$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft File: jRrIPuOj-WjWatL99GFue7Hk0dc.mft (raw, json) Hash identifier: z2eM7M3KqZ7xCi7LnXhdthd+8aDsDLtc96Eqxl2LTRE= Subject key identifier: DA:9B:43:E9:AA:23:8B:D6:22:F5:61:00:63:44:B4:0C:1E:02:C2:C1 Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Certificate serial: 0197451D571ABA7A76EFBE537E6DC11D542A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft Manifest number: 0AFF Signing time: Fri 06 Jun 2025 12:00:40 +0000 Manifest this update: Fri 06 Jun 2025 12:00:40 +0000 Manifest next update: Sat 07 Jun 2025 12:00:40 +0000 Files and hashes: 1: 0hcYkFvLnPnX3tJPZIl-Uhot1i0.roa (hash: 6/eHz/J+k5SuDY5b5eslxHZpd3P/l7+bfENiu84Xo/Y=) 2: 2MTjWcnAZaBZxr6B57_xkNelCyo.roa (hash: LwS+Lia49xksIy+sqAnEnU2btZ36QZE/qsN4N2FlYK8=) 3: A3vCnLdcCAHsjG0TKS7PepEiSRQ.roa (hash: 8/8TxF0wXw7stYTcBeXGRpf0HZpKR5xHMrhdKNPhjb4=) 4: Eb3nQCsubyrRRwgtef25b2tcJbQ.roa (hash: sgX7PEOSSTdMVUw2kIAqvpDSoV+TN56cGW37Ykizvek=) 5: FQFiaH-Uhznyo9tuv-39hg1SgIc.roa (hash: AaAgvoQWwsBdEDlzs9JJLKseENMJxUCvDZ1+feCaadI=) 6: JtkTsuHPsoBKn0hRChOrC4JXTN4.roa (hash: M9uGhnRBSZAnmB8BCT/jdRx465I3Ctf37Vtgm+Jt4nc=) 7: LNIAH1MylX8WQQ-W8xfPHTlOsW0.roa (hash: GFXXpakvt3mJ4yGbBFawI3+WVF7sKNF14A1lgtziIek=) 8: Lxv8RdYN9P2vj1nZyAjFF9lNkU8.roa (hash: xMtpILHpW8icGyga3EnNkKUNmrRxGITTuJWIIZqDxDI=) 9: MudRzNeUk2R859eEP09GJeDExf0.roa (hash: 2o3NbfW7AkgEJtAc91HUgnIB/5KesUMTjVvuVU09fp4=) 10: RTZYU-7DG4fUoipBd0qSh8BirjI.roa (hash: 3eo6AFVTXAYcIIpYV9OFjF0R4DRTO3nfrXKCxpb3Q8c=) 11: bHY9-snRvY8g2YGDDEk5RertPnQ.roa (hash: siOTZA8gaSdAHWVwUxkSIsgjUIgGQ3iVG6FyFikgHEE=) 12: jRrIPuOj-WjWatL99GFue7Hk0dc.crl (hash: BKYFqgwSnyB5cSNfYbQfk60qUxk3+AKS9LEtoxH4y5g=) 13: koWcD6_YJsplq6MpdAuoeyxurzM.roa (hash: 2bTDDvlz5M3JHeYmPpa6SlfroaAlw505uc1zw7/pXCU=) 14: lO8z4PUnAAW_FQZ30LG2G_SaC34.roa (hash: TP4CK9avYURoeZBLUriM0sZhHgj7m8xB680P8/Q/778=) 15: nHSye6xLjTJdy1NFMQ9UNlBR1r0.roa (hash: x+w+bpNcYVfLYVFpFJoqaG3bmPwP5KeEN+TuOk91gTE=) 16: ptIzMM5pGR32qdt6NWym3eUNiak.roa (hash: bSsM8QyZGEjlRqx/UPAoekl3qkyD03EUapHU3WIbdX4=) 17: tesrxSIX8wDOD0usavdzlelTyC8.roa (hash: 2mw6qDJEVPvk2SB5Frfa2IZ+DHf6Rgtla+C91qwtmwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 12:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:45:1d:57:1a:ba:7a:76:ef:be:53:7e:6d:c1:1d:54:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Validity Not Before: Jun 6 12:00:40 2025 GMT Not After : Jun 7 12:00:40 2025 GMT Subject: CN=da9b43e9aa238bd622f561006344b40c1e02c2c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:1b:d2:8f:c3:4c:d8:46:1f:8e:2a:b5:6b:e5: 76:b3:47:19:a1:f7:4e:15:63:70:41:b3:6b:e2:36: e4:89:4d:b3:37:da:f6:18:e7:73:34:d5:b1:a2:8e: d4:00:28:ac:31:9c:4f:f3:60:33:56:f6:e6:ea:aa: d1:3b:c6:95:ec:31:b9:96:a8:74:0b:85:8f:cd:91: 07:94:c6:30:74:4d:16:98:a0:52:b4:40:0c:09:7c: 