$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft File: CnMngF3yD7XB1vTokHR0PK6ySvc.mft (raw, json) Hash identifier: JS27Eeq9fYuECOUmFEJ9UJbg5p4Af2iXy6bO7IVkDFo= Subject key identifier: B4:85:50:2A:FB:22:18:97:BD:C1:69:D2:74:10:8C:01:2E:F5:90:92 Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 01974742BF0BD002BF201165D879B9AD3090 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft Manifest number: 158E Signing time: Fri 06 Jun 2025 22:00:45 +0000 Manifest this update: Fri 06 Jun 2025 22:00:45 +0000 Manifest next update: Sat 07 Jun 2025 22:00:45 +0000 Files and hashes: 1: 3cfolha5-Y-keIgl3j-ukMRu5nQ.roa (hash: BQrU5Phy/xAtort4zjZjH8gAv4mg2agVu08FECKFlvU=) 2: CQxWaB1OicMMrqXCoQ0fopCoxdU.roa (hash: WjfHWnkqbfHKaqxUShNyRq++rhQwjg3tNVjy17YQNc4=) 3: CnMngF3yD7XB1vTokHR0PK6ySvc.crl (hash: IkbW0eXV3w4Lm0tK3k9NMp+mSZgWmGoxv0/D5TVyJqs=) 4: GopMrpyToOz7hTEn02tSlWTChNc.roa (hash: PWyNZm9NNDQb4vDrYexwTILfoeBvuqO0/ZesnD+rBMg=) 5: QY3FsKWsHL7VlMduaclRNJ3pt_U.roa (hash: H5vPCo3lKDFJhLJsXdyGxkbSr+CZKxnZxfEUf2naVGc=) 6: Zla6xxqlwjD5HGAN16Pzo29Tijg.roa (hash: XT7/Z4sfo6kElFtdLFq3BhRYhs4vxj89ZfDzgHu8Ge4=) 7: eeob2ee4lfFzOOMEsHvp08f6qTk.roa (hash: 0B+jfajS9x0UOg+XsVtGs3LZcCLSBc/7t9eJKjvj4DM=) 8: hnMtsx259zWb5DPTAskFt19vieA.roa (hash: IS/K0LmABWhq/hUi5ijfbnkS8QGQcUBWRW0f7gTisD4=) 9: izRl0EDK4B0qzWxxkTnsFaQUD9I.roa (hash: deGltujGMo6zRw49YCgwFhp3rs4UuELASdCXPlgWHmM=) 10: ydOhopDpEgxJrzwZy5o2ywKpW8w.roa (hash: cGNA9jtDwM6OD4vlqV4K4uD26uy/JQnhTPG3oY/YMmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 22:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:47:42:bf:0b:d0:02:bf:20:11:65:d8:79:b9:ad:30:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Jun 6 22:00:45 2025 GMT Not After : Jun 7 22:00:45 2025 GMT Subject: CN=b485502afb221897bdc169d274108c012ef59092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:92:b4:14:ed:05:29:91:7d:72:c5:ac:da:d7: b5:0f:9e:49:4e:8c:ff:60:37:01:0b:98:12:9f:b9: 30:c1:bf:ca:ac:5e:85:68:ad:ff:54:b9:54:81:68: 92:b7:bb:11:a9:e8:94:64:46:74:be:9e:59:23:63: 3e:66:aa:7e:1c:15:1c:d7:ce:c4:c3:67:a5:73:48: 8a:61:b9:bc:c1:af:7f:b0:e3:55:07:6b:34:16:a5: b3:8d:42:a2:d6:81:08:a6:a7:3e:bd:30:a4:8c:64: b6:99:5d:81:f7:75:cd:59:51:19:cd:16:d2:8d:bf: c5:bc:15:6c:0b:45:62:f9:58:c1:35:dd:f9:82:10: a0:09:4b:55:d7:3b:e0:79:53:be:ba:1e:59:24:57: 3e:3d:4e:04:9c:6d:fe:31:3b:f2:e1:71:7c:4c:e4: 0a:2a:bd:8e:c8:67:ce:63:b8:e9:9e:74:dd:19:92: 