$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft File: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft (raw, json) Hash identifier: jcnP6MC0AP7W2lyfDdibtrErPvLcs+VDZ6JTZH8kN5s= Subject key identifier: CC:01:87:14:93:75:CE:70:60:67:20:27:1D:55:E9:58:5F:49:FA:21 Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea Certificate serial: 01974779C468B02CE1FC5E1576724E93B44B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft Manifest number: 1588 Signing time: Fri 06 Jun 2025 23:00:51 +0000 Manifest this update: Fri 06 Jun 2025 23:00:51 +0000 Manifest next update: Sat 07 Jun 2025 23:00:51 +0000 Files and hashes: 1: 0GQGYjFgeoe90j-QzubD6mrcJkk.roa (hash: cASoDwOCqQQo3HckgWr9Fm6RrFpE5g5vgsJJsPTF9PI=) 2: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl (hash: Rr8I5L4oavwCZyBr0FsQtoKm4+QvPFh0UEi0iZ9ZKuE=) 3: 5YsWNoJ_eVXnLQUmvRfRv35-ITo.roa (hash: +Wt4CaG2KBebUdy7DTYqNM4+qA+qSGjkIL8Uj7jYbKY=) 4: LkZMbp2aUa0yXxOxLWaqN5AS52o.roa (hash: o8vH7FtM5V/qTZoiT6aAxSseM4Yg902eHtLadTVcAzY=) 5: N5NvCVL9qwjYZWiGAgoiE3kpDsM.roa (hash: /XNE593x81Nv5d88KdthJ5cf11PusTGT9f+nPTiwsmQ=) 6: O2VeVpIY0NqqJs4saKQoTuFoA6I.roa (hash: eCU07QC/oP0X/AS+uAyqKGOShTlcgaS/MZcj5EXt1FQ=) 7: PmeI5MIhQ4wxSrPUPOIOQ9Ubvnk.roa (hash: W6jZRl9BSEjjkm486LLqed9ed+xxHLYMlqc3sRgCALQ=) 8: QJVbOLfuQimwnt2csTkB91gXkec.roa (hash: GkGvp1WsMKLXrnxKgO0ikQrOP7Rki9hxYkm+S7LbAS8=) 9: RTN7ctApkTYd2Og2JaBeJOrSDKw.roa (hash: PECp9vVhGIOoiVTK3bRnzPU+NWZIUXb57SnIExeKGko=) 10: ZFUmkI5Si20CHGaDBK-ZoNXIfEk.roa (hash: 4y56G8cf16t1jWavTqKOCy9B29Mw+jTHj1dGwOZOhA0=) 11: _28X1lMsvBxqScVY5HiVqqNdE4o.roa (hash: 1zLcZ1CwGAvvzQsYCPPfZSZE3xWE9xsMdQ0aDUZbc8g=) 12: cdmQ2_ODlCp8h7SlTaorYnidAuk.roa (hash: +IC730dtvUCM5X3ceJwMJA3N6qWFyePDz8c3aKLMcqE=) 13: gWN0YMhA97UPOTqYvOMM9zaPWRs.roa (hash: Hm5lPWw7bUXDdTOs1pfp1fHbk/bNa8PnxIySi1lfXPs=) 14: iY_9p9rfYCrq76s6mH8iLmqZ8G4.roa (hash: WZh8CFIJ4XBLsbT8NvOnixg7Xgopb12vdZ21KTVanqQ=) 15: jTMPeohgGOxcMFZVU8z0ehshce0.roa (hash: SyL8iMLhykQz8ANtvdKfK1EugykUZcu24olhfWQesXo=) 16: n7V7OXaDS-XvJc4UQc5MPqTFYmY.roa (hash: 0QBDYhcEfGTqjEJgSs+TOY3XMDZsBCVa117v4v2Y4iI=) 17: uEsfVd8NIzUxBoG774jECjWdTsY.roa (hash: lAehouSKcnB2amZVq4TUPtcrTxH5jfwC6dVK0vZrRgI=) 18: vlDfC43FHcefunPJngYR1WAZ7rA.roa (hash: az+OZ3tRKu13gj7aBFAWboRwowS41+dYdps7euT4uWg=) 19: w_D8ebnb3eRC6CWTSI4QXg7yIcA.roa (hash: cKSU2IKqf8A5+vV8g8UVVjc9ie4gyRlLREV+QT0zjV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 22:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:47:79:c4:68:b0:2c:e1:fc:5e:15:76:72:4e:93:b4:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea Validity Not Before: Jun 6 23:00:51 2025 GMT Not After : Jun 7 23:00:51 2025 GMT Subject: CN=cc0187149375ce70606720271d55e9585f49fa21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e5:f5:ca:02:94:a7:52:9f:3c:4c:a6:24:1f: 39:82:32:29:23:a7:a6:0a:d4:45:14:52:df:07:00: 0e:2e:06:05:f6:65:2b:14:21:2a:e4:1a:c5:6b:c8: 6c:bd:ea:ef:88:2b:02:8c:e2:90:4d:b3:e2:03:48: 0b:93:cb:0b:d5:6c:f1:cf:90:90:dd:64:54:bf:bc: db:13:8b:d6:85:81:6f:18:8c:74:28:5d:af:4f:63: 76:95:94:4a:02:50:27:87:eb:08:0c:fd:10:72:8f: 