$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft File: sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json) Hash identifier: tiQjOniZ3qalwY0QsIY+xvwg8jP+kDcba3dfzS2/nGg= Subject key identifier: DD:29:F1:17:D6:B0:3B:56:95:8E:67:93:8B:A4:37:68:A6:54:0E:39 Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 019752A1C17ABAB12AB9CADE09BDE6BDDB0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft Manifest number: 1182 Signing time: Mon 09 Jun 2025 03:00:21 +0000 Manifest this update: Mon 09 Jun 2025 03:00:21 +0000 Manifest next update: Tue 10 Jun 2025 03:00:21 +0000 Files and hashes: 1: 0Masll6bbXJowlWVdStYbs2tx6E.roa (hash: Rro7robf4OQi2SafD/+wvUIv6rGO8rIKSIcGQQxuDhQ=) 2: GbtphNgjK0vdnL4zh4ndNFpMq98.roa (hash: u7HLBqxJEFs0R6rzUwZQDioPq2mneZLMKiZ7WWFYBQg=) 3: HIdYT19grrvIrsLvbv9c-RyNoYM.roa (hash: gMWRLPsAhHALB5C0CyTnC2YpfuJ8OqfVcPAvIC+/69E=) 4: OUt5ZB5ErN_qim9RPT1gdy6_fsA.roa (hash: jUTt0o3pm+pyLvb6Ukj+eNNJ2nE69gsAdM4+2ox59R8=) 5: R_OlpiLM8AchN0LvgG-brNSPeok.roa (hash: Ha2jaeCRdAo3cD1S+TwOcwXV50R2/YikiY9fj+5QfSk=) 6: T-i1HnnAiZlugAgaa37LNPgeYyA.roa (hash: JZrI/oiF2iHcbj3PFgspIgoRlLncbc7mtmuIlUx+R6U=) 7: Ud1-qg4EKtzsyzWQNEDC3VcBphk.roa (hash: tG3V/2PvCU18KU7wZhF4EU3GKrtt9KLBzuF/XDqtx0A=) 8: euxOi9Xp3n7AyiSfCEP-xOv9hDo.roa (hash: hqClLQ+yTS1bqIE58Fj5bi8zXosgwwjJT2D8au7VfQ0=) 9: oTdRqWCGB_YZL-zzysNmCsUI8OU.roa (hash: Z3CxIW13t+FC0u78Ynw/b8NpKjP4IiiiZzM5isLuBQ4=) 10: opjBwsfQwaZJKVugJJ6MF-vgLQw.roa (hash: MNlxdTCVbR2yhgEH9HVAaomJahjdfDcmr5j99PJZjnc=) 11: piqnuODF7lhN690__V-7lYt7O9g.roa (hash: bJ0by5gF5+d/INxTw0HKrWzPPNlfAOi7lGQ6bR/NpSU=) 12: qjtTNxOEgSr0b6Weeb9JJHyFnhM.roa (hash: Eb0gxKs3qeMLVvYaIgIGm1oY4DsjaHktiucw1gfNHns=) 13: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: 93ggGS/y0mfckjBN0qf6GD+BuFtPOwsH/wT0T2zPxmE=) 14: saFbFhTUuPzFfFtMaOygiXjsdjQ.roa (hash: TDWnbYHUGSQ6GnqoY3kIyLDGpSZVRvMCUWL7dARQ87Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Jun 2025 03:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:52:a1:c1:7a:ba:b1:2a:b9:ca:de:09:bd:e6:bd:db:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Jun 9 03:00:21 2025 GMT Not After : Jun 10 03:00:21 2025 GMT Subject: CN=dd29f117d6b03b56958e67938ba43768a6540e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:04:59:d9:82:1e:40:4c:47:7b:3e:97:9d:61: 25:de:7d:24:9e:b9:72:0e:7a:f2:2f:70:20:82:c7: 6f:b4:a6:50:06:11:b3:72:3d:50:41:17:66:c7:c2: 6f:b0:cc:5e:ce:5f:77:41:80:1f:66:8d:dc:72:df: 37:55:6b:f5:15:68:dd:a9:a6:1d:b3:a7:63:2a:22: 52:98:7e:fa:a6:51:6f:5b:52:7e:56:b0:8e:01:d9: 6e:f5:82:db:35:3a:02:3b:86:cc:3e:c1:2c:2d:a0: a6:02:17:ea:13:ef:03:f1:92:80:ee:83:f9:93:cf: 