$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft File: CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft (raw, json) Hash identifier: zeWAHcSZ9WcXx6R10+J/Afr7GaPNLi2ZSVddr2Ucnxk= Subject key identifier: C1:9E:FD:A4:C9:47:82:8B:36:AB:1B:4F:96:D0:E7:E5:41:75:B2:5D Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 01974A438C7AF2992829662F614C53E94300 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft Manifest number: 15AF Signing time: Sat 07 Jun 2025 12:00:30 +0000 Manifest this update: Sat 07 Jun 2025 12:00:30 +0000 Manifest next update: Sun 08 Jun 2025 12:00:30 +0000 Files and hashes: 1: 0EWIFMkHOwPxXxJO-cVVnlFMV9M.roa (hash: H3HRfMwSGiaOC4hjRP3JPpolbe1iEtk1HgVt+tXcFJg=) 2: 1Q8S-F04ndhiDn0SGwOoAJvpcJE.roa (hash: C3Etga/0CnN14pA6mDGityRvYUsO547YlA3aweNBuiE=) 3: 2VG718T3W04-_y_DFYMb27FL8Xc.roa (hash: rc2TenqF9dc6/5xbGTLqr/wJccF1AG2cwa4tLlPDxNg=) 4: 4eUzX53KjKiFABS1AxLPvZ5r-bY.roa (hash: 7YG9ahRtvq/YQgGSsJQAoRx/DWLAGEIhFL7ghXNU9R4=) 5: 5HzzPzyXFWUltUFIxz7A1OHGi7o.roa (hash: KdXF+S8JaHRcZ3Ivt3Pqt/DXcq9oRCgLGhDICrSfT58=) 6: 9NRiEzWNWvOsqkkmj1H_nO4JtIA.roa (hash: M1EfpG0UAk+KXmH4YDb8gbqx8X4cMoL0D3M3L/57Gmk=) 7: CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl (hash: x0Mgis6hXu4QYBx3hW37xAGMKGBKNu67b+i8N7nElYM=) 8: CdZHXMtiuXIYHPmoJY2aErxG8Z8.roa (hash: zau8aloWL7mHqdY4KBJaLbm12+SMJIeq7unHMUAtkpg=) 9: ELaIItpNMzqHS9OpyWZxQCWwejQ.roa (hash: nTU80YWNnv8w85NSUIjn+8ThW6vosJXjx8iKS04GONQ=) 10: QDnTB1-gKLLvkYk5f0mHuXK293g.roa (hash: ITp7yMZbWE36QWni9uBDxLpY4F+C9+SnVAj3E7l62Ts=) 11: XDAdp99VnBF7cnnsQ12OybJrT8Y.roa (hash: RlZg9LpMx3Sn+N/ygBjqDdQQDqiZuazZKwQVgxx0FBg=) 12: rfdo-9tZjARHX4NveRw0hMtJZi0.roa (hash: 5ECReeTc1Tc4KP4YsINLVoWJBI6UqeiVxcrFrB9M65o=) 13: tjV22hyfL6sKASeEJo6Ke2cIRMg.roa (hash: j+NWMjI7+Df8SVOaL0Iyl9IZZ4H1LL2E359iqV63je4=) 14: zCJNwAHBT-OuD8JSwLlWmHeq2i0.roa (hash: xxcu2GFnZrIoRaIL254U2SP3O3E+qALgdaalLMmqYoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4a:43:8c:7a:f2:99:28:29:66:2f:61:4c:53:e9:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: Jun 7 12:00:30 2025 GMT Not After : Jun 8 12:00:30 2025 GMT Subject: CN=c19efda4c947828b36ab1b4f96d0e7e54175b25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:53:a9:b7:55:e3:18:fe:be:a3:c6:55:38:69: bb:19:18:85:69:07:17:de:b6:cb:29:e7:54:63:d0: 84:db:f1:bc:a8:16:92:0d:51:f1:73:0a:e0:7f:76: b5:2a:78:ab:4d:72:d4:92:44:cc:eb:16:6a:fb:b0: 21:a1:55:9a:19:34:06:0b:96:f0:f2:ab:9f:63:82: 90:ae:66:c1:f9:df:80:7b:aa:59:6a:80:d0:89:95: d5:70:22:0c:0b:ff:f0:90:aa:9c:1e:2f:6f:f7:36: 5f:7a:e5:76:02:a6:8e:45:f6:0e:b7:7e:54:35:5b: 