$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft File: ORnyrZFYS6_wRnRHusj7l40fndM.mft (raw, json) Hash identifier: VYenlT/gQGNtIqfuqIprEkr14OpgvvnfbskspQystuM= Subject key identifier: 9A:30:64:28:A9:EB:63:D0:8C:94:8A:9F:BC:D9:87:87:D7:40:65:65 Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Certificate serial: 01975347115B70A4C3149F1115C3B9DDAFF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft Manifest number: 15A7 Signing time: Mon 09 Jun 2025 06:00:55 +0000 Manifest this update: Mon 09 Jun 2025 06:00:55 +0000 Manifest next update: Tue 10 Jun 2025 06:00:55 +0000 Files and hashes: 1: 3Xkfgsy5F0IowNcy1PedAB3Q6w0.roa (hash: iyJL5cuUJjZvE75tBtKfcWvyK2dmPiVKM7BX3wZGQos=) 2: 4EDvDSCIPe0YYvYx7Str0IpAPeM.roa (hash: A9xeZgyOfSqqIMRvaPEIhp5b1RhtdrlitB+v147UkT4=) 3: 5pue0s9j8lhdVuO6m6E92d4GwDU.roa (hash: CSkd5pFYexGISl0uc2qVJpocMMmmGw3Zguf0ypv5Owk=) 4: M5hYRJhvdGCKvhvMAGC4jWTJSXA.roa (hash: VGkxa4pTyEqZCbbcRS6HnlUuOo2QmctHYBT+vvYYBDg=) 5: ORnyrZFYS6_wRnRHusj7l40fndM.crl (hash: wWdEtHYfUZvVMeDXVLS6n23B3LP3PATkcnVB2i5xRJE=) 6: UfCPGY0KJE6274iAqACixLj9Gmw.roa (hash: DEe7CtPUt0XEDknWoFEE8OaasnbG+ag0I4mAzR/inaE=) 7: WBerlCoyvzWnSx7AM9uVxy9XUro.roa (hash: FyOYZU8Lcu6m3tCIEh8spxjddiJiAmITHkAJjSq/GW0=) 8: hWosbOoApl7V_Bhpe5UlA20sERA.roa (hash: PkJmNJ/LtXuQwtW6f6gFggLl9YMZJgAspupTTJw2DD0=) 9: m-oD5AGGiKc-qI8F9BHOsqfUhwQ.roa (hash: ZivLa2r1rkIhgA7nnzvSrie3rkSLQvNS6UhWQpi2o50=) 10: r4CnQQx_zbdBDGpIsGGdqEuowRg.roa (hash: Cf3KdUglzAXq3AND0kUcTnVm0D52NG4w3f87gIFdSQg=) 11: uot90FkBP8Y3Y-x6-7brjjoB-rU.roa (hash: 0JXXSAl/uFfrD7KxeCsCoDWgeiNKlIuga4IDFWQXH2c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Jun 2025 02:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:53:47:11:5b:70:a4:c3:14:9f:11:15:c3:b9:dd:af:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Validity Not Before: Jun 9 06:00:55 2025 GMT Not After : Jun 10 06:00:55 2025 GMT Subject: CN=9a306428a9eb63d08c948a9fbcd98787d7406565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:02:81:b9:45:62:49:d9:40:4d:18:23:e6:16: d3:ff:9e:3c:7d:77:ba:3c:b3:24:b4:0f:7e:21:75: cb:ef:dd:a4:e6:a1:5f:be:02:87:e9:f8:dd:1c:a6: 51:9d:71:bb:6f:64:84:2a:d5:5e:ab:cf:b5:22:cc: d7:ce:72:74:75:1b:2a:74:7b:f7:e0:b2:10:ad:bc: 74:d0:ad:d4:6e:dc:45:1e:75:24:1a:19:67:66:86: 69:ff:af:82:82:f4:ca:b0:d4:73:3f:f5:0f:0c:f9: 07:80:f9:6b:16:11:0e:22:cf:df:38:bd:f4:2f:06: fc:bc:33:fc:bf:5e:05:4a:ef:1c:b7:08:44:50:7b: c5:c2:b6:b1:e8:ee:99:b5:d4:17:99:fc:03:64:ee: 91:12:5f:31:c8:b2:e6:6a:ba:0d:1f:98:da:df:ad: 2c:54:f5:6a:94:0c:7a:08:62:4c:e4:3c:ca:0b:ee: 04:39:af:72:b9:3f:d1:1d:cd:85:14:40:bd:53:c1: fc:41:c9:dd:a0:57:6f:9b:e0:c2:e1:44:e4:a9:ce: 39:22:56:15:4a:a2:a7:86:75:3c:77:95:25:4e:b6: 3b:8d:04:70:12:e4:ba:34:63:dd:b5:62:b8:06:69: ac:87:01:c2:ca:8f:e8:cd:99:08:45:a0:d8:c5:30: 7b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:30:64:28:A9:EB:63:D0:8C:94:8A:9F:BC:D9:87:87:D7:40:65:65 X509v3 Authority Key Identifier: keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:b1:cf:9f:39:e4:9f:0e:2b:31:24:ad:31:97:c5:05:f2:d7: 72:b7:81:94:10:85:56:db:93:dd:68:68:fd:cd:69:2a:29:76: 1a:2c:19:d6:24:9b:c3:81:3d:a1:77:50:00:e2:a3:e8:59:26: 00:75:d2:45:b7:08:27:ce:f4:b9:de:75:9c:c7:88:68:7d:c6: 64:68:9d:1c:cd:0b:21:b7:12:6f:fd:fc:d3:36:4d:fa:a0:d4: f5:6d:3a:c6:75:8e:4d:43:d0:fa:2a:4b:8c:04:e1:3f:69:ec: c6:11:01:58:1d:f7:03:69:50:17:72:20:b7:6f:eb:22:1e:9b: f8:83:0c:83:51:a2:d0:f1:f4:cd:67:f6:ab:0e:f1:2b:15:e3: bd:e7:87:82:4d:af:93:74:73:b0:b5:d0:2c:e0:b9:b5:0d:8a: ea:8e:c9:d4:e1:c1:52:a1:e3:85:af:c7:e3:99:22:7e:e9:fe: cc:05:c0:b3:32:73:c5:c3:27:b4:d7:66:58:d8:4a:20:33:84: 4f:da:1b:3e:7d:f2:f8:a9:56:33:51:6a:d2:a7:d8:0d:90:6a: 98:bb:76:76:7f:b8:43:ba:7e:db:e9:69:b4:44:61:39:35:56: 2c:1c:c5:d5:82:64:17:f3:17:86:6d:0c:4d:da:98:51:8f:2b: 50:15:72:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdTRxFbcKTDFJ8RFcO53a/1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MTlmMmFkOTE1ODRiYWZmMDQ2NzQ0N2JhYzhmYjk3OGQx ZjlkZDMwHhcNMjUwNjA5MDYwMDU1WhcNMjUwNjEwMDYwMDU1WjAzMTEwLwYDVQQD Eyg5YTMwNjQyOGE5ZWI2M2QwOGM5NDhhOWZiY2Q5ODc4N2Q3NDA2NTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywKBuUViSdlATRgj5hbT/548fXe6 PLMktA9+IXXL792k5qFfvgKH6fjdHKZRnXG7b2SEKtVeq8+1IszXznJ0dRsqdHv3 4LIQrbx00K3UbtxFHnUkGhlnZoZp/6+CgvTKsNRzP/UPDPkHgPlrFhEOIs/fOL30 Lwb8vDP8v14FSu8ctwhEUHvFwrax6O6ZtdQXmfwDZO6REl8xyLLmaroNH5ja360s VPVqlAx6CGJM5DzKC+4EOa9yuT/RHc2FFEC9U8H8QcndoFdvm+DC4UTkqc45IlYV SqKnhnU8d5UlTrY7jQRwEuS6NGPdtWK4BmmshwHCyo/ozZkIRaDYxTB74wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJowZCip62PQjJSKn7zZh4fXQGVlMB8GA1UdIwQY MBaAFDkZ8q2RWEuv8EZ0R7rI+5eNH53TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUt MzJhYTY3MzFjMjkxLzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUtMzJhYTY3MzFjMjkx LzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLHPnznk nw4rMSStMZfFBfLXcreBlBCFVtuT3Who/c1pKil2GiwZ1iSbw4E9oXdQAOKj6Fkm AHXSRbcIJ870ud51nMeIaH3GZGidHM0LIbcSb/380zZN+qDU9W06xnWOTUPQ+ipL jAThP2nsxhEBWB33A2lQF3Igt2/rIh6b+IMMg1Gi0PH0zWf2qw7xKxXjveeHgk2v k3RzsLXQLOC5tQ2K6o7J1OHBUqHjha/H45kifun+zAXAszJzxcMntNdmWNhKIDOE T9obPn3y+KlWM1Fq0qfYDZBqmLt2dn+4Q7p+2+lptERhOTVWLBzF1YJkF/MXhm0M TdqYUY8rUBVydQ== -----END CERTIFICATE-----Generated at Mon Jun 9 12:35:58 2025 by rpki-client