$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft File: jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json) Hash identifier: Sh5i+dbs6HiLu0wpOLLvUdwebKgPzJhhuF8Gr16JbRs= Subject key identifier: 2E:F8:6D:57:4E:8E:C2:B6:46:34:73:38:FE:78:77:5D:B5:95:79:3D Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Certificate serial: 01973C50D912CA292B24A2C56428A5DF1D2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft Manifest number: 1515 Signing time: Wed 04 Jun 2025 19:00:20 +0000 Manifest this update: Wed 04 Jun 2025 19:00:20 +0000 Manifest next update: Thu 05 Jun 2025 19:00:20 +0000 Files and hashes: 1: A3slZgyg9eemzONzeM4ZjQZOkQA.roa (hash: X0hOJW7H3OQv8gNe/Scffw0tX7rp3lfITg3c2bDp62I=) 2: Dyi32KlOskocQHPe6FUF7ELQs5U.roa (hash: D3EF+UreJY6p0ckzuksgWXVvYetF6sITxKDGv/w2L0k=) 3: FJEFcX2c3QiytgwJXtBXdfXF7AQ.roa (hash: wDOQFjMrdpmJOwUI55qSC810FFGrsaY4QPcOoJKWykM=) 4: G_noKzntiWHLaHSdta1FputJESM.roa (hash: 76HBYH18Q5+wfRzE5ydGp21BC62rcsuS2tSvCzBrWp8=) 5: K9IKE8UzWzIlRqgdm5DBscj4DXI.roa (hash: TmNOvsKyJxclTHoJrrP+Wz2lJl3QKp06vZRtwf2Wkwo=) 6: Orf0-crrS-m0d2xw75OekVLRhcU.roa (hash: NyC6YqKt0FNmC1unp3jevt47/gr2Ss5dzqvXJGD2AjU=) 7: THZGRo10wjMlm6DbRUy7KjrwfkM.roa (hash: 9FjGohVB5WEFkwBSNZEgEcooaudVJnnxxDK2Jy9/LgI=) 8: VmEKVuU_uT-v34QUxuvTEoMoaug.roa (hash: lCfgs7Wts05rdP9N+OaYxsLVxOabAGR5SUtGArrm95M=) 9: Vxz_brs8mMP8pyfBjMG6SqLCoLA.roa (hash: InPdcQtGkZTGLva52kv6ADnfkbCulTXgK4jOcLs8G7M=) 10: Xmin5XG-kRl49Vt7ZEcTgSLDhDM.roa (hash: DHMC7YXYfDSAA2x6JnOvMwJT1zdpAymlypp6F1bKmgY=) 11: Yfzph1m23vmbClyvIoORpS1CW-E.roa (hash: SuwU2G9eYZ/n+GS6xB/GEsh3UziEYPdyi1WD5kRpjAo=) 12: _vcj5hH5PQmqE-mf4-B7kcWGpfg.roa (hash: ReLlnYnzQbiQ5Pk/0fIjBSPY1fpdoMBMJpSnkiSreWk=) 13: d-sWN4azI8sU7mlb0U-920Rsmtc.roa (hash: eiusVr40X1jFuIAj+CFi96eXy2bKXAQXnB20dKkv/70=) 14: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: 1XltLjBWy0fU44/faNZNXQ69YXw0OgPfezMLqcNKV7E=) 15: mwm5rC4rfoUfkUGj1keywZQhhGw.roa (hash: dDwtNYt9WubuetSqef0LQakniH0rgBVhQK32OI1f1fU=) 16: nyxtNnWsxM3-5IIVvMZ44cQVEYU.roa (hash: ub8VtVKtgWVEPS0rlKsjT0ZjeuiFnfLTw/tC6ZpW/Vo=) 17: v5kzcztD_Zc4DwbwnN4YfKR9YoA.roa (hash: 33e8kQ++AVlCN79vtcp+1+C+oGUNBxplYHYOGaRMl58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3c:50:d9:12:ca:29:2b:24:a2:c5:64:28:a5:df:1d:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Validity Not Before: Jun 4 19:00:20 2025 GMT Not After : Jun 5 19:00:20 2025 GMT Subject: CN=2ef86d574e8ec2b646347338fe78775db595793d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c8:67:1f:b0:28:f0:e6:03:d8:90:62:06:44: 79:19:d6:0d:6d:bb:b4:cd:b1:86:e4:5c:1e:5d:93: 29:88:0f:a5:15:ea:43:93:65:e1:94:6a:f7:f9:e0: b6:85:da:4e:3c:f7:5b:25:49:b4:a9:64:53:a9:a4: e7:84:52:9c:2c:c0:81:19:b6:4d:78:0f:04:68:2e: 40:88:5c:18:03:d2:e6:21:84:0a:85:a8:29:5c:4a: 