$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft File: 6i0QK2ESsNmouO66xLl8gZ-XxgY.mft (raw, json) Hash identifier: w0ye5BpHetiUqNx2ODgRgFgWdYxYB2D3BWHDtslsgLQ= Subject key identifier: EB:42:51:AA:B6:B5:7D:09:EA:C0:11:50:07:4A:B3:88:52:79:22:CB Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Certificate serial: 019755355BF8DAC484070863D386AD96E6A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft Manifest number: 1589 Signing time: Mon 09 Jun 2025 15:00:49 +0000 Manifest this update: Mon 09 Jun 2025 15:00:49 +0000 Manifest next update: Tue 10 Jun 2025 15:00:49 +0000 Files and hashes: 1: 2Jzb6w4oYzNJE4bGcrmSl7n0CO4.roa (hash: 8etDRQmlSGkqycZzchAQWOixmXQimMYOT2fju9p36fk=) 2: 425pG85CvD-WqD7G4q_XQGIKAqg.roa (hash: A277nuuzcfZvxdezgnYr9eoNlhLje+Mf+PFtPMVmfws=) 3: 6i0QK2ESsNmouO66xLl8gZ-XxgY.crl (hash: Z4RG8FNIJTXL4doWh4+1BNXuoe/iK62fMFoISxA52o0=) 4: 6xhDMjLWegiTNxnVw5JYv0_kcfM.roa (hash: rSZUF0buOyvvO3wABYCztQlwFfnFNw3uLkpmp4vM9pw=) 5: 7918jeDcIeSJXbD16xxGwzri6_4.roa (hash: OQCYlsdbEYMUMcdfr++Yt7VINvKQ1QgUov/whsjb0xQ=) 6: 7dXC-hkge0H4SOrjlCk1xFHWw8U.roa (hash: Fv3L9KsADEPnVWxrZ7KT3btIpKM9bZT63ylJbPal16k=) 7: B_U0Thd2hek7c5TP5isgn3nFY38.roa (hash: oQ6pviFf5arQiDT+3KFkPtsqKciLEZWlSeEkqGt55/c=) 8: IJoxcEd7VggD3on9VNdBwQ2ai4M.roa (hash: l1C0lwy47+vk4Lvd7mWl9lGXam1kddh45sEhzv6D1cA=) 9: Li9WS8jXFR2-r4mTOoCwgP_Ts9o.roa (hash: yRVJgK21z7DKohg/kc7sh2OmWee+mkk6rOMmBxFGPjU=) 10: YJZNgRJlEy3RdWs3RjwaLO4bvJA.roa (hash: 0UFTkDt8H+rkJYm49DfFVoTWb/FfDGLtDdWOpr/Q0pQ=) 11: acU8LPcjjnuwpEGnrC28mxzfjkI.roa (hash: LwbfB5h8UeIfjkLBn8DXzcf/70aOb76OSwOezLnK2PU=) 12: cYJ91ITuYXoj33vFG-jF0Fh-ajc.roa (hash: Z/p5QOfcesLJQjsnSA/ia08r7lvPlhHAViiVlSC49cw=) 13: i-v6d3wc-sdUkH9r6qlkOFcqDf0.roa (hash: pAwH7XsKC3usAyUBQbyxSsEwXZk/zTFKfD5sKnbUUxQ=) 14: kP8WpbmlofJTdUaCmUWW68Yu-Rw.roa (hash: z9cTYSYhBDpdjPlGOiBqYli4fbEBwTaVHKlbVFfEd+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Jun 2025 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:55:35:5b:f8:da:c4:84:07:08:63:d3:86:ad:96:e6:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Validity Not Before: Jun 9 15:00:49 2025 GMT Not After : Jun 10 15:00:49 2025 GMT Subject: CN=eb4251aab6b57d09eac01150074ab388527922cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b9:a2:0f:8c:e5:fc:dc:f5:81:48:1a:7e:16: 79:e8:a9:53:04:c1:86:e7:33:a0:6e:1b:bc:a7:09: 5a:5b:b8:22:c6:6a:00:5c:20:9f:4e:4a:be:9c:f9: 2e:d4:88:37:c4:66:7f:e8:7b:b8:2e:9b:fe:24:b2: 85:08:63:46:1d:ef:0b:6f:5e:a0:71:58:99:c5:a2: bc:34:e1:54:9e:83:68:e5:db:7b:08:e3:0f:b0:0b: ba:42:3e:2d:4c:ed:e6:4a:df:ec:b2:0b:2c:b2:58: 43:e7:73:3a:ec:da:28:99:e6:ed:ae:18:49:94:0a: 0c:7f:65:0e:31:31:00:c1:b8:8f:f0:90:ea:fe:4d: fd:0c:90:13:32:a4:29:68:06:4c:87:22:a9:f8:9a: 18:2f:20:5d:84:7c:c6:00:21:f9:9b:96:d0:98:83: 