$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft File: C1Vqy187lhtcwkoplfNO6R953BY.mft (raw, json) Hash identifier: pICphACAqzk+LQjq6FH9lUObnk6+XfHlx9PFaV4/HL8= Subject key identifier: A0:97:97:4A:01:18:47:0F:91:9D:37:34:E7:91:06:6A:AC:A6:0B:AA Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Certificate serial: 019758DAE78FB620DD4AAD829D12CEB64A29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft Manifest number: 15A3 Signing time: Tue 10 Jun 2025 08:00:30 +0000 Manifest this update: Tue 10 Jun 2025 08:00:30 +0000 Manifest next update: Wed 11 Jun 2025 08:00:30 +0000 Files and hashes: 1: 1-Ss8y57Ehk6R15I50N_Ja4NuZFg.roa (hash: E3Xe56Uq6qf9xoMjHrb8Tp1z8LD2YFv8nmr/lvS0Ysc=) 2: 7AEnLXSB1YaAfgMGKA-kT_KobA0.roa (hash: 5AKbmZJGLK7UnAttUygeGitl8Ob/t23TtR2u6flJg/c=) 3: C1Vqy187lhtcwkoplfNO6R953BY.crl (hash: if8LyMdEFysIuACpxNFXZURCdTEyj2fdhSYimtoVp0M=) 4: QmJcakWH1CARNak1a46tlM2ytyE.roa (hash: v8cGIzbtBdgrBgCJGkJKF+awirm33gkAmHePtYlNHWc=) 5: Ufuhf0_wn9lleED4LQKhcdXKZLY.roa (hash: f4Ng8ktmuEshcdJiOHZjPJAwq7/nitwlptaYvO0/DHU=) 6: XFCPjaaIP04nEp4Rlitk1zUJ8nA.roa (hash: 9Hrw22EfwJiPVEvx9iOeq1/U32N9ujjXKgQDN7kPNnY=) 7: bzDr7kn2LfhqjYsoZQLZ-uHwvQI.roa (hash: ETCcL6Lmgpdi6iyG4gf+W9Umfg+Mzqif1q2dVBD62g4=) 8: e38Kg8iCKqOVcGx8ZyJTu1IrTwc.roa (hash: yWG15kNG/dsh9zB22D/eO5GMJKGaRyWMaUm0mhvs7uI=) 9: irmafOolxajIUAAu4T-WCDDYGuE.roa (hash: B2dN9t4bHqneaqFXcxWnKXREXDW4ZcJ7+Z7DVVfobpU=) 10: n7XNxY-sa2O-8oAFuyK34I07FxU.roa (hash: 7HgkBdxidw6ZJ5Ks5cBFOnu0xmnIR/zyHKV2JfMTPLM=) 11: nikI6XTmNMIUEKKUIOhaKpaRfTY.roa (hash: 3OTWr1t7MNgVLjxLDAQClENVYG0IMxrFr2dhuyh8iLU=) 12: pkcx_-V9HNVC8HzviAJSCvzoxJg.roa (hash: V4tEVQoUWw/5eT8C/Z8qztjVCTQ8kgfSRy2bETB0V2w=) 13: wq6Oybyru5PjGYeKDTrdRRIxOok.roa (hash: +NxS5vTeW/Lv7n0fJHcbikUT3d8Gb7EPQOKgAIeQnGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Jun 2025 08:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:58:da:e7:8f:b6:20:dd:4a:ad:82:9d:12:ce:b6:4a:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Validity Not Before: Jun 10 08:00:30 2025 GMT Not After : Jun 11 08:00:30 2025 GMT Subject: CN=a097974a0118470f919d3734e791066aaca60baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:20:54:40:75:f3:68:6f:18:36:f7:60:d9:45: fa:f8:8b:f4:86:11:cb:b8:f0:2b:e9:fc:97:dd:71: c7:8c:87:b1:3e:f1:2f:6d:29:78:8b:10:0c:66:37: 01:5e:e1:2b:8d:61:66:d7:a7:69:f9:b9:45:33:15: 62:9b:06:60:29:ed:63:0f:05:ef:ac:00:13:98:db: 5c:e7:c9:ae:25:1f:33:86:55:e7:7c:fb:d6:e9:e3: ca:ca:ba:62:67:12:00:4a:b3:41:8b:05:24:8d:78: 77:a0:2d:06:da:0b:13:33:bb:6e:89:5e:3a:c4:30: c9:4e:48:2e:ca:72:f2:a9:63:2b:73:6b:60:3d:54: e2:af:8c:4a:9b:cb:83:e2:29:2d:80:0f:27:36:63: cf:a1:73:13:86:e8:97:7e:0b:f8:a4:53:91:5c:ef: 