$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft File: h3e1s29m4TxDiMmTTaUHhWUV0HM.mft (raw, json) Hash identifier: b9vBSVZr0ub9nVeKBHjM3vxmxmCds9pxnlo8wCI8XHk= Subject key identifier: 2C:FF:15:8D:4F:68:B4:34:66:B5:A5:39:E1:1D:4B:DB:23:5B:78:72 Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073 Certificate serial: 0197488CF8B449564F5F804FCAE6088660B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft Manifest number: 1589 Signing time: Sat 07 Jun 2025 04:01:27 +0000 Manifest this update: Sat 07 Jun 2025 04:01:27 +0000 Manifest next update: Sun 08 Jun 2025 04:01:27 +0000 Files and hashes: 1: A6JGXr1SyvHwPS6KzQQ8jkJldSU.roa (hash: VUYWyhNS6ep9E7uE71FApUlIqX9LiZIrh4n1ahAsDso=) 2: TWqw0MHPHKoktRTg5xIAtx78yEM.roa (hash: PUFyi4vEY3nAKmSSQP1jmjE/95RjFLcOq0y69mlpJOM=) 3: V8TNai625jKsZmcQ_WZGrCSKrE4.roa (hash: vysxGoIRN63RAVmh7o1GuXI9idOSf2H3bNvDZcwjEdY=) 4: e6_LhXTjf-f7BeHN6H1yNQzFGts.roa (hash: li+C+e/TyH8gT/zIILB28hzFIhULplGnnZiYiHV9ZRc=) 5: gSW8bbfsJ2jQqNlN9dZhEGJFXP8.roa (hash: vU4Z2mH5UQmCsli4v0J2JenJSa7jKRcKq2cUWRszffQ=) 6: h3e1s29m4TxDiMmTTaUHhWUV0HM.crl (hash: r0IV+kq4uGO/mILuD8eYR/GtGHfTdgV3Awqw1DPH8Vo=) 7: i0jLZUHWlEbTjItngq0hMz6l6J0.roa (hash: +fs8xaq1rUOg67Y/1DC1FdTxOQepuB3UaDQqJ+epLzo=) 8: mYsvImsoUU3Ub9pNivjve1CZzdk.roa (hash: 6hty2hcbqDF/bBkU2gmepu7xCrLxFUdqyzgzAZcFQt8=) 9: mcMvNLDOLrmNQ78kKv9_JRA7DZE.roa (hash: VPPZszck1h4O1z0bSD4PbxyUsa9F/mGv1ZkFIvAMZag=) 10: rIHZb_5Mc64A87xwROb5WoKPTaQ.roa (hash: h28IpYVJGdPeChoNExuao8goV9hXIxbKmOle/GHbji8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:48:8c:f8:b4:49:56:4f:5f:80:4f:ca:e6:08:86:60:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073 Validity Not Before: Jun 7 04:01:27 2025 GMT Not After : Jun 8 04:01:27 2025 GMT Subject: CN=2cff158d4f68b43466b5a539e11d4bdb235b7872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:50:ab:85:4b:57:1b:eb:b6:19:a6:bf:18:84: 52:0c:c4:d7:95:ce:e9:e1:38:ef:52:d2:73:b1:7a: 4f:13:39:34:75:5d:45:23:6d:dc:0d:62:dc:9c:0a: a6:ab:5b:eb:a7:e1:40:1f:53:c2:b5:06:e4:9e:7d: 99:14:15:ca:3d:5b:19:f4:5f:0b:1e:a4:c4:3d:06: 00:a7:d3:b6:22:4c:08:8a:78:10:6a:56:a4:64:24: 37:49:c3:5e:54:fb:5f:5d:31:36:bd:67:63:34:04: 81:24:8a:83:41:a2:8c:24:7c:72:dc:8a:74:af:b6: 9b:f3:0f:ee:98:59:29:1f:79:12:24:57:b5:de:8e: ec:6c:40:05:43:42:dd:9b:0d:54:1f:be:50:7a:4d: 0b:dd:cd:1b:07:10:22:00:26:44:8e:be:c8:1c:b0: 31:b1:8a:51:ee:c8:d9:87:af:57:62:e3:8e:39:af: 5e:e2:b1:45:36:08:82:6a:18:b6:f4:a3:09:87:0e: 4c:e6:c4:26:cf:a1:97:96:72:73:64:9b:39:ac:05: 