3d:1e:25:2f:e2:23:0c:2e:e6:58:4e:ec:f2:0a:33: 82:98:b3:55:d2:80:74:c9:c8:ee:df:70:19:f1:4a: 9f:21:ab:98:16:ae:af:ee:a9:78:c8:bb:51:25:c1: 32:55:99:22:8c:13:47:47:87:d0:30:c0:0f:db:f0: 1c:c9:aa:bc:bb:df:be:02:a6:29:14:8a:86:2f:64: 69:e5:6d:da:3e:e0:5f:49:78:62:a9:cd:b0:8c:e0: 85:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:42:51:AA:B6:B5:7D:09:EA:C0:11:50:07:4A:B3:88:52:79:22:CB X509v3 Authority Key Identifier: keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:04:65:17:f8:1c:87:ee:7a:dc:bd:b5:e7:86:e8:ba:f7:f2: 9b:f9:1c:d3:c0:2c:b4:68:97:93:75:b9:f2:93:bd:ec:42:dc: 30:e7:4c:61:93:f8:28:29:e1:52:bd:1e:9a:c6:b6:f4:86:7f: 9a:f0:14:cb:6d:04:f8:dc:f9:ab:37:01:4b:90:02:57:06:d1: 88:ab:28:ec:4f:83:d0:f4:d5:34:73:49:16:6d:51:93:74:a8: 46:83:0d:57:89:c9:34:80:0c:16:51:36:ee:4a:70:4c:96:55: 76:f8:88:7f:f0:7e:0c:ea:72:0f:3d:f0:8b:34:d0:2e:f5:76: cf:e0:31:cf:dc:1e:9d:87:08:f9:a1:cb:c2:43:98:6e:79:2e: a4:e6:1c:87:31:2c:54:5e:91:eb:b1:fb:20:44:c9:38:00:f4: 43:a8:9d:8b:c7:c8:2b:d8:6e:0c:9d:3a:45:d6:ff:c7:9e:3f: 3f:02:5c:c6:7d:70:03:d6:5c:c0:fb:f7:19:89:64:84:6c:0e: ee:05:63:29:97:7d:82:be:7a:8d:dd:a3:d4:34:74:d8:8f:09: 9b:23:5f:0d:a5:cd:5a:ac:3f:68:d2:e1:be:e9:1f:e1:f8:0f: 6b:f7:41:b7:8b:ca:2e:7f:28:00:f3:3d:56:68:34:79:b9:e1: 90:53:36:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdVNVv42sSEBwhj04atluanMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMmQxMDJiNjExMmIwZDlhOGI4ZWViYWM0Yjk3YzgxOWY5 N2M2MDYwHhcNMjUwNjA5MTUwMDQ5WhcNMjUwNjEwMTUwMDQ5WjAzMTEwLwYDVQQD EyhlYjQyNTFhYWI2YjU3ZDA5ZWFjMDExNTAwNzRhYjM4ODUyNzkyMmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27miD4zl/Nz1gUgafhZ56KlTBMGG 5zOgbhu8pwlaW7gixmoAXCCfTkq+nPku1Ig3xGZ/6Hu4Lpv+JLKFCGNGHe8Lb16g cViZxaK8NOFUnoNo5dt7COMPsAu6Qj4tTO3mSt/ssgssslhD53M67NoomebtrhhJ lAoMf2UOMTEAwbiP8JDq/k39DJATMqQpaAZMhyKp+JoYLyBdhHzGACH5m5bQmIM9 HiUv4iMMLuZYTuzyCjOCmLNV0oB0ycju33AZ8UqfIauYFq6v7ql4yLtRJcEyVZki jBNHR4fQMMAP2/Acyaq8u9++AqYpFIqGL2Rp5W3aPuBfSXhiqc2wjOCF1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtCUaq2tX0J6sARUAdKs4hSeSLLMB8GA1UdIwQY MBaAFOotECthErDZqLjuusS5fIGfl8YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEt YjgyOWNjNDAxMDMxLzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEtYjgyOWNjNDAxMDMx LzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANARlF/gc h+563L2154bouvfym/kc08AstGiXk3W58pO97ELcMOdMYZP4KCnhUr0emsa29IZ/ mvAUy20E+Nz5qzcBS5ACVwbRiKso7E+D0PTVNHNJFm1Rk3SoRoMNV4nJNIAMFlE2 7kpwTJZVdviIf/B+DOpyDz3wizTQLvV2z+Axz9wenYcI+aHLwkOYbnkupOYchzEs VF6R67H7IETJOAD0Q6idi8fIK9huDJ06Rdb/x54/PwJcxn1wA9ZcwPv3GYlkhGwO 7gVjKZd9gr56jd2j1DR02I8JmyNfDaXNWqw/aNLhvukf4fgPa/dBt4vKLn8oAPM9 Vmg0ebnhkFM2yA== -----END CERTIFICATE-----Generated at Tue Jun 10 01:22:30 2025 by rpki-client