$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft File: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft (raw, json) Hash identifier: BrEAY9Z7NCjt8UE0KZD05y2J9riRqO+SQWvCuKc6fSA= Subject key identifier: FF:20:00:91:4E:00:3D:49:51:54:65:13:32:8A:ED:40:C6:25:19:38 Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Certificate serial: 01973D64358B2A342C61E49DBB868D2B6689 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft Manifest number: 0F1D Signing time: Thu 05 Jun 2025 00:01:06 +0000 Manifest this update: Thu 05 Jun 2025 00:01:06 +0000 Manifest next update: Fri 06 Jun 2025 00:01:06 +0000 Files and hashes: 1: 7InXKoGXPyPmSkShdNo1bN5BHPE.roa (hash: p0vQNoVwsgdCf98zXzcil2JDwtIbKg4o52YVuAX43Qg=) 2: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl (hash: BFOgbVHohj4jpWtC0zcvzyUUPCcYq8jbPdlvog5DCHQ=) 3: G7eTk3jqB-BdA_Wy3K2E2YFtyTA.roa (hash: OtseOoY4gfu7tKjqn1wIwpg1/zv9XoIf0fx8DQ1CUfM=) 4: ISNHkwTdIse1R5eVAbZVrpNzf7I.roa (hash: aWcNBCaUk6iVQl/ljrkexa0tplOypXs9VyEvekzMA3M=) 5: L0ujmwzkJ6RRH45eugAjMYC2Zhg.roa (hash: ZYuGlloJDpR2SY2TTczc6v50q6dosW6j6YAj25G96Pg=) 6: LII7hRC3tP9UTUOEbD-OlE2YLz0.roa (hash: 2G0IT+KoXJQxpXp8HjaK3udKnKhR8XLas866IuV7Mj4=) 7: MGAJtndIL2Zkck_RVFiKK_Egp5c.roa (hash: 3Dl+p66+/Z3qtyr+Z1rkPfMp8vG5nBq1fl9w3qHRGM4=) 8: QlkzD36W5v0AxlNSx0z4hSk7uFU.roa (hash: uYqo04qiRW99BRZNiigYBH7mOhV3UNP+jPgusIVov/k=) 9: VTdQuPLguO6Ibw0Th9ypJCxyOf8.roa (hash: ipcRPToVDEN7EVH1AfqkAeCn3ymsz/f4y1+i87V66wQ=) 10: _nLYAZC-VddX97JjR5Q6LKKqBQ4.roa (hash: ndREz8aC1hd1w5pe58qePL+6kw9PyDSZ6Q1HeOlC7Rc=) 11: d1Mc0OsWnepemmVerPa7kdZl1N8.roa (hash: JRdvIEtlRj7j9yeTQYkXzcTmst5QyvuiftJaDhMJ8Og=) 12: gZtcQ4r6Woqv34G6dpT_HEC-DoY.roa (hash: FjGgXSzWLOa8xqz/zgnt2HT+YvKm/u5bq1IXo4VHelQ=) 13: k_9bhWj2JcQnyMq-FPfEv0otOUw.roa (hash: Zs3oxA2HTYXtiE5lUDi8OJy4SVF/+vQT5qkuzqaf+ew=) 14: o4_pEwPipmYi6C3PXNhpC7by3MA.roa (hash: HbprNAxeP8NoQY7jwdw1Rs3l1Tj/TI85puQfPIX124c=) 15: qjxC3CMWMpiM1TpibiIWl8s1Se0.roa (hash: vL7m0foCqcx4qZwFUYV1ieilxVwO5UgoFDNdvDch1DE=) 16: t0gWV72zLQLExI3pDHKlUQNMCLg.roa (hash: sZqkeiCyvYuQZJfxR8h/KOL8f5qWehA/zicZawvNouA=) 17: wj2VxfuvQPp_y-B-S4cBoG4no9E.roa (hash: NUb/774hisZdKkcNsYbowzixlPdgcgSeN+DazRzxjeU=) 18: yKoxV-6M6xkebvfJ-LK1Pi2FfE4.roa (hash: BokFvMbsrr4nAc7qB6GIDJeX4FQmEPo1VOjQtgLqvj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 21:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3d:64:35:8b:2a:34:2c:61:e4:9d:bb:86:8d:2b:66:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Validity Not Before: Jun 5 00:01:06 2025 GMT Not After : Jun 6 00:01:06 2025 GMT Subject: CN=ff2000914e003d4951546513328aed40c6251938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:90:1f:17:b9:bb:06:7c:db:81:b2:d1:eb:7f: 93:4a:c4:27:97:b6:28:7b:11:2c:87:62:04:09:96: e7:8f:a2:13:7d:18:17:3e:b3:69:7a:97:2c:92:cb: 8a:33:51:18:d3:04:75:f6:a3:8b:ce:57:11:61:4c: 2d:f9:95:ab:cb:d2:be:62:5f:99:ef:0c:c4:f3:1e: 