$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft File: H0c4OJyzuZjsT6bUJy-N15n7xKk.mft (raw, json) Hash identifier: 4uyqXnT0fzZd35aIlBTRZG69yYuth2S/wZcfZZFYMiY= Subject key identifier: DC:D3:23:51:6B:3D:8D:C9:0D:2E:E3:C9:B0:63:C6:5A:39:B2:21:74 Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Certificate serial: 01974E2031FA19F3D4C21DA23A7E981F2C01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft Manifest number: 12E8 Signing time: Sun 08 Jun 2025 06:00:22 +0000 Manifest this update: Sun 08 Jun 2025 06:00:22 +0000 Manifest next update: Mon 09 Jun 2025 06:00:22 +0000 Files and hashes: 1: 1-6x9jHZ3cw39179HQd4O3fAvnpk.roa (hash: PgXhvVg0YUToc07oyC3isPahNyz6852StHcO0CF7qN8=) 2: 1nUEd9XAFqDWEykKA06-e3Jht8E.roa (hash: FjXuDY1LWSoerVvC1COnQH7k++3mS52vkkMLizNO12Q=) 3: 2pdvmZCHvau2bejs7kiQ6VYT8aY.roa (hash: sxVxk1VG9jbnXlYRRTgFy8naU2+NPtqmSzhI8JvCk0Q=) 4: 7jhea4Z45q_-w6Bw5hm9Ljo6jd0.roa (hash: 0432QcgMFkJ7sn27j+nTeHIZYZPsrtQmgOnk9+WOg5s=) 5: CGtvlVAjeOKgmOegCwgkAU5viUg.roa (hash: tYOH0itDmxfLkiehctgBZN5JIUldgyHwoFbKsMtsM8Q=) 6: E2kHiMdYodrnFH2KHA9US6yByGg.roa (hash: 4gqy0Z2gsQk+minstyMsiIr4y+M4uI9pxsNNqBMzDmE=) 7: H0c4OJyzuZjsT6bUJy-N15n7xKk.crl (hash: qi8V1lUcWDpRsSrfD72tFPfN7IWbwVEPKOylhiXGIl0=) 8: H46sB790XpHEnYv4TqNMx8liI5A.roa (hash: tky/zzkhPHiHwewqdrJ7FzGu6YnMSWzvscvwv5Raoik=) 9: LIpJLbylGhFRNKd4Vb6i8k36YRg.roa (hash: Uma+Nee5Et6Up+tXMeUjv4OVtrZCCxIFiku3HIhbB/4=) 10: ORp5S2gwOdo1fvVCheux3Z-tEqE.roa (hash: 6QCXpLzMvGC+j67Cjb2lewZSHVD5p64YnzlA/zGClIY=) 11: PLU8wqNdMXnL9v3tJJzISiKB10E.roa (hash: VqGtKJSXmrM4NojpQ2fDKWSLpkBqvw8V5Igvg7IZsCo=) 12: PPj3izdANTPOG9FQYtIHYchyjRw.roa (hash: jE7bR+K8GQ13CqQNdOkrb03t6MGrMEYn6EGrRlPQv3s=) 13: RNEGyKfylX6Y800rWZPCCJc50_A.roa (hash: VU3yf9iAHvzAzzlVwWU4OukRHg8QQbxfRarucNtL/BU=) 14: VZ4v5Zl_fSWlCJddoFWAprfwDEQ.roa (hash: HSIRCE/846JiI6ro7JECbGIyt/cQkLU+ZkGrpS5afGk=) 15: WZBLvv9OFIzqKVar5Stt9tIoe6c.roa (hash: eDDz9g857ZbC4qMPJ/+ARLyYUZhWBgiSlQKhk+w4u2c=) 16: YGMe0KWo_m6eJ0gMSerQxd_mK7o.roa (hash: TX2OaT/Kq4swweS2SKxtiDq7F1NZ0dIzMpi6TRLh/ZA=) 17: gDccJCyvv-XSleOWBZa0j1v0ILc.roa (hash: CO5e5TItEhwMis3LPrh0yYWspCPoVfBb8vdm/rXIFt8=) 18: gfqVNhzGNxb7VDFrcNLUrtDXd5o.roa (hash: Krtgp6Kar2XuUAEtscbGlUw/+BkCTJxFBL71vdsXlls=) 19: sQpCyqrYhPNlqPdrmizFtrGO14c.roa (hash: yjB8Md4YNzJrNV3sVTOoBXACOOSqrVWUCWDSaqokA0I=) 20: sTCjVSTmDshI0UQ4XJFDWyeTvEw.roa (hash: kRON3o29OnRVzY/uFJzsoCpOZD9O1rSV9QBQnyCi9Nk=) 21: w9RX6MaAp0BwQCPK8hrZIWWzFm4.roa (hash: 6rxWErjQqbL7+OcI7QwVV76+tY/f2tbAGsAv/hz0KnE=) 22: z10me3-6yqryER4MpvIKiLcjNws.roa (hash: PjRl12NyPSpVNtUWuutmb/VXRvozChTacSvxqPRianU=) 23: zd8S8_RgIECBQgNFopt3gQi-4JA.roa (hash: 1PRRid9DTRPe3oTZKlt84NqobBLMXq/tvroFe+HAuOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Jun 2025 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4e:20:31:fa:19:f3:d4:c2:1d:a2:3a:7e:98:1f:2c:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Validity Not Before: Jun 8 06:00:22 2025 GMT Not After : Jun 9 06:00:22 2025 GMT Subject: CN=dcd323516b3d8dc90d2ee3c9b063c65a39b22174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:69:26:1d:54:56:79:7b:b7:d2:b6:db:f0:34: 