$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft File: 2-arjgxG6EG0TSucawO7ZfViHbE.mft (raw, json) Hash identifier: W1ld6pOCFcUWl9vrFWwfeQIL+4z//OqAbyH8EGM0oLk= Subject key identifier: 53:8F:06:4A:60:6A:51:5B:E7:BC:84:6D:B0:D5:06:3A:BE:C1:3F:01 Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Certificate serial: 01973E0914866FA903B868CC9BDB658DC96C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft Manifest number: 1595 Signing time: Thu 05 Jun 2025 03:01:11 +0000 Manifest this update: Thu 05 Jun 2025 03:01:11 +0000 Manifest next update: Fri 06 Jun 2025 03:01:11 +0000 Files and hashes: 1: 1F-PLkJeZsd5BhbWomZg7cLPFrk.roa (hash: yrygGJcoXqVH2Jg8Juj5GnPuSpfNJREHSoSijlooIac=) 2: 2-arjgxG6EG0TSucawO7ZfViHbE.crl (hash: e1CucL0Sb7emzzFfc2J85PMDhy7pow4p18GypMPIvd8=) 3: 28-uwfDVLpaahAp5_g4gOqonJRE.roa (hash: ZiFvqyNcFNQjj1MRiXrgYLhWSDf2EOuub9eyPgFwZ5w=) 4: 3PFyhkeygxSnr9lo2JsKv8zzptA.roa (hash: q1R0erCPFvF5C0+eg74kijSUxdckHy4082+SsXMgLoI=) 5: 5gCvrLecynoNlZqqecgbQQFoRrQ.roa (hash: 9K+m38Q0PxPs98dlo8mOUJqX2gTHhK0yh4taoKPklF4=) 6: Hgi1HuyOIm-pDNTXBi7SDeMMv54.roa (hash: 4I6w4WrI+TeCpJfBFE/CPemODRHx6exn+BxP4Gc/fZ4=) 7: VTFmKW5oJe_aki7x1urblkP0Fyc.roa (hash: 2MZuFdP6pQLocFIUqAzsdUT8olNA1CbFEwyUxslWUHU=) 8: WuMjl-VoG-q9mOfKlozyoU3i5Zc.roa (hash: gMQYLpr2E7Od3N3zIX37zoUdKHUCId0XHkWxbn/9Hs4=) 9: Y-ggvECpJ-TUj9BMaNxFVHCG_mk.roa (hash: yHJbvycQTABXHTmwKw5e8PRSEFVUISxjCDtnqSPXNps=) 10: czt3GQhHtSmOo6RJuvFMFQAKSGo.roa (hash: XJWzfiETobcimR26X1Pa8klzjoq9ZGkjfUnqI+42fs0=) 11: eL6yX2gKmuR54LoAuIUZEONKX3g.roa (hash: Wq/KgDr2vwlpid8VQStYJgjmPQjXNNh76BSl9DIrTcE=) 12: hBf-hoIhETw06OBRpv7F1WdTrE8.roa (hash: LSEM+beBKj2xu4gyMsUhzku59BFOyI6BOdyKq1jM8vA=) 13: ps-3dIi4E3kjzYMhNLY6gSZjzEI.roa (hash: AimvrgTPnFzv1TtjV/eH/9wijMpIF0IeujrL4F6J9qw=) 14: vWlItCBxAXeKE8gJX96SzwOKVyc.roa (hash: Y2Q+VHBMvY4aKyxjSWnm9nXu79hw6C2astvb5J8gRi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Jun 2025 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3e:09:14:86:6f:a9:03:b8:68:cc:9b:db:65:8d:c9:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Validity Not Before: Jun 5 03:01:11 2025 GMT Not After : Jun 6 03:01:11 2025 GMT Subject: CN=538f064a606a515be7bc846db0d5063abec13f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:45:fd:88:c3:74:2d:7c:a0:50:a9:3f:cf:00: 38:d6:1b:5b:d9:a3:d9:cd:ec:64:83:2d:92:8e:78: e3:c1:8e:af:6d:97:7a:f5:5c:93:63:33:14:3f:b5: 40:36:9e:92:ab:9d:61:22:6c:f2:cc:db:1e:40:9b: e4:d0:a5:a8:9a:04:77:bc:e4:2f:e7:e1:d8:2a:3c: 77:48:4c:0e:ff:d7:4d:e0:d4:56:16:66:05:81:ef: ea:8b:b9:6f:ca:ab:1f:45:d3:e7:9f:1f:d8:50:f0: f8:f9:07:57:c2:67:96:f2:7f:e3:b3:ee:33:d3:7b: c5:78:6b:4b:03:5e:9e:41:82:c1:fc:2b:61:24:f7: 82:26:a0:52:a9:34:6e:5c:62:c4:97:d2:0d:28:3f: b0:95:3f:07:bf:14:c3:74:5b:10:70:76:f9:34:df: d6:be:ce:59:df:58:bd:80:e9:20:f7:df:4a:71:1a: 65:76:c4:37:0d:a0:44:e2:88:c7:7f:f1:16:ca:c8: da:59:3c:56:e3:4c:c2:29:fc:26:9c:0c:68:bb:89: 0e:6d:1c:71:60:76:a9:4a:96:1b:e9:7b:b6:dd:c2: 64:95:2c:f5:57:2f:46:56:ba:ed:59:79:58:1b:f4: 78:51:ea:aa:c3:07:13:c3:9c:fb:04:b9:5f:2a:2f: c4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:8F:06:4A:60:6A:51:5B:E7:BC:84:6D:B0:D5:06:3A:BE:C1:3F:01 X509v3 Authority Key Identifier: keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:78:42:aa:22:a7:af:7f:84:e4:84:18:53:83:54:2f:6f:5a: a5:92:bb:e0:bf:05:01:60:2a:22:39:a5:bd:3d:86:49:75:49: 19:fe:e0:13:da:31:5a:84:36:2a:ec:bc:24:68:73:03:5a:e9: 4d:aa:77:6d:80:17:32:5a:38:9c:2c:69:21:02:8c:27:9c:2d: 46:00:f5:fc:3d:35:76:ab:75:d2:95:a3:f0:6c:34:45:6d:2a: 33:79:84:0c:9f:3e:dc:8b:26:17:c7:d8:62:76:42:3c:98:0c: ee:eb:f5:1b:f0:c0:4a:f7:34:d4:aa:b4:ff:0a:8b:12:ba:fb: dd:89:de:22:8e:93:06:c3:9d:03:62:91:56:e5:6b:14:14:bd: 82:d4:1f:f4:ab:bd:46:ec:35:9c:3f:47:ab:fa:2a:ba:1e:98: 8e:90:0f:6d:b6:51:f0:b4:70:17:8e:ed:bb:81:18:7f:69:e4: 36:b2:47:85:b9:3a:66:9c:d2:ab:c3:19:e9:c4:ac:ce:a9:c0: 2e:79:3e:8b:10:0e:5c:ab:86:d4:48:a3:e5:d7:3d:d8:0c:7d: 3e:7f:2c:73:25:38:fc:c2:b9:e7:7c:7c:32:b8:2b:d1:97:84: 2c:30:24:d0:e2:b8:25:c6:37:f2:c4:a2:cc:c7:d2:74:c3:13: 14:cd:8e:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc+CRSGb6kDuGjMm9tljclsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTZhYjhlMGM0NmU4NDFiNDRkMmI5YzZiMDNiYjY1ZjU2 MjFkYjEwHhcNMjUwNjA1MDMwMTExWhcNMjUwNjA2MDMwMTExWjAzMTEwLwYDVQQD Eyg1MzhmMDY0YTYwNmE1MTViZTdiYzg0NmRiMGQ1MDYzYWJlYzEzZjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA90X9iMN0LXygUKk/zwA41htb2aPZ zexkgy2SjnjjwY6vbZd69VyTYzMUP7VANp6Sq51hImzyzNseQJvk0KWomgR3vOQv 5+HYKjx3SEwO/9dN4NRWFmYFge/qi7lvyqsfRdPnnx/YUPD4+QdXwmeW8n/js+4z 03vFeGtLA16eQYLB/CthJPeCJqBSqTRuXGLEl9INKD+wlT8HvxTDdFsQcHb5NN/W vs5Z31i9gOkg999KcRpldsQ3DaBE4ojHf/EWysjaWTxW40zCKfwmnAxou4kObRxx YHapSpYb6Xu23cJklSz1Vy9GVrrtWXlYG/R4UeqqwwcTw5z7BLlfKi/EVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOPBkpgalFb57yEbbDVBjq+wT8BMB8GA1UdIwQY MBaAFNvmq44MRuhBtE0rnGsDu2X1Yh2xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2Mt ZmIxMDMwNjUxMDY3LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2MtZmIxMDMwNjUxMDY3 LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqnhCqiKn r3+E5IQYU4NUL29apZK74L8FAWAqIjmlvT2GSXVJGf7gE9oxWoQ2Kuy8JGhzA1rp Tap3bYAXMlo4nCxpIQKMJ5wtRgD1/D01dqt10pWj8Gw0RW0qM3mEDJ8+3IsmF8fY YnZCPJgM7uv1G/DASvc01Kq0/wqLErr73YneIo6TBsOdA2KRVuVrFBS9gtQf9Ku9 Ruw1nD9Hq/oquh6YjpAPbbZR8LRwF47tu4EYf2nkNrJHhbk6ZpzSq8MZ6cSszqnA Lnk+ixAOXKuG1Eij5dc92Ax9Pn8scyU4/MK553x8Mrgr0ZeELDAk0OK4JcY38sSi zMfSdMMTFM2OQA== -----END CERTIFICATE-----Generated at Thu Jun 5 09:44:46 2025 by rpki-client