$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft File: snJh1xU0i_1zzp27ckiGVpk7ovE.mft (raw, json) Hash identifier: ju5E2nqIgCkGAZUN0iNsRuDJQG39bCUdCoqfbd145mg= Subject key identifier: 5A:96:97:6C:67:7A:35:33:F4:CD:FD:B4:8A:43:7D:9A:15:2B:DE:DF Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Certificate serial: 0197526B23447363598914691A301246DE1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft Manifest number: 10AE Signing time: Mon 09 Jun 2025 02:00:42 +0000 Manifest this update: Mon 09 Jun 2025 02:00:42 +0000 Manifest next update: Tue 10 Jun 2025 02:00:42 +0000 Files and hashes: 1: 54iLRsUEYQSLlV8kHVTer9P4keA.roa (hash: Oib7LJlXh4bUMGiTPxF+59IQOdwF+fvCUOmQ1Sv5YqM=) 2: 83ZfI9Fyoy0-0Ed7XViCJUVWAUk.roa (hash: x5Erfp0LUGN9evcbs1ECyXblatyvnAhrnm8OrbCDB8k=) 3: DtWqKYrRCyGx6dsd9f2L7CKfIRc.roa (hash: O7NemdIlDZpd4quz6YecLMnjW1CyD/u06cKhcBOTRro=) 4: GrZCo-Pl-pKds5zmwg7ubalVFTA.roa (hash: XSM4rBpjvcsUyAb/r/u55Oo3ZCJqxZNIGwjYsJQ68bw=) 5: M80ufUXhkNHfa9K4zU6X6k_ofZQ.roa (hash: 4dQl+qST57nUFs67WwcEmlUV01oY2iEO29630JMqbwE=) 6: OcXOGlX2Gc26JEdm5iWVWnBYg58.roa (hash: /vGDKbgE4iZUS4BzIvVP16inipE2apdXrS0M45rcngw=) 7: QpucqboD9L8Uv9-I8wC2eqyytjM.roa (hash: QJ36JcAEae+tPmwoLHxsrKQ/qHkNlapv2iTQudy3nXg=) 8: VLrSYlONO7JZUvaeI6OzgjRksA0.roa (hash: LTkUIoLhvOTPKcASxWAtrGL8orynFjazuB3yg7c0ZYo=) 9: W95VCieFrYA-UWvQbNSL7N3Y2Cg.roa (hash: YvWvtJ9d+roXNfi60DzUNUYY7G9jfkQp1ZTCPAwbx+g=) 10: Yw4yz2qvg4rQujrK-dIx_KPixQM.roa (hash: rPOdhOXTd0LJkvjvgXHjpfcSX15w4WKfBaBl0s4PykM=) 11: mMdAkncXd62KSLEMH5-GZ2xifmI.roa (hash: BsiKxHj0OcEVg20ZYqrvGiqQgj+ynivI6054d313+QE=) 12: snJh1xU0i_1zzp27ckiGVpk7ovE.crl (hash: Yy0qKSkAuFA+rLDmoCulF27MUye5o9Oc+cFf/cJ9D5M=) 13: tXmj_lk4J_cxjq5mg9Y-DnR4g68.roa (hash: FkJnyg1Nbp4kUP6A2c71ys6CgKIoTjWwYiDec6OD1BY=) 14: x93oIxwN7f9CnY5MK-gEMFA9RCs.roa (hash: iUrM+UkqfotbOBAOD6sNrVDAFzEQJnu2I0F39zCKGjM=) 15: x_9TAtatN7OaJxTBmrfHpUlXZDA.roa (hash: 2gG4s/omQ5P0Lbi33p1Th/x4L/bao6YkNKtuc6UmamA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Jun 2025 02:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:52:6b:23:44:73:63:59:89:14:69:1a:30:12:46:de:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Validity Not Before: Jun 9 02:00:42 2025 GMT Not After : Jun 10 02:00:42 2025 GMT Subject: CN=5a96976c677a3533f4cdfdb48a437d9a152bdedf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:73:ba:ad:44:b2:70:5e:b3:5e:02:47:7b:7f: 04:45:2b:da:96:37:95:c5:50:5c:fc:5d:6f:8d:c4: a6:97:31:64:ca:48:f4:b1:f2:f1:74:e1:bd:4f:30: f3:f6:2d:83:2e:29:2e:f9:20:dc:e8:70:cc:52:44: 74:68:fb:d8:d9:7c:ff:b7:fb:94:d1:ce:89:d0:00: d6:4f:3d:a4:f3:ca:b5:9f:ad:7d:7e:84:08:45:a0: 73:75:41:72:60:d0:ca:0a:37:3c:46:33:b6:c3:0c: bd:21:74:9d:c2:b8:57:e3:9e:da:a5:dd:89:78:ed: 03:cb:98:ad:5d:9a:c0:e4:d1:48:f5:9f:d7:e7:b4: 46:8c:9a:5f:37:14:f2:1e:cc:bf:11:09:b2:16:24: 