$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft File: XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft (raw, json) Hash identifier: XC7GD/JsxBkj/cwZkWrHiKpHA5IRxEBURGTANJrBjX4= Subject key identifier: E9:F9:9B:A1:71:2A:5F:AF:40:97:4B:56:1E:B2:02:CF:89:95:62:A6 Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61 Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361 Certificate serial: 01973C50F7310A51CD64D659AFAD9E686311 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft Manifest number: 0CF0 Signing time: Wed 04 Jun 2025 19:00:28 +0000 Manifest this update: Wed 04 Jun 2025 19:00:28 +0000 Manifest next update: Thu 05 Jun 2025 19:00:28 +0000 Files and hashes: 1: 2eSn5y27ldEmC0Gd_54Bd8_I9JY.roa (hash: 1Gj1gucEHIQe5/suhFpq18I0KHQmpiCbAT8OEer2XJY=) 2: 4zijRX3qFSJj7GUPzn2tNtVGEqU.roa (hash: G11+LD/eIulIMC02GT0rOyORwsGurEkPCQfgsNssMY4=) 3: 6wQs6-0w-fWJLJ0hVPQK6QCCGkY.roa (hash: rb19DmwWMRxoIZtq3fo28eOFDkPmJthIUG0I+8TP2AM=) 4: BOI1awQxdXwnD-j71lBbNJhD_Lc.roa (hash: RDggKzi5X4GzB5qxGRZl8jlJFnbQqP70OHVTn4IeWCs=) 5: BjsuLgGQNhMD4InbUJY9wvy3euM.roa (hash: HQnpHX6hfakLbQoTyAQapgMmds3GLNhUneOg7VrLXNA=) 6: EliH32nM72jk5o8srlCb9Qn8SIg.roa (hash: Rtb7C9DazwCLvPY2asNPyAzR9ypSlDn7TK9tDgFH01c=) 7: JDi96XtBmi1E-eUX4bd0z2rNMAQ.roa (hash: g67c4gAiqig1Iyele/QFecJvszyajLNwbzJcH0zM3As=) 8: N1kPa63Y6FcbIG4ZFA6vBaVC4N4.roa (hash: ADzkv6QiLNzt6CZ3/NGstYTNCCFuWgTGZZVgBsDhSg0=) 9: PvDQaJs3rwqfVhwh7JLmxWdfCnw.roa (hash: kfowhpPS37erJf8EqX+PtveCKI55Da0bOeynOicoCEs=) 10: XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl (hash: 4ad8m7VbPSpcms8N19ZwKrGF6MJnVnEeEDgpHB/Ld18=) 11: ZbwUWjs9o76pI3kjzXXqiUmfJWs.roa (hash: z8UzCAWnCWtYZdQcdAh+iDVTaruSoFX/I30w0uTUKuY=) 12: c5Kgx9M_pZoyC-FuKyzrc0aGPI4.roa (hash: qo5ZvreioWLB6l4kqymHWyEjF1uBdQswYAIK4BkA1Q8=) 13: n_rP7jWTS4Z479ne6IAs1NmLMNk.roa (hash: tJkrT8kWq9nKGSWE25BO34wrEprXE5qoElSyxJPmjJc=) 14: ya1Qvlz0z2yIW3rWpmZNZE0Mahw.roa (hash: pUh8tSNEyZT8qdNgsK70xOXvpKS7aoBqKqdEgq1Za3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3c:50:f7:31:0a:51:cd:64:d6:59:af:ad:9e:68:63:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361 Validity Not Before: Jun 4 19:00:28 2025 GMT Not After : Jun 5 19:00:28 2025 GMT Subject: CN=e9f99ba1712a5faf40974b561eb202cf899562a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d7:19:d4:fd:ff:46:f2:45:ce:08:75:8a:dc: 5f:c0:98:23:cf:bd:aa:5a:af:06:67:81:fe:9b:5e: 7c:ca:4f:f3:74:e3:6f:c1:bf:34:0b:3d:19:83:cb: ac:7d:56:dc:c1:a7:95:56:18:84:02:e5:62:b5:c4: 24:12:bc:de:e5:e3:55:fe:92:c8:64:27:68:41:51: 4b:75:b4:0e:7f:b4:2c:d2:27:05:26:63:e5:1d:83: 14:e3:b6:e2:f4:56:9c:69:e2:3c:97:d4:15:fe:62: 47:c6:fe:de:28:76:8b:c2:98:65:e5:3d:27:6c:38: 88:38:8b:e2:4e:07:34:99:9f:ae:17:14:4e:a3:84: 47:fd:b3:5f:6a:21:07:b7:73:4e:8b:f6:da:8b:65: f0:c6:5e:9d:d6:1b:49:68:86:07:88:65:a0:11:e9: c5:c4:61:f2:df:bb:57:30:5a:84:9e:bf:bd:fa:b3: 03:59:41:ab:70:bb:f7:bd:a7:05:7f:5a:c9:ae:86: 0f:5f:67:f7:f8:d7:29:3f:24:0e:7e:c4:ea:9c:bd: 31:fe:a4:a5:d0:96:92:71:17:d7:0c:cb:66:bc:5d: 7e:ca:96:b6:22:7e:15:29:9e:55:0e:15:8a:d5:a8: ee:3f:9a:ae:1b:0b:51:58:c6:81:13:9b:be:ce:da: 7c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F9:9B:A1:71:2A:5F:AF:40:97:4B:56:1E:B2:02:CF:89:95:62:A6 X509v3 Authority Key Identifier: keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:45:a4:ca:a6:fa:ea:d4:37:41:7f:38:fd:c0:8d:96:f1:2b: 18:71:49:63:54:86:61:41:e8:10:23:04:27:d4:37:92:0c:b5: 3b:01:64:4c:bf:15:20:0c:47:3b:10:b9:20:8e:9a:8f:3c:36: 55:8a:5a:fb:7e:60:5b:4a:2d:e5:7d:83:31:11:3f:44:49:be: 54:da:bc:25:06:84:41:02:dd:e5:98:82:a0:4e:ed:ad:b1:72: d1:4f:7b:00:81:50:a5:33:d6:8a:30:5b:78:33:06:fe:10:9c: c9:f6:57:a3:c3:9d:24:88:0d:55:65:94:44:89:1d:a9:33:c2: dc:6b:5e:d8:00:6e:36:7b:a4:fc:e1:90:25:d7:a2:14:e5:52: 87:c5:05:75:38:dc:a3:d5:a2:15:09:27:ba:c3:d7:e3:a3:6b: 2d:ce:3b:6a:98:40:81:bb:58:ce:11:2f:86:9d:1d:db:fa:ae: 77:43:1c:e8:0b:2f:8d:ba:90:f3:8f:3b:0d:98:0b:cd:ce:49: 84:27:fb:08:86:ae:c5:d5:8d:15:2b:a7:84:ec:7f:92:1b:05: f3:22:b4:70:d3:63:3d:6c:44:a7:73:80:08:29:91:cf:09:d7: 80:aa:b2:b2:63:20:35:65:95:14:6e:f8:4a:6f:a1:13:b6:de: 38:18:a1:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc8UPcxClHNZNZZr62eaGMRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjODkyYWVkMzgzM2U2MTAwZjVlMGNmMTIyNzFmZDgwYjc1 NWMzNjEwHhcNMjUwNjA0MTkwMDI4WhcNMjUwNjA1MTkwMDI4WjAzMTEwLwYDVQQD EyhlOWY5OWJhMTcxMmE1ZmFmNDA5NzRiNTYxZWIyMDJjZjg5OTU2MmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09cZ1P3/RvJFzgh1itxfwJgjz72q Wq8GZ4H+m158yk/zdONvwb80Cz0Zg8usfVbcwaeVVhiEAuVitcQkErze5eNV/pLI ZCdoQVFLdbQOf7Qs0icFJmPlHYMU47bi9FacaeI8l9QV/mJHxv7eKHaLwphl5T0n bDiIOIviTgc0mZ+uFxROo4RH/bNfaiEHt3NOi/bai2Xwxl6d1htJaIYHiGWgEenF xGHy37tXMFqEnr+9+rMDWUGrcLv3vacFf1rJroYPX2f3+NcpPyQOfsTqnL0x/qSl 0JaScRfXDMtmvF1+ypa2In4VKZ5VDhWK1ajuP5quGwtRWMaBE5u+ztp8/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOn5m6FxKl+vQJdLVh6yAs+JlWKmMB8GA1UdIwQY MBaAFFyJKu04M+YQD14M8SJx/YC3VcNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2Ut M2FhN2RhYTlkM2VjLzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2UtM2FhN2RhYTlkM2Vj LzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvkWkyqb6 6tQ3QX84/cCNlvErGHFJY1SGYUHoECMEJ9Q3kgy1OwFkTL8VIAxHOxC5II6ajzw2 VYpa+35gW0ot5X2DMRE/REm+VNq8JQaEQQLd5ZiCoE7trbFy0U97AIFQpTPWijBb eDMG/hCcyfZXo8OdJIgNVWWURIkdqTPC3Gte2ABuNnuk/OGQJdeiFOVSh8UFdTjc o9WiFQknusPX46NrLc47aphAgbtYzhEvhp0d2/qud0Mc6AsvjbqQ8487DZgLzc5J hCf7CIauxdWNFSunhOx/khsF8yK0cNNjPWxEp3OACCmRzwnXgKqysmMgNWWVFG74 Sm+hE7beOBihGQ== -----END CERTIFICATE-----Generated at Thu Jun 5 00:50:09 2025 by rpki-client