$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft File: _TfMjxazxsvTNGqj7WF3Hz6DrJc.mft (raw, json) Hash identifier: H7MGDhtp8maLNSmU1F6DJk556rPTFzaESlzrm9mwtY8= Subject key identifier: 87:BB:78:CA:C1:53:7E:BC:E6:53:DA:56:12:83:E6:95:06:AD:6B:8E Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Certificate serial: 01973CF6AE55BBFA9F1B623FC3500CB66FC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft Manifest number: 15D0 Signing time: Wed 04 Jun 2025 22:01:28 +0000 Manifest this update: Wed 04 Jun 2025 22:01:28 +0000 Manifest next update: Thu 05 Jun 2025 22:01:28 +0000 Files and hashes: 1: 0HACyBUxgNOKSEcXcfPHI7LfmIg.roa (hash: wqTJepcUODfu+UsDaT3UCXuLJcUfFBmEBfdq4N3Rg18=) 2: 0SGQgnDHvljd8WswPS3Zor6FDL4.roa (hash: 6cEGIRuHIzEG7/ilcX3ol3tjHMExu8vRWtvJG3iihbQ=) 3: 52PmmGV3aXleWbX9-5QkD3T7G80.roa (hash: YUpifY1bSAdptUQTodCY1O+Ws4plwdNZWT5tmGKMklE=) 4: 8YFjhJllAvnuj7iLErGij7HrSXA.roa (hash: Jhl/M/KE8hoNx5Qk80x4cpNTjAEwV+xL9n1btN845EY=) 5: CkYxOCFcXglZibNQBz57XM7xS7k.roa (hash: tPE6/6y5+L8gtSA/0lIV1hRfNlGi7fzBLSET7NYUXhQ=) 6: L2ou3KYC7aOW9h4MkxvmRdF9-XM.roa (hash: HdnRHq9xsHsffUN6vf8PfjK/qp0rtSAt5eAQOAgASLA=) 7: ORny9zSgmvPNlHA0GSjf-fW7JAM.roa (hash: 2mt1E0mw+ncsqd4MDmo2JIYlDgVM2APWu07de1NTQyk=) 8: Qx6qMFrufEPZv8mWu9XgjLsLMB8.roa (hash: P/r3/JxO1CdcEUxJoGOxAQuq95icEB2m2qPK3qHqs10=) 9: TAdP0yKv9NpfjSbhNts0juEkm1U.roa (hash: dvn2DfwTU0n63QcUIMIBNntGEWr2G1UXma7Nhu8Iurs=) 10: WoZoEuE3OARNKqVJ9taXo2-Zt8M.roa (hash: Sn/ecsmLImTPn1yvBagjjq/XB8omW7tpmekWgI2yuFs=) 11: XdBKdwv6cTf-QnKldOeZvGt4D_Y.roa (hash: TxqV86SQTi0t4BbX6SVLNGYD/xhHt70JrJfSx9PYDmA=) 12: _TfMjxazxsvTNGqj7WF3Hz6DrJc.crl (hash: p1x4NN4AWzZtVH2IzVHneqq+a0saCPpnVzgbFcD1yf4=) 13: bboBBp1tKqS0RC4vsgwoBCmEwqY.roa (hash: 74uXCligXDCEvZU13I/aaPCJJzSMTM22JuT1PuhmBlQ=) 14: cTcEU6BZVDHzKsGmYrYFuehVnmw.roa (hash: Wt8W9AEoHsxpxFYj5Y9GGKvIgV+LkMQs3tuB0PH0H4Q=) 15: peQXZljVycjXahMLHOgebWKzO6c.roa (hash: 6nDgFHnTrpxmQJyrmsK88oc050AwIyK1nEAS/RY/l94=) 16: xCt-3I4HSr25MhC8BMd2thevgVU.roa (hash: sZUNm0dz+rTstayb8zMPvmRuDI0MPNSTCMqD12A4Oww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 22:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3c:f6:ae:55:bb:fa:9f:1b:62:3f:c3:50:0c:b6:6f:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Validity Not Before: Jun 4 22:01:28 2025 GMT Not After : Jun 5 22:01:28 2025 GMT Subject: CN=87bb78cac1537ebce653da561283e69506ad6b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:40:4e:15:d9:68:c9:38:d1:6f:ad:99:38:46: fd:af:b0:eb:6f:dc:c5:d4:f5:00:36:b2:5d:e9:be: 90:7e:95:70:2f:fe:72:46:a7:9f:8d:81:a8:b6:a3: 6a:c1:11:31:72:41:c9:e1:47:6d:05:2f:d0:56:f8: 57:6f:4d:31:29:af:79:01:22:50:b7:b0:a9:7a:90: 89:d3:9e:59:8d:88:3f:16:52:31:c0:e8:09:9b:b6: 2b:ab:6b:6f:16:fe:8f:be:9e:e2:d1:97:f3:2f:33: e4:9b:02:58:cb:02:00:55:15:c4:b2:10:4f:cd:69: 