$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft File: C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft (raw, json) Hash identifier: AKs79cw7tgQdCVSROUrETSHxg7C2k2v7201PO906ku8= Subject key identifier: 63:69:26:FD:50:77:9C:EA:E0:9E:E1:5F:67:D7:5E:96:6F:4C:E9:85 Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e Certificate serial: 019874505A38F13FF08D5C89F2C9E23B6E1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft Manifest number: 12C5 Signing time: Mon 04 Aug 2025 09:01:19 +0000 Manifest this update: Mon 04 Aug 2025 09:01:19 +0000 Manifest next update: Tue 05 Aug 2025 09:01:19 +0000 Files and hashes: 1: 3kJhXofCpFDD7Eo6E2j1Gd-FMQ4.roa (hash: K3OTcQcoZnzC8T3KuSMerKr1Yy1y4ZL68Y/lWSF+tJA=) 2: 5vgRN93Ikx6vDyOuxjecwfDMpQo.roa (hash: Nm0/LoBBPkWnuWn59UFBPJeNenuNXFQpk38gCTpN7ng=) 3: AfLHT74NdL4YRI-gpiiLO8PPShM.roa (hash: 944lZaS4mAfM/S0ieSHEvM3mRV9M0T2Y3u48y1aDIjk=) 4: BqUsGxJbAHaodSor8dzxhiBDYnY.roa (hash: UcdL5oWXT3jVU2069PpqlnxiDKWvKcXri93cb+kI6qY=) 5: CLgBj6oYt6sGJ5ZpJJTL8C3Fnrs.roa (hash: aUOM41Nf+BqbKmy9YjUFL+mBeBI8749PsIPj/loME94=) 6: C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl (hash: sQbBbpiJuhR1qmcGDNV5hqnHHKaSjEpxMQ+HtyOQLFc=) 7: CqNmCGGQsBrEt7zh-VfcGtUv9RA.roa (hash: 7HTEUHavuiaMXQtqJhG62cD/8gu3Fv5evoWWikvAioM=) 8: HZmCfsHb09xlrSBh2iIxpOWZ3Ow.roa (hash: RrsPdmWqoOnc37eNmh2WMAAS+360HWRIjhjqZURUhWk=) 9: JPuN2YPz_l01LHcxJTRgQ5fN06Q.roa (hash: sO4iVZOw03myN2KiGjBOdg4pmq+1tC1eFs8GD/uCEJk=) 10: L7BpeKSr3aJNyrJ3jyLg3Vye834.roa (hash: BKU0s1AFVfjoQBSMzARmXiXP2HsCC4PJttRceRONfMI=) 11: MDIbS6sEXbMo4ibcLekhzijIjYY.roa (hash: 7iIxmTu02d89hGoTIMu/80TJLS3BqGKAagC48ze8HTo=) 12: MtRudBwfeuM_gV5Rxs2GMGZwQ28.roa (hash: jyZOCTzazS4hZAS8vXh55e8wdvGkjLOC1l/j4Cldlkk=) 13: MvceJYeC7exu39P-KklGzIhKezo.roa (hash: l7CWLK2x2ygZPduMunzZSQp+ZhD4hpMbVwc9AxPKUD8=) 14: OctDu_DWJM_ePhGKcxjKDU812B4.roa (hash: 8PSwDnEoVXcVpWULLxMU/tnZb/t/w988BD3T8r1Vyqk=) 15: QB5_xxRGXCHsGPaKE_F_HuFsFXc.roa (hash: e7wfZoRrHPAl9YgBZA9mESSygC6N1gWRWhEiStosBqs=) 16: QqVG_Jig1AWpsZjXM3ozkcck_rk.roa (hash: cuOJ8bahzoMT5MnSdXLE/ebuIEkibnbU4Phcnk8deko=) 17: RdFk8pqwtmhHw2UX4x0rgDjdvVg.roa (hash: UfFtH0Qa2ULdo2eWM4CXCIXafZmQBAeqkERPoGsE9DY=) 18: SlBCxI-Gr8RZUcWFdhLWCcmpICs.roa (hash: JIPe6vhu+AxbOSgeBUS8yHnoK/5rZWIA9A3Gij3IhXY=) 19: T8DiPd4COZAMrM15dsDMZh3-46k.roa (hash: FLVoIftsSDw3XycsNixyrK2164vfuETBh8sALFOAFvo=) 20: YKuzm8eZ5thjoG3YWlLmGyis6Hc.roa (hash: lRlLqWarJKTArL8I3Oh3IGUAjFaJLYWsMsfvgIvdCEk=) 21: ekzy4TbSmKoAngHD6nt1XvIY_kg.roa (hash: S4bTYJiZvd+MIyq2CNE9A391k97deJn0Ljqufvr/oI0=) 22: nBGaxHS4njnBuZih8vNGsp1DG9c.roa (hash: XLGWBSyFNOz/Nq0CINiB/5Nx/Ff5JQHbqxgQoHl8pY8=) 23: obljm5gfRN-n2SKdDY2NA9WVkYE.roa (hash: iEb0cLJOJn58raI44T/QYZh9dLBRwT4473VAczsApI4=) 24: uF1fzkxS1dvB384G_6ACG-gahqw.roa (hash: /0hDj28NRbF23VkEh2wmxEvtyGKZo3nN4bNoYlxvanE=) 25: uiEwRDzyo2IATe2UZ8J34lJkwOQ.roa (hash: qd8Q/scpzUgFvAn3rGCEs42W3qdpmfptd5u2EgNgXK4=) 26: zgvcOUimolOfc-2snaZEdo8wyhc.roa (hash: S2xJZFbuR+fVbmsKnaewbJdRcVJWvtsi5rfDD2/PNaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 09:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:74:50:5a:38:f1:3f:f0:8d:5c:89:f2:c9:e2:3b:6e:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e Validity Not Before: Aug 4 09:01:19 2025 GMT Not After : Aug 5 09:01:19 2025 GMT Subject: CN=636926fd50779ceae09ee15f67d75e966f4ce985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ba:f1:53:a3:bd:01:38:f7:87:8f:62:62:8a: 16:23:49:14:e0:c2:5f:84:4d:32:78:6e:b1:ca:47: c7:56:39:da:93:75:79:fc:c8:7c:59:33:53:b9:e6: 29:8c:b6:7f:96:07:9f:1d:a1:6a:b5:7c:64:37:10: f3:26:4d:10:75:ad:25:f5:31:ff:3d:58:52:ad:5e: 2e:eb:b7:f6:b1:ff:d6:70:f0:5b:30:f1:cf:8e:02: c5:76:1a:93:b6:fe:b0:47:71:ef:3c:a1:89:cc:78: d4:f7:7d:8c:d0:c1:95:63:f9:77:f4:0f:28:28:96: 5c:13:77:79:49:e6:16:35:d5:9e:4e:7e:38:be:0e: b5:79:b8:b2:37:d0:4b:c9:c9:53:2d:22:6e:29:8d: e4:93:de:c6:95:f2:9e:a7:d1:80:3f:37:01:45:c0: 45:29:f1:3d:d0:f8:63:57:1d:0a:b5:bc:d3:01:93: 59:58:92:a1:58:45:65:b8:0f:da:58:39:1c:fc:55: e2:58:e8:a2:a9:15:59:87:30:71:94:b3:5b:4c:c8: f2:43:9a:09:18:fe:89:72:fa:77:fe:e5:55:a5:50: f4:a8:2e:a2:00:58:d1:fa:59:b3:a6:c4:32:65:b4: 8f:1e:c1:b2:95:e7:e8:ee:e1:c8:bc:ed:50:8a:f5: cb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:69:26:FD:50:77:9C:EA:E0:9E:E1:5F:67:D7:5E:96:6F:4C:E9:85 X509v3 Authority Key Identifier: keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:fd:b0:1a:2b:37:f3:b7:04:ba:c9:2f:40:15:70:13:d1:d4: 