$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft File: i4JDP_6UvzU2_sMnVD05YVggIHI.mft (raw, json) Hash identifier: IscxksWwVRCeIeGmh87cRaXBN4lxQMQmvRhRToXiA8Q= Subject key identifier: 4B:8B:2A:3A:71:13:8C:38:E6:92:26:44:FB:35:F3:1E:11:2F:3F:DC Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72 Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072 Certificate serial: 01974D44FA18D199F60A032B332A5AD5451F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft Manifest number: 0B96 Signing time: Sun 08 Jun 2025 02:00:55 +0000 Manifest this update: Sun 08 Jun 2025 02:00:55 +0000 Manifest next update: Mon 09 Jun 2025 02:00:55 +0000 Files and hashes: 1: 4fxQzx_8ByWwMKk9dyXM0XEaMys.roa (hash: /pQNDc4tCpOKVTxdQ/1sSXEuYSGaPkaAPaOzkIFfq/U=) 2: D0yJcu0JvPJ2IZ6qvrN_68RL81A.roa (hash: NXJKvgJ+KpYYxv4h48ZyQkogSfsaqjnCJ9F84sJ/8IA=) 3: W9TFdD94lkINNpe0yudKptP_VLs.roa (hash: cP06PmfxXfnVdgeDD5yGsXjPUheUvD8ffIUpVLl0OGI=) 4: fAdRVcLtp1Hdo62qAxJzNRyFLms.roa (hash: /9qm18tTMk3ZVKpb3SBqcWWsV0TFo0WtQqugq7BXDfU=) 5: fk9piBmxadoxJuP7Wx4UPTdBTGM.roa (hash: P0efcRRoA7jHUP2kLMx2ZKnIu/J2T6OthYnnV4Yj06A=) 6: gYA_rHJcDyZ1I8qy1R4L0zDW9qI.roa (hash: u5z8BQnf6PynI8NBRk8KSGbQCrjifEnXJWVptV9ywSs=) 7: i4JDP_6UvzU2_sMnVD05YVggIHI.crl (hash: uPNFXsCEa7PE3DXwEgqn9Yr0eGMM+iIzuqD6QoAzE0k=) 8: k_0zEMHxmfACdt3JyIQe32n-3UE.roa (hash: 1zpkXrC9Bl+aFyn5Yr4Xer+2HoYHjHajiHX7XweXMcg=) 9: xNtGHv1YLmz0baQ6fFAsVkQIQLw.roa (hash: glTrDTx+iBPrwn7/BNyzFNiZr9vyz3H84OvS4u/lrN4=) 10: yx9i8LZCbjvaDebLsn4vp_1QQsw.roa (hash: koRh5dNP2sZyFodyKIh0Iqwubeq7l02U0bZSoimi8yU=) 11: yyP9fmeZAYp1K1vaVu0uJv4Agws.roa (hash: egmTg6Tzum2/xFgjHv1aVGDhof0qC374Rh2lR+uVm0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4d:44:fa:18:d1:99:f6:0a:03:2b:33:2a:5a:d5:45:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b82433ffe94bf3536fec327543d396158202072 Validity Not Before: Jun 8 02:00:55 2025 GMT Not After : Jun 9 02:00:55 2025 GMT Subject: CN=4b8b2a3a71138c38e6922644fb35f31e112f3fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:aa:64:6d:fe:73:cc:1e:b2:f8:2b:34:7b:4c: 4e:99:52:da:f1:e4:c5:9a:ad:60:63:47:ad:74:75: bc:67:16:4f:df:0c:d0:69:21:cd:61:c6:9b:d0:fd: d2:93:d9:b3:54:c7:ce:f3:dc:f0:ca:25:61:01:36: c2:18:e1:4f:65:34:27:65:a7:9d:2e:fb:48:cf:f2: 9e:d2:af:f3:39:10:5d:90:64:84:b4:97:5d:22:78: 51:10:a6:6f:32:bd:23:28:03:3c:f1:fc:a0:34:0b: 07:09:01:17:94:45:cb:74:3e:4a:82:57:58:2e:ac: 77:7d:0c:cc:13:1b:90:5d:16:ba:4b:75:0c:0b:3c: d5:d3:f4:16:7c:c2:76:d8:8c:16:ba:35:90:8b:2b: 54:68:40:39:b8:33:10:33:46:f4:4e:54:ec:27:de: d5:ae:f3:f4:b4:22:ff:d5:83:13:51:d0:b1:85:18: fb:62:d6:0f:72:fd:8d:bd:e1:3f:f8:e2:7a:79:60: 