$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft File: MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft (raw, json) Hash identifier: xbLIDNE0vsWOjcUmlpZqG7nvySF1fwjAAAkj2VzrlNs= Subject key identifier: 88:56:AE:6F:34:41:C4:3B:B6:FD:56:E5:A6:1D:5B:D8:4F:C2:15:FC Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Certificate serial: 019768BBEAC84029936653F93816B50A6BED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft Manifest number: 1599 Signing time: Fri 13 Jun 2025 10:00:35 +0000 Manifest this update: Fri 13 Jun 2025 10:00:35 +0000 Manifest next update: Sat 14 Jun 2025 10:00:35 +0000 Files and hashes: 1: 7sUlQFo2i2sGz_Vst269K_D-c-U.roa (hash: awgZwYT2+l2C5RaRZHXtrmJNbZfubWqB+2+301bBQBU=) 2: MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl (hash: hly1fWXE4ST8DCDl4Udic3ohuGH02dJ9C0Fp5EkyEoY=) 3: N6977Tm3BxtAWxQMZFqlxhSXVqI.roa (hash: avNpgfUO6xrr8rilL4FRK/J7Wxu+LI2r4IfOPlXIeJI=) 4: OqobHIZLFLbZk0OR9E-PF1zk1Lw.roa (hash: Op02L+M19/z5j79qbmcRNqPT6icOYzM0VJzQXj5mmv8=) 5: TEsKuOI8Wr3xLM61BToTHvaxLG0.roa (hash: rGoXl2FfQwurIyUgTu1Dn9mUe7pNqUYv/AJnXAkg28U=) 6: i7jWP6E6hcB7Kvbk4mThF2buTs8.roa (hash: OqH0B+K5eYlDv/BpS97jLxNiwQggexBzkbjaho23mP4=) 7: nqc-9YDKd79YsE90D6bPl2BpKgE.roa (hash: VLqSIZaMWc7sFSdSIdfn5EqqZNs2ezp2l6diOyM4sNY=) 8: rgeIy49dLmNJww9sp8JRWKXD-n8.roa (hash: L8MUX4zAy84NplfwfzJB7WI9HcrmosjCL1UuxDQCssQ=) 9: xZ2vcM-Bgt-peFWCq0zItN8_N0c.roa (hash: IJSnWW805B1m7rlymmTJG2w628sB6dalr9ieL5l/bMk=) 10: zZigjvCd6NcudatYLyfpsyOboFA.roa (hash: vGtEfaZy/GpSD6Vra1IvWRrERF5jpy55majvnW9xdMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 07:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:68:bb:ea:c8:40:29:93:66:53:f9:38:16:b5:0a:6b:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Validity Not Before: Jun 13 10:00:35 2025 GMT Not After : Jun 14 10:00:35 2025 GMT Subject: CN=8856ae6f3441c43bb6fd56e5a61d5bd84fc215fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:44:83:04:bb:9c:47:72:eb:4b:8b:2f:91:f0: 04:65:03:c1:b8:4d:da:26:ed:8c:8e:19:39:8f:f1: 50:6c:47:bf:d5:4d:5a:29:41:ab:c4:70:89:83:c2: 12:bf:8a:06:fd:50:65:d5:ca:c8:19:be:03:a1:ad: fb:41:1b:30:d5:41:ea:a9:8f:9f:ec:30:8a:de:ed: 18:70:f5:70:77:41:3f:81:e6:69:bb:ec:83:20:7a: d7:0e:80:b5:90:6e:a1:93:63:ee:0b:d7:68:cc:7d: 14:6e:62:97:3f:5a:9c:2d:3f:45:2e:24:f6:3d:dd: 08:f3:32:46:17:d0:4b:15:0c:31:19:ec:d5:5d:5b: d5:7f:d0:38:40:9f:6e:9e:94:48:2d:d7:0c:cb:29: 95:83:b3:38:e3:25:fe:bf:8c:49:89:d8:24:aa:dc: eb:bf:dd:45:2e:8b:23:54:13:54:b0:7d:3a:aa:4c: 59:ea:2e:64:19:fd:41:4d:8c:52:42:7e:80:8f:b1: ad:10:cf:9d:fb:9b:66:6e:80:9f:3a:ef:a9:ec:92: 