$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft File: Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft (raw, json) Hash identifier: 04/itT76azI2q94nGLkke0f2SQ7AI26PIBlVLzRff1U= Subject key identifier: EA:15:4A:BC:A7:1C:20:A3:13:65:47:47:58:D9:A9:8B:38:80:F3:21 Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a Certificate serial: 019747E7BC91ED7FC64DF0442AFA98C2C09F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft Manifest number: 12A3 Signing time: Sat 07 Jun 2025 01:00:58 +0000 Manifest this update: Sat 07 Jun 2025 01:00:58 +0000 Manifest next update: Sun 08 Jun 2025 01:00:58 +0000 Files and hashes: 1: 2hV2Eva-Yq0Tj6R_zRma3IFAz5U.roa (hash: xaAXokmFBA+GIkC2gCBEPvYGMsKwjG9cFEwuB3Zkoqw=) 2: 3vr6MmTJusXLHnoomZaTFzf2R_Y.roa (hash: wwVRXCGEVqcIpkBMKuCLGQDGcvT246U/Ud4fDza9yz4=) 3: C0SmlmF4B_mlZfUDeIYvqwcBzGY.roa (hash: 6q7bl16uuvTNC36XbpE099Ngw4/OmUomn2V4cIi5tMM=) 4: CnW3qR_oIITaOQij9dhtcxmI3Ew.roa (hash: c6jiCaV7kJAiM633jZnJHCKNng9Erj/W/XlTBj+QRpY=) 5: DHALUAN5tK6vdZdATqkw-W3Rehs.roa (hash: 7l9RAeo7N/jmnp2dP2Muv9E6xCL1r9O+gLOg/k2Fq2s=) 6: Q4p-qYS2sgvt0GJ7uYJPvsOIkIg.roa (hash: j/H5JWeQ0CkSOjcFdGwjX75ybxoyKIcMgX/vQel3jRk=) 7: Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl (hash: 7KRnjsbigOD8I6TSqJCx7nWz8BucMNWULLLI4gVCgb4=) 8: k7Uhxcf1dLyLbabkMZGt9dayq9s.roa (hash: gFVryfVaKzHzs9H28hxg6aO05RnxqjKmSXgUNR+b4kg=) 9: kIbghkBOfoXjY46mtdWaD6ECFzI.roa (hash: 0pGxzPrydHhKJZ3AyBjYXBgg0KwtH0VaWuahmKMYYJY=) 10: n-1P-bnNMbfHyYOOBdFHAhTQeeU.roa (hash: VCctCwWgn1+jYqEkjhICyTVDTXkxSrSucpTbDGLkOEU=) 11: wCTFVOhH1_JXXaKELRZTghNafbE.roa (hash: uIydk4XczljVO9qTa7Z+Ts/JZRVkQzKoeoyTGqvobdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 22:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:47:e7:bc:91:ed:7f:c6:4d:f0:44:2a:fa:98:c2:c0:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a Validity Not Before: Jun 7 01:00:58 2025 GMT Not After : Jun 8 01:00:58 2025 GMT Subject: CN=ea154abca71c20a31365474758d9a98b3880f321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e9:08:bd:25:af:2a:90:75:fa:e7:60:fa:fb: 24:1a:6b:06:bd:d4:31:d1:a9:f7:d7:71:1f:05:e6: 94:0e:b1:8c:f8:6b:ec:72:79:b1:18:d6:4b:26:ec: 72:85:c3:6d:be:d1:f1:d9:2d:fe:e9:3b:27:92:91: 9e:99:86:38:fc:3c:db:97:53:ec:31:f3:68:d3:6d: 62:c7:22:e9:c4:c5:58:8f:79:70:07:bd:01:37:1e: aa:51:84:7a:cf:58:21:b3:38:44:ce:ed:35:f6:1e: 55:a8:d4:96:f7:a3:95:c0:b3:be:90:6b:21:da:e6: 73:5d:9a:da:1e:cf:1b:25:e9:f9:f3:b5:25:d7:8c: 44:e1:61:2b:df:09:b2:af:f9:9d:ea:e1:22:03:e3: 55:b1:62:90:32:3e:6a:12:ac:4c:52:d1:2d:9d:f4: 3f:a0:f5:8f:f5:ac:c9:db:df:d8:69:bd:6f:91:8b: 25:00:c4:ee:fc:df:a4:fc:1c:e3:63:2c:66:6a:3d: 