03:7d:30:fd:ae:1a:e4:b8:0b:33:6e:db:52:37:60: 3c:08:41:d7:6a:d2:8a:e5:c9:6d:53:2e:bf:bd:e7: 7c:5e:01:a5:f1:54:bf:78:f5:24:42:43:54:07:70: 4a:c5:7c:91:69:35:13:b8:2e:f3:54:55:d4:60:ee: 06:88:5e:4f:03:85:a7:fb:84:a9:6c:01:1a:b0:d8: 5e:90:cf:48:0c:15:d8:f3:5d:5b:32:9d:c9:ba:aa: 01:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:97:97:4A:01:18:47:0F:91:9D:37:34:E7:91:06:6A:AC:A6:0B:AA X509v3 Authority Key Identifier: keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:53:70:7f:0c:5f:07:8e:69:f3:d7:72:bb:4a:c0:74:7f:b1: be:95:05:46:9d:5c:1a:2d:ea:2e:28:9e:40:81:17:cf:4d:a4: d2:8b:ca:1d:f8:1d:31:7b:5c:da:8e:c8:58:1a:f9:70:34:e1: c1:b9:7f:4e:19:ba:9b:85:01:6d:1c:01:f4:5d:92:fe:d4:a2: 1d:d2:f4:f2:67:da:47:78:68:07:60:0c:91:2b:1b:b8:6d:4e: 89:cc:4c:59:d8:43:d8:d4:d4:8f:dc:0c:57:cf:49:4e:7c:be: 86:ea:e8:fc:c1:14:ae:92:f8:f6:77:47:26:b6:74:8f:59:02: e4:cb:b6:82:01:1c:23:2d:99:d7:e2:a8:0b:5e:56:06:ba:29: 04:88:56:cf:cb:ad:af:5d:72:22:8d:55:e9:1c:17:7f:f3:87: 19:08:48:e6:b9:16:da:e7:84:ac:84:ce:c1:f3:f4:f9:26:25: cb:ff:56:6f:9f:cb:04:e3:74:10:d1:01:9b:60:de:30:19:41: ec:1f:f6:93:3e:f2:c2:77:52:93:2b:ae:4c:df:82:1e:9a:99: f3:27:de:c2:7f:f5:d8:e6:2f:0a:b1:a9:db:1c:60:2e:e8:bd: 7c:c4:89:9f:e6:a5:15:c7:fc:e7:e0:dc:7e:70:ab:2f:a3:ee: 08:42:ee:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdY2uePtiDdSq2CnRLOtkopMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNTU2YWNiNWYzYjk2MWI1Y2MyNGEyOTk1ZjM0ZWU5MWY3 OWRjMTYwHhcNMjUwNjEwMDgwMDMwWhcNMjUwNjExMDgwMDMwWjAzMTEwLwYDVQQD EyhhMDk3OTc0YTAxMTg0NzBmOTE5ZDM3MzRlNzkxMDY2YWFjYTYwYmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSBUQHXzaG8YNvdg2UX6+Iv0hhHL uPAr6fyX3XHHjIexPvEvbSl4ixAMZjcBXuErjWFm16dp+blFMxVimwZgKe1jDwXv rAATmNtc58muJR8zhlXnfPvW6ePKyrpiZxIASrNBiwUkjXh3oC0G2gsTM7tuiV46 xDDJTkguynLyqWMrc2tgPVTir4xKm8uD4iktgA8nNmPPoXMThuiXfgv4pFORXO8D fTD9rhrkuAszbttSN2A8CEHXatKK5cltUy6/ved8XgGl8VS/ePUkQkNUB3BKxXyR aTUTuC7zVFXUYO4GiF5PA4Wn+4SpbAEasNhekM9IDBXY811bMp3JuqoB5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCXl0oBGEcPkZ03NOeRBmqspguqMB8GA1UdIwQY MBaAFAtVastfO5YbXMJKKZXzTukfedwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEt ZDJiYmYzN2RhYmI0LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEtZDJiYmYzN2RhYmI0 LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVNwfwxf B45p89dyu0rAdH+xvpUFRp1cGi3qLiieQIEXz02k0ovKHfgdMXtc2o7IWBr5cDTh wbl/Thm6m4UBbRwB9F2S/tSiHdL08mfaR3hoB2AMkSsbuG1OicxMWdhD2NTUj9wM V89JTny+huro/MEUrpL49ndHJrZ0j1kC5Mu2ggEcIy2Z1+KoC15WBropBIhWz8ut r11yIo1V6RwXf/OHGQhI5rkW2ueErITOwfP0+SYly/9Wb5/LBON0ENEBm2DeMBlB 7B/2kz7ywndSkyuuTN+CHpqZ8yfewn/12OYvCrGp2xxgLui9fMSJn+alFcf85+Dc fnCrL6PuCELuEw== -----END CERTIFICATE-----Generated at Tue Jun 10 17:05:54 2025 by rpki-client