5f:dd:15:a3:cd:a4:fb:25:fd:17:29:de:2a:d0:92: 3b:eb:70:1c:51:cd:c2:70:c3:e0:96:f9:02:d2:78: e3:25:f8:2f:bd:79:03:f1:a8:63:c8:d0:59:0a:c1: 52:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:56:AE:6F:34:41:C4:3B:B6:FD:56:E5:A6:1D:5B:D8:4F:C2:15:FC X509v3 Authority Key Identifier: keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:e6:8b:a7:4a:a7:43:96:ca:7e:3f:d1:92:db:55:36:5c:8d: bd:e1:39:65:c7:f9:ab:7d:a2:12:53:97:6a:f7:9a:b3:7b:e1: 5a:7d:05:de:82:2d:f5:cf:23:9a:0b:1d:73:10:3f:56:0a:f5: af:1b:f4:71:53:32:a9:ff:c2:19:73:09:28:9b:e9:25:3e:e4: 4d:da:61:ae:cd:29:56:66:f9:48:53:d5:56:f5:c1:bd:51:ab: b9:ec:82:4a:55:25:50:18:20:4a:be:af:db:a3:51:d9:60:f4: cf:29:53:73:e6:d5:2e:44:3c:b7:8f:95:cd:61:79:13:93:c7: b9:3b:86:57:fd:2d:80:b5:dc:6e:b7:99:10:45:de:45:89:3e: 9d:d7:ed:7f:51:70:a9:5f:22:a3:1d:8f:03:eb:d7:a9:76:87: 8e:dd:99:7e:2a:27:26:bd:60:d8:08:ce:d9:6c:c0:13:69:cb: bd:c7:4a:e1:6b:4c:b6:13:27:2d:11:cc:a9:ae:29:c8:19:9f: 78:f8:b6:b5:ba:f3:4c:86:4e:63:3a:ad:88:66:ae:2f:d1:35: 42:f0:2c:ba:06:a4:27:62:c3:fe:1f:c5:5d:28:99:c4:34:70: 1e:46:92:cc:e0:95:8a:76:1d:05:19:37:3f:ef:96:e8:26:86: c7:bf:4c:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdou+rIQCmTZlP5OBa1CmvtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTA4ZmI3ODFjYTZkYmQ4MjIxZjJjMmY5NTRhM2E3NDQ2 YjJiNDIwHhcNMjUwNjEzMTAwMDM1WhcNMjUwNjE0MTAwMDM1WjAzMTEwLwYDVQQD Eyg4ODU2YWU2ZjM0NDFjNDNiYjZmZDU2ZTVhNjFkNWJkODRmYzIxNWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkSDBLucR3LrS4svkfAEZQPBuE3a Ju2Mjhk5j/FQbEe/1U1aKUGrxHCJg8ISv4oG/VBl1crIGb4Doa37QRsw1UHqqY+f 7DCK3u0YcPVwd0E/geZpu+yDIHrXDoC1kG6hk2PuC9dozH0UbmKXP1qcLT9FLiT2 Pd0I8zJGF9BLFQwxGezVXVvVf9A4QJ9unpRILdcMyymVg7M44yX+v4xJidgkqtzr v91FLosjVBNUsH06qkxZ6i5kGf1BTYxSQn6Aj7GtEM+d+5tmboCfOu+p7JJf3RWj zaT7Jf0XKd4q0JI763AcUc3CcMPglvkC0njjJfgvvXkD8ahjyNBZCsFSCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhWrm80QcQ7tv1W5aYdW9hPwhX8MB8GA1UdIwQY MBaAFDJQj7eBym29giHywvlUo6dEaytCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDkt YzEyMjE4NzY1MTU0LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDktYzEyMjE4NzY1MTU0 LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnOaLp0qn Q5bKfj/RkttVNlyNveE5Zcf5q32iElOXaveas3vhWn0F3oIt9c8jmgsdcxA/Vgr1 rxv0cVMyqf/CGXMJKJvpJT7kTdphrs0pVmb5SFPVVvXBvVGrueyCSlUlUBggSr6v 26NR2WD0zylTc+bVLkQ8t4+VzWF5E5PHuTuGV/0tgLXcbreZEEXeRYk+ndftf1Fw qV8iox2PA+vXqXaHjt2ZfionJr1g2AjO2WzAE2nLvcdK4WtMthMnLRHMqa4pyBmf ePi2tbrzTIZOYzqtiGauL9E1QvAsugakJ2LD/h/FXSiZxDRwHkaSzOCVinYdBRk3 P++W6CaGx79MRw== -----END CERTIFICATE-----Generated at Fri Jun 13 14:17:21 2025 by rpki-client