$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft File: zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json) Hash identifier: VDvGJLUqsBej7H9ikQ0JXAU2PQO+EzSDlph31aQ4JLs= Subject key identifier: 3D:A7:DF:D4:30:F2:DB:6A:67:3D:D4:52:7F:22:BF:B7:6E:5B:A0:C9 Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 019752A232AC99C3E1AC4FC0CCEA931FD205 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft Manifest number: 158B Signing time: Mon 09 Jun 2025 03:00:50 +0000 Manifest this update: Mon 09 Jun 2025 03:00:50 +0000 Manifest next update: Tue 10 Jun 2025 03:00:50 +0000 Files and hashes: 1: 6ve9ZdOx9-Jbfmi44W3M8-3fyYA.roa (hash: dVVun+kF/7beMen84cbPjTHH6kjQfKs3AUC1Xd2wQ2A=) 2: J2wVE-ysPom5E_5lF4tJldYNa-0.roa (hash: oUIFr0+ZyYlkYGUaUpe52i+2V6CsiaUkgkNDD+7+LeQ=) 3: UKCOK-W3ox3wQ-_xQp6Nu_DwCz4.roa (hash: gPrsrWnRzFL4kuQaY4M1gIUFgKd8cdPjv6qajYb7JnQ=) 4: YwzWinKJc46_U8FICjJOYyamFbE.roa (hash: 6RpEEVsTkHPSo1dAN1+8+s2LqtjPnGEmS34LuQumwbI=) 5: a5CofPxS02DnAUUS9BR-MfOlQu4.roa (hash: LylucOp1UfCFOp+5ipOtc4LcLveZAw9S3wnaBKPFnAA=) 6: aTxnMurrHnoJZlgUyPTNHT4Ir8Q.roa (hash: HeEFk1qtIJz6ps6s2w4DpyvOfJGSvhT8ioiircXVR2o=) 7: c_P4sr3Opke1mWU78BvJMlMDps8.roa (hash: epdNIDM+10/qxHg1G8njFcHs1LoWUpUQmmausYhNxGY=) 8: iI8DgizVWpbEfLLZJw23cwOMtao.roa (hash: gWEZpZ6NinOCicsU6XwwO/9pb7/TViv+n+2ETM0yooY=) 9: p1mSMR7xN9m1jztS6WxG27UANcc.roa (hash: 4Bmm+a1YgG6FugC5k/i8MnSCpfdQHkbijQGY6Yl+j+g=) 10: sYAfD4BV-6irRlKQSwMoXHjm0Mc.roa (hash: T1/WiR0D/YUKPRxlOtYq/pfY4c0SddtxyI4tXYaUGdg=) 11: wZigKiFSFg2jf4ybn-aNCM9AUoc.roa (hash: 7ZXKjf9bxY5hwxObMzg74iYfXa92Z7QeLKS7Y869myY=) 12: xuKZJebXbxs55nxOb7ZrfE7zGKE.roa (hash: Jt/lG0DwTTw8LOe3o8IYDXO60+0YpLwITYi+cEFQ4h0=) 13: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: CjDXhAxxgoFlQf0WQ6v9L7VhrMyWHcOSDj30gQJJhic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Jun 2025 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:52:a2:32:ac:99:c3:e1:ac:4f:c0:cc:ea:93:1f:d2:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: Jun 9 03:00:50 2025 GMT Not After : Jun 10 03:00:50 2025 GMT Subject: CN=3da7dfd430f2db6a673dd4527f22bfb76e5ba0c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7e:d4:54:4a:92:2d:89:55:a2:4c:d1:88:fd: d5:be:6f:8f:f8:a3:10:4b:e5:64:cf:d3:dc:61:12: fa:af:b0:d0:da:49:07:64:9b:5f:f8:c9:17:c0:93: c8:4a:43:7a:cd:ae:1c:db:0f:77:24:00:17:44:db: 75:23:b5:a5:53:fd:5a:af:cb:ee:d1:b4:27:66:c3: 84:32:70:53:5f:ec:ce:2f:a1:ee:79:4b:e7:71:98: a1:c3:50:7a:e3:b5:ab:f7:b8:0b:cd:59:84:75:10: 17:45:7c:d6:17:0f:fa:19:9d:86:22:0a:bc:47:41: a1:56:bc:ab:81:fd:3b:9e:1e:a1:10:da:2d:01:fd: 94:e7:da:4f:ff:14:ed:65:60:9b:d2:29:f0:21:5f: b5:ec:56:f6:e6:53:ea:a4:d3:63:f1:0a:4a:73:a7: c7:eb:da:ea:bc:57:4e:29:19:78:8b:48:75:3c:84: 5f:14:e2:e5:6f:38:92:d2:3e:d7:2c:e0:ae:32:2e: 80:c5:b6:a8:d8:8e:5d:ac:79:a2:a7:0e:01:96:9d: 1e:38:6d:b2:16:4f:99:ff:70:d4:09:b2:f8:dd:b0: 23:da:fa:39:22:62:ae:da:fb:66:e3:d1:1f:ff:57: 02:e9:e9:04:ca:61:55:4e:21:bc:e9:5c:e6:08:24: 1f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A7:DF:D4:30:F2:DB:6A:67:3D:D4:52:7F:22:BF:B7:6E:5B:A0:C9 X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e1:de:37:b7:3f:6a:eb:8e:3e:57:3e:41:41:ac:2a:aa:63: 67:61:af:5a:dc:6b:be:8a:03:e2:61:cc:e3:1b:d5:22:ec:7b: 71:f0:27:8a:21:5a:59:28:60:bf:00:36:c0:50:ba:a6:e3:39: 93:16:70:1a:29:9e:b2:5a:50:06:57:9e:13:75:c4:2c:16:09: f4:26:65:e9:97:bb:96:38:a1:b7:f6:e0:dc:61:b6:00:fc:1f: 7f:6f:53:27:0a:dc:18:15:bb:3f:19:29:cd:58:bb:c5:59:84: db:66:5d:7e:8a:f2:eb:35:0e:d6:ac:80:ca:35:8b:70:1d:f7: 10:9c:15:90:aa:e3:45:ab:29:c6:04:74:bc:19:4c:d5:b4:3c: 38:8a:2b:f3:7c:0c:5d:ac:ea:f8:70:91:fb:f0:fe:5f:b5:1c: 71:0d:fb:99:ae:99:50:ae:9f:d0:a4:97:8c:31:ca:c1:42:51: 82:f4:07:e5:84:c8:6a:0e:e4:84:a0:da:83:fe:14:b1:bd:40: 37:4e:c6:6c:3c:16:16:fb:4f:ed:6e:29:ef:df:f4:84:5a:75: a2:98:c6:92:8d:8d:58:51:f8:e1:cc:d0:1d:11:e0:5e:d2:b1: 4e:70:eb:d8:bd:dd:a9:8b:e0:15:cf:13:4d:74:21:72:26:2d: 34:c3:ca:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdSojKsmcPhrE/AzOqTH9IFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjUwNjA5MDMwMDUwWhcNMjUwNjEwMDMwMDUwWjAzMTEwLwYDVQQD EygzZGE3ZGZkNDMwZjJkYjZhNjczZGQ0NTI3ZjIyYmZiNzZlNWJhMGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2n7UVEqSLYlVokzRiP3Vvm+P+KMQ S+Vkz9PcYRL6r7DQ2kkHZJtf+MkXwJPISkN6za4c2w93JAAXRNt1I7WlU/1ar8vu 0bQnZsOEMnBTX+zOL6HueUvncZihw1B647Wr97gLzVmEdRAXRXzWFw/6GZ2GIgq8 R0GhVryrgf07nh6hENotAf2U59pP/xTtZWCb0inwIV+17Fb25lPqpNNj8QpKc6fH 69rqvFdOKRl4i0h1PIRfFOLlbziS0j7XLOCuMi6Axbao2I5drHmipw4Blp0eOG2y Fk+Z/3DUCbL43bAj2vo5ImKu2vtm49Ef/1cC6ekEymFVTiG86VzmCCQfewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2n39Qw8ttqZz3UUn8iv7duW6DJMB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfeHeN7c/ auuOPlc+QUGsKqpjZ2GvWtxrvooD4mHM4xvVIux7cfAniiFaWShgvwA2wFC6puM5 kxZwGimeslpQBleeE3XELBYJ9CZl6Ze7ljiht/bg3GG2APwff29TJwrcGBW7Pxkp zVi7xVmE22Zdfory6zUO1qyAyjWLcB33EJwVkKrjRaspxgR0vBlM1bQ8OIor83wM Xazq+HCR+/D+X7UccQ37ma6ZUK6f0KSXjDHKwUJRgvQH5YTIag7khKDag/4Usb1A N07GbDwWFvtP7W4p79/0hFp1opjGko2NWFH44czQHRHgXtKxTnDr2L3dqYvgFc8T TXQhciYtNMPK7A== -----END CERTIFICATE-----Generated at Mon Jun 9 06:49:31 2025 by rpki-client