$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: 4VuVRXDtsSC2x3fB3etPKITLnf6LOX1on5cXUWKiInk= Subject key identifier: CA:F2:64:93:EA:12:7A:2E:48:0F:09:5F:27:43:E9:88:E0:B9:BA:C1 Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 0197463037709D8D94240E189D00A89B1D84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 1313 Signing time: Fri 06 Jun 2025 17:00:54 +0000 Manifest this update: Fri 06 Jun 2025 17:00:54 +0000 Manifest next update: Sat 07 Jun 2025 17:00:54 +0000 Files and hashes: 1: 5WpWrypca4XGx0ISHtuZYRT_cno.roa (hash: R8ZoU8UZw1Z3gy7t3IJTFumdlDzgJjWSubPKAJkbvV0=) 2: 6Tq_leUsVpFgI85zp_wIyChN4WA.roa (hash: //rXy+p6IdrQ6jHZrRlFQGf563PHiLpmYBPTnbSHBxk=) 3: 8wA7Z8R93JqOIr4nUCX1S5SLIf0.roa (hash: 8DXy5Yj333BXczsMQt5oYuiRo4BwLMddhajfUUPGovk=) 4: ElpdsCAHWnrspf_BQqwQgScgsBo.roa (hash: qGJ7OM5aBe7dvyjzLtp4kDohE2tNL4nfvnY6+uLyiBw=) 5: JOBERo-vgg6dldBoWViTCfV7X-A.roa (hash: ce+d5taUPY+G9x5sjcA70ndAe38v7dhbZx0JrAG/CD4=) 6: RYSW4-JdkoBKfIznV9vyOBl6v0k.roa (hash: tfbM0g7bQsYb1raiS9o3/ZoSCJhkN7ErYxyrCWx4xjs=) 7: T1V76bxlhezLMl4Tzlvgqgk0pcg.roa (hash: Hk9kWyBSS3VZQ3ORtc2F2qsaXDclUxsqlus/HDJzLds=) 8: Z5phhVwVfpK6dkc5C1-vYmhcYUU.roa (hash: iIyIPk2NBxkdVR06TYJeH+vh01QOalQb+F2tpumtM+w=) 9: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: VwcQE9st37+dBRH/mns2clPfmp4nN4d5nLx8RCVyjMc=) 10: ezMLdhISIqr2PAqGoulAf-qQ6FY.roa (hash: MoVmtNQ9G0A/NJidABkGuBmF42AfIIukbBtAhp8lY68=) 11: mA4IEAHXR0LDJS0AO7AgvdyymfA.roa (hash: B62czMPy2pKQJ5FL2R2C5ZUZdywtpL+Cj+O5hZ16Rv4=) 12: qQMnV_AHkaoypfzXBStNqOIC8i4.roa (hash: 8/gHPP6AgbL3NuW+OG2JLB+jSLFsV5WrdZq7Of0LMpg=) 13: t-GC4kGf7lvSnOYAiTpgmlkKEL4.roa (hash: 9rNbslHDQxGg0Ew50MQa2Fk3HC4+vs4VNNeusuZLYr8=) 14: x9Pa4FjGFuSawk-SEv2Ok6k19yY.roa (hash: KV0RsDBtETgbugEI2r4ib263Vs08/yFDjc5KML8G+A0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:46:30:37:70:9d:8d:94:24:0e:18:9d:00:a8:9b:1d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Jun 6 17:00:54 2025 GMT Not After : Jun 7 17:00:54 2025 GMT Subject: CN=caf26493ea127a2e480f095f2743e988e0b9bac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a6:51:21:0c:ae:03:cc:0b:3d:11:c5:da:06: 66:a9:34:95:5a:36:3b:c5:0b:e8:21:ec:e2:ee:b6: 53:56:da:69:7d:6b:fd:b8:65:d4:35:33:82:c8:95: ab:23:60:e7:6e:3f:17:19:16:5d:f1:23:9b:c9:06: 74:61:42:41:fc:61:6f:d1:66:3e:cb:3c:bc:dc:d0: 2b:cf:29:94:a2:13:32:4c:7b:db:3c:0b:dd:fa:f2: 9b:16:46:26:5e:6a:9c:a1:85:91:1e:58:a3:2b:09: e5:09:10:d4:89:99:f7:2a:d4:35:eb:43:ae:d7:e2: 99:62:56:8a:1b:35:49:73:c2:99:93:5b:17:8b:85: 