84:2a:e4:90:54:2c:d5:cb:31:a2:08:7e:44:63:c4: 12:71:32:65:25:b1:5c:0d:0e:dc:b0:11:b5:87:79: 00:f4:07:5b:aa:32:ca:24:a2:f8:49:a9:81:af:30: d5:7e:2b:50:b2:55:d8:44:82:82:20:a3:02:d4:f3: c8:fa:5c:38:53:af:ab:a5:cb:45:9e:b2:e0:5f:87: 3e:25:b1:ba:78:b9:67:24:d7:38:5e:6d:d5:af:57: 8c:ed:f2:50:86:0b:b8:6f:52:c3:1f:c2:88:a1:6f: 47:53:24:c8:3b:af:20:53:d6:cd:a4:e9:21:ff:fb: 29:0d:b7:8e:6d:e3:ec:10:d6:f5:bf:ac:dc:2f:39: 14:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:29:F1:17:D6:B0:3B:56:95:8E:67:93:8B:A4:37:68:A6:54:0E:39 X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:c2:e2:eb:0f:ed:eb:65:d7:af:fc:46:c2:92:86:8a:c6:c2: 47:61:c5:82:b6:35:b3:ba:32:10:ba:69:11:3c:8d:e0:21:9c: 52:ba:2f:bc:44:12:30:c7:03:e2:43:ef:b2:31:d9:af:65:57: e4:db:fb:56:53:c3:3d:47:6a:a2:bf:6c:87:28:ce:e9:08:55: 5c:e6:11:e2:b0:0f:ac:e0:92:b4:06:bd:ef:a7:ae:1d:62:50: b3:67:dc:31:bb:ab:8e:44:59:12:e0:17:73:8a:5f:75:89:44: e0:e8:fa:60:a0:db:d2:46:d2:c4:ad:11:5a:bd:46:44:8c:18: 2a:98:aa:f2:bc:ac:c3:c0:fe:80:a5:01:75:52:c4:a0:cf:19: 0d:ad:05:80:01:7c:9a:f7:00:07:3c:2b:4a:ec:15:26:b3:d1: 0b:c1:c4:35:85:a0:1b:10:a8:d8:6c:8a:50:75:58:7a:f1:b1: 46:af:e2:a4:f2:79:82:f6:51:d7:47:7b:7e:9a:e3:db:7e:d0: 6c:bb:25:0c:56:a2:70:51:fe:80:17:df:66:68:a2:ba:05:14: fa:0a:2c:1c:b0:a8:f1:97:3c:48:50:f1:f0:c2:66:6a:4f:62: 29:96:d9:e0:b7:d6:62:f0:c0:93:23:f4:ff:d7:39:3d:7f:ea: 5e:0e:11:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdSocF6urEqucreCb3mvdsKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjUwNjA5MDMwMDIxWhcNMjUwNjEwMDMwMDIxWjAzMTEwLwYDVQQD EyhkZDI5ZjExN2Q2YjAzYjU2OTU4ZTY3OTM4YmE0Mzc2OGE2NTQwZTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQRZ2YIeQExHez6XnWEl3n0knrly DnryL3AggsdvtKZQBhGzcj1QQRdmx8JvsMxezl93QYAfZo3cct83VWv1FWjdqaYd s6djKiJSmH76plFvW1J+VrCOAdlu9YLbNToCO4bMPsEsLaCmAhfqE+8D8ZKA7oP5 k8+EKuSQVCzVyzGiCH5EY8QScTJlJbFcDQ7csBG1h3kA9AdbqjLKJKL4SamBrzDV fitQslXYRIKCIKMC1PPI+lw4U6+rpctFnrLgX4c+JbG6eLlnJNc4Xm3Vr1eM7fJQ hgu4b1LDH8KIoW9HUyTIO68gU9bNpOkh//spDbeObePsENb1v6zcLzkUowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0p8RfWsDtWlY5nk4ukN2imVA45MB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMLi6w/t 62XXr/xGwpKGisbCR2HFgrY1s7oyELppETyN4CGcUrovvEQSMMcD4kPvsjHZr2VX 5Nv7VlPDPUdqor9shyjO6QhVXOYR4rAPrOCStAa976euHWJQs2fcMburjkRZEuAX c4pfdYlE4Oj6YKDb0kbSxK0RWr1GRIwYKpiq8rysw8D+gKUBdVLEoM8ZDa0FgAF8 mvcABzwrSuwVJrPRC8HENYWgGxCo2GyKUHVYevGxRq/ipPJ5gvZR10d7fprj237Q bLslDFaicFH+gBffZmiiugUU+gosHLCo8Zc8SFDx8MJmak9iKZbZ4LfWYvDAkyP0 /9c5PX/qXg4Rlg== -----END CERTIFICATE-----Generated at Mon Jun 9 13:22:18 2025 by rpki-client