$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft File: p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft (raw, json) Hash identifier: zfTmcKExkDF8cm5JeELDf6UzVvmQQEF5ucSB8iIoBS4= Subject key identifier: C0:08:10:D1:73:5F:62:1E:89:9C:04:63:1C:C1:2F:1F:A1:A4:2A:4C Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93 Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093 Certificate serial: 01974B5654981EC004888732C600C3F45F4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft Manifest number: 1593 Signing time: Sat 07 Jun 2025 17:00:38 +0000 Manifest this update: Sat 07 Jun 2025 17:00:38 +0000 Manifest next update: Sun 08 Jun 2025 17:00:38 +0000 Files and hashes: 1: D-RIX_FD-SN5SshOisKYwCgAV_I.roa (hash: x033PUL0ZGG5mDhT/he8/ieNNlTHX9WAHAFDtaJQ278=) 2: DzfEbFPfYy4xpas3bsxIDlFZktA.roa (hash: THhbtWRVoUEwxJC8CZKbYrVSasGjOcgtKoQ/LVP3UKA=) 3: E9n95xnL19yX1B4Vk9ExkIt3f-c.roa (hash: ouMNy3kdRPfar+w1HNS2jM0LMO/r+ZZQenoBAODEfBY=) 4: EAoNPZ8TpgdLFjCSj501GJeuEXI.roa (hash: pO6PSYGesSNZg2BIOmFMIZ89ZMsZTFVJdrF49KPq8PA=) 5: FFaDrp2TE8Iso6bJlqnb0FqxMJo.roa (hash: Jw9G+J8hnCo8w1musIzxpySO6bTcvYrzNLckyhAd2sE=) 6: FXDFb34PBHFpzXqxsfO-MRRoL1w.roa (hash: oabg5c6EyRNzxsL44FI1GqhM5cn4+01B5g9m9wTra50=) 7: IUh9_C97qpOKm_8AV-AspCaoEAg.roa (hash: c2S3m+7nRWXLhOWwBs+WGI3pFEVCypK98I+qc9J+WoQ=) 8: Nbis52_bGmBIGC7k7OWz54ZVymo.roa (hash: aH/DSjSBHo+CUhmGlittWaZYo1UBwB3kdgrpakh3geQ=) 9: PPsYUSjJ6B10FlewER5Ai8nn-_A.roa (hash: 10T1YdRCwRDgbSqL2l2y0wL7RPOmP97+IJQfqf219GY=) 10: oJr4DCeqtN2tV6Ugf36L9eXTcTI.roa (hash: vOwTJ+3Vsj2ap8ElFcEgLM26b3Nku6y6ruqjJGc7XJs=) 11: p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl (hash: SDUvy61/FnxBda6xRNzg+3+X7La0u9a59byBnMuAUiY=) 12: pY29XiCKfPgxYFYQ6-Ey_qrcL8w.roa (hash: UStN0NQIs1Hh3GK9cdElOtzaqGJ6jlYdtTPTd6s3Eic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 11:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4b:56:54:98:1e:c0:04:88:87:32:c6:00:c3:f4:5f:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093 Validity Not Before: Jun 7 17:00:38 2025 GMT Not After : Jun 8 17:00:38 2025 GMT Subject: CN=c00810d1735f621e899c04631cc12f1fa1a42a4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:07:53:eb:37:41:34:e9:9c:f9:56:56:5c:3e: 86:88:27:10:5c:56:0a:7d:00:ba:56:4e:c2:85:b3: 36:25:8f:ea:49:05:7b:88:97:86:4b:e4:16:4e:7c: 6b:f7:40:1e:82:90:97:60:8e:72:ae:97:b6:7b:f2: 93:32:55:05:17:f4:09:8e:5a:ac:94:6e:91:78:9c: 9c:97:10:11:9f:e3:49:e9:6a:3a:e1:74:ad:b2:0b: 80:f2:a8:78:c4:b6:20:b0:89:1b:5a:bf:1b:e0:2c: 22:1b:7a:11:a7:08:ef:49:c6:08:62:be:a9:20:be: a6:a0:84:3e:15:ea:01:4e:30:0d:ad:04:db:08:bb: 56:36:c9:d6:03:b7:2b:98:04:1f:0a:38:9a:f2:d7: 56:30:e9:ca:44:0d:52:17:f4:9f:c4:8a:bc:7d:49: 