$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft File: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft (raw, json) Hash identifier: XMmcWvOWQnDa07baxaA9inPhDmBI93/YmWLA719el88= Subject key identifier: DF:09:71:54:3A:7A:B7:54:2C:3A:62:E5:E8:7C:D1:B9:39:15:FD:CD Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Certificate serial: 01974EFC5E593EE6D230D3302588AEE07C69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft Manifest number: 03AA Signing time: Sun 08 Jun 2025 10:00:51 +0000 Manifest this update: Sun 08 Jun 2025 10:00:51 +0000 Manifest next update: Mon 09 Jun 2025 10:00:51 +0000 Files and hashes: 1: 1-WZZnjR8DlZqLUibcRUcYzm0QDU.roa (hash: /lrkBjM9dGMr6D7JGPVc5syjsFBtCzanEGLfhb4dKM0=) 2: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl (hash: 9zlvbNlSrqmxqrf+dZSafWT45oUh6f7mXbu5dr8YzDc=) 3: 3jZyUpaNiuxwzYQ21tChGVq7yOY.roa (hash: rlRJ/UNIhVQKGyw4Wr/cDFs+VO81jRk6SUephZD3g4o=) 4: 5khyx2A9d0Q0e3huYGosj5KCOlo.roa (hash: m/iIxHfeWDlWWpGAIqzgFb7iOcTekZb0i9Y2aBX+dy4=) 5: 7cUCY2EysYK09Y_F1tsMsp_B8MU.roa (hash: el4sZWuoJZOOcj14KO5Yq16IPPIz+c0KckgEteIx4YM=) 6: ILbeank0F3xhLsgBl0NZfpBZFig.roa (hash: 8RlSwtQK5lhGbhOtyX4cacpgfYuG3exGirW2aa5+FLI=) 7: KBQWtgPCMeq_IbONzoF64FnlzwE.roa (hash: EZ3seNeYjAQFpAfGwhXlV+Wya2vQO7lfYcVB84EkqA4=) 8: PBiom43THD1F1SBGVmDFN9WwnMo.roa (hash: EVRLL8Mxobz8XRwc26H2JAHWkuwMiYakvll8d/79CJQ=) 9: TnqWiZSrJP5FZLgDlXk-iaFi5k8.roa (hash: 8gjKeaSL9Im1mKl/CKczQDSLzI2OEBo3YD5qQoY5RT0=) 10: VXGu7cRy3TUPyfgbIf2vopAF1Lc.roa (hash: 40vRMPsPFPCFnDUP/ikEgH9v+gi1iVOQkLoxtLSkOqE=) 11: ZaSQVTZm2f4ebc71HIkhrpqqsuk.roa (hash: X8/L0T6q0bM6s++7u2MQIu4RlHWQNdJcKAvE7bH3VP4=) 12: jldP_NkgEKrLmFaYQtB6TuhGzRs.roa (hash: Cz3xmiLxKccg4wAv608JqhvYxIHIutFBcyhT8Ond0Zs=) 13: oQk2rT9-TmTMiTawX34MBI0QTrc.roa (hash: 6J7fvMBzz5wnq8Q655iOLvmHY5jKT0LznvTL3IrQ8Xw=) 14: unsmmkYBpbXrCubGO7XS6N7I7QM.roa (hash: /TaQOoUPP+hWic0pvVLJBHflkZLzIc8T4AFkDEL7yKk=) 15: w9Z-5nLehvUlBeOI2h5dSoEBLSw.roa (hash: dyC69X2s5yoLrmCLq7pBQHExLj0vbp1A/uwW5wlqEug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Jun 2025 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4e:fc:5e:59:3e:e6:d2:30:d3:30:25:88:ae:e0:7c:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Validity Not Before: Jun 8 10:00:51 2025 GMT Not After : Jun 9 10:00:51 2025 GMT Subject: CN=df0971543a7ab7542c3a62e5e87cd1b93915fdcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:40:a0:dd:a3:a6:ef:26:17:76:9e:40:03:23: 35:d0:33:28:c4:3f:89:c2:33:2d:e3:c8:a2:4d:b6: 38:8a:3b:df:02:63:40:6d:a4:9a:0c:14:af:08:71: e2:53:cd:0a:3b:5f:77:42:58:f3:ee:c2:61:18:3e: 1f:5e:e8:ac:3b:2c:50:e8:df:1b:9a:8e:5b:3e:1c: 8d:00:1c:7b:92:15:32:e1:99:9c:dd:3e:dd:be:53: 2c:aa:03:0f:8a:9c:c8:1f:08:c0:27:11:3d:74:92: d9:87:d2:e3:32:7d:a8:34:39:7d:80:73:86:04:07: 10:24:c1:1e:67:06:3e:a5:40:e8:b0:3d:42:27:c0: ab:b7:f8:10:1f:d2:bb:7e:3c:af:bc:10:7d:6b:2f: 00:33:1c:56:6c:93:09:74:74:9b:b2:56:cc:68:dd: 51:0a:45:4d:ff:54:b4:2f:b9:b1:ac:c8:4e:dd:2d: c5:be:c3:b1:f5:31:29:c0:ef:6f:61:af:fa:55:78: b6:3f:9b:a1:d3:f7:37:8d:eb:4f:58:cb:d4:68:f8: e4:20:bd:c3:ec:82:bb:b3:09:94:46:38:41:3f:3f: e9:26:57:8e:f3:aa:a4:1a:ac:d8:24:71:1a:f0:b3: 60:dd:4f:e5:fc:0a:43:92:0f:98:e8:27:55:df:95: 81:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:09:71:54:3A:7A:B7:54:2C:3A:62:E5:E8:7C:D1:B9:39:15:FD:CD X509v3 Authority Key Identifier: keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:af:67:7b:52:c0:94:e5:f6:f4:b8:71:1e:fd:74:9c:96:f3: a9:29:97:1c:77:b4:37:cb:3a:d6:e7:0c:74:92:6e:41:0e:d3: b9:da:18:cf:7c:d4:6e:18:fb:9b:b3:ee:9c:25:57:c7:be:35: 74:68:b5:6f:2b:70:4e:24:68:f8:09:7c:31:9a:fe:b7:4f:12: 9c:51:61:37:11:b2:d8:f7:50:2c:73:a0:69:a9:93:e6:67:dd: 80:e8:75:26:6b:d8:bc:e1:7f:2b:65:92:2a:a2:48:d9:77:61: 23:c5:bc:4d:7c:03:18:e2:4c:92:a2:f9:e4:3a:45:2e:39:59: 58:d1:56:7a:e0:2a:f7:96:6b:f7:ab:27:b9:6e:ce:dc:1e:9e: 14:d2:79:fc:43:5b:5b:a0:ef:17:1c:ff:36:bf:51:9d:3f:24: d3:31:0f:b0:6a:7c:ac:41:3b:36:56:d8:cb:ff:87:cf:a7:f3: 9b:1e:73:e3:f7:b1:1b:bf:13:17:12:00:8a:e7:26:77:a5:7c: ab:6a:c3:d3:2a:13:1d:3e:84:28:f9:06:0e:c3:aa:95:9d:de: cd:8d:02:8d:06:3b:7f:9b:c1:8a:3b:06:5c:41:04:df:ec:b5: 22:9d:77:2b:34:f8:74:30:f0:00:f9:8e:25:50:a9:ec:ce:e8: c0:72:2e:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdO/F5ZPubSMNMwJYiu4HxpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm MDIwMjAwHhcNMjUwNjA4MTAwMDUxWhcNMjUwNjA5MTAwMDUxWjAzMTEwLwYDVQQD EyhkZjA5NzE1NDNhN2FiNzU0MmMzYTYyZTVlODdjZDFiOTM5MTVmZGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUCg3aOm7yYXdp5AAyM10DMoxD+J wjMt48iiTbY4ijvfAmNAbaSaDBSvCHHiU80KO193Qljz7sJhGD4fXuisOyxQ6N8b mo5bPhyNABx7khUy4Zmc3T7dvlMsqgMPipzIHwjAJxE9dJLZh9LjMn2oNDl9gHOG BAcQJMEeZwY+pUDosD1CJ8Crt/gQH9K7fjyvvBB9ay8AMxxWbJMJdHSbslbMaN1R CkVN/1S0L7mxrMhO3S3FvsOx9TEpwO9vYa/6VXi2P5uh0/c3jetPWMvUaPjkIL3D 7IK7swmURjhBPz/pJleO86qkGqzYJHEa8LNg3U/l/ApDkg+Y6CdV35WBZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8JcVQ6erdULDpi5eh80bk5Ff3NMB8GA1UdIwQY MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt NGI2YzFjZjlmZTRmLzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaq9ne1LA lOX29LhxHv10nJbzqSmXHHe0N8s61ucMdJJuQQ7TudoYz3zUbhj7m7PunCVXx741 dGi1bytwTiRo+Al8MZr+t08SnFFhNxGy2PdQLHOgaamT5mfdgOh1JmvYvOF/K2WS KqJI2XdhI8W8TXwDGOJMkqL55DpFLjlZWNFWeuAq95Zr96snuW7O3B6eFNJ5/ENb W6DvFxz/Nr9RnT8k0zEPsGp8rEE7NlbYy/+Hz6fzmx5z4/exG78TFxIAiucmd6V8 q2rD0yoTHT6EKPkGDsOqlZ3ezY0CjQY7f5vBijsGXEEE3+y1Ip13KzT4dDDwAPmO JVCp7M7owHIuSQ== -----END CERTIFICATE-----Generated at Sun Jun 8 12:45:09 2025 by rpki-client