$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft File: MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft (raw, json) Hash identifier: usHr142puRlnqzwolQTvwutuwq0yqJtxENVEPdsXnhA= Subject key identifier: 1D:0E:79:2F:4E:16:1A:7F:96:05:C7:F1:36:3F:D5:25:02:E6:70:43 Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Certificate serial: 01976C9875C22DEB013B83F989BFA1D88841 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft Manifest number: 159B Signing time: Sat 14 Jun 2025 04:00:20 +0000 Manifest this update: Sat 14 Jun 2025 04:00:20 +0000 Manifest next update: Sun 15 Jun 2025 04:00:20 +0000 Files and hashes: 1: 7sUlQFo2i2sGz_Vst269K_D-c-U.roa (hash: awgZwYT2+l2C5RaRZHXtrmJNbZfubWqB+2+301bBQBU=) 2: MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl (hash: v6rB4D1pOY5TOyAczoBCmYqH8c8F63SfnNRPJAlZwts=) 3: N6977Tm3BxtAWxQMZFqlxhSXVqI.roa (hash: avNpgfUO6xrr8rilL4FRK/J7Wxu+LI2r4IfOPlXIeJI=) 4: OqobHIZLFLbZk0OR9E-PF1zk1Lw.roa (hash: Op02L+M19/z5j79qbmcRNqPT6icOYzM0VJzQXj5mmv8=) 5: TEsKuOI8Wr3xLM61BToTHvaxLG0.roa (hash: rGoXl2FfQwurIyUgTu1Dn9mUe7pNqUYv/AJnXAkg28U=) 6: i7jWP6E6hcB7Kvbk4mThF2buTs8.roa (hash: OqH0B+K5eYlDv/BpS97jLxNiwQggexBzkbjaho23mP4=) 7: nqc-9YDKd79YsE90D6bPl2BpKgE.roa (hash: VLqSIZaMWc7sFSdSIdfn5EqqZNs2ezp2l6diOyM4sNY=) 8: rgeIy49dLmNJww9sp8JRWKXD-n8.roa (hash: L8MUX4zAy84NplfwfzJB7WI9HcrmosjCL1UuxDQCssQ=) 9: xZ2vcM-Bgt-peFWCq0zItN8_N0c.roa (hash: IJSnWW805B1m7rlymmTJG2w628sB6dalr9ieL5l/bMk=) 10: zZigjvCd6NcudatYLyfpsyOboFA.roa (hash: vGtEfaZy/GpSD6Vra1IvWRrERF5jpy55majvnW9xdMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6c:98:75:c2:2d:eb:01:3b:83:f9:89:bf:a1:d8:88:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Validity Not Before: Jun 14 04:00:20 2025 GMT Not After : Jun 15 04:00:20 2025 GMT Subject: CN=1d0e792f4e161a7f9605c7f1363fd52502e67043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:07:a2:98:6f:96:86:21:1e:9a:7a:58:7b:7e: 4a:1a:50:1b:ea:18:52:ab:5f:f4:44:f3:a9:49:36: 08:ee:37:9b:b2:8e:55:d0:0e:ce:ea:3f:84:4c:8b: 12:da:b5:39:34:ac:58:2f:56:ce:9d:c4:f8:36:0e: 12:3f:09:96:1b:dd:41:62:f7:29:00:8a:63:69:4d: 53:51:74:45:46:e7:3a:7d:25:91:48:2c:76:44:c2: 4f:95:d4:f7:6c:46:4a:30:9d:96:d3:c9:f5:26:07: 38:67:cd:70:2d:a9:c6:7f:63:02:0b:ee:9c:a4:fb: fb:8f:64:c9:48:d2:30:76:32:b3:27:9f:95:bf:d7: aa:55:fb:95:c0:4d:06:0c:91:8b:8e:39:f9:4d:79: 9a:c4:95:38:cf:82:e5:21:ee:6c:e7:16:b7:3c:0a: 28:64:e2:fd:35:89:38:c7:dc:48:8b:e0:20:49:31: e4:ff:5e:25:c0:04:ea:1c:a3:8a:ca:16:a1:f3:51: e7:45:63:42:5c:22:95:2b:40:66:55:eb:24:d6:9a: 