$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft File: h74JMJcJfERX_1qj5Yk8jBVDJhI.mft (raw, json) Hash identifier: /eUzvSICo90JxjKNx37K8tophok5RgukkkvrOdmBsqc= Subject key identifier: 38:DB:3B:BB:D8:3C:1F:00:C6:18:9F:77:E0:A2:C0:B3:BD:F0:8D:4F Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612 Certificate serial: 01987C096969C70F7ACB2594CCACC94700F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft Manifest number: 12AB Signing time: Tue 05 Aug 2025 21:00:48 +0000 Manifest this update: Tue 05 Aug 2025 21:00:48 +0000 Manifest next update: Wed 06 Aug 2025 21:00:48 +0000 Files and hashes: 1: 58EBygRjdS7517jE8ijFSPfVOH4.roa (hash: 7YP7WUOPsrK23qXejFg0a6c2K8s3GbzwWCeuhRLXrr4=) 2: 6gQb_YrXJIkOy1ffV5AywwaDFKA.roa (hash: YBUcx/W2YYWfTW+ZfLh5vpIiC6jkcxCKGBt0nojo2Ok=) 3: CjTW9-CUmuY1lxZ8OqndS2FXSrY.roa (hash: 9DQ0LnRbHYpMYq+dl7Z0Jfv0Jx2DrmotGXluT5sxbiI=) 4: UYD_ol6L79u8glgaI6wKUZit3aI.roa (hash: Gf9BtC+mpY9FQr0OFj9WV8BSFzyS8ChMq/mXIibBTC4=) 5: YxuPih3fAlXVoEE31gDs9iD2i1w.roa (hash: x8butTOJLg1TuADmdhNJfjqeOtty4tQbuYOKyeZNAJI=) 6: cgfWhp9nnNlIFwxwBmM9ufcXLT8.roa (hash: d9o/0tEnmxkRdMrExtvCAvZnhgV08vpjue2h9xSnd5M=) 7: h74JMJcJfERX_1qj5Yk8jBVDJhI.crl (hash: HTKKbJaRmOAoAjOzY4db1bpK/prDR4UxJJv5PZ67hZY=) 8: jS9AN5oD9gr_onzGTzL8xf4_tCg.roa (hash: L5WRngdm8hXH1GtO9dblNyDW24uvtXBx7hO8Cv9i3R8=) 9: l73XbGk7c4j4MjyLCnCZ2AhSa5g.roa (hash: zN4KADzvP9RDaA1coLbTnlm7K8otMtISf3HRhyFdP4I=) 10: zDYhvUbelcRpqpslUbRSgUjh_fg.roa (hash: oMqhUHMRnzSTRY98vl61orkGgfrk9poSjKlRD++vvbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 17:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7c:09:69:69:c7:0f:7a:cb:25:94:cc:ac:c9:47:00:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612 Validity Not Before: Aug 5 21:00:48 2025 GMT Not After : Aug 6 21:00:48 2025 GMT Subject: CN=38db3bbbd83c1f00c6189f77e0a2c0b3bdf08d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a5:19:c7:ca:2b:f5:4e:b9:dc:38:fc:54:02: 2c:8f:53:09:49:39:f6:de:7e:26:d4:1c:15:8f:a0: 23:69:b6:fa:a9:e9:75:8b:4b:df:9a:e2:cd:e8:91: 36:a3:c3:53:4f:76:d1:61:a3:0e:0c:50:c8:77:f4: dc:70:12:01:80:f6:d6:b2:0c:03:66:7b:cc:26:68: 01:b4:49:d8:46:8a:ed:23:aa:1f:77:4f:93:c6:62: 91:c4:3d:cb:a1:de:7c:04:89:39:12:20:e3:f2:0e: ed:6d:7a:5b:87:0b:54:9f:14:5e:31:89:af:e4:ef: dd:de:89:ce:42:74:ea:aa:8a:a5:eb:a9:ca:2b:bb: af:5c:5f:39:c3:de:71:3a:4d:8e:28:47:58:63:9a: 2b:77:da:fb:1a:e5:f0:ea:55:20:2c:ca:1e:47:42: 8a:97:c4:86:96:de:58:c3:b2:03:a7:bc:c1:13:2c: 27:d2:43:aa:5b:ed:1a:32:3e:ab:d6:50:18:4e:75: 36:51:f1:52:8e:2d:2a:40:a7:37:2f:5f:bf:bf:f9: 