$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft File: rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft (raw, json) Hash identifier: 7JA+Xzpgs1b63brwV0YHCOdzVIldHVz64+QW4AiNegY= Subject key identifier: D6:2F:3C:08:61:D9:2C:93:42:C3:E2:AC:8E:E9:BC:65:79:AF:79:58 Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Certificate serial: 01987C772C038B7E60AA43F64F88EA1B99B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft Manifest number: 1660 Signing time: Tue 05 Aug 2025 23:00:41 +0000 Manifest this update: Tue 05 Aug 2025 23:00:41 +0000 Manifest next update: Wed 06 Aug 2025 23:00:41 +0000 Files and hashes: 1: 0SyYaQgLQzTmHyjwALNgjgW6Ips.roa (hash: 9FZRGxKEG0jtfYGiry8IM0OKO6/JFkO8TxODVgljdw8=) 2: 14T-yR595pYQLnI4P4fbXUmbkNI.roa (hash: ujAl/ku+dkQ5mGeO+VIy0fpmzvNm5EBe8cbs1OH3tig=) 3: 1oM3GP4XRi0mqDBcN0k0C4RTdHY.roa (hash: Eqko1gSCAK/Ec5hGsjBzpPB0Hmmto77uxcqKM6nkuos=) 4: 4rBl4Xgj-eyO-Qb6KkYRdP_q3yA.roa (hash: 9Fg4JBY24DsNxM7h9nmxlQnxm85kk0BWdXCDra924l8=) 5: AkuNATViTFoUsLRTBmxq5TZta1U.roa (hash: +ALe8BR6dBzO5s8AWGnd/n4M4kjwqZrGPKmd2bf8aB0=) 6: D-_QiVeAYymMyrqyEwwxZVlJ77w.roa (hash: pLHDIfQfn00HxVAd67SY9GUFCYPJH9fT0t4z495xhcU=) 7: I49sO32imbdn9nfJ0l-il2Ef_jY.roa (hash: k2Ksa8ZIkYwAdo7qnIBXutPiCFJfdjd5EjsrD8efaro=) 8: JWGGkRuJCVyXIJf7U_Tllx9GvLo.roa (hash: q2mwtM0pyYItD49ctwOqLjVJYv5g0mJ64QH0B7oRSCM=) 9: PQ4JRK_v8Rb4S6Y1Hjjg1mh8-RM.roa (hash: 6S6SDi+NoevpWtxjp+Phs+mUreAi/RCvfLId1bbLsWc=) 10: SHESx2HqUfWZxboQ6jP2hImYKmU.roa (hash: OlCdziBdwRc0FY5ejIFVQ8Nt867ISEKKLNxKfPnLzFA=) 11: TevPA31zpqIvq6GeQSDxtNa30UQ.roa (hash: 2nDbpMbvjKPaiiXiHqb4sCzw1FXoCOAaM9XlGLGbhC8=) 12: U2a4Mi5anG6MoVx-kSkOlCHuZ9U.roa (hash: WzVg8UcZ00h0mbpXiGBDaneFB3IZyzn0LFRbQNJ9OXc=) 13: UU4qmywXJeD0s-bEtA06YqQJbXY.roa (hash: U8vbKeUDnyxjI4tldoiMN64co7xQZg9nWw+wDHbmz3c=) 14: bHfPn3msgwx5FPQ-Adt7HpQNCIk.roa (hash: mn8L9NM8fYmycQe3GG9bUyJmLWRnJsF0fPb8aD5LaTM=) 15: bicuo27VbekDKZ2baxGyIAeBOBw.roa (hash: SWEpCpnN+xzcUkxLs6Bt4xTFqOqzIoS1IpAm8o8Z7uw=) 16: cbX3FwOgi9rS1ENe_k5BLCxVdg4.roa (hash: 35j9cePlwM12en+EIoj2uwLnq2TReRAiO2SX/9vwgDk=) 17: icTWsoKn_xk3KExZZn417x-Qv84.roa (hash: o9OMiruJYKHV5Ad+C6iuA4/zkZ1aBjsbg8MEUFVbq0o=) 18: nwRRU278nZ-OoZkxunLEdDGvAcI.roa (hash: XtojZB9yoPUFiPBHYDNCJYd8iy1TyLCfmu2Ry8BmvwU=) 19: pTp6RUrUCMxAVwwEyObJoI9FgUo.roa (hash: 31GS9EncPmPzR2DkvO+/C4bnToRE3RwTxUOXXgxEo7c=) 20: rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl (hash: TgvNW+UeDlJPlo7dwkd93VfvaDzN6yyMG4HoGmlaqek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 23:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7c:77:2c:03:8b:7e:60:aa:43:f6:4f:88:ea:1b:99:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Validity Not Before: Aug 5 23:00:41 2025 GMT Not After : Aug 6 23:00:41 2025 GMT Subject: CN=d62f3c0861d92c9342c3e2ac8ee9bc6579af7958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a0:96:ee:b2:80:0e:75:9d:1f:a6:4c:9d:66: 57:f2:5c:38:aa:01:26:3e:ba:2a:fd:e7:ca:1d:fc: f6:01:8c:ef:51:bc:bd:31:4c:87:f0:e8:fd:63:13: 