:19:8f:7c:e9:cb:c3:d2:f5:47: e8:cf:26:dc:a0:ca:e4:ca:10:23:4c:8e:9e:4d:5a:7c:b3:0b: 72:19:94:33:89:53:33:24:db:6c:e3:4d:8c:78:e4:db:d0:f2: 76:81:b9:68:f3:19:eb:a3:6d:87:1d:9e:c1:cb:5b:18:47:55: 06:63:c6:74:37:17:41:49:7f:aa:e5:8e:99:be:7b:01:53:97: 2f:17:32:78:fa:98:1b:39:e6:24:24:ee:7a:69:67:4a:18:27: 6b:be:26:c3:e9:c7:6c:0d:4d:9f:b4:43:99:04:1b:51:49:2b: d7:8f:ba:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdKDLEZSgxFftAwy20a7Y4XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZWQyZmJiNzIxM2ZiZjMyYWQ0YzA4N2Y4YjBiMjJjZWNl ZjRmZWEwHhcNMjUwNjA3MTEwMDM1WhcNMjUwNjA4MTEwMDM1WjAzMTEwLwYDVQQD EyhkMGYzMGViMmE5OWFkMzM3YWJkYTg2NDJhYWU4ZDAwMzAxOGI1MzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyp3REKztnHGATHgflU8BSH7SiytX WIV4m8vH11tgVz++8SF8UniNid7ZHG6Gryo9uBr7L4xDURpsLCZAZVI52Ybpyauz pp1WG+EXKs93unkMYFtSKXqgpqfu2hy1y2dUmOyrNO1UpNNXLEgYMousDmcukd7j Bpx/vmQrua5qAgZOfzR++KH8CG+NfgHWPGC2u0xg1UsvsCFAVDGLhWSjXTo+BPkq iRxg/11O6pd8ig6p9IIKeZtx0CVqVOfl3nH8A2aLq8vWV4wSpCCIaKbOqlF0gM1U Tm4av6sAh+KSs92uMOsnNSnjwDlMhoEdEUkA2id8lWQKZtMkuAq67FJAQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNDzDrKpmtM3q9qGQqro0AMBi1NlMB8GA1UdIwQY MBaAFHLtL7tyE/vzKtTAh/iwsizs70/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTkt YTY1MjMzYjNlOTc1LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTktYTY1MjMzYjNlOTc1 LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN3u8mtDM rDTnYMZLeoGDSFDo3f1bfHmgg3YUOZwgxzTwY6QKy76uy5Vfzee3AdjfSDSAG7j9 MJj3GXUrzvLUA8TMBQlWWyFHKumVUy4WRgzx3sKDOMTqJjorOGSIwpvgs29WcX4G lsv8wBp74GftvOlZtJ3xgm/ptPps/pGYd+uZShkk1A6BGY986cvD0vVH6M8m3KDK 5MoQI0yOnk1afLMLchmUM4lTMyTbbONNjHjk29DydoG5aPMZ66Nthx2ewctbGEdV BmPGdDcXQUl/quWOmb57AVOXLxcyePqYGznmJCTuemlnShgna74mw+nHbA1Nn7RD mQQbUUkr14+6iw== -----END CERTIFICATE-----Generated at Sat Jun 7 20:26:54 2025 by rpki-client