$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft File: sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json) Hash identifier: cCkWgFrOAPee2cJMpPyK5s4H/bN9wTJIss+PnYUlz6M= Subject key identifier: 2F:91:FD:AC:32:58:DB:8C:06:13:E4:E0:2E:D3:45:68:A6:2D:69:26 Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 01976DAB79B8510E8439D91BE987267560F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft Manifest number: 1190 Signing time: Sat 14 Jun 2025 09:00:43 +0000 Manifest this update: Sat 14 Jun 2025 09:00:43 +0000 Manifest next update: Sun 15 Jun 2025 09:00:43 +0000 Files and hashes: 1: 0Masll6bbXJowlWVdStYbs2tx6E.roa (hash: Rro7robf4OQi2SafD/+wvUIv6rGO8rIKSIcGQQxuDhQ=) 2: GbtphNgjK0vdnL4zh4ndNFpMq98.roa (hash: u7HLBqxJEFs0R6rzUwZQDioPq2mneZLMKiZ7WWFYBQg=) 3: HIdYT19grrvIrsLvbv9c-RyNoYM.roa (hash: gMWRLPsAhHALB5C0CyTnC2YpfuJ8OqfVcPAvIC+/69E=) 4: OUt5ZB5ErN_qim9RPT1gdy6_fsA.roa (hash: jUTt0o3pm+pyLvb6Ukj+eNNJ2nE69gsAdM4+2ox59R8=) 5: R_OlpiLM8AchN0LvgG-brNSPeok.roa (hash: Ha2jaeCRdAo3cD1S+TwOcwXV50R2/YikiY9fj+5QfSk=) 6: T-i1HnnAiZlugAgaa37LNPgeYyA.roa (hash: JZrI/oiF2iHcbj3PFgspIgoRlLncbc7mtmuIlUx+R6U=) 7: Ud1-qg4EKtzsyzWQNEDC3VcBphk.roa (hash: tG3V/2PvCU18KU7wZhF4EU3GKrtt9KLBzuF/XDqtx0A=) 8: euxOi9Xp3n7AyiSfCEP-xOv9hDo.roa (hash: hqClLQ+yTS1bqIE58Fj5bi8zXosgwwjJT2D8au7VfQ0=) 9: oTdRqWCGB_YZL-zzysNmCsUI8OU.roa (hash: Z3CxIW13t+FC0u78Ynw/b8NpKjP4IiiiZzM5isLuBQ4=) 10: opjBwsfQwaZJKVugJJ6MF-vgLQw.roa (hash: MNlxdTCVbR2yhgEH9HVAaomJahjdfDcmr5j99PJZjnc=) 11: piqnuODF7lhN690__V-7lYt7O9g.roa (hash: bJ0by5gF5+d/INxTw0HKrWzPPNlfAOi7lGQ6bR/NpSU=) 12: qjtTNxOEgSr0b6Weeb9JJHyFnhM.roa (hash: Eb0gxKs3qeMLVvYaIgIGm1oY4DsjaHktiucw1gfNHns=) 13: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: uZPbulCq+8C7FWcgDCQP5FP7gjDaaL4Nkl5TwNckBYs=) 14: saFbFhTUuPzFfFtMaOygiXjsdjQ.roa (hash: TDWnbYHUGSQ6GnqoY3kIyLDGpSZVRvMCUWL7dARQ87Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 09:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6d:ab:79:b8:51:0e:84:39:d9:1b:e9:87:26:75:60:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Jun 14 09:00:43 2025 GMT Not After : Jun 15 09:00:43 2025 GMT Subject: CN=2f91fdac3258db8c0613e4e02ed34568a62d6926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:83:f9:8e:9b:a9:a2:eb:cf:a0:ef:c1:67:7a: 26:31:c7:06:c4:98:9e:68:80:85:0e:e3:b7:fb:01: ee:72:c1:72:21:76:01:90:9e:ff:b7:30:eb:dd:47: 2e:b3:f0:ab:9a:31:8f:72:61:24:00:a3:83:4f:89: 67:61:e4:96:2f:fb:63:ac:e2:95:8d:03:e0:62:c4: ab:58:e2:1f:01:1a:74:c2:ee:d9:d0:71:f9:83:ef: 17:61:e1:88:58:dd:20:d6:49:38:ae:a7:f6:a3:be: b1:c2:45:d1:3b:8b:d0:01:cf:11:63:ca:0f:0c:e5: cd:7f:86:92:84:44:d0:d6:d8:e4:9e:2e:67:72:fa: 90:bc:b9:5c:d9:a4:ad:5b:be:14:24:bd:ba:9e:a8: 40:6c:89:80:86:5c:46:ad:2e:9d:a1:ed:0c:83:32: c6:23:46:25:0c:2b:8b:72:0f:65:03:76:46:91:6d: bd:9b:4c:4d:78:58:9f:7b:c6:d1:e8:ba:4d:df:ac: ae:ed:29:9a:55:c2:9b:ff:1a:c0:13:4d:9f:95:b4: 18:42:8c:f3:06:bc:41:1d:08:82:77:7b:be:6d:4c: ed:91:bb:5b:de:44:d8:b0:c3:ac:26:90:38:ee:54: 6b:51:a2:e1:1c:bc:36:e3:25:3a:c9:d7:18:19:49: 65:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:91:FD:AC:32:58:DB:8C:06:13:E4:E0:2E:D3:45:68:A6:2D:69:26 X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:8d:41:01:82:cc:b0:04:0c:a0:6e:99:4b:8b:54:74:b8:d6: 5d:a2:7f:88:61:81:8c:a4:14:db:0a:f7:9b:79:d0:55:38:2b: 4f:6b:03:2c:97:a9:cd:e2:5e:62:6d:25:4b:b5:b6:c4:84:19: 63:d0:ef:73:b5:9b:0d:7f:20:8c:db:b8:8f:66:e1:50:d4:10: ef:07:41:d8:b2:28:9b:27:bf:ae:d0:e4:60:a1:fc:24:22:0a: e2:60:30:4f:84:26:f6:a6:ff:5b:77:3f:47:93:48:2e:bd:85: 69:2b:5f:0c:0f:d7:a9:fe:e5:1d:f6:a0:11:9f:c0:ee:77:25: 82:72:d6:f1:6a:68:06:7f:7c:4b:94:dc:a7:fa:0d:6d:fd:85: 90:10:bd:57:d1:2d:ef:4a:b4:8c:d8:b3:ac:54:c0:71:06:7b: c2:14:81:11:6d:52:c5:88:10:30:d6:74:b1:57:80:43:a8:98: 36:f9:ff:4b:e1:9f:34:c0:48:8f:22:4d:14:6a:77:57:51:f3: 11:e0:94:9d:96:38:09:8f:35:7f:55:65:7c:2f:b8:b7:43:42: 69:74:f1:21:28:40:39:30:27:54:c2:5e:2c:eb:40:eb:99:f4: 76:7d:81:a0:05:09:e6:f7:42:82:1f:4a:20:c0:f3:4c:98:3b: a7:cf:0a:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdtq3m4UQ6EOdkb6YcmdWD5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjUwNjE0MDkwMDQzWhcNMjUwNjE1MDkwMDQzWjAzMTEwLwYDVQQD EygyZjkxZmRhYzMyNThkYjhjMDYxM2U0ZTAyZWQzNDU2OGE2MmQ2OTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoP5jpupouvPoO/BZ3omMccGxJie aICFDuO3+wHucsFyIXYBkJ7/tzDr3Ucus/CrmjGPcmEkAKODT4lnYeSWL/tjrOKV jQPgYsSrWOIfARp0wu7Z0HH5g+8XYeGIWN0g1kk4rqf2o76xwkXRO4vQAc8RY8oP DOXNf4aShETQ1tjkni5ncvqQvLlc2aStW74UJL26nqhAbImAhlxGrS6doe0MgzLG I0YlDCuLcg9lA3ZGkW29m0xNeFife8bR6LpN36yu7SmaVcKb/xrAE02flbQYQozz BrxBHQiCd3u+bUztkbtb3kTYsMOsJpA47lRrUaLhHLw24yU6ydcYGUllcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+R/awyWNuMBhPk4C7TRWimLWkmMB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB41BAYLM sAQMoG6ZS4tUdLjWXaJ/iGGBjKQU2wr3m3nQVTgrT2sDLJepzeJeYm0lS7W2xIQZ Y9Dvc7WbDX8gjNu4j2bhUNQQ7wdB2LIomye/rtDkYKH8JCIK4mAwT4Qm9qb/W3c/ R5NILr2FaStfDA/Xqf7lHfagEZ/A7nclgnLW8WpoBn98S5Tcp/oNbf2FkBC9V9Et 70q0jNizrFTAcQZ7whSBEW1SxYgQMNZ0sVeAQ6iYNvn/S+GfNMBIjyJNFGp3V1Hz EeCUnZY4CY81f1VlfC+4t0NCaXTxIShAOTAnVMJeLOtA65n0dn2BoAUJ5vdCgh9K IMDzTJg7p88K0w== -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:09 2025 by rpki-client