$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft File: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft (raw, json) Hash identifier: SOzju7lxbVaPG2yGTr6fc9Lj8nf3y4nOEjMFt0h/dqc= Subject key identifier: C9:DB:27:FC:D6:87:58:CB:63:ED:9E:9C:89:3E:D2:5E:62:CE:3D:F8 Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Certificate serial: 019874F510BB652C5C6571553B79BACA5016 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft Manifest number: 1024 Signing time: Mon 04 Aug 2025 12:01:14 +0000 Manifest this update: Mon 04 Aug 2025 12:01:14 +0000 Manifest next update: Tue 05 Aug 2025 12:01:14 +0000 Files and hashes: 1: 1sKE36lDWeWUjMSloo6n26lQvxE.roa (hash: 0YFmLsRRla2daPn9GavHfi/iWCjcjVBR51fAM/YzUPA=) 2: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl (hash: RDd9p/Z9DEb0Hbvr2UYtfkFb7YXPTLxfX8iOs+A3WAI=) 3: 7KfLp6tWihAhdW_ZCJGaxH-KxhA.roa (hash: TNNFwSmMyWVi4jN+jvMQ3wmmO3p3q2BXU7y9CZpeBFo=) 4: 8GeGNNzjzZvJIEAAhJi9tW2bbrA.roa (hash: Eto9TySCaxnkkdyIGeX6PMXh8s89OGTNecNbv02FHmY=) 5: BinZKeyg5gKkO8gwYJ0Ze8CeRxs.roa (hash: y9nENbUlBNsJYj+Cw11EQBzVD35m8OwMSWBUyRfdWao=) 6: CWwZKtjic8hgoUqW8Q2C2AbAOcg.roa (hash: kwrireSUCM8B5X7b/jFwe6owVISrGhqj47+KxFuhlXE=) 7: JS3mwrKoM_bu1YlMg44SqBJyzi4.roa (hash: FctYPf15GQv8egu27KZUZZfAkIishBp5/PDkotJF9Wg=) 8: ZH0QvaHOPvJPYEbUbSGF-chYfuI.roa (hash: GNpLUKAR49JusHGuTxHkn0FssgkY3qDBV+p8eW6v2dA=) 9: biowetcg3ehch8_ZT-Bjgdr3xVQ.roa (hash: +3UkGpMA2we3DWKym0QAg124Kd/FTF+tUn4YLgIyHpE=) 10: gmGmlBXuT4XMadwFIMM_Ru7A8rY.roa (hash: C02/amx+lTSpWSc0IFfRlXGRMUsC7V5LK9TrUNGhpXk=) 11: j0duG-Ijddau9Fj9XQZGhj9d5E0.roa (hash: jAtA5pws2q4wQ+M2hNZZyClsEg5rjHmu2VOiOpDAE88=) 12: mP8Qz54E01SquciLEGB10XN2R-M.roa (hash: TdXFl7ZveLTgT4OrOlqkJ84pFNT0T+LUDZ5933YP0mE=) 13: suXcRzS6-_4AE_w0ZJlYPW8wMRM.roa (hash: +PBYO+10etR0ZMMQ1FwMVF/GjPtirIZFSfWGb9cD2rU=) 14: yRlATHfw4VPtk07WpZ6YJCL0ujk.roa (hash: qFhl3+M+zqPL0w/p5+UX5EFi+fLod6eaZpO9ZGTbXcw=) 15: yVFu2BG-2jPO42o54RBasvcduFQ.roa (hash: 6xPh274P2CTFpVhbpm7wdZ5x4IvYPBNr1EUV4XIfsgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 11:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:74:f5:10:bb:65:2c:5c:65:71:55:3b:79:ba:ca:50:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Validity Not Before: Aug 4 12:01:14 2025 GMT Not After : Aug 5 12:01:14 2025 GMT Subject: CN=c9db27fcd68758cb63ed9e9c893ed25e62ce3df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2c:16:bf:ac:d3:51:d7:4b:e7:d6:e0:0f:55: 99:10:0a:d0:eb:75:f4:a0:23:ae:38:52:4a:38:b1: 5b:fe:ba:57:61:9b:cc:9b:94:2d:57:20:b6:09:d6: 48:46:d5:9c:31:48:e2:7b:8e:0d:d7:48:ac:5c:a6: 05:c5:12:88:93:21:83:e4:33:a7:bb:e0:6b:e6:f4: 7a:d8:fc:2f:d6:03:58:30:41:be:c8:ec:15:a7:ff: 9c:5a:4b:ec:0d:6c:81:19:ab:6a:a8:a1:43:33:55: 