3a:23:d7:75:09:5d:95:b2:b3:3e:5f:50:93:2f:6d: e3:42:2d:c1:16:27:4e:de:48:92:94:f7:51:60:10: 75:65:57:52:dc:4e:52:9f:86:ad:88:6f:a1:63:13: b5:e4:b9:33:bb:53:ee:0a:a0:de:ca:ad:84:29:f2: 0f:19:7b:c7:71:00:ea:16:46:12:09:21:96:41:7c: 57:3f:a1:b3:b8:8c:8c:3b:c3:44:56:17:4d:76:25: cb:7f:d0:71:09:c0:d0:8d:df:d1:e3:69:ef:1e:56: f7:25:45:20:c4:bf:65:b5:41:c5:2a:93:b7:99:f3: 70:c2:80:1b:79:ba:b8:64:99:25:62:a5:fe:45:ea: d9:53:d3:36:c5:7f:33:60:cf:8c:2a:bd:34:df:3d: 00:b6:93:57:f6:1e:8c:9e:b7:b0:1a:e4:3f:7e:6d: 32:e2:eb:1f:83:62:12:d2:23:79:55:e4:cf:50:42: 2b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:20:00:91:4E:00:3D:49:51:54:65:13:32:8A:ED:40:C6:25:19:38 X509v3 Authority Key Identifier: keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:55:de:6e:69:90:c7:fb:2f:6e:f6:1d:3e:71:79:8a:0e:1e: f6:03:36:b3:37:48:d1:91:64:72:d8:80:6f:0d:49:43:d2:0a: 0f:d1:dd:16:7a:b2:c3:8b:8b:95:51:eb:31:41:9a:94:e5:3e: 68:ad:68:07:a4:4c:46:1f:f0:ca:40:9b:89:1c:2f:be:db:b2: 42:ef:e8:89:c0:5c:7e:c1:5a:d0:d9:41:fc:17:cd:85:b8:66: ba:57:91:d8:73:a5:78:3b:20:fe:d4:c3:1a:7d:33:62:01:f9: cd:8e:3e:8f:73:21:24:29:51:15:4a:ff:4e:43:ec:be:08:e8: 18:28:57:c7:0a:e1:b4:3f:2f:f6:64:ef:98:ab:ce:0b:e1:54: b2:95:46:2b:f3:5e:0a:fc:b3:2c:df:6e:c2:38:67:0e:57:1b: d3:37:ec:2b:62:4e:d4:c6:b2:47:bf:eb:97:b5:b8:aa:af:70: 90:5f:89:ef:91:14:58:1a:67:6a:2d:76:98:3e:f0:46:c8:61: b1:44:c7:6e:bd:84:5d:23:1c:4f:de:bc:40:19:8d:c7:f3:23: 8d:16:65:b9:5d:5c:3a:1c:2c:6b:05:6d:77:09:98:8b:23:06: 5c:1d:34:3b:87:b4:85:36:90:d9:72:e4:e2:ad:9e:9b:dc:22: 47:d0:a3:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc9ZDWLKjQsYeSdu4aNK2aJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5 MTk3ZjIwHhcNMjUwNjA1MDAwMTA2WhcNMjUwNjA2MDAwMTA2WjAzMTEwLwYDVQQD EyhmZjIwMDA5MTRlMDAzZDQ5NTE1NDY1MTMzMjhhZWQ0MGM2MjUxOTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJAfF7m7BnzbgbLR63+TSsQnl7Yo exEsh2IECZbnj6ITfRgXPrNpepcsksuKM1EY0wR19qOLzlcRYUwt+ZWry9K+Yl+Z 7wzE8x46I9d1CV2VsrM+X1CTL23jQi3BFidO3kiSlPdRYBB1ZVdS3E5Sn4atiG+h YxO15Lkzu1PuCqDeyq2EKfIPGXvHcQDqFkYSCSGWQXxXP6GzuIyMO8NEVhdNdiXL f9BxCcDQjd/R42nvHlb3JUUgxL9ltUHFKpO3mfNwwoAbebq4ZJklYqX+RerZU9M2 xX8zYM+MKr003z0AtpNX9h6MnrewGuQ/fm0y4usfg2IS0iN5VeTPUEIrmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8gAJFOAD1JUVRlEzKK7UDGJRk4MB8GA1UdIwQY MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt MmQxNDNkN2I4NTNjLzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy1XebmmQ x/svbvYdPnF5ig4e9gM2szdI0ZFkctiAbw1JQ9IKD9HdFnqyw4uLlVHrMUGalOU+ aK1oB6RMRh/wykCbiRwvvtuyQu/oicBcfsFa0NlB/BfNhbhmuleR2HOleDsg/tTD Gn0zYgH5zY4+j3MhJClRFUr/TkPsvgjoGChXxwrhtD8v9mTvmKvOC+FUspVGK/Ne CvyzLN9uwjhnDlcb0zfsK2JO1MayR7/rl7W4qq9wkF+J75EUWBpnai12mD7wRshh sUTHbr2EXSMcT968QBmNx/MjjRZluV1cOhwsawVtdwmYiyMGXB00O4e0hTaQ2XLk 4q2em9wiR9CjFQ== -----END CERTIFICATE-----Generated at Thu Jun 5 05:38:14 2025 by rpki-client