$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft File: MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft (raw, json) Hash identifier: RJpZO74oQwRDhJ7jtfufoG9ugpRCfcIeVIGhS+JvhrI= Subject key identifier: D8:1D:03:75:C5:78:D7:4D:A6:D8:81:8B:17:3C:50:3B:4A:17:CB:57 Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Certificate serial: 0197575A69B552A53C271FEC57B5D33290F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft Manifest number: 1590 Signing time: Tue 10 Jun 2025 01:00:32 +0000 Manifest this update: Tue 10 Jun 2025 01:00:32 +0000 Manifest next update: Wed 11 Jun 2025 01:00:32 +0000 Files and hashes: 1: 7sUlQFo2i2sGz_Vst269K_D-c-U.roa (hash: awgZwYT2+l2C5RaRZHXtrmJNbZfubWqB+2+301bBQBU=) 2: MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl (hash: j45x1dN5A6Z7nFQqVgZTzubZn/FQeE/IlgnAMCm4xJU=) 3: N6977Tm3BxtAWxQMZFqlxhSXVqI.roa (hash: avNpgfUO6xrr8rilL4FRK/J7Wxu+LI2r4IfOPlXIeJI=) 4: OqobHIZLFLbZk0OR9E-PF1zk1Lw.roa (hash: Op02L+M19/z5j79qbmcRNqPT6icOYzM0VJzQXj5mmv8=) 5: TEsKuOI8Wr3xLM61BToTHvaxLG0.roa (hash: rGoXl2FfQwurIyUgTu1Dn9mUe7pNqUYv/AJnXAkg28U=) 6: i7jWP6E6hcB7Kvbk4mThF2buTs8.roa (hash: OqH0B+K5eYlDv/BpS97jLxNiwQggexBzkbjaho23mP4=) 7: nqc-9YDKd79YsE90D6bPl2BpKgE.roa (hash: VLqSIZaMWc7sFSdSIdfn5EqqZNs2ezp2l6diOyM4sNY=) 8: rgeIy49dLmNJww9sp8JRWKXD-n8.roa (hash: L8MUX4zAy84NplfwfzJB7WI9HcrmosjCL1UuxDQCssQ=) 9: xZ2vcM-Bgt-peFWCq0zItN8_N0c.roa (hash: IJSnWW805B1m7rlymmTJG2w628sB6dalr9ieL5l/bMk=) 10: zZigjvCd6NcudatYLyfpsyOboFA.roa (hash: vGtEfaZy/GpSD6Vra1IvWRrERF5jpy55majvnW9xdMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Jun 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:57:5a:69:b5:52:a5:3c:27:1f:ec:57:b5:d3:32:90:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Validity Not Before: Jun 10 01:00:32 2025 GMT Not After : Jun 11 01:00:32 2025 GMT Subject: CN=d81d0375c578d74da6d8818b173c503b4a17cb57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:30:1c:0b:1c:a0:f4:2c:e8:90:4e:4d:60:99: d2:68:2e:5e:a4:b0:09:5f:b6:ab:dc:f3:d0:17:1e: 25:d8:2f:dc:44:5a:12:20:43:1a:bf:52:3d:21:47: 15:51:70:78:38:73:35:9d:18:aa:9c:e3:cd:16:06: 62:6c:44:cc:37:a5:30:fe:11:12:5a:59:19:56:8f: ef:80:00:b7:af:57:dc:35:a3:4e:53:e4:ac:65:79: 18:a3:80:65:fc:f9:7d:be:89:04:6c:29:df:b0:70: 85:93:56:c5:ff:e9:11:39:8c:0d:56:ff:ff:dc:37: 6d:d1:58:19:39:4c:b0:3d:29:db:e8:6a:be:4b:47: 30:72:ec:f0:90:c0:be:63:2e:d6:a2:b4:90:d6:cc: 5b:4c:05:a8:b7:66:6c:81:f2:1f:f3:e2:3b:2d:fa: 09:94:fa:59:d9:ce:89:0b:87:da:72:c3:23:49:ef: 92:21:64:c3:04:5c:04:f2:4a:e7:73:a7:31:e7:2e: 1a:fa:e6:60:5e:1d:bc:0f:c7:8e:05:fc:bf:5b:7f: fe:b2:e6:77:7a:2c:aa:e0:c1:ed:c3:1c:58:31:69: f6:0c:16:73:73:af:55:bf:c0:07:55:33:6e:e0:ec: c3:b5:39:0b:a7:45:60:9e:e9:37:bc:5d:bd:9c:8d: e0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:1D:03:75:C5:78:D7:4D:A6:D8:81:8B:17:3C:50:3B:4A:17:CB:57 X509v3 Authority Key Identifier: keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:65:2e:e7:98:af:07:2b:1c:00:8a:1a:5f:4a:c0:e5:4d:46: b3:a8:4d:45:e6:df:01:b8:57:a8:00:e6:79:7b:94:9d:0d:a0: 8e:a7:70:04:de:d4:0e:c7:4a:88:56:07:c5:86:20:22:9d:18: 67:ad:53:c7:0d:f9:7e:74:56:fc:42:3e:a0:c6:9e:af:3e:4f: 8a:1f:25:70:fc:17:88:35:d4:39:53:8f:8d:68:e1:02:40:97: 9e:a3:3a:7b:bb:fa:3e:69:82:19:45:85:ac:75:b3:6d:7f:bc: 89:d0:01:f3:76:d4:8f:65:5c:ff:31:a0:b9:e8:85:d7:c6:eb: a1:6b:c1:5c:94:5f:7f:30:28:4d:91:d7:74:f6:cb:bf:c1:da: 27:66:e2:8d:ac:10:c6:57:da:46:ac:7c:8a:64:bb:51:66:45: d8:95:a7:a9:14:63:99:a3:e3:b9:99:60:1f:c1:8a:1c:4a:37: 4c:a4:bc:ac:eb:2d:5d:2e:aa:d6:ae:91:29:f5:6a:2b:bb:56: 62:ea:22:fc:64:2e:57:ba:5e:1e:34:08:1c:49:a0:7b:4a:c3: 82:a7:47:ef:23:16:a7:07:68:5b:1e:62:60:5a:94:21:ff:80: eb:c1:60:b4:ca:04:96:8c:06:15:73:10:91:ac:e2:f1:0b:7d: f7:ef:58:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdXWmm1UqU8Jx/sV7XTMpD0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTA4ZmI3ODFjYTZkYmQ4MjIxZjJjMmY5NTRhM2E3NDQ2 YjJiNDIwHhcNMjUwNjEwMDEwMDMyWhcNMjUwNjExMDEwMDMyWjAzMTEwLwYDVQQD EyhkODFkMDM3NWM1NzhkNzRkYTZkODgxOGIxNzNjNTAzYjRhMTdjYjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDAcCxyg9CzokE5NYJnSaC5epLAJ X7ar3PPQFx4l2C/cRFoSIEMav1I9IUcVUXB4OHM1nRiqnOPNFgZibETMN6Uw/hES WlkZVo/vgAC3r1fcNaNOU+SsZXkYo4Bl/Pl9vokEbCnfsHCFk1bF/+kROYwNVv// 3Ddt0VgZOUywPSnb6Gq+S0cwcuzwkMC+Yy7WorSQ1sxbTAWot2ZsgfIf8+I7LfoJ lPpZ2c6JC4facsMjSe+SIWTDBFwE8krnc6cx5y4a+uZgXh28D8eOBfy/W3/+suZ3 eiyq4MHtwxxYMWn2DBZzc69Vv8AHVTNu4OzDtTkLp0Vgnuk3vF29nI3gVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgdA3XFeNdNptiBixc8UDtKF8tXMB8GA1UdIwQY MBaAFDJQj7eBym29giHywvlUo6dEaytCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDkt YzEyMjE4NzY1MTU0LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDktYzEyMjE4NzY1MTU0 LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANGUu55iv ByscAIoaX0rA5U1Gs6hNRebfAbhXqADmeXuUnQ2gjqdwBN7UDsdKiFYHxYYgIp0Y Z61Txw35fnRW/EI+oMaerz5Pih8lcPwXiDXUOVOPjWjhAkCXnqM6e7v6PmmCGUWF rHWzbX+8idAB83bUj2Vc/zGgueiF18broWvBXJRffzAoTZHXdPbLv8HaJ2bijawQ xlfaRqx8imS7UWZF2JWnqRRjmaPjuZlgH8GKHEo3TKS8rOstXS6q1q6RKfVqK7tW Yuoi/GQuV7peHjQIHEmge0rDgqdH7yMWpwdoWx5iYFqUIf+A68FgtMoElowGFXMQ kazi8Qt99+9YJw== -----END CERTIFICATE-----Generated at Tue Jun 10 06:42:28 2025 by rpki-client