$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft File: C1Vqy187lhtcwkoplfNO6R953BY.mft (raw, json) Hash identifier: gHa/EAcggZTAkKrolb/WDmjaOlFlCHEA9zi4KiAS9HY= Subject key identifier: 93:86:04:DE:ED:DC:9C:49:80:A6:A3:74:35:34:AE:F8:8E:2E:04:38 Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Certificate serial: 0197665FCB2B6930B6F19BD1F5FEC4CA71AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft Manifest number: 15AA Signing time: Thu 12 Jun 2025 23:00:43 +0000 Manifest this update: Thu 12 Jun 2025 23:00:43 +0000 Manifest next update: Fri 13 Jun 2025 23:00:43 +0000 Files and hashes: 1: 1-Ss8y57Ehk6R15I50N_Ja4NuZFg.roa (hash: E3Xe56Uq6qf9xoMjHrb8Tp1z8LD2YFv8nmr/lvS0Ysc=) 2: 7AEnLXSB1YaAfgMGKA-kT_KobA0.roa (hash: 5AKbmZJGLK7UnAttUygeGitl8Ob/t23TtR2u6flJg/c=) 3: C1Vqy187lhtcwkoplfNO6R953BY.crl (hash: Ovd4aDaCfYfVUosJX41FlQZ00biQg/u5h1OMDtP5N9Q=) 4: QmJcakWH1CARNak1a46tlM2ytyE.roa (hash: v8cGIzbtBdgrBgCJGkJKF+awirm33gkAmHePtYlNHWc=) 5: Ufuhf0_wn9lleED4LQKhcdXKZLY.roa (hash: f4Ng8ktmuEshcdJiOHZjPJAwq7/nitwlptaYvO0/DHU=) 6: XFCPjaaIP04nEp4Rlitk1zUJ8nA.roa (hash: 9Hrw22EfwJiPVEvx9iOeq1/U32N9ujjXKgQDN7kPNnY=) 7: bzDr7kn2LfhqjYsoZQLZ-uHwvQI.roa (hash: ETCcL6Lmgpdi6iyG4gf+W9Umfg+Mzqif1q2dVBD62g4=) 8: e38Kg8iCKqOVcGx8ZyJTu1IrTwc.roa (hash: yWG15kNG/dsh9zB22D/eO5GMJKGaRyWMaUm0mhvs7uI=) 9: irmafOolxajIUAAu4T-WCDDYGuE.roa (hash: B2dN9t4bHqneaqFXcxWnKXREXDW4ZcJ7+Z7DVVfobpU=) 10: n7XNxY-sa2O-8oAFuyK34I07FxU.roa (hash: 7HgkBdxidw6ZJ5Ks5cBFOnu0xmnIR/zyHKV2JfMTPLM=) 11: nikI6XTmNMIUEKKUIOhaKpaRfTY.roa (hash: 3OTWr1t7MNgVLjxLDAQClENVYG0IMxrFr2dhuyh8iLU=) 12: pkcx_-V9HNVC8HzviAJSCvzoxJg.roa (hash: V4tEVQoUWw/5eT8C/Z8qztjVCTQ8kgfSRy2bETB0V2w=) 13: wq6Oybyru5PjGYeKDTrdRRIxOok.roa (hash: +NxS5vTeW/Lv7n0fJHcbikUT3d8Gb7EPQOKgAIeQnGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Jun 2025 22:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:66:5f:cb:2b:69:30:b6:f1:9b:d1:f5:fe:c4:ca:71:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Validity Not Before: Jun 12 23:00:43 2025 GMT Not After : Jun 13 23:00:43 2025 GMT Subject: CN=938604deeddc9c4980a6a3743534aef88e2e0438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6d:a8:0e:63:93:89:11:6b:6e:3c:3b:08:32: df:ac:ce:af:12:b4:2a:73:35:77:f3:25:6c:ec:73: af:ae:6e:35:43:c6:a5:29:17:8c:92:2e:ab:1c:19: 32:2c:34:20:e5:8c:80:e4:ee:cb:51:65:71:8f:5b: e3:5a:99:c6:8f:82:29:5b:c1:7b:50:e8:74:75:9f: 4e:85:e0:a8:37:2f:91:e2:a0:e5:81:d1:0c:a0:19: 42:b5:f7:55:e6:de:a6:b6:c6:5e:8a:94:ff:55:97: e9:ee:d9:f8:c0:e0:f3:c2:4e:c7:fb:04:6b:c4:1e: 05:48:39:d7:cf:eb:e7:12:ae:01:5a:7c:f1:06:17: c4:46:32:81:31:58:31:9f:a7:24:d3:55:1a:b7:11: fb:15:8d:63:97:22:c4:10:c2:c0:70:b0:3d:11:4b: be:4a:68:10:b8:7e:92:f3:3d:9b:c4:29:31:db:84: 44:03:1b:e9:51:4f:a3:71:16:89:6f:24:dc:d7:5f: ba:18:93:54:4c:bf:48:e0:dc:35:37:e8:87:68:9f: b4:90:7e:ec:62:a5:5c:1e:40:5f:3b:b6:ab:4a:42: 19:b8:d2:87:c3:12:8b:94:92:02:43:8d:cc:84:45: 32:81:4d:43:77:86:bf:0a:97:5e:3c:1f:54:b2:2f: d5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:86:04:DE:ED:DC:9C:49:80:A6:A3:74:35:34:AE:F8:8E:2E:04:38 X509v3 Authority Key Identifier: keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:53:0a:06:30:18:10:5c:5a:74:57:d7:3f:3b:52:fa:cd:f8: 38:38:ec:c8:90:ad:ec:47:26:bd:93:9b:36:0c:66:62:58:c6: 99:f1:77:88:ea:a2:2f:1b:80:0b:cf:09:e7:9e:28:76:a2:74: 70:e4:61:82:a9:cd:50:19:ad:a6:50:6c:b0:2c:46:7e:c1:ac: c1:dd:02:1e:da:c2:db:06:c8:15:eb:f8:09:09:5e:8e:cd:2e: cc:90:e0:af:1d:d2:20:28:09:bd:82:ac:0c:53:aa:39:e8:a8: e8:e2:d1:09:77:42:31:02:b0:61:ce:3f:c2:25:c6:64:c9:0c: ad:e3:a7:4a:94:76:79:54:4e:7a:26:68:f4:9d:1c:c4:52:14: fb:06:84:e6:ae:1a:ec:13:f7:7b:8c:3b:68:cb:24:34:c5:74: 51:a4:8c:91:a1:6a:0e:6e:0d:df:cf:50:b8:a3:13:fb:3e:da: 4d:85:18:16:ca:e9:6e:27:cc:d5:71:7f:4f:c2:f0:cc:8d:56: 9e:1b:29:df:d8:f3:59:fe:a6:56:30:2e:bb:80:4b:3f:50:81: 3d:9e:d9:5b:59:79:ee:95:00:1a:f3:a4:9e:91:5c:c7:da:52: 8f:08:ab:dd:cf:7f:c6:04:b6:d8:a1:81:24:b5:89:49:b2:b4: 4f:dd:64:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdmX8sraTC28ZvR9f7EynGqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNTU2YWNiNWYzYjk2MWI1Y2MyNGEyOTk1ZjM0ZWU5MWY3 OWRjMTYwHhcNMjUwNjEyMjMwMDQzWhcNMjUwNjEzMjMwMDQzWjAzMTEwLwYDVQQD Eyg5Mzg2MDRkZWVkZGM5YzQ5ODBhNmEzNzQzNTM0YWVmODhlMmUwNDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm2oDmOTiRFrbjw7CDLfrM6vErQq czV38yVs7HOvrm41Q8alKReMki6rHBkyLDQg5YyA5O7LUWVxj1vjWpnGj4IpW8F7 UOh0dZ9OheCoNy+R4qDlgdEMoBlCtfdV5t6mtsZeipT/VZfp7tn4wODzwk7H+wRr xB4FSDnXz+vnEq4BWnzxBhfERjKBMVgxn6ck01UatxH7FY1jlyLEEMLAcLA9EUu+ SmgQuH6S8z2bxCkx24REAxvpUU+jcRaJbyTc11+6GJNUTL9I4Nw1N+iHaJ+0kH7s YqVcHkBfO7arSkIZuNKHwxKLlJICQ43MhEUygU1Dd4a/CpdePB9Usi/VVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOGBN7t3JxJgKajdDU0rviOLgQ4MB8GA1UdIwQY MBaAFAtVastfO5YbXMJKKZXzTukfedwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEt ZDJiYmYzN2RhYmI0LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEtZDJiYmYzN2RhYmI0 LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhlMKBjAY EFxadFfXPztS+s34ODjsyJCt7EcmvZObNgxmYljGmfF3iOqiLxuAC88J554odqJ0 cORhgqnNUBmtplBssCxGfsGswd0CHtrC2wbIFev4CQlejs0uzJDgrx3SICgJvYKs DFOqOeio6OLRCXdCMQKwYc4/wiXGZMkMreOnSpR2eVROeiZo9J0cxFIU+waE5q4a 7BP3e4w7aMskNMV0UaSMkaFqDm4N389QuKMT+z7aTYUYFsrpbifM1XF/T8LwzI1W nhsp39jzWf6mVjAuu4BLP1CBPZ7ZW1l57pUAGvOknpFcx9pSjwir3c9/xgS22KGB JLWJSbK0T91ksg== -----END CERTIFICATE-----Generated at Fri Jun 13 01:40:29 2025 by rpki-client