$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft File: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft (raw, json) Hash identifier: dJMc02J4g0iXrrbPdv6+8NqG4af03YD5gJXaGz5/6KY= Subject key identifier: B5:2C:7A:B3:B6:D1:89:70:52:55:20:10:31:44:D7:16:F6:41:B6:2B Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Certificate serial: 01974B5621FF6200503F3BDD875A7DAA9095 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft Manifest number: 14F0 Signing time: Sat 07 Jun 2025 17:00:25 +0000 Manifest this update: Sat 07 Jun 2025 17:00:25 +0000 Manifest next update: Sun 08 Jun 2025 17:00:25 +0000 Files and hashes: 1: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl (hash: 6QJAT8IitUpLWQvS4ux6xqL1uedHyrYBuCsCxHZxFI8=) 2: 41fVJkrPbHKQA079D4QVuoSoMHA.roa (hash: sr+TybZqUtIImaDgTqztSGD1XE6oloq4BZ2M4Xpg+u0=) 3: 4pf6JhZ2ZrbzDs3KIhxGjElBlaw.roa (hash: vXT1uBYUu9e7P+u/IiXkrVdl2Zw3UbzSeW2UWFK34Jw=) 4: 6klSWkjjUTbGuPtDfN8cALab9cs.roa (hash: sdgQjkXScGhQKnR4al8+skMwfxtoqagBTslhZkfSKNY=) 5: B3w7E9gvZEzFwMrG99Xq-T1MEBw.roa (hash: X2c/+qNKKXp5+FBng9aKxlFFZbDBWHiqkfhHgQbP6bg=) 6: C2H1BSmYMIrZggVB3V-MZ8CR5SY.roa (hash: MAmDjDLmFQyW+O4vZbG4q4tWTwrvQlayeoQlXr+Fu/8=) 7: DJ2HKm_1c1O48zC-cc12FURV1-w.roa (hash: odPYR1sTJx4nskAcxBKfAydZplTxWpbfAnjmQhPzJX8=) 8: GmlPqmYgpg61oCrtTG9RzmgTZRQ.roa (hash: lOFhsoN8S3GIIvzatAuS7mkyT16CCVPA77MjKa8aWWc=) 9: RZCNuFYkMVfet6khSeCWtqT4r3s.roa (hash: bz5sfARWaL0oWhzQTAMOexVtHrjfBeAF+vBi8eYpl/U=) 10: Sn1YHf-JTelJa8AbFEu9eCrJc-Y.roa (hash: 4RQ4/nSSdbUjaSMtOe+F2ienAydzSYTXwrbRmuUcEJY=) 11: UE3TFsD19f6wQr0gTHDaiwhGdqA.roa (hash: h9a9K3MMF0WQfDnzSvLb5P+n54cp7dIKew88pGDYldk=) 12: VicyF_0e_bvvcn0fKM8q40zu1n8.roa (hash: C5AQCG/2PEYP519Z6IOs4YDYOnLl0s41qulpvbJvJ4g=) 13: _HxOSGDLp42EFmYvwzkWMgsUDRc.roa (hash: ld3Ed4rdMoSUbT+R2+5BJt8zZUTSFFBqMJ22iFdBG+s=) 14: cHLxjuzlgoGDINIVaFsru4PZ9BE.roa (hash: o3eUI2kqgbIKISwJ6D+XZ6uUN50wRiiahX5yY1sTPn4=) 15: lknEfiAWsTgVxunxpJ4Cim6vi_Y.roa (hash: 9nT6QBaPn6YGSLcfszLUc2cPb60rXG8wS9MlLTeVBhw=) 16: mdB3D_zcc3ZMQewiv3J0UZ_sUlo.roa (hash: NsB59ITpkzoeK9pRuPozIMWrvt6Lae+60ChrUSCRg50=) 17: mjTSWLEuvIRJ-mDUVhSblHWE7N4.roa (hash: rmzWSKN3Yb/xA6p/q8UxEXQjDhun2rkoNnE76zOjZHo=) 18: pxtXnWk-oYZ7Qby89ddSCgu91ts.roa (hash: RB8UdezmP543bft1AFoJ1CEu6eopqGc7lCF9jSa1eTc=) 19: q74_W6xdG6goIDi1c08_8gJ6uTE.roa (hash: pxdR0KPAM6OXX14ayHaIWzZB+fjREFkJhs6uGstYGhI=) 20: r3Ck7fpoOKp57Mk1jJgw8XHWAxg.roa (hash: jDsvxvKf5uFW/4bW6b3NOwjRJy48sDgwtQTJJofZqGM=) 21: v99_kaWjoTKnpnOcBogb8Emjk4M.roa (hash: unshnZnS3tg5XPSrGj9Iy+gxnhESQoD/3z5Y8oIxogo=) 22: y38_fk_dl6De5uovg7WKuAzPolA.roa (hash: PsHTMj/SkJczqFC8znjT596YhybynG/bm1yXYsS6Cxs=) 23: z6d9djVL2RnXuevi6Ot8E8e62tc.roa (hash: o9Kh9fFp+5NbfQXFw6W0ABs1khVR+g751jXSLlxLU4c=) 24: zUeLco_9U8ifNR5PMJI3zpijW74.roa (hash: 3lduL1beP27BPGmbMBwONs6g5YeSTXx0lXyH1JulpN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 17:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4b:56:21:ff:62:00:50:3f:3b:dd:87:5a:7d:aa:90:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Validity Not Before: Jun 7 17:00:25 2025 GMT Not After : Jun 8 17:00:25 2025 GMT Subject: CN=b52c7ab3b6d18970525520103144d716f641b62b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e3:cf:9a:04:db:b0:93:90:eb:b0:d2:74:93: a3:4f:06:79:e8:15:ea:f9:a9:a2:18:ea:40:ce:e1: 17:9f:fc:e5:5f:a8:36:e1:75:c5:9c:d7:66:35:75: 01:81:ea:6d:ae:05:af:a5:8b:2e:04:66:30:53:55: b9:00:6b:70:8c:d2:1e:ca:de:79:75:75:0e:bc:88: 87:ad:2e:56:c1:5e:76:00:09:9c:bb:06:f9:53:19: ab:97:5c:c6:82:33:b2:3b:e4:b0:24:15:fb:0a:ae: 22:94:12:00:ff:b4:b9:56:4f:29:13:e9:b3:97:01: b4:b3:4e:09:13:84:2b:8b:d1:bd:88:96:02:64:c0: 4e:c5:f1:51:0c:99:b0:9a:89:78:8f:3d:5c:0a:55: 8f:a8:b5:f9:9d:31:41:2f:7c:df:69:54:a3:c9:04: b2:6b:0d:25:4d:71:d2:ba:8a:d5:0a:4e:41:45:85: c6:f1:9a:35:5e:18:e2:20:64:c9:33:76:73:9b:0d: 25:13:1a:1c:01:3a:a2:72:93:f1:42:ee:86:81:b1: aa:9b:25:27:25:22:7a:28:fe:32:df:40:27:b0:5c: 2f:ec:f4:ae:35:a8:db:b2:60:a4:b7:30:b6:58:67: 78:d0:39:01:c7:02:21:54:2f:2f:99:71:c9:2a:f2: 92:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:2C:7A:B3:B6:D1:89:70:52:55:20:10:31:44:D7:16:F6:41:B6:2B X509v3 Authority Key Identifier: keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:63:a8:a1:37:57:3f:36:ba:96:63:1c:6f:fb:f0:48:a1:02: d6:fe:ff:4b:ab:19:74:39:ae:c9:45:7e:ad:2a:22:a7:ab:3c: c9:41:82:b3:c1:92:a4:7e:f1:50:53:0a:18:5b:dc:ad:26:84: 15:e7:15:32:f9:39:c9:ba:4d:a8:9c:38:e3:51:e1:d6:97:81: 36:d3:20:fe:8a:a7:1c:c8:31:13:d2:c2:18:c9:d6:f1:06:a7: c9:65:b4:07:03:d6:97:ee:f7:c7:c8:06:2f:78:8d:e3:de:92: 30:6d:ff:46:09:45:24:4b:de:53:ab:dd:e0:8d:10:29:0b:91: 36:92:84:5d:b0:30:e5:ca:2b:6b:26:a3:94:f2:8f:30:a0:02: 14:bd:4b:e3:87:ea:f2:b1:60:57:c5:7c:51:28:8d:5c:a8:8b: 9f:b1:4d:14:d4:16:55:e1:03:41:ce:16:97:88:42:72:fb:56: 41:c6:81:94:bd:9a:38:44:f8:da:e2:ed:14:92:75:d8:71:ff: 67:b2:f7:11:2e:5f:d7:44:cf:0d:58:05:08:dd:2a:e4:f5:19: d2:11:c9:a7:9f:cd:53:4d:b8:0a:cd:b8:0b:e1:03:99:a4:10: f1:d3:b8:77:88:b7:41:05:60:37:52:3a:b2:75:75:d6:f5:31: 3f:ab:2e:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdLViH/YgBQPzvdh1p9qpCVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3 YjQ1ODkwHhcNMjUwNjA3MTcwMDI1WhcNMjUwNjA4MTcwMDI1WjAzMTEwLwYDVQQD EyhiNTJjN2FiM2I2ZDE4OTcwNTI1NTIwMTAzMTQ0ZDcxNmY2NDFiNjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOPPmgTbsJOQ67DSdJOjTwZ56BXq +amiGOpAzuEXn/zlX6g24XXFnNdmNXUBgeptrgWvpYsuBGYwU1W5AGtwjNIeyt55 dXUOvIiHrS5WwV52AAmcuwb5Uxmrl1zGgjOyO+SwJBX7Cq4ilBIA/7S5Vk8pE+mz lwG0s04JE4Qri9G9iJYCZMBOxfFRDJmwmol4jz1cClWPqLX5nTFBL3zfaVSjyQSy aw0lTXHSuorVCk5BRYXG8Zo1XhjiIGTJM3Zzmw0lExocATqicpPxQu6GgbGqmyUn JSJ6KP4y30AnsFwv7PSuNajbsmCktzC2WGd40DkBxwIhVC8vmXHJKvKSsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUserO20YlwUlUgEDFE1xb2QbYrMB8GA1UdIwQY MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt MmVjZTA0ZTE4NWMyLzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2OooTdX Pza6lmMcb/vwSKEC1v7/S6sZdDmuyUV+rSoip6s8yUGCs8GSpH7xUFMKGFvcrSaE FecVMvk5ybpNqJw441Hh1peBNtMg/oqnHMgxE9LCGMnW8QanyWW0BwPWl+73x8gG L3iN496SMG3/RglFJEveU6vd4I0QKQuRNpKEXbAw5corayajlPKPMKACFL1L44fq 8rFgV8V8USiNXKiLn7FNFNQWVeEDQc4Wl4hCcvtWQcaBlL2aOET42uLtFJJ12HH/ Z7L3ES5f10TPDVgFCN0q5PUZ0hHJp5/NU024Cs24C+EDmaQQ8dO4d4i3QQVgN1I6 snV11vUxP6sulg== -----END CERTIFICATE-----Generated at Sat Jun 7 23:01:19 2025 by rpki-client