$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json) Hash identifier: PvDR3Ygqlt+rokY9JfIHMFIzDQnG8ycU5onn60yMyiU= Subject key identifier: 0C:CF:DE:8B:5B:D5:32:EA:1F:6D:F5:D4:47:1F:9E:A8:FF:1F:E9:75 Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 0197507CC62BDAC9B0D0BF5A7DB3C440154C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft Manifest number: 15A9 Signing time: Sun 08 Jun 2025 17:00:43 +0000 Manifest this update: Sun 08 Jun 2025 17:00:43 +0000 Manifest next update: Mon 09 Jun 2025 17:00:43 +0000 Files and hashes: 1: 5oD2HNqgzG_qOcF_21G9KLy5e2Y.roa (hash: RmXZv+Vqe5cI4h6ljtkED0qwtDL54/1oOSvgcLZr5dM=) 2: 6H0jPgZ40-qSdMrUIpXtjHxd2VA.roa (hash: bKX7Wm+km5brNebStx9trC9lQWDSYN+gli61DR2OFCc=) 3: 75sT-nwUqhGJrktdH6EqWa-q1mo.roa (hash: R1QtO6OQwY7O/dWJMCnCSA9mjsQZb+aGyr2mwiCWXM0=) 4: Bk5EEDboiWzloYLSbIprmQyOumI.roa (hash: Leabib+pYR396O62ZqXXAQ9RyIVRB2I7VcCKzRGI0Zw=) 5: FRe6auZzcSOVPtZ6Q5yvjDHlzS0.roa (hash: 2NaXdTlzJjkR6eXsQNd9ul22Iz8k3jyPNXeVsKS/++A=) 6: GEXA_gDFN_UI9pmu8MV3voaPJJw.roa (hash: dqAjGTOppVUexxUhNJnZSDJjjUoQVnH9/+S3XNxYfss=) 7: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: 0eotPMCflkFsllqAU7KFGGa2ZV+nE9CGhIeiP2CmAJU=) 8: J0mrTDoDAe4tdcNY4ZTx8ruuu9g.roa (hash: SdkYwpw3qIRaB5VQaHi9AMXoPRVnXFJoZo9ChQzY2P8=) 9: QKd9v1TqhiMsVLAcOxJ22eYxs_g.roa (hash: HKu0bw+bkfxh/NhVSCdqzBjjysK0/agU+8z7cijegyY=) 10: WKhjscqZWdN-nuM8dfIBcstyH14.roa (hash: khUF0nyoDvCPGxtlsBxOqPz0aIco2pUZJy9sOWQaHzM=) 11: qMUUhW1iC-XMKPgcY2-u4nUNHXY.roa (hash: 8IGWcOXBDlPGcQOckJ+GtmlbDYmD6/HkpFAja/aKolM=) 12: tV8pY2AaFoThs7aSR_rVRKM4uZ8.roa (hash: 5JEjFQnGCc8ZZH1Nis0Dk3OW+MkzIr5bBwteIscBMNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Jun 2025 17:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:50:7c:c6:2b:da:c9:b0:d0:bf:5a:7d:b3:c4:40:15:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: Jun 8 17:00:43 2025 GMT Not After : Jun 9 17:00:43 2025 GMT Subject: CN=0ccfde8b5bd532ea1f6df5d4471f9ea8ff1fe975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:22:4d:e6:26:cf:42:f7:2a:94:e6:b6:90:27: 67:d5:3a:47:1c:f2:7c:b3:62:85:19:89:4d:30:46: 50:1f:3f:d8:85:8f:f7:60:fb:a5:fe:c9:e2:6a:b9: 66:9f:c5:37:ff:6a:07:63:93:b2:e7:57:4f:5f:e3: 08:c8:b0:df:ab:86:d4:5d:f6:f0:bb:99:ba:f5:2b: 95:d8:27:ab:60:d3:58:e7:80:77:5b:74:2d:a0:97: 2c:ea:13:4b:87:c2:b5:5c:35:6e:30:45:9a:15:3b: f3:f0:40:de:e3:35:77:7c:b5:f4:46:db:5b:f4:3c: b5:21:3b:9b:3c:a0:0c:d0:75:54:b9:1f:0c:62:94: 3c:d3:c5:13:17:0a:a0:67:c0:af:ad:0f:a4:0f:49: dd:3a:89:c3:97:ae:b0:46:77:be:d6:aa:b6:5b:02: 2a:0b:6e:2d:b9:de:ea:f9:49:15:a3:8f:5b:da:9b: 75:a1:ec:d8:19:a3:f2:35:53:9b:c4:f5:15:9c:b2: 28:46:48:4e:f6:79:33:d0:00:c8:57:d2:92:b6:ee: 60:13:8f:fa:45:6c:49:99:24:48:73:a6:92:ce:f9: 9e:a1:88:79:ae:ad:26:1e:d7:dd:d1:4b:84:3b:d8: 86:9c:b8:ee:52:3f:b3:90:b5:ae:23:cd:92:c4:7a: 7d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CF:DE:8B:5B:D5:32:EA:1F:6D:F5:D4:47:1F:9E:A8:FF:1F:E9:75 X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:34:8a:e7:b1:b4:da:5a:34:26:24:c3:d8:dc:2d:b4:3b:47: 3f:29:10:1f:76:b8:55:9f:34:60:0b:75:39:63:7c:4d:86:26: a0:e5:03:26:ff:f2:a6:4f:31:8f:25:3f:3e:8b:15:cc:11:5e: 53:a7:5a:9c:a9:32:f3:79:9b:2a:f1:2c:1d:77:3c:33:45:63: 5d:9d:01:2d:62:0c:ed:4b:5e:ca:f1:4a:42:a3:33:70:2d:67: fb:41:89:a7:51:0f:b3:e3:c4:1c:b5:95:0f:37:11:7e:58:00: e2:b3:5c:6d:96:3b:0f:95:cc:c1:85:66:9b:5e:34:04:16:e0: d2:00:1e:10:c1:23:c8:b6:eb:4b:43:1f:4b:1f:2a:d5:21:a3: bb:65:50:b6:de:e6:23:fd:2d:11:50:22:e5:88:a1:76:4d:61: 8b:19:f6:43:18:4b:cd:01:95:a4:3c:c7:da:71:0c:5e:45:37: 1b:bd:47:a9:a4:2c:04:32:61:7d:df:2f:1d:b1:9e:bf:9c:be: 92:19:f4:2e:17:28:cb:ff:f8:e8:71:91:8c:a8:55:fe:57:4b: 43:52:1e:54:05:14:9a:23:81:9b:7b:73:98:82:45:ee:f8:9c: 77:e1:db:2f:d6:f3:0a:43:ed:23:45:6c:ff:59:5f:6e:6b:45: 6b:53:7e:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdQfMYr2smw0L9afbPEQBVMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjUwNjA4MTcwMDQzWhcNMjUwNjA5MTcwMDQzWjAzMTEwLwYDVQQD EygwY2NmZGU4YjViZDUzMmVhMWY2ZGY1ZDQ0NzFmOWVhOGZmMWZlOTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSJN5ibPQvcqlOa2kCdn1TpHHPJ8 s2KFGYlNMEZQHz/YhY/3YPul/sniarlmn8U3/2oHY5Oy51dPX+MIyLDfq4bUXfbw u5m69SuV2CerYNNY54B3W3QtoJcs6hNLh8K1XDVuMEWaFTvz8EDe4zV3fLX0Rttb 9Dy1ITubPKAM0HVUuR8MYpQ808UTFwqgZ8CvrQ+kD0ndOonDl66wRne+1qq2WwIq C24tud7q+UkVo49b2pt1oezYGaPyNVObxPUVnLIoRkhO9nkz0ADIV9KStu5gE4/6 RWxJmSRIc6aSzvmeoYh5rq0mHtfd0UuEO9iGnLjuUj+zkLWuI82SxHp9EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzP3otb1TLqH2311Ecfnqj/H+l1MB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0DSK57G0 2lo0JiTD2NwttDtHPykQH3a4VZ80YAt1OWN8TYYmoOUDJv/ypk8xjyU/PosVzBFe U6danKky83mbKvEsHXc8M0VjXZ0BLWIM7UteyvFKQqMzcC1n+0GJp1EPs+PEHLWV DzcRflgA4rNcbZY7D5XMwYVmm140BBbg0gAeEMEjyLbrS0MfSx8q1SGju2VQtt7m I/0tEVAi5Yihdk1hixn2QxhLzQGVpDzH2nEMXkU3G71HqaQsBDJhfd8vHbGev5y+ khn0Lhcoy//46HGRjKhV/ldLQ1IeVAUUmiOBm3tzmIJF7vicd+HbL9bzCkPtI0Vs /1lfbmtFa1N+GA== -----END CERTIFICATE-----Generated at Mon Jun 9 02:19:13 2025 by rpki-client