$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft File: S0BcqrNLv95rjuZsYAhgxs6W8ys.mft (raw, json) Hash identifier: DyxlwkcWr2fIkZvWbGiYPy0ITdAYY6/TeGOGHyyhjuY= Subject key identifier: 5F:12:88:C0:DD:C3:C0:8A:B0:63:EB:D5:2F:30:8F:DD:EA:3D:3E:8C Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b Certificate serial: 019754C78D35991231C723F003CB11226FAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft Manifest number: 1589 Signing time: Mon 09 Jun 2025 13:00:53 +0000 Manifest this update: Mon 09 Jun 2025 13:00:53 +0000 Manifest next update: Tue 10 Jun 2025 13:00:53 +0000 Files and hashes: 1: 11HD7yYKcpDp91MDnZ2qx4f7DA4.roa (hash: I82O47jamEqwRmGn3/G2hhZ8d3EhBnYIg9JLsYyDdcE=) 2: EVFSBas9Aq_MdNVwUd8bGuaA3Ws.roa (hash: BhtgRPsHAejHOiiDvH3HRPbC4SYTxdKvHTv4FGSpdUs=) 3: EwIzZdJ1IhMaFw8VKQftgylzjgE.roa (hash: TssNiQ/Zpv1pzvYDHFFLNu5wfEVQ4u0fKOIDHY91aqk=) 4: LVgdGGp1BXM3wqsV9OwWixTAngw.roa (hash: yASeozzYpGQSF5fg0wPLHaGxwKLjvcatKKCkqykA4I8=) 5: MJIbLhSmNC8a874fA2nbq57HEtg.roa (hash: WaRYM9CvEVYhUP+ZoiflR5McAGOB5Og+0p9cf3/LEak=) 6: P1A1BXCqCADzQosrk4MwUKPYxTk.roa (hash: LXH4t2ODNhUtfiB03lL7Y51z/AGbNaW0Y11NO+KNqsc=) 7: QHWMs-MZjDSwChSISEL6Gl0q8mw.roa (hash: MTwg/6CPgLRHHoER9F5LK/UDna9Vp7Lok94EKexAIUI=) 8: S0BcqrNLv95rjuZsYAhgxs6W8ys.crl (hash: a/uWL0VYzi8RZAEqzlyeYkPSaOEiLExAHopHMTXF7uQ=) 9: Xdvj43KnSMHPF5yK-nfEWq4KZoY.roa (hash: 0KUoHz1/LcxNxADlsv04gqLb680zAS0Z8MaiKDomgYY=) 10: foffFzsX_C0XZVackxzc9TT3Ql0.roa (hash: v5tw1DCZvp0dZORs+mozhjde3hmTpwW0Pvc0v2NmjrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Jun 2025 13:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:54:c7:8d:35:99:12:31:c7:23:f0:03:cb:11:22:6f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b Validity Not Before: Jun 9 13:00:53 2025 GMT Not After : Jun 10 13:00:53 2025 GMT Subject: CN=5f1288c0ddc3c08ab063ebd52f308fddea3d3e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:10:6f:87:dc:02:71:c6:d2:62:36:d3:2d:22: 5c:b3:58:2c:01:e4:96:fa:18:d7:01:10:bb:e0:44: c9:0d:d1:e6:96:c9:ae:b5:7e:8a:e2:85:2f:73:d8: ca:82:7d:c9:f7:ba:49:c5:5f:7c:0c:74:38:b8:46: 33:cc:d0:82:46:7b:c6:36:61:80:3f:a0:7c:39:a2: de:34:25:28:2b:c8:b3:6f:cd:f3:2e:ef:d0:45:2f: d8:13:9a:c4:e9:e3:ae:13:4f:3c:8e:81:5b:a9:d0: 1e:37:15:c3:ff:8d:58:bb:7f:3a:f6:35:c9:3d:7a: b2:bd:90:5f:56:f3:66:f7:4c:f7:ec:7f:b8:84:02: 5e:7e:ee:d2:66:5d:95:af:29:7d:d5:80:59:e3:55: 4a:b4:ef:bc:53:c3:3b:b7:53:5d:2a:7b:55:78:1e: 73:6c:64:ab:c1:7c:dc:14:f8:e4:09:89:7c:01:d6: ec:61:ef:8b:10:fa:04:43:44:c8:7f:05:56:25:8b: 06:23:37:19:8e:97:eb:21:0d:a9:6a:ab:18:09:63: fd:04:2c:65:74:1d:26:ea:f8:79:3d:ec:fc:df:76: c4:7c:9e:dc:aa:3a:3b:fe:c1:49:f5:dc:cb:91:fe: e0:d8:84:9f:13:2e:57:fe:fd:17:df:f2:ab:87:c6: 9e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:12:88:C0:DD:C3:C0:8A:B0:63:EB:D5:2F:30:8F:DD:EA:3D:3E:8C X509v3 Authority Key Identifier: keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:67:04:0a:0f:0b:25:76:00:53:18:9d:23:20:7a:e1:30:d9: 76:68:fc:3e:cc:15:78:a0:12:c7:a1:a3:a8:eb:9d:ce:cf:f0: a6:f5:4f:c8:90:55:bb:d6:c9:61:ed:25:4d:d3:76:d4:3a:32: a1:fa:ab:65:39:d6:68:ec:da:e4:98:2c:25:28:90:81:1c:a0: 74:53:cd:28:6f:39:bd:86:1b:48:f8:8a:70:19:51:25:08:29: c8:eb:62:ed:72:df:5c:4f:a8:b6:91:8f:82:14:42:c6:cc:c2: 4f:2c:04:c7:ab:24:b8:5d:68:6d:5f:54:96:54:f9:05:35:fa: e6:c4:ef:38:10:4d:6a:3c:bc:12:41:e5:8a:60:bd:fc:d2:92: 70:c3:4b:02:b0:d1:41:bf:ab:30:3e:7e:14:aa:b9:de:ab:53: 75:9c:03:ba:b5:b4:55:9f:1a:59:e7:e2:f1:e8:56:61:ea:b3: ad:e5:c3:2c:88:c5:65:71:5e:04:d3:c4:c1:c5:49:86:c2:17: 01:2f:79:2d:bf:92:1b:6d:82:97:93:7c:12:ec:9e:7a:b4:f1: d4:e0:94:7f:85:e3:b3:f9:65:6f:f4:55:b2:53:1f:d3:46:4f: 3e:d4:17:f6:20:31:c0:b5:fd:b3:6a:2b:96:b0:b0:0e:f2:30: 43:f0:81:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdUx401mRIxxyPwA8sRIm+rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNDA1Y2FhYjM0YmJmZGU2YjhlZTY2YzYwMDg2MGM2Y2U5 NmYzMmIwHhcNMjUwNjA5MTMwMDUzWhcNMjUwNjEwMTMwMDUzWjAzMTEwLwYDVQQD Eyg1ZjEyODhjMGRkYzNjMDhhYjA2M2ViZDUyZjMwOGZkZGVhM2QzZThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRBvh9wCccbSYjbTLSJcs1gsAeSW +hjXARC74ETJDdHmlsmutX6K4oUvc9jKgn3J97pJxV98DHQ4uEYzzNCCRnvGNmGA P6B8OaLeNCUoK8izb83zLu/QRS/YE5rE6eOuE088joFbqdAeNxXD/41Yu3869jXJ PXqyvZBfVvNm90z37H+4hAJefu7SZl2Vryl91YBZ41VKtO+8U8M7t1NdKntVeB5z bGSrwXzcFPjkCYl8AdbsYe+LEPoEQ0TIfwVWJYsGIzcZjpfrIQ2paqsYCWP9BCxl dB0m6vh5Pez833bEfJ7cqjo7/sFJ9dzLkf7g2ISfEy5X/v0X3/Krh8aevQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF8SiMDdw8CKsGPr1S8wj93qPT6MMB8GA1UdIwQY MBaAFEtAXKqzS7/ea47mbGAIYMbOlvMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85MTRkMzktMzAyMC00Yjc5LWFkMjYt ZDg3YWZmYjhiYzYxLzEvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS85MTRkMzktMzAyMC00Yjc5LWFkMjYtZDg3YWZmYjhiYzYx LzEvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbWcECg8L JXYAUxidIyB64TDZdmj8PswVeKASx6GjqOudzs/wpvVPyJBVu9bJYe0lTdN21Doy ofqrZTnWaOza5JgsJSiQgRygdFPNKG85vYYbSPiKcBlRJQgpyOti7XLfXE+otpGP ghRCxszCTywEx6skuF1obV9UllT5BTX65sTvOBBNajy8EkHlimC9/NKScMNLArDR Qb+rMD5+FKq53qtTdZwDurW0VZ8aWefi8ehWYeqzreXDLIjFZXFeBNPEwcVJhsIX AS95Lb+SG22Cl5N8EuyeerTx1OCUf4Xjs/llb/RVslMf00ZPPtQX9iAxwLX9s2or lrCwDvIwQ/CBvg== -----END CERTIFICATE-----Generated at Mon Jun 9 21:21:50 2025 by rpki-client