$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft File: RotZLzEQvGw1JJqCcaDawamssM4.mft (raw, json) Hash identifier: JFDNWgdBcOpFIRRnek7FRPa6ccly6ElQd1Z97/Ick+A= Subject key identifier: B1:CB:4D:21:80:C7:F4:6F:C8:E8:EC:1D:13:12:0D:74:52:86:AF:97 Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Certificate serial: 0197462FCF26419A39C6FC579DBC69F42054 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft Manifest number: 0586 Signing time: Fri 06 Jun 2025 17:00:27 +0000 Manifest this update: Fri 06 Jun 2025 17:00:27 +0000 Manifest next update: Sat 07 Jun 2025 17:00:27 +0000 Files and hashes: 1: 4PdFFqbPgnyAF8OAZU59EP79EQE.roa (hash: 0N0pRYIfSwp4rQqEao9ImOBW5Z4au+nqt0SGDhOprnI=) 2: 8u1Ww9yNVHCXoKy959EsUaU71zs.roa (hash: MCjwWNvinwMVi61YdY3QarB5BMMcy4gUuYfqYD2T3PI=) 3: B5kdDxNFhlA9AT3PyqFkTX6RY6M.roa (hash: Xin+IDogu4+kKllgKutdfXdJm2piOKuXIHOph9bE8Zw=) 4: RotZLzEQvGw1JJqCcaDawamssM4.crl (hash: Erxs6C3dJBPeRWEV7IIB+apggWIRf2w0Oh9z74Io3rM=) 5: _vYyrixRE-yXYNd95EagmmedMZs.roa (hash: Nq9E9fzlDdc1TerNy7pW2Y+cp+tsEL9ANsKsoDQ0Pwo=) 6: bvgsPr3D5PPxL6J89BfI0hjp6nU.roa (hash: gQ8pHX8IE1KeaNe50ukz0WLLfO6NzXHlCO7loLPh0Ow=) 7: elD2CPARB_SCiElYBqX86L528iA.roa (hash: 4GpojDoTFDR9/As1unQ2wQcCWk8x0pykSLzc87gKTZw=) 8: i1oSM0zm6FdsD8GW2rr18ZJYU9c.roa (hash: vhtU0Gjcgqwk2dDqzgcdqq71xJAqWywoPwJaRLlLExA=) 9: moar5P9-vHm1h7dW1fwgc72NFhw.roa (hash: JbVrT9GvQCxgYaVUxgeC2lZytQA7NzFvIW4W5mDjY3A=) 10: wpO2gWHd7fIiJY2UmwBghuKU8Pk.roa (hash: eNcYuQe4vVrI0lLxGnwWNPY5OwCaWdtNSK5bPAl0Ug8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 17:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:46:2f:cf:26:41:9a:39:c6:fc:57:9d:bc:69:f4:20:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Validity Not Before: Jun 6 17:00:27 2025 GMT Not After : Jun 7 17:00:27 2025 GMT Subject: CN=b1cb4d2180c7f46fc8e8ec1d13120d745286af97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ac:f8:5f:19:23:75:19:02:17:59:09:39:b1: ef:e5:42:07:79:54:da:dd:b1:b1:ea:cd:03:ba:67: a6:cd:f4:99:af:16:21:72:6b:9e:16:1d:cc:72:19: c3:f4:73:ca:1c:ad:31:77:42:bc:9e:b8:2d:37:5f: 7d:45:8e:41:8b:ad:2d:cc:82:1d:c7:7b:9e:ef:54: 62:ec:c1:39:15:12:1b:82:ab:1e:65:26:31:7f:44: 26:65:87:d2:33:a7:5d:ca:6b:19:fb:6b:26:0f:cb: 40:27:47:8f:d1:45:a8:fd:33:3b:a7:59:16:c3:4a: f6:1f:f7:91:95:85:52:d8:64:06:15:27:ec:dd:eb: 7e:a8:7d:5d:79:2a:49:2d:f9:e6:c7:1c:67:c7:b8: e8:a2:ff:2e:ac:4b:1d:b3:6c:3d:56:05:b5:97:b3: 65:9c:c9:a9:7b:c9:49:08:95:58:65:1d:1b:99:93: 45:22:91:32:d4:93:59:11:d4:3a:fb:bf:a8:86:b2: 4e:18:83:ed:14:0d:38:22:41:e8:f6:18:cc:ba:a9: 