5e:e8:00:de:b9:90:e9:0a:64:73:15:02:0b:59:54: 66:9c:a7:57:5e:2d:8d:e1:48:18:4d:5d:01:b4:e7: 11:c6:07:f9:09:28:ac:0e:76:0a:ea:c7:16:5f:1e: 61:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:0E:79:2F:4E:16:1A:7F:96:05:C7:F1:36:3F:D5:25:02:E6:70:43 X509v3 Authority Key Identifier: keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:f9:89:31:6e:d8:38:3a:1d:3c:6f:b1:f9:cf:f7:3a:2b:db: ef:ba:5f:37:f6:71:70:26:23:e1:db:2d:00:33:ca:b4:25:b7: be:63:72:91:69:c7:5e:8a:33:52:5d:a5:bd:73:5e:cf:7f:2a: ac:1e:f7:ed:79:43:04:44:1f:71:cd:bc:4f:35:47:ab:3a:1f: f4:0f:a9:3d:57:9f:56:8f:ea:ea:0f:45:46:cf:87:f5:68:60: 63:fc:bb:fc:ff:fd:a4:e7:03:a2:f9:9c:15:0e:67:4a:d9:71: ab:ba:4c:b2:65:69:da:96:56:1f:a3:2e:b9:07:a9:69:61:93: 67:9b:2d:cb:05:4d:79:da:4d:c1:b1:3c:f3:ef:d7:7b:33:f7: a7:a2:be:5d:91:04:63:14:ef:97:33:9a:76:1f:fc:b0:49:21: 6f:03:c8:13:c6:2e:76:c4:6c:e7:d7:b3:1a:6c:ee:4f:02:9c: 4e:48:c4:30:3e:58:37:ab:b0:ec:75:95:1d:6b:0c:ee:b6:e2: a2:29:b6:b9:8b:dc:b6:a1:f5:77:32:f7:1e:61:7e:2a:10:ce: 9e:eb:48:cb:d5:21:5b:0b:31:70:95:a4:52:3a:f5:68:51:eb: 70:96:d8:6f:d9:37:86:ec:e3:86:2d:f4:44:92:21:06:ca:99: 9d:55:05:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdsmHXCLesBO4P5ib+h2IhBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTA4ZmI3ODFjYTZkYmQ4MjIxZjJjMmY5NTRhM2E3NDQ2 YjJiNDIwHhcNMjUwNjE0MDQwMDIwWhcNMjUwNjE1MDQwMDIwWjAzMTEwLwYDVQQD EygxZDBlNzkyZjRlMTYxYTdmOTYwNWM3ZjEzNjNmZDUyNTAyZTY3MDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgweimG+WhiEemnpYe35KGlAb6hhS q1/0RPOpSTYI7jebso5V0A7O6j+ETIsS2rU5NKxYL1bOncT4Ng4SPwmWG91BYvcp AIpjaU1TUXRFRuc6fSWRSCx2RMJPldT3bEZKMJ2W08n1Jgc4Z81wLanGf2MCC+6c pPv7j2TJSNIwdjKzJ5+Vv9eqVfuVwE0GDJGLjjn5TXmaxJU4z4LlIe5s5xa3PAoo ZOL9NYk4x9xIi+AgSTHk/14lwATqHKOKyhah81HnRWNCXCKVK0BmVesk1ppe6ADe uZDpCmRzFQILWVRmnKdXXi2N4UgYTV0BtOcRxgf5CSisDnYK6scWXx5hxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0OeS9OFhp/lgXH8TY/1SUC5nBDMB8GA1UdIwQY MBaAFDJQj7eBym29giHywvlUo6dEaytCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDkt YzEyMjE4NzY1MTU0LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDktYzEyMjE4NzY1MTU0 LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfmJMW7Y ODodPG+x+c/3Oivb77pfN/ZxcCYj4dstADPKtCW3vmNykWnHXoozUl2lvXNez38q rB737XlDBEQfcc28TzVHqzof9A+pPVefVo/q6g9FRs+H9WhgY/y7/P/9pOcDovmc FQ5nStlxq7pMsmVp2pZWH6MuuQepaWGTZ5stywVNedpNwbE88+/XezP3p6K+XZEE YxTvlzOadh/8sEkhbwPIE8YudsRs59ezGmzuTwKcTkjEMD5YN6uw7HWVHWsM7rbi oim2uYvctqH1dzL3HmF+KhDOnutIy9UhWwsxcJWkUjr1aFHrcJbYb9k3huzjhi30 RJIhBsqZnVUFhg== -----END CERTIFICATE-----Generated at Sat Jun 14 08:01:40 2025 by rpki-client