72:15:3d:46:ad:ba:12:0f:db:0f:ab:ff:f9:f4:2f: 27:09:22:5a:99:33:f5:bd:db:81:8a:1e:b8:3e:e2: 26:59:f7:7a:e4:bb:5d:e1:d8:8f:84:49:2d:3b:70: 7b:58:7c:eb:2c:ab:5a:26:8e:8b:5a:7a:a0:d2:ed: df:18:f3:09:bf:6a:b7:f7:ee:39:c5:d2:96:53:42: 9b:1a:6f:83:59:37:e3:fb:8c:b4:94:4d:72:b5:85: db:86:37:61:e9:94:e4:85:06:5c:8d:5a:64:19:99: bb:50:37:cf:25:81:ca:e4:bf:68:b1:3f:cc:f2:f6: ba:17:a1:bb:dc:22:14:9f:20:dc:14:49:96:f1:91: c9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BB:78:CA:C1:53:7E:BC:E6:53:DA:56:12:83:E6:95:06:AD:6B:8E X509v3 Authority Key Identifier: keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:22:df:01:02:27:84:11:94:1d:1e:c9:ce:5e:95:7c:b2:a1: b7:25:26:0f:e5:1c:b4:f7:a5:90:98:da:1f:50:6b:5e:ed:9a: 0d:c9:a4:55:de:73:34:f9:9b:f5:b0:04:c4:95:58:fb:1a:21: 59:ad:17:cb:2a:fd:00:55:03:0b:1d:d9:67:9f:71:f3:3c:6e: 1b:4b:2f:9e:2b:f1:d7:74:07:4e:2d:54:38:b6:47:2a:e9:24: f9:c7:ea:22:1f:d9:b4:6e:95:d9:99:3d:cb:04:df:1a:d2:5d: ff:1d:0a:77:98:90:75:df:8f:dc:d3:59:07:c4:d7:9f:ec:9b: 2c:95:7e:be:85:d8:bf:62:b8:6d:68:55:63:9c:88:4a:3c:ac: 3e:31:7e:2d:25:c3:ac:f8:ac:d1:6d:6a:59:7f:c2:20:44:49: 5e:4e:1d:9a:ab:31:6b:5b:88:69:be:0f:55:47:13:84:67:0d: a1:db:72:ab:87:84:03:d3:1d:ef:d1:84:07:a2:c6:33:7e:f0: f7:25:25:bb:9d:69:b5:58:f0:44:84:d9:c8:db:5b:a4:d0:01: bd:a8:3f:ef:d0:4e:63:fb:ed:ea:f6:cf:34:59:ad:21:91:78: d5:26:21:f0:cc:1a:4f:8a:fb:99:3e:71:a9:aa:80:10:5c:be: 8a:be:60:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc89q5Vu/qfG2I/w1AMtm/EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4 M2FjOTcwHhcNMjUwNjA0MjIwMTI4WhcNMjUwNjA1MjIwMTI4WjAzMTEwLwYDVQQD Eyg4N2JiNzhjYWMxNTM3ZWJjZTY1M2RhNTYxMjgzZTY5NTA2YWQ2YjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkBOFdloyTjRb62ZOEb9r7Drb9zF 1PUANrJd6b6QfpVwL/5yRqefjYGotqNqwRExckHJ4UdtBS/QVvhXb00xKa95ASJQ t7CpepCJ055ZjYg/FlIxwOgJm7Yrq2tvFv6Pvp7i0ZfzLzPkmwJYywIAVRXEshBP zWlyFT1GrboSD9sPq//59C8nCSJamTP1vduBih64PuImWfd65Ltd4diPhEktO3B7 WHzrLKtaJo6LWnqg0u3fGPMJv2q39+45xdKWU0KbGm+DWTfj+4y0lE1ytYXbhjdh 6ZTkhQZcjVpkGZm7UDfPJYHK5L9osT/M8va6F6G73CIUnyDcFEmW8ZHJSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIe7eMrBU3685lPaVhKD5pUGrWuOMB8GA1UdIwQY MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt N2UwNWFiNDFiNmU0LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0 LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHyLfAQIn hBGUHR7Jzl6VfLKhtyUmD+UctPelkJjaH1BrXu2aDcmkVd5zNPmb9bAExJVY+xoh Wa0Xyyr9AFUDCx3ZZ59x8zxuG0svnivx13QHTi1UOLZHKukk+cfqIh/ZtG6V2Zk9 ywTfGtJd/x0Kd5iQdd+P3NNZB8TXn+ybLJV+voXYv2K4bWhVY5yISjysPjF+LSXD rPis0W1qWX/CIERJXk4dmqsxa1uIab4PVUcThGcNodtyq4eEA9Md79GEB6LGM37w 9yUlu51ptVjwRITZyNtbpNABvag/79BOY/vt6vbPNFmtIZF41SYh8MwaT4r7mT5x qaqAEFy+ir5gbA== -----END CERTIFICATE-----Generated at Thu Jun 5 08:50:33 2025 by rpki-client