$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft File: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json) Hash identifier: 8ZEDugzyr3b+MDRmEYpOuRbPWg/9TfYmv4zV5szz3GQ= Subject key identifier: 8B:C9:58:94:96:85:35:37:34:B0:C0:7F:06:A9:46:05:6F:11:6C:EE Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Certificate serial: 01987D89E5F02D5BBB1603738A9CE2029709 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft Manifest number: 02B3 Signing time: Wed 06 Aug 2025 04:00:45 +0000 Manifest this update: Wed 06 Aug 2025 04:00:45 +0000 Manifest next update: Thu 07 Aug 2025 04:00:45 +0000 Files and hashes: 1: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: DdQCY7zgqeoxzvIerE9U6jlBbdJ/FH8AQCKWRuf4TFg=) 2: B0NZnOPP2h8oD-RNqJ-Ta2yq_Fc.roa (hash: hPfH3C1Uf5sAxbquvsid9TZ9qowMzn90bG/96XgZCYg=) 3: SO2aAnB4S5yHRruYM18XroAhS7s.roa (hash: Pz0dkuO54GBo11/DomEvI/BTZKCMV4IWlZC7klvn2ps=) 4: S_UvXYrcwi02mD9XS72xM5GP0XM.roa (hash: tDWixxPYWWKm64Sflrs16Hs5q2OnmoXj3QlJNoGIgAE=) 5: UF3Vre6C-2uWPd901r4ODYt5AHA.roa (hash: eNmvyxetTd0QVI6G0VkpJaSR8G25jRhf1MP+bDcaMic=) 6: _ZvG0PlF42L37wxQnyxCZfeMoAM.roa (hash: Z8GPW7jOAC9/r+ylozkesuGuO/RAGB5R1mOtBovFWng=) 7: jXLpkBBRrrRHjLoA0K-cw--pBrA.roa (hash: RDhF74MSc3oQL4ctthS0IBCNFsLyipPZpShGGlt9FTc=) 8: oZWWF5zyx5ocTW76AkaqmRcZRbc.roa (hash: Md76ioroY7UyB9QPN3x3zrcMAb6sqenqdiEF83Lxjww=) 9: wG4o-qI2-SFDukKFY7nO5neU430.roa (hash: yujHQG+kbMes0VhHuaufvfh3r/oBAVTjRJJ1+dXsMPA=) 10: zNBrt8b_ORyqQSO4aCrRbgzOM0k.roa (hash: JPrR5Q/6R3hbokDk+J7WmGsUILsQwl4oN4sTvCmroWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 23:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7d:89:e5:f0:2d:5b:bb:16:03:73:8a:9c:e2:02:97:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Validity Not Before: Aug 6 04:00:45 2025 GMT Not After : Aug 7 04:00:45 2025 GMT Subject: CN=8bc958949685353734b0c07f06a946056f116cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:16:d1:64:41:46:da:a9:39:eb:5d:bd:a1:24: 18:c3:ed:97:b5:86:0a:fa:60:5e:dc:ef:77:85:29: ff:88:cd:40:36:c6:b9:58:3f:76:a2:41:d5:91:c6: 64:da:78:60:0e:6a:a3:27:7b:c0:11:e0:85:7e:90: d2:4e:d8:c1:2e:c3:ee:b4:50:2b:3d:f7:ee:0a:86: 8c:47:1b:ea:04:05:82:be:47:bd:a2:89:33:86:47: f2:76:0c:4d:84:26:d7:e0:3d:9f:79:63:1f:ba:e7: 33:b1:f2:c4:1b:92:a6:2b:ad:b7:97:f1:8a:b4:ac: 0e:cd:7a:77:69:ec:49:fb:f2:52:55:bf:4f:7e:cf: 69:38:af:ad:a5:31:a8:29:14:eb:7b:83:12:70:8f: 9c:e0:6a:ba:67:9a:4b:cd:4f:3e:0d:84:a1:73:2c: cd:62:f2:c9:d6:9f:57:bd:cb:c8:67:3d:f2:19:5d: 84:9e:25:62:96:cd:bd:ea:26:51:cc:3c:b7:23:2f: e6:1b:f5:47:ba:db:07:0c:5d:91:e3:62:7a:ab:5d: 0b:35:a4:99:6f:13:7f:75:b7:07:5d:cb:8f:0a:ca: dc:93:23:e1:cb:dd:65:de:89:9c:e6:04:03:7e:5c: f6:2b:31:c0:ff:1f:06:d8:dc:c7:72:e6:2c:53:a0: cf:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C9:58:94:96:85:35:37:34:B0:C0:7F:06:A9:46:05:6F:11:6C:EE X509v3 Authority Key Identifier: keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:2f:dd:e6:b8:83:cd:5e:00:30:49:6b:93:ea:73:ef:32:65: 86:60:e6:6e:5f:55:7d:55:83:36:3c:f4:0c:75:cf:ef:f4:a6: a3:f4:e9:2f:3c:ba:eb:32:9e:56:c6:d7:8f:d1:45:de:63:c5: 7b:db:02:63:80:c3:2c:43:6b:41:55:0d:94:59:ad:1d:53:7e: 1d:fa:cc:2b:1a:18:72:d9:3e:a7:97:02:ff:53:aa:5e:08:c0: f7:6d:73:a4:b6:ca:e2:6a:c6:07:78:74:54:77:8c:d5:07:2d: 0f:52:e1:72:c2:9b:36:a2:1e:eb:44:27:a8:35:03:f1:21:8c: 01:04:9c:b5:3e:ab:f8:a1:2f:ed:34:92:78:a2:0e:35:f1:ae: c3:af:e4:83:40:8a:cb:ad:ab:b8:e1:2e:90:23:0d:4e:0c:25: a3:65:ad:67:01:4f:2a:10:53:9c:5e:fc:be:8b:d5:4f:ad:56: 6b:ce:f1:9c:ad:b6:41:e9:06:fa:00:3d:f6:51:de:7a:67:64: d5:b4:7d:b5:4c:da:96:25:8b:a3:81:ed:b3:b3:af:17:2a:a3: ca:6f:bc:6c:a9:c3:59:70:b4:81:62:6f:b7:d6:3b:e3:47:72: 3d:0f:ce:5f:e8:d4:b7:c1:d3:b6:39:55:65:ea:c9:a4:f6:ef: 4c:6c:e3:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh9ieXwLVu7FgNzipziApcJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw YjVjN2MwHhcNMjUwODA2MDQwMDQ1WhcNMjUwODA3MDQwMDQ1WjAzMTEwLwYDVQQD Eyg4YmM5NTg5NDk2ODUzNTM3MzRiMGMwN2YwNmE5NDYwNTZmMTE2Y2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhbRZEFG2qk56129oSQYw+2XtYYK +mBe3O93hSn/iM1ANsa5WD92okHVkcZk2nhgDmqjJ3vAEeCFfpDSTtjBLsPutFAr PffuCoaMRxvqBAWCvke9ookzhkfydgxNhCbX4D2feWMfuuczsfLEG5KmK623l/GK tKwOzXp3aexJ+/JSVb9Pfs9pOK+tpTGoKRTre4MScI+c4Gq6Z5pLzU8+DYShcyzN YvLJ1p9XvcvIZz3yGV2EniVils296iZRzDy3Iy/mG/VHutsHDF2R42J6q10LNaSZ bxN/dbcHXcuPCsrckyPhy91l3omc5gQDflz2KzHA/x8G2NzHcuYsU6DPLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIvJWJSWhTU3NLDAfwapRgVvEWzuMB8GA1UdIwQY MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt MWY1NDMxZTJhNWFmLzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOS/d5riD zV4AMElrk+pz7zJlhmDmbl9VfVWDNjz0DHXP7/Smo/TpLzy66zKeVsbXj9FF3mPF e9sCY4DDLENrQVUNlFmtHVN+HfrMKxoYctk+p5cC/1OqXgjA921zpLbK4mrGB3h0 VHeM1QctD1LhcsKbNqIe60QnqDUD8SGMAQSctT6r+KEv7TSSeKIONfGuw6/kg0CK y62ruOEukCMNTgwlo2WtZwFPKhBTnF78vovVT61Wa87xnK22QekG+gA99lHeemdk 1bR9tUzaliWLo4Hts7OvFyqjym+8bKnDWXC0gWJvt9Y740dyPQ/OX+jUt8HTtjlV ZerJpPbvTGzjLQ== -----END CERTIFICATE-----Generated at Wed Aug 6 09:27:34 2025 by rpki-client