34:6a:76:91:b2:66:ba:1b:f7:f7:92:a7:b7:5c:51: 2f:bc:0a:c4:51:49:9c:38:c6:80:e9:76:5b:83:14: f3:cb:4e:65:4e:cf:a1:7e:a9:cf:4d:68:de:af:b9: 81:55:cd:3e:49:84:e1:5a:74:fa:60:60:e6:bf:bb: 7c:d0:c9:8c:4a:b5:22:3e:e9:ec:8d:46:60:fc:c1: 63:12:a4:93:d1:c9:1e:90:32:54:3e:a5:77:60:ea: e3:f8:c1:07:78:ef:e0:96:f8:7d:31:1a:60:d7:f3: 67:c5:8a:4b:12:8b:a4:83:42:b3:20:89:bc:80:04: ea:fa:6e:11:88:e8:cf:45:4c:dc:b3:68:9a:a3:f9: f6:9f:41:2a:b4:f2:1e:09:c3:dd:1d:74:83:30:85: ba:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:01:87:14:93:75:CE:70:60:67:20:27:1D:55:E9:58:5F:49:FA:21 X509v3 Authority Key Identifier: keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:bb:c4:ad:84:6b:94:0d:6f:d3:0b:18:a4:ab:2f:a8:46:65: e7:38:e7:b5:7f:b4:65:83:ac:b4:09:3e:94:de:91:b9:cc:0e: 79:d8:3e:4d:42:97:e7:19:46:18:73:b9:c1:a5:62:68:e9:49: 7a:aa:b8:66:e3:2d:5b:49:31:28:da:a7:a4:d7:34:6d:cb:c5: 60:5a:37:f1:f9:d6:a1:19:ee:6d:95:a3:ef:21:7b:a0:d7:b9: 6e:30:90:6d:10:80:b2:1c:00:5f:cf:1b:23:ac:1d:9f:91:f6: 1e:1f:26:eb:2f:87:e2:d7:ff:da:25:02:cb:a4:8c:9d:40:f6: 4d:71:ea:69:49:25:ff:33:91:24:a7:e0:da:b4:34:c9:00:2c: bd:d6:d9:37:44:6f:1a:f2:a5:0d:79:16:bf:90:24:d1:c7:88: 3b:3e:a9:e2:23:08:db:64:cb:42:43:21:e4:07:31:05:26:3e: 14:5f:df:86:ec:4f:aa:29:80:9d:d4:8f:bb:90:ad:27:43:6b: 9a:94:4a:43:2c:30:c9:f3:5d:08:3c:0e:81:82:f9:d4:c5:38: a1:86:e9:55:ba:9b:44:7b:3a:12:72:23:dd:91:bf:48:70:f7: 5e:f5:56:0f:a5:15:56:fe:cf:9a:7e:98:52:42:c3:46:73:62: c2:41:3d:d5 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZdHecRosCzh/F4VdnJOk7RLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiOTg3MjQ0NjExYjUyMzA1MzY3NDRiNmE4OWYwNDRmMzJm NDYyZWEwHhcNMjUwNjA2MjMwMDUxWhcNMjUwNjA3MjMwMDUxWjAzMTEwLwYDVQQD EyhjYzAxODcxNDkzNzVjZTcwNjA2NzIwMjcxZDU1ZTk1ODVmNDlmYTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuX1ygKUp1KfPEymJB85gjIpI6em CtRFFFLfBwAOLgYF9mUrFCEq5BrFa8hsverviCsCjOKQTbPiA0gLk8sL1Wzxz5CQ 3WRUv7zbE4vWhYFvGIx0KF2vT2N2lZRKAlAnh+sIDP0Qco80anaRsma6G/f3kqe3 XFEvvArEUUmcOMaA6XZbgxTzy05lTs+hfqnPTWjer7mBVc0+SYThWnT6YGDmv7t8 0MmMSrUiPunsjUZg/MFjEqST0ckekDJUPqV3YOrj+MEHeO/glvh9MRpg1/NnxYpL Eoukg0KzIIm8gATq+m4RiOjPRUzcs2iao/n2n0EqtPIeCcPdHXSDMIW6GwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMwBhxSTdc5wYGcgJx1V6VhfSfohMB8GA1UdIwQY MBaAFPuYckRhG1IwU2dEtqifBE8y9GLqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS01aHlSR0ViVWpCVFowUzJxSjhFVHpMMFl1by5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAw LWJlNTgzMmQ1ZjdhYS8xLzEtNWh5UkdFYlVqQlRaMFMycUo4RVR6TDBZdW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ0LzMxOWQ3Yy03ZTc2LTQzMDgtYmMwMC1iZTU4MzJkNWY3 YWEvMS8xLTVoeVJHRWJVakJUWjBTMnFKOEVUekwwWXVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7vE rYRrlA1v0wsYpKsvqEZl5zjntX+0ZYOstAk+lN6RucwOedg+TUKX5xlGGHO5waVi aOlJeqq4ZuMtW0kxKNqnpNc0bcvFYFo38fnWoRnubZWj7yF7oNe5bjCQbRCAshwA X88bI6wdn5H2Hh8m6y+H4tf/2iUCy6SMnUD2TXHqaUkl/zORJKfg2rQ0yQAsvdbZ N0RvGvKlDXkWv5Ak0ceIOz6p4iMI22TLQkMh5AcxBSY+FF/fhuxPqimAndSPu5Ct J0NrmpRKQywwyfNdCDwOgYL51MU4oYbpVbqbRHs6EnIj3ZG/SHD3XvVWD6UVVv7P mn6YUkLDRnNiwkE91Q== -----END CERTIFICATE-----Generated at Sat Jun 7 03:33:57 2025 by rpki-client