$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft File: nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft (raw, json) Hash identifier: i6e5zmD8ihqOkDvgRWtHtL0lq54lWBXLSggfNo+eR2o= Subject key identifier: DA:5D:67:62:83:8F:C9:9D:D4:A4:B3:D5:C2:6D:E1:AB:0C:88:B2:EC Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Certificate serial: 01974CA01516BE5EE48A594C4B8D990193BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft Manifest number: 1582 Signing time: Sat 07 Jun 2025 23:00:48 +0000 Manifest this update: Sat 07 Jun 2025 23:00:48 +0000 Manifest next update: Sun 08 Jun 2025 23:00:48 +0000 Files and hashes: 1: 3vl8XIfuhRt73vGy6IwhrWPuLQI.roa (hash: q3Fh75KrQyoQfVHvtuNwmD855fGW6oB7xId9MSHUyb4=) 2: 6wuhUyQ6B8hcKFtpQPLF4a8xiLM.roa (hash: PVP/CIAq5vbBthYH2NgEEDe22Dw5jd7urf5cJiuVvXo=) 3: 9NNSEhajneEgbt66V0EkEE6XolA.roa (hash: xTgVQs+MsZfir4Ub3DiVbK1ClBqkcXuh9whyhrkEvAM=) 4: BzRg7cqbGCxPjaoZhAl0Moquf1Y.roa (hash: 6kEaZouendLfYXdknvUfHV20sm02LURoxyHpm7Wn7AY=) 5: G-7uTcKf4R76KSJdYf98itHFuPU.roa (hash: uB9gNVUlSjqGsS16y0z5ke/O0agEGAvuljoiA6PJrUM=) 6: QgQPTUqWSoJLC8pH1ZTpV9J6Spg.roa (hash: roAeP2l3vRUpAFpkZSsf9wX3WRLL0BI8ikMQ5kYqDxQ=) 7: ftQQpBrk0ZFia4n99q7-wX-5E0M.roa (hash: U0GhDpZiZ5saXJRfz3p+tKxwcbveFdHD/WbcCpSo+CQ=) 8: mUKuky3l-ZY5p-RPO9s2pPEyk78.roa (hash: ti7kzq8iHsvI0iGcqQO/PpqkoDoJf7orqrrfuhBfEKg=) 9: nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl (hash: kUFuYv0BEpn/1htCdivhYGPJWuRoXnpVd/JCduqwW6Q=) 10: pp90XH9ku5igKr_7gjm59WVXVs4.roa (hash: bfssuNaaIGlZ7LKFXdiYHHy+DIw/jcyEOsfVzSQEBMQ=) 11: qFB-AfrzECXh6GN5dVSZvb0x6SI.roa (hash: GzIs503Dc0bsL2WCHQKf2MOheJQNWlvUYNrT8tj73vc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4c:a0:15:16:be:5e:e4:8a:59:4c:4b:8d:99:01:93:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Validity Not Before: Jun 7 23:00:48 2025 GMT Not After : Jun 8 23:00:48 2025 GMT Subject: CN=da5d6762838fc99dd4a4b3d5c26de1ab0c88b2ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f1:25:9c:89:0b:1c:5a:ac:1c:3c:4f:8b:73: 9c:93:e1:06:f4:07:e7:5a:0b:8f:d9:8a:9b:c4:1b: 9d:ad:54:46:48:fa:a9:57:6b:e9:9b:83:c1:0c:0e: e1:f2:46:95:e0:17:46:7a:39:e4:f8:45:89:79:1c: 8f:4e:50:ef:93:91:50:83:1e:cd:9c:09:fd:90:dc: bd:bb:57:cd:64:ad:33:bc:f9:c8:1a:f7:d9:49:25: 22:9a:cb:28:3f:be:08:ec:02:4b:f8:11:e9:e6:09: c1:af:7e:43:a0:7f:e1:3d:e4:a8:6a:f8:e9:32:c2: 2e:e7:80:90:de:dc:7b:f6:40:36:0b:62:a2:cf:e6: d0:42:c2:09:79:d2:0c:49:f7:a3:21:ac:ff:32:8d: 59:ec:f1:94:29:f2:8b:a0:ef:f8:2d:cc:2f:2a:0d: e4:0b:e3:5b:70:bb:fe:94:16:18:dc:06:c4:55:b9: d6:26:6e:32:d1:55:21:f1:2a:11:a1:7f:71:30:c9: 82:02:b4:4a:f6:fb:a6:7b:ab:17:26:cd:df:6d:37: 