15:a0:10:d2:6e:61:a7:45:13:a4:3c:bf:9d:3b:0d: 16:84:11:77:26:b8:6d:94:72:63:f7:c6:d8:be:75: 4d:a7:58:1f:9b:db:43:0b:47:d3:d1:6a:15:73:f5: 86:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CB:4D:21:80:C7:F4:6F:C8:E8:EC:1D:13:12:0D:74:52:86:AF:97 X509v3 Authority Key Identifier: keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:eb:0c:39:04:16:d7:81:75:ee:19:09:8b:6e:b7:84:be:06: af:d1:ef:9b:b6:eb:99:01:a7:77:c3:e1:6d:3f:df:96:49:ab: 11:9b:f9:d6:e0:b7:f7:a7:ef:2c:c4:5f:dc:b2:4e:0f:cb:5a: 2c:bc:ab:e6:9f:4a:b0:28:f8:aa:11:5c:d1:b7:93:d4:d2:30: 88:92:ff:d2:6b:ec:8b:a2:c0:fb:5d:f9:66:ae:d0:03:66:0d: 7a:c9:b9:8e:4e:fc:0b:79:83:bc:3a:2f:59:82:b6:4a:9b:72: b9:35:12:39:e4:55:82:27:3b:f4:ae:41:c1:ee:34:b3:ea:ae: 50:6a:dd:49:68:23:6b:75:24:ec:b2:6a:66:d0:41:13:a8:68: 78:33:e3:9b:dd:14:69:28:bc:8d:84:bf:a9:3e:f9:04:f4:28: 06:0e:e6:5f:ea:9a:51:ac:1b:35:04:e2:0d:db:64:8c:f4:09: 5c:db:18:f1:f6:da:b8:61:68:9d:df:55:4f:fe:7a:36:b4:2f: 76:bb:6a:0e:3c:40:63:4d:48:4b:ac:02:db:d4:88:ce:f9:66: 63:f4:f6:0c:c8:02:7d:a3:60:13:40:f8:79:5b:6d:c1:4c:67: 3d:93:0e:c5:33:f6:a1:b8:10:0a:ec:31:1b:1b:9b:69:03:fe: 48:12:5b:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdGL88mQZo5xvxXnbxp9CBUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGI1OTJmMzExMGJjNmMzNTI0OWE4MjcxYTBkYWMxYTlh Y2IwY2UwHhcNMjUwNjA2MTcwMDI3WhcNMjUwNjA3MTcwMDI3WjAzMTEwLwYDVQQD EyhiMWNiNGQyMTgwYzdmNDZmYzhlOGVjMWQxMzEyMGQ3NDUyODZhZjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6z4XxkjdRkCF1kJObHv5UIHeVTa 3bGx6s0DumemzfSZrxYhcmueFh3MchnD9HPKHK0xd0K8nrgtN199RY5Bi60tzIId x3ue71Ri7ME5FRIbgqseZSYxf0QmZYfSM6ddymsZ+2smD8tAJ0eP0UWo/TM7p1kW w0r2H/eRlYVS2GQGFSfs3et+qH1deSpJLfnmxxxnx7joov8urEsds2w9VgW1l7Nl nMmpe8lJCJVYZR0bmZNFIpEy1JNZEdQ6+7+ohrJOGIPtFA04IkHo9hjMuqkVoBDS bmGnRROkPL+dOw0WhBF3JrhtlHJj98bYvnVNp1gfm9tDC0fT0WoVc/WG/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHLTSGAx/RvyOjsHRMSDXRShq+XMB8GA1UdIwQY MBaAFEaLWS8xELxsNSSagnGg2sGprLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTct MDUwMzc0OWFkZWEwLzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTctMDUwMzc0OWFkZWEw LzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU+sMOQQW 14F17hkJi263hL4Gr9Hvm7brmQGnd8PhbT/flkmrEZv51uC396fvLMRf3LJOD8ta LLyr5p9KsCj4qhFc0beT1NIwiJL/0mvsi6LA+135Zq7QA2YNesm5jk78C3mDvDov WYK2SptyuTUSOeRVgic79K5Bwe40s+quUGrdSWgja3Uk7LJqZtBBE6hoeDPjm90U aSi8jYS/qT75BPQoBg7mX+qaUawbNQTiDdtkjPQJXNsY8fbauGFond9VT/56NrQv drtqDjxAY01IS6wC29SIzvlmY/T2DMgCfaNgE0D4eVttwUxnPZMOxTP2obgQCuwx GxubaQP+SBJbjg== -----END CERTIFICATE-----Generated at Sat Jun 7 03:31:02 2025 by rpki-client