95:21:a9:a2:c2:33:be:ff:cf:97:8a:09:21:2a:0e: 76:24:bb:5c:dc:e5:ab:9c:20:ca:85:3c:14:c2:c2: 82:13:64:39:79:92:65:3f:11:80:2c:fc:00:97:49: 89:04:17:3e:a1:8c:56:7d:dd:f5:d3:28:b7:8d:f6: 3f:40:47:18:30:8b:22:a2:2f:4b:4e:80:d0:4f:35: da:c8:73:97:df:02:41:7d:d7:80:55:ac:80:41:e1: 4b:b1:e7:95:ca:00:ff:be:ab:ac:b4:71:81:49:d1: 85:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:96:97:6C:67:7A:35:33:F4:CD:FD:B4:8A:43:7D:9A:15:2B:DE:DF X509v3 Authority Key Identifier: keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:45:20:33:49:f6:b8:51:eb:96:d5:9c:a5:54:30:17:0c:f8: 5d:2d:ff:1b:cc:af:3c:b3:4a:9e:52:db:04:cf:37:1a:9e:01: 4e:fb:c5:1d:1e:d6:9a:a2:a6:8a:56:90:3a:be:3a:d0:0a:32: e3:7e:25:79:09:16:04:ac:1d:67:db:c8:c1:9f:ad:d9:d0:41: ce:1c:e8:46:86:b0:df:33:ee:4f:89:e4:ae:25:c1:e5:4a:3a: 3b:c0:40:bb:da:99:ac:b9:ff:0e:87:10:52:1a:d6:1d:3c:24: 0e:fe:e0:d3:43:bc:0e:3c:09:20:7d:10:4e:72:32:16:f5:f7: 0c:99:20:9d:c9:14:10:20:fd:c2:b3:69:6f:da:ce:cf:3b:66: d2:25:b0:e7:3b:ab:ea:9a:61:cc:c2:5b:75:8e:5c:c7:0b:2d: 5d:87:02:c2:1c:27:cd:91:aa:9b:3b:e2:44:2e:54:a3:e1:c2: f9:4b:f3:cf:86:83:d6:54:80:ee:54:a6:5e:5e:0c:c3:38:70: d6:13:ec:a8:f8:54:64:7f:2d:73:cc:9a:b7:19:c6:b4:da:97: b9:ef:dd:ca:0d:99:f5:c4:8e:d8:45:be:64:c2:ca:a1:2a:dd: 18:c5:d6:78:49:8d:f2:44:33:40:eb:f9:8b:47:ed:71:ae:4b: 88:5f:02:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdSayNEc2NZiRRpGjASRt4aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNzI2MWQ3MTUzNDhiZmQ3M2NlOWRiYjcyNDg4NjU2OTkz YmEyZjEwHhcNMjUwNjA5MDIwMDQyWhcNMjUwNjEwMDIwMDQyWjAzMTEwLwYDVQQD Eyg1YTk2OTc2YzY3N2EzNTMzZjRjZGZkYjQ4YTQzN2Q5YTE1MmJkZWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnO6rUSycF6zXgJHe38ERSvaljeV xVBc/F1vjcSmlzFkykj0sfLxdOG9TzDz9i2DLiku+SDc6HDMUkR0aPvY2Xz/t/uU 0c6J0ADWTz2k88q1n619foQIRaBzdUFyYNDKCjc8RjO2wwy9IXSdwrhX457apd2J eO0Dy5itXZrA5NFI9Z/X57RGjJpfNxTyHsy/EQmyFiSVIamiwjO+/8+XigkhKg52 JLtc3OWrnCDKhTwUwsKCE2Q5eZJlPxGALPwAl0mJBBc+oYxWfd310yi3jfY/QEcY MIsioi9LToDQTzXayHOX3wJBfdeAVayAQeFLseeVygD/vqustHGBSdGFowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqWl2xnejUz9M39tIpDfZoVK97fMB8GA1UdIwQY MBaAFLJyYdcVNIv9c86du3JIhlaZO6LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2Yt NTA0ZjI3NjY3NjBmLzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2YtNTA0ZjI3NjY3NjBm LzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkUgM0n2 uFHrltWcpVQwFwz4XS3/G8yvPLNKnlLbBM83Gp4BTvvFHR7WmqKmilaQOr460Aoy 434leQkWBKwdZ9vIwZ+t2dBBzhzoRoaw3zPuT4nkriXB5Uo6O8BAu9qZrLn/DocQ UhrWHTwkDv7g00O8DjwJIH0QTnIyFvX3DJkgnckUECD9wrNpb9rOzztm0iWw5zur 6pphzMJbdY5cxwstXYcCwhwnzZGqmzviRC5Uo+HC+Uvzz4aD1lSA7lSmXl4Mwzhw 1hPsqPhUZH8tc8yatxnGtNqXue/dyg2Z9cSO2EW+ZMLKoSrdGMXWeEmN8kQzQOv5 i0ftca5LiF8C1A== -----END CERTIFICATE-----Generated at Mon Jun 9 11:46:00 2025 by rpki-client