$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft File: KX75vv0afiTAzJcpmH_AZda3Ey8.mft (raw, json) Hash identifier: qVti4WaARNxmXSSWePy1Gfd0ULX7rugZofa0UIH2/uQ= Subject key identifier: 1E:F5:01:FF:D1:D2:27:53:E2:9B:6D:9D:0F:E9:F6:B1:FA:93:E3:C5 Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Certificate serial: 019741AE470CB8E0A38892E830B74A14BAA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft Manifest number: 051C Signing time: Thu 05 Jun 2025 20:00:29 +0000 Manifest this update: Thu 05 Jun 2025 20:00:29 +0000 Manifest next update: Fri 06 Jun 2025 20:00:29 +0000 Files and hashes: 1: 413TV1AdZT-kI9M2OP25iHiJY68.roa (hash: LDQ1Fn8K0fnRnfM1ZyE6DskGDqI4UQtW0gSVk69iEPs=) 2: DC8CWnfWr0kQCJUXXP37JYlG3bs.roa (hash: hIJ82Bht26+DJ40TdTwMmY9/6cclogWpDkPQZ7x1T3M=) 3: KX75vv0afiTAzJcpmH_AZda3Ey8.crl (hash: OWkxxrJ+fDIqk/QM5Cvl/Fu46m5SLeeH+xzIDdHUCgQ=) 4: Ow6xOfingvBCtHoNkaHGobxC5yY.roa (hash: NhFSRa+v/S1zW+iyQy+gxANBr6Bnqty2hhUOwum97Kc=) 5: QChegxRLNPsgM4aZ3Xr6VhdLIWc.roa (hash: bRcFRsu1/yeWRw6CVou2c0H6TdcYO6U68qWIBkemHjQ=) 6: V0aRJCOG2a9twiI1SK4HfmRChII.roa (hash: xPnpahcVRHcbxfnhq7t0F7epLdK24cqdjPN51uTlfmE=) 7: hGfJtXirv_T6lir1KXCyNzVXM7c.roa (hash: /luhB0eZkPviHFm9uxrYVp34Y+VHr9iED+Nm9m69zEQ=) 8: hKRvEPMVo2ukUILwmPta9_N3Dm4.roa (hash: qTgr935WkDSGh45Ek2R2g/eV9pnfadByRLqS2Wh5HdI=) 9: nendNgfVYn3Er_Jx5FR9_K0MhAI.roa (hash: Zo4nTYqJK3HMiwWvWWXaOyWIMzLwcZzzdn6p7ZMhRf0=) 10: nmJABDvfuOFv5rLDwlXnJrYAKfA.roa (hash: yu+JnwJ2ZdAZBsZsQOEV9MutU4KWGdZDxP69diYDCo4=) 11: rrgsKOzotuX_T9JtkCjsuwuT608.roa (hash: nbQl5tRFzUGsdMI8eU6ZprMteK4jRGohNhPIbe7S4Js=) 12: vft2JBQBkVTDag9j9_M4P-Fcw3g.roa (hash: AMXmsAdT9NymEMaDmBecmwNW9bgGXQhfsXH0M5Vxt5A=) 13: ws65NnH7cc5LX3ZtkutF5lwgOTo.roa (hash: 3tggzgIge6V0BsIfvy+BLekh4WUZ+47Y39glMLBsTTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:41:ae:47:0c:b8:e0:a3:88:92:e8:30:b7:4a:14:ba:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Validity Not Before: Jun 5 20:00:29 2025 GMT Not After : Jun 6 20:00:29 2025 GMT Subject: CN=1ef501ffd1d22753e29b6d9d0fe9f6b1fa93e3c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7c:61:00:79:78:b1:1a:cc:5e:dd:39:af:12: 52:df:73:54:bd:d3:e8:be:18:d7:01:35:2c:6e:c2: b4:3f:ab:b2:f7:e5:76:bb:dd:e0:36:31:88:fa:5e: f5:70:0f:40:b8:79:bf:b6:ff:b7:d8:ac:2f:91:5c: 30:f8:88:82:71:bd:46:47:eb:21:14:e1:3a:48:07: 6f:cd:20:bd:7f:51:8c:45:4d:26:89:58:3e:9e:f2: c2:7e:43:7d:41:1a:fe:dc:c7:8f:cf:b2:67:51:90: 8f:90:32:ab:6c:94:cb:de:93:b1:2e:c6:58:17:6d: a2:29:27:ae:07:64:e3:b4:2d:24:78:20:f8:f7:35: a5:e2:de:47:0b:c1:6e:e0:99:cd:3b:16:9a:2b:ef: 8d:91:a7:e4:20:15:ca:79:59:46:f5:19:ad:3a:28: fa:58:97:c9:12:3c:ad:ad:22:e5:8d:41:e6:bb:69: 08:73:84:b6:bd:0e:d2:79:1e:6a:b8:02:53:5a:50: 8d:18:6e:98:29:28:71:05:97:cb:3a:74:8f:07:09: 7f:c6:81:29:d3:31:e4:ca:68:0e:73:13:4b:35:f3: 7d:cd:ce:c9:75:9b:74:01:0a:ed:d8:04:98:3e:43: 2d:d3:78:cf:e5:2f:38:76:23:0e:dd:11:0b:91:61: 02:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F5:01:FF:D1:D2:27:53:E2:9B:6D:9D:0F:E9:F6:B1:FA:93:E3:C5 X509v3 Authority Key Identifier: keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:fd:8e:7d:2d:3d:67:65:50:a5:c9:03:e4:d3:1c:f4:52:b2: 8d:a2:4d:18:4f:77:e8:a0:ac:40:55:8b:00:20:95:f3:cd:9f: 22:18:ba:6f:fd:8f:93:42:f9:43:fc:80:e9:0c:eb:01:6b:bd: 7f:8a:44:72:27:7e:70:73:c5:92:78:4e:a7:8d:6c:0d:f2:45: 75:38:62:ef:b7:97:e1:ff:46:1c:93:67:01:30:88:82:85:e3: 4a:1d:db:32:b7:38:d7:96:49:a4:ab:60:77:32:a1:e8:5f:cd: 45:0f:5b:d2:a4:13:30:55:7f:d2:20:30:55:af:a6:0d:9f:38: 9d:f9:58:d0:f8:db:5a:3e:7b:d7:52:d6:71:f2:23:a1:51:ca: d3:a8:d5:70:65:df:dd:4e:ae:80:a8:9f:01:8a:b0:b3:17:3a: f0:7b:4a:65:9a:79:6c:6e:40:9c:14:76:f4:3f:e6:c1:37:46: 0e:92:4e:f5:05:d0:e5:8b:70:e9:2b:0b:0a:18:c2:b6:41:4f: cc:70:cd:3e:11:d5:fb:c9:1a:d0:9a:f4:c2:c1:e8:d8:d5:8a: 29:2e:08:e3:2f:fa:88:b7:32:f7:91:e8:04:1d:9f:db:82:5c: 2c:af:4d:88:ad:3a:ba:a1:98:a3:cd:95:d5:ad:21:d9:e8:c1: 61:ae:e6:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdBrkcMuOCjiJLoMLdKFLqiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi NzEzMmYwHhcNMjUwNjA1MjAwMDI5WhcNMjUwNjA2MjAwMDI5WjAzMTEwLwYDVQQD EygxZWY1MDFmZmQxZDIyNzUzZTI5YjZkOWQwZmU5ZjZiMWZhOTNlM2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nxhAHl4sRrMXt05rxJS33NUvdPo vhjXATUsbsK0P6uy9+V2u93gNjGI+l71cA9AuHm/tv+32KwvkVww+IiCcb1GR+sh FOE6SAdvzSC9f1GMRU0miVg+nvLCfkN9QRr+3MePz7JnUZCPkDKrbJTL3pOxLsZY F22iKSeuB2TjtC0keCD49zWl4t5HC8Fu4JnNOxaaK++NkafkIBXKeVlG9RmtOij6 WJfJEjytrSLljUHmu2kIc4S2vQ7SeR5quAJTWlCNGG6YKShxBZfLOnSPBwl/xoEp 0zHkymgOcxNLNfN9zc7JdZt0AQrt2ASYPkMt03jP5S84diMO3RELkWEC3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB71Af/R0idT4pttnQ/p9rH6k+PFMB8GA1UdIwQY MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt ZGVlNzY4NjAwMTNkLzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdv2OfS09 Z2VQpckD5NMc9FKyjaJNGE936KCsQFWLACCV882fIhi6b/2Pk0L5Q/yA6QzrAWu9 f4pEcid+cHPFknhOp41sDfJFdThi77eX4f9GHJNnATCIgoXjSh3bMrc415ZJpKtg dzKh6F/NRQ9b0qQTMFV/0iAwVa+mDZ84nflY0PjbWj5711LWcfIjoVHK06jVcGXf 3U6ugKifAYqwsxc68HtKZZp5bG5AnBR29D/mwTdGDpJO9QXQ5Ytw6SsLChjCtkFP zHDNPhHV+8ka0Jr0wsHo2NWKKS4I4y/6iLcy95HoBB2f24JcLK9NiK06uqGYo82V 1a0h2ejBYa7mEQ== -----END CERTIFICATE-----Generated at Fri Jun 6 03:30:10 2025 by rpki-client