$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft File: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft (raw, json) Hash identifier: eN7pzT2zXtXjdWdaBkjtegXbGRSJJuazjqNVvhb3v6U= Subject key identifier: 4F:79:88:2E:77:B5:1B:B1:88:23:43:C5:81:B9:55:68:79:DA:38:CF Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 Certificate issuer: /CN=255876412d20fbb6cab823481782ac47703b4404 Certificate serial: 01988655F25F220A28566FFBAFA78416AF1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft Manifest number: 02F6 Signing time: Thu 07 Aug 2025 21:00:35 +0000 Manifest this update: Thu 07 Aug 2025 21:00:35 +0000 Manifest next update: Fri 08 Aug 2025 21:00:35 +0000 Files and hashes: 1: 8g-49_qQ3fcAAr8ogKNyJYRIsqM.roa (hash: YUM8nQydrUaGiZYWfH9e5CkG/0ZnMAVKiwEv7wrrmyU=) 2: HL_391YyhybjwJ74kNKee4Xme30.roa (hash: SKqvmhnXy6lVHKlIjthvO2Ffcm5YC3y5BAN0frkvak8=) 3: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl (hash: ocE3q8XcKjKbDBjMSiS5HZJRLTRAak8t75sjyWfDYN8=) 4: UFzq6HTzLsKXQDiIwbMVwsSvCKE.roa (hash: SkcdE34ZRnlvciguMZx89azOscHKjWKi4kmUM6ce2ek=) 5: Vf3C3nEL83KU-t7pLCkbgpiASsA.roa (hash: 6SosAmZB67F6Q5qUy5fWvfEJcjGr5qv93jKtlhRr2es=) 6: b37yA0vBw9z9NXOjP3ngOC-nsdQ.roa (hash: xnMkc8ma8YV2ulWTsjtILbYV33NvcPwQMYE2M0mdniE=) 7: evsBxqfpyH3zHvt0KdEDbPjJt40.roa (hash: vsA8eWY0hm6KpE4+4Kq5HkaUgEZIYMzjLRq48DP4yG4=) 8: hp0pLX_QGiWhiOhgc-g-g3McIzI.roa (hash: iRmxgVLqjy7bOiMWp10+U3a2wekQwe0YpGsmUpp/wOw=) 9: lwlNrqm3r8NOZc8muUo80fFlOeY.roa (hash: FfJzjpvXZQfdbT9Lc8mjBM1Q8TX5WkjUXsorwJal9Zo=) 10: pu4GRTEZI-DDS8alCpZhtqjD728.roa (hash: 4gymL9RPKKRX/UazcJNoKfCcQGjN640R8KkZ8YDasZ0=) 11: r6VOlpU6VgL1WVlEQKIIOdFJ6jc.roa (hash: qZ5211k3RJOzvqXcolh5rN4QAkWpCPQgoaSC1kNOR9w=) 12: zB7jZpVQ6_QohXb9Ts1uTCDa9vc.roa (hash: G92uGtD4p7P9jynyu17jJLaD0YzUsjPpS9i4T5WM4LU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 08 Aug 2025 17:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:86:55:f2:5f:22:0a:28:56:6f:fb:af:a7:84:16:af:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255876412d20fbb6cab823481782ac47703b4404 Validity Not Before: Aug 7 21:00:35 2025 GMT Not After : Aug 8 21:00:35 2025 GMT Subject: CN=4f79882e77b51bb1882343c581b9556879da38cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b5:80:ff:b0:d9:5f:46:dd:a3:aa:a5:4c:f1: 47:54:57:26:4b:82:98:51:28:76:32:58:48:09:99: 23:c2:ec:e3:b8:76:82:fb:5e:c9:36:dd:0b:7b:93: 7c:6b:a6:f3:24:fd:fb:e6:b0:44:13:ab:55:e8:36: 9c:9d:b4:92:65:c3:71:ec:57:90:30:31:4d:a6:a2: 57:c1:77:29:bd:e0:14:7e:3c:33:e5:02:77:43:d6: c5:82:ea:18:5d:dd:c6:bd:93:1d:0c:2d:ea:98:7f: 72:b2:19:33:2d:e8:21:c1:91:1d:3b:5b:87:b6:9a: ff:ba:7c:1c:56:34:d9:b7:82:ed:82:5a:8d:a8:c7: 08:d5:f6:05:7b:1b:dc:e9:f5:08:f3:cd:a6:88:b3: 35:d9:2e:6e:93:82:b8:42:03:c8:c0:16:88:87:16: 