$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft File: VXsKwQuGQqJ909dO1ste4EXme5c.mft (raw, json) Hash identifier: 2isFluhFORbcyV0Neu9qMBQtodzxrlZTcWZGBQ1InzY= Subject key identifier: F6:7B:90:52:93:FC:86:10:C3:27:F7:97:21:A8:7E:85:6F:72:56:8E Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Certificate serial: 01974AB14334F2FEB994D0EF1D61D47F2BA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft Manifest number: 09D4 Signing time: Sat 07 Jun 2025 14:00:20 +0000 Manifest this update: Sat 07 Jun 2025 14:00:20 +0000 Manifest next update: Sun 08 Jun 2025 14:00:20 +0000 Files and hashes: 1: 21k07trihuOq_p0d1xoi4bxuPZA.roa (hash: 7OFU6XWsgxZjBgc5/9Z26TjwR0mC8/oQG4kPqRbf13g=) 2: 4iaJi_OBKAE3o8h175iBu_IZyfI.roa (hash: lDCEAMXE0clsOMjNyholsrUDxhoIrjK4k3xcCfxPkUY=) 3: 5BopT6zWN2-PdGYdxH2aUB0jmhg.roa (hash: /mHqZKMlZJCdgH7Kawl3aGGRgWwqt/sVMAcpLcw5mXU=) 4: Geel9OdOaQ9FlrEzFHKlpiWE30U.roa (hash: mEBGWZVn+mmpTlkiNI5Af3AFG/t42zkx+akYj/Nw/0M=) 5: JWpMTh79Cpipv8z2TiqFetsx4Z0.roa (hash: EeuLpYtgLdl6hvIb6vNrTtAuFpAgpCnIwfpYkuwZmkQ=) 6: ORkWSvHyz7xVlACj3J643SMA1t4.roa (hash: 9HyAWLxiFAOsSF7hRfVc73gtPaqofO7sI7vq8SdYSfA=) 7: Tg1n5Fp1pJd7zBO6W_NcYtcUcjs.roa (hash: 2JSaIkit5yVDVUZV0/gM1VkpGy+fdm5Z9IWeQFjGnCA=) 8: VXsKwQuGQqJ909dO1ste4EXme5c.crl (hash: BMktcVqEFxeyN3ByRRA0cpNY3QKcoUpnr+tMQgC7K2c=) 9: eEIU-7XZaVcC-f6y_l8FbyGXkYs.roa (hash: ccjF0pRALTvlsj4nghUXMFhD4eJgmm2vuAU1GU9bybw=) 10: gk0o9JIYrdgKiCEVnFxYDFCmm6g.roa (hash: U5lgDtUaYRY5Jq/t8D2zh/ImkX7ABdChH50k3iWkRSA=) 11: isVEUZfOAYWgwQz8Wasb0pXP9-c.roa (hash: KMpoK0MvGBO62nHjsAV0aozmo8+TgCC0xqPegTe+AGU=) 12: plBE2K-1jhmKq6eM8fW4KaXWZeQ.roa (hash: Fhmhnyiel4/Ua1E2ksX/40TvHfAVYkZD+dMm3wF8AAw=) 13: q5iwhkLWHaHzrsMDMRUmBmBn11k.roa (hash: 2neeMv5dtKfWXLBDuxY5lIZ8bbDinZSWs3Ol+x9qe8Y=) 14: qGHwRT5XaADoYIFvBSiB_qBc8VI.roa (hash: 1jerdKXo29tvZCLipnWCYRKXmzqu+SKDN+L+wjo2w8c=) 15: qSnacK2T8IuqCW3tI5c1Sj5K99M.roa (hash: WK1c1s6zKzUYTVUxjbT3jBDMbmv6j/g+GMi3AvdtgQY=) 16: rCp1o_nOqwsF2hOj4c5kBCN-sNQ.roa (hash: hkXBdU7Mx+s+1UvYnZlcv2/hPwhLGz/FrQNM7+jLYxI=) 17: uNvKhwe5KEaAzLU0ACWU9sZ7Bm4.roa (hash: jacfmgDqnbUtNbN3r/NGjMzBlVkGGEbKEgbjHG7ah6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 11:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4a:b1:43:34:f2:fe:b9:94:d0:ef:1d:61:d4:7f:2b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Validity Not Before: Jun 7 14:00:20 2025 GMT Not After : Jun 8 14:00:20 2025 GMT Subject: CN=f67b905293fc8610c327f79721a87e856f72568e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:23:39:db:dc:e4:ee:e6:b5:b7:28:cc:9f: 74:14:92:5c:3e:3e:9d:72:c5:aa:6b:b8:10:59:e1: d1:2f:11:c5:3b:0a:f7:25:98:22:8b:7d:a5:dd:6c: 12:21:92:cd:17:b6:5c:77:91:8f:14:25:a4:98:11: f7:cb:ad:42:61:23:fe:fb:2e:4c:cd:2c:55:85:e6: 94:9d:05:64:92:32:8e:ac:21:9b:e7:5e:19:d7:dd: 9f:0e:ac:4f:92:0e:17:15:e0:05:84:1b:cf:11:d5: 37:7e:ca:3c:83:77:97:49:0f:b4:73:5a:2d:fd:a9: 