1d:ec:cb:5b:89:2a:f5:ac:9e:cd:a2:b3:3d:01:53: 39:35:a4:63:62:d1:82:60:36:cd:7d:8d:a6:8b:27: 25:73:e9:db:d9:2d:85:47:b8:f1:61:05:dc:42:62: b4:dd:93:8b:9b:9f:11:9a:5e:5d:26:cb:7e:e9:28: 08:c3:1a:40:df:07:99:d7:67:73:4d:38:6d:df:55: 71:ae:91:33:6e:86:09:70:b9:0e:b3:39:03:3d:7f: e9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:08:10:D1:73:5F:62:1E:89:9C:04:63:1C:C1:2F:1F:A1:A4:2A:4C X509v3 Authority Key Identifier: keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ba:0f:44:d0:cf:bb:78:b4:e0:8b:a3:31:2b:da:c3:79:36: 8e:bf:9e:78:6d:80:22:dc:3d:01:3b:5c:61:f5:b5:99:c7:d3: 21:68:5f:c8:42:d9:f7:83:22:0a:c1:b2:1f:27:32:e1:61:3c: 9f:0a:82:bd:c9:00:43:ae:d1:72:06:d5:57:ea:60:d7:6d:21: d8:cb:5e:93:89:12:fa:fb:73:ff:7b:0b:39:ea:9b:3b:e6:81: 29:69:2d:c4:a4:12:d0:1c:c7:48:a0:de:8a:b9:96:e0:bb:01: 19:e5:b4:56:7c:0a:d5:b9:1c:e4:74:bf:c9:34:8d:dd:bb:38: 0a:84:93:60:8b:93:f1:8e:8f:f0:36:54:f3:7f:d3:c5:f0:79: aa:b4:95:0a:06:c7:3f:61:f9:f0:ce:61:e3:73:b7:05:84:9a: a4:44:9b:23:2e:2c:2b:2a:be:02:e3:34:88:87:97:54:e6:64: ae:de:b0:1b:d5:6e:b8:2e:c1:0d:8b:44:44:e9:f1:4a:99:c4: 4f:91:f3:7c:9e:0c:e7:ab:56:23:f6:ac:7d:66:9f:5f:33:1d: 45:ce:6d:7f:c4:0f:89:e1:b5:34:a3:cc:e9:20:27:3d:62:f4: 8d:9a:7b:34:f0:c6:16:19:bd:43:d6:0e:97:48:a5:d7:15:fd: 76:93:b7:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdLVlSYHsAEiIcyxgDD9F9PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3OWJiYTI4MDVhOTg4OTU0ZTRmZWM0MjU3MDUzMGYxNmY5 ZTcwOTMwHhcNMjUwNjA3MTcwMDM4WhcNMjUwNjA4MTcwMDM4WjAzMTEwLwYDVQQD EyhjMDA4MTBkMTczNWY2MjFlODk5YzA0NjMxY2MxMmYxZmExYTQyYTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAdT6zdBNOmc+VZWXD6GiCcQXFYK fQC6Vk7ChbM2JY/qSQV7iJeGS+QWTnxr90AegpCXYI5yrpe2e/KTMlUFF/QJjlqs lG6ReJyclxARn+NJ6Wo64XStsguA8qh4xLYgsIkbWr8b4CwiG3oRpwjvScYIYr6p IL6moIQ+FeoBTjANrQTbCLtWNsnWA7crmAQfCjia8tdWMOnKRA1SF/SfxIq8fUkd 7MtbiSr1rJ7NorM9AVM5NaRjYtGCYDbNfY2miyclc+nb2S2FR7jxYQXcQmK03ZOL m58Rml5dJst+6SgIwxpA3weZ12dzTTht31VxrpEzboYJcLkOszkDPX/pgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMAIENFzX2IeiZwEYxzBLx+hpCpMMB8GA1UdIwQY MBaAFKebuigFqYiVTk/sQlcFMPFvnnCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMt ZTFlZDlkZDJhMDJhLzEvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMtZTFlZDlkZDJhMDJh LzEvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbboPRNDP u3i04IujMSvaw3k2jr+eeG2AItw9ATtcYfW1mcfTIWhfyELZ94MiCsGyHycy4WE8 nwqCvckAQ67RcgbVV+pg120h2Mtek4kS+vtz/3sLOeqbO+aBKWktxKQS0BzHSKDe irmW4LsBGeW0VnwK1bkc5HS/yTSN3bs4CoSTYIuT8Y6P8DZU83/TxfB5qrSVCgbH P2H58M5h43O3BYSapESbIy4sKyq+AuM0iIeXVOZkrt6wG9VuuC7BDYtEROnxSpnE T5HzfJ4M56tWI/asfWafXzMdRc5tf8QPieG1NKPM6SAnPWL0jZp7NPDGFhm9Q9YO l0il1xX9dpO3eA== -----END CERTIFICATE-----Generated at Sat Jun 7 22:14:36 2025 by rpki-client