2d:d6:07:dd:c4:81:b4:5c:be:b3:e9:58:e1:fb:be: 7d:36:f7:1c:62:54:db:37:7b:28:ae:f8:dc:03:28: bf:21:94:69:ca:d3:c9:41:a1:64:a9:8b:84:2a:82: 09:b7:98:48:a3:d5:b5:50:a9:73:db:dc:be:ae:4a: 49:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8B:2A:3A:71:13:8C:38:E6:92:26:44:FB:35:F3:1E:11:2F:3F:DC X509v3 Authority Key Identifier: keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:9b:80:a0:39:2d:c2:24:0d:82:87:51:30:06:b1:52:21:f5: a7:ba:9f:cf:d7:8a:fe:df:69:bc:dd:35:e1:7c:5d:06:75:98: 7c:8a:21:94:c0:cc:b0:dc:7c:e3:66:b5:5a:e4:2f:29:96:18: cf:ad:25:6f:eb:a7:0a:0a:69:c5:95:1d:8c:16:c5:21:28:d1: 46:be:04:c6:2f:0e:4b:c1:97:ba:31:00:dc:3d:9e:ec:e6:a8: 82:46:63:65:e0:9b:86:3a:b9:fe:65:d8:24:ab:f0:79:32:36: 1a:c8:29:ed:b3:62:3f:ed:eb:d9:28:b7:b3:66:b5:28:2d:6f: a2:06:6e:26:7e:83:2f:1a:f3:59:ec:f6:89:aa:67:73:22:89: ea:4f:8e:41:fd:9e:4d:f2:1b:64:58:d7:34:bb:e3:92:44:7d: dd:65:a5:c3:eb:b1:6d:2b:05:5c:59:97:8f:3a:c2:17:4a:7a: 52:ea:ed:e9:eb:e1:d8:1e:7d:9b:d1:fc:33:2d:8d:b6:78:2f: 3c:91:37:ca:4d:af:c0:fa:3f:2f:d8:7f:e5:a6:c9:28:84:3a: c1:22:55:e3:00:3d:f0:b7:61:39:c0:c5:dd:e2:9c:74:73:19: 3a:90:11:63:67:96:2c:e1:11:a1:11:f0:6e:b3:6d:d4:ad:15: 46:fe:de:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdNRPoY0Zn2CgMrMypa1UUfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiODI0MzNmZmU5NGJmMzUzNmZlYzMyNzU0M2QzOTYxNTgy MDIwNzIwHhcNMjUwNjA4MDIwMDU1WhcNMjUwNjA5MDIwMDU1WjAzMTEwLwYDVQQD Eyg0YjhiMmEzYTcxMTM4YzM4ZTY5MjI2NDRmYjM1ZjMxZTExMmYzZmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6pkbf5zzB6y+Cs0e0xOmVLa8eTF mq1gY0etdHW8ZxZP3wzQaSHNYcab0P3Sk9mzVMfO89zwyiVhATbCGOFPZTQnZaed LvtIz/Ke0q/zORBdkGSEtJddInhREKZvMr0jKAM88fygNAsHCQEXlEXLdD5KgldY Lqx3fQzMExuQXRa6S3UMCzzV0/QWfMJ22IwWujWQiytUaEA5uDMQM0b0TlTsJ97V rvP0tCL/1YMTUdCxhRj7YtYPcv2NveE/+OJ6eWAt1gfdxIG0XL6z6Vjh+759Nvcc YlTbN3sorvjcAyi/IZRpytPJQaFkqYuEKoIJt5hIo9W1UKlz29y+rkpJJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEuLKjpxE4w45pImRPs18x4RLz/cMB8GA1UdIwQY MBaAFIuCQz/+lL81Nv7DJ1Q9OWFYICByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYt MmRkNzg5MGRjNjg5LzEvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYtMmRkNzg5MGRjNjg5 LzEvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdJuAoDkt wiQNgodRMAaxUiH1p7qfz9eK/t9pvN014XxdBnWYfIohlMDMsNx842a1WuQvKZYY z60lb+unCgppxZUdjBbFISjRRr4Exi8OS8GXujEA3D2e7OaogkZjZeCbhjq5/mXY JKvweTI2Gsgp7bNiP+3r2Si3s2a1KC1vogZuJn6DLxrzWez2iapncyKJ6k+OQf2e TfIbZFjXNLvjkkR93WWlw+uxbSsFXFmXjzrCF0p6Uurt6evh2B59m9H8My2Ntngv PJE3yk2vwPo/L9h/5abJKIQ6wSJV4wA98LdhOcDF3eKcdHMZOpARY2eWLOERoRHw brNt1K0VRv7eHA== -----END CERTIFICATE-----Generated at Sun Jun 8 04:25:13 2025 by rpki-client