$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft File: fRSfYkR4U2icEvsoiv62toHP68E.mft (raw, json) Hash identifier: 4qnNU6unPqtdQs9QcfjArgiE9LD4jb3lXASyOEFYrBI= Subject key identifier: BC:38:B0:97:CF:1A:51:4E:EB:B6:FE:36:10:68:61:23:04:79:B3:63 Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1 Certificate serial: 019751FD1F560D36B3ABDC3AC765033C551D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft Manifest number: 151F Signing time: Mon 09 Jun 2025 00:00:32 +0000 Manifest this update: Mon 09 Jun 2025 00:00:32 +0000 Manifest next update: Tue 10 Jun 2025 00:00:32 +0000 Files and hashes: 1: 2CeWoGzDWl6UkY36SIUH1OhgWjI.roa (hash: SpuPtcO5oh6qYeICaLjHEnb1AyuNec5O8bsGPbWlXR0=) 2: 2OyaFSjBRoREDHEMRffL3EbO-HE.roa (hash: nXI4OkiYa5c+MjdVzqLFFZ3ZGswBHizjRFddCRvE7B8=) 3: 3wwIi79zg2SGivGdrN-g0LB5ULQ.roa (hash: RzCIbHY1nS76gIylPt0Y25UbcEOAlA6M3aFOCeIxSG4=) 4: 7gAx1Pyx4u0TcyoGJm-7xTCnp00.roa (hash: gAGdIZGspYyJlvskZ74rsTfXVPxswIlGbLI3PkYprvU=) 5: EUICRwNR8sR91Lfm3GIv3mdVr9k.roa (hash: ua1xjRnUek2cLwApq/HW3bjCZKfJsqGGvp16wgKp8P0=) 6: HYkelKhWY7NiPV2rIoXC5vMsggM.roa (hash: 8m611pZGVk4ujPG9J04iZxFPYTUOzYbyGd2fDqvqZP4=) 7: Jhq91rxsv2WDUPAoN1fbsyaCM6g.roa (hash: nybfHNUP7zn/KmMoeiwkEEs96tiChMxH1OSoiBocUXI=) 8: Melq7PLQcz-P184ktmpNOP2H3e4.roa (hash: bGaw09MG/JnAsEfDppYWkhFJuztc0B+a9Nz0AQOqrUY=) 9: Q4BLVnTtEyoC8eHyhkcteKoeJ6A.roa (hash: edQEuSj12spKEsnnwc1oyC8FT8MhVl13a4ooOoJq0ys=) 10: RWf3DVveZH4QLyKGQca82kY-7Qw.roa (hash: V22GqObY+hDoy85YYLCgPS5lAieuM7VmlAbZz3/L7ZM=) 11: fRSfYkR4U2icEvsoiv62toHP68E.crl (hash: 6to/Yr2zprb0mE+jQpEXf77fx3vQGotUsvPT1cZzKkc=) 12: jbUG9pTk9em_fTHbjoEIhua3pK0.roa (hash: 4tGn3tkK46T9dFOLGdw2zw9ukjnxUtA/PXFwlS5np88=) 13: l63ezx_M0iAM5dKGQZtcWd8xPmQ.roa (hash: qf8bDHKpJxynQt1q7hXqJrXbCZfUxZZ7MBpbrfJkMcU=) 14: lkgJ8Vsd8ocb4eicMkQ6N3ZL26E.roa (hash: 9Yz4K7Z8z/hwTeoXB4iHYgi23xVHLoum6nVhNj0Tjmc=) 15: o1JVWuEuZPta2YEvpJ2jdJYR8K8.roa (hash: qNV/P5sCJuhJ/7lvmy6L/P1vDN6QSvQRrwuS+5DqKkg=) 16: txxKQQE40wffgCtcTH6E5WrYYhY.roa (hash: td5UTouO1Nf7RuKTOrzSb6h5NfM7Vvfby16oyueCQko=) 17: zBonQZgEPDvj1nGNR_bu7NzMU0U.roa (hash: s94OjMSrqoWnsXwDlW8kAk2CQ0Z0teuNflnJXhN+I6g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Jun 2025 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:51:fd:1f:56:0d:36:b3:ab:dc:3a:c7:65:03:3c:55:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1 Validity Not Before: Jun 9 00:00:32 2025 GMT Not After : Jun 10 00:00:32 2025 GMT Subject: CN=bc38b097cf1a514eebb6fe36106861230479b363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7f:ba:b5:81:64:e4:74:d0:02:cb:d6:a3:9a: 45:b0:bc:88:96:27:fd:1d:4c:34:1e:3e:d4:26:7a: 2d:4e:8e:a5:e8:c5:c7:1d:8c:5b:2b:c2:85:de:12: 0b:b9:59:d8:12:65:6d:0f:db:07:9d:28:21:66:1b: a7:5d:20:09:5b:44:b0:5b:69:ad:c2:64:57:6e:00: bc:f6:40:69:bc:c7:8c:27:92:1b:f8:ab:ba:d8:60: 7c:6f:56:c1:3b:a4:b4:6f:4c:b4:a7:e0:b5:4e:44: 81:06:5a:c9:b6:89:b7:3a:6b:03:9a:cf:a9:05:0c: d2:2c:8f:e0:70:be:b1:be:60:bf:c5:bf:98:32:28: b9:d8:11:f7:cf:3b:63:b1:ee:40:36:df:4a:f7:a4: ba:d4:5e:a0:32:e8:1b:41:20:80:5a:cf:f8:ac:c2: f1:ad:39:38:57:e4:8e:45:36:95:8d:9a:22:46:6f: 0f:af:ed:36:d0:4c:3d:d3:aa:30:92:fb:be:c2:f0: 56:24:4e:32:c2:7d:81:2c:d2:69:73:56:91:6f:d1: 54:93:a2:5f:a3:39:17:7c:df:3f:11:9a:a6:37:e6: 16:e0:41:1d:c4:32:b5:ba:49:4d:c0:49:6f:47:96: 29:34:14:1b:94:fb:d6:65:5e:2d:10:a3:1b:c6:6d: b8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:38:B0:97:CF:1A:51:4E:EB:B6:FE:36:10:68:61:23:04:79:B3:63 X509v3 Authority Key Identifier: keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:84:76:b6:53:b4:6a:d2:08:9f:eb:ec:ed:2d:c5:20:17:21: cd:22:dd:82:61:46:39:46:21:c1:0a:5a:6e:d6:1e:23:0a:38: 8f:bf:37:9b:d2:00:f5:64:b7:b9:ff:df:7d:e4:01:26:c6:15: c6:2d:a7:d3:50:50:04:65:58:f6:ee:1d:f5:c6:c0:9a:99:e8: e3:9e:e5:36:0b:e1:6e:7d:8e:60:92:ea:cf:82:6e:06:5d:55: f8:99:73:ad:48:04:b0:a1:ef:49:8c:db:34:67:7f:56:ad:c0: 43:79:ea:6e:d3:c8:ec:61:69:47:d2:34:89:87:a3:d4:93:f4: 95:5d:53:88:7e:19:65:32:85:f7:99:d6:98:ce:f9:b1:f0:26: 06:f2:7d:88:09:ab:f1:21:96:b6:59:6a:3b:93:f2:85:4a:ae: 31:cc:61:23:b2:c7:6b:bd:31:50:1c:fe:78:44:4f:b3:5c:de: f4:4c:e4:72:5d:cc:18:5d:b6:c7:51:50:00:ac:a4:b9:64:ac: 92:d5:4a:5f:58:3f:db:fc:95:25:92:29:14:c3:3f:ef:bc:52: 6b:b2:14:3b:8f:65:8e:16:72:8f:22:26:7f:a9:ab:4d:71:ec: 06:23:93:36:2b:dc:13:5b:1b:9f:81:fc:ff:f1:73:23:f9:d4: 48:b3:55:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdR/R9WDTazq9w6x2UDPFUdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMTQ5ZjYyNDQ3ODUzNjg5YzEyZmIyODhhZmViNmI2ODFj ZmViYzEwHhcNMjUwNjA5MDAwMDMyWhcNMjUwNjEwMDAwMDMyWjAzMTEwLwYDVQQD EyhiYzM4YjA5N2NmMWE1MTRlZWJiNmZlMzYxMDY4NjEyMzA0NzliMzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxX+6tYFk5HTQAsvWo5pFsLyIlif9 HUw0Hj7UJnotTo6l6MXHHYxbK8KF3hILuVnYEmVtD9sHnSghZhunXSAJW0SwW2mt wmRXbgC89kBpvMeMJ5Ib+Ku62GB8b1bBO6S0b0y0p+C1TkSBBlrJtom3OmsDms+p BQzSLI/gcL6xvmC/xb+YMii52BH3zztjse5ANt9K96S61F6gMugbQSCAWs/4rMLx rTk4V+SORTaVjZoiRm8Pr+020Ew906owkvu+wvBWJE4ywn2BLNJpc1aRb9FUk6Jf ozkXfN8/EZqmN+YW4EEdxDK1uklNwElvR5YpNBQblPvWZV4tEKMbxm24KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLw4sJfPGlFO67b+NhBoYSMEebNjMB8GA1UdIwQY MBaAFH0Un2JEeFNonBL7KIr+traBz+vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTct YWFiMGU0MTRjYzYzLzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTctYWFiMGU0MTRjYzYz LzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4R2tlO0 atIIn+vs7S3FIBchzSLdgmFGOUYhwQpabtYeIwo4j783m9IA9WS3uf/ffeQBJsYV xi2n01BQBGVY9u4d9cbAmpno457lNgvhbn2OYJLqz4JuBl1V+JlzrUgEsKHvSYzb NGd/Vq3AQ3nqbtPI7GFpR9I0iYej1JP0lV1TiH4ZZTKF95nWmM75sfAmBvJ9iAmr 8SGWtllqO5PyhUquMcxhI7LHa70xUBz+eERPs1ze9Ezkcl3MGF22x1FQAKykuWSs ktVKX1g/2/yVJZIpFMM/77xSa7IUO49ljhZyjyImf6mrTXHsBiOTNivcE1sbn4H8 //FzI/nUSLNVbg== -----END CERTIFICATE-----Generated at Mon Jun 9 04:20:19 2025 by rpki-client