$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft File: I0Rtp6cLznc-wrwWVarjDDwYQSw.mft (raw, json) Hash identifier: EJM8+jCRR2jotSA6k+TVHd56Mz2hcYefV2wOVitZ52M= Subject key identifier: A8:A2:95:6F:43:D6:74:A6:3D:8B:F3:6F:5E:43:8C:79:D4:BE:32:A9 Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c Certificate serial: 01973B75B99C09C1FB370D38C9E183C9370A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft Manifest number: 1335 Signing time: Wed 04 Jun 2025 15:01:00 +0000 Manifest this update: Wed 04 Jun 2025 15:01:00 +0000 Manifest next update: Thu 05 Jun 2025 15:01:00 +0000 Files and hashes: 1: 1-DmgZ4SOp-NyMxLpBYaEtj39Pdc.roa (hash: moNVW0pEVWJfvkZEJ959J7HVzxYxrRxeZe7wePoILkM=) 2: 1-YvBQ0BXrsF-NI7ubQxbzvPVuzg.roa (hash: eYRmazTnlT6QkpTc8BcLL4cZu0o6zfLVuHBleuRca74=) 3: FwySP1jVKL7DmmlRNwZnvOJofjw.roa (hash: F8V8HLYupPXjwfMEbx0g1ieMP6WPPz1HmoVO8jTtRCg=) 4: I0Rtp6cLznc-wrwWVarjDDwYQSw.crl (hash: 2Zl1vbt8JI99HD6znEaxgea4O6XAQ0GpSfZUAD/cU1g=) 5: Xu2K8fW-gQnYV7VE3ISwB8N68f8.roa (hash: NKQq6ePbr62hGHn3QtTkpNNxc85cdItsXJmI3/Mzf2w=) 6: bXcsNUMfdZBR3tv1r8dI-NGTxGI.roa (hash: nSyMcXVhj3Lt4TUfuUh042NUrc5IpwBc7m8EmxqlbJw=) 7: d_P2C7-8KzXEXKrYSD9DOI8LiWE.roa (hash: Yd4prnJa4gstJKWN3oZHIXfbfrVyLQkl2GQSNyCI7uQ=) 8: k5bIb9MZd-l_B-bxXKNoMlRDovA.roa (hash: bpuvw96upd8j55DJW2izTXwq0PIjcaMc/13PHw88j0I=) 9: leUb75eQIxyb-VxN49MBjH1YF7k.roa (hash: kyA2+f/9l+pKqkl9Or57N7CwCtWEqE5/Far2bCfSZ4I=) 10: pqM1u8SkS4zcFQvrBhQWpXPMYCA.roa (hash: ZvRrYdTYDz9FJEg1Ikh5qg9AfwzK1a1b92vZCCUcbys=) 11: qV9uaYW0EJ9RfJ2uJjNKqD5z7XA.roa (hash: 8zBVfYPjKnKjKryP+fVFU4l51KGHl1B5bpWFMv1A9Mk=) 12: sDrv6ds57QYfp4Z_4o5IpblURKI.roa (hash: Y8MxO27e+WV4vIqzW7fZxZuurHymmQUKVTNCec7B22g=) 13: wFX7xPpJ7yA033Ye7jyB7b5hfrY.roa (hash: cWLM1VzdX6e7FN9H2A5u+k5ZkEsPKCYG7CFbFvNUR/k=) 14: xxa6C-pa80quO5ROYbjP391EF1Y.roa (hash: kO5NzNIL7QO5wmPmlUrjQ/tzsh5UuDfcIRoRWEvLEF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 15:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3b:75:b9:9c:09:c1:fb:37:0d:38:c9:e1:83:c9:37:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c Validity Not Before: Jun 4 15:01:00 2025 GMT Not After : Jun 5 15:01:00 2025 GMT Subject: CN=a8a2956f43d674a63d8bf36f5e438c79d4be32a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0e:67:4f:b2:54:96:34:53:b5:75:61:7c:83: f5:df:45:75:95:7a:ae:09:fa:1b:a1:8f:35:89:91: 3d:91:2e:da:53:50:c1:fd:33:48:c7:4e:32:b8:4b: 7b:73:31:27:96:d5:d5:33:fb:bf:d1:41:fa:f2:7d: db:cd:fc:92:e9:a7:70:d1:f7:5f:77:b8:7c:1f:a0: 0b:1b:d7:7e:14:61:82:49:c0:11:c2:75:87:cb:c9: b5:6f:85:cf:01:6d:46:50:77:57:82:f7:27:50:27: 43:bc:58:9f:f3:a4:78:7d:9c:b8:e7:e3:b1:0b:22: 0d:d7:3e:ef:4b:8e:75:bd:a1:7c:35:0f:e8:45:8d: 7f:e0:5d:ca:c1:b1:b8:a9:0f:62:f5:57:f9:74:46: bc:47:a5:9e:ab:53:f4:4d:29:40:ce:12:db:7d:b2: 0c:b0:a0:5d:95:12:23:e4:c6:bf:c7:b9:de:ca:eb: ec:29:55:06:9a:4b:9f:b4:4e:c5:ce:39:23:86:00: b6:f7:19:a2:d1:24:2b:51:d2:07:18:7c:33:c6:ac: 24:91:22:8a:77:36:66:8b:f8:59:2b:07:d6:2c:12: 84:a3:c4:a5:df:15:ec:c6:80:65:ac:08:bb:0e:14: 68:70:85:5c:e8:67:14:b4:b1:f5:63:7f:85:11:68: 81:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A2:95:6F:43:D6:74:A6:3D:8B:F3:6F:5E:43:8C:79:D4:BE:32:A9 X509v3 Authority Key Identifier: keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:9b:2b:ab:98:3e:c5:aa:cf:18:5a:f4:b8:0a:c5:41:d1:6a: bf:02:f1:6d:16:5d:3a:fd:22:31:bd:a4:95:c5:de:ac:68:83: cb:d8:9b:5f:c3:e2:85:ed:aa:f6:85:92:c5:41:0a:34:98:a8: 6e:33:e8:67:dd:ce:19:db:c6:af:9e:6a:eb:5a:61:aa:55:21: a0:f1:dd:6d:11:d3:bc:31:26:4b:68:6b:00:b7:81:b5:89:69: 34:33:f1:55:ec:43:3e:ee:7e:15:92:9f:98:e4:a7:f4:f5:5c: a3:96:e3:98:c4:cd:14:86:f2:ed:07:8f:ee:0c:23:28:ee:75: 02:71:0d:89:b9:c9:63:25:0a:be:d1:64:6c:65:62:c4:c2:0e: 8e:77:24:32:39:64:0c:e3:dc:9c:08:89:a5:1c:56:ea:39:ce: aa:14:a2:ce:31:66:b2:65:0b:69:0e:0a:01:db:bc:f2:d1:6b: 27:d2:e5:74:8c:27:cd:9d:39:25:ba:3a:ad:eb:3b:d6:4d:81: 1a:ec:10:86:63:0c:95:04:3d:e9:73:d5:5f:fc:ec:a1:ff:bd: c2:57:72:71:53:33:77:6c:f3:e0:70:be:62:54:6b:08:13:32: 48:e4:3f:41:98:d3:5e:71:d6:a7:20:c8:51:ed:07:3a:d4:c4: 5d:f1:dd:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc7dbmcCcH7Nw04yeGDyTcKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNDQ2ZGE3YTcwYmNlNzczZWMyYmMxNjU1YWFlMzBjM2Mx ODQxMmMwHhcNMjUwNjA0MTUwMTAwWhcNMjUwNjA1MTUwMTAwWjAzMTEwLwYDVQQD EyhhOGEyOTU2ZjQzZDY3NGE2M2Q4YmYzNmY1ZTQzOGM3OWQ0YmUzMmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA5nT7JUljRTtXVhfIP130V1lXqu CfoboY81iZE9kS7aU1DB/TNIx04yuEt7czEnltXVM/u/0UH68n3bzfyS6adw0fdf d7h8H6ALG9d+FGGCScARwnWHy8m1b4XPAW1GUHdXgvcnUCdDvFif86R4fZy45+Ox CyIN1z7vS451vaF8NQ/oRY1/4F3KwbG4qQ9i9Vf5dEa8R6Weq1P0TSlAzhLbfbIM sKBdlRIj5Ma/x7neyuvsKVUGmkuftE7FzjkjhgC29xmi0SQrUdIHGHwzxqwkkSKK dzZmi/hZKwfWLBKEo8Sl3xXsxoBlrAi7DhRocIVc6GcUtLH1Y3+FEWiBxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKiilW9D1nSmPYvzb15DjHnUvjKpMB8GA1UdIwQY MBaAFCNEbaenC853PsK8FlWq4ww8GEEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQt MjVjYzlkNmNmYmI5LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQtMjVjYzlkNmNmYmI5 LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwZsrq5g+ xarPGFr0uArFQdFqvwLxbRZdOv0iMb2klcXerGiDy9ibX8Pihe2q9oWSxUEKNJio bjPoZ93OGdvGr55q61phqlUhoPHdbRHTvDEmS2hrALeBtYlpNDPxVexDPu5+FZKf mOSn9PVco5bjmMTNFIby7QeP7gwjKO51AnENibnJYyUKvtFkbGVixMIOjnckMjlk DOPcnAiJpRxW6jnOqhSizjFmsmULaQ4KAdu88tFrJ9LldIwnzZ05Jbo6res71k2B GuwQhmMMlQQ96XPVX/zsof+9wldycVMzd2zz4HC+YlRrCBMySOQ/QZjTXnHWpyDI Ue0HOtTEXfHd1Q== -----END CERTIFICATE-----Generated at Wed Jun 4 22:48:04 2025 by rpki-client