$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft File: J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft (raw, json) Hash identifier: k65bHk4f3LsOpxY/MfVAoX3vzoU6lDxPHTKA5x7LdHI= Subject key identifier: 3A:FE:8C:89:AB:9D:A5:2F:56:0F:60:EB:73:22:6F:53:6F:B3:04:76 Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Certificate serial: 01974A7B00F4808D3E48C5D83E44138334E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft Manifest number: 168E Signing time: Sat 07 Jun 2025 13:01:04 +0000 Manifest this update: Sat 07 Jun 2025 13:01:04 +0000 Manifest next update: Sun 08 Jun 2025 13:01:04 +0000 Files and hashes: 1: 1eUzZitDZ013U4KoMXhLsZt-Ouw.roa (hash: onauJHUcj3/Gk42IQtCwNxPA1GwGcTPdZF4tzNU5Cic=) 2: 3eUT08I9fAP3Rh0UE9FbfxsG1bc.roa (hash: akr8fvq3b1MRJAZxmdxssOux5X/sXZanMRkztgAfzHg=) 3: 5A6TWydKZKqfYzpCt6Jsf0lW0mw.roa (hash: OZOYj7hFzez9gxx1r6KmK94hCUkU5+61u0Dvc4JM9Z8=) 4: 6kvBNM7QxzqNFUQY6UJAUSlEXG0.roa (hash: VzytZI3MZIGD76NTvtSVMrgwhYYU4KZfB6J50PMrkLQ=) 5: 7vYSmlk2u5zvZg_3ArmbDEY_sNU.roa (hash: Jq4Qzcnido1Bc85YICom1I+PBuMze7LAU9Wcp1OqdNY=) 6: 9CecUJWAhyUbD-JEeW3t7Q_bT3I.roa (hash: Ql1G0HHXMA7dM1rPg1JGzT0qhMxhyvoFIN+xbPIAbQE=) 7: 9JYLRbAyBiZx1C4OYbnwWphquZ4.roa (hash: IXG5gmo6XuX7z6I59d8WQFp9CPf9KqOZ7R0eb0+uGzE=) 8: 9TOpmOFT85FoIQt7VW00tnNSDyc.roa (hash: SCLGJPJrvLPHM3t4jGt50TpAdXlieT/PBKVM3GuTOz8=) 9: Ctl1kD2uqDs0nltLthIkWuH3q_I.roa (hash: nRrDiHydrsYqFGlhS3R7cILiVRi/UJqZgFPSjdVKIe4=) 10: D9kReuUfnqK0y7nk-I74tRESYYU.roa (hash: onEFa0+ErZ1aSjQk8E05b4+s3hg4ZO35purvDEgyF2w=) 11: F4LyibxUyKDWiTWokbR8Nu9dwFg.roa (hash: ls3OOX8CUo2Fe8GCCqRqasL5CwSJNwzKwm1rIE9s2yA=) 12: GAOT9zYxLw8oZDIwUIGywpBcjB4.roa (hash: hUanzkdOKXITITs1YgDbKjXXABKxTMzchE87QAQ0bYE=) 13: GS2XVRqZpeDdiCx3T0QMEG4okfQ.roa (hash: c+r+fHHe/APmANIkQRbs62jauEl4PzEDrWx2I+B9cis=) 14: GeTD2FnRC1JSiACi7Zc6xwpLCFA.roa (hash: VeVaUKTcdEDW2fRzvPABtIyMQZZZ9rNn6xJNVY7+2r0=) 15: GvXRVawHzzCi7pgsF39SYGKOL1c.roa (hash: IOKiIV1qdEfGlMmS/WoO8wBdPAZPaBqF8Ff8rokjp5c=) 16: J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl (hash: LHAeJT+L31Lz7Y2aoKqIhvqdHYn3sJhrploavMSiCkM=) 17: KKuykAsgSlfU2_ah3gPApjpa_bY.roa (hash: lDZxYhBz6e/2Gw3mx1uSU5ra67aA2s9x9ASpcPzvb6k=) 18: Md7YZ-d1Y1XheM9ry7B9sgz4YA4.roa (hash: Ih78eioWDLIJh2FdRhV0xY7L6/wFxYgEtTJFDLMZDFU=) 19: NHulc4Xr5UTDZcaKywtBQBKjze4.roa (hash: XJgO5TSUWtITNdkmTiFR6yAsuz/yfG1PVcms5HB/rmg=) 