$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft File: tOgroXFdaurlsBAnJf_gyDRzXX0.mft (raw, json) Hash identifier: Zjmxsjn2HqvyLXxRO3NYUP64NPFEwSTQbjlnPOPOuuM= Subject key identifier: 4C:C9:C9:99:60:7A:61:28:22:2C:85:C4:1B:55:3F:15:59:85:FC:D3 Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Certificate serial: 019749312F05040E21D8FF2651A121B6B9C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft Manifest number: 0D71 Signing time: Sat 07 Jun 2025 07:00:49 +0000 Manifest this update: Sat 07 Jun 2025 07:00:49 +0000 Manifest next update: Sun 08 Jun 2025 07:00:49 +0000 Files and hashes: 1: 69jsCPkwXK1lmTxeQTyCID9PpjA.roa (hash: h/Q47E5oO3l5JxeekNZr7l4rqZH5SyA0969VUEHNB8w=) 2: 9MVV1yAh59mTgEP_W258bMa49_o.roa (hash: iCN3glju44EdxjBrGRw+NZhFmqg56yUA7pS6/PNweyY=) 3: AjV2rlIwTElr058YXLjGHHrdXf0.roa (hash: LTFD7RWDdMyUwIhuINghYkedTIuVGScYQK467Diulf0=) 4: Dgr2wvOQnRz5hgawqSG0QB7Wpf8.roa (hash: qz1bNfdEE/9TcJfQDqdc+8FtR45UoCnUkyfUGSABkmQ=) 5: Nc7iCAoE-03LSc1GXjFAkPSA-x0.roa (hash: VtOFvrmMP9apoQYdMZ3KyjB/zTDsL+t3o+S71XhQxpY=) 6: ObtlGayrPGhbC0NJB3cANhdfN9g.roa (hash: IXODRFBoDBQAcQ/y7+mqgK85yVkykmHrcIsLk/+rl+k=) 7: RzTS_aVg4A3thhT1xHxtMXq_vOI.roa (hash: zu1mzofX6iUkewhCXeSVvIWnMGeLEK4TikiEna45T0w=) 8: VifVBKjqmDhUgid5BLElJTuQJo4.roa (hash: WI5+mxqhucetVt6cCUvKQ5QuoJnG/kLcpHeXlC1Yb5Y=) 9: hG1KSyXr5tG55jI9wBm-tSwn7ZM.roa (hash: ojUG1DHCfBEX5RoSvSto85jWrWuEE+T8wqBz5z+O87U=) 10: lKCL8VeF7spgo1KPqTl3MnMrJFU.roa (hash: G5kvKqbW+q0BKre+iGyFYRJgxgTgTCaLSiQqwrZLbuM=) 11: tOgroXFdaurlsBAnJf_gyDRzXX0.crl (hash: rYGwjaCPACAKE2GRD6KbG476XWedUHxekSk8FgC5Qrw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:49:31:2f:05:04:0e:21:d8:ff:26:51:a1:21:b6:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Validity Not Before: Jun 7 07:00:49 2025 GMT Not After : Jun 8 07:00:49 2025 GMT Subject: CN=4cc9c999607a6128222c85c41b553f155985fcd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:09:12:2c:78:e2:de:bc:8a:f9:48:3a:0f:76: d9:20:5f:e8:cf:32:ae:c9:b5:cc:52:09:65:f3:2c: 02:10:2a:be:64:a7:21:36:a7:55:97:8a:0f:4c:23: 7b:69:66:cf:95:df:7a:2c:ee:ec:b5:3d:8d:4b:c4: c9:26:dd:6a:c6:37:fb:7c:05:06:4d:e7:de:2a:bb: 69:6e:1e:d3:9a:cf:0d:72:df:bb:c7:8e:94:00:54: 8c:9b:03:7c:58:ea:a8:0b:7c:22:62:0b:3f:13:f5: f5:39:06:57:f0:47:f3:a1:48:f2:b0:d1:e6:b8:9b: 67:7e:df:1c:c5:20:f8:9c:1b:ac:7c:b1:19:c2:54: 06:3e:fc:ac:fa:7c:cf:de:61:52:4f:95:1b:ab:cd: 31:49:78:f9:84:23:58:f0:a5:e7:7e:0f:bb:27:f4: b9:6e:e6:eb:96:6d:a2:b2:da:61:42:88:96:61:de: 55:cd:11:af:cb:09:80:e5:ba:d1:da:24:3a:87:fc: 00:69:a8:f2:52:d1:c2:df:98:06:c1:e2:8f:0b:66: 