$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft File: 5884hLeAB6Jdvi4s7wzHO2mSH4g.mft (raw, json) Hash identifier: wBDCv4gELboojeogrAYR+TQhPyStIz07LtxtoxPyLRc= Subject key identifier: 7D:5A:AA:7F:63:0F:88:E1:10:72:88:EA:85:5F:C3:72:DA:98:53:D0 Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Certificate serial: 01987C0A01967F511233126FBA36B7A8B83A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft Manifest number: 15D9 Signing time: Tue 05 Aug 2025 21:01:27 +0000 Manifest this update: Tue 05 Aug 2025 21:01:27 +0000 Manifest next update: Wed 06 Aug 2025 21:01:27 +0000 Files and hashes: 1: 0LDsu8q8BNCVXMdgo8IAmxRh6lg.roa (hash: G5jGPy0QrJ03EB2ETPwF643gtEqN7L0Vq2ZY/sUU8MU=) 2: 5884hLeAB6Jdvi4s7wzHO2mSH4g.crl (hash: xj26/P8jYdbPdbvM0SIRYwFG0TtUHoqq+jIJKk2AzRk=) 3: B6snV1O7L6xN7jjaiNZWbxtP82Q.roa (hash: Z+4+/9OXk8fDzA3Dm2Dl/g02UpTK3tqTpOQvWThJM1E=) 4: HZbbroSrq6QQVVgDTvkGOIg8CG8.roa (hash: PAIuto+Pct3SW5ZHIUtMXRjRllfD0Y9hcduQwRWTAAk=) 5: MYlZiK8j4I-CRpNK84XFADjqS_Q.roa (hash: sHYzc9/ggp3cDmlo2cdq6sgs+CvgzddIutlRUEG3Jro=) 6: OUXqqWfQTCMLecmZJOetX8nDJq4.roa (hash: sVR/luDbfjaWQ+Na2uxCSWiX3jfCtfpibuRPwKT8RuI=) 7: SNfpSksRdeq_X6alujKtqxhgfmI.roa (hash: Ma1Hn2WiNgfoHoDq7NgShnN2PavA2o6Q6gAsmbAJ6uM=) 8: Xxx-aLbVPMFeFACAuRgkyYhKGZ4.roa (hash: Qjsr5YH+eP1GQSztBosIVdbSouCX9Gvl5XQ/f3iIe+4=) 9: bFYSJ_I4YgMVW4I9mBgSvFA_y-8.roa (hash: H2VlaHHW6c4b4Aq4JHISuCEj338oIr6DsQEFdgqSCMc=) 10: fUwIM0sp1GFSdwqWjPbX7BRcPzQ.roa (hash: Xh0ESEMvO/UeKqHJNYyYyUnRbpIWXGZSxLiX7rQbHOo=) 11: k0HzLQZ3MkcTFmEAim7zDGvlvJ0.roa (hash: MIgwLKWyMzfqXe5kvbowxxxZvthjppNFiSW7cLd35KI=) 12: z2F52wGzH9BMrpqKt2YykAg8u8Y.roa (hash: bvYJ2BHirZKw/0tfOS28eGnj6Ugji4ZaJ639S6rbz9g=) 13: zBe1zgNHDCKtxdrkxgm3eBXCBPU.roa (hash: BXmYyj4eoSdWaSTfE6Ragmw+4eV3ZTlYx1CDpgMgYSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 21:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7c:0a:01:96:7f:51:12:33:12:6f:ba:36:b7:a8:b8:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Validity Not Before: Aug 5 21:01:27 2025 GMT Not After : Aug 6 21:01:27 2025 GMT Subject: CN=7d5aaa7f630f88e1107288ea855fc372da9853d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a7:83:db:5f:25:47:6d:80:85:fd:6b:53:35: 8f:84:a7:e8:d8:70:e1:9d:6a:a2:b2:4a:6e:fc:0e: 76:33:d3:aa:12:fc:66:63:5b:95:f0:ff:07:5f:3a: 00:d1:8f:97:b6:37:e8:e5:0b:a8:0c:52:f5:61:d7: 2d:2d:3e:8f:f5:aa:3e:4a:ae:de:73:d2:6a:aa:87: f0:14:39:53:07:e6:6b:e5:37:c5:e0:64:d8:89:c9: c7:b2:16:9a:29:a6:b2:fe:05:2e:0e:65:11:72:a9: 72:a5:4c:76:4d:01:5b:88:49:79:bf:86:f5:86:8d: 99:5c:57:b5:7d:70:03:75:ea:95:6b:4c:9e:a3:ed: 45:27:34:d1:20:7e:5c:9d:e0:a3:c5:1c:62:96:f5: a1:60:50:2d:a9:94:4f:27:fb:80:f8:3f:00:67:29: 68:67:2a:6f:62:d0:24:2d:6e:32:3f:ba:86:58:0d: ec:8a:58:22:e1:c3:24:30:53:46:51:b8:9f:ae:17: 43:1c:12:0c:52:da:7e:02:79:b7:6e:d7:13:a7:25: 83:9f:dc:61:22:54:e8:01:0b:11:18:96:5d:0b:44: fe:ba:6b:b7:c0:b4:73:79:8e:b9:ea:81:7f:b5:2a: 3a:c1:3f:fe:30:70:62:87:0c:ab:76:55:7a:f4:54: 7c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:5A:AA:7F:63:0F:88:E1:10:72:88:EA:85:5F:C3:72:DA:98:53:D0 X509v3 Authority Key Identifier: keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:35:01:fb:6d:6f:88:34:a6:33:72:3f:d0:3f:6a:36:01:9b: 64:25:c3:49:48:4c:b3:bc:e5:0a:0e:15:76:2e:d1:51:f5:d3: 86:7d:3b:83:4c:2c:72:8e:6d:ed:45:42:5b:1a:ca:94:16:0e: d6:20:f7:4b:d3:d1:98:40:64:37:9b:92:2b:fa:97:75:c7:66: 68:6e:33:c1:d9:79:96:c0:ea:01:4f:ce:93:c7:0b:76:49:62: 53:9e:10:b2:91:b3:3d:b0:eb:53:29:8a:70:09:9a:c0:64:37: 65:96:71:26:8b:bf:c9:9f:48:1c:21:b3:b5:7d:a6:44:17:2f: 2f:2b:5e:2b:79:1c:f6:56:51:a6:f1:6e:72:62:11:6b:73:02: 1f:4c:37:c7:e8:f4:71:04:5f:77:5f:97:cb:ec:ab:00:a5:78: 16:4e:a6:7c:a7:aa:3a:f4:13:b6:ee:3b:fa:91:3d:43:c7:02: 84:13:82:10:aa:79:c2:96:a2:46:63:53:86:a8:55:fa:e5:81: 33:2b:15:6e:f5:6d:3b:ee:0c:d6:40:1e:cc:0a:23:5a:2d:96: 6c:be:ef:29:c9:78:86:b4:3a:d2:64:2c:1e:33:88:ce:e2:a3: c8:e2:19:c0:78:03:01:ad:13:9c:71:5d:f0:f2:fc:df:5d:39: cf:4c:bb:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh8CgGWf1ESMxJvuja3qLg6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5 MjFmODgwHhcNMjUwODA1MjEwMTI3WhcNMjUwODA2MjEwMTI3WjAzMTEwLwYDVQQD Eyg3ZDVhYWE3ZjYzMGY4OGUxMTA3Mjg4ZWE4NTVmYzM3MmRhOTg1M2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6eD218lR22Ahf1rUzWPhKfo2HDh nWqiskpu/A52M9OqEvxmY1uV8P8HXzoA0Y+Xtjfo5QuoDFL1YdctLT6P9ao+Sq7e c9JqqofwFDlTB+Zr5TfF4GTYicnHshaaKaay/gUuDmURcqlypUx2TQFbiEl5v4b1 ho2ZXFe1fXADdeqVa0yeo+1FJzTRIH5cneCjxRxilvWhYFAtqZRPJ/uA+D8AZylo ZypvYtAkLW4yP7qGWA3silgi4cMkMFNGUbifrhdDHBIMUtp+Anm3btcTpyWDn9xh IlToAQsRGJZdC0T+umu3wLRzeY656oF/tSo6wT/+MHBihwyrdlV69FR8NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1aqn9jD4jhEHKI6oVfw3LamFPQMB8GA1UdIwQY MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt YTE4NGYzNTU2ZTQzLzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATDUB+21v iDSmM3I/0D9qNgGbZCXDSUhMs7zlCg4Vdi7RUfXThn07g0wsco5t7UVCWxrKlBYO 1iD3S9PRmEBkN5uSK/qXdcdmaG4zwdl5lsDqAU/Ok8cLdkliU54QspGzPbDrUymK cAmawGQ3ZZZxJou/yZ9IHCGztX2mRBcvLyteK3kc9lZRpvFucmIRa3MCH0w3x+j0 cQRfd1+Xy+yrAKV4Fk6mfKeqOvQTtu47+pE9Q8cChBOCEKp5wpaiRmNThqhV+uWB MysVbvVtO+4M1kAezAojWi2WbL7vKcl4hrQ60mQsHjOIzuKjyOIZwHgDAa0TnHFd 8PL83105z0y7gw== -----END CERTIFICATE-----Generated at Wed Aug 6 06:05:08 2025 by rpki-client