$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft File: o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft (raw, json) Hash identifier: 0ZBXrFM8iFstV6wbxXVmRZgADtV6PqhzMr0mlv3vXNI= Subject key identifier: D7:B4:96:FD:07:E2:D4:F6:A0:ED:D1:72:93:0E:28:46:7E:CF:56:2F Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4 Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4 Certificate serial: 0197410972D7A284E75B388DF727513A84BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft Manifest number: 14A8 Signing time: Thu 05 Jun 2025 17:00:27 +0000 Manifest this update: Thu 05 Jun 2025 17:00:27 +0000 Manifest next update: Fri 06 Jun 2025 17:00:27 +0000 Files and hashes: 1: A-6dGixYiVjP5SArd3OOXzF_y94.roa (hash: dHKBVyiR8mv13Z7wTMxDvJhUaTAdj4JJSYSEmomSgRI=) 2: EdyN193XAqCuwUeh3uoqwgMp6YM.roa (hash: aMp83WD7+8DMvO0EZKm2i6yVdt39wHGmWPL1VSmKtjM=) 3: KWzqOLtIWSWtWkByhLp85FW_7rM.roa (hash: +yMm4K7E6517qc0jJ3daW8uChLhsqKi3MVBCXwIyDXI=) 4: ZMT2qJeQlu-C5i0G01EBCNd-g6M.roa (hash: Jul8wggfGDzUNFRFlHhNzs2me0GUF4GTUbIsvxzWDwQ=) 5: adPv80nsAvDoMdbWFhmbQrTYx_c.roa (hash: 4ui5pcCs9o10PJAGBjhy0LQC0IJvn6eEg11QBgbYrhM=) 6: ayrwJOZcqXwPotZkkftDNJvjVWI.roa (hash: u8hehMe3mSy7WRp8JZKZ+vW+iYZYC7RSsKKYne4ZeUk=) 7: dBRyMZmE2MJby6jWlOxwaQP0Xaw.roa (hash: n5MzTBEIB9PdMNKBfe5+OAUwctGrct8tICmAF1a6F9E=) 8: fnuqhATdgk7065LZ-MFpw_mk_Sk.roa (hash: MF0/pFOYDoQu2nRxFXy3gK33SujqFiXhgPkh2E7fsqk=) 9: mPlgxbWD56Le2xy3b_FhRsqSxsc.roa (hash: AfWfwIbPTYGoiVxVmMF6d4mso8lDoU2eXTIxJq7pZSw=) 10: o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl (hash: k7Ey/R7X0Nvrh11lBPRXsDIEL3XiFyZ2OjETTQ7p/nY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Jun 2025 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:41:09:72:d7:a2:84:e7:5b:38:8d:f7:27:51:3a:84:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4 Validity Not Before: Jun 5 17:00:27 2025 GMT Not After : Jun 6 17:00:27 2025 GMT Subject: CN=d7b496fd07e2d4f6a0edd172930e28467ecf562f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8b:b0:de:6e:97:89:9f:53:22:30:c5:41:7a: 1f:80:34:7b:ba:20:c3:55:db:22:73:c3:85:10:8b: c4:44:29:63:a2:9a:57:9d:65:cc:36:ec:7b:53:90: cb:42:35:6b:f3:f3:5d:f0:7c:7e:64:02:07:cb:27: 04:9e:3d:b0:55:aa:4a:d3:8b:14:35:34:87:52:6b: be:b1:50:87:95:ce:a5:49:dd:c4:88:31:49:3e:c9: ce:2f:11:dc:76:3f:ad:b3:36:85:f8:9e:61:b3:2f: cd:bb:f2:e4:a5:f6:5f:8c:09:98:84:e0:f0:92:42: 72:c5:86:1c:0f:bd:96:84:a9:02:3a:da:fb:0a:63: ec:9b:2c:6f:89:93:af:92:c3:83:9e:17:ad:32:79: d8:5e:e8:ac:f6:9c:db:06:5e:6e:fc:a0:7f:61:0b: 20:dd:3b:9b:5c:30:8e:ac:b3:ed:5a:9e:af:55:c1: 38:03:47:bb:4a:c6:16:53:3a:0e:e7:fe:bb:4c:d0: dc:37:a6:cd:9e:92:65:3f:f2:16:b7:24:c1:58:60: ba:dd:b8:0d:de:dd:03:38:4d:63:1a:81:44:cb:96: 07:71:f0:58:09:46:41:6d:24:eb:0b:a8:71:f1:e9: 0a:b0:b1:18:d2:48:37:e5:87:b6:56:44:cb:fa:3c: 77:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B4:96:FD:07:E2:D4:F6:A0:ED:D1:72:93:0E:28:46:7E:CF:56:2F X509v3 Authority Key Identifier: keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:f9:cd:7d:3e:df:ba:4f:89:5f:c6:08:72:5a:47:55:dd:b6: d5:93:69:61:3d:f3:13:46:03:14:2f:eb:ae:0b:6c:ea:dc:79: 04:32:c4:ad:84:bc:f6:f6:9a:ba:c1:a4:ce:dc:c6:0f:a0:31: af:11:8b:92:46:9b:47:0b:27:6f:75:ef:49:69:6c:eb:be:e6: d6:f9:76:b0:83:98:e4:9d:84:72:a2:e1:e3:9c:71:54:23:75: 4b:d1:df:d7:cd:94:dd:e0:ff:65:fd:4f:d5:c0:5f:91:bc:36: a2:46:7f:fb:bb:d6:ba:17:8f:9e:47:bb:51:af:34:20:07:7a: 8e:ee:72:f1:39:87:2d:25:a6:28:ca:33:75:91:2d:c2:e0:51: 4c:44:32:e5:3e:68:9e:b5:67:a0:fc:e7:72:a1:b3:16:1a:18: 12:ae:82:f3:5e:db:df:bc:d9:4a:27:78:cd:98:57:10:38:ba: 82:79:0b:72:8c:49:9b:9c:13:ff:9d:9b:a4:59:f4:72:60:3a: 5f:93:97:18:08:6a:3c:bd:f8:20:7b:ef:73:3e:d0:22:00:63: 8f:07:18:5e:a8:6d:db:6f:ce:3e:ba:0f:1c:3f:92:c1:2f:ea: e3:46:03:e4:51:40:3c:69:fd:4f:3a:48:19:35:ff:b7:41:f8: 91:06:85:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdBCXLXooTnWziN9ydROoS9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzODllNzAzNWIwOGUxODFhMzQxZjM3ZWRhNzM0M2QyM2Yx Y2FmYTQwHhcNMjUwNjA1MTcwMDI3WhcNMjUwNjA2MTcwMDI3WjAzMTEwLwYDVQQD EyhkN2I0OTZmZDA3ZTJkNGY2YTBlZGQxNzI5MzBlMjg0NjdlY2Y1NjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Iuw3m6XiZ9TIjDFQXofgDR7uiDD Vdsic8OFEIvERCljoppXnWXMNux7U5DLQjVr8/Nd8Hx+ZAIHyycEnj2wVapK04sU NTSHUmu+sVCHlc6lSd3EiDFJPsnOLxHcdj+tszaF+J5hsy/Nu/LkpfZfjAmYhODw kkJyxYYcD72WhKkCOtr7CmPsmyxviZOvksODnhetMnnYXuis9pzbBl5u/KB/YQsg 3TubXDCOrLPtWp6vVcE4A0e7SsYWUzoO5/67TNDcN6bNnpJlP/IWtyTBWGC63bgN 3t0DOE1jGoFEy5YHcfBYCUZBbSTrC6hx8ekKsLEY0kg35Ye2VkTL+jx3rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNe0lv0H4tT2oO3RcpMOKEZ+z1YvMB8GA1UdIwQY MBaAFKOJ5wNbCOGBo0HzftpzQ9I/HK+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWIt MGU3MjQxNmI0ZGM3LzEvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWItMGU3MjQxNmI0ZGM3 LzEvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADfnNfT7f uk+JX8YIclpHVd221ZNpYT3zE0YDFC/rrgts6tx5BDLErYS89vaausGkztzGD6Ax rxGLkkabRwsnb3XvSWls677m1vl2sIOY5J2EcqLh45xxVCN1S9Hf182U3eD/Zf1P 1cBfkbw2okZ/+7vWuhePnke7Ua80IAd6ju5y8TmHLSWmKMozdZEtwuBRTEQy5T5o nrVnoPzncqGzFhoYEq6C817b37zZSid4zZhXEDi6gnkLcoxJm5wT/52bpFn0cmA6 X5OXGAhqPL34IHvvcz7QIgBjjwcYXqht22/OProPHD+SwS/q40YD5FFAPGn9TzpI GTX/t0H4kQaFBQ== -----END CERTIFICATE-----Generated at Thu Jun 5 19:53:54 2025 by rpki-client