$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft File: FgVYAbd153QwYyFFX9Rj-9knPEw.mft (raw, json) Hash identifier: 6ww8apJ5fmm7FS2SIpQfYmG51QDyTbCmh0Mu1/uskIk= Subject key identifier: EB:A5:ED:64:9C:B3:4E:7E:E5:0A:2E:A9:5A:5D:9C:BF:D3:2F:B2:44 Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 0197507CF05FD5D785F5DFB6B0AC13F531E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft Manifest number: 0309 Signing time: Sun 08 Jun 2025 17:00:54 +0000 Manifest this update: Sun 08 Jun 2025 17:00:54 +0000 Manifest next update: Mon 09 Jun 2025 17:00:54 +0000 Files and hashes: 1: 1KQdLQdqSavQ8opOsJBCC_LRSmI.roa (hash: sDbjsiQHm8jFEXwFUnfwIQmQndNvaybGYHSFGwTIBNw=) 2: 2KRS8xNg1n3MiFJIQWdojz6XlS0.roa (hash: VaIgVtBIZ8x0cTFrgwuhgZXExSOoccJFrVYDCE79DMA=) 3: CGF1BIeHy8IT5aGPGNEOXrLnJlM.roa (hash: 8VwJdcpb3DlrQc7aqH1TphMMsq6OhgM+K3smNx7xgHw=) 4: FgVYAbd153QwYyFFX9Rj-9knPEw.crl (hash: WkO0HI88paWmANL3Wgf2pm63W2xYInNZhY8N3wa2Ck4=) 5: HlqaX9y1cpjv0wxGrlQZeagT5Q0.roa (hash: dZjid0DCr3cVa0kusKQlx9flhXPy/L6bL7wDHQcf1TY=) 6: HtWPks8re8wT-Qc0p_2vGh8QeMQ.roa (hash: hj+XgnyJ0Da4wSkZgTsnnXr4WcLVInfl1QD5sz921GI=) 7: L-fvo2Ga_XsqWFK5WpDjGiCw6HA.roa (hash: fBEXK38J40jBxQtyFUIZtrkSR3Zl74lHfM4BXZh9AWM=) 8: TYbsAhmCFhxDmMjSBWdQf9UoRaY.roa (hash: p8RJgIpCDo9sLZeHoPNcNbLdDdRc1mOcWR0m2s6oMdI=) 9: VhykJr3iGtJe14xyVuqvvCapaNo.roa (hash: kzFiZWS6t+iaz12TBNlwLt+jTollGPfCjhtGoJB0BAA=) 10: Vi0tQBHwoMxUWkvZJQOXAjvua3g.roa (hash: XVR5Vh1TDH7ai92z29/FWQoF7PE/ZxcAaFQCZWHNaDY=) 11: ZZMj14aEKoMyMl2StM4xpPnrSzY.roa (hash: KFrHFA3N7h8HHTB1Ry9+JCsK5OICso3z/TG5W1fywsY=) 12: aNo1lorx6tVQ1LtbDZZYpwG98bI.roa (hash: M/dPr78yQy8Oq7tst5W5cmGPYp+8hAOwwdyPVs5Qgpw=) 13: wTi7Rzww3EZXhgQOBREzY1ltru8.roa (hash: gxxJFgecVYxEQehjaeKI+l34uL+Gr3bpgbzFlOSfauU=) 14: zOhruI3f8CmZnvrfikkp_umvSCQ.roa (hash: NEbucM5c57bMZLBETD9r4o+f8o+xAOVGhz7z1f9K4Ww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:50:7c:f0:5f:d5:d7:85:f5:df:b6:b0:ac:13:f5:31:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Jun 8 17:00:54 2025 GMT Not After : Jun 9 17:00:54 2025 GMT Subject: CN=eba5ed649cb34e7ee50a2ea95a5d9cbfd32fb244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d4:93:f6:a3:4e:05:37:39:aa:5d:ea:0f:fe: b9:a5:2a:27:d6:26:eb:3f:a6:8d:9f:c0:1e:19:ec: 0f:02:7c:02:49:03:7d:5f:50:eb:58:d9:5d:07:a4: 10:84:32:61:1c:e6:5c:70:f3:70:f3:4d:24:5b:95: 2c:a7:4e:5a:e9:5b:54:cc:97:fb:5e:f7:85:ee:9c: 6f:02:b2:a6:1a:bf:43:e6:1d:84:d4:00:35:b5:fb: fb:14:7a:74:23:b3:43:8a:92:84:a1:0e:11:14:a4: ea:39:3e:5b:0c:50:86:e0:fb:8a:02:5c:28:af:40: e0:67:ad:41:b6:b1:3f:8f:02:24:d4:93:c4:f1:1d: 