20: SI6JcMkAdXeahj7NGt32DCzk_N4.roa (hash: XmnPzPSkO2n35usGEIRF1Qz4ke4WyZ//abuJ7KDgxxQ=) 21: SbU6Wu3VYL_xJUdthJTMBSanghY.roa (hash: 0SfBRTqaFb3y7K9XYOO4Yq/M+ASPHTLlHQOS0a7mCG8=) 22: TthjPRR5wXxsEh-6VCqYJXzgbKE.roa (hash: qNNifR39ahZ3yfEWA6+o5w3ku4jFU0k6pJdFlQXCAdc=) 23: Vbp_L2hdFxTdfzdKLSX_zbLl_mk.roa (hash: 4m7gesb3gkf55hVL1cOVKzNKguAUApHfmA6sJrKWwxA=) 24: W7QzaER1vR-s3Pj4KyrMCvE0NVo.roa (hash: ZgPuCeX9vl95FC5nGpWcD3MQhmHO62QrHuHCGcZ3dQ0=) 25: WRheQN0amA9-_VCQME57u4bK-ks.roa (hash: blzydWxPl2ahI62ziLjMaHt088mTMKIJq9ZUkNAzqD0=) 26: YZm_xLtmsH08Bas2THq1RxLz81g.roa (hash: qHMBbTPBGSfjxU8aJsAB/XiYXwHHASUN+b5Hn+g/xts=) 27: _mea20OFuYFsi2iTbTW6kjzayQ8.roa (hash: 15vxvAMXVj8o1NZa+nAjbC1U25nrqGTHLYeckcnvDkE=) 28: ghdkEXOYieGGhOcxGRo9LY6w5LY.roa (hash: 4cdu+XE7YUzkOZIE2VvcRY1Ie1MDvn7w+dAFcHrze/w=) 29: p45g5foq91zKggpm9xOru9V5Ta8.roa (hash: aescxVeG95+vLWeERAq4yBUOFPEiqWqdLL4rR3/2YL0=) 30: rGkstG6DmG4B7cdYh3EO2voHOpA.roa (hash: SmsIhLLPmjYgcUx7ha4qQmd2o5KZk8x1FvvtQ8LvAQs=) 31: sPN4MQOyS-s_riyCy93fzpeT-34.roa (hash: yENIXfYPwcHSIXCDZ9TP6nlOKTHnb7yHcks9QDKcNxs=) 32: sbm57hbO9DMhZVoyKG3SdA-duFk.roa (hash: 6anRwGUA22JIE2yI5cX9sKlVcBQWgTcUOS+5xTEbTcw=) 33: uFxKkTJ2FS-YadWkkiFDxhg46zw.roa (hash: CKurhe6gxcartqAcpNhLJ0w752vEmApcJaVpSiuG5Lk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4a:7b:00:f4:80:8d:3e:48:c5:d8:3e:44:13:83:34:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Validity Not Before: Jun 7 13:01:04 2025 GMT Not After : Jun 8 13:01:04 2025 GMT Subject: CN=3afe8c89ab9da52f560f60eb73226f536fb30476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b1:eb:d5:ef:c0:73:6f:15:8d:5c:14:f9:4e: e4:8d:08:34:d1:f7:98:bd:d1:9d:74:f8:1e:a2:3e: b0:94:7c:b3:3c:31:64:3b:89:f4:ea:8d:8b:af:e2: 4e:07:34:4e:09:dc:99:fe:b0:d4:8b:99:06:06:84: 23:5c:5a:8d:6c:3a:64:6a:02:86:ed:52:2a:34:42: 7c:53:f1:a6:c9:f3:da:99:51:a7:ac:86:a0:85:83: 3e:a8:22:11:3a:4d:1e:98:1e:b3:12:25:8c:dd:75: 7c:c5:47:d8:f6:44:b1:ca:b3:29:29:7a:d3:5d:a3: 93:c5:c6:a0:30:27:d6:cd:4c:26:e0:ad:1a:86:65: ca:42:f7:56:fd:d3:85:ca:0c:2e:52:93:99:61:00: ec:e5:81:0f:4e:92:30:f3:eb:f5:b1:7f:d7:2f:a8: 5a:3e:3d:58:3a:b2:6f:45:5a:b4:fb:5f:86:28:47: f1:85:b6:96:56:55:48:40:c5:65:b8:d6:02:db:36: 8a:e7:b1:83:54:97:96:cd:f7:a7:e0:43:52:cd:45: f7:eb:77:15:3b:9f:1c:15:11:2a:d2:3a:b5:76:9b: c1:3c:7a:df:ee:fc:7d:11:be:35:b4:15:e3:eb:6e: 