$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft File: ORnyrZFYS6_wRnRHusj7l40fndM.mft (raw, json) Hash identifier: NDkvr9dQ/aM8NNN1OBwjS2Zo0EzOA/5fh3oqEjeB7eI= Subject key identifier: 00:06:5B:E9:DC:FB:DC:2A:C8:60:2D:8F:79:83:15:E9:28:15:17:24 Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Certificate serial: 01975CEE9A8A2CC9D9677561554399CF49F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft Manifest number: 15AC Signing time: Wed 11 Jun 2025 03:00:30 +0000 Manifest this update: Wed 11 Jun 2025 03:00:30 +0000 Manifest next update: Thu 12 Jun 2025 03:00:30 +0000 Files and hashes: 1: 3Xkfgsy5F0IowNcy1PedAB3Q6w0.roa (hash: iyJL5cuUJjZvE75tBtKfcWvyK2dmPiVKM7BX3wZGQos=) 2: 4EDvDSCIPe0YYvYx7Str0IpAPeM.roa (hash: A9xeZgyOfSqqIMRvaPEIhp5b1RhtdrlitB+v147UkT4=) 3: 5pue0s9j8lhdVuO6m6E92d4GwDU.roa (hash: CSkd5pFYexGISl0uc2qVJpocMMmmGw3Zguf0ypv5Owk=) 4: M5hYRJhvdGCKvhvMAGC4jWTJSXA.roa (hash: VGkxa4pTyEqZCbbcRS6HnlUuOo2QmctHYBT+vvYYBDg=) 5: ORnyrZFYS6_wRnRHusj7l40fndM.crl (hash: lUrT21okIBr4boPMMLmGkrXH7Qba2ErvPzG+cnpU2cc=) 6: UfCPGY0KJE6274iAqACixLj9Gmw.roa (hash: DEe7CtPUt0XEDknWoFEE8OaasnbG+ag0I4mAzR/inaE=) 7: WBerlCoyvzWnSx7AM9uVxy9XUro.roa (hash: FyOYZU8Lcu6m3tCIEh8spxjddiJiAmITHkAJjSq/GW0=) 8: hWosbOoApl7V_Bhpe5UlA20sERA.roa (hash: PkJmNJ/LtXuQwtW6f6gFggLl9YMZJgAspupTTJw2DD0=) 9: m-oD5AGGiKc-qI8F9BHOsqfUhwQ.roa (hash: ZivLa2r1rkIhgA7nnzvSrie3rkSLQvNS6UhWQpi2o50=) 10: r4CnQQx_zbdBDGpIsGGdqEuowRg.roa (hash: Cf3KdUglzAXq3AND0kUcTnVm0D52NG4w3f87gIFdSQg=) 11: uot90FkBP8Y3Y-x6-7brjjoB-rU.roa (hash: 0JXXSAl/uFfrD7KxeCsCoDWgeiNKlIuga4IDFWQXH2c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 12 Jun 2025 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:5c:ee:9a:8a:2c:c9:d9:67:75:61:55:43:99:cf:49:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Validity Not Before: Jun 11 03:00:30 2025 GMT Not After : Jun 12 03:00:30 2025 GMT Subject: CN=00065be9dcfbdc2ac8602d8f798315e928151724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:32:bd:fa:1c:ef:b5:14:a1:93:3c:51:69:15: 57:96:e2:c8:ce:39:21:41:ef:0b:73:6f:b4:58:10: 12:4a:02:19:70:f6:a8:23:e6:6d:8c:ab:af:12:b6: 16:c9:ab:70:b4:c9:54:ea:1b:07:b6:ed:12:28:0a: bf:31:eb:aa:80:46:37:15:d1:98:4d:ce:1c:b6:d2: e5:d1:de:f7:14:06:bb:9f:6a:03:f7:77:7e:e1:a1: e6:c3:c0:76:cd:07:e6:17:44:15:83:fa:3c:17:29: e9:f9:85:aa:ff:ff:bc:b2:82:00:7b:dc:b1:d8:8a: 8e:ea:33:d9:c3:b9:5e:2c:62:f9:62:4a:55:ab:1b: 2f:b2:18:5c:df:a3:f0:eb:a1:cb:3a:fb:a4:20:aa: a8:8c:56:63:04:fc:da:3e:be:90:cb:ba:c1:35:0b: 36:86:8a:18:fe:8c:cb:e6:14:13:38:b0:13:7a:a2: 94:d8:20:8a:f9:10:51:13:44:d7:1f:82:4f:7a:1a: 