39:bb:f1:a1:40:cd:4e:c1:20:fc:4d:72:c8:23:e6: 74:3f:eb:2b:6f:1a:36:e3:44:fb:3e:af:73:d4:fa: 20:50:ee:e2:e9:d9:98:ee:84:71:8e:60:c2:82:68: c5:d4:a8:c4:ac:92:50:91:1d:2b:21:57:78:bd:cd: 6f:6a:aa:5d:51:d7:fe:66:9a:f2:45:7c:74:7c:17: 82:b8:ab:2c:2f:69:53:39:3e:85:30:4a:97:d2:c5: a8:c5:de:13:3b:07:aa:43:42:fe:d1:2f:4f:af:2d: cb:4c:19:f4:98:dc:68:04:dc:00:d3:2e:8a:bd:5b: ce:64:90:eb:fa:14:0b:52:cf:5d:0f:2c:f4:a0:9b: b6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:7B:90:52:93:FC:86:10:C3:27:F7:97:21:A8:7E:85:6F:72:56:8E X509v3 Authority Key Identifier: keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:c8:76:1b:f9:95:a0:e4:7c:60:cd:ba:89:73:19:30:74:0c: 39:f9:40:0a:28:bf:13:13:e3:68:3b:bc:54:68:6a:fe:37:4f: 74:a2:71:b3:6a:c0:d9:54:51:08:6e:ad:e3:33:e3:d9:de:15: 27:8c:4d:fa:e7:3e:18:42:b7:0f:dc:cb:62:c5:fd:17:c6:36: 20:e4:19:de:62:a6:17:a7:d3:ef:20:2d:a2:1a:f7:b0:ad:4b: e2:0e:e5:b6:df:68:fd:b6:6f:1f:ca:68:db:f0:f2:a7:e9:0d: fb:62:ea:5a:05:1a:00:cc:ae:95:40:07:df:5b:11:08:d9:04: 5f:b5:97:d6:e9:64:bf:04:f9:ff:2d:98:ba:93:b1:8a:26:b2: f1:48:7c:90:8f:53:d6:5a:ff:f7:ef:10:e3:aa:5b:4b:fe:31: 3d:86:77:02:3e:37:ee:29:6c:92:ed:12:7a:28:30:c2:61:22: 10:b6:ef:34:a0:1a:cf:b8:6c:23:22:98:6e:01:8d:e4:e0:ea: e7:94:f1:52:11:7c:26:a8:bb:34:55:e6:b6:f8:21:de:f2:f2: ce:9a:77:05:ee:9a:5b:fb:f7:e4:cb:2b:4d:11:1e:a1:7e:13: 2c:7f:fa:5f:5f:81:b6:98:87:e0:7d:d7:87:4d:11:97:00:21: 78:6f:cf:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdKsUM08v65lNDvHWHUfyulMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1N2IwYWMxMGI4NjQyYTI3ZGQzZDc0ZWQ2Y2I1ZWUwNDVl NjdiOTcwHhcNMjUwNjA3MTQwMDIwWhcNMjUwNjA4MTQwMDIwWjAzMTEwLwYDVQQD EyhmNjdiOTA1MjkzZmM4NjEwYzMyN2Y3OTcyMWE4N2U4NTZmNzI1NjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfkjOdvc5O7mtbcozJ90FJJcPj6d csWqa7gQWeHRLxHFOwr3JZgii32l3WwSIZLNF7Zcd5GPFCWkmBH3y61CYSP++y5M zSxVheaUnQVkkjKOrCGb514Z192fDqxPkg4XFeAFhBvPEdU3fso8g3eXSQ+0c1ot /ak5u/GhQM1OwSD8TXLII+Z0P+srbxo240T7Pq9z1PogUO7i6dmY7oRxjmDCgmjF 1KjErJJQkR0rIVd4vc1vaqpdUdf+ZpryRXx0fBeCuKssL2lTOT6FMEqX0sWoxd4T OweqQ0L+0S9Pry3LTBn0mNxoBNwA0y6KvVvOZJDr+hQLUs9dDyz0oJu2hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZ7kFKT/IYQwyf3lyGofoVvclaOMB8GA1UdIwQY MBaAFFV7CsELhkKifdPXTtbLXuBF5nuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYt ZmJlMWEwZDBhYTk4LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYtZmJlMWEwZDBhYTk4 LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8h2G/mV oOR8YM26iXMZMHQMOflACii/ExPjaDu8VGhq/jdPdKJxs2rA2VRRCG6t4zPj2d4V J4xN+uc+GEK3D9zLYsX9F8Y2IOQZ3mKmF6fT7yAtohr3sK1L4g7ltt9o/bZvH8po 2/Dyp+kN+2LqWgUaAMyulUAH31sRCNkEX7WX1ulkvwT5/y2YupOxiiay8Uh8kI9T 1lr/9+8Q46pbS/4xPYZ3Aj437ilsku0SeigwwmEiELbvNKAaz7hsIyKYbgGN5ODq 55TxUhF8Jqi7NFXmtvgh3vLyzpp3Be6aW/v35MsrTREeoX4TLH/6X1+BtpiH4H3X h00RlwAheG/P9g== -----END CERTIFICATE-----Generated at Sat Jun 7 22:37:40 2025 by rpki-client