$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft File: q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft (raw, json) Hash identifier: /PS3ZCRybN2mBr/5opbfel1npeMKIZ/DNbRpyP8LiZk= Subject key identifier: D2:E1:70:D6:BA:75:CE:E9:34:41:64:C4:32:BC:4C:28:60:1A:1F:F0 Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Certificate serial: 0197458B44EE76D8683B8368C4DBF2B09625 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft Manifest number: 15CE Signing time: Fri 06 Jun 2025 14:00:44 +0000 Manifest this update: Fri 06 Jun 2025 14:00:44 +0000 Manifest next update: Sat 07 Jun 2025 14:00:44 +0000 Files and hashes: 1: 3rSRd0RZU7FekSH23KpB4AjQvCA.roa (hash: dHJ5VK5jy4AG5zWMS9JzXCYfEPP9KtWlYIJ17BPZ8p4=) 2: 79SKiAPGItgSBiSdHsbiPNmxzdA.roa (hash: bp4Hzk1UysrE74qZJaWtC8IolTv/126MWUfJ4dgAP+w=) 3: 8CD_BDNohDu7BFPue0FAVtqeSKE.roa (hash: MBbBcYx0OZxz+xXv93fCUqPEHeogAGDOWRTI0SELjnU=) 4: DLGzg4PXXfMLLz9uU9Jb8GzjTYQ.roa (hash: UyDgyJqrwARZHVBt5A9PQUxwD+TJu3qnXyFQy1aEp9I=) 5: FmNEfzs-SRSfbomfiiNIeqQS1sk.roa (hash: DZqchwYxSvfrNSJm9BmQA3cTvM8eHMT7t5woC6TuhyE=) 6: Qdu0d9QLtNBsD5iH6QjOkHOjfR0.roa (hash: WIh4dCuUbUKwr5ezCX9dxWL5StxMpA6ugd95qMzqKA4=) 7: U3lA_e0y8319DjoZ7X8Ks2r2M7w.roa (hash: fqverKbNHsV3jVuR9y0WWha056JePZs0l3+H4zjSxfA=) 8: W4bkJ6IHGpMDnc-eERRMgLecaRY.roa (hash: f8DGWIOVKEtO1y7kX/yc0GrbmCyQ2M3bGkc6cPKnJfo=) 9: XWgY9IE5WPWEYKpZb_DdJSKgmNk.roa (hash: RjaBA1nT0ZNCp2uF/Bf1faWMk5+nUdGucIKvPd+4FJg=) 10: afCUdciEL8e1tl5gYWrtb0HNTsk.roa (hash: 5NoCDBuBZUGC39cg06n8OGy1uzMRcXZWmjT1H17s8qs=) 11: eeDfIlNHz-MS84Jn8ZaBvfv9TTY.roa (hash: Nuu5BDy0CuOnKoHwa87Nw4BNQ/P69UXEmPo5SaswqxY=) 12: ic4TzeBOLx46VAxZ0kBOyLnL-aA.roa (hash: o/eumNvuz+9CmmVOqXWqv98TZutXQn/8mhjgfl+DMUM=) 13: jEkIkDjyHf0Y5CHlkh_SAYrLMi8.roa (hash: nK+7va5r0DKn11vhjaj1KeeLmtO5MjFetghK5DI3nyo=) 14: k1o7H-5eEgCdvmr2Au7FXonmUIc.roa (hash: cPZnlWd1NF/fLPFMgOLyjHXmXf8GfrHrU0SBnmHDHvY=) 15: lSOxZN--Nv76VTwU3O8Fys07u2M.roa (hash: KF0YUVuZrHgrWuxvGjcknBz1cOoRQsrm28h1CM9VPOI=) 16: oRojqrF2upd4qpGF9qwuvKkB85M.roa (hash: rI1ZvEDD5nBz4EJV2sl7C1HlZDCYTwKf5IAxKcbibxk=) 17: q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl (hash: tXbg/OVy5TmHwZAkVrJYlD4ER8fqhVMe0w31hnfeWgY=) 18: rbJzreDbHp60Zc3UJ6AODADth8g.roa (hash: BpjTDuP8RPY+luxryeSysWVMte9pS4i/E17bDx01jBk=) 19: rq4z53nTY235oXOYEJGf8J9hSBk.roa (hash: ALoDf8xPedv7a4y1Cobi6nNzEhORdIhw3weFRomPawE=) 20: wWbDK40S4dgNgIeoUbg-t_w6Qx0.roa (hash: SQUX4nOmlr/84KlBRvNtQfHH9k/9TOfWpMlz56zCIZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:45:8b:44:ee:76:d8:68:3b:83:68:c4:db:f2:b0:96:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Validity Not Before: Jun 6 14:00:44 2025 GMT Not After : Jun 7 14:00:44 2025 GMT Subject: CN=d2e170d6ba75cee9344164c432bc4c28601a1ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d6:29:91:45:a3:f7:cd:07:64:5c:20:e7:fc: f0:40:bb:73:f1:9a:86:71:4a:d5:6e:c8:dc:60:27: 8b:0a:08:8d:27:f8:99:be:7c:9a:a4:45:f9:10:d6: 4f:a3:2c:3e:0f:00:18:d4:0f:34:c4:f2:8f:a1:38: 37:d2:ee:47:97:ca:41:c1:88:f3:bd:29:4b:38:1c: b6:3e:93:52:55:f4:82:a4:c1:37:2c:28:8a:99:b0: 51:34:18:58:8b:39:37:a4:87:15:75:a5:de:7a:4a: d8:a9:df:70:97:76:51:29:d9:40:ea:52:28:b3:ef: 34:36:a0:ba:1f:fb:17:98:c6:a6:a3:46:93:97:23: d1:d0:46:5c:96:8e:19:50:26:0a:1d:87:9c:29:70: 28:9e:81:f5:3c:7f:9e:b0:ad:ab:f9:93:77:18:42: 93:83:16:54:ff:15:6e:37:4a:16:82:e4:f3:b9:0f: 88:6e:92:43:3c:bd:c0:81:89:20:8e:3a:a5:38:23: 39:11:de:fd:79:88:41:23:72:f9:9d:f7:9b:7c:73: b5:19:83:4d:ce:94:e5:26:63:cc:6e:ce:9f:b1:1e: 3c:38:fa:da:f5:b5:38:03:d2:ea:97:47:8e:78:4a: f6:fe:92:df:5c:3b:a8:c2:2c:ce:d6:21:f1:5d:85: 59:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E1:70:D6:BA:75:CE:E9:34:41:64:C4:32:BC:4C:28:60:1A:1F:F0 X509v3 Authority Key Identifier: keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:df:79:a4:26:58:df:53:bd:ca:1b:86:1e:ec:be:7c:cb:fe: 89:12:72:24:94:e8:37:32:6b:d2:75:57:59:fb:c7:b5:9b:e8: e7:19:e8:36:cd:c2:8a:af:86:d2:d1:4f:d4:6b:45:bb:a4:93: 6f:3a:37:db:04:e0:35:85:7f:f3:19:de:23:c2:6d:d4:bc:2c: c1:db:82:f6:ff:6f:e8:10:d4:1d:62:34:f9:ee:1c:8f:8c:87: c5:7b:b8:aa:e2:d5:ff:cd:e0:47:6a:2d:f5:fe:03:49:62:32: 79:2d:9a:d7:ad:f0:de:33:a1:f0:fc:fb:49:9c:67:56:46:77: f4:73:f9:6d:36:c4:ad:73:df:ed:17:eb:c2:d1:5d:e8:c1:f8: 1f:2f:60:9e:ee:69:75:a0:64:30:99:aa:4b:61:4a:0c:1d:cb: b5:4a:56:3e:8b:3b:26:98:a8:69:02:cc:48:37:af:c0:d1:d4: b2:b0:58:28:04:81:68:11:dc:f5:9a:4a:d3:81:90:3a:30:09: 8e:87:27:92:f7:6f:b2:78:a0:a0:4e:a0:fa:5a:b2:50:30:b5: b5:dd:d2:82:8b:77:31:92:c8:89:96:e4:68:af:a9:7e:81:28: 4e:33:b8:b9:e6:aa:3f:ab:89:88:90:50:87:70:b2:7f:57:08: f0:1d:de:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdFi0TudthoO4NoxNvysJYlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzhkYmU1MjA4M2FkMzM1YzlmMWZkZTYwMTZlYzhiNDky OTMxNDAwHhcNMjUwNjA2MTQwMDQ0WhcNMjUwNjA3MTQwMDQ0WjAzMTEwLwYDVQQD EyhkMmUxNzBkNmJhNzVjZWU5MzQ0MTY0YzQzMmJjNGMyODYwMWExZmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9YpkUWj980HZFwg5/zwQLtz8ZqG cUrVbsjcYCeLCgiNJ/iZvnyapEX5ENZPoyw+DwAY1A80xPKPoTg30u5Hl8pBwYjz vSlLOBy2PpNSVfSCpME3LCiKmbBRNBhYizk3pIcVdaXeekrYqd9wl3ZRKdlA6lIo s+80NqC6H/sXmMamo0aTlyPR0EZclo4ZUCYKHYecKXAonoH1PH+esK2r+ZN3GEKT gxZU/xVuN0oWguTzuQ+IbpJDPL3AgYkgjjqlOCM5Ed79eYhBI3L5nfebfHO1GYNN zpTlJmPMbs6fsR48OPra9bU4A9Lql0eOeEr2/pLfXDuowizO1iHxXYVZmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLhcNa6dc7pNEFkxDK8TChgGh/wMB8GA1UdIwQY MBaAFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2Qt MzA1NmFmOWEzMzVlLzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2QtMzA1NmFmOWEzMzVl LzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAd95pCZY 31O9yhuGHuy+fMv+iRJyJJToNzJr0nVXWfvHtZvo5xnoNs3Ciq+G0tFP1GtFu6ST bzo32wTgNYV/8xneI8Jt1LwswduC9v9v6BDUHWI0+e4cj4yHxXu4quLV/83gR2ot 9f4DSWIyeS2a163w3jOh8Pz7SZxnVkZ39HP5bTbErXPf7RfrwtFd6MH4Hy9gnu5p daBkMJmqS2FKDB3LtUpWPos7JpioaQLMSDevwNHUsrBYKASBaBHc9ZpK04GQOjAJ jocnkvdvsnigoE6g+lqyUDC1td3Sgot3MZLIiZbkaK+pfoEoTjO4ueaqP6uJiJBQ h3Cyf1cI8B3ejg== -----END CERTIFICATE-----Generated at Sat Jun 7 01:44:44 2025 by rpki-client