$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft File: SAXxfC1xM9La06jffjUxXjfvXa8.mft (raw, json) Hash identifier: WFQFARmPMGVOghRB8zoShLvIRKiIK/OlWnsKN6DzSBM= Subject key identifier: 56:18:A9:A2:7A:35:B7:53:3B:1A:0F:30:A8:E1:13:31:CF:60:1C:96 Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Certificate serial: 0197470C4BE8087D6D59F7B937571CDDA206 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft Manifest number: 1621 Signing time: Fri 06 Jun 2025 21:01:17 +0000 Manifest this update: Fri 06 Jun 2025 21:01:17 +0000 Manifest next update: Sat 07 Jun 2025 21:01:17 +0000 Files and hashes: 1: 0Ku6hM-uBGPbIB_elC1-63mAMPQ.roa (hash: COta24brNXG7Hg0yqxT50IIeRD/EU1T0z8f77M/W0Yo=) 2: EkFoJFaGBhEamXzDueIrcP26LBc.roa (hash: PQO2ZDlIaJ7jCYwx8vtlK6hg74IbDpuCQQjGUuzjVhU=) 3: Lcu6ir7Tj9YBKclNd5yCQDyZYdA.roa (hash: Auoo76FRPPWoH0S0B9YJ3Yza2c1mTAhQ5423VpfHxOE=) 4: PLHlOEI8OTEsrWEb9gcEoJkppTI.roa (hash: HqryYXEFzx4Aim3Zpzxpc+c6ErO0nPq1Js+lyJLuXYs=) 5: R3xayF97XK3f6WN53ZX5sxR54jo.roa (hash: 3PZ+HViUokDQMZxJmaE1uzBy+pQRq/4nLFWrCe3sMjU=) 6: SAXxfC1xM9La06jffjUxXjfvXa8.crl (hash: kCBhNFJBkvxC4tYwErGrFBpMkrJRGbWBrYkn4biMosY=) 7: U9JKjRKHCxdIsPDNQPOR88OqmCg.roa (hash: lajLKbejzI40eVa7BHAS4fdbPpPskr27n+GpeXAUSBk=) 8: V5zbutGfbh5lgD5tOB55BSZL6mM.roa (hash: 8dfbuUOKEzC/ptg0//A1zNKfTmzKWKS3nTLCemG3GRo=) 9: VgwcNuoBbQF8vGnu87-98unWzYI.roa (hash: xzpL3I9r8p4R1FCkPrlQ5XYcS0wswEmNqu/eM1IOMwU=) 10: WclbZXzoRolOPnP1txTGa2N2wfw.roa (hash: bkUop8nfZL+I8FoNjqYPn2viT45YyNvKLtfeDigIXyI=) 11: Zj4JwFMN6H5YeHt4cvNXltyCdE4.roa (hash: CWOsIZG4hIEMhn5XzXUXZbhFt0Yejg6in7qKXYgJegA=) 12: _yzn5oDusX2X0X7GKZBcg6brbLE.roa (hash: 3Zb9XtEnFpg2ZnedyDM6Fmzs7qviCkwqPZ3m1FKhSy0=) 13: b81Y2U7ou3gE7qnhOIrH6wzIwHE.roa (hash: evIbesfBnQDx6fK9X24u14Wb1m4RUjoEvZ0+mfP0N8E=) 14: bZniM2QlgkpTXR-OwANLXtwZtPE.roa (hash: 1uGphNb2cimTL54FLmsjWSi2OJxcMRM81uY8UPnrcpo=) 15: pzkAj4_zAVXkRe0C_QHjEgzBj0Y.roa (hash: 3G1cxIfKvcRktJjL1ylmN8MQ4xGHLKTVnlOoY7cNz5o=) 16: uE7Yr0mrdBcUX1IW6FuzHWklFWE.roa (hash: Txuv8knFAVKbDTm6XQpLWHHm/zIqEkh3sPLdu38MgYQ=) 17: ulYg4AG1ul90cUDOSHCVqM9kgX0.roa (hash: YyEEkcY+cM/W31h/eE29O/fYkGie+5JT9vHD80X8ftc=) 18: wwlt2hK8l53pvlwYMtoaW4Ty7wo.roa (hash: OS5MPuFmrI+TPRKuwjrDIui0RjzgE9QrGAKYQntJtcY=) 19: yF60MXomOPXicQ4dVy_gu3Jce0c.roa (hash: 5FKE6qFccFKdKUpBcGBwVGHo07CqDvWyXp8ktMwwG+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 21:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:47:0c:4b:e8:08:7d:6d:59:f7:b9:37:57:1c:dd:a2:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Validity Not Before: Jun 6 21:01:17 2025 GMT Not After : Jun 7 21:01:17 2025 GMT Subject: CN=5618a9a27a35b7533b1a0f30a8e11331cf601c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fb:0d:f8:36:79:d3:4a:3c:c7:b4:c4:00:54: 01:a5:da:44:9a:fd:07:bd:a0:b9:99:91:c9:5f:33: 5b:2d:3b:1b:db:bd:06:1b:e7:e4:c5:dc:c8:3a:b0: 8d:cf:f2:f9:63:a2:ed:ea:52:3e:5a:bf:3d:1f:5a: d3:c6:14:b6:d9:67:05:44:0d:02:44:4d:27:01:e7: 37:ca:91:62:34:53:d9:9a:e5:57:2c:65:30:7a:6d: 04:75:f4:c0:00:bc:1f:4b:0f:87:aa:62:8b:9a:a3: 75:4e:92:eb:b1:50:0f:08:1b:e4:07:c0:b1:71:56: 3e:0c:14:f6:59:eb:f4:0f:6e:ed:42:41:24:2e:b4: e6:38:fa:d2:d2:43:8c:8d:39:49:30:8b:c2:3b:e4: 5b:a2:a1:6f:8a:fb:e3:81:96:6a:d5:d3:80:37:65: d3:fa:fc:72:52:56:80:be:c3:7d:6f:e1:95:1f:42: aa:dc:aa:e1:a8:eb:45:1a:3a:83:81:8f:37:9a:f1: 7b:72:ce:f7:eb:0b:27:b1:6f:df:d7:0f:a8:c3:92: b6:95:1f:4c:3a:28:67:4f:2c:7d:6f:73:9e:53:28: d9:28:e6:24:e0:f4:7d:0f:a0:96:c6:87:dc:df:8a: b2:7a:44:aa:47:75:a7:ea:79:40:88:4b:0f:3c:db: b5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:18:A9:A2:7A:35:B7:53:3B:1A:0F:30:A8:E1:13:31:CF:60:1C:96 X509v3 Authority Key Identifier: keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:be:d1:42:76:e6:48:cf:c4:8a:58:9c:d0:19:67:4f:c2:42: 59:14:56:c2:42:7d:f7:a5:8f:b6:c9:2f:ca:41:ce:87:61:b8: b1:96:48:7c:91:01:84:77:72:e9:4f:a8:09:09:74:6b:e6:c4: 99:a8:eb:8c:ce:70:53:65:85:34:c2:eb:11:7f:3d:c1:a0:16: 39:bd:1a:a8:8f:7c:5c:bc:03:bd:35:8d:29:fc:ab:09:4b:4d: 70:b2:4f:bb:09:e0:54:6d:f2:36:87:f7:eb:67:07:bb:35:d1: c1:6a:f8:30:5c:d9:05:37:89:4f:a0:20:88:1d:d5:fe:30:81: e6:cd:84:3f:5b:cc:bd:8b:29:d9:30:8a:84:93:2a:06:2a:2e: 56:69:ad:84:fb:95:5f:b6:e8:7c:86:20:3e:83:e1:45:ab:d6: 3f:ae:a6:43:83:3b:48:af:58:86:1c:e0:4f:94:c9:e2:5a:85: 4e:9e:65:7a:73:67:b5:a2:81:04:46:fd:a5:9e:97:c9:68:06: 71:58:51:a2:28:17:4d:66:92:3c:f8:93:b8:3d:5e:63:0c:d8: 1f:91:9b:15:36:3c:01:64:cf:8f:18:e5:98:25:e9:25:f5:e8: b8:4b:61:69:3b:8f:b0:43:05:40:24:5b:d9:7a:cf:0f:06:fa: 5f:7f:46:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdHDEvoCH1tWfe5N1cc3aIGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl ZjVkYWYwHhcNMjUwNjA2MjEwMTE3WhcNMjUwNjA3MjEwMTE3WjAzMTEwLwYDVQQD Eyg1NjE4YTlhMjdhMzViNzUzM2IxYTBmMzBhOGUxMTMzMWNmNjAxYzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/sN+DZ500o8x7TEAFQBpdpEmv0H vaC5mZHJXzNbLTsb270GG+fkxdzIOrCNz/L5Y6Lt6lI+Wr89H1rTxhS22WcFRA0C RE0nAec3ypFiNFPZmuVXLGUwem0EdfTAALwfSw+HqmKLmqN1TpLrsVAPCBvkB8Cx cVY+DBT2Wev0D27tQkEkLrTmOPrS0kOMjTlJMIvCO+RboqFvivvjgZZq1dOAN2XT +vxyUlaAvsN9b+GVH0Kq3KrhqOtFGjqDgY83mvF7cs736wsnsW/f1w+ow5K2lR9M OihnTyx9b3OeUyjZKOYk4PR9D6CWxofc34qyekSqR3Wn6nlAiEsPPNu18QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFYYqaJ6NbdTOxoPMKjhEzHPYByWMB8GA1UdIwQY MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt NWRkNmUyMmViYWIwLzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg77RQnbm SM/Eilic0BlnT8JCWRRWwkJ996WPtskvykHOh2G4sZZIfJEBhHdy6U+oCQl0a+bE majrjM5wU2WFNMLrEX89waAWOb0aqI98XLwDvTWNKfyrCUtNcLJPuwngVG3yNof3 62cHuzXRwWr4MFzZBTeJT6AgiB3V/jCB5s2EP1vMvYsp2TCKhJMqBiouVmmthPuV X7bofIYgPoPhRavWP66mQ4M7SK9YhhzgT5TJ4lqFTp5lenNntaKBBEb9pZ6XyWgG cVhRoigXTWaSPPiTuD1eYwzYH5GbFTY8AWTPjxjlmCXpJfXouEthaTuPsEMFQCRb 2XrPDwb6X39G1g== -----END CERTIFICATE-----Generated at Sat Jun 7 03:18:40 2025 by rpki-client