73:b1:e9:da:72:43:bf:15:3e:3c:8e:50:7e:1c:46: 1d:ac:43:3f:2b:c2:a4:70:8b:b7:11:9a:b8:1d:88: 06:14:10:c1:fd:3d:65:f1:43:3a:a4:11:a6:45:de: 31:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DB:3B:BB:D8:3C:1F:00:C6:18:9F:77:E0:A2:C0:B3:BD:F0:8D:4F X509v3 Authority Key Identifier: keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:e6:5d:fd:fd:8f:2d:af:a6:c6:b2:d9:98:fa:c8:d3:38:6a: c2:31:d3:77:15:87:6a:18:a6:59:91:9a:ab:9a:65:81:dd:4c: 65:ed:61:d0:df:21:3e:32:06:d9:8b:6e:cb:24:4c:9b:2c:aa: 0e:ae:b6:54:3f:44:83:fd:c7:6d:74:d9:67:31:15:a8:e6:e8: d8:8f:16:a9:40:37:ad:18:5d:66:f4:96:29:2e:b6:a5:87:2e: 06:8d:0c:a6:62:cc:a8:fc:29:89:cb:d0:65:38:84:5c:62:e7: ff:23:18:a8:29:83:37:6e:06:99:ed:a8:9a:8d:af:d0:5d:68: f1:c7:dc:ab:2c:87:7f:e6:6b:8d:25:e0:47:b6:64:e9:a8:8c: 39:dd:21:6c:57:ac:c0:be:c6:0a:36:28:1a:7d:9c:e5:5e:af: a3:92:03:6f:0e:54:83:40:93:13:1a:2f:cb:b3:90:34:73:51: f2:04:13:ae:eb:d1:f3:1f:ba:59:13:f9:9f:58:52:95:29:bd: 9c:af:c9:3b:c0:57:fb:14:e9:88:d4:73:25:bf:d7:81:89:58: 68:a8:c6:ef:e9:01:f5:76:0d:ea:57:f4:6d:56:ac:e9:f4:09: bf:ef:22:34:bf:61:e0:bd:04:68:cd:81:75:e2:ad:3e:74:fb: f5:11:d5:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh8CWlpxw96yyWUzKzJRwD1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YmUwOTMwOTcwOTdjNDQ1N2ZmNWFhM2U1ODkzYzhjMTU0 MzI2MTIwHhcNMjUwODA1MjEwMDQ4WhcNMjUwODA2MjEwMDQ4WjAzMTEwLwYDVQQD EygzOGRiM2JiYmQ4M2MxZjAwYzYxODlmNzdlMGEyYzBiM2JkZjA4ZDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqUZx8or9U653Dj8VAIsj1MJSTn2 3n4m1BwVj6Ajabb6qel1i0vfmuLN6JE2o8NTT3bRYaMODFDId/TccBIBgPbWsgwD ZnvMJmgBtEnYRortI6ofd0+TxmKRxD3Lod58BIk5EiDj8g7tbXpbhwtUnxReMYmv 5O/d3onOQnTqqoql66nKK7uvXF85w95xOk2OKEdYY5ord9r7GuXw6lUgLMoeR0KK l8SGlt5Yw7IDp7zBEywn0kOqW+0aMj6r1lAYTnU2UfFSji0qQKc3L1+/v/lzsena ckO/FT48jlB+HEYdrEM/K8KkcIu3EZq4HYgGFBDB/T1l8UM6pBGmRd4xfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjbO7vYPB8Axhifd+CiwLO98I1PMB8GA1UdIwQY MBaAFIe+CTCXCXxEV/9ao+WJPIwVQyYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMt MmNkZTY1ZjMxMTJhLzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMtMmNkZTY1ZjMxMTJh LzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFuZd/f2P La+mxrLZmPrI0zhqwjHTdxWHahimWZGaq5plgd1MZe1h0N8hPjIG2YtuyyRMmyyq Dq62VD9Eg/3HbXTZZzEVqObo2I8WqUA3rRhdZvSWKS62pYcuBo0MpmLMqPwpicvQ ZTiEXGLn/yMYqCmDN24Gme2omo2v0F1o8cfcqyyHf+ZrjSXgR7Zk6aiMOd0hbFes wL7GCjYoGn2c5V6vo5IDbw5Ug0CTExovy7OQNHNR8gQTruvR8x+6WRP5n1hSlSm9 nK/JO8BX+xTpiNRzJb/XgYlYaKjG7+kB9XYN6lf0bVas6fQJv+8iNL9h4L0EaM2B deKtPnT79RHVUg== -----END CERTIFICATE-----Generated at Wed Aug 6 00:42:26 2025 by rpki-client