31:b1:f8:11:05:55:02:d7:58:b2:ed:c7:73:9d:6b: 5a:1e:c1:64:1c:97:21:3e:95:42:b4:df:3c:02:04: 2c:ae:cb:ff:16:54:a5:22:ba:ba:50:3f:a2:e0:69: bc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:5D:67:62:83:8F:C9:9D:D4:A4:B3:D5:C2:6D:E1:AB:0C:88:B2:EC X509v3 Authority Key Identifier: keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:37:b9:d4:52:46:20:e0:48:7a:24:2a:a8:8f:cf:89:02:8a: 3d:ff:8a:83:8f:25:27:3f:04:9c:7a:0a:4e:b2:57:46:67:89: a9:0c:51:8c:cf:36:51:ca:39:77:9a:20:a3:82:26:74:5b:88: 94:cd:a0:62:f5:01:53:1a:86:4e:06:d1:78:ae:79:6c:47:a0: 00:fa:e3:02:41:8c:6d:b2:25:d8:b4:1b:43:4d:94:68:25:df: b1:84:1d:8b:2e:92:f9:d3:c3:99:1b:c3:2b:b7:3f:71:01:be: 45:1f:b4:22:38:03:ed:2e:1d:45:9b:40:0f:68:6b:58:f5:79: db:3f:d8:c1:d2:c4:1b:01:d4:16:67:5c:af:d7:69:d5:78:fc: bd:f4:d7:e4:82:33:1b:d1:be:f0:67:c4:00:db:bd:d9:3c:c0: 68:88:a1:b8:3f:87:4c:c7:f9:ae:61:d4:95:fb:48:c9:20:25: d8:2a:dd:99:94:d3:42:5e:be:05:83:e5:07:3a:66:cb:89:f3: d0:74:70:eb:02:3f:5b:18:2a:a3:6a:59:89:29:5c:25:49:16: 04:2e:e5:ab:8f:4a:4c:e5:87:49:64:14:d7:45:44:ae:a9:c2: dd:34:4e:fe:7f:6c:27:79:c9:d0:cd:7c:5e:79:cf:70:a5:f6: 5a:5f:42:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdMoBUWvl7killMS42ZAZO8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNWRlNDkwZmY4NzRlOTY4OWNlY2Y3MjZjYmI0ZTJmNTFm NmM3MzEwHhcNMjUwNjA3MjMwMDQ4WhcNMjUwNjA4MjMwMDQ4WjAzMTEwLwYDVQQD EyhkYTVkNjc2MjgzOGZjOTlkZDRhNGIzZDVjMjZkZTFhYjBjODhiMmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvElnIkLHFqsHDxPi3Ock+EG9Afn WguP2YqbxBudrVRGSPqpV2vpm4PBDA7h8kaV4BdGejnk+EWJeRyPTlDvk5FQgx7N nAn9kNy9u1fNZK0zvPnIGvfZSSUimssoP74I7AJL+BHp5gnBr35DoH/hPeSoavjp MsIu54CQ3tx79kA2C2Kiz+bQQsIJedIMSfejIaz/Mo1Z7PGUKfKLoO/4LcwvKg3k C+NbcLv+lBYY3AbEVbnWJm4y0VUh8SoRoX9xMMmCArRK9vume6sXJs3fbTcxsfgR BVUC11iy7cdznWtaHsFkHJchPpVCtN88AgQsrsv/FlSlIrq6UD+i4Gm8IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpdZ2KDj8md1KSz1cJt4asMiLLsMB8GA1UdIwQY MBaAFJ1d5JD/h06Wic7Pcmy7Ti9R9scxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUt Y2VjMzNiYTFiZGY1LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUtY2VjMzNiYTFiZGY1 LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJje51FJG IOBIeiQqqI/PiQKKPf+Kg48lJz8EnHoKTrJXRmeJqQxRjM82Uco5d5ogo4ImdFuI lM2gYvUBUxqGTgbReK55bEegAPrjAkGMbbIl2LQbQ02UaCXfsYQdiy6S+dPDmRvD K7c/cQG+RR+0IjgD7S4dRZtAD2hrWPV52z/YwdLEGwHUFmdcr9dp1Xj8vfTX5IIz G9G+8GfEANu92TzAaIihuD+HTMf5rmHUlftIySAl2CrdmZTTQl6+BYPlBzpmy4nz 0HRw6wI/Wxgqo2pZiSlcJUkWBC7lq49KTOWHSWQU10VErqnC3TRO/n9sJ3nJ0M18 XnnPcKX2Wl9CGQ== -----END CERTIFICATE-----Generated at Sun Jun 8 06:13:00 2025 by rpki-client