$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft File: K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft (raw, json) Hash identifier: 9PavXEDO5ArOv4WTaZW1Wbc3eDnZmHb0y44H0I6JRjQ= Subject key identifier: 96:9E:1C:5E:26:29:C3:37:31:82:3E:FD:14:C1:E1:98:7D:AC:45:F2 Authority key identifier: 2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B Certificate issuer: /CN=2b967e772cc7298305a11ffa65dd185f6a58910b Certificate serial: 01974B8D6B2D42616FA33F66F6111A22CBD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft Manifest number: 0D33 Signing time: Sat 07 Jun 2025 18:00:48 +0000 Manifest this update: Sat 07 Jun 2025 18:00:48 +0000 Manifest next update: Sun 08 Jun 2025 18:00:48 +0000 Files and hashes: 1: 1ehPzZKxF1UYBJMFREeIsWSe-0E.roa (hash: +fEfnPMqQYMaOaxEiaDX2H+smUyU5o+FiuHqTI6a8Fg=) 2: 2GYZY3YmP4Z9CrbeYrsEBS4WPvQ.roa (hash: 5GQk+W5w5aJknyyML0N7FECeUlVHN3WA+aoitU2P1JY=) 3: 2catgB5VK787sqGbIW3dngQFHEE.roa (hash: B+SFn1cOjP49uHmdVYtQOuuR22NDQQ5ZSYkwXBcG4Xw=) 4: 9RSLkQ5wyeSzJcCtl7FXYXufiXg.roa (hash: C23nJYoJlpERYjPPrIl4nUFaowb3JdwHKbCCgwPR7Fc=) 5: A-23JzA-7G9IJRx7L7gZ2EsiZXs.roa (hash: 6GMUeHfmdErm/sIramac3F+jFlRdAFwxAZz+asqiZFE=) 6: K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl (hash: ybQXy/DyRsOOJIrZngbml5BR8gppKjckKKPBhCke/Gc=) 7: NLONGxWCaDncCXl5R1oWg-KTHPI.roa (hash: wEU6hkf61GZGgIuFGLQHCPpd8fVGVUdNGM1QqUlTpzA=) 8: Q0coXhksYsiHyus7jkG0H1rCOhs.roa (hash: GLAs1yGQZUPoiQEpZ9WyTQNtMvFVhBPCXGqgjPd+Ip8=) 9: QZYtXBxzzLLwx6OP96338EZQNhM.roa (hash: 38l/EW42Cd8oOnZZH6RtDcfG0bGHq+MKq8reh5+yb4I=) 10: S5EvGcwDHH7zGUGD1TsxliOQ844.roa (hash: 9ucAO/aS27/vji8pCgT0q2aazFzXGf3O5LSygR5bboY=) 11: SNTwxjZqoj--loyRtn4U5ryS2tg.roa (hash: 7LntTAbrkB4D7sGOEefKUsodkOG7eI/vXEBkRmusiyk=) 12: TjRVD4eTC9ou630w_SogsYsS2i8.roa (hash: MzxiND3DLT/Z9YUtjr+3wENZnheDLjvzlFroyg2KDBQ=) 13: XSI-Z3sxC2MvxPG4GMpF-oGP6N4.roa (hash: 0PggDg6sAbSQ+x8mdqKRdmh/0V9nEdI3VW8yE7LWoS0=) 14: i2WjIkNXUPeX7xGHYrjhSSYgFy4.roa (hash: C+2xN+JP/GjkI/37xlqqEgKPEWpo/BcSUMTEOcKEDPs=) 15: sFCDhJ4M_6ODBJmgIs3kz42jtuI.roa (hash: 0A6uuIGu+YVQFGSi7WdcioqNabGg+Lb7uc7Kf+2F0zs=) 16: we2Sx3tWkTHYty4_DjZ0SNeayeE.roa (hash: rCq+X7txc0pJndWQs8B/o3cENUKX8Fo1V3HT1kcpm3Y=) 17: xLUb8C8bVOkpr7q64SBm-78jn6A.roa (hash: 2KEYFJdXXETiYVBhmOpcuh0u5oPPV72Mle9moFbgm4Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 11:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4b:8d:6b:2d:42:61:6f:a3:3f:66:f6:11:1a:22:cb:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b967e772cc7298305a11ffa65dd185f6a58910b Validity Not Before: Jun 7 18:00:48 2025 GMT Not After : Jun 8 18:00:48 2025 GMT Subject: CN=969e1c5e2629c33731823efd14c1e1987dac45f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5c:ee:ec:4a:cf:30:77:0a:55:ef:6d:75:0e: 1a:ca:bd:8c:10:50:10:e8:40:60:a5:4f:24:9a:a0: 3a:05:87:1c:99:bd:07:8f:0d:73:de:23:93:b6:22: 54:87:93:4c:01:d3:be:e7:61:aa:22:e1:90:4d:8f: c6:58:2a:98:d6:04:e9:13:cb:d1:f6:f4:30:fc:d4: 17:aa:de:3a:a2:f5:87:0b:7b:13:af:88:69:ad:7f: 8a:bf:7b:4a:d2:4a:10:c0:0f:49:d7:1e:c4:37:97: b7:32:6a:90:9f:b4:c7:b7:79:2f:c0:ec:cd:ac:0f: ca:3b:cf:ce:40:0f:e5:3e:d9:fa:6d:1d:4f:0c:cd: 0a:99:0e:8c:fd:e0:30:0b:8f:e7:36:c5:27:74:0a: 7a:53:c8:6f:2b:90:9d:e7:70:aa:42:52:4a:3c:91: 89:1e:f8:98:6b:9e:88:0d:ad:81:3f:85:06:5d:c3: 54:8d:ea:0d:cf:28:23:fe:5e:04:c3:d5:a4:85:ee: db:5b:0b:44:78:03:f8:04:6c:a0:0c:e4:7c:cd:d7: 95:ff:c3:2e:50:1b:ad:8f:28:3c:6e:98:f6:65:f2: 8a:b7:56:6e:dd:5c:07:61:f8:ee:0f:4b:ae:b7:a7: 1c:ab:84:5e:4f:02:05:de:74:1f:0c:55:84:95:e8: 80:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9E:1C:5E:26:29:C3:37:31:82:3E:FD:14:C1:E1:98:7D:AC:45:F2 X509v3 Authority Key Identifier: keyid:2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:71:83:fb:15:de:6f:d2:50:f7:8b:bc:ea:76:ee:c6:e6:3e: 62:a0:b5:b6:a7:2b:94:1b:7a:0f:b7:c8:96:6a:59:12:91:a6: 53:19:e6:74:86:55:0f:bd:ee:e5:3e:cd:a2:02:d0:cd:bb:8c: 1f:5c:6d:ee:5b:0b:9b:87:58:be:50:85:fc:6c:b4:00:b8:49: 66:b4:61:c9:7e:5a:22:55:94:63:fb:76:5d:88:e6:9d:0d:55: 7b:25:12:bb:e0:c2:4b:ec:aa:2e:e4:d8:b2:52:2b:20:9b:a8: aa:eb:7f:67:6d:6b:f7:3f:f7:a3:45:19:42:4e:c0:f0:12:be: 9a:fe:86:95:1c:2c:fb:83:c7:d3:75:7b:38:be:ea:6e:14:09: da:d7:99:fa:2e:1b:1d:cf:bc:8e:56:a2:62:6e:49:1e:2b:6c: 52:d1:fd:b2:60:48:b2:e3:6d:7f:df:73:05:08:d8:45:49:51: 0f:a2:ad:5a:08:f6:dc:f3:9a:07:e7:13:76:37:fd:3a:b2:c7: 5d:9e:b7:43:52:a5:c3:36:76:e2:74:9b:d7:32:0d:57:b8:e5: 72:54:ba:ec:3b:c2:4a:ed:37:6f:b3:75:60:88:9d:87:44:92: ee:16:b1:3b:45:2a:6a:a0:2f:69:3f:cb:5a:f2:3c:0c:60:63: 16:51:b0:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdLjWstQmFvoz9m9hEaIsvRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiOTY3ZTc3MmNjNzI5ODMwNWExMWZmYTY1ZGQxODVmNmE1 ODkxMGIwHhcNMjUwNjA3MTgwMDQ4WhcNMjUwNjA4MTgwMDQ4WjAzMTEwLwYDVQQD Eyg5NjllMWM1ZTI2MjljMzM3MzE4MjNlZmQxNGMxZTE5ODdkYWM0NWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFzu7ErPMHcKVe9tdQ4ayr2MEFAQ 6EBgpU8kmqA6BYccmb0Hjw1z3iOTtiJUh5NMAdO+52GqIuGQTY/GWCqY1gTpE8vR 9vQw/NQXqt46ovWHC3sTr4hprX+Kv3tK0koQwA9J1x7EN5e3MmqQn7THt3kvwOzN rA/KO8/OQA/lPtn6bR1PDM0KmQ6M/eAwC4/nNsUndAp6U8hvK5Cd53CqQlJKPJGJ HviYa56IDa2BP4UGXcNUjeoNzygj/l4Ew9Wkhe7bWwtEeAP4BGygDOR8zdeV/8Mu UButjyg8bpj2ZfKKt1Zu3VwHYfjuD0uut6ccq4ReTwIF3nQfDFWEleiARwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJaeHF4mKcM3MYI+/RTB4Zh9rEXyMB8GA1UdIwQY MBaAFCuWfncsxymDBaEf+mXdGF9qWJELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzVaLWR5ekhLWU1Gb1JfNlpkMFlYMnBZa1FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82NjBlNzQtYTNiYy00NDRiLTljNmEt NThjOTZkNjZmMGExLzEvSzVaLWR5ekhLWU1Gb1JfNlpkMFlYMnBZa1FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS82NjBlNzQtYTNiYy00NDRiLTljNmEtNThjOTZkNjZmMGEx LzEvSzVaLWR5ekhLWU1Gb1JfNlpkMFlYMnBZa1FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3GD+xXe b9JQ94u86nbuxuY+YqC1tqcrlBt6D7fIlmpZEpGmUxnmdIZVD73u5T7NogLQzbuM H1xt7lsLm4dYvlCF/Gy0ALhJZrRhyX5aIlWUY/t2XYjmnQ1VeyUSu+DCS+yqLuTY slIrIJuoqut/Z21r9z/3o0UZQk7A8BK+mv6GlRws+4PH03V7OL7qbhQJ2teZ+i4b Hc+8jlaiYm5JHitsUtH9smBIsuNtf99zBQjYRUlRD6KtWgj23POaB+cTdjf9OrLH XZ63Q1KlwzZ24nSb1zINV7jlclS67DvCSu03b7N1YIidh0SS7haxO0UqaqAvaT/L WvI8DGBjFlGwHA== -----END CERTIFICATE-----Generated at Sat Jun 7 22:58:29 2025 by rpki-client