11:8d:bd:ac:9c:a2:22:ea:b6:dc:9b:f9:29:ba:06: 70:50:75:a4:07:5f:5f:5e:b7:8d:22:38:80:96:03: 0e:fa:b9:96:c0:01:8b:2f:f6:a1:da:88:ae:c1:52: 22:73:86:ad:e6:a7:0d:23:7a:13:3a:47:a6:fa:59: a0:ca:5f:64:26:3e:f2:83:74:27:70:fd:fe:f3:64: e8:18:70:e7:e1:5f:b5:eb:5f:a7:a5:a5:75:91:99: 1b:69:73:e9:a2:1e:db:08:a7:79:79:fb:45:22:3c: 1e:a0:c0:b9:7c:32:45:16:1c:64:28:8a:92:4f:d5: 93:83:dc:5a:24:5d:51:b5:88:33:52:a7:b1:9e:72: cc:d2:43:c4:99:5e:1b:8e:8d:81:1f:1c:0c:bc:cc: 3c:69:1c:16:b3:3e:29:cb:22:14:41:dc:72:bb:b5: 62:df:5d:e4:2b:03:79:07:87:a3:63:6b:92:87:6e: fb:fa:28:09:0c:be:c5:5c:18:64:54:8e:d6:ec:66: ef:de:3c:f8:e8:ab:6e:54:61:88:93:3b:71:5f:83: 12:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:2F:3C:08:61:D9:2C:93:42:C3:E2:AC:8E:E9:BC:65:79:AF:79:58 X509v3 Authority Key Identifier: keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:f3:03:dd:88:50:06:82:26:46:c4:f4:23:18:fc:40:43:4b: 04:7b:3f:6e:23:fd:34:b1:49:f7:e1:d5:ae:7f:00:18:da:63: 17:c1:a5:c3:54:2d:ab:5d:b7:ce:40:a9:4f:c6:b7:b1:fd:57: 31:71:bc:1e:9e:9c:f2:c9:ec:90:7f:fd:bf:5e:19:e4:3f:f2: 08:7a:8e:83:bf:09:07:c5:f9:c2:5e:c9:4d:d6:48:a0:64:a6: 7d:ff:8f:81:65:be:55:83:ea:1d:c2:84:66:63:0f:61:68:62: ce:ed:8f:ba:74:82:a6:48:92:32:f2:89:1e:43:6a:c1:f8:87: 4f:51:aa:d1:86:a7:f7:43:e5:89:dd:1a:03:7b:2d:48:bf:81: 38:61:99:9d:c8:a7:2f:39:93:24:3d:31:41:18:30:8b:73:ea: 7a:d5:3a:dc:9a:e8:88:ed:9a:20:50:52:1b:f1:2e:ab:3f:78: 54:a9:fc:03:08:7c:d3:ae:58:e9:03:8f:6c:15:bb:a5:81:87: b5:72:73:51:74:d4:07:b4:62:b7:8b:55:09:e9:8f:34:87:02: 1b:9a:50:57:30:08:b6:4a:8f:51:f9:05:eb:c7:ce:1c:2c:c0: 65:7b:7f:26:1d:ef:27:f4:bf:44:93:bc:32:da:f4:14:c0:7b: 5d:85:97:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh8dywDi35gqkP2T4jqG5m0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3 MjAyZDUwHhcNMjUwODA1MjMwMDQxWhcNMjUwODA2MjMwMDQxWjAzMTEwLwYDVQQD EyhkNjJmM2MwODYxZDkyYzkzNDJjM2UyYWM4ZWU5YmM2NTc5YWY3OTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aCW7rKADnWdH6ZMnWZX8lw4qgEm Proq/efKHfz2AYzvUby9MUyH8Oj9YxMRjb2snKIi6rbcm/kpugZwUHWkB19fXreN IjiAlgMO+rmWwAGLL/ah2oiuwVIic4at5qcNI3oTOkem+lmgyl9kJj7yg3QncP3+ 82ToGHDn4V+161+npaV1kZkbaXPpoh7bCKd5eftFIjweoMC5fDJFFhxkKIqST9WT g9xaJF1RtYgzUqexnnLM0kPEmV4bjo2BHxwMvMw8aRwWsz4pyyIUQdxyu7Vi313k KwN5B4ejY2uSh277+igJDL7FXBhkVI7W7Gbv3jz46KtuVGGIkztxX4MS+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYvPAhh2SyTQsPirI7pvGV5r3lYMB8GA1UdIwQY MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct YzUxNWYzNTRjYzVhLzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlvMD3YhQ BoImRsT0Ixj8QENLBHs/biP9NLFJ9+HVrn8AGNpjF8Glw1Qtq123zkCpT8a3sf1X MXG8Hp6c8snskH/9v14Z5D/yCHqOg78JB8X5wl7JTdZIoGSmff+PgWW+VYPqHcKE ZmMPYWhizu2PunSCpkiSMvKJHkNqwfiHT1Gq0Yan90Plid0aA3stSL+BOGGZncin LzmTJD0xQRgwi3PqetU63JroiO2aIFBSG/Euqz94VKn8Awh8065Y6QOPbBW7pYGH tXJzUXTUB7Rit4tVCemPNIcCG5pQVzAItkqPUfkF68fOHCzAZXt/Jh3vJ/S/RJO8 Mtr0FMB7XYWXvg== -----END CERTIFICATE-----Generated at Wed Aug 6 09:31:34 2025 by rpki-client