$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft File: 1g9F98xLaR_UoxwfHAtPYF13pu8.mft (raw, json) Hash identifier: LblIETOJ5I/eseKrAUIbTNv4bNHfcz6BAfkBhyL6PYo= Subject key identifier: 04:95:C6:7E:FD:14:93:60:66:4E:EA:E3:14:B3:C7:69:E1:1E:25:EE Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Certificate serial: 01974A0CBE92BF700C4A5AF238C4B04ABBB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft Manifest number: 1586 Signing time: Sat 07 Jun 2025 11:00:38 +0000 Manifest this update: Sat 07 Jun 2025 11:00:38 +0000 Manifest next update: Sun 08 Jun 2025 11:00:38 +0000 Files and hashes: 1: 1g9F98xLaR_UoxwfHAtPYF13pu8.crl (hash: yfcH55CnISjg8ZO7rl0J8vc4YQgg1BjWsDQUT/hs26U=) 2: GMAT5cnP7VsDriW3_zL3dmojRH8.roa (hash: 9OZgqMWwoj0IlbvwNkLekurnPx7RT1aRlKGSPHOL6N4=) 3: IoE67Ac0pXcZcF9gBBC8VKka1vE.roa (hash: kt4XWZcgrYkLHsaAC2c2z5iyqyhmqC0zJwGvhSrnQ3E=) 4: MnG_2GzorHPsXNp5Vum7-rUjReY.roa (hash: D3z8cv+XlClqN6b2gc/ybPBfC33Ewbb6orbavaJ/jxk=) 5: PPMANDrLvF7lVgznicSOoAT3-3U.roa (hash: goEhx/poAjkzaQRi2RGACZSEuEQ6nJJ0p5PoSp7o6bo=) 6: b5u0PP2LUmpbpNJ4qAdIl3s9IjI.roa (hash: 4ZbWUTDO0hiozFSxacFGW2XCjTl1RPjd3yDPIUYji9M=) 7: jfxb2BR-CQiCSpU8DpDydbDz1b0.roa (hash: fObbuEbq3/zFmHWpgeQlp5JFopCYl+4GEGdq5exW77c=) 8: rrmPFSxVt5xEtowDvlnYGvxrH3s.roa (hash: mhHuydqllyBkMxNXx9HLabM7W+Fte6mEhiiQe0n8fRA=) 9: th1p5jE1fl21GfKXyCflURpVpo0.roa (hash: w4pXoPCT9slYbdDvFiyPewBrsldI3f9m6umM8Wv0SkE=) 10: viBgIC4abJYY7C__L2VefsiYSYI.roa (hash: r+Hi34v0Qt4A/ODVfo4uFHb77CXM38aMXnF2F0o4IcY=) 11: xNr5I0Wokl-j2aBAEkjZmpNRVng.roa (hash: epmYMuuR7FlxzNy/fvLKPn2AzgVlFDZhQf7tXXleECM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4a:0c:be:92:bf:70:0c:4a:5a:f2:38:c4:b0:4a:bb:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Validity Not Before: Jun 7 11:00:38 2025 GMT Not After : Jun 8 11:00:38 2025 GMT Subject: CN=0495c67efd149360664eeae314b3c769e11e25ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bb:83:a8:3e:2c:01:8e:0f:fc:13:3b:f2:7a: 31:ee:f0:ac:ca:fc:c1:e2:d9:4b:92:04:b3:dd:b8: d0:f1:98:d1:da:aa:86:b8:83:e7:e3:28:5c:3f:9b: 26:28:99:c2:07:51:80:66:0d:65:01:3d:22:4d:a8: a5:93:40:cb:d4:df:6c:3f:05:b5:70:48:17:57:cb: 68:f0:19:b9:b8:c8:a8:d2:ee:31:89:1e:ee:b1:a4: fa:bd:32:58:3a:bf:b1:60:7d:e1:ec:45:ae:67:02: cd:56:fb:63:ac:12:7c:4a:65:a5:b0:9c:a7:f9:51: 50:3a:d2:a2:5d:78:92:ee:e7:c2:54:e9:00:8b:40: 21:73:52:e5:d6:ae:f8:b2:40:45:b2:d3:31:c5:cb: a6:36:8d:54:62:c7:6a:0a:b4:01:64:cc:08:1c:15: 9f:4c:3d:07:a8:d4:91:55:b5:c7:bc:df:24:c0:5b: b1:c9:71:78:f1:cb:6e:f8:d4:3e:af:0a:f9:7e:82: 81:94:c2:2c:c4:ef:ee:89:ff:16:f4:71:12:7a:2b: de:e0:6d:06:78:c5:6c:18:65:51:6e:3b:b7:58:59: 85:3e:b2:1a:e1:b3:d2:50:fe:8b:80:65:c5:ce:04: ce:76:12:25:0a:85:f4:59:7c:a2:45:57:93:73:11: b7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:95:C6:7E:FD:14:93:60:66:4E:EA:E3:14:B3:C7:69:E1:1E:25:EE X509v3 Authority Key Identifier: keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:2b:8b:cb:41:f2:3a:38:8b:d8:4a:59:69:ea:ea:68:9b:70: 6b:13:96:09:16:a6:14:56:1a:09:cc:f9:e9:0e:50:33:67:76: 34:5f:40:e2:d2:3a:50:58:a2:8f:21:69:d7:75:87:90:e7:8e: 33:3b:9a:76:ee:c7:bb:f3:da:e4:97:29:b9:98:fa:69:8c:ab: c6:29:52:45:c0:de:85:6d:a7:b8:21:43:23:13:bc:6c:f4:0c: 18:ef:4f:f2:6f:85:8c:ea:33:21:95:26:0e:78:ec:79:ee:2e: cf:16:11:7f:f8:ad:08:7a:43:3c:49:72:8e:1d:27:ce:f8:0a: 1b:88:32:42:1c:b7:b3:4d:8d:3e:75:01:2a:86:53:33:5e:7d: 90:bc:ce:48:df:bb:48:3d:4c:e0:0e:af:47:2d:75:a1:aa:78: c7:e6:12:28:de:b7:43:c2:83:3f:d3:b2:b4:1f:05:cc:9b:47: 43:2d:41:ac:57:85:78:a4:9b:8b:99:f7:0a:be:c4:61:3c:67: 7d:d8:ec:17:f6:56:e0:1e:24:b9:0c:5b:c6:3b:cc:b8:95:12: 69:52:0a:13:44:14:58:27:01:2e:ca:39:b8:2f:6e:20:86:73: f2:26:a7:bd:fb:34:88:7a:d6:1b:9a:2f:e0:29:9e:07:cd:64: a3:0a:eb:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdKDL6Sv3AMSlryOMSwSruyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MGY0NWY3Y2M0YjY5MWZkNGEzMWMxZjFjMGI0ZjYwNWQ3 N2E2ZWYwHhcNMjUwNjA3MTEwMDM4WhcNMjUwNjA4MTEwMDM4WjAzMTEwLwYDVQQD EygwNDk1YzY3ZWZkMTQ5MzYwNjY0ZWVhZTMxNGIzYzc2OWUxMWUyNWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LuDqD4sAY4P/BM78nox7vCsyvzB 4tlLkgSz3bjQ8ZjR2qqGuIPn4yhcP5smKJnCB1GAZg1lAT0iTailk0DL1N9sPwW1 cEgXV8to8Bm5uMio0u4xiR7usaT6vTJYOr+xYH3h7EWuZwLNVvtjrBJ8SmWlsJyn +VFQOtKiXXiS7ufCVOkAi0Ahc1Ll1q74skBFstMxxcumNo1UYsdqCrQBZMwIHBWf TD0HqNSRVbXHvN8kwFuxyXF48ctu+NQ+rwr5foKBlMIsxO/uif8W9HESeive4G0G eMVsGGVRbju3WFmFPrIa4bPSUP6LgGXFzgTOdhIlCoX0WXyiRVeTcxG3iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASVxn79FJNgZk7q4xSzx2nhHiXuMB8GA1UdIwQY MBaAFNYPRffMS2kf1KMcHxwLT2Bdd6bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzkt YTk1NGQwNTM5OTRhLzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzktYTk1NGQwNTM5OTRh LzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSuLy0Hy OjiL2EpZaerqaJtwaxOWCRamFFYaCcz56Q5QM2d2NF9A4tI6UFiijyFp13WHkOeO Mzuadu7Hu/Pa5JcpuZj6aYyrxilSRcDehW2nuCFDIxO8bPQMGO9P8m+FjOozIZUm Dnjsee4uzxYRf/itCHpDPElyjh0nzvgKG4gyQhy3s02NPnUBKoZTM159kLzOSN+7 SD1M4A6vRy11oap4x+YSKN63Q8KDP9OytB8FzJtHQy1BrFeFeKSbi5n3Cr7EYTxn fdjsF/ZW4B4kuQxbxjvMuJUSaVIKE0QUWCcBLso5uC9uIIZz8ianvfs0iHrWG5ov 4CmeB81kowrrZQ== -----END CERTIFICATE-----Generated at Sat Jun 7 16:32:57 2025 by rpki-client