$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft File: rr85Ti8bJRyI2YiocWEIRYB4bvU.mft (raw, json) Hash identifier: cnYVwMUgcbnWdqirqv2UWpIWIRqcT6dg1hRVdpK1spo= Subject key identifier: 33:9D:AD:08:84:E8:B2:F1:71:B1:62:CB:15:46:3B:F1:18:4D:60:AD Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5 Certificate serial: 019748FA9050248FF24A0B0D6DD36CFFA56C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft Manifest number: 1591 Signing time: Sat 07 Jun 2025 06:01:09 +0000 Manifest this update: Sat 07 Jun 2025 06:01:09 +0000 Manifest next update: Sun 08 Jun 2025 06:01:09 +0000 Files and hashes: 1: 1-_mCNfP9_HNiBcEsvWHOFnGkC9I.roa (hash: JsQNy89vRBMXhfgHBZLMyPK1KVQmDn747eH7PkqTbv4=) 2: 499vYtwuw8upiAA2ubHtry-MPMw.roa (hash: Z3mdQWlNWDCy7MpQvjVwxOFHXRgVUsKCd9CYyZydkdQ=) 3: BV9MkYw-noIEhqphKumJe_rAYPw.roa (hash: cTycQR7uMvIZ+ka9U/Z707XPur1pq5RdGRaj9s/WBEk=) 4: BqTGXwEy0NGO0YDBi2enWJEpe9k.roa (hash: NYaAEL0V4uNdZmz3A2gD5aCaRjRzazsS2Zn8GlYp1k0=) 5: C9bq6HqiO8wvPt8Ohvw7Ya0CzfI.roa (hash: eBedAMyLvvyEc8yS2VDwWUUS44f1pIhLP9yn06vWvAA=) 6: L3ZGNHnhgVbtJA6v9_KfCLPdQu4.roa (hash: tRfv/CcITA5fhGSfuor8bEI1B/6QYSwrTAH88Vxz5+8=) 7: c_qSQSef9yQq7ko-zsOrz05POQI.roa (hash: FNYiHqlJ6193udyi9UzOaM0voKaXuvqgwAhp2rGz6i4=) 8: imE36QLRTMX_BQ-hGxHCq-HzUSs.roa (hash: 9oBmGg8MmifOi5UePbS9lDJePGL5vAfP7BimBla3w98=) 9: lmrSRQ5ihg55QvYqat1AjaV_GvQ.roa (hash: hnfw4d4vCZD3abd8/WtjTv2gdPGfcl5xx0Mpy2oIhPc=) 10: rr85Ti8bJRyI2YiocWEIRYB4bvU.crl (hash: PPwZE0UT0C6RJZhQ4Ayq6BwCThnM+/Vl/ij3575CRLM=) 11: uFaCHWPgxrsotozK3-PvWIlEI14.roa (hash: E71w1Kj/9g7CI68LBGPMUUdmv1Dhxwi441Gs522xPmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 06:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:48:fa:90:50:24:8f:f2:4a:0b:0d:6d:d3:6c:ff:a5:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5 Validity Not Before: Jun 7 06:01:09 2025 GMT Not After : Jun 8 06:01:09 2025 GMT Subject: CN=339dad0884e8b2f171b162cb15463bf1184d60ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:79:84:3b:15:df:d2:50:bc:f3:5b:80:eb:08: 13:fc:2a:09:25:17:83:99:57:c3:d9:b5:7e:90:79: c5:78:b1:15:26:2c:24:31:30:b7:ed:0c:b2:68:df: f5:7c:4b:f0:27:a3:51:3f:1e:19:f3:a1:dc:24:7b: ed:65:b8:f3:32:1b:7d:27:11:f3:a5:8b:b3:34:a5: d4:3c:80:57:26:38:35:52:08:d8:57:75:4d:38:ba: a5:8d:c0:4f:8c:89:dd:84:a8:ac:31:39:3f:bc:c4: f6:d2:a2:48:da:8c:6d:60:af:9c:59:a2:be:da:84: c8:e5:4f:98:e1:88:b0:b6:35:d4:28:56:01:d5:56: a2:1f:c2:dc:c8:9c:b7:c8:5f:f5:f0:df:b6:15:2b: 5e:7a:52:2c:d2:dd:49:37:45:0c:1a:a1:fc:65:39: 68:c6:b0:2f:b5:88:c3:4c:a0:37:02:38:a7:4f:c8: 5a:15:25:fd:4d:af:1c:0f:b6:b9:4b:6d:93:17:2c: 