7d:18:b6:e2:36:90:f7:15:18:4b:80:45:ce:c4:04: a9:17:26:85:5e:1b:c9:7f:d6:e4:20:e0:ce:5b:51: 1f:f4:c2:f4:22:fd:db:86:09:7b:48:9b:d5:8a:aa: 82:2a:74:09:cb:1c:75:74:8f:d4:04:7d:5b:20:0d: b9:c6:88:20:27:1c:63:b9:5c:8d:cb:83:e9:b7:ba: 30:20:40:d2:9f:d7:f8:66:eb:ae:8f:01:37:85:31: bb:54:0e:31:17:95:15:76:45:34:04:72:bc:0d:fe: 46:b3:3e:c0:e4:04:20:45:aa:8e:33:35:2d:56:1a: 9b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F2:64:93:EA:12:7A:2E:48:0F:09:5F:27:43:E9:88:E0:B9:BA:C1 X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:08:ac:57:91:36:b8:de:f1:6e:10:86:63:c4:08:6e:96:25: e6:3b:cc:97:bc:f3:28:63:cb:75:96:83:ee:7c:81:cd:5a:7c: 2d:67:3f:80:df:41:f8:94:33:0a:eb:24:94:ac:03:17:c0:bf: 18:b6:1b:ab:f0:b3:69:ae:6f:76:3a:85:8c:ef:f1:49:75:ab: 63:a7:16:f7:c4:de:ec:d3:71:20:53:b5:c4:40:5a:20:87:f2: 1e:37:69:d6:9e:a1:35:c8:5a:14:2e:3c:f3:06:22:e1:84:17: 18:3d:e7:08:d5:05:04:ee:2c:b0:e2:a9:c5:29:30:6a:bc:87: bf:9d:8d:02:80:49:08:90:94:16:66:55:26:ea:d6:13:67:05: 3a:c1:65:81:37:63:e5:b0:0b:18:ed:21:51:66:16:9c:77:f6: 57:c3:50:de:b6:70:ac:71:fc:e5:4d:e1:f9:10:64:52:c6:71: f9:39:2a:39:01:6d:83:a1:fb:bb:85:18:ef:71:36:4c:7e:47: 2f:f2:ea:17:15:e6:8f:42:65:a3:4c:7e:55:6f:24:ac:80:44: d6:e6:58:00:28:ca:0b:b2:ad:f2:8c:63:d0:91:49:7e:29:55: e9:dd:12:91:85:10:b6:2d:d1:0c:69:0c:05:e1:85:ed:a1:0b: 4e:de:d4:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdGMDdwnY2UJA4YnQComx2EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjUwNjA2MTcwMDU0WhcNMjUwNjA3MTcwMDU0WjAzMTEwLwYDVQQD EyhjYWYyNjQ5M2VhMTI3YTJlNDgwZjA5NWYyNzQzZTk4OGUwYjliYWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaZRIQyuA8wLPRHF2gZmqTSVWjY7 xQvoIezi7rZTVtppfWv9uGXUNTOCyJWrI2Dnbj8XGRZd8SObyQZ0YUJB/GFv0WY+ yzy83NArzymUohMyTHvbPAvd+vKbFkYmXmqcoYWRHlijKwnlCRDUiZn3KtQ160Ou 1+KZYlaKGzVJc8KZk1sXi4V9GLbiNpD3FRhLgEXOxASpFyaFXhvJf9bkIODOW1Ef 9ML0Iv3bhgl7SJvViqqCKnQJyxx1dI/UBH1bIA25xoggJxxjuVyNy4Ppt7owIEDS n9f4ZuuujwE3hTG7VA4xF5UVdkU0BHK8Df5Gsz7A5AQgRaqOMzUtVhqbhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMryZJPqEnouSA8JXydD6YjgubrBMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADgisV5E2 uN7xbhCGY8QIbpYl5jvMl7zzKGPLdZaD7nyBzVp8LWc/gN9B+JQzCusklKwDF8C/ GLYbq/Czaa5vdjqFjO/xSXWrY6cW98Te7NNxIFO1xEBaIIfyHjdp1p6hNchaFC48 8wYi4YQXGD3nCNUFBO4ssOKpxSkwaryHv52NAoBJCJCUFmZVJurWE2cFOsFlgTdj 5bALGO0hUWYWnHf2V8NQ3rZwrHH85U3h+RBkUsZx+TkqOQFtg6H7u4UY73E2TH5H L/LqFxXmj0Jlo0x+VW8krIBE1uZYACjKC7Kt8oxj0JFJfilV6d0SkYUQti3RDGkM BeGF7aELTt7UUA== -----END CERTIFICATE-----Generated at Sat Jun 7 00:55:40 2025 by rpki-client