$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft File: sLWoCnEG4KS4VFyBULtyxpn8yaA.mft (raw, json) Hash identifier: cxWWwdw1pLHpU1wrtGHk4ZyIqTxW+TWfJhB9b+IRphw= Subject key identifier: 5C:95:00:9C:1B:96:29:2B:55:65:35:51:1D:95:B1:D0:37:5A:17:52 Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0 Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0 Certificate serial: 0197481E202321C0E6B49BEC9CDB601F8773 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft Manifest number: 1599 Signing time: Sat 07 Jun 2025 02:00:23 +0000 Manifest this update: Sat 07 Jun 2025 02:00:23 +0000 Manifest next update: Sun 08 Jun 2025 02:00:23 +0000 Files and hashes: 1: 60jG5Ay8pKNRLAaYiabGAbMAWcU.roa (hash: mGDjXdclRD6cM00fzezmu8njPZGu0i86EMmzQCWdsaI=) 2: 8NknCKB4mqEufbZ6UbHgAa8xKGk.roa (hash: +VuXhmjH2zdhVZOeQIf+1XfhIBEvtUJA5CNUFP6jbIc=) 3: Cwb1KDzjyZP06ERQCkOqE8eDn-Q.roa (hash: qEbiLSfggbr/wcV1CfVb4G8sOcwZPVPdEo2xFZT7GWw=) 4: M4GvrNf8uqUm8NINVMsgeY-dZpg.roa (hash: JFzR2ZsY7nrJvXYkxcf00jQkDAoE9ASXG53ZH1eILBw=) 5: XXx0PZbW0VSnHcKqWvct0KGeX5o.roa (hash: fg2kYbNMaJFsDmSVzEYMa+3owPgOnqiysynI+fCXGgg=) 6: XqyfpygCBb8Q3tIPPqdoPK94M0A.roa (hash: 2VTgMTAP00AWrF9/qszpE/dPLTmJ6fjO0h7TyCaHdtE=) 7: d5wYN4sqYmgKKKUN9X-8jp9PKTs.roa (hash: /7Xb7BgMP/VziPk4Q/U+uMUdmAyttT7O93i5sL6urDU=) 8: i1CU3OfnjKON64QGCajnRU5gSS0.roa (hash: YY36Gemk4OiepX/UrPW7HzLvQewBOeW3gkIiItZgQz8=) 9: jU-enqBlwHSK5LFQUkQMv3mnQ3c.roa (hash: XGjlZdDrp7Q05Es+vT4dQhjxGrAgZ9KHZykl/3VpHuk=) 10: rgPd-lPBT_KjoGNurNCPr8-tYLM.roa (hash: 7UFfmlghHed6gv5YUhlj2bi7/Km6EbVr9jqYqXUYH8o=) 11: sLWoCnEG4KS4VFyBULtyxpn8yaA.crl (hash: sesnoo5NkrKk4uoeJ1WSKP5nmwT+etY2SoD/L9z6WQU=) 12: uYQNZGrXH6jilfHVW7M6-uKjZF8.roa (hash: K7dbhIw3GKL8CpYsfdoECZtVDjcGxNIlpZxMSzxg0fc=) 13: zad7TKoNmHhoc0CyHOzgSXKr6f4.roa (hash: LQ6zogTRTgGoz9vqyWdA5yZND4PDb2ytjo7mWtS7rF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 22:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:48:1e:20:23:21:c0:e6:b4:9b:ec:9c:db:60:1f:87:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0 Validity Not Before: Jun 7 02:00:23 2025 GMT Not After : Jun 8 02:00:23 2025 GMT Subject: CN=5c95009c1b96292b556535511d95b1d0375a1752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:07:50:a4:1c:86:fc:2e:ed:19:c6:53:46:3e: 51:6a:30:d9:f7:8e:2a:c1:27:f6:9a:76:61:58:aa: ef:55:ca:bc:d3:8c:b3:50:e2:3c:50:5a:89:10:b3: d9:98:f6:21:3a:60:10:1d:00:d4:9c:32:73:75:aa: 02:86:aa:ef:31:13:af:79:08:7f:90:a9:2e:93:c5: 61:fa:0f:2f:ba:2e:93:c3:9d:1b:a8:6a:6b:9f:62: dc:7f:0e:8b:ba:0b:4d:f4:37:10:5b:d9:fe:27:8b: 0d:da:9d:31:90:24:ef:99:01:b0:eb:bc:12:47:e9: 50:77:6e:0c:84:90:86:74:ae:1b:50:67:89:6c:85: 82:0d:ce:12:82:76:a5:fc:55:20:e5:9b:79:ee:b0: 01:29:36:65:32:85:50:3f:02:0f:45:36:7c:9c:2e: 