75:79:cd:d1:06:16:d9:52:b5:d8:e3:5f:e9:12:77: 63:68:f4:48:eb:a5:37:0d:7d:31:c6:2a:ec:a3:3c: 1e:13:12:0c:96:86:71:cd:ba:82:eb:9f:69:76:f6: a7:17:4a:25:86:c5:f7:a9:57:4c:cb:41:52:81:1e: 8c:42:31:b8:d9:36:c9:69:2d:85:42:50:72:b5:5b: 1e:a7:0e:c8:55:fe:e7:c4:2f:fb:91:7e:0a:fd:c7: 1a:f4:b2:71:bc:f7:ea:ae:0e:fc:12:d5:16:4a:6b: 65:26:a1:01:e3:92:2e:c0:aa:4d:e0:8f:7d:60:d5: da:95:c5:c7:c4:fe:b9:16:cd:0e:a9:a3:50:13:0a: 2a:e8:d4:79:d5:47:e9:f6:08:13:df:d4:e1:dc:10: 1b:11:36:b2:e4:5e:ac:e7:9e:04:fb:b3:b1:e4:f7: fb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F8:6D:57:4E:8E:C2:B6:46:34:73:38:FE:78:77:5D:B5:95:79:3D X509v3 Authority Key Identifier: keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:92:41:44:6a:ef:de:27:fe:2a:5e:18:5c:be:85:8b:c8:c8: 21:03:2e:28:aa:2d:78:7a:f1:76:35:dc:e1:b3:ce:85:18:12: 58:8f:fa:10:53:f3:b9:b3:5f:c9:33:fa:62:e8:11:c3:db:85: 76:f2:e1:fa:53:74:66:22:69:6d:cc:b8:61:e2:2b:ff:1b:d8: ac:b2:d9:5b:cb:dd:b0:92:32:d6:59:d5:19:6e:b1:a9:fe:00: 93:0c:95:5a:66:f6:8c:3d:ff:0c:60:34:ca:3a:ed:cf:d1:cd: 78:48:f9:2f:de:f3:4a:d7:51:94:de:38:d1:79:ea:88:4f:7e: 06:77:4f:23:2c:1b:52:04:f2:19:87:60:05:5e:8e:bc:a1:35: e5:82:e0:f6:ec:7c:7a:c6:a8:c9:78:3b:ea:bc:43:ef:60:47: 97:a3:1a:da:44:c0:88:a5:97:16:17:46:ce:20:fa:c9:a5:cf: 24:ed:9d:18:19:ed:34:26:b5:ae:86:56:66:00:c2:d2:4d:3a: d3:23:8f:40:11:2b:b5:41:3e:99:2c:92:8a:91:f9:db:59:50: 80:24:d6:a4:87:f9:d9:34:a0:f7:4d:f9:8f:0d:04:64:7e:4b: a6:14:d7:54:97:1f:1e:5d:c9:cc:e9:a6:b9:e9:13:f2:87:31: 80:3c:5d:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc8UNkSyikrJKLFZCil3x0tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl NjNjMTMwHhcNMjUwNjA0MTkwMDIwWhcNMjUwNjA1MTkwMDIwWjAzMTEwLwYDVQQD EygyZWY4NmQ1NzRlOGVjMmI2NDYzNDczMzhmZTc4Nzc1ZGI1OTU3OTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxchnH7Ao8OYD2JBiBkR5GdYNbbu0 zbGG5FweXZMpiA+lFepDk2XhlGr3+eC2hdpOPPdbJUm0qWRTqaTnhFKcLMCBGbZN eA8EaC5AiFwYA9LmIYQKhagpXEp1ec3RBhbZUrXY41/pEndjaPRI66U3DX0xxirs ozweExIMloZxzbqC659pdvanF0olhsX3qVdMy0FSgR6MQjG42TbJaS2FQlBytVse pw7IVf7nxC/7kX4K/cca9LJxvPfqrg78EtUWSmtlJqEB45IuwKpN4I99YNXalcXH xP65Fs0OqaNQEwoq6NR51Ufp9ggT39Th3BAbETay5F6s554E+7Ox5Pf7/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC74bVdOjsK2RjRzOP54d121lXk9MB8GA1UdIwQY MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt YmE3NzFmZmQyNjljLzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZJBRGrv 3if+Kl4YXL6Fi8jIIQMuKKoteHrxdjXc4bPOhRgSWI/6EFPzubNfyTP6YugRw9uF dvLh+lN0ZiJpbcy4YeIr/xvYrLLZW8vdsJIy1lnVGW6xqf4AkwyVWmb2jD3/DGA0 yjrtz9HNeEj5L97zStdRlN440XnqiE9+BndPIywbUgTyGYdgBV6OvKE15YLg9ux8 esaoyXg76rxD72BHl6Ma2kTAiKWXFhdGziD6yaXPJO2dGBntNCa1roZWZgDC0k06 0yOPQBErtUE+mSySipH521lQgCTWpIf52TSg9035jw0EZH5LphTXVJcfHl3JzOmm uekT8ocxgDxdYg== -----END CERTIFICATE-----Generated at Thu Jun 5 00:01:15 2025 by rpki-client