$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json) Hash identifier: 5sbr6bW8+w2AZsO5SwyrWs/UFxAp5//sgMVHg7Sm3n0= Subject key identifier: 32:D2:4E:28:21:A9:67:02:9C:DC:0F:A1:62:F6:5C:91:78:70:57:6C Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 01974931403DAFCD2EA559705C618645B700 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft Manifest number: 15B3 Signing time: Sat 07 Jun 2025 07:00:53 +0000 Manifest this update: Sat 07 Jun 2025 07:00:53 +0000 Manifest next update: Sun 08 Jun 2025 07:00:53 +0000 Files and hashes: 1: 74nFwIKFH3uKtRT845-Vm7iNpI0.roa (hash: dwaCUFData8ya0Po2dQ83XVjExSGr6tN155fGNNRXuQ=) 2: 8Vw-Hgob2gJJzFxw4N_7kn5Uv2U.roa (hash: yu7qW8GzkV3Hti3WFulLSHqkbPCHZbtH3t3UW9Lux70=) 3: EB1wuDmeUHpHHXGPcvwMNdqGnvs.roa (hash: S/BpxLczs5GDrHvkHydPA/TMOCqSJ4TvOwz6gx4BBLU=) 4: FF91gUN8QFsi0UjNb0hbhpegU4Q.roa (hash: rux40oh7ImTDen+JjsxYObPPdlN/NaOxBM5bJfSToH0=) 5: J0w5SdH9yfaXfZI27FnFWkxgcvQ.roa (hash: 8pwS1Eqt/nPpkIuSrw8GLk2/EWvlTk77ReSYaV8Jvi0=) 6: JNFYYPi5M46N7HWysvZAoIiQkYQ.roa (hash: 4FX/U+mKmibgMicQQFx15cVtRoPongw+FzcAthP3n5w=) 7: bUw7vUVn4cQiT9NfW716xSywuCE.roa (hash: 0o28YQYCqCXv7+7/uFNPlbdyY5SL/GVENUzDTrCxP4I=) 8: czhipXlSFQv2XtrizeOL4AkYjfQ.roa (hash: ktVLYCwHgnxekvZAuH8b1E8sdw3k+FPYtERYCRAoDw8=) 9: eiMLI2dh0653C-exQQO-o2bZ2eQ.roa (hash: IkhvxHI6cJnLtKgglasp3yMcL7l7unzpx1bcMF9QrRQ=) 10: m3NytSFQ3M-7elbGFk6F36SJ_Q8.roa (hash: rnZuJDJK8WGs0bsROLYdsrz2g2AqOwxzQCBo6kRxe1U=) 11: pKbsDSCcPoTPV9a3xyEwiNaa7KM.roa (hash: wFWQhX064Lr1eYYNNXVk7O6211MDK7H1lvoD2jj+zbk=) 12: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: TELvrS3hX6f6SJ98w5RWvh/5o8WYnpZVor1pxb9KJXI=) 13: xVaoOo9WsmEpdGw7xGgi0JzmgcI.roa (hash: hhPTOcVJyofro9aVTmZ/Tc5fqLyU0/BYOcCQnrqIhRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 07:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:49:31:40:3d:af:cd:2e:a5:59:70:5c:61:86:45:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Jun 7 07:00:53 2025 GMT Not After : Jun 8 07:00:53 2025 GMT Subject: CN=32d24e2821a967029cdc0fa162f65c917870576c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f2:58:28:25:93:17:a4:51:0a:b8:aa:fa:ff: 97:ba:69:66:a3:11:48:59:38:61:72:66:d6:17:fe: 97:49:6b:51:ed:e1:07:b9:3f:ba:49:fa:02:8c:57: 6f:2d:15:7b:aa:65:54:dd:d6:3d:14:7f:0c:48:f3: ec:07:08:1f:e5:2b:c0:b7:c4:87:b6:f7:54:fd:6f: cc:34:f4:46:b0:3e:26:6b:d4:7a:40:45:9f:04:52: 14:c1:9f:7f:ea:f1:ac:94:47:1b:be:a3:7b:4f:df: 4f:7d:eb:29:65:56:12:f2:5d:39:e5:c9:9f:c4:8a: 48:51:f9:05:97:80:2f:97:1d:75:05:08:f5:b1:64: 