$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft File: o20K5eL7_8zgh3Drwgwha5-_lIU.mft (raw, json) Hash identifier: C8jYrP+8Q7b2WG9GPYCFlzlj1oguNSuMDl9jvagRdmk= Subject key identifier: 14:A1:29:61:7F:DF:B4:18:44:2F:B7:6E:F4:A8:C6:4C:8B:F3:5A:01 Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Certificate serial: 019749D5820CDBEB476244AE1D146347BB39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft Manifest number: 15AB Signing time: Sat 07 Jun 2025 10:00:18 +0000 Manifest this update: Sat 07 Jun 2025 10:00:18 +0000 Manifest next update: Sun 08 Jun 2025 10:00:18 +0000 Files and hashes: 1: 1XbIXlsc12j6nm66ObHlANu1FxM.roa (hash: lxZWGjYaWrGULnJUqbEWkt5IyYC/5a04fccF0g2Mp+o=) 2: 3RFddkozoZGvDJWQRcnS3tQnN6k.roa (hash: KSM4qOmDj4X6PN9gZp6oxzJSTfcXsGzAsnDPsOPcYvo=) 3: 5Ni6TTomkpPGcPlO3kSvRsrQu-U.roa (hash: 1JbN0aQZgu8I5lbFUp1QWBBO58Y4WN7qnz2P+FqHbJQ=) 4: BUbLcDK2mlbMmQrWrXK_KkB_Z8I.roa (hash: 5p58mg305UQz5j2iOVYn7ENJmD3sfGRtf406Z23M5Fg=) 5: DlEN3D6ABTKOQAUtaBMUB9rDXTg.roa (hash: 7Z/Q1II+IY41ZQNrl/gNVuPJHIVrAlLxhLrLlp3uHJ8=) 6: RdqjtJDLFWOt3Phx5mE_iQ2n2ac.roa (hash: lxo1VRjxzcOyUQlNG+1uXakzpre9ZL0uw2/WRhwVovc=) 7: fz5OQX3YNuZKli23fQPsHJMHAjg.roa (hash: 2W1jdhiJm6VJW0yfAkLiyNtl6yjC+Bfx3j0Hv8QWt58=) 8: o20K5eL7_8zgh3Drwgwha5-_lIU.crl (hash: 7pRgPUweYzNKjYVx3qB5hbWe39tdmj7ShJx/KgaONMQ=) 9: tn7ZdWo9WQgYlB0Z6sOK2If7PKQ.roa (hash: 8aBGWuWam9C6QXOPco15OTid7ItEiEbxf2K863xiGIk=) 10: uxPuBCLIiL0vvpcp5iG57n6Nxl8.roa (hash: 9FJQPnJf1+iHQwAWGEeso0fULqarFlyxqNgrRoa6pYY=) 11: v8yHhVnQZ24d3Hqq-_MmljsyF-o.roa (hash: ldyVLPmDRLippOD+hn4EjHJmd9dcu8cUfl/mwJelT5M=) 12: vOg7pIai3eYlqI8nGfkYR-448qE.roa (hash: k2twTqEvKHP86X8yabE26RQnv5iqhvXZjH+b4EIuDog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:49:d5:82:0c:db:eb:47:62:44:ae:1d:14:63:47:bb:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Validity Not Before: Jun 7 10:00:18 2025 GMT Not After : Jun 8 10:00:18 2025 GMT Subject: CN=14a129617fdfb418442fb76ef4a8c64c8bf35a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ca:a1:f0:df:17:68:5f:03:d7:b6:a6:10:66: ff:10:f6:eb:3b:42:a7:0a:21:d5:ef:9d:56:7b:fd: bb:a4:98:2f:b2:ea:56:ad:81:49:4f:1a:88:e3:1f: 18:a8:c1:5d:17:49:d4:17:dd:7a:b2:07:75:81:70: 54:8a:f1:3d:e9:b3:0a:db:e5:d2:6e:a7:16:2c:e3: 06:77:b3:08:56:ca:41:66:a1:d9:7b:9c:3e:34:89: 3d:c2:90:b2:ec:80:07:ea:d1:b8:bf:70:e7:aa:4e: 4d:19:11:7b:2e:c8:c4:78:26:9b:ec:7a:db:d8:ce: f9:ba:7d:b9:a5:3f:64:16:ee:58:5a:06:11:43:4f: e9:60:3c:e2:de:44:3b:fc:f6:14:31:19:f1:91:63: 3c:7e:a2:f2:40:ae:b4:98:e0:cf:1f:1c:a5:e4:91: 1d:ec:40:57:7d:6b:3d:4a:9f:bb:e6:6e:b3:ac:e8: 09:7d:5d:17:19:6a:b1:56:59:0a:fe:dc:f6:8e:15: bb:7a:af:22:cc:c1:21:4a:27:84:b1:83:a1:c2:7e: 5c:70:3b:a2:ce:da:28:69:56:5e:24:99:67:db:fd: d0:ad:5a:03:de:56:ee:d9:d8:0a:ca:43:b0:e5:52: ec:34:47:c1:4a:70:dc:f6:72:f3:71:cf:b3:91:7d: 71:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A1:29:61:7F:DF:B4:18:44:2F:B7:6E:F4:A8:C6:4C:8B:F3:5A:01 X509v3 Authority Key Identifier: keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:d1:2a:96:ac:16:bd:4d:5a:85:95:9e:5e:e4:ac:b5:2c:9d: 09:fb:66:1c:b4:cc:cf:d1:b4:f4:31:c9:1e:c0:0b:6a:66:a1: 1f:f0:63:7b:a5:04:f1:af:05:75:2f:33:8e:70:1f:1a:6c:e1: 4c:41:2d:30:1e:36:4d:02:d6:c9:9c:d4:b7:27:76:5d:1f:7f: 3c:3f:34:09:fd:8b:cb:e3:6d:49:29:16:42:08:a3:4d:b6:cf: 5f:a5:bf:c9:11:77:8d:6b:33:0c:ab:5d:66:8c:3f:08:d1:cf: 91:16:e3:7f:d9:b6:13:7d:f4:10:46:67:de:23:8b:39:9b:4c: d2:15:20:f6:93:79:2d:8d:10:de:84:c5:dd:56:d7:71:9a:50: 8c:75:15:e6:22:7c:ee:19:8c:9d:d1:48:06:45:61:46:b0:e6: 45:1e:ed:e9:d5:36:7f:01:b1:75:41:67:12:a4:83:42:ef:1b: 74:65:8a:40:bd:93:0a:00:cb:d9:9c:53:53:be:7e:72:9a:0f: 0e:96:12:8d:f2:ac:b3:aa:34:d5:15:aa:cc:dd:e6:d4:c8:23: ad:31:d3:ed:3b:f5:fe:8e:a7:4e:c8:3f:92:ce:53:ff:89:51: 37:af:b2:41:34:bf:3a:00:19:de:48:ba:9b:50:ff:65:51:83: 9f:fb:f1:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdJ1YIM2+tHYkSuHRRjR7s5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNmQwYWU1ZTJmYmZmY2NlMDg3NzBlYmMyMGMyMTZiOWZi Zjk0ODUwHhcNMjUwNjA3MTAwMDE4WhcNMjUwNjA4MTAwMDE4WjAzMTEwLwYDVQQD EygxNGExMjk2MTdmZGZiNDE4NDQyZmI3NmVmNGE4YzY0YzhiZjM1YTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28qh8N8XaF8D17amEGb/EPbrO0Kn CiHV751We/27pJgvsupWrYFJTxqI4x8YqMFdF0nUF916sgd1gXBUivE96bMK2+XS bqcWLOMGd7MIVspBZqHZe5w+NIk9wpCy7IAH6tG4v3Dnqk5NGRF7LsjEeCab7Hrb 2M75un25pT9kFu5YWgYRQ0/pYDzi3kQ7/PYUMRnxkWM8fqLyQK60mODPHxyl5JEd 7EBXfWs9Sp+75m6zrOgJfV0XGWqxVlkK/tz2jhW7eq8izMEhSieEsYOhwn5ccDui ztooaVZeJJln2/3QrVoD3lbu2dgKykOw5VLsNEfBSnDc9nLzcc+zkX1xHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBShKWF/37QYRC+3bvSoxkyL81oBMB8GA1UdIwQY MBaAFKNtCuXi+//M4Idw68IMIWufv5SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt Y2JiOTUxODNiMjdhLzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh LzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARdEqlqwW vU1ahZWeXuSstSydCftmHLTMz9G09DHJHsALamahH/Bje6UE8a8FdS8zjnAfGmzh TEEtMB42TQLWyZzUtyd2XR9/PD80Cf2Ly+NtSSkWQgijTbbPX6W/yRF3jWszDKtd Zow/CNHPkRbjf9m2E330EEZn3iOLOZtM0hUg9pN5LY0Q3oTF3VbXcZpQjHUV5iJ8 7hmMndFIBkVhRrDmRR7t6dU2fwGxdUFnEqSDQu8bdGWKQL2TCgDL2ZxTU75+cpoP DpYSjfKss6o01RWqzN3m1MgjrTHT7Tv1/o6nTsg/ks5T/4lRN6+yQTS/OgAZ3ki6 m1D/ZVGDn/vxRw== -----END CERTIFICATE-----Generated at Sat Jun 7 15:06:49 2025 by rpki-client