17:1e:11:69:19:60:57:87:9d:42:b1:ea:df:ee:ef:95:10:de: c2:63:41:89:32:3f:5f:82:2a:01:cb:fe:8c:dc:5e:f4:41:fe: 40:bc:0f:3a:90:aa:e2:37:24:55:2f:0b:72:81:fd:8c:3a:2e: 48:be:26:ca:4b:36:fe:ce:6e:e3:c1:3f:df:86:49:25:9b:8d: 6b:99:62:e0:27:63:e2:01:ad:c3:ad:c2:73:4d:d4:c5:d3:e5: ef:c8:6c:73:0a:ea:1b:e6:62:d9:36:23:df:d8:f5:81:c1:4c: 84:dd:51:b0:e4:f7:b3:a1:aa:be:fb:73:de:46:dd:f0:6c:08: 04:5a:78:6f:4d:27:04:71:5c:bd:54:0f:fc:80:ea:44:52:80: bd:ad:36:35:87:7b:74:84:a9:60:e5:f9:6e:39:a8:ec:2b:3a: 2f:bb:26:36:65:92:f6:3e:67:f2:03:62:3b:b2:62:e6:85:2a: e6:81:65:05:91:3b:e8:c1:54:40:d4:ac:cd:c4:50:60:47:7f: 55:88:3d:7c:c8:fc:ec:8b:e0:de:54:30:94:34:f3:8f:38:10: 7a:bb:ef:5b:a7:39:b7:80:02:09:27:54:bc:a6:b0:72:0a:47: 59:65:f2:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh0UFo48T/wjVyJ8sniO24eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZjU0M2UyM2UyOWZiMDM3NDhkMDkzOTcyNmYzMGZlOWFm ZmExOWUwHhcNMjUwODA0MDkwMTE5WhcNMjUwODA1MDkwMTE5WjAzMTEwLwYDVQQD Eyg2MzY5MjZmZDUwNzc5Y2VhZTA5ZWUxNWY2N2Q3NWU5NjZmNGNlOTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrrxU6O9ATj3h49iYooWI0kU4MJf hE0yeG6xykfHVjnak3V5/Mh8WTNTueYpjLZ/lgefHaFqtXxkNxDzJk0Qda0l9TH/ PVhSrV4u67f2sf/WcPBbMPHPjgLFdhqTtv6wR3HvPKGJzHjU932M0MGVY/l39A8o KJZcE3d5SeYWNdWeTn44vg61ebiyN9BLyclTLSJuKY3kk97GlfKep9GAPzcBRcBF KfE90PhjVx0KtbzTAZNZWJKhWEVluA/aWDkc/FXiWOiiqRVZhzBxlLNbTMjyQ5oJ GP6Jcvp3/uVVpVD0qC6iAFjR+lmzpsQyZbSPHsGylefo7uHIvO1QivXL3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNpJv1Qd5zq4J7hX2fXXpZvTOmFMB8GA1UdIwQY MBaAFAv1Q+I+KfsDdI0JOXJvMP6a/6GeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMt YTM1ZmM0MzhkNGNhLzEvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMtYTM1ZmM0MzhkNGNh LzEvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkf2wGis3 87cEuskvQBVwE9HUFx4RaRlgV4edQrHq3+7vlRDewmNBiTI/X4IqAcv+jNxe9EH+ QLwPOpCq4jckVS8LcoH9jDouSL4myks2/s5u48E/34ZJJZuNa5li4Cdj4gGtw63C c03UxdPl78hscwrqG+Zi2TYj39j1gcFMhN1RsOT3s6Gqvvtz3kbd8GwIBFp4b00n BHFcvVQP/IDqRFKAva02NYd7dISpYOX5bjmo7Cs6L7smNmWS9j5n8gNiO7Ji5oUq 5oFlBZE76MFUQNSszcRQYEd/VYg9fMj87Ivg3lQwlDTzjzgQervvW6c5t4ACCSdU vKawcgpHWWXyLg== -----END CERTIFICATE-----Generated at Mon Aug 4 14:00:35 2025 by rpki-client