$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft File: 5llvGxY8qwxFqE7rEyYbZfGiKWI.mft (raw, json) Hash identifier: OY/kWpM6kt/0EouPgETas95+4MPwj7iC9d6itMxa8hQ= Subject key identifier: CB:E0:7B:F4:43:D6:4D:D8:7D:0F:08:BD:97:65:9B:41:75:12:B0:63 Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62 Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962 Certificate serial: 0197488C1715BDBC40482DD4D9D15505ABB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft Manifest number: 158F Signing time: Sat 07 Jun 2025 04:00:29 +0000 Manifest this update: Sat 07 Jun 2025 04:00:29 +0000 Manifest next update: Sun 08 Jun 2025 04:00:29 +0000 Files and hashes: 1: 5llvGxY8qwxFqE7rEyYbZfGiKWI.crl (hash: xP4clPd57Ouf7W+N5wj4PK4alvIxzKce3zdgl+j6q2k=) 2: EPrKtO_Wui_AIcoB1IjnBBpjTA0.roa (hash: Ns7k+bsMT28IYTUvIKM9gdNIwjEuXm0xT0/L3x28CpU=) 3: GSrzoMsqdrffXvz8XfRbb06cdoU.roa (hash: qO16W1LJUB1Sf5kzJO7kSt5JrIHbHWcZRaQOTtkSO+c=) 4: UY47b1nKTBymo-_2aL9oMC7vX38.roa (hash: bK73SZPBKj3iAjuEKmNGnIADIWNE9D/9YsMH7QmUlZ0=) 5: c9pIRKumzJnPv6L0_0S99z5-7Pw.roa (hash: JszoDngQwRDEsojUMs8/qjNo60rDhfYCdak0Z9nn2Bg=) 6: ffZavXQaQNIwwKVW84vxnOTS_2k.roa (hash: oA0RmBJXJ8Iaj/uIUokVdX89kZuQ0WJjVTCDBbmztv8=) 7: g7knCJ57jgLAS24rI4X3btb-M4c.roa (hash: 3UFtXY+vf3X8W6kWA8FvJJwhkGk4KqYw38fo24s58Sk=) 8: gFreThJqNlHPvyHQ79dnfJgTPWo.roa (hash: L3hMFyzcKxYUiA62qUifu4SJz3107QolnvNpa2edIOo=) 9: iwjx0AhvwxAf6vZnR0V70CNSj3k.roa (hash: s4vyo2AL6KEF6yGbsgdcSILxp1qahFdr2Um6ni3Nsz4=) 10: qZ2rbeeUwV9WnVFloyx-2WLLaic.roa (hash: PyKdiPPGb3idbj43k0xja1+Mj7fQbqPrKGkBwHfZq1c=) 11: tCNgCc7S1ewGtgMhWiXaNGTqwZ8.roa (hash: 0ar853JOpvsnmzIOleciC89u2nN3g3yWX8hEwIiz39U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 22:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:48:8c:17:15:bd:bc:40:48:2d:d4:d9:d1:55:05:ab:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962 Validity Not Before: Jun 7 04:00:29 2025 GMT Not After : Jun 8 04:00:29 2025 GMT Subject: CN=cbe07bf443d64dd87d0f08bd97659b417512b063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:63:2a:63:b5:3f:18:3a:1b:61:d5:84:ef:89: aa:da:a4:d2:b3:d3:dc:6b:a2:0c:85:0d:04:21:b6: be:bf:19:da:ac:05:f6:c2:2f:b3:57:98:d5:7c:be: f5:fd:f4:95:53:d4:72:d6:a2:09:47:b4:5c:8a:da: 5d:b4:d3:99:02:a3:f0:8c:5e:f8:5c:39:ef:ef:d2: 05:58:76:63:1b:46:6e:72:51:97:8a:a3:6d:cc:b4: 90:9e:ec:29:f8:68:9b:98:72:4b:59:d7:10:e8:a8: 8b:8f:cc:25:98:43:cd:8b:17:62:e3:27:aa:ed:b4: 4f:b4:9d:d1:31:77:31:3f:4d:1a:95:2c:cc:b3:c6: 5e:42:39:13:61:ca:8d:03:69:d4:d6:e9:f5:7d:90: b3:8f:70:14:f3:d4:d5:af:08:90:fa:1e:e3:24:b8: d3:af:81:95:05:6c:cc:60:40:2d:2e:72:9c:39:f7: 4f:44:da:56:6c:57:28:da:80:47:f7:da:43:f0:22: 