18:0c:c9:5b:cc:df:df:48:33:65:14:e6:f5:3f:ba: 27:10:20:16:9d:f7:d6:a5:51:39:ec:82:49:ac:81: 94:1d:f3:82:a4:05:7d:93:93:ef:52:8c:1d:1d:fe: dc:13:9f:82:1b:46:00:68:db:94:bb:6d:10:89:b8: ca:e7:e9:16:3f:9d:16:ff:a9:17:5b:f0:d3:6a:6c: 54:9e:07:e4:af:f4:5a:ad:29:e7:c6:5d:7c:38:0a: 44:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:79:88:2E:77:B5:1B:B1:88:23:43:C5:81:B9:55:68:79:DA:38:CF X509v3 Authority Key Identifier: keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:55:0a:89:09:ee:30:57:27:b4:9e:3c:75:a4:ec:d6:2b:2c: 93:9e:cb:cb:9a:9e:ce:29:f4:af:42:f3:61:5e:ee:41:19:bf: ec:b9:82:60:c8:63:c5:97:c6:42:16:c7:85:65:ed:db:d6:1f: 4f:8a:55:e2:d2:9d:88:44:eb:35:52:04:e0:7a:ac:a3:2c:fe: be:f1:9f:27:75:ce:21:4b:5a:d0:8a:78:8a:4a:c4:8b:1c:2e: ee:f7:1a:f6:5f:94:5c:23:cd:9f:84:31:7d:6b:06:78:3f:c6: e7:ea:35:ca:ce:be:2d:f3:7d:58:6f:e3:a4:14:37:96:44:e0: ac:2c:bc:a4:b4:88:1e:68:c9:89:c4:ad:14:f7:7c:36:7c:d1: 74:71:d5:4e:28:53:8a:ab:a8:1e:cc:ef:89:d1:43:d9:2a:aa: 52:aa:38:a0:3c:6d:1f:3c:69:73:38:6d:8f:91:ae:5e:0c:cf: 3a:31:76:7d:9d:3c:27:ee:ac:99:44:a5:72:e7:d7:77:01:ba: 4f:12:4a:83:50:9f:0f:85:88:a7:89:e5:72:d9:df:62:b8:37: 4a:6d:85:54:42:bf:a8:70:35:4a:68:c0:08:80:9d:22:50:74: a5:e9:f2:08:06:2b:55:3d:b4:a1:33:85:ab:e3:5f:eb:e5:ad: f5:9c:3f:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiGVfJfIgooVm/7r6eEFq8cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NTg3NjQxMmQyMGZiYjZjYWI4MjM0ODE3ODJhYzQ3NzAz YjQ0MDQwHhcNMjUwODA3MjEwMDM1WhcNMjUwODA4MjEwMDM1WjAzMTEwLwYDVQQD Eyg0Zjc5ODgyZTc3YjUxYmIxODgyMzQzYzU4MWI5NTU2ODc5ZGEzOGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbWA/7DZX0bdo6qlTPFHVFcmS4KY USh2MlhICZkjwuzjuHaC+17JNt0Le5N8a6bzJP375rBEE6tV6DacnbSSZcNx7FeQ MDFNpqJXwXcpveAUfjwz5QJ3Q9bFguoYXd3GvZMdDC3qmH9yshkzLeghwZEdO1uH tpr/unwcVjTZt4LtglqNqMcI1fYFexvc6fUI882miLM12S5uk4K4QgPIwBaIhxYY DMlbzN/fSDNlFOb1P7onECAWnffWpVE57IJJrIGUHfOCpAV9k5PvUowdHf7cE5+C G0YAaNuUu20QibjK5+kWP50W/6kXW/DTamxUngfkr/RarSnnxl18OApERwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE95iC53tRuxiCNDxYG5VWh52jjPMB8GA1UdIwQY MBaAFCVYdkEtIPu2yrgjSBeCrEdwO0QEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEt ODc2YzdmY2E0YjM0LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEtODc2YzdmY2E0YjM0 LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiVUKiQnu MFcntJ48daTs1issk57Ly5qezin0r0LzYV7uQRm/7LmCYMhjxZfGQhbHhWXt29Yf T4pV4tKdiETrNVIE4Hqsoyz+vvGfJ3XOIUta0Ip4ikrEixwu7vca9l+UXCPNn4Qx fWsGeD/G5+o1ys6+LfN9WG/jpBQ3lkTgrCy8pLSIHmjJicStFPd8NnzRdHHVTihT iquoHszvidFD2SqqUqo4oDxtHzxpczhtj5GuXgzPOjF2fZ08J+6smUSlcufXdwG6 TxJKg1CfD4WIp4nlctnfYrg3Sm2FVEK/qHA1SmjACICdIlB0penyCAYrVT20oTOF q+Nf6+Wt9Zw/5g== -----END CERTIFICATE-----Generated at Fri Aug 8 00:39:25 2025 by rpki-client