77:fc:db:22:4b:0d:5e:11:ce:e3:30:3a:35:01:5b: 7e:e9:67:a7:87:d4:91:36:26:a8:bd:ae:50:7c:d0: 6a:95:2b:88:59:91:09:18:0c:0f:4c:c7:b6:b2:e7: d1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:FF:15:8D:4F:68:B4:34:66:B5:A5:39:E1:1D:4B:DB:23:5B:78:72 X509v3 Authority Key Identifier: keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:8f:a9:d2:40:dc:9f:09:bb:35:52:ba:74:79:f3:63:63:7d: 87:65:c5:d9:9a:24:54:7b:c7:4c:69:0b:1b:9c:17:46:70:a5: 7c:d3:26:98:d5:63:22:01:aa:cd:b6:19:70:b0:52:c5:63:d1: d5:25:20:36:cb:bc:6a:97:97:67:37:05:a7:8d:0f:4f:4d:ea: 67:e5:ed:95:b7:21:0c:bc:75:6f:c6:33:4b:f6:6a:30:46:d4: 8e:b0:5e:bb:7c:9a:d7:9c:98:22:16:3e:e2:8d:fd:c1:f3:d8: c9:4d:d0:39:fa:24:7b:e0:8e:1b:3d:67:6f:3f:06:35:8b:4f: 16:cf:d1:2e:34:18:90:21:10:6f:e9:7a:9a:9d:fc:6d:de:4b: a5:57:98:41:c5:e2:2d:2b:b1:72:c8:a0:66:ab:ce:1b:7c:9a: 65:1c:d2:41:65:17:04:d9:ce:3c:3d:27:67:82:cd:26:40:b9: 1f:ae:ee:61:f6:5e:64:18:64:8b:54:b6:33:18:52:74:d2:0b: 55:eb:39:83:98:66:ff:83:f0:6a:df:f0:03:1c:c8:84:be:4b: ec:a8:88:b4:9c:63:09:77:51:d6:67:2c:9a:42:1c:f0:da:82: 9f:98:d6:41:46:ba:5e:02:9a:d0:0a:cd:79:e5:0f:a0:2f:dd: 61:d9:05:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdIjPi0SVZPX4BPyuYIhmC3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx NWQwNzMwHhcNMjUwNjA3MDQwMTI3WhcNMjUwNjA4MDQwMTI3WjAzMTEwLwYDVQQD EygyY2ZmMTU4ZDRmNjhiNDM0NjZiNWE1MzllMTFkNGJkYjIzNWI3ODcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1CrhUtXG+u2Gaa/GIRSDMTXlc7p 4TjvUtJzsXpPEzk0dV1FI23cDWLcnAqmq1vrp+FAH1PCtQbknn2ZFBXKPVsZ9F8L HqTEPQYAp9O2IkwIingQalakZCQ3ScNeVPtfXTE2vWdjNASBJIqDQaKMJHxy3Ip0 r7ab8w/umFkpH3kSJFe13o7sbEAFQ0Ldmw1UH75Qek0L3c0bBxAiACZEjr7IHLAx sYpR7sjZh69XYuOOOa9e4rFFNgiCahi29KMJhw5M5sQmz6GXlnJzZJs5rAV3/Nsi Sw1eEc7jMDo1AVt+6Wenh9SRNiaova5QfNBqlSuIWZEJGAwPTMe2sufRJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCz/FY1PaLQ0ZrWlOeEdS9sjW3hyMB8GA1UdIwQY MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt ZWQxZjMwY2MxYzU3LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3 LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4+p0kDc nwm7NVK6dHnzY2N9h2XF2ZokVHvHTGkLG5wXRnClfNMmmNVjIgGqzbYZcLBSxWPR 1SUgNsu8apeXZzcFp40PT03qZ+XtlbchDLx1b8YzS/ZqMEbUjrBeu3ya15yYIhY+ 4o39wfPYyU3QOfoke+COGz1nbz8GNYtPFs/RLjQYkCEQb+l6mp38bd5LpVeYQcXi LSuxcsigZqvOG3yaZRzSQWUXBNnOPD0nZ4LNJkC5H67uYfZeZBhki1S2MxhSdNIL Ves5g5hm/4Pwat/wAxzIhL5L7KiItJxjCXdR1mcsmkIc8NqCn5jWQUa6XgKa0ArN eeUPoC/dYdkFWw== -----END CERTIFICATE-----Generated at Sat Jun 7 09:16:36 2025 by rpki-client