17:9b:f5:25:ef:bc:46:d3:12:4f:f3:0c:65:db:88: 1d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FE:8C:89:AB:9D:A5:2F:56:0F:60:EB:73:22:6F:53:6F:B3:04:76 X509v3 Authority Key Identifier: keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:95:43:94:5d:a8:48:bf:b5:b8:3c:c9:3a:b3:d7:54:fe:b4: 88:98:94:72:02:99:43:26:f8:c8:38:63:61:4e:b8:a1:88:67: 79:67:af:93:87:07:7a:c8:6f:f7:28:73:38:ef:37:20:02:a4: 1c:48:ed:bb:c5:49:c5:8c:c8:56:df:f0:bd:ee:58:7c:ff:fb: 52:64:11:0d:9b:6b:42:b2:74:5e:d4:69:1a:c7:eb:8b:5a:ff: 90:9b:58:ff:93:db:4e:22:22:d3:c0:47:6b:df:7c:4b:51:3c: 04:d4:4e:7d:1d:c9:9a:12:eb:d3:57:e5:6b:4b:ce:52:47:4b: 9b:09:0f:3e:4e:73:72:00:ad:86:f9:ff:f2:c4:5e:b9:18:2c: 59:47:53:50:28:8c:74:da:05:7d:a3:f3:2a:ac:bb:08:45:77: 45:51:0d:dc:88:00:12:34:9e:7d:9c:a8:f0:f0:c9:8e:98:a7: 72:ad:35:9e:12:a0:5d:d6:54:ed:d0:15:49:3d:07:80:1f:ea: 9c:db:d8:31:b9:c5:69:c0:c9:6b:23:da:8b:f0:2e:9d:7a:b2: 30:0f:61:36:83:eb:72:08:38:32:28:dc:52:0d:38:d4:80:ca: cb:f6:2b:d4:a4:56:21:7a:d9:f3:a5:a0:b4:a3:37:42:f4:8e: 46:bd:89:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdKewD0gI0+SMXYPkQTgzTlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy NjBhZTUwHhcNMjUwNjA3MTMwMTA0WhcNMjUwNjA4MTMwMTA0WjAzMTEwLwYDVQQD EygzYWZlOGM4OWFiOWRhNTJmNTYwZjYwZWI3MzIyNmY1MzZmYjMwNDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLHr1e/Ac28VjVwU+U7kjQg00feY vdGddPgeoj6wlHyzPDFkO4n06o2Lr+JOBzROCdyZ/rDUi5kGBoQjXFqNbDpkagKG 7VIqNEJ8U/GmyfPamVGnrIaghYM+qCIROk0emB6zEiWM3XV8xUfY9kSxyrMpKXrT XaOTxcagMCfWzUwm4K0ahmXKQvdW/dOFygwuUpOZYQDs5YEPTpIw8+v1sX/XL6ha Pj1YOrJvRVq0+1+GKEfxhbaWVlVIQMVluNYC2zaK57GDVJeWzfen4ENSzUX363cV O58cFREq0jq1dpvBPHrf7vx9Eb41tBXj624Xm/Ul77xG0xJP8wxl24gdpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDr+jImrnaUvVg9g63Mib1NvswR2MB8GA1UdIwQY MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt Zjc0ZDk1MTg1NzZjLzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJVDlF2o SL+1uDzJOrPXVP60iJiUcgKZQyb4yDhjYU64oYhneWevk4cHeshv9yhzOO83IAKk HEjtu8VJxYzIVt/wve5YfP/7UmQRDZtrQrJ0XtRpGsfri1r/kJtY/5PbTiIi08BH a998S1E8BNROfR3JmhLr01fla0vOUkdLmwkPPk5zcgCthvn/8sReuRgsWUdTUCiM dNoFfaPzKqy7CEV3RVEN3IgAEjSefZyo8PDJjpincq01nhKgXdZU7dAVST0HgB/q nNvYMbnFacDJayPai/AunXqyMA9hNoPrcgg4MijcUg041IDKy/Yr1KRWIXrZ86Wg tKM3QvSORr2Jxw== -----END CERTIFICATE-----Generated at Sat Jun 7 16:09:32 2025 by rpki-client