$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft File: q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft (raw, json) Hash identifier: lUzhlae9Vf+gLemR69pJCAt6mVHAD9NErousGkZfh0w= Subject key identifier: 1A:2A:02:CE:21:91:1F:EC:4C:18:93:3E:D1:77:59:A8:54:C7:11:48 Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Certificate serial: 019749318889496BA30B19186ECE99B32C28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft Manifest number: 128A Signing time: Sat 07 Jun 2025 07:01:12 +0000 Manifest this update: Sat 07 Jun 2025 07:01:12 +0000 Manifest next update: Sun 08 Jun 2025 07:01:12 +0000 Files and hashes: 1: Ay4048oOGOLd8W5gLDDEAyTF8CE.roa (hash: NXsQAFwkRa/GC3TqDmqhOZeN3qNn6FtRxq658PxTeSo=) 2: EbvXq4EM8hAgSkGiFLRqaY-G0EU.roa (hash: zajtrIP7Ewp9NW7IyVXFEVPjCtiQ0d/m581bkbpxnPI=) 3: FDdC23f-QMX8x6wvwKf2MaftED4.roa (hash: h9m2qsiGkrW+4l59GNkStG6h59aEcnuwE/KLJqr7Cgk=) 4: FHjjaCL7QaSxR7Yf_uDdz3cQhuA.roa (hash: Brv6WLVF3QRBSayqPg/J2H5JWwF8VVYLp0UA1sg3bSA=) 5: GanbvvtqSZENbmIdtfbYun4fuOo.roa (hash: a9IMBYKg4BFPWfGPrEQ1nIFRtJtRWqf5txg0Sr68Odk=) 6: HeWtxOQwTN1uf0xfcq_bZw71XkA.roa (hash: Q3cAdwW00NmkMkDNixCTZhHEBzWnPkDYpvdoFVzzSP4=) 7: LPXBlOJ83SUZetduCUkP3lDmZb8.roa (hash: Xahh/YPbtY5jZR0nw8MkUj4SXBdb+qHLE/N+aHg/zLg=) 8: MBaWylrBVCifHO75NhqX3hwA3gI.roa (hash: rBGbEwve3PVfVzEgeSB6FNde2V4Ej5oriQNU2JdSej4=) 9: TNZjVfkoPHNGWuPROUhTApW2tS4.roa (hash: HeS2ECV8xSlPFS6ZfzpvaJlw7gUvm2q+HDJoDgc0tag=) 10: VEkecCYWX-3eJbHzfXRPqIguSrU.roa (hash: y+HxKa51lXccWcF8YAwZEEpBtkvi4YQc9qp84HUBYjU=) 11: bJOubptyDCUoksZUBTEQqGVmM9c.roa (hash: 5AtXcXlAprhgr08DWqOvaQo1UWB8kRpiaZt7z80DD44=) 12: gY7ZGvPzoH-CX9GeUSTzaqQXovY.roa (hash: 2Y8QhFV1RfXgwz+9zPSSImXIf02O6QwrVpawBy0GOpo=) 13: j5_CqMmkt1DG3j-liA9ojTF-2zk.roa (hash: 9/Skv7dfWWCpzLOyfdQVA/mAMx0mIp9bCVvdrEzkMLY=) 14: ktsWW1aNW0Ka2r1y8DatRgdAjnQ.roa (hash: B9kQb2mez0Ho2ienkmxwkosyQ4vYDt/9bZEi638La00=) 15: pWYX2715Q-5BkbFDg0Sh9v9WvPs.roa (hash: TgnvC3W5sZgU6RXpmwyf5MNyrmOzs/Lefze2pwDj6yc=) 16: pdqJCRLiJ7NUW64tDbwue3bHfpU.roa (hash: ljeRCKKswXVLuB5MoRwzN0UCpzG2Fbx/CHdpqjKSohM=) 17: q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl (hash: oj4xXpCWcM/+8unbJHRG++0UZyrjQSRBayV4Uoex2nc=) 18: tuLu-KxTyWECQsa7jsPHvbBC7-c.roa (hash: sICitbN0hdJLsCXmDSmpQhmRlzSQyxGdXNXHPCYmLv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 07:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:49:31:88:89:49:6b:a3:0b:19:18:6e:ce:99:b3:2c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Validity Not Before: Jun 7 07:01:12 2025 GMT Not After : Jun 8 07:01:12 2025 GMT Subject: CN=1a2a02ce21911fec4c18933ed17759a854c71148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:53:45:ed:aa:4c:11:ec:db:dd:4d:fe:5d:8d: bc:cd:ec:b9:b4:d2:f3:6c:71:4b:fc:db:dd:65:b7: 79:15:04:e8:ed:1a:ff:61:10:ae:58:d9:4c:06:a8: df:28:4b:3f:7b:76:20:bc:ad:6a:86:f2:19:fa:03: 6d:ce:af:e6:0f:1a:d4:77:13:a6:96:2f:77:92:ff: c5:22:59:e3:5c:15:14:c9:eb:26:a2:25:df:f2:e4: b8:5a:ba:be:bd:39:6c:e4:93:6a:f3:ef:c0:4c:00: 36:54:d2:fd:59:39:fa:ee:d2:e2:54:b5:78:12:de: a0:d0:2a:01:a7:23:66:90:29:16:d7:7a:e8:10:1b: dc:f8:29:76:65:d2:67:92:ca:65:43:78:95:4b:77: 92:8f:55:09:59:1d:00:22:68:5b:eb:58:74:86:25: 94:7d:7b:cf:4a:d5:75:b1:aa:5a:5e:84:8b:1d:44: fb:4d:44:f4:26:b4:cb:42:57:df:b4:65:cd:ce:8d: 58:d1:1c:de:4f:41:29:09:43:0d:1f:50:97:a4:aa: 17:5e:8b:12:62:7c:5e:8d:04:c7:93:88:5f:8f:7a: c9:f5:d7:90:d9:aa:2c:93:48:5d:40:6f:87:d8:47: 4e:47:8c:5d:34:07:aa:47:dc:df:3b:7e:c9:a5:d3: 6d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2A:02:CE:21:91:1F:EC:4C:18:93:3E:D1:77:59:A8:54:C7:11:48 X509v3 Authority Key Identifier: keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:57:5b:15:c3:a2:71:30:fc:df:18:1c:98:cc:d0:bc:9b:1a: d6:b0:88:d8:e6:e3:35:d7:b4:9a:1d:7e:28:d7:d1:92:e8:1b: 6c:c1:94:7a:44:3a:67:2e:50:d8:e5:81:0e:3c:1a:bf:7b:ab: 75:39:0f:bb:df:95:26:7b:c2:ba:87:0c:a4:a8:bd:fa:ca:c3: ac:83:3c:31:d9:52:3f:e3:3f:f2:eb:9c:a6:fa:1b:19:ab:26: 17:9b:91:ac:86:c5:c1:47:8e:77:09:27:2d:ff:eb:be:5f:c7: 91:25:81:4a:13:5e:56:f2:28:a9:65:22:c9:ae:40:85:69:65: 95:7f:3a:02:4e:7c:b7:8c:7a:15:e4:32:71:97:08:26:ad:40: 7d:3d:9f:ff:1b:04:e7:41:7e:ee:c2:bf:bf:7e:81:87:b6:f2: 61:1f:01:ae:6a:88:3e:c0:67:db:43:ad:d8:77:c7:63:ad:25: a4:14:5a:f5:57:4e:d8:c4:6e:66:ba:3c:75:b7:29:5d:53:b1: 08:58:e7:bc:69:c4:63:9c:42:f1:5a:72:ad:5d:a2:55:0e:d0: 87:c3:9a:8e:83:e6:d4:7a:3b:eb:53:4a:31:a8:02:cc:95:27: 0e:fd:cc:9f:1a:b1:9b:ae:24:d1:49:e3:e7:c9:5e:cc:bd:d7: 0b:7c:6f:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdJMYiJSWujCxkYbs6ZsywoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOGM2YzU4YjYwN2ZmMjNhZTcxNzVhNjE2ODJjNzU0ODBm MWUyMTQwHhcNMjUwNjA3MDcwMTEyWhcNMjUwNjA4MDcwMTEyWjAzMTEwLwYDVQQD EygxYTJhMDJjZTIxOTExZmVjNGMxODkzM2VkMTc3NTlhODU0YzcxMTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1NF7apMEezb3U3+XY28zey5tNLz bHFL/NvdZbd5FQTo7Rr/YRCuWNlMBqjfKEs/e3YgvK1qhvIZ+gNtzq/mDxrUdxOm li93kv/FIlnjXBUUyesmoiXf8uS4Wrq+vTls5JNq8+/ATAA2VNL9WTn67tLiVLV4 Et6g0CoBpyNmkCkW13roEBvc+Cl2ZdJnksplQ3iVS3eSj1UJWR0AImhb61h0hiWU fXvPStV1sapaXoSLHUT7TUT0JrTLQlfftGXNzo1Y0RzeT0EpCUMNH1CXpKoXXosS YnxejQTHk4hfj3rJ9deQ2aosk0hdQG+H2EdOR4xdNAeqR9zfO37JpdNtkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBoqAs4hkR/sTBiTPtF3WahUxxFIMB8GA1UdIwQY MBaAFKuMbFi2B/8jrnF1phaCx1SA8eIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2Mt ODhhM2M0MWZhZWUyLzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2MtODhhM2M0MWZhZWUy LzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcldbFcOi cTD83xgcmMzQvJsa1rCI2ObjNde0mh1+KNfRkugbbMGUekQ6Zy5Q2OWBDjwav3ur dTkPu9+VJnvCuocMpKi9+srDrIM8MdlSP+M/8uucpvobGasmF5uRrIbFwUeOdwkn Lf/rvl/HkSWBShNeVvIoqWUiya5AhWlllX86Ak58t4x6FeQycZcIJq1AfT2f/xsE 50F+7sK/v36Bh7byYR8BrmqIPsBn20Ot2HfHY60lpBRa9VdO2MRuZro8dbcpXVOx CFjnvGnEY5xC8VpyrV2iVQ7Qh8OajoPm1Ho761NKMagCzJUnDv3Mnxqxm64k0Unj 58lezL3XC3xv6A== -----END CERTIFICATE-----Generated at Sat Jun 7 15:58:51 2025 by rpki-client