73:91:74:97:60:6d:9d:e1:21:ef:73:a6:98:f7:54: e5:a4:3f:97:4d:e4:58:ac:89:d1:02:25:ab:bf:bc: 83:ef:de:9c:a5:98:16:3a:cc:3e:d2:47:58:85:4a: 75:4e:60:2f:f9:14:62:41:f2:51:1c:c9:92:55:23: 54:73:3b:cc:9e:37:06:c0:77:22:59:bd:c8:b4:23: 93:d1:3b:f6:f7:5a:8b:75:59:30:36:4f:2a:15:a7: 91:5d:f8:82:d4:b8:bc:1a:13:ee:5b:b5:cd:5a:0c: d7:79:a3:ff:a7:c5:19:fc:5d:92:71:57:96:41:de: e6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D2:4E:28:21:A9:67:02:9C:DC:0F:A1:62:F6:5C:91:78:70:57:6C X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:2f:3f:39:1f:38:58:be:1a:a9:43:ea:82:a6:d4:99:a5:15: 84:cf:b8:f9:06:94:23:80:35:4d:c4:97:24:f4:4c:13:a1:61: 91:74:38:45:73:bc:96:8a:73:44:01:e0:0d:fa:70:92:48:0b: e9:d2:64:ed:b6:cc:ef:a1:27:47:29:94:64:df:14:28:f9:8b: 36:cf:d6:b6:8e:4f:2d:46:a6:c1:1d:12:20:48:1e:d8:19:71: 27:7a:62:8b:b3:e4:1c:ef:91:38:dd:21:66:44:57:bc:8e:41: c4:6c:b9:d6:ad:ae:2c:08:c4:a9:f4:cc:6e:69:7b:8d:2b:e4: 10:95:11:08:b1:fb:4a:4d:61:86:82:36:2f:c2:2a:e9:c4:a8: 9f:00:29:50:9d:d5:6a:a4:bd:b5:fe:64:10:58:c6:61:6a:ce: ca:13:22:f1:b0:8c:e8:73:81:50:e5:3b:68:4f:b9:ad:8b:ba: 25:9e:0f:bf:59:43:04:9c:ec:ee:a6:e2:a0:a1:8d:29:6b:80: bc:ae:dc:ab:e8:c0:4e:e1:4c:9e:bb:99:98:88:91:6e:eb:b9: ad:27:bd:f1:16:8a:43:ba:f8:13:7c:15:d1:e2:f8:c3:37:33: bc:39:5a:f2:d1:19:53:69:48:83:3a:f1:72:57:97:b9:0e:6d: bc:ba:17:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdJMUA9r80upVlwXGGGRbcAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjUwNjA3MDcwMDUzWhcNMjUwNjA4MDcwMDUzWjAzMTEwLwYDVQQD EygzMmQyNGUyODIxYTk2NzAyOWNkYzBmYTE2MmY2NWM5MTc4NzA1NzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vJYKCWTF6RRCriq+v+XumlmoxFI WThhcmbWF/6XSWtR7eEHuT+6SfoCjFdvLRV7qmVU3dY9FH8MSPPsBwgf5SvAt8SH tvdU/W/MNPRGsD4ma9R6QEWfBFIUwZ9/6vGslEcbvqN7T99PfespZVYS8l055cmf xIpIUfkFl4Avlx11BQj1sWRzkXSXYG2d4SHvc6aY91TlpD+XTeRYrInRAiWrv7yD 796cpZgWOsw+0kdYhUp1TmAv+RRiQfJRHMmSVSNUczvMnjcGwHciWb3ItCOT0Tv2 91qLdVkwNk8qFaeRXfiC1Li8GhPuW7XNWgzXeaP/p8UZ/F2ScVeWQd7mWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLSTighqWcCnNwPoWL2XJF4cFdsMB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhS8/OR84 WL4aqUPqgqbUmaUVhM+4+QaUI4A1TcSXJPRME6FhkXQ4RXO8lopzRAHgDfpwkkgL 6dJk7bbM76EnRymUZN8UKPmLNs/Wto5PLUamwR0SIEge2BlxJ3pii7PkHO+RON0h ZkRXvI5BxGy51q2uLAjEqfTMbml7jSvkEJURCLH7Sk1hhoI2L8Iq6cSonwApUJ3V aqS9tf5kEFjGYWrOyhMi8bCM6HOBUOU7aE+5rYu6JZ4Pv1lDBJzs7qbioKGNKWuA vK7cq+jATuFMnruZmIiRbuu5rSe98RaKQ7r4E3wV0eL4wzczvDla8tEZU2lIgzrx cleXuQ5tvLoXsg== -----END CERTIFICATE-----Generated at Sat Jun 7 14:22:37 2025 by rpki-client