$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft File: h3itgWjgnPktTgSYJX-OnOq_BpI.mft (raw, json) Hash identifier: i4jXzvSaEYeiamQyX5YSVgFo8LemWHHgg7CSZV0r6qE= Subject key identifier: 52:65:59:52:4E:4C:EA:29:C1:64:D1:55:0F:A5:63:E7:39:B9:2B:B9 Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Certificate serial: 0197469ED3A03EC8920B379C30443D792327 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft Manifest number: 1598 Signing time: Fri 06 Jun 2025 19:01:43 +0000 Manifest this update: Fri 06 Jun 2025 19:01:43 +0000 Manifest next update: Sat 07 Jun 2025 19:01:43 +0000 Files and hashes: 1: 3VQFHIG_0NRiYGSMTzNDYelPmMs.roa (hash: T8N7lYcGBn0m7uBQBcevnqsWbvysQD6cxVHO1RDwUvg=) 2: 41kwTSa8H9b9pjrkUzwf85FQ470.roa (hash: 6DgsyUX2uyntOPFl8yDMIgTXXXs0mzyQ219673BzCzU=) 3: CdQNI5gcW0_1cf24cLvP-tL_omw.roa (hash: fyArCRfx7SbzhmzmpSevkzJflw0c7SkqK2TimwbjqzM=) 4: RXJMzhMtehSuCCi6uqljNw1_L-s.roa (hash: Xot9S/JUju+/cZl9baS7ZUR4Rh18U5S5qk4hiX6txpg=) 5: TpqMtUwJukfz53BZIUdbM-kP9dU.roa (hash: sJ+1FquCHUKBx1oFow8K9ca95AgoJ61IjnusPLlcDN8=) 6: WEKuOaRTTX2rTln9asflqP9Y2Os.roa (hash: EcqtEEKcbvmbmPvboEcXGauHM+e7HHmS4JSP0Le2t4o=) 7: XmOvv05xULfAWuDqrX7juNO-0qI.roa (hash: eJeMTOSpJLyqSZNQmSL2OZUvlINOSkmPnV9aTneLjHg=) 8: Xzib8AfEYqY2cHmuuM-ww_w5sW0.roa (hash: 6XHRFIs5VNl1aw2+x8Rz4IQniQIfYw9CyiplPPtk5bE=) 9: aMv6gEqWxpGKwwWm6t5nV_iaM3Q.roa (hash: +a48j1hsLG2vzEIY2MRVBswlr1+jm51V+Dk+4EhL/9Y=) 10: h3itgWjgnPktTgSYJX-OnOq_BpI.crl (hash: m0Jg6ZWEL9uWYuzle9v+Z9P2CT2DclzErHk9sI+PW/c=) 11: jF6aKXBNyHTawjaz9GVexS6_Vps.roa (hash: FiDTfOMoZak8gOhtJT/8yhL0tIdZjUn13AvzOxfMN0E=) 12: s6XbpS6zvG-OGcqP78qsGOOoOlQ.roa (hash: vai/46FuXyssCtnAk+MIcYY2mUqRBxwISqAf2lFmzsg=) 13: vsuobB7Q7M7H0d2b7icsBX46rF8.roa (hash: 7WzZ613I/LXa4Zefx9tEqY2ZhSRre3hj1QC98fA5RuY=) 14: xP11eIeQX9x-FJdxDPaYbALauGA.roa (hash: X/B/3lK+XxCa5BQgDlvPLTFtIiO9rYw/6L5OCGSXKQE=) 15: xT7aM3kUy4b46Qb4CAkkSam9t5g.roa (hash: Rfd0mKt9HyiAqh5+s2geHZ1SUFHa0fSNkwoTUgmAYpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 19:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:46:9e:d3:a0:3e:c8:92:0b:37:9c:30:44:3d:79:23:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Validity Not Before: Jun 6 19:01:43 2025 GMT Not After : Jun 7 19:01:43 2025 GMT Subject: CN=526559524e4cea29c164d1550fa563e739b92bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:92:09:95:96:63:88:4a:47:c2:d3:f4:b6:78: 93:cd:2c:40:c0:67:ae:65:cf:c0:cb:ce:69:0a:5f: 03:b8:88:85:af:ee:86:af:84:9f:ca:a8:8a:51:12: 1b:39:b1:17:5b:b8:27:97:99:95:34:14:0d:f5:61: 68:38:f5:d8:0c:e2:53:cb:6a:01:07:39:92:f7:41: 3d:60:81:26:bc:56:c8:06:da:91:e0:31:f9:96:8b: c0:38:4f:41:dd:fa:d6:f2:0c:67:a6:b5:78:33:cd: 25:dd:77:d7:e7:ee:ff:85:87:17:94:30:36:e4:f9: 12:83:b0:a8:88:23:ae:14:1b:ee:33:56:29:7b:62: 50:74:ce:8c:5f:1b:7f:2d:43:80:73:9b:17:7d:ab: 