$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft File: 71fC2dk6x8-bLxfKp4WbaYWzm50.mft (raw, json) Hash identifier: ccAHRrsu5I/TOPlhjFpIb/y7WxRo39N/jPOgHffx0s8= Subject key identifier: E3:47:8A:4B:70:C3:8A:E5:34:C0:7E:93:4A:F9:A0:73:06:C7:3E:DF Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Certificate serial: 019739F51BB45FF01CB2479EF989573B089B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft Manifest number: 11AC Signing time: Wed 04 Jun 2025 08:00:54 +0000 Manifest this update: Wed 04 Jun 2025 08:00:54 +0000 Manifest next update: Thu 05 Jun 2025 08:00:54 +0000 Files and hashes: 1: 71fC2dk6x8-bLxfKp4WbaYWzm50.crl (hash: x1u0UmqEo7yYr/lfgsiFI1UeP6rsEUR24NbAC7XocjI=) 2: CFEprGG9zI2SPXEkfveiqcGkxys.roa (hash: zwoMXpp3WPmfn1e+WeBEAccAThpouC8C+SBbtldgA/c=) 3: RLjWAiBDW7OGzF_VcCkKg-SuzTE.roa (hash: DCBINTtLxKJQkC6BRMLb3TMqWlrNb5ZnwJro+/q+QhU=) 4: Xd2QaW60upMnqwQIBHXXIoPXPzs.roa (hash: +i6BQOs/QyU2pk+3pSoh+wtk4Cf+VFJXifr7WtqVoY4=) 5: Y7MCndXsFTXJQ9JQMk8qe5DbA3I.roa (hash: czsRXCWC1Pe09oI3RL5+Wn/UEu1+T8qYOVriAgl/ENI=) 6: ZWH5dik-57qT_VKYcibYh0fZMes.roa (hash: V4HyXcC7GD93JW+xBhzBdGWwVycZxFz98efL+J+3t6c=) 7: d3w3nqB5Kl-FSC0jSCG-gsD4dlY.roa (hash: 33QNQ+kF6mFEetO5Rno9ayPExXyzerB4sZWFH0Ulruk=) 8: kaXih0ftxLoxKevElyyNGY3Am90.roa (hash: VV+Kmbg3++xVZSuR6z9QplDGDyuGw9lzxK6+uDRXc2k=) 9: mMAwso5PyMiUkBDuP91mCU2ukBI.roa (hash: 8lAOzf9Ul80EHkivmkCJNmV8WShjC87n8hXocC2Jg4o=) 10: n8t1FbmmcHRL1T025PodTqR3IcA.roa (hash: 449VA6EYanQ2mGU5FM+jEwpoRl0iEuk30UHtcfYkgJs=) 11: rL6AzulHQOLcRfhqRrPdMX43AzM.roa (hash: /p4sN3vL44k5lwQiWwAvoayVUuPAubPMAhf99ERn0+c=) 12: xE9QBs_-I-okZvOErWXLkoKDqmk.roa (hash: PCh0aczn6Bj3Hiz+iIpjZK10Xg+FpiTDJMX+WibJh2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:39:f5:1b:b4:5f:f0:1c:b2:47:9e:f9:89:57:3b:08:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Validity Not Before: Jun 4 08:00:54 2025 GMT Not After : Jun 5 08:00:54 2025 GMT Subject: CN=e3478a4b70c38ae534c07e934af9a07306c73edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:16:62:47:de:d9:25:f6:ce:d7:45:7c:1a:0c: 36:c0:cc:14:76:59:49:49:f4:b9:9b:d8:9e:44:3c: e4:d9:60:f3:a8:a8:83:c8:6e:99:76:8b:42:84:8f: c2:99:48:e7:2d:a3:d6:f1:1a:ec:bc:df:98:f1:ba: 89:a0:1e:68:9a:75:a7:4a:25:c7:bb:28:b1:ac:be: 25:c5:08:fb:06:dd:9a:72:5d:1f:e3:7b:03:b3:b0: 11:01:23:c7:68:25:4b:d7:10:99:8f:0f:a0:fd:56: a0:63:84:f1:84:57:8a:67:22:9c:76:a9:60:09:1c: ef:53:b5:0e:c9:92:05:12:c0:23:48:65:59:df:dc: a5:f6:1e:3b:bc:b5:75:6e:34:0e:15:a9:ec:4e:b1: 38:4c:28:e5:37:04:25:ec:63:5c:5f:2b:69:35:9f: d1:ee:d6:e1:ea:be:0b:e8:35:75:54:9d:75:fb:e1: 