8d:a0:79:b3:86:96:16:57:9c:98:23:b4:50:64:90: 42:64:e5:0a:67:71:70:57:ff:56:a6:08:46:7b:ae: 73:6d:b3:30:85:fc:af:dd:a7:37:a6:3c:f2:10:86: 64:76:61:0e:7e:c5:83:6a:fc:b4:74:7f:77:ae:87: 6a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:06:5B:E9:DC:FB:DC:2A:C8:60:2D:8F:79:83:15:E9:28:15:17:24 X509v3 Authority Key Identifier: keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:c6:90:72:92:49:59:c6:94:e5:28:54:9d:32:b3:81:cc:67: 70:a8:54:35:3e:cd:f1:c9:de:51:17:a8:89:78:b0:13:70:47: ed:a3:2c:49:26:bd:bf:fc:89:46:90:49:c0:c4:15:29:81:1c: a2:82:31:87:3f:f8:ba:6f:eb:31:3d:ad:0c:ff:14:e3:33:5d: 15:e4:8e:1c:c8:8c:6a:a7:a5:05:25:90:54:6a:0d:6e:ef:01: 0e:1a:33:8a:29:94:6f:86:23:b6:d0:b3:55:40:c2:ad:e9:e6: 19:d5:c0:a5:32:27:85:e8:5f:88:44:7f:7f:83:a4:76:90:f8: 5d:c6:0c:aa:df:df:a4:8f:a7:7c:b3:92:85:62:8f:73:2a:34: 7a:10:03:c4:1b:7a:96:51:84:9e:8e:08:80:8c:7c:05:e8:9d: e6:e4:85:f0:87:3e:b6:e0:fe:a0:09:12:f5:5a:d9:a9:e7:f5: f1:cc:6e:e0:3b:9f:d9:de:bd:19:bd:7d:46:83:25:60:2c:48: af:c3:08:54:00:5c:5a:45:a8:5f:b8:4f:a2:d9:03:e3:17:59: 3d:99:f1:2b:52:f1:cc:4e:db:5c:6e:15:dc:40:0d:f1:a5:ac: e9:39:df:50:a5:e9:a2:28:91:c4:64:fe:98:ed:5e:e8:a0:2e: 23:82:89:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdc7pqKLMnZZ3VhVUOZz0nxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MTlmMmFkOTE1ODRiYWZmMDQ2NzQ0N2JhYzhmYjk3OGQx ZjlkZDMwHhcNMjUwNjExMDMwMDMwWhcNMjUwNjEyMDMwMDMwWjAzMTEwLwYDVQQD EygwMDA2NWJlOWRjZmJkYzJhYzg2MDJkOGY3OTgzMTVlOTI4MTUxNzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszK9+hzvtRShkzxRaRVXluLIzjkh Qe8Lc2+0WBASSgIZcPaoI+ZtjKuvErYWyatwtMlU6hsHtu0SKAq/MeuqgEY3FdGY Tc4cttLl0d73FAa7n2oD93d+4aHmw8B2zQfmF0QVg/o8Fynp+YWq//+8soIAe9yx 2IqO6jPZw7leLGL5YkpVqxsvshhc36Pw66HLOvukIKqojFZjBPzaPr6Qy7rBNQs2 hooY/ozL5hQTOLATeqKU2CCK+RBRE0TXH4JPehqNoHmzhpYWV5yYI7RQZJBCZOUK Z3FwV/9WpghGe65zbbMwhfyv3ac3pjzyEIZkdmEOfsWDavy0dH93rodqyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAAGW+nc+9wqyGAtj3mDFekoFRckMB8GA1UdIwQY MBaAFDkZ8q2RWEuv8EZ0R7rI+5eNH53TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUt MzJhYTY3MzFjMjkxLzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUtMzJhYTY3MzFjMjkx LzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnMaQcpJJ WcaU5ShUnTKzgcxncKhUNT7N8cneUReoiXiwE3BH7aMsSSa9v/yJRpBJwMQVKYEc ooIxhz/4um/rMT2tDP8U4zNdFeSOHMiMaqelBSWQVGoNbu8BDhoziimUb4YjttCz VUDCrenmGdXApTInhehfiER/f4OkdpD4XcYMqt/fpI+nfLOShWKPcyo0ehADxBt6 llGEno4IgIx8Beid5uSF8Ic+tuD+oAkS9VrZqef18cxu4Duf2d69Gb19RoMlYCxI r8MIVABcWkWoX7hPotkD4xdZPZnxK1LxzE7bXG4V3EAN8aWs6TnfUKXpoiiRxGT+ mO1e6KAuI4KJEA== -----END CERTIFICATE-----Generated at Wed Jun 11 13:05:56 2025 by rpki-client