$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft File: 8FIRKM9jSqavp-9S1THz_NVWKPk.mft (raw, json) Hash identifier: /MJrRmprtd9hGZVIZYnyFU80VapPiIs1iXDcEfwMsm0= Subject key identifier: 39:AF:9D:43:FD:70:A6:CC:8A:51:B8:1D:C7:6C:D4:D1:D6:52:EB:11 Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 01974C68C85570642D665C6CDA98C1154FE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft Manifest number: 1587 Signing time: Sat 07 Jun 2025 22:00:24 +0000 Manifest this update: Sat 07 Jun 2025 22:00:24 +0000 Manifest next update: Sun 08 Jun 2025 22:00:24 +0000 Files and hashes: 1: 0vpioq7e7IBvU0f7txi-wExHAPw.roa (hash: lCvUWIuH8RdERCkztaN1NhfYOchJDmj9ywnhD1WG0qs=) 2: 1-t-clxlx4vHi76xBwGIh0Y5orug.roa (hash: WGphFqEzeHYQfivrVaHRtOvOzzhN/PDKxrZlm3FuIDA=) 3: 4CCEdgNV-fGWUC_aGHxQwbUsOKQ.roa (hash: zTRmkFZkHzwf+QYURy5/v5Sjyovq0HLSmOwtNQ48L/c=) 4: 8FIRKM9jSqavp-9S1THz_NVWKPk.crl (hash: ejEooXiIe2Mh+3Ux/ItlYucwzC3ej7ult8uJPgNiPKY=) 5: 9oOMh0CjqydkdSKEbK66nXXsu4E.roa (hash: qQJNJWud5A2R6q9LElC5WdsYynVdzga12kQWDH61mWo=) 6: AoQYABlbiRY1s0Gu3McHV58zrpk.roa (hash: 9zDAXKdytFg/3YwoUton7cniFW2Ja9ArE5tJ2skkn+c=) 7: OdGF_e17lYBOCmXmsk6hkXdf7b4.roa (hash: mFKHbPekFFY75D3Eu+1fU9mzEnOZ9+rJaeHup24zW3Q=) 8: PFyByii-LGzRSy90jiJ5mw1207A.roa (hash: gIS/3e5ejAqBGpUPti4f7RxoNdrem0KAE6vwjMubh3s=) 9: Qkq_75MjyviWe2NqgT_-Mwn9gnM.roa (hash: wJb9fi2vDIIR6voDYxFFRDUWuFkEQa98zP1PFmkzpXs=) 10: ScwFXX2rYjT7naQciVMaotJ-UfM.roa (hash: X8Vp96ZEvVObF+OkcOx9P04g9HBNU6my6Pc/b9LR72Y=) 11: rh7_88ku0NVEacOTg4kYRNyhUIs.roa (hash: Uz863y1lKUf+O+OGV8gNQDxIpi4RBI83I9R9FXt5Xp4=) 12: u37q8oxj6d2YnoBLY1VE3CqS2g0.roa (hash: QV9HVDjMgl4TBfOFPjFKF+CTfrUEm6XmvkI/fobJGaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4c:68:c8:55:70:64:2d:66:5c:6c:da:98:c1:15:4f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: Jun 7 22:00:24 2025 GMT Not After : Jun 8 22:00:24 2025 GMT Subject: CN=39af9d43fd70a6cc8a51b81dc76cd4d1d652eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0a:fd:02:c8:2a:08:9b:ca:17:8a:6d:b4:f2: 8f:0c:f0:8a:e6:f2:43:6d:44:63:d1:04:70:34:f6: 3e:c9:1b:36:c4:cb:9f:0f:d9:f1:6c:d3:09:a2:5c: 46:58:07:0b:4b:ea:73:5c:44:8e:8e:c9:de:69:7b: d4:81:9b:66:46:e0:f7:8e:73:88:80:db:8c:64:97: be:28:2f:7e:3f:1a:74:14:f1:0b:7d:e5:e6:6b:6e: 03:82:33:9a:9a:ac:15:c8:de:db:e3:08:01:fe:82: c4:2d:f3:f6:bc:45:3b:d8:07:af:8c:aa:fc:20:49: 09:cf:b6:80:63:b6:8c:c0:d0:0b:f3:ce:fe:38:38: b9:7b:17:44:2e:cc:b4:e0:cc:52:85:ba:89:64:93: 