4e:ca:a4:1f:98:7f:0c:fe:3c:0f:b8:39:d8:52:3d: 98:8d:25:5b:c0:90:2c:f4:6b:cc:90:4e:6a:2f:36: 34:db:13:53:4c:ed:79:b7:d2:98:6b:1b:ee:5e:c2: fb:05:d8:34:84:8b:8f:79:d8:e5:38:02:f5:44:00: dc:bd:ff:4f:ef:7b:e2:66:3b:a7:65:f7:9e:b9:75: 8e:54:36:a1:f3:3f:4b:a1:aa:bf:2b:74:bd:0d:e3: 9f:78:f5:4d:59:da:0f:16:82:d7:38:2d:9a:2e:16: 73:64:5c:c0:bd:04:56:55:40:25:93:7d:5a:38:6a: 70:f9:93:36:89:65:a0:bb:fd:37:bb:a9:4f:df:36: b2:93:64:da:d6:05:ef:6c:8e:48:68:1d:ba:a5:93: ac:f2:d1:65:33:61:75:77:c1:e9:9d:eb:9e:c3:45: 77:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:9B:43:E9:AA:23:8B:D6:22:F5:61:00:63:44:B4:0C:1E:02:C2:C1 X509v3 Authority Key Identifier: keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:f3:e4:c4:d5:77:06:1f:82:51:4a:d6:55:c4:94:3d:25:a7: 14:06:f5:a9:cf:6a:33:21:79:33:a0:2f:99:97:6f:19:3f:4f: b4:7e:8e:70:6e:71:77:52:55:53:17:8e:11:d3:12:3d:b6:43: 06:62:b6:ef:a9:68:25:fb:f9:b1:2f:ed:f2:70:af:a0:90:2f: 68:a8:2c:ed:5a:a6:ea:52:1e:a4:21:5f:2c:26:4f:e3:a9:fe: cf:9a:82:86:57:0e:db:55:50:f8:ac:52:37:e8:31:2b:6d:95: 9b:8c:c1:e2:a0:c5:26:d7:78:03:4a:54:c2:30:d0:71:64:c9: 60:ef:f8:98:d0:b1:99:53:93:6c:b5:01:c4:05:2f:4d:55:5b: 51:42:0d:c4:dc:f2:3e:8a:41:cc:97:5b:b5:6f:b8:dc:2d:14: 91:77:00:78:4e:2b:90:0f:11:69:6a:57:ca:c9:47:aa:f3:97: 0e:4f:6b:f9:d4:2c:17:a6:a3:75:40:77:82:38:ac:b4:59:a0: b9:b7:b7:f9:ed:0a:59:25:ec:85:b1:36:ee:4a:5f:10:a6:d5: 34:fb:79:8c:0e:04:b4:af:f8:58:da:46:0c:63:c9:6d:2e:be: a0:de:72:ec:bb:b9:7a:1e:c6:30:c7:bd:c3:6a:e7:c6:ce:db: 44:29:a3:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdFHVcaunp2775Tfm3BHVQqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl NGQxZDcwHhcNMjUwNjA2MTIwMDQwWhcNMjUwNjA3MTIwMDQwWjAzMTEwLwYDVQQD EyhkYTliNDNlOWFhMjM4YmQ2MjJmNTYxMDA2MzQ0YjQwYzFlMDJjMmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RvSj8NM2EYfjiq1a+V2s0cZofdO FWNwQbNr4jbkiU2zN9r2GOdzNNWxoo7UACisMZxP82AzVvbm6qrRO8aV7DG5lqh0 C4WPzZEHlMYwdE0WmKBStEAMCXxOyqQfmH8M/jwPuDnYUj2YjSVbwJAs9GvMkE5q LzY02xNTTO15t9KYaxvuXsL7Bdg0hIuPedjlOAL1RADcvf9P73viZjunZfeeuXWO VDah8z9Loaq/K3S9DeOfePVNWdoPFoLXOC2aLhZzZFzAvQRWVUAlk31aOGpw+ZM2 iWWgu/03u6lP3zayk2Ta1gXvbI5IaB26pZOs8tFlM2F1d8Hpneuew0V3ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqbQ+mqI4vWIvVhAGNEtAweAsLBMB8GA1UdIwQY MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt ZGRmNTY3ZWRlZDAzLzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPPkxNV3 Bh+CUUrWVcSUPSWnFAb1qc9qMyF5M6AvmZdvGT9PtH6OcG5xd1JVUxeOEdMSPbZD BmK276loJfv5sS/t8nCvoJAvaKgs7Vqm6lIepCFfLCZP46n+z5qChlcO21VQ+KxS N+gxK22Vm4zB4qDFJtd4A0pUwjDQcWTJYO/4mNCxmVOTbLUBxAUvTVVbUUINxNzy PopBzJdbtW+43C0UkXcAeE4rkA8RaWpXyslHqvOXDk9r+dQsF6ajdUB3gjistFmg ube3+e0KWSXshbE27kpfEKbVNPt5jA4EtK/4WNpGDGPJbS6+oN5y7Lu5eh7GMMe9 w2rnxs7bRCmjyQ== -----END CERTIFICATE-----Generated at Fri Jun 6 20:31:15 2025 by rpki-client