$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft File: C047O4QkIliGMULtOhl5LZfLvHQ.mft (raw, json) Hash identifier: BP9TAw0gDPesc2v9CG3B5RQhMRs4o7sO9fEPBEzBp/U= Subject key identifier: 77:87:FE:A6:AC:78:19:04:63:A2:0E:92:D9:A7:3A:8B:28:DC:86:59 Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 01988DA1C68203C10AA1319BEB6C4BA9F81D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft Manifest number: 02FD Signing time: Sat 09 Aug 2025 07:00:46 +0000 Manifest this update: Sat 09 Aug 2025 07:00:46 +0000 Manifest next update: Sun 10 Aug 2025 07:00:46 +0000 Files and hashes: 1: 1-l_gre_pxhYS4_zZwDxZG1Nt_5c.roa (hash: 79+LUQppQGCR1ma6gkDs/MxaDYgg8iUK7GVvWKXvzJ8=) 2: 4EVIucA70gYtRBC_kvd8S_jO4G4.roa (hash: f24fNYbERcDJzGGGVxLcXRg46QfyX7NJWLWSxrMNmcw=) 3: 5jJR8ex_Cu2DpLymyUyPZOMyOkE.roa (hash: xzEHQ5rCOad65DlaTD/0zOgecwAYSd4+GjZ0k61Ou6I=) 4: 6vUhZWGddxVPIIeeH6-Dbc9jpk4.roa (hash: WfzTHJzN03ulxZw9x6atlyLctl8HtDch71VvQgIPbKM=) 5: 6xBMykXleXyosV01BLEJTU6ypG8.roa (hash: ZdidGgqZmV19VuoUDkEoHJw8nogOkry2PBFmQAw+osI=) 6: BPQCE551jGC7AfZxENf1vLcZuQw.roa (hash: b4X/8S2+3tpuUpa3epnbHaVzUEealAaoYFbctbKomoU=) 7: C047O4QkIliGMULtOhl5LZfLvHQ.crl (hash: WPlC3xTZ8hQGjXiyWc8BY50HNF3DTFVZrlB3+YALLDQ=) 8: E0upJVXmvrb9QB1vHUoxxOXLw38.roa (hash: 4mhxGqIUoY4Bc+dX0kK4RcxfBAsMjNcaP7xXT7MwJUE=) 9: EvZmdpYLd03WERL_L0i0mrtj944.roa (hash: CV2qEuFjtfL/Sdsin89UXRGI8h47pjbkcQWbmiCWOHY=) 10: H49hyQPEQJXxJVi2iR8A2ADQ41U.roa (hash: eqi7i//uHcpOg1OfB0kupkpo9kTQKxZE6a6NNvU+Pyg=) 11: QqRdYAKP11yK_Y5Yoe1GlCLvPIM.roa (hash: B0QgrQfgkvXm7vAQLsl/pTmN0f26n576ETmzI38WdjE=) 12: S97KWPworM5fMEwl1G0g3TDdoRw.roa (hash: Zqf5Yiqvo63vOKpeH6n1ZW4niDUEVUw8iURK0euZ0sE=) 13: Tv3eHkTibu1-NKazXj-AMkMj7Sw.roa (hash: lHAqhVPifaQjD9rLTD+uDdEniFd0R32cYJ3zWnuqKHM=) 14: WYDhKvX3XAA22u3zmx5t7_eZGTE.roa (hash: pU6LgSkwwG4ehzshKxsB7E/uLzJdORsNAagXHUzBDD4=) 15: b7g_AfGKRKl1uxe-BoiQM3sl0nw.roa (hash: Zf9ZuQPGxN3TX6S4uzmoIy9WChIwMZZm6ZNHezb6N+U=) 16: bCaBS4aQHjuaa_tTVMTRXq8OR_U.roa (hash: 7H4q9uVHSlMkwQO5xRA3Q4nmZoDkIn1SJmtZoSSXixQ=) 17: bsbpbOfEUspT2FSFU7Dpjg5QFsw.roa (hash: 1S0gGuFvbVkAU0skMefR3m5Pq9v5mIgplTKpElL9/XI=) 18: i9pP0UdC60SIkPjAyVnRvnkLQpI.roa (hash: DCLA36TFrAK5MuagUyc5DT4JGQhrH1BUGZII4pznSfI=) 19: lzUrfdjvi4X0daNPvReXYlaxfUs.roa (hash: mmPPsLggwrEErlARtsPqmojwc7jNfBJKDlKr0vM/KnA=) 20: mrriTsp_r84VvXOZ9vwCDiafNfA.roa (hash: 237ftlrT6P/fqAsRok2Wq3N6bqs/PXVVGhXC7gyjJzY=) 21: qa2CW4uODzDkm2CmPACzVMfywlo.roa (hash: hm7X8GWW08mhXHAmgZF26ZoPtjwf8VScQbQBIGqBTN0=) 22: sbkxRvSrfQGNdpGANqUogURHroU.roa (hash: GVO8i7AC/aFii+I0dhy+QGbxHH4AqRNBV/o41DJJYK4=) 23: tra90j-TkDoNhw2jYUOuCLQtLHQ.roa (hash: rMHYa+7snR9OTOD/IZ29XHnehX6LzLjK9r4pNKm+rGM=) 24: uuTcIhmMVylXKoo0d8I18SaHjWU.roa (hash: a8ZKg1ASt06tQrhILg7SaB6+2r8ufbJSPrndEQoQ7X4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 10 Aug 2025 05:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:8d:a1:c6:82:03:c1:0a:a1:31:9b:eb:6c:4b:a9:f8:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Aug 9 07:00:46 2025 GMT Not After : Aug 10 07:00:46 2025 GMT Subject: CN=7787fea6ac78190463a20e92d9a73a8b28dc8659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:17:60:d9:85:84:08:34:40:53:56:f4:fa:74: 9c:3c:b9:96:78:0e:44:64:6f:83:80:b8:1e:98:11: 87:39:03:92:80:b8:71:50:c9:9f:37:94:4e:1e:4e: a0:da:58:b3:f3:ac:fd:4a:dd:5f:3f:f9:24:5c:1f: 2a:01:b3:50:67:2a:e0:1b:1b:2b:2b:0f:c0:b8:70: 78:97:72:61:53:b9:fd:9e:af:6f:04:25:63:85:9c: f7:ab:23:a2:5d:f5:73:b2:16:ed:e0:40:b4:02:fe: 94:11:50:51:59:a1:61:9c:52:d5:3d:45:c1:18:5e: 6e:f0:fb:bf:45:8b:90:d1:df:72:1b:4f:f2:d4:e5: cf:2d:c9:51:5f:7e:49:38:89:50:64:1f:cb:7b:b8: aa:6e:01:3b:f0:05:fb:3a:03:6a:5b:35:0c:a8:02: 21:e2:13:f3:55:4f:79:86:61:9e:e7:a5:66:7c:2c: cf:ed:a0:35:44:0d:b6:15:a7:ef:41:1f:2b:50:41: 7e:91:82:ef:75:e1:48:e4:ee:08:a1:1a:24:0f:ba: e7:51:4b:10:fd:fc:73:ec:9e:fe:87:6e:04:5e:1d: ab:99:de:98:7e:c7:ca:d8:0d:79:69:59:e4:49:97: b7:b2:0e:f0:77:82:96:06:f1:85:00:28:db:61:65: 01:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:87:FE:A6:AC:78:19:04:63:A2:0E:92:D9:A7:3A:8B:28:DC:86:59 X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:f3:ce:44:c3:2d:b5:17:d2:cf:04:91:dd:06:a0:ca:82:b6: ce:0c:5f:ff:78:9d:a6:46:3c:a0:08:ac:f4:8a:4a:dc:26:13: 9e:35:f4:5c:8f:ee:04:07:af:c4:5f:0e:30:3a:64:be:5a:a5: be:21:ff:f7:06:33:81:7f:79:af:9c:d9:a4:08:c7:f5:7d:5f: 5c:35:47:e3:08:77:d8:14:e9:ca:af:50:5b:26:fe:05:60:1a: 85:8a:65:c6:22:77:6b:a2:a4:5d:86:cd:54:ab:54:0b:77:12: 32:5c:50:b4:1b:4c:a1:9d:be:7d:e7:7c:8e:d3:a2:f5:c3:f6: 66:f5:12:e1:4f:cf:81:6c:e1:5d:45:6f:6a:86:ee:23:ed:85: df:c9:ad:73:f7:0c:c0:e3:8a:ae:85:f8:4e:cd:a1:1f:27:af: 4a:40:6f:16:19:67:f5:09:3c:b4:5d:d8:03:69:64:de:f9:69: da:16:af:19:b2:32:24:08:0d:ef:7a:8c:96:25:7d:0e:e6:99: 40:22:7a:e5:86:31:d7:b3:98:9c:e7:87:aa:08:e6:02:5d:6a: 41:6c:94:85:eb:67:b0:60:a1:b8:e5:95:a6:63:b1:74:a6:3f: e1:da:bf:39:06:38:2b:3b:f5:ba:c9:67:bd:e9:d3:d0:05:ba: 93:2e:90:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiNocaCA8EKoTGb62xLqfgdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjUwODA5MDcwMDQ2WhcNMjUwODEwMDcwMDQ2WjAzMTEwLwYDVQQD Eyg3Nzg3ZmVhNmFjNzgxOTA0NjNhMjBlOTJkOWE3M2E4YjI4ZGM4NjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhdg2YWECDRAU1b0+nScPLmWeA5E ZG+DgLgemBGHOQOSgLhxUMmfN5ROHk6g2liz86z9St1fP/kkXB8qAbNQZyrgGxsr Kw/AuHB4l3JhU7n9nq9vBCVjhZz3qyOiXfVzshbt4EC0Av6UEVBRWaFhnFLVPUXB GF5u8Pu/RYuQ0d9yG0/y1OXPLclRX35JOIlQZB/Le7iqbgE78AX7OgNqWzUMqAIh 4hPzVU95hmGe56VmfCzP7aA1RA22FafvQR8rUEF+kYLvdeFI5O4IoRokD7rnUUsQ /fxz7J7+h24EXh2rmd6YfsfK2A15aVnkSZe3sg7wd4KWBvGFACjbYWUBQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHeH/qaseBkEY6IOktmnOoso3IZZMB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPPORMMt tRfSzwSR3QagyoK2zgxf/3idpkY8oAis9IpK3CYTnjX0XI/uBAevxF8OMDpkvlql viH/9wYzgX95r5zZpAjH9X1fXDVH4wh32BTpyq9QWyb+BWAahYplxiJ3a6KkXYbN VKtUC3cSMlxQtBtMoZ2+fed8jtOi9cP2ZvUS4U/PgWzhXUVvaobuI+2F38mtc/cM wOOKroX4Ts2hHyevSkBvFhln9Qk8tF3YA2lk3vlp2havGbIyJAgN73qMliV9DuaZ QCJ65YYx17OYnOeHqgjmAl1qQWyUhetnsGChuOWVpmOxdKY/4dq/OQY4Kzv1usln venT0AW6ky6Qxw== -----END CERTIFICATE-----Generated at Sat Aug 9 10:48:24 2025 by rpki-client