$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft File: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft (raw, json) Hash identifier: J5KTCq6US0WTHBraffYQksEdMAafF4OC1w8xDOXGKNA= Subject key identifier: 91:F1:1D:B2:09:98:99:1E:D6:40:85:73:0E:5E:9C:85:92:2E:8D:32 Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 019741AEDC2E1193097822777D789679BE35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft Manifest number: 1252 Signing time: Thu 05 Jun 2025 20:01:07 +0000 Manifest this update: Thu 05 Jun 2025 20:01:07 +0000 Manifest next update: Fri 06 Jun 2025 20:01:07 +0000 Files and hashes: 1: 3MQ1Zm2jB8qgOjCAc_a0v-3nM_o.roa (hash: T4pVm2mU2N5el1g2HcnlglhN57e23NLVS7ny7NzSBL0=) 2: 4SEUaFHVUAL3abRJwnhpLcw21dk.roa (hash: Nz767QGxnFH79p/BW/8MOsNM3RviNN1Kvy4GgZgMyGs=) 3: FCFfx3p7hHCFHlKPZobVJyLJ5MI.roa (hash: 6JV0xEEqdwivRbZdMI4zo4Wpa9PWQK4gKoasAD6odWU=) 4: IYmUJK1vApyWT119wps-ukf2n9E.roa (hash: w1dWdBHD/FLi3tR98pk3iJlbhc1nR22X1Pwn/kqhO/0=) 5: KcuMI0SBvL5BPuYJm6BH3vJKAQ0.roa (hash: s0e2eWUrZQW14pJCqfjgMZ+ViTFNuU9345bizVg0sKY=) 6: MSrSUIwYGP5OzMFaA9dwr3mO4jY.roa (hash: OHzV5kP6uhO1eFoIB7t+WKfJjHs90j+a/iXQqOXuv30=) 7: N7C2a3H5ML3ydyNI5IDIoJ6m-6U.roa (hash: FJm0Nzs6ME/1+LojcQZMLdUu/cBqlxKE16Bs75fFFLw=) 8: Nf1rHETWcCnhWhR_uM_9B2P3jb8.roa (hash: pBdKIUwSvvQqLJChVbTbSEDRXa+Ll262+ax9ivbZD0o=) 9: OFTgwkdKspRJ_TvSv6vgx_ckdLQ.roa (hash: b7UPAbBCKcuRworqLaxy25e9Gx9nfc4PaZocWvp2h84=) 10: RzvDJbgMFFQ3RXZZowAtkGpvaYQ.roa (hash: pXgfU5zLGpdaPENK8y9IOVL5xtiIt9Fk8RRzx12JQUw=) 11: WToItz8al9Sw1IRtEOUm1ku1TzY.roa (hash: cD3Nf3okXGtPiYuFOkPnzfMJHgIYmW52aVmaOwxOEN0=) 12: dcAEUZ_ghRVpaUYo3WWA9zUPe9U.roa (hash: AsvsdGamYH2cSArWOQT5cvLOD/2t8gp5MEnt/aWjLII=) 13: m-VIT0LjtD9EzoMprh8uOjUFAXU.roa (hash: uPdvifi2Mse38dnV2nTzHEKQ8cRZMoEcUuAqy+pbA4Y=) 14: mIeBpS2n4kCr0BZmoszWNjvAQck.roa (hash: sgSJy89RWLefTDlUw+TWGE3cezazErlzXNR2nAjs6uU=) 15: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl (hash: 9v2tpRsxAyZLn3RVE9J2UNbxLSzXvUi6AFz1zdchsdM=) 16: sVCQlL9zy4ci5k4im_qh1UgQSao.roa (hash: tXiv/i4AXQDYnVQqrjLO82vwz0zcYS5lORUFrc1ytqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Jun 2025 20:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:41:ae:dc:2e:11:93:09:78:22:77:7d:78:96:79:be:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Jun 5 20:01:07 2025 GMT Not After : Jun 6 20:01:07 2025 GMT Subject: CN=91f11db20998991ed64085730e5e9c85922e8d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cb:4e:b5:3e:d2:5f:a0:96:66:d9:3e:42:d3: fd:68:71:96:ae:85:88:cd:cb:33:18:b1:06:78:3b: 2f:08:92:9d:5b:fe:c8:bb:34:5c:3a:8b:81:1f:5e: 98:76:8a:84:b5:5e:1e:a3:f7:83:1d:20:87:0b:c8: 5f:6d:bc:ae:f2:98:fa:e6:cb:38:4f:5f:ae:c8:41: dc:9f:8c:3b:19:ab:a6:a0:33:76:25:62:21:59:4c: 0c:cd:91:13:28:18:71:0d:fc:eb:21:5a:c5:52:fa: 57:ce:41:6c:30:a0:63:68:fc:6d:a0:13:9e:e4:a6: 37:6b:b5:fc:1b:7c:64:b7:f5:7f:8f:1f:2e:8f:b5: 87:ae:73:00:f0:55:0a:28:ec:55:07:44:d9:f1:23: 1d:af:6f:d2:2c:ce:2d:bb:f9:22:14:31:d4:d4:54: 09:63:5d:68:99:9c:36:c9:4a:1e:28:09:44:4a:c7: 6a:91:c6:02:fa:cb:68:cf:43:63:80:6b:02:b2:48: bb:69:d1:d3:69:b6:ef:27:18:80:38:4c:c7:26:03: 16:bd:82:b2:8e:97:34:e5:a5:dc:a1:8c:ed:c3:69: 06:7a:d8:9b:47:97:b0:f7:34:2f:08:89:89:ff:9b: a1:73:bf:7d:64:ee:27:e7:05:6f:a0:51:85:3c:a9: 4a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F1:1D:B2:09:98:99:1E:D6:40:85:73:0E:5E:9C:85:92:2E:8D:32 X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:af:67:7b:bf:c3:7c:07:ac:65:f8:b7:cf:82:a8:de:2b:40: e1:4c:01:cc:41:51:7c:39:42:4e:89:f8:fd:94:fe:e3:5d:f7: 2c:dc:5b:fb:b8:89:96:01:35:40:9f:36:62:19:a7:79:d5:c0: 12:93:b2:50:d2:b1:a1:c1:23:e1:a6:4b:f7:1c:b4:6a:7c:ea: 11:0d:28:af:82:ba:79:6d:d6:2f:0f:d2:0a:4f:63:4b:9e:03: fa:7f:1f:7d:39:c4:ce:2c:e5:74:d6:34:38:32:8f:3f:a7:9e: 7b:38:d7:92:82:7c:f1:81:5a:c7:e5:2a:71:cc:01:8f:22:35: f7:50:a0:27:a9:3c:c5:ab:4c:24:e4:22:0e:78:ff:49:0d:da: 7d:b5:f5:c5:da:a7:0d:ca:1a:e1:d7:41:47:84:a6:5f:b8:8d: 05:f0:b6:46:b2:2a:12:6d:6f:5a:3f:a4:9c:74:d8:ea:4d:87: f9:1c:49:fd:88:81:d4:e5:b4:a3:29:95:f9:6c:31:57:bd:3f: 55:41:e0:80:19:b0:37:76:8b:b3:d1:1c:c8:b4:7d:03:6f:e8: 5a:8d:d4:cd:28:11:4f:bc:25:ab:d1:02:4b:de:03:60:39:fe: 84:43:e7:b0:18:60:a6:a8:9f:4f:05:01:22:7d:d1:7a:73:54: 48:01:19:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdBrtwuEZMJeCJ3fXiWeb41MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjUwNjA1MjAwMTA3WhcNMjUwNjA2MjAwMTA3WjAzMTEwLwYDVQQD Eyg5MWYxMWRiMjA5OTg5OTFlZDY0MDg1NzMwZTVlOWM4NTkyMmU4ZDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxstOtT7SX6CWZtk+QtP9aHGWroWI zcszGLEGeDsvCJKdW/7IuzRcOouBH16YdoqEtV4eo/eDHSCHC8hfbbyu8pj65ss4 T1+uyEHcn4w7GaumoDN2JWIhWUwMzZETKBhxDfzrIVrFUvpXzkFsMKBjaPxtoBOe 5KY3a7X8G3xkt/V/jx8uj7WHrnMA8FUKKOxVB0TZ8SMdr2/SLM4tu/kiFDHU1FQJ Y11omZw2yUoeKAlESsdqkcYC+stoz0NjgGsCski7adHTabbvJxiAOEzHJgMWvYKy jpc05aXcoYztw2kGetibR5ew9zQvCImJ/5uhc799ZO4n5wVvoFGFPKlKmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHxHbIJmJke1kCFcw5enIWSLo0yMB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtK9ne7/D fAesZfi3z4Ko3itA4UwBzEFRfDlCTon4/ZT+4133LNxb+7iJlgE1QJ82YhmnedXA EpOyUNKxocEj4aZL9xy0anzqEQ0or4K6eW3WLw/SCk9jS54D+n8ffTnEzizldNY0 ODKPP6eeezjXkoJ88YFax+UqccwBjyI191CgJ6k8xatMJOQiDnj/SQ3afbX1xdqn Dcoa4ddBR4SmX7iNBfC2RrIqEm1vWj+knHTY6k2H+RxJ/YiB1OW0oymV+WwxV70/ VUHggBmwN3aLs9EcyLR9A2/oWo3UzSgRT7wlq9ECS94DYDn+hEPnsBhgpqifTwUB In3RenNUSAEZww== -----END CERTIFICATE-----Generated at Fri Jun 6 04:56:17 2025 by rpki-client