$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft File: 5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft (raw, json) Hash identifier: tZoRXO/tKEwX1CHHjmUPAV12qHivK2BMHsabT45jie4= Subject key identifier: B8:4C:03:AB:D2:39:11:4A:22:44:A8:EB:53:65:48:18:4A:ED:99:5F Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e Certificate serial: 01974BC468C34146CD35BFD56EF26348A3F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft Manifest number: 1588 Signing time: Sat 07 Jun 2025 19:00:52 +0000 Manifest this update: Sat 07 Jun 2025 19:00:52 +0000 Manifest next update: Sun 08 Jun 2025 19:00:52 +0000 Files and hashes: 1: 53Sw43oc54bFdYl3J8aYgPuTq1A.roa (hash: F/vDAf5IclENw5iT+CZVjqI+jpZyrwkuo7GV9LGXD0M=) 2: 5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl (hash: xhT18K6yU+lThVZN7W1Ol3KJRS2BzI2cIPpb4GHnAKA=) 3: 9Xnf0_RPB7rW94Ti4f7tLJoLt5Y.roa (hash: 6HzGHL3rDmh0KnGoCjxpw3uQutKsEpK/x9u0157VNyI=) 4: KDN_6FFPENk8-bDnIrfpP21-8VE.roa (hash: RLkioT2IjSMiI+bndKsLWNSNLlPwCFxgUoWcDB4O4GA=) 5: L9WBYojbvLbnk987LNP8zQZEzQg.roa (hash: 2vRXimXnDZGXHdopycsq1UqK3u4zkQKmcrWliNbOkFI=) 6: _KM3VWtbdBYw-7ONqWep42LzJbM.roa (hash: e0kdHEeKs2calKvQRylwRCnRtRK5mFt57DwvVj7HLtU=) 7: cVKkCDaARUtvYDXoV4X9N2Ey2ZE.roa (hash: QIVK0slO8PFSnaXnlK3EvRckSMInnvVoSayFBWoxzeo=) 8: dp_LSTj4OfynvxVQdwxdbvvJRtw.roa (hash: RClfGuB/R58TJYAlZ9ywB8wnB/nprtZr8tokSX9rMxI=) 9: p3CfwknfntcJcKeXNwkBmQDTjRo.roa (hash: HQKyD96aQw0B1cae393pm4KC6jsUYb1IgbC2E55egQc=) 10: qepQI1x3-VZdN4tY2IgS2Qt0QxA.roa (hash: bg52ywo15jKHz/Ym+vNWwgmJcwLyfvK3SRvTyb5JixQ=) 11: uo3I45HXu40pb8JAg4x-iMt72NU.roa (hash: DCwRNzAYt7btk9pb3J4DQg/DLUtwWKO6Tv+fQC/dgO4=) 12: wf1azGdbs6KejpsvGDcmKSTTHpQ.roa (hash: q5SxtkKD9yNoBx9Nh1XxgTUv7m8d3XBZq8krtOYc6Wk=) 13: xLOovb_V_553mPyCa2MPaJ6AL4o.roa (hash: N6NgzmGF9X7Oq9bKLoPjt2ok22T8qTteZuv/qrOneTE=) 14: yQ-AQ94E1D9Tv3q18wm7Fve1ObI.roa (hash: H8VQOZeeUDRGGEzlonPzEMZCTDLV4o0msTIPImbqpx8=) 15: zmQcXGUtGhS1_tiNEBK-z0ub5Is.roa (hash: w9Y2nBHc4Olve6gCgm/MbgZTbOJSTsJeyEW3ubYEBD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4b:c4:68:c3:41:46:cd:35:bf:d5:6e:f2:63:48:a3:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e Validity Not Before: Jun 7 19:00:52 2025 GMT Not After : Jun 8 19:00:52 2025 GMT Subject: CN=b84c03abd239114a2244a8eb536548184aed995f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:26:48:20:85:a7:57:be:aa:c9:b2:17:0f:47: b7:f3:2c:cf:6d:57:00:81:30:bf:f2:56:f0:4a:b0: 1e:6e:48:77:79:35:1f:4e:7d:74:e8:aa:ef:e5:85: 64:22:8c:ab:7f:72:e7:11:17:0e:f9:19:09:3d:fa: 42:19:c0:6d:5e:79:2c:1f:a9:36:43:a4:a2:16:d3: 60:a4:0e:86:22:df:e7:ce:46:7c:37:27:eb:5f:e1: 7b:01:0f:08:07:52:8d:db:a2:2e:bf:45:a0:a3:03: d7:a1:82:f3:42:54:1c:8b:f1:63:a3:57:d2:a3:e8: 1e:59:b6:50:01:0c:90:1a:05:73:9f:c2:5b:59:7e: 6b:0f:31:7d:7c:56:86:bc:61:f9:74:70:0a:68:78: b7:f0:84:eb:7f:81:f3:0d:83:c5:b5:40:78:9e:fc: 44:46:4a:63:a3:8a:87:2e:49:38:3c:06:91:f4:a1: de:c2:ae:f4:17:59:40:36:00:6b:b8:30:21:ff:4d: f2:8e:12:65:00:38:48:d8:eb:9a:74:2d:f9:03:1a: 7f:31:63:2a:d9:d4:d0:25:5c:b6:5d:d8:9e:fc:93: a0:ef:6d:93:08:1f:5f:db:93:e7:ff:4c:c9:c7:c5: 00:69:c5:bd:c3:1c:f3:d6:78:65:fb:23:f8:f5:5d: 99:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4C:03:AB:D2:39:11:4A:22:44:A8:EB:53:65:48:18:4A:ED:99:5F X509v3 Authority Key Identifier: keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:f3:ed:68:19:70:6d:8c:7a:c7:21:a0:c0:ac:e6:b6:b3:ec: 5e:bb:64:00:4e:f0:78:43:20:18:67:51:07:4c:69:7a:b5:a7: 76:63:54:22:3d:a6:5d:94:f7:6e:be:26:2e:55:57:b8:ef:bb: 4d:f9:e5:7d:3a:38:84:1b:66:53:7e:30:d9:59:fe:3d:f0:5c: cd:7e:89:5f:a6:9b:38:7c:97:38:a0:b4:b9:9f:df:fc:e6:bb: 25:a5:87:3c:fd:f6:45:c5:7c:28:54:92:58:60:90:07:fa:d3: 02:62:1a:84:17:72:4e:b7:47:80:c3:9b:cf:9d:bb:03:35:60: 82:90:eb:81:67:03:4a:7b:e4:4d:e7:4f:42:f3:73:7a:59:09: b4:61:48:7a:c1:d5:60:ac:d9:91:14:5e:80:23:6f:3d:bd:4c: 04:c2:11:a8:73:31:1d:34:6c:ca:7b:5a:2d:07:86:8c:ec:a4: ca:14:42:73:3d:bd:55:25:1e:71:df:87:51:d7:a9:de:69:21: 54:96:8a:a6:94:67:ba:40:26:88:ea:89:b5:64:32:fc:85:0b: d4:19:2e:3b:2c:30:8a:46:dc:af:1a:30:e3:e1:d0:57:0f:0d: 02:f0:0b:8f:bb:ca:f6:da:22:da:ce:50:36:3e:bb:dd:5f:f6: a4:11:21:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdLxGjDQUbNNb/VbvJjSKP5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODAyNGI3MjlkOTlmMDUxMzNlYzZkMTQzOTBjNzNlYjM2 ZGI5OWUwHhcNMjUwNjA3MTkwMDUyWhcNMjUwNjA4MTkwMDUyWjAzMTEwLwYDVQQD EyhiODRjMDNhYmQyMzkxMTRhMjI0NGE4ZWI1MzY1NDgxODRhZWQ5OTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SZIIIWnV76qybIXD0e38yzPbVcA gTC/8lbwSrAebkh3eTUfTn106Krv5YVkIoyrf3LnERcO+RkJPfpCGcBtXnksH6k2 Q6SiFtNgpA6GIt/nzkZ8NyfrX+F7AQ8IB1KN26Iuv0WgowPXoYLzQlQci/Fjo1fS o+geWbZQAQyQGgVzn8JbWX5rDzF9fFaGvGH5dHAKaHi38ITrf4HzDYPFtUB4nvxE Rkpjo4qHLkk4PAaR9KHewq70F1lANgBruDAh/03yjhJlADhI2OuadC35Axp/MWMq 2dTQJVy2Xdie/JOg722TCB9f25Pn/0zJx8UAacW9wxzz1nhl+yP49V2ZBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhMA6vSORFKIkSo61NlSBhK7ZlfMB8GA1UdIwQY MBaAFOWAJLcp2Z8FEz7G0UOQxz6zbbmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQt OTU2ZjZiNWM2MTcwLzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQtOTU2ZjZiNWM2MTcw LzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfPtaBlw bYx6xyGgwKzmtrPsXrtkAE7weEMgGGdRB0xperWndmNUIj2mXZT3br4mLlVXuO+7 TfnlfTo4hBtmU34w2Vn+PfBczX6JX6abOHyXOKC0uZ/f/Oa7JaWHPP32RcV8KFSS WGCQB/rTAmIahBdyTrdHgMObz527AzVggpDrgWcDSnvkTedPQvNzelkJtGFIesHV YKzZkRRegCNvPb1MBMIRqHMxHTRsyntaLQeGjOykyhRCcz29VSUecd+HUdep3mkh VJaKppRnukAmiOqJtWQy/IUL1BkuOywwikbcrxow4+HQVw8NAvALj7vK9toi2s5Q Nj673V/2pBEhew== -----END CERTIFICATE-----Generated at Sat Jun 7 22:55:53 2025 by rpki-client