$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft File: r_oT8a4FORYoDsaO4bCXb569Pqg.mft (raw, json) Hash identifier: 4in0iN3qeYRCM+APKPE5ZC+s5YVNGMs9RmOAEPr5We0= Subject key identifier: 82:0B:0A:D0:51:F3:1F:0E:62:3D:8B:69:76:D3:89:B7:3C:E5:19:0B Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8 Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8 Certificate serial: 01974140DC33A0398674223FDF120D279F74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft Manifest number: 144E Signing time: Thu 05 Jun 2025 18:00:59 +0000 Manifest this update: Thu 05 Jun 2025 18:00:59 +0000 Manifest next update: Fri 06 Jun 2025 18:00:59 +0000 Files and hashes: 1: 7BUAS9lNIJKrmgyqitmt4vjUchs.roa (hash: ZW63wkZvkBfaNmwpw8bvuYCpTs0W+QW7Uv70+dpsljM=) 2: 7DO8E30RGY4vAe7tIWHKTeq95P8.roa (hash: wO6AvUEPcj/+yaf4lye0oLqn75BJbLzeCB1mL+qhuus=) 3: Dc_MqXVzSSK77uzNogE5HgnhLwg.roa (hash: O7xD6oauj5YnrNkfW6IbaFJNVQOfp627wKoUhUJUb+c=) 4: F_q5_Z07qZI9DXW4KcpMFI_8MOY.roa (hash: UA+1oifvamJJirFIBnTAGXQVq0QT81TJRyTJ7BTxetg=) 5: HLeQFxpSAwO5N1pZKMX56Q-hB1w.roa (hash: +EuA9d7+91Ny4e4gzqH16NmmQUk9ZPnn92MghDjKpE8=) 6: QHGx9rBcGUaJTuZl4OFvkzmjZVA.roa (hash: ZZjwJdlY+j59oAR5+dW/8zpKf4al08hvm5qlRq5DDsA=) 7: iL0fpiq0g7Tpl8O9Cr71bc0UOYU.roa (hash: +0HQwj7rpV4acr+qdH/U1EOSgBMGpBNUkpCPoAIrOlE=) 8: r_oT8a4FORYoDsaO4bCXb569Pqg.crl (hash: 7Rit0skFH38ga08F5nmPlASfNgtnRKn986B+/uma7ys=) 9: xJMh3j3GpShYCJoYtsAE4dqx3WU.roa (hash: k38ffw08ruTV3gYvZegSeTLOSKho9qw6Tw7LEO7WSjk=) 10: xmfrzoBs6Rhbg64vPzeCbbD4I6U.roa (hash: X1lH5bbTPug3DKbEg/bKjT6QG10Inw9lELIZLmoF2Qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Jun 2025 18:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:41:40:dc:33:a0:39:86:74:22:3f:df:12:0d:27:9f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8 Validity Not Before: Jun 5 18:00:59 2025 GMT Not After : Jun 6 18:00:59 2025 GMT Subject: CN=820b0ad051f31f0e623d8b6976d389b73ce5190b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:59:21:1c:1e:38:57:11:33:8f:5b:1b:90:18: 92:76:9e:35:c3:67:cb:81:e3:bf:44:fb:75:5b:7d: 8e:27:46:4c:b3:36:c1:1c:19:39:5d:e4:42:9b:d9: cf:3a:c2:62:ba:25:7a:c1:d3:08:93:0f:13:a5:5c: 8f:e8:99:1c:5d:97:ab:fb:48:dd:66:4e:b5:32:a0: 01:81:2b:ea:ee:cf:a5:19:5c:7d:e9:a6:26:ea:14: ff:ea:c5:69:ad:c8:db:9b:f3:34:7c:95:0f:65:11: e2:8a:3a:19:b8:4d:c5:2d:53:6e:0f:a2:80:58:ec: df:32:0f:e9:d6:0e:4a:e4:95:25:4f:0f:07:f8:b3: 90:fc:05:6b:5f:1c:4f:3d:5f:71:f0:f0:95:82:a1: 15:75:09:a5:d2:4e:46:0e:6d:b2:f9:38:0e:a0:db: 30:5b:d9:e5:00:21:46:16:d8:a8:ab:50:22:1c:05: 23:3e:7a:7a:83:a8:d3:d8:cf:c7:af:aa:18:8e:04: d6:dc:72:9d:ad:df:fa:34:51:87:fe:23:f0:01:fc: 