0b:2c:22:42:2c:0d:9a:ef:60:80:ba:c5:36:12:f4: 98:04:5e:9d:42:a5:72:27:96:f9:ef:ff:28:79:de: 61:aa:d4:d5:bb:9f:e7:4a:49:14:d8:4a:eb:67:4a: 36:da:d6:2b:a3:36:bf:5d:54:9d:29:24:d4:ea:e4: 55:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9D:AD:08:84:E8:B2:F1:71:B1:62:CB:15:46:3B:F1:18:4D:60:AD X509v3 Authority Key Identifier: keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:6b:93:50:a1:54:54:83:31:58:8b:05:36:be:b4:13:f5:18: 35:a4:41:23:9a:14:93:35:f8:f8:24:9b:00:c9:a6:ef:af:16: 66:97:80:46:b1:af:e0:9c:bf:bf:1f:b6:64:e3:91:a5:ff:4d: 70:b7:8f:d8:d5:2a:15:c7:f3:c1:aa:49:da:b0:1f:45:84:44: a8:87:d3:c3:3c:be:92:c6:1b:ba:5f:7e:08:dc:cf:f7:22:f8: 9c:ee:be:c0:0c:d4:60:4e:4f:7c:7f:bc:37:ee:20:00:b6:66: 23:b3:43:03:d4:73:36:ba:fb:6d:6b:f2:3e:7c:53:41:cc:79: 47:81:3c:a7:3b:ac:97:7c:1c:8c:dd:a2:03:99:51:0c:6f:87: d5:a0:a5:cb:a4:55:49:d3:5b:51:51:fc:f1:ab:cf:b5:db:45: 33:7e:28:20:5c:b8:87:84:32:11:87:06:a4:81:8e:49:cb:65: 1f:4e:4e:6b:c2:1d:d1:6b:b2:79:5f:2e:6a:72:b8:c8:c9:cf: a3:79:9a:2a:21:31:9e:2c:f8:31:6b:1b:71:78:f9:55:a5:b2: a2:4e:4b:3c:eb:97:9d:cc:1d:b4:4c:3a:c5:fd:4d:3e:17:d3: ef:ea:d8:b2:6c:ed:8c:89:94:b2:80:67:d4:d8:1e:46:1f:45: 44:c7:10:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdI+pBQJI/ySgsNbdNs/6VsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmYzOTRlMmYxYjI1MWM4OGQ5ODhhODcxNjEwODQ1ODA3 ODZlZjUwHhcNMjUwNjA3MDYwMTA5WhcNMjUwNjA4MDYwMTA5WjAzMTEwLwYDVQQD EygzMzlkYWQwODg0ZThiMmYxNzFiMTYyY2IxNTQ2M2JmMTE4NGQ2MGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHmEOxXf0lC881uA6wgT/CoJJReD mVfD2bV+kHnFeLEVJiwkMTC37QyyaN/1fEvwJ6NRPx4Z86HcJHvtZbjzMht9JxHz pYuzNKXUPIBXJjg1UgjYV3VNOLqljcBPjIndhKisMTk/vMT20qJI2oxtYK+cWaK+ 2oTI5U+Y4YiwtjXUKFYB1VaiH8LcyJy3yF/18N+2FSteelIs0t1JN0UMGqH8ZTlo xrAvtYjDTKA3AjinT8haFSX9Ta8cD7a5S22TFywLLCJCLA2a72CAusU2EvSYBF6d QqVyJ5b57/8oed5hqtTVu5/nSkkU2ErrZ0o22tYroza/XVSdKSTU6uRV9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOdrQiE6LLxcbFiyxVGO/EYTWCtMB8GA1UdIwQY MBaAFK6/OU4vGyUciNmIqHFhCEWAeG71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2It NjFlN2Y0MGQ1ZGQ2LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2ItNjFlN2Y0MGQ1ZGQ2 LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2uTUKFU VIMxWIsFNr60E/UYNaRBI5oUkzX4+CSbAMmm768WZpeARrGv4Jy/vx+2ZOORpf9N cLeP2NUqFcfzwapJ2rAfRYREqIfTwzy+ksYbul9+CNzP9yL4nO6+wAzUYE5PfH+8 N+4gALZmI7NDA9RzNrr7bWvyPnxTQcx5R4E8pzusl3wcjN2iA5lRDG+H1aCly6RV SdNbUVH88avPtdtFM34oIFy4h4QyEYcGpIGOSctlH05Oa8Id0WuyeV8uanK4yMnP o3maKiExniz4MWsbcXj5VaWyok5LPOuXncwdtEw6xf1NPhfT7+rYsmztjImUsoBn 1NgeRh9FRMcQaw== -----END CERTIFICATE-----Generated at Sat Jun 7 13:58:24 2025 by rpki-client