0c:37:c4:ac:4c:00:62:98:9f:c0:c0:a1:b7:fa:30: 16:27:3d:16:ce:2d:79:e2:d5:a9:08:3c:1a:39:77: b0:03:4e:37:aa:e7:1a:72:f0:f3:95:56:9a:c0:27: f2:2c:30:1b:50:e2:c7:9e:14:e2:a5:2f:26:6e:52: b4:4f:29:04:98:b4:cd:50:a6:05:52:e3:df:06:61: 6c:2f:44:72:7c:7d:8c:5c:0e:b5:b1:4d:9a:f1:68: 4a:bf:5f:39:96:96:35:82:1e:40:51:68:5b:60:13: 53:10:ff:91:7d:ec:b1:17:fd:54:4f:d8:cc:99:52: 2d:73:68:22:f5:59:d1:6e:15:45:ee:7f:c1:8d:de: 49:05:d4:a0:8f:d1:f2:fa:31:a1:35:39:bb:04:ec: a6:de:73:d7:67:11:96:87:ff:93:dd:08:d1:13:5b: f5:ad:2f:cf:4f:04:b0:83:3c:6d:54:f0:57:a7:b3: 50:ef:a1:27:50:c3:00:93:b9:35:82:dc:4f:d1:42: 3e:c3:7e:55:b7:c8:2c:37:6b:38:11:e3:9e:93:99: e9:33:21:bd:c2:39:73:af:bc:23:dd:07:f7:c3:a8: bd:76:d5:33:e1:28:ba:0e:30:ff:3e:ba:fb:46:62: e3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D3:23:51:6B:3D:8D:C9:0D:2E:E3:C9:B0:63:C6:5A:39:B2:21:74 X509v3 Authority Key Identifier: keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:e5:52:3d:ae:2e:8f:43:68:05:2a:41:30:74:4c:2b:57:74: 99:f2:5f:aa:87:7b:a4:11:ab:4d:0b:a1:45:06:ab:7a:3f:a9: d3:b0:3d:fa:47:1a:ac:4f:df:d8:75:a2:b7:35:90:cc:b4:17: 87:9a:8f:58:84:47:b7:ca:0f:7a:d5:47:9b:93:ed:ff:e3:3d: d0:ec:b8:0d:0c:4c:a3:02:92:80:7b:de:6c:bd:35:c6:3f:65: d2:8e:e1:45:55:e6:e0:99:46:90:d4:0f:34:c5:8b:6b:49:df: 7a:be:a0:06:a9:e2:f5:35:b7:e1:da:04:ee:fd:0d:a4:6e:fa: 0e:c2:a1:85:86:e2:8a:2e:6f:78:5b:d3:ac:5f:12:90:df:5f: 3e:21:3b:69:28:38:b2:7c:15:f8:c2:61:bb:87:3b:03:6c:00: 75:bb:9b:f3:d6:df:12:f1:77:84:f3:30:0e:47:ef:bc:ed:b2: e2:4c:54:ca:7f:fe:02:04:a9:6c:58:53:6c:80:15:c8:9a:3d: 46:9f:5a:1f:09:fc:7e:62:fa:fa:d1:66:52:ff:15:b5:06:22: db:e2:d7:a3:35:a4:df:26:54:e3:a3:76:8b:36:f2:ab:90:d4: 57:c1:de:3d:78:50:32:54:73:08:f8:4f:c3:59:ed:23:39:26: 5d:bf:a2:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdOIDH6GfPUwh2iOn6YHywBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm YmM0YTkwHhcNMjUwNjA4MDYwMDIyWhcNMjUwNjA5MDYwMDIyWjAzMTEwLwYDVQQD EyhkY2QzMjM1MTZiM2Q4ZGM5MGQyZWUzYzliMDYzYzY1YTM5YjIyMTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GkmHVRWeXu30rbb8DQMN8SsTABi mJ/AwKG3+jAWJz0Wzi154tWpCDwaOXewA043qucacvDzlVaawCfyLDAbUOLHnhTi pS8mblK0TykEmLTNUKYFUuPfBmFsL0RyfH2MXA61sU2a8WhKv185lpY1gh5AUWhb YBNTEP+RfeyxF/1UT9jMmVItc2gi9VnRbhVF7n/Bjd5JBdSgj9Hy+jGhNTm7BOym 3nPXZxGWh/+T3QjRE1v1rS/PTwSwgzxtVPBXp7NQ76EnUMMAk7k1gtxP0UI+w35V t8gsN2s4EeOek5npMyG9wjlzr7wj3Qf3w6i9dtUz4Si6DjD/Prr7RmLjXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNzTI1FrPY3JDS7jybBjxlo5siF0MB8GA1UdIwQY MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt NmM3ZTU2ODU4OTBjLzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAheVSPa4u j0NoBSpBMHRMK1d0mfJfqod7pBGrTQuhRQarej+p07A9+kcarE/f2HWitzWQzLQX h5qPWIRHt8oPetVHm5Pt/+M90Oy4DQxMowKSgHvebL01xj9l0o7hRVXm4JlGkNQP NMWLa0nfer6gBqni9TW34doE7v0NpG76DsKhhYbiii5veFvTrF8SkN9fPiE7aSg4 snwV+MJhu4c7A2wAdbub89bfEvF3hPMwDkfvvO2y4kxUyn/+AgSpbFhTbIAVyJo9 Rp9aHwn8fmL6+tFmUv8VtQYi2+LXozWk3yZU46N2izbyq5DUV8HePXhQMlRzCPhP w1ntIzkmXb+i7w== -----END CERTIFICATE-----Generated at Sun Jun 8 14:51:25 2025 by rpki-client