35:20:bb:be:c0:d7:ff:0a:e0:8b:c0:50:53:68:83: e0:ae:18:33:4b:2e:95:44:53:a9:35:59:20:ba:94: 3b:9a:86:0b:b7:d6:bc:96:5d:00:e8:66:72:12:20: e5:19:47:74:a4:9b:de:35:b4:41:c8:3a:53:85:d2: dd:8a:98:e0:0e:94:e5:ea:f5:ee:80:b5:ac:e8:8e: 41:d9:fc:8f:86:27:29:19:f3:89:e5:8b:0a:50:4b: 6c:c3:ef:67:cd:33:e9:2b:75:76:78:4d:d0:ae:88: 19:7e:20:0e:6f:2c:92:4e:a7:b8:ef:fc:07:51:a2: a5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A5:ED:64:9C:B3:4E:7E:E5:0A:2E:A9:5A:5D:9C:BF:D3:2F:B2:44 X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:1e:09:e4:8d:74:0c:7d:d9:17:89:48:ea:07:87:f2:07:56: a0:25:b9:76:20:4d:99:a3:0c:1c:d7:a3:fa:9d:62:b1:b0:32: bb:f8:c0:35:33:6c:b3:72:51:ac:f4:aa:86:d3:9b:5d:55:07: d5:68:ce:f8:2e:58:fa:0b:33:fe:f6:d5:c8:3b:3d:78:97:59: 1f:6b:6a:10:43:c6:76:3a:6b:06:04:76:6a:46:fe:dd:33:42: 3f:d6:63:7c:a6:78:e2:b3:d1:bd:a8:a2:64:c6:43:e0:ed:8a: 96:18:35:6c:17:41:ac:39:20:76:34:c8:d0:1d:26:f1:a9:27: 38:21:ae:e1:c0:48:6b:b7:ab:a2:6c:ed:51:38:a3:10:93:8d: 5b:14:2f:b5:a8:50:7c:b5:07:2d:1e:9f:f0:a1:31:12:89:0a: 3d:6f:22:ba:2e:47:a0:08:10:29:f6:fd:60:7c:69:46:8e:7c: 9d:72:6a:f3:87:d5:86:30:bc:f7:8a:75:59:1e:48:2d:41:7c: d3:b5:01:4f:b7:4d:a5:ca:ed:83:8d:b6:eb:c4:68:a2:3f:e8: 24:e4:c2:63:12:d6:52:bf:b0:50:e6:ab:71:87:9f:ac:02:8b: 78:f5:d9:66:81:80:7a:ed:4e:e5:91:3d:21:7d:0b:0c:7b:9a: 3f:96:71:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdQfPBf1deF9d+2sKwT9THgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjUwNjA4MTcwMDU0WhcNMjUwNjA5MTcwMDU0WjAzMTEwLwYDVQQD EyhlYmE1ZWQ2NDljYjM0ZTdlZTUwYTJlYTk1YTVkOWNiZmQzMmZiMjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotST9qNOBTc5ql3qD/65pSon1ibr P6aNn8AeGewPAnwCSQN9X1DrWNldB6QQhDJhHOZccPNw800kW5Usp05a6VtUzJf7 XveF7pxvArKmGr9D5h2E1AA1tfv7FHp0I7NDipKEoQ4RFKTqOT5bDFCG4PuKAlwo r0DgZ61BtrE/jwIk1JPE8R01ILu+wNf/CuCLwFBTaIPgrhgzSy6VRFOpNVkgupQ7 moYLt9a8ll0A6GZyEiDlGUd0pJveNbRByDpThdLdipjgDpTl6vXugLWs6I5B2fyP hicpGfOJ5YsKUEtsw+9nzTPpK3V2eE3QrogZfiAObyySTqe47/wHUaKl8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOul7WScs05+5QouqVpdnL/TL7JEMB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxR4J5I10 DH3ZF4lI6geH8gdWoCW5diBNmaMMHNej+p1isbAyu/jANTNss3JRrPSqhtObXVUH 1WjO+C5Y+gsz/vbVyDs9eJdZH2tqEEPGdjprBgR2akb+3TNCP9ZjfKZ44rPRvaii ZMZD4O2Klhg1bBdBrDkgdjTI0B0m8aknOCGu4cBIa7eromztUTijEJONWxQvtahQ fLUHLR6f8KExEokKPW8iui5HoAgQKfb9YHxpRo58nXJq84fVhjC894p1WR5ILUF8 07UBT7dNpcrtg42268Rooj/oJOTCYxLWUr+wUOarcYefrAKLePXZZoGAeu1O5ZE9 IX0LDHuaP5Zxjw== -----END CERTIFICATE-----Generated at Sun Jun 8 19:35:07 2025 by rpki-client