27:5a:61:08:bd:7d:d8:e1:99:65:40:3a:86:f5:a9: fe:c3:81:b9:5f:39:c7:9d:5c:16:97:11:e2:d9:cc: 52:6a:8a:53:67:fe:c6:5a:7c:5e:6b:7f:44:d4:4f: 79:f7:98:31:3f:79:cf:3c:d1:98:fe:09:9a:27:ca: a5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:15:4A:BC:A7:1C:20:A3:13:65:47:47:58:D9:A9:8B:38:80:F3:21 X509v3 Authority Key Identifier: keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:2f:58:48:21:69:22:30:cb:e2:13:83:c0:2f:55:6e:4f:66: da:34:5a:32:4b:c1:a5:40:8d:63:46:c9:03:c6:f4:ea:59:1f: 55:e2:f4:cf:ee:1c:cf:db:d0:e5:29:a9:ed:95:09:f5:e1:87: e6:1c:49:f5:f8:99:d7:65:03:a8:f8:60:f6:b3:55:79:02:42: 4a:af:6f:6f:a4:92:97:2b:0b:e7:b7:0d:53:ca:dd:96:79:d3: a1:eb:c7:02:0f:84:7d:88:9e:f6:4e:53:80:83:f5:a7:00:81: 45:03:ac:77:71:11:6f:a4:a5:db:a9:9b:5b:c8:75:80:cf:b5: a4:7e:51:1f:b0:33:ed:70:3f:35:60:62:80:c0:a5:a8:61:21: 91:19:2a:c1:2b:86:9f:b4:98:c2:50:70:26:c3:6b:a7:2c:42: 88:be:16:9f:69:f4:3a:ef:08:36:f7:27:d0:df:0a:05:d8:43: de:35:e1:96:9e:c3:1c:a0:7a:48:25:53:52:75:0e:5b:0c:bc: a0:74:b3:72:4c:cf:ee:c1:25:be:28:6b:16:b6:c8:cb:8c:fe: 8e:78:03:77:ad:6f:9c:70:61:ef:03:40:3f:04:68:56:ef:f5: cb:31:3e:a5:28:70:3b:03:f8:93:a0:f4:36:cc:66:ac:bb:52: 56:63:0b:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdH57yR7X/GTfBEKvqYwsCfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YjViMDJkYzQwMTY2NmVlMDQ1YWI5MGNjODg4MTdmZTA5 ZDcwNmEwHhcNMjUwNjA3MDEwMDU4WhcNMjUwNjA4MDEwMDU4WjAzMTEwLwYDVQQD EyhlYTE1NGFiY2E3MWMyMGEzMTM2NTQ3NDc1OGQ5YTk4YjM4ODBmMzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ukIvSWvKpB1+udg+vskGmsGvdQx 0an313EfBeaUDrGM+GvscnmxGNZLJuxyhcNtvtHx2S3+6TsnkpGemYY4/Dzbl1Ps MfNo021ixyLpxMVYj3lwB70BNx6qUYR6z1ghszhEzu019h5VqNSW96OVwLO+kGsh 2uZzXZraHs8bJen587Ul14xE4WEr3wmyr/md6uEiA+NVsWKQMj5qEqxMUtEtnfQ/ oPWP9azJ29/Yab1vkYslAMTu/N+k/BzjYyxmaj0nWmEIvX3Y4ZllQDqG9an+w4G5 XznHnVwWlxHi2cxSaopTZ/7GWnxea39E1E9595gxP3nPPNGY/gmaJ8qlZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOoVSrynHCCjE2VHR1jZqYs4gPMhMB8GA1UdIwQY MBaAFGe1sC3EAWZu4EWrkMyIgX/gnXBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQt YjVkODg4YWRmZDM3LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQtYjVkODg4YWRmZDM3 LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARy9YSCFp IjDL4hODwC9Vbk9m2jRaMkvBpUCNY0bJA8b06lkfVeL0z+4cz9vQ5Smp7ZUJ9eGH 5hxJ9fiZ12UDqPhg9rNVeQJCSq9vb6SSlysL57cNU8rdlnnToevHAg+EfYie9k5T gIP1pwCBRQOsd3ERb6Sl26mbW8h1gM+1pH5RH7Az7XA/NWBigMClqGEhkRkqwSuG n7SYwlBwJsNrpyxCiL4Wn2n0Ou8INvcn0N8KBdhD3jXhlp7DHKB6SCVTUnUOWwy8 oHSzckzP7sElvihrFrbIy4z+jngDd61vnHBh7wNAPwRoVu/1yzE+pShwOwP4k6D0 NsxmrLtSVmMLYw== -----END CERTIFICATE-----Generated at Sat Jun 7 04:42:05 2025 by rpki-client