36:11:54:47:97:09:07:2d:3a:af:93:61:d9:2a:3a: 63:9d:8a:fd:09:cf:e4:e9:3f:05:a8:76:81:22:e8: 7a:76:9e:a9:c3:c6:99:54:c4:04:6b:6f:30:de:9b: 28:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C9:C9:99:60:7A:61:28:22:2C:85:C4:1B:55:3F:15:59:85:FC:D3 X509v3 Authority Key Identifier: keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:a5:ab:7d:42:17:e2:9a:39:68:c4:95:5a:43:af:f5:5d:ca: 5a:4b:4b:9f:f3:3f:80:96:c0:51:7c:93:b7:54:64:c1:f9:f6: 2f:7a:69:09:37:d8:f4:58:66:ee:45:d5:c5:5b:a0:d4:7a:27: 16:da:90:5c:1d:a5:ba:56:5b:bd:a8:23:87:ae:1e:28:57:21: 30:00:43:70:96:30:b4:ac:20:03:1c:07:fa:b5:aa:a6:ee:04: 07:18:0e:54:fe:68:75:f2:d4:57:38:8d:4d:2d:4c:9e:81:87: 37:19:b9:40:ef:ce:29:7b:9b:93:c9:96:6a:e1:5f:81:3b:2a: 6c:28:ab:65:b3:c5:3c:51:29:dc:83:eb:a0:e0:de:db:5b:fc: 69:92:68:56:e9:5c:76:2e:83:3d:f0:14:b4:b7:8f:08:d1:8d: 25:d0:2d:a8:b9:82:b2:0c:6f:79:1d:b7:cb:c7:33:0b:26:01: 17:9b:f2:a8:f4:4e:3d:c6:e5:a8:88:08:14:ec:0d:d8:fb:93: da:61:72:1a:c1:d0:28:9b:cb:90:15:b6:6f:cd:ea:f0:00:b0: b6:b3:e8:87:18:f2:bf:db:06:12:35:da:7e:d1:a1:c0:f3:b8: 48:42:6d:fd:e1:f3:55:2a:63:71:94:78:d5:08:fe:08:07:4d: 8a:d0:1d:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdJMS8FBA4h2P8mUaEhtrnAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZTgyYmExNzE1ZDZhZWFlNWIwMTAyNzI1ZmZlMGM4MzQ3 MzVkN2QwHhcNMjUwNjA3MDcwMDQ5WhcNMjUwNjA4MDcwMDQ5WjAzMTEwLwYDVQQD Eyg0Y2M5Yzk5OTYwN2E2MTI4MjIyYzg1YzQxYjU1M2YxNTU5ODVmY2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AkSLHji3ryK+Ug6D3bZIF/ozzKu ybXMUgll8ywCECq+ZKchNqdVl4oPTCN7aWbPld96LO7stT2NS8TJJt1qxjf7fAUG TefeKrtpbh7Tms8Nct+7x46UAFSMmwN8WOqoC3wiYgs/E/X1OQZX8EfzoUjysNHm uJtnft8cxSD4nBusfLEZwlQGPvys+nzP3mFST5Ubq80xSXj5hCNY8KXnfg+7J/S5 bubrlm2istphQoiWYd5VzRGvywmA5brR2iQ6h/wAaajyUtHC35gGweKPC2Y2EVRH lwkHLTqvk2HZKjpjnYr9Cc/k6T8FqHaBIuh6dp6pw8aZVMQEa28w3psoIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzJyZlgemEoIiyFxBtVPxVZhfzTMB8GA1UdIwQY MBaAFLToK6FxXWrq5bAQJyX/4Mg0c119MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMt YzdkMTk5MzBkNjZkLzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMtYzdkMTk5MzBkNjZk LzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKWrfUIX 4po5aMSVWkOv9V3KWktLn/M/gJbAUXyTt1Rkwfn2L3ppCTfY9Fhm7kXVxVug1Hon FtqQXB2lulZbvagjh64eKFchMABDcJYwtKwgAxwH+rWqpu4EBxgOVP5odfLUVziN TS1MnoGHNxm5QO/OKXubk8mWauFfgTsqbCirZbPFPFEp3IProODe21v8aZJoVulc di6DPfAUtLePCNGNJdAtqLmCsgxveR23y8czCyYBF5vyqPROPcblqIgIFOwN2PuT 2mFyGsHQKJvLkBW2b83q8ACwtrPohxjyv9sGEjXaftGhwPO4SEJt/eHzVSpjcZR4 1Qj+CAdNitAdXQ== -----END CERTIFICATE-----Generated at Sat Jun 7 14:14:27 2025 by rpki-client