$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft File: hPgk0y3xpRE9ghATRdeFo4rdveU.mft (raw, json) Hash identifier: KmpbR4aHRG1DpqT78ACgN15CRhEgodHvm8rBgyrAodU= Subject key identifier: 03:D7:51:38:AF:37:A7:40:6C:7F:B8:64:03:62:86:62:00:85:BF:3B Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5 Certificate serial: 01973D2D0C84047CA7100E21BB81C50FA302 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft Manifest number: 15F7 Signing time: Wed 04 Jun 2025 23:00:51 +0000 Manifest this update: Wed 04 Jun 2025 23:00:51 +0000 Manifest next update: Thu 05 Jun 2025 23:00:51 +0000 Files and hashes: 1: 1-ULSrC7qERPJ5s0LHG6wQSokzXA.roa (hash: M565zMsE8K/YoAfcIK7Sfb56kLhbnQFGZfCJXZeA4+c=) 2: 4CDpfs04Q6BhM73eRs3ynYW0oqc.roa (hash: SptP34QoXw99zxxZStKLiJW4s4aN8DzBBvEgnUw9cUs=) 3: PNjb4X8kJscwHMXMiyuXtbGZX5o.roa (hash: t6ZmoP2V9ihNwE35xzcIYI2VvpWaOI2bhHX5db7NWXc=) 4: RJwe2BfOH2L8b2xvYWAb7A5I8YI.roa (hash: Ua7R/78tPOt1hUU0nncJ70Fr//DWyVNm+5rSWWhtzSo=) 5: SNFt0lB0U4IpDK2M6jbg0nixPuw.roa (hash: ZkAQcXTk1wy7KfuKPlx7eg9LZ93/MdGfH+lnC1SNvbA=) 6: ZpIOx5_wULQ6fk_u3FoWz7KE0YQ.roa (hash: xlJGrnQ3RAzHyUU8Evq1z4uBR31JBslascWxforueJ0=) 7: c39OdSugEhhkTfEPcCwd1BnFeWg.roa (hash: D3rVYMF6ZEkgIoR+XLBvFbt0BnRz80lo8KFUojO0nhs=) 8: hPgk0y3xpRE9ghATRdeFo4rdveU.crl (hash: hWw/1NFKPCYjSPA4vVLp1Lu/RzrR2VjWayI4+TKRmfk=) 9: jZZQ117MrYD6QSdQsNATRgEh9Js.roa (hash: F74W3mlUaYmiXG4eRCyJ8iNyFuD8U//X0zL2pTBsPr0=) 10: kSIH-t1YlaXWMTafK3y9G8k2BtE.roa (hash: u8I0qLPnotq4HtUH8xPoZUCuSzCQZnlgK1v3TzivBbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 23:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3d:2d:0c:84:04:7c:a7:10:0e:21:bb:81:c5:0f:a3:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5 Validity Not Before: Jun 4 23:00:51 2025 GMT Not After : Jun 5 23:00:51 2025 GMT Subject: CN=03d75138af37a7406c7fb864036286620085bf3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6f:b3:d5:aa:26:9c:6f:80:d5:07:f8:ba:0e: 5e:7f:a7:97:ab:54:0e:a7:de:0b:90:25:6c:15:34: a9:c7:97:05:e1:08:43:f8:2f:16:e0:d8:80:cd:fa: b0:91:b4:d7:9a:5d:2e:60:74:6e:0d:7d:a3:cb:fb: 96:f0:ce:31:fd:be:21:2d:76:35:6a:ce:09:8c:fa: 77:ed:bc:85:27:ac:52:54:9a:5b:23:3c:a5:79:cc: fd:4e:94:6f:05:89:4d:ef:83:6e:a3:33:d6:1a:f8: ce:91:58:d8:dc:cf:02:07:49:6a:27:a6:5c:03:f7: 4c:7f:bd:42:7d:3d:29:98:79:65:1d:3b:af:50:61: 01:7c:98:62:ce:61:13:9c:c8:61:f7:4a:c9:3b:a4: 67:ff:17:31:09:e2:e1:06:95:72:d1:6b:62:30:f7: f7:49:9f:ec:ec:62:3a:e5:dd:07:29:7b:45:43:18: 13:b9:75:80:65:4a:0d:9d:e5:c4:e8:dc:be:59:bc: 3c:18:82:13:e9:62:13:01:f9:6d:d7:d9:57:90:9d: e8:23:4e:65:5e:cc:22:fa:cc:8e:cd:31:28:56:f9: 55:a9:73:e9:0b:0b:4a:a9:f5:50:c9:ac:ed:46:52: 8d:18:cc:e2:69:e1:3e:91:ac:a0:af:bc:7e:f3:3b: 82:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D7:51:38:AF:37:A7:40:6C:7F:B8:64:03:62:86:62:00:85:BF:3B X509v3 Authority Key Identifier: keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:41:e2:36:36:26:d2:d6:ed:27:8a:cd:8e:47:26:9d:93:15: cd:a9:99:22:94:fe:64:fe:6d:2e:3c:d5:02:bb:19:94:21:b0: 3a:89:f6:17:eb:d0:ed:aa:1e:8d:9a:be:d7:fe:71:a6:4a:65: 16:20:c5:7c:08:21:0f:15:4c:71:d4:b8:56:a1:2d:3e:6d:7c: 70:23:6a:74:e7:f9:9d:e4:f6:f8:9e:33:7d:fb:b9:d6:c4:e5: 78:32:16:a4:20:99:b6:e3:a1:5b:56:38:93:77:25:26:af:53: e1:73:49:08:80:27:b1:e0:56:58:5c:03:1f:29:84:d0:94:62: bc:17:5a:63:8e:4c:ff:af:a3:2e:3a:0d:04:36:9a:db:14:49: 9a:a3:e0:03:0d:80:65:ae:b2:0f:f5:cc:64:3b:ad:c4:1d:cc: 78:60:74:c2:5c:91:b6:c7:36:93:84:2b:69:da:e8:0f:0b:c3: 28:b2:a6:d5:a8:7b:5a:e5:96:75:96:b8:b1:c3:2e:6d:b9:af: d0:45:7b:38:57:37:f9:a5:55:b1:68:8b:29:0b:a6:b0:c1:de: dd:28:5e:cd:c6:bb:be:d2:75:db:11:fb:b4:61:8c:4c:0a:73: e2:13:f8:5c:1a:46:5d:81:39:66:a0:90:cb:3c:60:3f:7a:16: 29:56:0e:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc9LQyEBHynEA4hu4HFD6MCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZjgyNGQzMmRmMWE1MTEzZDgyMTAxMzQ1ZDc4NWEzOGFk ZGJkZTUwHhcNMjUwNjA0MjMwMDUxWhcNMjUwNjA1MjMwMDUxWjAzMTEwLwYDVQQD EygwM2Q3NTEzOGFmMzdhNzQwNmM3ZmI4NjQwMzYyODY2MjAwODViZjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2m+z1aomnG+A1Qf4ug5ef6eXq1QO p94LkCVsFTSpx5cF4QhD+C8W4NiAzfqwkbTXml0uYHRuDX2jy/uW8M4x/b4hLXY1 as4JjPp37byFJ6xSVJpbIzylecz9TpRvBYlN74NuozPWGvjOkVjY3M8CB0lqJ6Zc A/dMf71CfT0pmHllHTuvUGEBfJhizmETnMhh90rJO6Rn/xcxCeLhBpVy0WtiMPf3 SZ/s7GI65d0HKXtFQxgTuXWAZUoNneXE6Ny+Wbw8GIIT6WITAflt19lXkJ3oI05l Xswi+syOzTEoVvlVqXPpCwtKqfVQyaztRlKNGMziaeE+kaygr7x+8zuC4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPXUTivN6dAbH+4ZANihmIAhb87MB8GA1UdIwQY MBaAFIT4JNMt8aURPYIQE0XXhaOK3b3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgt NDM3Mzk0OTM4YzUyLzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgtNDM3Mzk0OTM4YzUy LzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqEHiNjYm 0tbtJ4rNjkcmnZMVzamZIpT+ZP5tLjzVArsZlCGwOon2F+vQ7aoejZq+1/5xpkpl FiDFfAghDxVMcdS4VqEtPm18cCNqdOf5neT2+J4zffu51sTleDIWpCCZtuOhW1Y4 k3clJq9T4XNJCIAnseBWWFwDHymE0JRivBdaY45M/6+jLjoNBDaa2xRJmqPgAw2A Za6yD/XMZDutxB3MeGB0wlyRtsc2k4QradroDwvDKLKm1ah7WuWWdZa4scMubbmv 0EV7OFc3+aVVsWiLKQumsMHe3Shezca7vtJ12xH7tGGMTApz4hP4XBpGXYE5ZqCQ yzxgP3oWKVYOKA== -----END CERTIFICATE-----Generated at Thu Jun 5 06:46:08 2025 by rpki-client