9a:3b:e4:71:f3:22:91:a5:28:fb:8d:cd:78:8c:21: e8:0e:10:c2:d8:b6:7a:a2:66:28:46:0c:0c:7b:f9: 33:36:ed:99:07:43:47:79:68:95:bc:39:08:80:d3: 87:69:75:c8:de:b9:31:20:b1:83:cb:e3:85:6f:8e: ba:8f:45:a4:e9:7a:c1:aa:d3:f9:48:a6:c7:b6:a6: ff:93:c8:ec:ad:80:e6:73:e8:76:1f:4f:33:1b:e0: c4:7a:04:b8:ac:0b:0a:22:d3:40:6e:d4:c6:9d:12: 75:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AF:9D:43:FD:70:A6:CC:8A:51:B8:1D:C7:6C:D4:D1:D6:52:EB:11 X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:a2:f0:8c:7d:a5:ad:57:54:10:d0:ad:02:99:24:69:4d:a3: 84:13:d8:66:b4:63:cf:9c:e2:6a:ff:00:b9:b1:94:e3:23:ae: eb:e8:3b:a1:96:00:a7:05:d4:9d:55:7c:bc:2b:30:34:53:e1: 4b:c6:98:00:a3:3e:cb:fd:23:96:1a:58:2d:a6:c6:4e:84:a9: 97:63:c0:95:6c:2a:cc:a7:13:45:1b:72:75:1d:a6:53:6c:3e: 7c:c6:02:0e:b6:0c:e4:12:46:fa:1a:42:13:6a:66:a4:df:08: 8c:97:e4:07:4e:20:39:e2:ff:54:98:9f:89:be:e7:90:da:48: 00:20:5c:15:9a:7e:db:e0:79:d2:4a:a0:d7:83:a0:4e:5a:9c: 4f:f8:a7:20:db:28:67:65:94:6e:a3:98:7a:48:ef:bd:44:ef: 9b:68:4d:0b:39:dd:6e:3c:cb:a8:09:dc:dd:a4:b2:15:80:6d: c1:e4:ad:f4:64:a6:2d:25:32:ee:8e:20:f8:6c:54:27:4a:2b: 0a:e1:85:04:16:ff:93:b8:cf:9b:42:1b:c5:44:24:97:f5:ed: 34:be:4b:58:cb:b2:02:9b:e8:07:20:ba:85:9c:ed:49:d6:0d: a9:58:a7:ee:10:4e:ff:ff:05:5e:bd:c2:52:ca:57:30:9e:8a: f7:cf:6a:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdMaMhVcGQtZlxs2pjBFU/iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjUwNjA3MjIwMDI0WhcNMjUwNjA4MjIwMDI0WjAzMTEwLwYDVQQD EygzOWFmOWQ0M2ZkNzBhNmNjOGE1MWI4MWRjNzZjZDRkMWQ2NTJlYjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQr9AsgqCJvKF4pttPKPDPCK5vJD bURj0QRwNPY+yRs2xMufD9nxbNMJolxGWAcLS+pzXESOjsneaXvUgZtmRuD3jnOI gNuMZJe+KC9+Pxp0FPELfeXma24DgjOamqwVyN7b4wgB/oLELfP2vEU72AevjKr8 IEkJz7aAY7aMwNAL887+ODi5exdELsy04MxShbqJZJOaO+Rx8yKRpSj7jc14jCHo DhDC2LZ6omYoRgwMe/kzNu2ZB0NHeWiVvDkIgNOHaXXI3rkxILGDy+OFb466j0Wk 6XrBqtP5SKbHtqb/k8jsrYDmc+h2H08zG+DEegS4rAsKItNAbtTGnRJ1zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmvnUP9cKbMilG4Hcds1NHWUusRMB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj6LwjH2l rVdUENCtApkkaU2jhBPYZrRjz5ziav8AubGU4yOu6+g7oZYApwXUnVV8vCswNFPh S8aYAKM+y/0jlhpYLabGToSpl2PAlWwqzKcTRRtydR2mU2w+fMYCDrYM5BJG+hpC E2pmpN8IjJfkB04gOeL/VJifib7nkNpIACBcFZp+2+B50kqg14OgTlqcT/inINso Z2WUbqOYekjvvUTvm2hNCzndbjzLqAnc3aSyFYBtweSt9GSmLSUy7o4g+GxUJ0or CuGFBBb/k7jPm0IbxUQkl/XtNL5LWMuyApvoByC6hZztSdYNqVin7hBO//8FXr3C UspXMJ6K989q7Q== -----END CERTIFICATE-----Generated at Sun Jun 8 00:17:42 2025 by rpki-client