85:76:12:e6:62:e3:3a:fa:9e:49:5b:75:b5:46:62: b6:c7:2f:9e:e0:19:b5:c6:4a:fc:56:1c:d6:0b:a3: b7:6e:00:9e:5d:57:62:fd:d8:b0:54:b5:4a:2a:99: 3e:e3:8b:66:ea:01:f9:fe:bf:a0:7e:d5:0a:0d:7f: 73:02:04:57:33:06:6f:7a:d1:0d:1d:9e:c5:9f:84: 29:2b:f0:c4:18:0a:00:c4:ec:6d:10:0c:7e:27:3a: c5:58:3b:49:5f:e5:a5:1c:0d:9c:0d:ca:8a:c0:6d: 9e:e3:87:aa:22:4c:e3:84:e4:76:0a:25:82:bb:a5: 43:92:e9:2f:34:7d:10:94:88:5d:38:65:9a:00:4b: a8:01:a3:d2:44:9f:91:1a:b1:c0:83:6a:23:ae:99: ac:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DB:27:FC:D6:87:58:CB:63:ED:9E:9C:89:3E:D2:5E:62:CE:3D:F8 X509v3 Authority Key Identifier: keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:77:e0:3f:10:9e:b3:22:a1:a5:cc:62:96:11:ed:45:ce:be: 6b:4b:b2:97:b6:e4:6b:9c:16:83:fb:6e:48:27:f2:26:2a:8a: 49:39:cf:f2:e0:a8:7d:13:8e:85:2a:61:30:d7:12:30:59:ab: d9:d4:ad:52:98:81:d0:37:6f:9c:11:f7:82:36:ae:98:7f:09: e7:69:e8:4e:de:55:5c:6c:28:cb:f8:c1:3d:10:a9:10:26:e6: b1:04:2e:7f:21:09:53:49:92:c8:24:87:ab:82:6f:74:0f:7d: df:af:5e:f4:4c:66:3e:a8:92:63:5b:ec:2c:75:df:76:fe:69: 99:05:b5:01:02:24:12:af:cf:c6:2d:f9:79:d8:37:ac:a1:5a: ee:74:05:ad:39:8f:3d:61:09:d1:de:60:d4:95:06:02:d7:55: 0c:49:b2:90:be:38:0f:e4:05:b6:73:59:9a:c8:3b:7a:58:6c: 8b:c7:9d:46:77:2b:a3:18:96:c3:93:fd:17:eb:28:9f:21:63: 55:5b:bb:61:39:8e:bd:e2:f0:a0:c3:3f:e7:6c:37:e2:a3:3e: 34:06:bb:ab:c0:70:c9:7a:31:1f:8a:8c:66:23:04:f7:92:48: e5:c6:da:1a:b3:fe:12:72:74:7f:b7:fd:9e:f1:f0:f7:d7:11: 5e:31:97:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh09RC7ZSxcZXFVO3m6ylAWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm NjljZGEwHhcNMjUwODA0MTIwMTE0WhcNMjUwODA1MTIwMTE0WjAzMTEwLwYDVQQD EyhjOWRiMjdmY2Q2ODc1OGNiNjNlZDllOWM4OTNlZDI1ZTYyY2UzZGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SwWv6zTUddL59bgD1WZEArQ63X0 oCOuOFJKOLFb/rpXYZvMm5QtVyC2CdZIRtWcMUjie44N10isXKYFxRKIkyGD5DOn u+Br5vR62Pwv1gNYMEG+yOwVp/+cWkvsDWyBGatqqKFDM1WFdhLmYuM6+p5JW3W1 RmK2xy+e4Bm1xkr8VhzWC6O3bgCeXVdi/diwVLVKKpk+44tm6gH5/r+gftUKDX9z AgRXMwZvetENHZ7Fn4QpK/DEGAoAxOxtEAx+JzrFWDtJX+WlHA2cDcqKwG2e44eq IkzjhOR2CiWCu6VDkukvNH0QlIhdOGWaAEuoAaPSRJ+RGrHAg2ojrpmsuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnbJ/zWh1jLY+2enIk+0l5izj34MB8GA1UdIwQY MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt ZGQyOTRjMzc4ZjZjLzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbHfgPxCe syKhpcxilhHtRc6+a0uyl7bka5wWg/tuSCfyJiqKSTnP8uCofROOhSphMNcSMFmr 2dStUpiB0DdvnBH3gjaumH8J52noTt5VXGwoy/jBPRCpECbmsQQufyEJU0mSyCSH q4JvdA99369e9ExmPqiSY1vsLHXfdv5pmQW1AQIkEq/Pxi35edg3rKFa7nQFrTmP PWEJ0d5g1JUGAtdVDEmykL44D+QFtnNZmsg7elhsi8edRncroxiWw5P9F+sonyFj VVu7YTmOveLwoMM/52w34qM+NAa7q8BwyXoxH4qMZiME95JI5cbaGrP+EnJ0f7f9 nvHw99cRXjGXXg== -----END CERTIFICATE-----Generated at Mon Aug 4 13:56:12 2025 by rpki-client