85:75:22:11:d9:be:ee:4b:3b:99:e0:43:6f:c2:35: af:7c:fc:90:92:d6:65:6d:40:5b:4d:dc:2f:33:1a: 06:c8:b4:e5:cd:ee:69:cf:a1:94:a4:18:a1:3c:e7: 31:90:7c:3a:70:c1:93:2a:3a:23:30:e8:4e:49:ef: 45:0d:5b:0f:0a:e3:3e:eb:1b:e0:cf:ff:ed:b0:16: a0:61:d5:77:0a:e6:b4:af:51:6b:70:bc:ed:c4:d3: bc:b7:ac:f0:49:88:95:d5:15:f3:34:06:62:14:26: e9:b9:34:e7:7c:33:60:7a:b6:96:2b:84:16:a6:2e: 52:f3:4a:44:08:94:87:af:04:b8:8f:43:4c:98:de: 65:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:9E:FD:A4:C9:47:82:8B:36:AB:1B:4F:96:D0:E7:E5:41:75:B2:5D X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:15:52:1f:f8:65:62:43:50:7f:e0:84:3c:61:08:93:7c:5a: 81:42:f5:c6:e6:07:a1:6a:37:76:a0:bb:ff:df:5b:4d:57:ef: 3b:17:15:39:19:b9:af:c0:13:a7:6b:6e:45:a2:9f:96:18:d7: 78:af:10:28:38:c3:52:0f:78:f1:ca:1c:89:99:df:48:92:91: c5:69:2e:27:18:56:c8:d6:a5:76:af:6b:b5:d4:24:f7:3e:f2: d0:f4:38:54:c5:95:0c:af:29:ec:a2:03:1a:9d:9a:10:bd:92: 8b:33:11:fb:db:d4:ce:05:74:97:df:7e:39:df:ff:9c:97:c0: e6:6d:6a:0c:29:94:53:5e:2a:a2:40:07:12:87:27:ef:cb:c4: b3:7b:ed:eb:5b:f9:04:1a:93:08:4d:9e:d5:60:7a:bd:5d:7c: 0c:fa:8d:7a:d7:2b:f1:86:33:4f:e5:51:ed:15:6a:74:7f:0e: 6b:ec:7e:7b:6a:95:38:e8:91:00:76:3c:50:d7:7a:9f:e9:16: e4:08:03:74:c4:97:a8:63:3d:26:26:e5:5d:2c:fc:ec:27:ed: 46:40:e3:3b:26:45:a6:88:cf:2c:58:18:ba:3d:95:13:ac:ae: 26:86:8d:a6:35:bb:55:cb:17:f3:60:90:87:d9:ec:5b:32:2f: 38:5c:aa:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdKQ4x68pkoKWYvYUxT6UMAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjUwNjA3MTIwMDMwWhcNMjUwNjA4MTIwMDMwWjAzMTEwLwYDVQQD EyhjMTllZmRhNGM5NDc4MjhiMzZhYjFiNGY5NmQwZTdlNTQxNzViMjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFOpt1XjGP6+o8ZVOGm7GRiFaQcX 3rbLKedUY9CE2/G8qBaSDVHxcwrgf3a1KnirTXLUkkTM6xZq+7AhoVWaGTQGC5bw 8qufY4KQrmbB+d+Ae6pZaoDQiZXVcCIMC//wkKqcHi9v9zZfeuV2AqaORfYOt35U NVuFdSIR2b7uSzuZ4ENvwjWvfPyQktZlbUBbTdwvMxoGyLTlze5pz6GUpBihPOcx kHw6cMGTKjojMOhOSe9FDVsPCuM+6xvgz//tsBagYdV3Cua0r1FrcLztxNO8t6zw SYiV1RXzNAZiFCbpuTTnfDNgeraWK4QWpi5S80pECJSHrwS4j0NMmN5lRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGe/aTJR4KLNqsbT5bQ5+VBdbJdMB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADBVSH/hl YkNQf+CEPGEIk3xagUL1xuYHoWo3dqC7/99bTVfvOxcVORm5r8ATp2tuRaKflhjX eK8QKDjDUg948cociZnfSJKRxWkuJxhWyNaldq9rtdQk9z7y0PQ4VMWVDK8p7KID Gp2aEL2SizMR+9vUzgV0l99+Od//nJfA5m1qDCmUU14qokAHEocn78vEs3vt61v5 BBqTCE2e1WB6vV18DPqNetcr8YYzT+VR7RVqdH8Oa+x+e2qVOOiRAHY8UNd6n+kW 5AgDdMSXqGM9JiblXSz87CftRkDjOyZFpojPLFgYuj2VE6yuJoaNpjW7VcsX82CQ h9nsWzIvOFyqKA== -----END CERTIFICATE-----Generated at Sat Jun 7 16:10:32 2025 by rpki-client