87:10:da:91:03:58:2f:1a:b7:00:7b:6e:2d:12:a1: a0:bd:af:3e:8b:65:92:cc:16:2c:75:4a:51:89:8c: a0:be:c9:48:39:e9:4b:ad:4a:b9:61:e9:df:41:96: 3a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:0B:0A:D0:51:F3:1F:0E:62:3D:8B:69:76:D3:89:B7:3C:E5:19:0B X509v3 Authority Key Identifier: keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:89:57:9f:ff:40:d7:fe:bf:76:87:f9:7e:b3:60:11:c5:51: e1:d9:35:5d:fe:58:d9:54:89:6f:c1:05:5b:82:ed:7b:72:e1: c2:47:ff:64:42:28:a6:88:03:5a:3d:f2:8e:63:76:82:7c:3d: fd:3e:96:f8:8e:85:87:0a:e1:e2:e4:32:49:94:47:12:7d:a1: a0:4b:39:18:d1:4a:6d:63:46:6d:5e:5a:e3:f9:62:90:cc:f1: 52:26:85:5e:74:6b:5f:e5:3e:ac:57:3c:db:3c:df:1c:d5:4d: 4d:bb:13:b5:0a:48:0b:24:e4:a7:c4:34:27:a8:d0:de:9e:e7: 2e:80:a7:29:79:1c:39:f3:19:fc:20:7a:54:82:53:d3:4e:5d: 74:d7:64:8a:f1:b6:9e:1b:eb:61:36:4d:df:4b:ae:bd:91:01: e4:0b:8d:7a:f1:c0:2e:d2:f5:10:5d:8c:9e:9a:60:1b:bd:2b: 6f:e7:82:f3:48:fc:a9:8a:79:c4:c7:ff:fb:98:fd:33:9b:e9: f8:b8:27:f2:1d:89:d3:76:31:b6:a9:b7:e0:a9:29:1e:b3:b4: 69:8e:39:29:b9:09:a0:f6:9a:79:4e:d5:5d:26:40:cb:16:32: e3:3c:42:0c:6e:a8:6e:7b:55:ec:29:a2:19:42:d9:61:de:bb: b9:a7:99:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdBQNwzoDmGdCI/3xINJ590MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZmExM2YxYWUwNTM5MTYyODBlYzY4ZWUxYjA5NzZmOWVi ZDNlYTgwHhcNMjUwNjA1MTgwMDU5WhcNMjUwNjA2MTgwMDU5WjAzMTEwLwYDVQQD Eyg4MjBiMGFkMDUxZjMxZjBlNjIzZDhiNjk3NmQzODliNzNjZTUxOTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFkhHB44VxEzj1sbkBiSdp41w2fL geO/RPt1W32OJ0ZMszbBHBk5XeRCm9nPOsJiuiV6wdMIkw8TpVyP6JkcXZer+0jd Zk61MqABgSvq7s+lGVx96aYm6hT/6sVprcjbm/M0fJUPZRHiijoZuE3FLVNuD6KA WOzfMg/p1g5K5JUlTw8H+LOQ/AVrXxxPPV9x8PCVgqEVdQml0k5GDm2y+TgOoNsw W9nlACFGFtioq1AiHAUjPnp6g6jT2M/Hr6oYjgTW3HKdrd/6NFGH/iPwAfyHENqR A1gvGrcAe24tEqGgva8+i2WSzBYsdUpRiYygvslIOelLrUq5YenfQZY6XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIILCtBR8x8OYj2LaXbTibc85RkLMB8GA1UdIwQY MBaAFK/6E/GuBTkWKA7GjuGwl2+evT6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAt NDc4YzJjOGNiMmEwLzEvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAtNDc4YzJjOGNiMmEw LzEvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIlXn/9A 1/6/dof5frNgEcVR4dk1Xf5Y2VSJb8EFW4Lte3Lhwkf/ZEIopogDWj3yjmN2gnw9 /T6W+I6Fhwrh4uQySZRHEn2hoEs5GNFKbWNGbV5a4/likMzxUiaFXnRrX+U+rFc8 2zzfHNVNTbsTtQpICyTkp8Q0J6jQ3p7nLoCnKXkcOfMZ/CB6VIJT005ddNdkivG2 nhvrYTZN30uuvZEB5AuNevHALtL1EF2MnppgG70rb+eC80j8qYp5xMf/+5j9M5vp +Lgn8h2J03Yxtqm34KkpHrO0aY45KbkJoPaaeU7VXSZAyxYy4zxCDG6obntV7Cmi GULZYd67uaeZmw== -----END CERTIFICATE-----Generated at Fri Jun 6 04:57:53 2025 by rpki-client