$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft File: raJar-Ophw6VJK-gJlmH7VpaTaM.mft (raw, json) Hash identifier: Dy9pWA8vDaCIdxak+slTco3zWhcp1+pQnizU50F9IoI= Subject key identifier: FC:28:49:CB:C1:D1:A7:3B:59:A5:9A:9A:44:D9:D8:6F:D8:25:D2:60 Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3 Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3 Certificate serial: 0197507C93CF1A5ED0CC1C662DE6A79CC95A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft Manifest number: 15B2 Signing time: Sun 08 Jun 2025 17:00:30 +0000 Manifest this update: Sun 08 Jun 2025 17:00:30 +0000 Manifest next update: Mon 09 Jun 2025 17:00:30 +0000 Files and hashes: 1: 3cvNvdSi3XGnlgqLMUXhh7Fbsns.roa (hash: RjSiDuOGFmz06JKyEcD4gXSDvTvwzOibXX44/BaGwzM=) 2: 4qU0lYZixQn_ajK7o9tm4-h59Yc.roa (hash: rJ9oCMP6AUNUzaOpIFXW5T5zkn6qUN20PTxwfzReYSQ=) 3: CKER9wKJnd8i3s1x_cuI1c5b5Gg.roa (hash: s6MpM43dZhbOOH2ONDtptW7UmeKZDzVPrS361Wp7DlU=) 4: ONUCtbkDeeY2PA4jyY-af2rV2nc.roa (hash: UqkqTmMsI7S3ytTnMMGoR5/dJydP8VGBx/KeOodELdE=) 5: QqlMdh24Ws5Csf0Uuo2IJQlJoC4.roa (hash: /8SKmiBGn8KNuuR9Z6Vc2oYu9cW/r06GpbN1vuAdWAE=) 6: VWz0dchWUkZQVyP3JtuInNAFbyA.roa (hash: SqCoHwQT1RKZsrh/slkYf8DtZsXR49Lw8MbGV9Z0lJQ=) 7: XG0f4whg8DTzg4ZpQd0f-UdmRXY.roa (hash: ZGcU72mX8VKGJYV72um72oY45czQYPy5f+/AekBe7rg=) 8: eTZvFVUGnDNHwq2npFaevM_pjLg.roa (hash: 18cD37AihQlqKhfJw/uFQO048dE0tdQTn3vqNmQm/DI=) 9: jOJJqoS_PgQTtahvKFyYtdpryQc.roa (hash: NLWvbfmQ0GpKEPm+5C3Z0gDnOHe3vz+adN0kchftPSM=) 10: nh8Wwn3Fj2yGVzqswDAx-hybLdE.roa (hash: XEpaT4HyqXFQYAhd7C6I8/JvL9+p58S8LPezKapKn1U=) 11: owgmBs4vbkkXbw2K0OuU1ejAVjM.roa (hash: hWN+IDhiOv5MeOYFdicsOLf4isT8+TWoYgyTGhIN3B8=) 12: raJar-Ophw6VJK-gJlmH7VpaTaM.crl (hash: v4jzSQG90mKFfjgArCgS/uxlmvWyhGr9FHiOrQPjgqs=) 13: w47kV22DUX2rmSAV17IslbqJZkE.roa (hash: jwhv3mxFNCUIHi+oaeb9HMdIuv95C0du8+Aflx3W8ng=) 14: zBMwGWWflzLxBSFNPzJ2aqEBgrE.roa (hash: Frie/26MAD4moXE2hcnRczEyt7GQngLuPdcorC2uOx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Jun 2025 17:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:50:7c:93:cf:1a:5e:d0:cc:1c:66:2d:e6:a7:9c:c9:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3 Validity Not Before: Jun 8 17:00:30 2025 GMT Not After : Jun 9 17:00:30 2025 GMT Subject: CN=fc2849cbc1d1a73b59a59a9a44d9d86fd825d260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2e:7a:5e:73:c0:be:f7:35:39:d4:97:81:6f: 6b:2c:45:f6:7a:1f:69:ce:e0:46:e6:b1:5e:86:45: 66:c8:8f:f0:87:a5:ef:a6:df:4b:56:d9:98:66:6e: 44:d5:f8:81:a6:1c:67:fc:45:46:6f:84:77:5f:4d: 1a:d4:00:df:f6:a7:20:4e:08:2f:0a:0f:aa:0e:58: c5:36:7e:13:95:80:2a:e5:6a:e0:40:5b:f0:8a:15: dc:10:75:14:f1:9e:2c:5d:17:3b:fa:eb:4b:e2:f4: 09:16:24:a0:8e:a0:a5:1a:56:73:1c:34:d1:32:54: 9c:6c:3b:4f:c4:04:3f:81:95:de:47:2d:85:9e:e6: 1f:f3:2b:e2:42:f6:e0:55:6a:53:c8:60:76:e5:9c: e1:1b:42:af:7d:b5:eb:ea:cc:5b:d3:6b:cb:2d:44: 1b:59:6f:43:11:0c:06:55:ef:87:f2:ae:56:c3:af: 03:f3:68:19:50:21:9a:59:37:95:c0:ed:a2:cd:12: e1:66:06:50:90:af:71:40:17:0a:10:c2:68:06:43: 06:ac:9a:26:5d:85:83:c7:05:33:d8:6b:21:89:2b: d8:f2:a6:6c:93:e8:95:1b:13:aa:1e:30:99:59:4c: d0:2a:29:ab:06:e3:de:8d:29:a5:cc:28:44:38:0a: b0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:28:49:CB:C1:D1:A7:3B:59:A5:9A:9A:44:D9:D8:6F:D8:25:D2:60 X509v3 Authority Key Identifier: keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:92:47:45:ad:ff:a7:10:e1:3c:5d:cb:5c:65:70:e9:8e:e6: 07:19:e3:c3:40:1f:22:bd:4c:c7:04:9b:15:88:a4:b4:2d:30: c1:7f:69:42:4b:71:41:aa:c4:fc:eb:29:5b:0b:30:48:a0:a5: a6:ea:f6:8c:e0:96:d9:37:a2:fc:fe:3c:f0:25:d3:65:fa:a3: ac:3b:a0:8e:c1:8e:4b:76:28:fa:03:91:98:ec:b7:9e:12:87: 14:fb:a1:9a:5b:51:45:f7:32:aa:07:f8:99:7d:95:76:a7:61: 1f:fe:9b:40:3e:d2:60:fe:da:1f:ae:6f:00:3e:1b:a9:c8:7e: a1:94:c0:0e:1c:a1:52:88:d3:11:ad:27:50:13:c8:a3:cd:7e: 3f:81:40:a9:c4:79:06:cc:d5:64:4e:a5:db:8a:cb:5b:01:33: c0:f3:b6:e0:5a:2f:dd:ae:ab:ee:33:cc:73:65:72:b8:11:fa: ea:bc:d5:06:e6:7e:ca:71:61:62:10:a5:b5:a6:86:1b:55:ef: bc:c6:96:cb:db:a8:01:45:a5:d8:e8:72:96:96:2a:da:5a:fd: b9:85:6d:af:8f:d0:31:75:0d:57:61:92:bb:9a:cc:1b:09:21: 12:6a:b9:c0:ce:0a:f4:0e:ed:d5:55:dc:e0:b1:02:3d:1f:39: 1a:0c:85:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdQfJPPGl7QzBxmLeannMlaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYTI1YWFmZTNhOTg3MGU5NTI0YWZhMDI2NTk4N2VkNWE1 YTRkYTMwHhcNMjUwNjA4MTcwMDMwWhcNMjUwNjA5MTcwMDMwWjAzMTEwLwYDVQQD EyhmYzI4NDljYmMxZDFhNzNiNTlhNTlhOWE0NGQ5ZDg2ZmQ4MjVkMjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3S56XnPAvvc1OdSXgW9rLEX2eh9p zuBG5rFehkVmyI/wh6Xvpt9LVtmYZm5E1fiBphxn/EVGb4R3X00a1ADf9qcgTggv Cg+qDljFNn4TlYAq5WrgQFvwihXcEHUU8Z4sXRc7+utL4vQJFiSgjqClGlZzHDTR MlScbDtPxAQ/gZXeRy2FnuYf8yviQvbgVWpTyGB25ZzhG0KvfbXr6sxb02vLLUQb WW9DEQwGVe+H8q5Ww68D82gZUCGaWTeVwO2izRLhZgZQkK9xQBcKEMJoBkMGrJom XYWDxwUz2GshiSvY8qZsk+iVGxOqHjCZWUzQKimrBuPejSmlzChEOAqw0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwoScvB0ac7WaWamkTZ2G/YJdJgMB8GA1UdIwQY MBaAFK2iWq/jqYcOlSSvoCZZh+1aWk2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUt OWQ1ODc1ZDg2MzczLzEvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUtOWQ1ODc1ZDg2Mzcz LzEvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpJHRa3/ pxDhPF3LXGVw6Y7mBxnjw0AfIr1MxwSbFYiktC0wwX9pQktxQarE/OspWwswSKCl pur2jOCW2Tei/P488CXTZfqjrDugjsGOS3Yo+gORmOy3nhKHFPuhmltRRfcyqgf4 mX2VdqdhH/6bQD7SYP7aH65vAD4bqch+oZTADhyhUojTEa0nUBPIo81+P4FAqcR5 BszVZE6l24rLWwEzwPO24Fov3a6r7jPMc2VyuBH66rzVBuZ+ynFhYhCltaaGG1Xv vMaWy9uoAUWl2OhylpYq2lr9uYVtr4/QMXUNV2GSu5rMGwkhEmq5wM4K9A7t1VXc 4LECPR85GgyFfg== -----END CERTIFICATE-----Generated at Mon Jun 9 00:46:05 2025 by rpki-client