$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft File: 7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft (raw, json) Hash identifier: HwUhaSNDfH0TQ3y48qRlW8M0XOWz26FMs1B1645yIzQ= Subject key identifier: A0:84:37:6C:2E:1C:6C:ED:70:51:58:9E:52:7E:FA:73:C8:6D:05:C2 Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c Certificate serial: 019739F5177EDCADEB2084E91660BCB33067 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft Manifest number: 1585 Signing time: Wed 04 Jun 2025 08:00:52 +0000 Manifest this update: Wed 04 Jun 2025 08:00:52 +0000 Manifest next update: Thu 05 Jun 2025 08:00:52 +0000 Files and hashes: 1: 3mF0o8ObxMG1vPes91bWbw0tnsA.roa (hash: UJhMkfjPft/QeBcE4Z26qo9FCGStMKR3bjVpARVrtgI=) 2: 4Kx-vHuWGicyF3SMrQ7KSs4yNdM.roa (hash: /Y71/tOsnj44V3PPOqV8jyNAecsoDys+kyFhb/Na/TY=) 3: 7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl (hash: NTa/ojUVjGjH8UIp+WVb94kVNSTe5c/8XSUJy9fg5Us=) 4: DnWgBwSyPonu4ANiqDXcSFS5Sss.roa (hash: l2btTGNwK1K4Uvs9UU8E5RV5U3WcxEKUPo27wW3zozU=) 5: Kwj4i4rNyzJUOvELNWnXH3R-jw4.roa (hash: FGt3z3IlUQQX3L4JhYd4ue2NJONgSL3qDjZtT83LgI4=) 6: YMGBAXPMmaM-UVPjn2WwHTw99Dg.roa (hash: sho3Yzk1N5vFpwylHlhAFYtjqhBGr18UkAS7r1nBk5k=) 7: Zvza_AEVzZujcB3uf3ENKXzKqQM.roa (hash: 57giD/GidN1QIt0FbCVf8xCexXWHCYg5Vqj76NoF+sc=) 8: _ERs_WqsyKBsbDNrpF7678MzuE8.roa (hash: x/e8FoqvrkwlrxEHgqowJDwm2nzTqRfGs9L2jLZX1F0=) 9: mCecvopZfXG3WIu7Fhw-f_4DPAk.roa (hash: MecNKHL4HsnfTECbSBEtAo1C5aYtC+yZbiahatmHpI0=) 10: tkwaNKS943lqIrcwP4wFPu7CmLA.roa (hash: LUFlc4a0Hl1DhNUuKnQE9p25tD0hoETIl0Xrym01FDA=) 11: xiXR5CA0LknEtnJqptzk0g7U8nI.roa (hash: hnOXUmiCqjx6p2C6Uol9CSOlJTYzXWkQvpMB/lW+MX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 08:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:39:f5:17:7e:dc:ad:eb:20:84:e9:16:60:bc:b3:30:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c Validity Not Before: Jun 4 08:00:52 2025 GMT Not After : Jun 5 08:00:52 2025 GMT Subject: CN=a084376c2e1c6ced7051589e527efa73c86d05c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:99:6e:25:e7:12:25:39:ca:18:f2:ec:23:47: 0d:39:06:b9:f2:1b:da:92:a5:09:d5:5d:be:cd:6e: 19:94:62:e8:3f:db:a3:fa:cb:41:20:56:f1:f7:3a: 6c:09:ba:09:b3:1e:ff:1e:8d:f2:b0:8e:98:34:31: f6:3e:80:97:51:60:9d:9c:98:5d:69:1c:95:8e:32: b7:8a:ad:9f:b1:82:3e:7b:e7:f3:fe:ee:57:f9:c9: eb:c0:64:df:36:4c:4b:06:96:28:c0:f2:bc:a2:60: c9:b6:8f:cf:b4:6e:19:a6:4b:9a:04:70:9b:19:49: c8:8c:fc:37:d6:e8:99:4b:58:28:8c:ea:d3:1a:d1: 53:b3:e1:e5:a9:9f:ba:47:3e:c7:2f:6d:8b:e3:ae: f9:ea:60:fa:4e:90:4e:95:32:19:70:5d:23:46:ef: 5f:b5:3a:63:5b:01:75:57:0b:d8:8a:90:d7:f8:e5: 88:28:03:2f:4f:04:da:9c:e2:16:45:e1:bd:54:38: b1:b0:63:b8:73:ee:f3:96:29:47:a1:2c:cd:4d:9e: c3:b0:0c:c1:60:17:b2:13:c8:6e:d4:0a:96:c0:49: fa:c3:1e:d4:2e:4c:a5:01:7d:6b:44:7f:aa:bf:3e: 90:f0:e0:3c:12:e9:d2:26:50:50:cd:44:e4:8c:0c: e0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:84:37:6C:2E:1C:6C:ED:70:51:58:9E:52:7E:FA:73:C8:6D:05:C2 X509v3 Authority Key Identifier: keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f9:e7:c6:8a:23:64:25:04:77:de:2b:25:d1:d5:38:8f:33: 54:ed:2a:3f:47:45:45:b8:76:78:55:7d:d3:0a:6e:0c:37:55: 47:e1:12:c6:d3:93:d4:71:8d:77:60:dd:cb:05:ec:8e:d3:86: 15:42:ce:ad:82:10:4e:e7:a9:1b:24:4d:4c:98:d1:74:90:1f: 5b:07:81:79:c5:3f:5b:1d:33:f2:f9:a4:23:db:cc:fa:45:b4: 8d:7c:40:57:0c:cc:54:11:4b:52:42:02:27:89:90:68:0f:f2: d7:74:14:84:28:e8:47:74:c9:f0:a2:ed:62:55:e8:59:30:c9: 95:56:90:76:d0:b4:12:f0:e4:f0:0e:7a:58:f6:28:7b:bb:82: cd:24:c7:42:97:7d:76:8b:57:b2:5d:04:10:73:bb:02:de:a6: 1c:66:3f:2b:12:37:14:64:ab:41:ef:f2:dc:67:11:b2:12:40: 2b:31:e3:3e:fc:e6:4f:f1:e5:d9:01:9f:97:a3:d8:13:3c:53: f3:a9:67:79:06:d0:a1:82:d5:89:38:62:2b:51:02:15:51:b1: 60:33:ed:0a:9d:fb:cb:b8:43:fa:81:e7:60:0d:e7:33:61:a9: 7b:b3:ee:c3:74:3b:58:e9:7c:58:70:ed:31:3c:92:90:9f:2e: fe:9e:89:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc59Rd+3K3rIITpFmC8szBnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNmRhOWU0MTY4NmQyMWMxMjc5OWM4ZTg0YjI3NGFhODI0 MTUwOGMwHhcNMjUwNjA0MDgwMDUyWhcNMjUwNjA1MDgwMDUyWjAzMTEwLwYDVQQD EyhhMDg0Mzc2YzJlMWM2Y2VkNzA1MTU4OWU1MjdlZmE3M2M4NmQwNWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15luJecSJTnKGPLsI0cNOQa58hva kqUJ1V2+zW4ZlGLoP9uj+stBIFbx9zpsCboJsx7/Ho3ysI6YNDH2PoCXUWCdnJhd aRyVjjK3iq2fsYI+e+fz/u5X+cnrwGTfNkxLBpYowPK8omDJto/PtG4ZpkuaBHCb GUnIjPw31uiZS1gojOrTGtFTs+HlqZ+6Rz7HL22L46756mD6TpBOlTIZcF0jRu9f tTpjWwF1VwvYipDX+OWIKAMvTwTanOIWReG9VDixsGO4c+7zlilHoSzNTZ7DsAzB YBeyE8hu1AqWwEn6wx7ULkylAX1rRH+qvz6Q8OA8EunSJlBQzUTkjAzgnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCEN2wuHGztcFFYnlJ++nPIbQXCMB8GA1UdIwQY MBaAFO1tqeQWhtIcEnmcjoSydKqCQVCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYt MjlmMWJlYjJmMjgyLzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYtMjlmMWJlYjJmMjgy LzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPnnxooj ZCUEd94rJdHVOI8zVO0qP0dFRbh2eFV90wpuDDdVR+ESxtOT1HGNd2DdywXsjtOG FULOrYIQTuepGyRNTJjRdJAfWweBecU/Wx0z8vmkI9vM+kW0jXxAVwzMVBFLUkIC J4mQaA/y13QUhCjoR3TJ8KLtYlXoWTDJlVaQdtC0EvDk8A56WPYoe7uCzSTHQpd9 dotXsl0EEHO7At6mHGY/KxI3FGSrQe/y3GcRshJAKzHjPvzmT/Hl2QGfl6PYEzxT 86lneQbQoYLViThiK1ECFVGxYDPtCp37y7hD+oHnYA3nM2Gpe7Puw3Q7WOl8WHDt MTySkJ8u/p6Jrg== -----END CERTIFICATE-----Generated at Wed Jun 4 10:29:14 2025 by rpki-client