$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft File: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft (raw, json) Hash identifier: n9gWYPlR5Dr9dq19w8IxlUC5euksx6XM3RPwxXQSBsU= Subject key identifier: 3F:1E:3C:4B:E0:AD:38:16:12:6B:CC:05:15:0C:E3:43:57:78:86:CF Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Certificate serial: 0197504636DB3154FAC5382D1E1E3ADBC0CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft Manifest number: 158F Signing time: Sun 08 Jun 2025 16:01:08 +0000 Manifest this update: Sun 08 Jun 2025 16:01:08 +0000 Manifest next update: Mon 09 Jun 2025 16:01:08 +0000 Files and hashes: 1: 1d9PCrI-4OIWZHlndWAF-BFZeRg.roa (hash: Iw4tosd5c4tKjF6tKkdj+Nm6L4yubj6pDN7RhIdr5OM=) 2: 9irhpoo7t3RuQsofnh453Wz9yzc.roa (hash: PhvRYsh7H1rsPmbcRRJi8HgMHZoVZsvvG8rw54V1xv8=) 3: QlG1TVRz55diqUdGl7g_uO4xh_Q.roa (hash: fgvqjVsU5zRnz0bSGyWJaFmUvSDnHcvgLRxyVqmSVT4=) 4: ZyvSvqBO_CRtrjVV5g_m38QqdF0.roa (hash: EMjT9dIsrbauUL5Ml+fcJBjE3Hsiqb5K2tYe1FIy+Zk=) 5: nnciRjVheF08s398UKSonGItpsk.roa (hash: R1OwPDHsbFUiJTJpwPW1Uer2AhB7tNd3rerNZf5joWI=) 6: pzeazRaM8Z6SjrjO6Q79mNPUlRs.roa (hash: /9lKkXVgAMejZaK+X1dNcf57k6lh360Swbxh+XCM3Ik=) 7: shBa9JrmFrbHIJ50XFqnyAIX03Q.roa (hash: ZX0cowj/X8/UKH2s85v3mEfUGDpRbJzNCB3///lxrIs=) 8: tJb8Ts4XgvLq7IFd612PdAoSex8.roa (hash: /2oqwW8TIewEulnC/YwP+6MDX06JT0RuhBb946Sy6pg=) 9: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl (hash: Y7XQ/shzXoZVNr8zGpNjtnI3dSyf1G+/6YUbEAXicwA=) 10: zag9EMVMQmmPCVwwU3_0aOJuzic.roa (hash: ffeNrZA6EtrT2ro+QuAB6ElVQs7TfooiMECDOqyyyqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Jun 2025 16:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:50:46:36:db:31:54:fa:c5:38:2d:1e:1e:3a:db:c0:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Validity Not Before: Jun 8 16:01:08 2025 GMT Not After : Jun 9 16:01:08 2025 GMT Subject: CN=3f1e3c4be0ad3816126bcc05150ce343577886cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8b:52:77:0c:2c:0f:e7:f2:3a:f2:0b:15:22: dd:a1:af:76:17:09:e3:8f:a0:c6:6f:e4:9e:70:cb: 2f:55:6d:84:aa:9d:4e:e0:3f:d9:e7:47:37:e7:3e: 50:3d:33:ff:a0:0f:c9:2e:68:84:f7:16:7b:cc:62: c1:7c:9d:89:28:23:8a:f7:f3:81:1b:9d:a3:58:bd: b5:9f:5b:e4:c4:a6:ff:bc:67:08:8d:c3:b1:55:6f: f8:ef:cb:9e:8f:d5:29:ff:11:17:fa:a1:96:cb:6d: 51:93:12:4a:97:77:4d:bc:5a:12:7d:86:97:ba:f2: 39:81:a2:77:14:dd:6b:40:8d:ef:ad:aa:f4:e0:eb: 2f:70:ac:0e:2b:08:f7:05:2f:1c:b9:b5:53:88:64: 24:cb:57:c4:24:3a:c1:35:ab:a8:9b:7b:81:8b:85: 90:02:b4:aa:37:3f:44:79:97:a4:f6:5b:10:62:f2: f7:df:9c:7c:6b:46:a2:48:40:a7:0e:14:9e:01:9e: 07:be:4f:5c:71:66:ca:05:07:da:8c:54:51:dd:ee: fa:99:66:37:1c:79:79:fc:ee:e9:05:8e:74:a5:99: 82:f9:ba:dd:88:28:9e:90:2a:25:2e:15:d2:ea:fa: e4:dc:f7:94:30:8b:a6:11:4e:8f:4d:53:1d:1b:03: 9b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1E:3C:4B:E0:AD:38:16:12:6B:CC:05:15:0C:E3:43:57:78:86:CF X509v3 Authority Key Identifier: keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:8e:49:5d:bf:04:d7:6d:96:47:40:ec:2e:66:c2:9a:2b:ec: ec:c5:7f:bd:93:f0:c5:ff:e1:03:a1:79:2d:65:09:7e:f0:33: 31:5d:3d:0c:df:f0:f6:71:93:fb:ae:f3:f5:25:1f:bc:5f:0d: 67:b1:87:27:6b:b6:7c:8d:40:09:31:e0:39:d0:8f:77:5d:62: 1f:ee:16:29:40:46:ed:60:11:30:61:de:e6:d0:62:f3:6e:c1: 31:7e:0b:c7:f0:f1:34:6c:53:65:28:4e:87:2a:d3:e3:bc:66: 05:78:4e:9a:ef:ff:88:20:c5:a3:e8:81:94:54:84:83:f2:d9: 4e:d3:e9:e4:b0:74:3f:24:1b:ac:b8:c7:ea:0e:3d:43:b8:22: 41:4d:7e:74:de:cf:39:5e:5a:0b:7c:f0:61:b9:2c:b8:36:80: 01:5a:59:f6:a7:5f:9a:3c:66:73:5b:15:71:c3:88:64:c6:e5: 20:02:73:80:9e:1a:65:df:c1:62:f0:3d:a1:ca:d8:f2:6d:ed: 79:f9:d5:e5:b1:4e:67:ea:d5:ce:a6:83:80:a2:9b:04:1e:ff: 52:ab:40:84:43:c2:ee:1d:a1:78:da:b2:00:21:a5:ed:f0:57: 2c:f8:c2:f7:a6:3c:1f:1d:e7:ab:c1:e5:a6:02:c1:71:00:4d: 3d:b6:f9:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdQRjbbMVT6xTgtHh4628DMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWM2ODNjYjFlYjljMGY0OWI5NjdlM2JkOWI4Yjg0Y2Yw OTliYjgwHhcNMjUwNjA4MTYwMTA4WhcNMjUwNjA5MTYwMTA4WjAzMTEwLwYDVQQD EygzZjFlM2M0YmUwYWQzODE2MTI2YmNjMDUxNTBjZTM0MzU3Nzg4NmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYtSdwwsD+fyOvILFSLdoa92Fwnj j6DGb+SecMsvVW2Eqp1O4D/Z50c35z5QPTP/oA/JLmiE9xZ7zGLBfJ2JKCOK9/OB G52jWL21n1vkxKb/vGcIjcOxVW/478uej9Up/xEX+qGWy21RkxJKl3dNvFoSfYaX uvI5gaJ3FN1rQI3vrar04OsvcKwOKwj3BS8cubVTiGQky1fEJDrBNauom3uBi4WQ ArSqNz9EeZek9lsQYvL335x8a0aiSECnDhSeAZ4Hvk9ccWbKBQfajFRR3e76mWY3 HHl5/O7pBY50pZmC+brdiCiekColLhXS6vrk3PeUMIumEU6PTVMdGwObBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD8ePEvgrTgWEmvMBRUM40NXeIbPMB8GA1UdIwQY MBaAFMRcaDyx65wPSbln472bi4TPCZu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYt ODhkMmRmMTBkMTViLzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYtODhkMmRmMTBkMTVi LzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWY5JXb8E 122WR0DsLmbCmivs7MV/vZPwxf/hA6F5LWUJfvAzMV09DN/w9nGT+67z9SUfvF8N Z7GHJ2u2fI1ACTHgOdCPd11iH+4WKUBG7WARMGHe5tBi827BMX4Lx/DxNGxTZShO hyrT47xmBXhOmu//iCDFo+iBlFSEg/LZTtPp5LB0PyQbrLjH6g49Q7giQU1+dN7P OV5aC3zwYbksuDaAAVpZ9qdfmjxmc1sVccOIZMblIAJzgJ4aZd/BYvA9ocrY8m3t efnV5bFOZ+rVzqaDgKKbBB7/UqtAhEPC7h2heNqyACGl7fBXLPjC96Y8Hx3nq8Hl pgLBcQBNPbb51A== -----END CERTIFICATE-----Generated at Sun Jun 8 23:02:22 2025 by rpki-client