$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft File: ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json) Hash identifier: CPXPuyUfTGTXqoCoB7YcIeuICVP3Kqb8VyhdcDrfZpc= Subject key identifier: 5D:7D:4C:DD:0D:00:CB:83:8D:69:FB:D8:DC:32:24:1A:ED:B3:86:D2 Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05 Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205 Certificate serial: 019730BADC137E988C264369C2CDB5ADF00B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft Manifest number: 1587 Signing time: Mon 02 Jun 2025 13:00:41 +0000 Manifest this update: Mon 02 Jun 2025 13:00:41 +0000 Manifest next update: Tue 03 Jun 2025 13:00:41 +0000 Files and hashes: 1: 1-FVNiQvWEXUQsyhSP2mXL7ZeFhI.roa (hash: h2VWp4VUz/KwikufobsIYuUTWP+PbubtA5kM1+IYNJ4=) 2: 1-cC_8sf2Sjlcbm7-DZh4XuYIArQ.roa (hash: 0N5yH6BWqUs7tPNNDSMGPx2mfE/ZRDiPQfeLQl52Wgo=) 3: GTiO-SupitdTmKiZ_HKcU4MJuTk.roa (hash: +PZAxnriWNXJlrxxhGkuM8aqghAi9SsDw/xLwTjAVR8=) 4: Oe4b0YKTYWpvik3U2IZ6qMIqY0Q.roa (hash: UL3WTeHzd5FXSU3d7socZAKRgjBZ+Jri4TxH4t/75EI=) 5: XF9ImwV6WWJIs0xQcjK4t7jAy60.roa (hash: cqd2xtXIiuriNNQV4wixCocQ/6vU5JsRpBkdhH+9z5k=) 6: f6ghH_7B3PzM3ktCIJpbMer11MQ.roa (hash: gQOe3jDJjm6Z8U0Sg1BUTciGU/YhoqXEIyyDOVhhKCY=) 7: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: cq6DhnOFNlYuekPVP5pDglnsKGKkNc24WGP4vEKpgvE=) 8: i30xTo-UR4_VbHo8fjprUc4AF6g.roa (hash: a1dsNKX1kvmUfXHRJMRlL3dZirJz9clcR1rF2jPzapU=) 9: uhgMFZw8rs0tJvJzvMK6WeU68F0.roa (hash: qV6k2QQIZBdjD0SstNGQRZVonpUjQ86it1wpOl33iLI=) 10: xb_V8FoCziLwhsNf2nDbMavL4CE.roa (hash: FYXyUhIT7c2rjGPzDYmHZI9gN0Jm7MertTGE0IiU5ck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Jun 2025 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:30:ba:dc:13:7e:98:8c:26:43:69:c2:cd:b5:ad:f0:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205 Validity Not Before: Jun 2 13:00:41 2025 GMT Not After : Jun 3 13:00:41 2025 GMT Subject: CN=5d7d4cdd0d00cb838d69fbd8dc32241aedb386d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d1:37:26:18:a8:dc:49:c4:37:63:65:50:c2: 00:01:88:61:ef:84:d7:f9:2d:36:64:cc:68:47:04: 0d:80:42:64:0e:4d:01:ef:b0:3d:f4:88:12:fe:58: b3:2c:83:53:e7:d7:e3:0f:86:b2:7a:60:e7:79:f5: f3:50:45:59:97:e8:da:c6:a6:c8:84:52:ec:39:b2: 7d:46:8d:89:b5:f6:c3:72:ad:d6:29:3e:7d:10:69: be:b1:2b:47:ad:09:b7:e4:a0:4c:da:72:c5:71:ba: ce:e2:11:c7:21:0a:91:a3:c5:06:90:ee:58:07:04: ee:0c:b9:22:66:14:cb:5c:b8:f0:18:07:3d:fb:07: fa:d2:c6:ca:fa:1f:f7:50:4e:7a:49:f7:09:9a:eb: 8f:9c:98:39:0d:33:49:b8:67:28:e2:31:6f:9d:4c: b3:44:18:cb:7b:ab:de:73:20:aa:c5:e4:86:ef:12: 1c:88:1f:12:07:79:e7:17:3b:1b:52:9d:75:e0:13: 