0b:10:c0:46:ce:25:9f:b1:c6:65:2a:e1:61:c0:20: fb:c1:6b:1a:85:ae:2f:77:bf:01:e9:4a:1d:15:0c: 04:14:06:b9:73:8c:ee:d5:72:4e:74:64:ae:cb:22: 81:7c:b5:8b:04:f1:dd:26:5c:9a:11:9a:d5:46:85: e9:48:a9:28:5f:dc:cb:61:5d:9e:78:00:4b:e9:f5: 0b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:47:8A:4B:70:C3:8A:E5:34:C0:7E:93:4A:F9:A0:73:06:C7:3E:DF X509v3 Authority Key Identifier: keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c7:16:7c:43:60:b0:17:68:97:f5:1e:08:b5:b2:ae:7e:58: 1f:27:ce:9c:87:c9:4b:c4:e8:9b:37:b9:4e:b9:b8:b9:2c:9c: f2:78:11:6d:b4:36:1c:27:4a:8a:c8:bd:32:02:ea:03:81:d5: 3e:4a:a2:a0:f5:bc:15:1a:2a:8c:b6:29:78:fc:8d:cd:cb:e2: 23:39:23:85:46:5f:5d:9b:e0:7f:82:87:7e:c1:b8:0a:90:ee: e3:70:f5:67:96:78:18:81:c2:f2:08:79:cc:a8:68:fb:e7:cf: ce:a5:ed:b7:91:fd:d1:2b:d2:f3:07:4f:83:31:7a:1b:a3:92: c4:5b:85:8a:b0:f4:de:fe:8c:87:53:3b:33:83:b8:4e:73:d1: 77:ce:71:81:ae:c2:d6:14:a0:d8:73:2e:f5:2c:55:b9:d9:2b: 32:7e:51:c1:7f:a9:30:ae:53:e7:9d:77:f7:00:75:09:5b:b0: 5b:0d:f7:98:d9:27:2f:e0:dd:41:2e:66:f0:c1:69:21:91:58: 97:35:24:47:ec:89:b1:b8:f4:52:b9:2f:b7:55:23:a5:75:2d: ad:8e:65:d1:f9:1e:d8:39:2a:b2:87:14:50:96:1e:e7:72:5e: 87:06:50:f0:3b:13:86:de:54:41:cf:0e:30:c4:ae:e4:a3:6a: d8:40:24:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc59Ru0X/Acskee+YlXOwibMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi MzliOWQwHhcNMjUwNjA0MDgwMDU0WhcNMjUwNjA1MDgwMDU0WjAzMTEwLwYDVQQD EyhlMzQ3OGE0YjcwYzM4YWU1MzRjMDdlOTM0YWY5YTA3MzA2YzczZWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRZiR97ZJfbO10V8Ggw2wMwUdllJ SfS5m9ieRDzk2WDzqKiDyG6ZdotChI/CmUjnLaPW8RrsvN+Y8bqJoB5omnWnSiXH uyixrL4lxQj7Bt2acl0f43sDs7ARASPHaCVL1xCZjw+g/VagY4TxhFeKZyKcdqlg CRzvU7UOyZIFEsAjSGVZ39yl9h47vLV1bjQOFansTrE4TCjlNwQl7GNcXytpNZ/R 7tbh6r4L6DV1VJ11++ELEMBGziWfscZlKuFhwCD7wWsaha4vd78B6UodFQwEFAa5 c4zu1XJOdGSuyyKBfLWLBPHdJlyaEZrVRoXpSKkoX9zLYV2eeABL6fULRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONHiktww4rlNMB+k0r5oHMGxz7fMB8GA1UdIwQY MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct OGU2Zjg3OGRiNWY0LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0 LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8cWfENg sBdol/UeCLWyrn5YHyfOnIfJS8Tomze5Trm4uSyc8ngRbbQ2HCdKisi9MgLqA4HV PkqioPW8FRoqjLYpePyNzcviIzkjhUZfXZvgf4KHfsG4CpDu43D1Z5Z4GIHC8gh5 zKho++fPzqXtt5H90SvS8wdPgzF6G6OSxFuFirD03v6Mh1M7M4O4TnPRd85xga7C 1hSg2HMu9SxVudkrMn5RwX+pMK5T55139wB1CVuwWw33mNknL+DdQS5m8MFpIZFY lzUkR+yJsbj0Urkvt1UjpXUtrY5l0fke2DkqsocUUJYe53JehwZQ8DsTht5UQc8O MMSu5KNq2EAkww== -----END CERTIFICATE-----Generated at Wed Jun 4 11:36:25 2025 by rpki-client