86:34:7d:c1:13:69:23:ae:0f:26:22:81:aa:b2:ff: ed:f2:d5:f2:04:ae:9b:c3:80:13:be:8e:0c:ba:5c: 52:20:1e:21:1a:f2:e5:d6:3c:d8:da:7f:a0:e4:2a: 9f:0b:5d:4e:2d:28:08:cf:2e:33:25:22:d3:e9:e0: 46:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E0:7B:F4:43:D6:4D:D8:7D:0F:08:BD:97:65:9B:41:75:12:B0:63 X509v3 Authority Key Identifier: keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:4e:9f:51:c1:bf:77:d5:6b:7b:f7:2f:79:a3:5b:a9:37:eb: 82:ff:de:c1:04:3b:1f:dc:b0:e0:5b:3a:c0:58:f0:00:7e:54: 8a:58:a7:d6:ff:a7:d7:c6:c0:b5:d2:44:87:e1:44:a3:2f:ce: ca:f0:be:e8:66:a2:67:5b:38:c2:c7:58:29:85:cd:bb:e9:58: 2e:71:3c:6e:71:4a:23:10:dc:b4:97:87:1e:6c:ba:e9:96:5a: 14:69:94:56:47:43:07:5c:0e:b3:80:5a:47:1c:ea:dc:0d:16: 6e:0b:34:96:85:06:d6:6e:78:5a:cd:42:32:e8:52:76:36:54: 52:7f:50:1d:98:0e:b6:0d:2b:0f:30:88:f7:57:b6:68:7c:50: 4d:62:97:68:36:9e:59:c7:4c:48:98:f6:20:69:09:5a:3e:ff: 78:04:50:9b:5f:48:cb:76:82:90:9b:ad:93:64:c6:5e:98:87: 0a:10:0b:6d:42:fc:2d:4b:50:4b:d9:78:ae:60:cc:56:05:8a: 3e:c7:26:34:3b:47:95:51:48:24:f4:0f:42:7d:75:6d:db:28: e3:ec:77:eb:7c:6c:79:da:41:e9:73:85:30:5d:41:39:3c:04: 35:0d:f3:da:9f:12:ee:ec:cd:60:8e:64:d5:25:92:a3:5c:52: e4:81:d6:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdIjBcVvbxASC3U2dFVBau1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NTk2ZjFiMTYzY2FiMGM0NWE4NGVlYjEzMjYxYjY1ZjFh MjI5NjIwHhcNMjUwNjA3MDQwMDI5WhcNMjUwNjA4MDQwMDI5WjAzMTEwLwYDVQQD EyhjYmUwN2JmNDQzZDY0ZGQ4N2QwZjA4YmQ5NzY1OWI0MTc1MTJiMDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGMqY7U/GDobYdWE74mq2qTSs9Pc a6IMhQ0EIba+vxnarAX2wi+zV5jVfL71/fSVU9Ry1qIJR7RcitpdtNOZAqPwjF74 XDnv79IFWHZjG0ZuclGXiqNtzLSQnuwp+GibmHJLWdcQ6KiLj8wlmEPNixdi4yeq 7bRPtJ3RMXcxP00alSzMs8ZeQjkTYcqNA2nU1un1fZCzj3AU89TVrwiQ+h7jJLjT r4GVBWzMYEAtLnKcOfdPRNpWbFco2oBH99pD8CKGNH3BE2kjrg8mIoGqsv/t8tXy BK6bw4ATvo4MulxSIB4hGvLl1jzY2n+g5CqfC11OLSgIzy4zJSLT6eBGawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvge/RD1k3YfQ8IvZdlm0F1ErBjMB8GA1UdIwQY MBaAFOZZbxsWPKsMRahO6xMmG2XxoiliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMt ZTA1MzRlMjM4NTliLzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMtZTA1MzRlMjM4NTli LzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvk6fUcG/ d9Vre/cveaNbqTfrgv/ewQQ7H9yw4Fs6wFjwAH5Uilin1v+n18bAtdJEh+FEoy/O yvC+6GaiZ1s4wsdYKYXNu+lYLnE8bnFKIxDctJeHHmy66ZZaFGmUVkdDB1wOs4Ba Rxzq3A0Wbgs0loUG1m54Ws1CMuhSdjZUUn9QHZgOtg0rDzCI91e2aHxQTWKXaDae WcdMSJj2IGkJWj7/eARQm19Iy3aCkJutk2TGXpiHChALbUL8LUtQS9l4rmDMVgWK PscmNDtHlVFIJPQPQn11bdso4+x363xsedpB6XOFMF1BOTwENQ3z2p8S7uzNYI5k 1SWSo1xS5IHWzg== -----END CERTIFICATE-----Generated at Sat Jun 7 09:04:34 2025 by rpki-client