43:ba:ef:09:75:37:97:95:8b:6b:3c:c9:3e:ba:f4: 5b:ea:38:c5:58:f4:2c:44:7f:14:19:73:ac:c1:99: 5a:4f:21:95:03:34:da:5d:cb:0a:0d:7f:f3:43:46: e2:16:fd:19:e5:6a:1e:56:81:69:ab:b9:73:16:97: ea:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7D:4C:DD:0D:00:CB:83:8D:69:FB:D8:DC:32:24:1A:ED:B3:86:D2 X509v3 Authority Key Identifier: keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:85:8e:47:7b:15:60:d7:e4:56:c4:e4:d3:87:d6:51:24:fc: dc:d6:fd:58:d1:b1:d7:22:76:51:7f:57:ff:95:44:d4:5b:9c: b6:6b:e8:d1:d7:ed:dc:f3:4a:63:84:9a:f8:08:81:1e:46:00: 67:72:6b:f7:47:17:2f:55:d9:02:4e:1e:cc:d5:0c:36:63:a6: 97:cc:d4:23:e4:18:ae:54:d3:f3:5c:34:e7:7a:29:d4:14:15: b5:b9:91:12:c8:cf:88:d0:b7:c9:82:9b:90:f3:73:d6:70:99: a4:55:fd:cb:2a:5d:b5:2f:79:99:03:6c:92:a4:3a:c5:43:38: c6:76:32:52:9a:b6:12:48:5f:5b:96:1a:f8:c5:6e:a1:b4:5a: d3:ee:c9:06:e4:2a:33:ee:7a:1b:59:5b:7e:95:f3:53:02:fa: f8:02:71:1b:0f:a7:a7:7f:32:1d:90:c8:a6:b9:a3:24:b3:8f: 60:03:3d:93:45:4d:40:2b:40:e4:4c:db:5e:98:d1:4a:c5:29: 8a:b3:7d:d4:b9:ea:0a:58:a8:dd:69:25:4a:ba:3c:21:89:5f: ad:28:5f:25:78:11:24:e4:8b:31:10:69:a9:51:5d:fd:2c:7e: a6:55:e9:c9:07:e7:43:c0:78:46:87:c8:ab:70:c4:1d:a7:24: 64:01:fe:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZcwutwTfpiMJkNpws21rfALMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZWVkNDA5MTM4M2Q5ZWQ0MDU2ZDlmNGVmZjdkMjYyMmRk Y2UyMDUwHhcNMjUwNjAyMTMwMDQxWhcNMjUwNjAzMTMwMDQxWjAzMTEwLwYDVQQD Eyg1ZDdkNGNkZDBkMDBjYjgzOGQ2OWZiZDhkYzMyMjQxYWVkYjM4NmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NE3Jhio3EnEN2NlUMIAAYhh74TX +S02ZMxoRwQNgEJkDk0B77A99IgS/lizLINT59fjD4ayemDnefXzUEVZl+jaxqbI hFLsObJ9Ro2JtfbDcq3WKT59EGm+sStHrQm35KBM2nLFcbrO4hHHIQqRo8UGkO5Y BwTuDLkiZhTLXLjwGAc9+wf60sbK+h/3UE56SfcJmuuPnJg5DTNJuGco4jFvnUyz RBjLe6vecyCqxeSG7xIciB8SB3nnFzsbUp114BNDuu8JdTeXlYtrPMk+uvRb6jjF WPQsRH8UGXOswZlaTyGVAzTaXcsKDX/zQ0biFv0Z5WoeVoFpq7lzFpfqNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF19TN0NAMuDjWn72NwyJBrts4bSMB8GA1UdIwQY MBaAFIHu1AkTg9ntQFbZ9O/30mIt3OIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2Et ODcyYjM3MTBjMmExLzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2EtODcyYjM3MTBjMmEx LzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn4WOR3sV YNfkVsTk04fWUST83Nb9WNGx1yJ2UX9X/5VE1Fuctmvo0dft3PNKY4Sa+AiBHkYA Z3Jr90cXL1XZAk4ezNUMNmOml8zUI+QYrlTT81w053op1BQVtbmREsjPiNC3yYKb kPNz1nCZpFX9yypdtS95mQNskqQ6xUM4xnYyUpq2EkhfW5Ya+MVuobRa0+7JBuQq M+56G1lbfpXzUwL6+AJxGw+np38yHZDIprmjJLOPYAM9k0VNQCtA5EzbXpjRSsUp irN91LnqClio3WklSro8IYlfrShfJXgRJOSLMRBpqVFd/Sx+plXpyQfnQ8B4RofI q3DEHackZAH+iQ== -----END CERTIFICATE-----Generated at Mon Jun 2 16:30:24 2025 by rpki-client