$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft File: ORnyrZFYS6_wRnRHusj7l40fndM.mft (raw, json) Hash identifier: 16QrgGTohdv5IMpGI0qBkpoU9v5cWYmlV+eQPcODnHE= Subject key identifier: FB:FC:91:5E:22:D1:A8:EA:2E:FE:55:CB:60:2B:57:47:D6:50:A6:AC Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Certificate serial: 01975911F471BAFA7EC50AF37108C355118B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft Manifest number: 15AA Signing time: Tue 10 Jun 2025 09:00:37 +0000 Manifest this update: Tue 10 Jun 2025 09:00:37 +0000 Manifest next update: Wed 11 Jun 2025 09:00:37 +0000 Files and hashes: 1: 3Xkfgsy5F0IowNcy1PedAB3Q6w0.roa (hash: iyJL5cuUJjZvE75tBtKfcWvyK2dmPiVKM7BX3wZGQos=) 2: 4EDvDSCIPe0YYvYx7Str0IpAPeM.roa (hash: A9xeZgyOfSqqIMRvaPEIhp5b1RhtdrlitB+v147UkT4=) 3: 5pue0s9j8lhdVuO6m6E92d4GwDU.roa (hash: CSkd5pFYexGISl0uc2qVJpocMMmmGw3Zguf0ypv5Owk=) 4: M5hYRJhvdGCKvhvMAGC4jWTJSXA.roa (hash: VGkxa4pTyEqZCbbcRS6HnlUuOo2QmctHYBT+vvYYBDg=) 5: ORnyrZFYS6_wRnRHusj7l40fndM.crl (hash: GjjmdFPi5CwQwHetRzRT83w12+h4kQ/6UWVoaiXSFaE=) 6: UfCPGY0KJE6274iAqACixLj9Gmw.roa (hash: DEe7CtPUt0XEDknWoFEE8OaasnbG+ag0I4mAzR/inaE=) 7: WBerlCoyvzWnSx7AM9uVxy9XUro.roa (hash: FyOYZU8Lcu6m3tCIEh8spxjddiJiAmITHkAJjSq/GW0=) 8: hWosbOoApl7V_Bhpe5UlA20sERA.roa (hash: PkJmNJ/LtXuQwtW6f6gFggLl9YMZJgAspupTTJw2DD0=) 9: m-oD5AGGiKc-qI8F9BHOsqfUhwQ.roa (hash: ZivLa2r1rkIhgA7nnzvSrie3rkSLQvNS6UhWQpi2o50=) 10: r4CnQQx_zbdBDGpIsGGdqEuowRg.roa (hash: Cf3KdUglzAXq3AND0kUcTnVm0D52NG4w3f87gIFdSQg=) 11: uot90FkBP8Y3Y-x6-7brjjoB-rU.roa (hash: 0JXXSAl/uFfrD7KxeCsCoDWgeiNKlIuga4IDFWQXH2c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Jun 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:59:11:f4:71:ba:fa:7e:c5:0a:f3:71:08:c3:55:11:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Validity Not Before: Jun 10 09:00:37 2025 GMT Not After : Jun 11 09:00:37 2025 GMT Subject: CN=fbfc915e22d1a8ea2efe55cb602b5747d650a6ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ee:5c:87:07:ee:34:0f:4a:16:14:c6:c9:92: c1:34:21:04:49:9d:cb:98:d0:53:6f:71:32:9c:7b: 8f:9c:69:07:13:68:1f:0a:02:3e:30:63:4d:68:04: 8a:6f:9b:87:54:c4:a9:d4:1d:d0:b5:1f:4c:0b:38: da:cc:88:aa:8f:3d:6b:a3:79:86:45:f6:b4:a5:6d: 2e:7c:72:78:e4:38:6f:5f:4d:35:66:ce:66:5b:33: b6:b3:ec:1c:65:26:bc:eb:8b:04:fa:67:62:c7:93: f1:4d:6e:4e:1e:42:21:ee:ea:1b:2b:51:8b:9b:01: 48:3e:cd:76:64:c4:ac:3c:e0:af:17:5a:cb:3d:a0: 34:4d:1d:7c:3d:70:cb:ff:cc:f3:ca:64:32:a9:46: e6:da:5c:d6:2f:6d:01:8e:82:13:ee:05:67:9a:f4: 76:df:ec:54:54:40:09:37:5f:fc:99:ed:71:40:83: d6:23:9f:4f:0c:64:54:f7:a6:73:16:51:8f:04:36: c3:80:98:ce:e4:e3:4d:84:05:34:6f:cd:59:19:04: 82:92:a3:49:15:16:8d:74:35:d5:e4:3b:97:da:0f: e2:dc:3c:a5:67:4a:4b:f2:09:26:d8:e1:58:a0:50: d9:6c:fa:34:50:dd:76:27:44:b1:38:a0:b5:6d:cc: 8e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:FC:91:5E:22:D1:A8:EA:2E:FE:55:CB:60:2B:57:47:D6:50:A6:AC X509v3 Authority Key Identifier: keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:f3:03:30:8a:db:a7:cd:c3:4e:66:a5:77:1c:76:9f:25:fc: 09:5e:0c:2b:ae:5c:34:64:e4:c8:f2:f7:72:73:d4:ca:16:2a: f3:fa:cc:33:fe:4e:ab:b7:c2:f3:d7:37:ed:48:62:37:88:f3: e8:a4:db:48:c0:0e:9b:a9:98:5a:47:c1:ff:dc:f7:55:6f:cd: c6:2b:ee:49:40:99:fe:ab:76:57:94:a1:5e:fe:a9:33:21:3c: 17:54:52:ff:37:37:66:a7:c1:0f:9f:eb:fa:97:35:f7:03:b2: 9b:6b:91:b7:07:51:cd:43:1c:6d:8c:0c:95:62:6d:f1:64:2d: 84:57:e7:a6:39:3a:97:62:22:e1:b8:e9:b7:02:6d:0a:0a:75: a9:9f:19:ee:5f:5a:a9:4e:e5:09:2b:21:88:67:12:77:4b:8d: 41:f9:52:09:69:8e:d2:f4:81:2d:62:6b:ce:66:b7:10:fd:a3: de:b8:63:32:44:99:4f:a2:3e:0b:e0:11:c5:35:9c:e9:da:0f: 5a:33:48:00:92:93:23:f0:2d:08:a6:1f:88:a5:68:ec:05:e8: 4b:a0:ba:18:b0:cc:6f:d3:03:6e:b7:8e:24:3c:07:19:6b:b8: 0c:6c:b5:59:a8:b9:3b:8d:d5:ae:b6:e8:72:6f:7b:e2:a4:be: 79:7a:ed:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdZEfRxuvp+xQrzcQjDVRGLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MTlmMmFkOTE1ODRiYWZmMDQ2NzQ0N2JhYzhmYjk3OGQx ZjlkZDMwHhcNMjUwNjEwMDkwMDM3WhcNMjUwNjExMDkwMDM3WjAzMTEwLwYDVQQD EyhmYmZjOTE1ZTIyZDFhOGVhMmVmZTU1Y2I2MDJiNTc0N2Q2NTBhNmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru5chwfuNA9KFhTGyZLBNCEESZ3L mNBTb3EynHuPnGkHE2gfCgI+MGNNaASKb5uHVMSp1B3QtR9MCzjazIiqjz1ro3mG Rfa0pW0ufHJ45DhvX001Zs5mWzO2s+wcZSa864sE+mdix5PxTW5OHkIh7uobK1GL mwFIPs12ZMSsPOCvF1rLPaA0TR18PXDL/8zzymQyqUbm2lzWL20BjoIT7gVnmvR2 3+xUVEAJN1/8me1xQIPWI59PDGRU96ZzFlGPBDbDgJjO5ONNhAU0b81ZGQSCkqNJ FRaNdDXV5DuX2g/i3DylZ0pL8gkm2OFYoFDZbPo0UN12J0SxOKC1bcyOVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPv8kV4i0ajqLv5Vy2ArV0fWUKasMB8GA1UdIwQY MBaAFDkZ8q2RWEuv8EZ0R7rI+5eNH53TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUt MzJhYTY3MzFjMjkxLzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUtMzJhYTY3MzFjMjkx LzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfMDMIrb p83DTmaldxx2nyX8CV4MK65cNGTkyPL3cnPUyhYq8/rMM/5Oq7fC89c37UhiN4jz 6KTbSMAOm6mYWkfB/9z3VW/NxivuSUCZ/qt2V5ShXv6pMyE8F1RS/zc3ZqfBD5/r +pc19wOym2uRtwdRzUMcbYwMlWJt8WQthFfnpjk6l2Ii4bjptwJtCgp1qZ8Z7l9a qU7lCSshiGcSd0uNQflSCWmO0vSBLWJrzma3EP2j3rhjMkSZT6I+C+ARxTWc6doP WjNIAJKTI/AtCKYfiKVo7AXoS6C6GLDMb9MDbreOJDwHGWu4DGy1Wai5O43Vrrbo cm974qS+eXrtjA== -----END CERTIFICATE-----Generated at Tue Jun 10 11:44:15 2025 by rpki-client