$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft File: C1Vqy187lhtcwkoplfNO6R953BY.mft (raw, json) Hash identifier: 2Vh3SwjfNkwAvjX+ne1mM8i7qzvDad2a6QEyGEs2YIM= Subject key identifier: A7:48:E6:9F:41:0B:1F:13:84:87:FC:71:55:5B:3B:C2:05:6E:79:E7 Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Certificate serial: 01976283589F14D4C65808689358CA951582 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft Manifest number: 15A8 Signing time: Thu 12 Jun 2025 05:01:04 +0000 Manifest this update: Thu 12 Jun 2025 05:01:04 +0000 Manifest next update: Fri 13 Jun 2025 05:01:04 +0000 Files and hashes: 1: 1-Ss8y57Ehk6R15I50N_Ja4NuZFg.roa (hash: E3Xe56Uq6qf9xoMjHrb8Tp1z8LD2YFv8nmr/lvS0Ysc=) 2: 7AEnLXSB1YaAfgMGKA-kT_KobA0.roa (hash: 5AKbmZJGLK7UnAttUygeGitl8Ob/t23TtR2u6flJg/c=) 3: C1Vqy187lhtcwkoplfNO6R953BY.crl (hash: ThGe0yQU4esNDvSlmlPj/9XeJxeMI68KzsmnrUyKt9g=) 4: QmJcakWH1CARNak1a46tlM2ytyE.roa (hash: v8cGIzbtBdgrBgCJGkJKF+awirm33gkAmHePtYlNHWc=) 5: Ufuhf0_wn9lleED4LQKhcdXKZLY.roa (hash: f4Ng8ktmuEshcdJiOHZjPJAwq7/nitwlptaYvO0/DHU=) 6: XFCPjaaIP04nEp4Rlitk1zUJ8nA.roa (hash: 9Hrw22EfwJiPVEvx9iOeq1/U32N9ujjXKgQDN7kPNnY=) 7: bzDr7kn2LfhqjYsoZQLZ-uHwvQI.roa (hash: ETCcL6Lmgpdi6iyG4gf+W9Umfg+Mzqif1q2dVBD62g4=) 8: e38Kg8iCKqOVcGx8ZyJTu1IrTwc.roa (hash: yWG15kNG/dsh9zB22D/eO5GMJKGaRyWMaUm0mhvs7uI=) 9: irmafOolxajIUAAu4T-WCDDYGuE.roa (hash: B2dN9t4bHqneaqFXcxWnKXREXDW4ZcJ7+Z7DVVfobpU=) 10: n7XNxY-sa2O-8oAFuyK34I07FxU.roa (hash: 7HgkBdxidw6ZJ5Ks5cBFOnu0xmnIR/zyHKV2JfMTPLM=) 11: nikI6XTmNMIUEKKUIOhaKpaRfTY.roa (hash: 3OTWr1t7MNgVLjxLDAQClENVYG0IMxrFr2dhuyh8iLU=) 12: pkcx_-V9HNVC8HzviAJSCvzoxJg.roa (hash: V4tEVQoUWw/5eT8C/Z8qztjVCTQ8kgfSRy2bETB0V2w=) 13: wq6Oybyru5PjGYeKDTrdRRIxOok.roa (hash: +NxS5vTeW/Lv7n0fJHcbikUT3d8Gb7EPQOKgAIeQnGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Jun 2025 05:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:62:83:58:9f:14:d4:c6:58:08:68:93:58:ca:95:15:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Validity Not Before: Jun 12 05:01:04 2025 GMT Not After : Jun 13 05:01:04 2025 GMT Subject: CN=a748e69f410b1f138487fc71555b3bc2056e79e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ae:51:c5:da:69:fe:63:4f:e0:fe:eb:1e:b8: 59:60:ca:e1:d2:11:75:e7:27:61:cd:a9:c7:be:b3: 77:d7:5f:9c:85:ac:6d:aa:42:8f:5e:aa:37:6d:ba: 6a:17:60:93:51:6e:b5:5c:fb:30:88:05:a1:09:72: 3c:4a:65:10:e2:17:af:79:ac:78:8f:6b:74:e7:b3: 1b:36:7a:d2:0e:c1:89:a6:09:86:bc:b1:9e:e6:0a: 36:34:7f:79:dc:df:ba:0b:67:5a:b9:cf:5f:8b:94: bb:b0:69:44:af:82:3e:b2:aa:76:8c:98:05:0a:36: c1:43:42:25:f8:18:b0:bc:1f:a9:42:9f:62:12:dc: 46:87:b7:03:b9:f5:76:e0:09:b3:54:c8:fd:27:cd: bc:8b:de:38:19:65:34:8a:b0:84:79:92:8a:a2:16: bc:c1:7d:31:12:85:c4:86:a5:0c:3d:70:ad:5c:ad: e1:81:37:77:5e:4f:49:d8:5e:54:8d:47:9c:74:1d: 5a:61:2f:ab:06:4c:85:13:9c:c3:a5:e8:d4:f0:91: f7:6c:1b:06:c5:6c:56:4f:8b:2d:3c:cf:13:23:55: db:41:58:86:e8:0d:bd:e1:4d:cd:e1:d2:0b:97:23: 9f:6f:74:35:9b:d4:79:ed:54:81:23:5e:37:95:ea: 5b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:48:E6:9F:41:0B:1F:13:84:87:FC:71:55:5B:3B:C2:05:6E:79:E7 X509v3 Authority Key Identifier: keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:3b:f0:6b:ae:47:6c:b4:63:b7:33:09:3e:48:f9:1b:41:3b: 5b:f5:2a:08:76:19:fe:c6:cc:1e:36:03:90:e6:7f:8c:65:6c: 4e:77:86:ba:5a:16:fb:0e:00:a2:3c:2c:e4:85:07:16:84:84: 18:23:e1:18:08:2a:67:c2:3d:c8:87:9b:ca:30:83:4f:0a:6e: 73:dd:db:95:dc:2a:2a:61:76:49:92:24:53:4c:61:73:c8:5a: 06:0e:53:3a:54:b9:37:9e:55:89:de:f3:ad:41:2a:22:6a:38: ec:39:a7:f3:fc:03:8f:43:00:36:0d:38:ad:4c:39:38:dd:54: 48:dd:45:1f:4c:e2:3a:b6:38:04:c4:52:97:93:c8:6c:96:d9: 41:9d:f4:29:38:a5:04:95:e1:b7:a7:06:f2:12:9e:a0:af:e9: aa:98:8c:2f:3b:ce:3c:ca:fc:93:2b:32:07:e2:40:33:87:66: 3a:20:c9:2e:90:1c:06:ab:36:2e:16:8a:4c:ae:45:71:68:86: a4:04:57:fe:d7:67:8c:8c:ec:66:f6:f8:2f:7d:2d:ac:b4:c2: a0:f4:81:06:ae:02:26:8c:86:4a:b2:06:e6:be:c2:f4:84:9f: 2d:1b:0f:c0:4c:6d:10:8e:aa:2c:d3:96:eb:85:6c:dc:d3:14: 97:56:ae:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdig1ifFNTGWAhok1jKlRWCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNTU2YWNiNWYzYjk2MWI1Y2MyNGEyOTk1ZjM0ZWU5MWY3 OWRjMTYwHhcNMjUwNjEyMDUwMTA0WhcNMjUwNjEzMDUwMTA0WjAzMTEwLwYDVQQD EyhhNzQ4ZTY5ZjQxMGIxZjEzODQ4N2ZjNzE1NTViM2JjMjA1NmU3OWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK5Rxdpp/mNP4P7rHrhZYMrh0hF1 5ydhzanHvrN311+chaxtqkKPXqo3bbpqF2CTUW61XPswiAWhCXI8SmUQ4heveax4 j2t057MbNnrSDsGJpgmGvLGe5go2NH953N+6C2dauc9fi5S7sGlEr4I+sqp2jJgF CjbBQ0Il+BiwvB+pQp9iEtxGh7cDufV24AmzVMj9J828i944GWU0irCEeZKKoha8 wX0xEoXEhqUMPXCtXK3hgTd3Xk9J2F5UjUecdB1aYS+rBkyFE5zDpejU8JH3bBsG xWxWT4stPM8TI1XbQViG6A294U3N4dILlyOfb3Q1m9R57VSBI143lepbvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdI5p9BCx8ThIf8cVVbO8IFbnnnMB8GA1UdIwQY MBaAFAtVastfO5YbXMJKKZXzTukfedwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEt ZDJiYmYzN2RhYmI0LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEtZDJiYmYzN2RhYmI0 LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUTvwa65H bLRjtzMJPkj5G0E7W/UqCHYZ/sbMHjYDkOZ/jGVsTneGuloW+w4Aojws5IUHFoSE GCPhGAgqZ8I9yIebyjCDTwpuc93bldwqKmF2SZIkU0xhc8haBg5TOlS5N55Vid7z rUEqImo47Dmn8/wDj0MANg04rUw5ON1USN1FH0ziOrY4BMRSl5PIbJbZQZ30KTil BJXht6cG8hKeoK/pqpiMLzvOPMr8kysyB+JAM4dmOiDJLpAcBqs2LhaKTK5FcWiG pARX/tdnjIzsZvb4L30trLTCoPSBBq4CJoyGSrIG5r7C9ISfLRsPwExtEI6qLNOW 64Vs3NMUl1aueA== -----END CERTIFICATE-----Generated at Thu Jun 12 12:38:28 2025 by rpki-client