38:05:6d:88:81:82:95:74:d6:50:bb:0f:49:ee:21: 85:78:f8:cb:fd:ff:b7:fa:5f:40:ca:91:49:d4:98: a4:a4:f5:af:19:11:ec:b7:ea:be:d7:66:52:f8:29: f3:4c:d8:0b:ea:65:d7:3e:68:45:6b:2b:8e:b0:8f: d0:ed:be:8e:fb:9a:75:ee:7c:d6:6f:a4:5d:ad:e7: 6a:cf:4e:a9:52:24:04:a9:08:d4:f4:03:fc:2b:01: 6e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:95:00:9C:1B:96:29:2B:55:65:35:51:1D:95:B1:D0:37:5A:17:52 X509v3 Authority Key Identifier: keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ce:f5:7a:b9:30:6e:58:61:44:ae:60:b0:27:3b:c4:bc:5d: be:30:0f:5a:51:f1:a5:91:dc:dd:88:5c:aa:a1:70:f0:22:00: 1f:b4:e9:8d:63:7c:52:da:50:35:a2:13:92:9e:6a:ab:0b:4d: de:44:40:9a:7b:4d:d9:ed:ce:7d:20:84:93:69:a5:09:ed:db: 49:35:9f:eb:2e:9a:8d:75:45:46:40:4f:f9:b0:6b:0e:29:5f: 02:fb:bd:7f:03:3a:6b:d5:29:e8:89:99:eb:bd:1b:28:b6:6e: 8b:f4:b0:77:1b:3e:b8:86:ce:bb:c9:a7:aa:e2:16:59:25:6f: 06:60:83:79:57:e7:f6:f0:4e:62:32:0c:96:cb:a7:74:aa:02: 60:fc:b0:8f:c8:75:56:b5:c0:c0:bc:79:c7:1a:5f:53:51:79: b4:21:3f:1c:84:1a:2c:da:16:ac:89:21:2f:05:20:3d:93:bf: 38:e2:32:b2:51:51:b2:10:99:e9:4c:19:bc:2e:1a:f2:e7:c5: 6e:26:ca:7f:23:10:45:ef:9b:76:04:c6:e3:8f:b1:f2:b5:70: c8:cc:ae:10:7a:01:3a:fc:21:20:31:cb:66:ea:0f:d6:fa:92: ac:8c:10:fa:56:71:c9:0c:c9:0a:9b:0a:7d:2a:22:d7:bc:43: 85:e9:be:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdIHiAjIcDmtJvsnNtgH4dzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYjVhODBhNzEwNmUwYTRiODU0NWM4MTUwYmI3MmM2OTlm Y2M5YTAwHhcNMjUwNjA3MDIwMDIzWhcNMjUwNjA4MDIwMDIzWjAzMTEwLwYDVQQD Eyg1Yzk1MDA5YzFiOTYyOTJiNTU2NTM1NTExZDk1YjFkMDM3NWExNzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQdQpByG/C7tGcZTRj5RajDZ944q wSf2mnZhWKrvVcq804yzUOI8UFqJELPZmPYhOmAQHQDUnDJzdaoChqrvMROveQh/ kKkuk8Vh+g8vui6Tw50bqGprn2Lcfw6LugtN9DcQW9n+J4sN2p0xkCTvmQGw67wS R+lQd24MhJCGdK4bUGeJbIWCDc4Sgnal/FUg5Zt57rABKTZlMoVQPwIPRTZ8nC44 BW2IgYKVdNZQuw9J7iGFePjL/f+3+l9AypFJ1JikpPWvGRHst+q+12ZS+CnzTNgL 6mXXPmhFayuOsI/Q7b6O+5p17nzWb6Rdredqz06pUiQEqQjU9AP8KwFu4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyVAJwblikrVWU1UR2VsdA3WhdSMB8GA1UdIwQY MBaAFLC1qApxBuCkuFRcgVC7csaZ/MmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDIt NzQ1ZTA4ZmU1OGM2LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDItNzQ1ZTA4ZmU1OGM2 LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjM71erkw blhhRK5gsCc7xLxdvjAPWlHxpZHc3YhcqqFw8CIAH7TpjWN8UtpQNaITkp5qqwtN 3kRAmntN2e3OfSCEk2mlCe3bSTWf6y6ajXVFRkBP+bBrDilfAvu9fwM6a9Up6ImZ 670bKLZui/Swdxs+uIbOu8mnquIWWSVvBmCDeVfn9vBOYjIMlsundKoCYPywj8h1 VrXAwLx5xxpfU1F5tCE/HIQaLNoWrIkhLwUgPZO/OOIyslFRshCZ6UwZvC4a8ufF bibKfyMQRe+bdgTG44+x8rVwyMyuEHoBOvwhIDHLZuoP1vqSrIwQ+lZxyQzJCpsK fSoi17xDhem+3A== -----END CERTIFICATE-----Generated at Sat Jun 7 06:13:55 2025 by rpki-client