1d:fc:d2:ce:ea:66:a9:5d:3b:a8:7d:e7:97:1a:dc: 8b:7d:ec:de:4f:a4:ce:d6:44:73:3f:50:ee:1a:9a: 3d:e6:b0:8a:6e:6f:c0:36:32:22:4e:12:87:61:85: 57:5f:40:53:c5:76:e3:6e:11:ea:3d:f7:32:9a:4d: 53:a4:b6:c5:ea:2b:df:aa:ab:f6:0c:9a:72:40:5b: 05:16:28:12:04:c0:f5:3b:ed:54:86:1a:21:a1:59: 4e:8e:bf:fc:bb:63:fb:10:35:3c:fe:e3:9d:4e:9c: 0c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:65:59:52:4E:4C:EA:29:C1:64:D1:55:0F:A5:63:E7:39:B9:2B:B9 X509v3 Authority Key Identifier: keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:20:f8:29:9e:ae:b6:99:da:26:4f:04:cf:0a:44:be:0c:34: d0:a8:3a:04:4b:d2:cb:9d:73:fd:b4:95:67:25:f4:7b:62:d1: 79:82:e8:2a:ca:3a:2d:ec:d1:d1:07:31:e2:fc:d6:84:9b:4b: 7f:c7:0d:d6:fb:e6:00:e7:0b:a3:ea:b2:31:c2:04:52:fa:32: dc:a7:bc:65:9a:19:7a:81:95:97:82:fe:d1:4e:d4:3f:6e:68: c7:a0:e8:f9:c7:d2:77:c8:13:e3:4b:dc:bb:20:b1:25:4b:e8: 8e:89:eb:8b:7f:f0:d2:65:e7:f6:a7:d2:b1:72:b0:0b:92:08: e4:03:6f:b9:ea:b3:30:23:55:03:89:c4:84:8b:80:ca:e6:57: b8:dd:dc:de:b7:ea:55:df:ef:d0:0e:e7:8e:3a:95:be:6f:74: 3f:ba:d9:45:13:99:26:6f:9f:ca:8e:02:64:cd:01:95:d5:a5: 6d:c3:c2:0e:05:ba:37:66:52:eb:ce:37:c4:67:e5:68:53:88: 78:70:95:83:d0:91:96:56:4c:09:c3:72:81:16:6b:50:0b:85: 37:de:d6:c2:2f:b8:38:35:a5:d4:97:c4:6f:f4:11:9c:5b:ac: ea:21:60:ff:5a:05:33:66:85:6c:7d:59:65:6d:aa:ba:11:a7: 0c:f6:92:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdGntOgPsiSCzecMEQ9eSMnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzhhZDgxNjhlMDljZjkyZDRlMDQ5ODI1N2Y4ZTljZWFi ZjA2OTIwHhcNMjUwNjA2MTkwMTQzWhcNMjUwNjA3MTkwMTQzWjAzMTEwLwYDVQQD Eyg1MjY1NTk1MjRlNGNlYTI5YzE2NGQxNTUwZmE1NjNlNzM5YjkyYmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ZIJlZZjiEpHwtP0tniTzSxAwGeu Zc/Ay85pCl8DuIiFr+6Gr4SfyqiKURIbObEXW7gnl5mVNBQN9WFoOPXYDOJTy2oB BzmS90E9YIEmvFbIBtqR4DH5lovAOE9B3frW8gxnprV4M80l3XfX5+7/hYcXlDA2 5PkSg7CoiCOuFBvuM1Ype2JQdM6MXxt/LUOAc5sXfasd/NLO6mapXTuofeeXGtyL fezeT6TO1kRzP1DuGpo95rCKbm/ANjIiThKHYYVXX0BTxXbjbhHqPfcymk1TpLbF 6ivfqqv2DJpyQFsFFigSBMD1O+1UhhohoVlOjr/8u2P7EDU8/uOdTpwMfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJlWVJOTOopwWTRVQ+lY+c5uSu5MB8GA1UdIwQY MBaAFId4rYFo4Jz5LU4EmCV/jpzqvwaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAt YWE5ZDY5MTgxMWU3LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAtYWE5ZDY5MTgxMWU3 LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCD4KZ6u tpnaJk8EzwpEvgw00Kg6BEvSy51z/bSVZyX0e2LReYLoKso6LezR0Qcx4vzWhJtL f8cN1vvmAOcLo+qyMcIEUvoy3Ke8ZZoZeoGVl4L+0U7UP25ox6Do+cfSd8gT40vc uyCxJUvojonri3/w0mXn9qfSsXKwC5II5ANvueqzMCNVA4nEhIuAyuZXuN3c3rfq Vd/v0A7njjqVvm90P7rZRROZJm+fyo4CZM0BldWlbcPCDgW6N2ZS6843xGflaFOI eHCVg9CRllZMCcNygRZrUAuFN97Wwi+4ODWl1JfEb/QRnFus6iFg/1oFM2aFbH1Z ZW2quhGnDPaS2A== -----END CERTIFICATE-----Generated at Sat Jun 7 04:16:55 2025 by rpki-client