8c:61:29:21:f2:b6:7d:e0:da:08:0d:ff:e6:89:6d: b9:b5:34:4f:28:d9:66:3a:7e:79:1f:d7:3c:81:a2: c3:51:5a:d2:c9:a6:91:11:2c:b1:d3:24:ca:83:97: bc:d8:56:5e:8c:a2:c3:d8:0c:81:46:21:df:40:a7: 7f:d2:9d:11:3d:b3:58:da:cd:24:55:ec:4e:d4:b7: 59:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:85:50:2A:FB:22:18:97:BD:C1:69:D2:74:10:8C:01:2E:F5:90:92 X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:27:0e:07:4a:db:81:53:70:8c:16:1e:cf:ce:67:cf:a4:89: 8a:6f:90:01:00:45:f1:61:6b:5b:db:2e:a2:c5:30:53:f5:3c: 86:b8:bf:b7:e7:08:42:20:d2:2b:3e:34:ad:f8:50:ec:02:bb: ed:21:68:66:e9:f8:0c:1e:86:1b:5f:2c:4d:4d:48:18:79:a2: 4c:9a:75:ba:fb:ab:98:9e:e3:0c:3e:83:a5:f9:71:b5:ac:cf: d9:c0:10:9c:8d:d5:63:91:d0:d9:2f:87:f9:71:a9:a8:61:78: 4d:5d:c0:23:65:21:6d:e9:be:c2:01:50:c5:5f:3e:26:de:28: 37:b2:8a:29:b2:6b:0d:96:93:a8:d6:e6:ab:a9:59:ea:88:0b: c7:3c:23:be:b0:40:84:6c:e4:f6:95:4a:fd:47:3a:fe:48:53: e4:fa:6d:ba:17:8e:d0:30:c8:51:20:4a:b8:f1:dd:b2:23:3f: 50:c6:c5:4a:15:ec:3c:69:14:09:79:9b:de:eb:49:36:8d:de: b3:88:40:d1:48:96:67:75:33:e1:0e:5a:59:49:d8:33:57:2e: 9c:cd:cd:6f:c0:af:64:31:91:ee:a1:17:53:5c:79:b8:c1:55: 55:06:0c:95:50:e4:10:e6:0a:7a:2a:34:34:17:3d:3d:f4:17: b1:cf:87:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdHQr8L0AK/IBFl2Hm5rTCQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjUwNjA2MjIwMDQ1WhcNMjUwNjA3MjIwMDQ1WjAzMTEwLwYDVQQD EyhiNDg1NTAyYWZiMjIxODk3YmRjMTY5ZDI3NDEwOGMwMTJlZjU5MDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpK0FO0FKZF9csWs2te1D55JToz/ YDcBC5gSn7kwwb/KrF6FaK3/VLlUgWiSt7sRqeiUZEZ0vp5ZI2M+Zqp+HBUc187E w2elc0iKYbm8wa9/sONVB2s0FqWzjUKi1oEIpqc+vTCkjGS2mV2B93XNWVEZzRbS jb/FvBVsC0Vi+VjBNd35ghCgCUtV1zvgeVO+uh5ZJFc+PU4EnG3+MTvy4XF8TOQK Kr2OyGfOY7jpnnTdGZKMYSkh8rZ94NoIDf/miW25tTRPKNlmOn55H9c8gaLDUVrS yaaRESyx0yTKg5e82FZejKLD2AyBRiHfQKd/0p0RPbNY2s0kVexO1LdZ4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSFUCr7IhiXvcFp0nQQjAEu9ZCSMB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEScOB0rb gVNwjBYez85nz6SJim+QAQBF8WFrW9suosUwU/U8hri/t+cIQiDSKz40rfhQ7AK7 7SFoZun4DB6GG18sTU1IGHmiTJp1uvurmJ7jDD6DpflxtazP2cAQnI3VY5HQ2S+H +XGpqGF4TV3AI2Uhbem+wgFQxV8+Jt4oN7KKKbJrDZaTqNbmq6lZ6ogLxzwjvrBA hGzk9pVK/Uc6/khT5PptuheO0DDIUSBKuPHdsiM/UMbFShXsPGkUCXmb3utJNo3e s4hA0UiWZ3Uz4Q5aWUnYM1cunM3Nb8CvZDGR7qEXU1x5uMFVVQYMlVDkEOYKeio0 NBc9PfQXsc+HpQ== -----END CERTIFICATE-----Generated at Sat Jun 7 07:16:25 2025 by rpki-client