$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft File: 3_JHJt8-d_b0yOBDZhOzURDurzg.mft (raw, json) Hash identifier: SLvb0DvhB9+RT+vhnrMv8tposCh6L3DvZSM9xOcjCcE= Subject key identifier: FA:9D:AA:6C:43:74:2E:51:9C:2C:F4:46:12:A2:C3:B5:D7:2C:82:08 Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Certificate serial: 01974967BE8916720A55F959874034C8F188 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft Manifest number: 1170 Signing time: Sat 07 Jun 2025 08:00:25 +0000 Manifest this update: Sat 07 Jun 2025 08:00:25 +0000 Manifest next update: Sun 08 Jun 2025 08:00:25 +0000 Files and hashes: 1: 2t-i2kopwR52Z_Mpc2NKni29tLQ.roa (hash: tZUsUngIszxCM0ZEk2P0zYz3h8rOxng23uEouu0fEOA=) 2: 3_HM3LXI2dI7yCUkbwsS0LVmtPQ.roa (hash: dlvoBhBeGam9xbjGOiUpXKoso+XH3qNTVfnBCvdbd3Q=) 3: 3_JHJt8-d_b0yOBDZhOzURDurzg.crl (hash: 0T9whYErBJBoUAdwq4yqQL9/g6ayynO9wYfwPBMn8hI=) 4: E_7EA8UJkxlGETtzRt_qHmFJYsI.roa (hash: 407g7UlI6CqSY6AOA+kHrysQofaOwh0+lRwTxsDvEPM=) 5: EgzHUocwnSDaTR0mcH1N2AahbPA.roa (hash: qnns/hwFAonNH2cGnXK7MoaWY9Y+ZF5REF6qTFex00M=) 6: EqWJbW00yHom-8ojBy6QYR1H3FM.roa (hash: jchk7todvo3pxE5MJlQ/7M5jHRN15mY+WmGn6RIiL74=) 7: KByvn3G9xMi5zVMf2hfCx6ANxyI.roa (hash: h4AZQDVtiSftBpybDJxG4QIlGy8TOkA79xpxhxDweg4=) 8: LBBRl1_5PTCAndMsefaH2qIgsWI.roa (hash: P4yu/hSYw0dip59FJgO1wKqB51hJxMddEa7BdAJON18=) 9: SFJQLYtyuvLa-Z-_p6GETmClzzQ.roa (hash: TpY/D4v+35T3Gg8FMD0C6YxKf8fx/yuDpF1EWp6QNws=) 10: SW2UHW6XXrCRSFkNV0CVmfSilT8.roa (hash: OU29d/hqTbWW7Cob/3TqpwPxH+8rWvDwLVXV+Khg58o=) 11: gLpL93_717seB53wtn-PIYRSJpQ.roa (hash: BEBryS8Pk5M96RkjmV9ApUKiEfxXTgBuMMQoR0rPtvE=) 12: qIy8EEGEKThhCv4eyhu0aaS6jQQ.roa (hash: FTpKxy8SMv8Ii+e2R+cokRiry1onK0HB+M+lb5hU0DQ=) 13: sl5VJ3i7CbF6mq-XTH5pxWMmK5o.roa (hash: 4bfJxuYHYnVskQrhNVV+ZwN1afVTdgzyH0yWLAaqMRM=) 14: yiW-kmeX6T3jx-yL7EZZYoVvwps.roa (hash: QstF1sZuORe/6EM2aW5TGBrHuj8rjUHPJQAAamVQG0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 08:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:49:67:be:89:16:72:0a:55:f9:59:87:40:34:c8:f1:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Validity Not Before: Jun 7 08:00:25 2025 GMT Not After : Jun 8 08:00:25 2025 GMT Subject: CN=fa9daa6c43742e519c2cf44612a2c3b5d72c8208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ce:a6:10:d3:96:56:be:62:61:92:3f:b3:5b: 12:f0:b1:0c:53:91:23:cc:d6:9d:c1:2b:7f:1c:ab: 83:5a:5c:8c:2c:f8:e8:a5:11:b2:48:01:4e:7a:5f: 63:36:43:20:65:ab:67:79:07:d3:fd:88:0b:6e:8c: 3c:e0:ce:ee:57:94:92:21:b5:8f:40:c6:62:d6:38: 7a:f8:75:a8:e4:4f:12:8c:d6:f1:5a:9c:06:38:74: 49:0c:b3:c6:ea:19:92:9a:43:4a:c5:66:1d:fb:c7: 74:b8:7e:73:71:a1:22:72:2a:52:5b:27:68:78:11: eb:49:1f:6b:85:8e:10:2e:9e:89:f9:52:e4:98:e9: c7:77:83:d8:ae:83:65:11:c6:1c:0e:71:52:19:64: 50:32:07:7a:8a:8e:e8:bd:fe:55:d9:d1:b3:db:6e: 82:b1:4f:ac:1d:c3:a6:34:93:a5:98:9e:39:15:5f: 5f:79:98:50:af:e2:95:fc:4c:f6:e5:2c:48:1a:d1: f6:ec:0e:c4:0c:f9:8b:03:e4:1d:f9:0e:f9:bc:c6: 3f:c5:46:ce:4a:99:3b:9f:84:a3:a2:06:3d:60:f8: b8:3e:5b:2c:d9:bb:65:14:2d:2e:8d:3b:cb:7c:70: 29:0e:95:2c:08:8e:f6:ce:92:ed:af:c1:4d:23:e0: cb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9D:AA:6C:43:74:2E:51:9C:2C:F4:46:12:A2:C3:B5:D7:2C:82:08 X509v3 Authority Key Identifier: keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:92:8b:17:9a:0c:ec:df:36:7e:fd:76:99:23:9f:de:17:6a: c9:b9:10:44:c0:dd:d6:49:16:a0:2b:87:47:5a:27:78:15:21: 41:61:a9:43:ca:cc:b5:92:65:48:06:85:77:dd:0d:00:b7:29: db:e6:5d:e8:08:b1:42:58:ca:ca:f0:40:fa:19:10:d2:98:41: 51:2a:e4:62:f0:a2:b2:1d:97:f8:de:4d:09:44:d4:fa:b3:8f: 1b:bd:f5:20:c6:16:9b:9b:cc:63:e0:85:a4:da:b0:c1:c1:b8: 19:30:1a:13:b2:dd:f3:a3:18:1a:6e:d7:d0:ca:30:ef:3a:93: 63:77:36:3a:b0:98:53:eb:f0:cb:de:16:3e:f2:84:6e:49:9b: ae:b5:9e:9b:18:f7:8a:87:af:ef:92:e8:aa:0d:37:78:f8:a9: 2f:30:e6:aa:dc:4a:73:98:13:cc:db:2f:9b:d8:20:c3:45:22: 0f:cc:36:9c:fe:23:01:33:9c:7e:e6:88:a9:cd:ea:63:12:e0: 52:b4:16:28:39:2f:1d:d4:e9:b7:c5:d3:1c:7c:a1:ea:63:b5: 79:9a:b5:cd:93:80:7a:a8:d7:5a:a7:6d:6a:f3:9d:1e:2f:d4: e9:56:0d:20:9e:bd:df:34:7c:49:fc:d0:3d:a5:7a:cb:9d:f2: 43:22:3b:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdJZ76JFnIKVflZh0A0yPGIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl ZWFmMzgwHhcNMjUwNjA3MDgwMDI1WhcNMjUwNjA4MDgwMDI1WjAzMTEwLwYDVQQD EyhmYTlkYWE2YzQzNzQyZTUxOWMyY2Y0NDYxMmEyYzNiNWQ3MmM4MjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM6mENOWVr5iYZI/s1sS8LEMU5Ej zNadwSt/HKuDWlyMLPjopRGySAFOel9jNkMgZatneQfT/YgLbow84M7uV5SSIbWP QMZi1jh6+HWo5E8SjNbxWpwGOHRJDLPG6hmSmkNKxWYd+8d0uH5zcaEicipSWydo eBHrSR9rhY4QLp6J+VLkmOnHd4PYroNlEcYcDnFSGWRQMgd6io7ovf5V2dGz226C sU+sHcOmNJOlmJ45FV9feZhQr+KV/Ez25SxIGtH27A7EDPmLA+Qd+Q75vMY/xUbO Spk7n4SjogY9YPi4Plss2btlFC0ujTvLfHApDpUsCI72zpLtr8FNI+DLrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqdqmxDdC5RnCz0RhKiw7XXLIIIMB8GA1UdIwQY MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct NjJiYjZkNjNlNTlkLzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJKLF5oM 7N82fv12mSOf3hdqybkQRMDd1kkWoCuHR1oneBUhQWGpQ8rMtZJlSAaFd90NALcp 2+Zd6AixQljKyvBA+hkQ0phBUSrkYvCish2X+N5NCUTU+rOPG731IMYWm5vMY+CF pNqwwcG4GTAaE7Ld86MYGm7X0Mow7zqTY3c2OrCYU+vwy94WPvKEbkmbrrWemxj3 ioev75Loqg03ePipLzDmqtxKc5gTzNsvm9ggw0UiD8w2nP4jATOcfuaIqc3qYxLg UrQWKDkvHdTpt8XTHHyh6mO1eZq1zZOAeqjXWqdtavOdHi/U6VYNIJ693zR8SfzQ PaV6y53yQyI7Ig== -----END CERTIFICATE-----Generated at Sat Jun 7 14:48:04 2025 by rpki-client