$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft File: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft (raw, json) Hash identifier: 7xulp6tZPi84XSRbBsOCS9tqy0jTi9vb0pJUg2LGTBI= Subject key identifier: 2F:E9:C3:75:C1:57:F8:64:44:93:BF:1F:04:59:8C:83:C2:00:AF:2C Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Certificate serial: 019874BE326A2C4D60749D37634FC33D1874 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft Manifest number: 1327 Signing time: Mon 04 Aug 2025 11:01:18 +0000 Manifest this update: Mon 04 Aug 2025 11:01:18 +0000 Manifest next update: Tue 05 Aug 2025 11:01:18 +0000 Files and hashes: 1: 8Fk9kDKNu_wHTuVpwQ1FTDYEEUM.roa (hash: R9lk1OKBJor+p6Fk8Cm9760Y52YkNlkiK4HwLBjauEw=) 2: LCMzGb8KK1XAn7ueElCREh4ehR0.roa (hash: 9Gw2b+IOeGIlGw5y7XNoxgCnQ7hXETrnIXJowIYGjqA=) 3: LShVVLJCwZTpOQVpRu4BHXCMY5o.roa (hash: qOW5Q7zU6W8XRrp7RUj6wZmvzkpmHb4NVAohhcOeaxY=) 4: bmuOfACYZiZOnCTz9ES9s06c_ac.roa (hash: kxF+XBYjW7ExfLjJidwuYPma+i/t1erJy7+ooTz+eSY=) 5: dqSVfYV4r9M8RMZopTNsSTKHeIY.roa (hash: XrN+1wwdRwyX8n7r+VHCtW4D45jLjIPlWVhNaBZnVwQ=) 6: h9mNIwplN3HJblv2au9Os6COmfk.roa (hash: MUN1yxszebSMcti0G9u7TeXrwfcHsFyRaIzpQnCM9XQ=) 7: mUZj0w-uWUstpfqo5cH06vK19uA.roa (hash: MzyNzzDoUFyK/QZw2a/+HQPhRLTClRfb/mdHjVRhByQ=) 8: r0mTEa6qt-IyELm4t03iQrSQvaU.roa (hash: 5O0ZRSkH9lwLC8LUcZsdLUDFOU7u/lNlnWwcFjFATOs=) 9: rHoYFPQ0T9Hef-z6s-pJ7i0yyQo.roa (hash: xQJ9yww4YSKaaEyQBdYXA5up0iEVqjr/At6e2xJMUB8=) 10: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl (hash: S4eoPDIlzvL3BVqtQI8a9wgPPxDbQgkuL2XYycMMcEI=) 11: vfYaTtc4brt0Ov1kx9oCUOHIJXI.roa (hash: eB+hXGbiqW76z1VHwcXpM+YfyI+lZHNYCy9KL7CJ5lM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 11:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:74:be:32:6a:2c:4d:60:74:9d:37:63:4f:c3:3d:18:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Validity Not Before: Aug 4 11:01:18 2025 GMT Not After : Aug 5 11:01:18 2025 GMT Subject: CN=2fe9c375c157f8644493bf1f04598c83c200af2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b2:37:b4:3e:1f:d5:f6:48:c5:13:ff:f9:e8: 46:90:c8:a1:d8:b5:7b:6f:a6:c9:ae:62:80:53:e5: aa:82:82:86:23:cc:d1:cf:9e:f3:c1:c5:97:70:0a: d1:14:17:88:77:2c:7c:0a:14:7e:03:0d:d0:e1:fd: be:e1:2c:dc:40:a3:31:55:20:f5:e2:13:7a:30:90: e4:b4:e7:08:5d:61:e6:9c:30:a7:df:1f:27:2a:d6: 40:92:f8:e6:76:28:c1:6b:2b:56:70:18:14:30:58: 20:05:f6:56:4f:3f:04:17:c4:bc:2a:a6:f1:3a:bb: a2:f2:6f:6f:9d:d2:84:a5:f1:5c:88:a8:8f:d4:e3: 1a:28:55:7f:a1:1f:31:3f:5b:46:bf:b5:0f:09:8a: a6:3e:0d:d6:f2:1d:09:b4:75:2b:91:77:13:bc:89: f8:a4:51:f7:ee:2d:2b:af:ff:9a:a1:48:63:f1:21: 35:ca:b3:1c:48:30:ae:89:19:10:5f:d0:a6:ae:76: 88:6e:1f:2d:a8:37:5d:50:df:81:1d:c7:79:18:6b: 99:00:2c:d0:e0:e2:e5:3f:09:92:1d:b4:e5:02:69: d3:56:9e:36:a3:6e:5c:b2:3f:90:29:c4:e3:b2:8f: 01:c3:ff:4d:8a:89:12:f6:d7:4f:ea:8f:0f:dc:cd: 4a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E9:C3:75:C1:57:F8:64:44:93:BF:1F:04:59:8C:83:C2:00:AF:2C X509v3 Authority Key Identifier: keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:3f:cc:30:ef:7a:1a:8c:db:86:78:6d:c1:ab:ec:35:15:d3: 85:26:b8:50:52:99:f5:24:1a:86:db:d7:03:0d:65:74:2d:fb: 1f:4d:bd:ee:06:d5:2a:67:19:8a:74:d0:08:e7:1f:9c:1a:15: 27:08:52:3d:57:65:35:03:45:1c:2c:9f:9c:54:5f:cd:c2:b9: 77:c8:c5:e6:ae:4e:14:8c:e7:29:69:b6:5f:e6:48:39:69:cb: a2:3d:77:3f:ac:5f:01:7f:9c:89:b3:15:2e:c4:b5:c3:c7:c7: 4d:0b:20:36:8b:0a:03:2d:7e:0a:fd:ab:dd:b1:aa:05:0c:5e: aa:ab:4f:c3:a9:45:2c:66:99:49:c9:cb:c0:41:91:08:35:c8: 13:8a:da:ec:83:7b:1e:7a:13:be:7d:43:95:a0:57:00:09:c4: 6a:f9:1c:0c:4c:8b:df:37:30:99:e2:ae:39:3e:87:ea:e8:cc: 3a:b8:70:65:4a:5b:df:08:da:eb:19:f2:9e:07:b2:3c:86:50: a3:b3:f3:43:82:de:79:9c:b6:ba:95:32:13:82:96:c2:8f:21: 6a:40:58:15:43:c1:06:62:d5:bf:cb:59:f4:99:f3:4a:6a:d0: 65:17:f9:cf:66:5e:15:a2:ee:9b:07:98:2d:2c:61:4a:27:87: 29:ef:d6:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh0vjJqLE1gdJ03Y0/DPRh0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj ZGM2NWMwHhcNMjUwODA0MTEwMTE4WhcNMjUwODA1MTEwMTE4WjAzMTEwLwYDVQQD EygyZmU5YzM3NWMxNTdmODY0NDQ5M2JmMWYwNDU5OGM4M2MyMDBhZjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LI3tD4f1fZIxRP/+ehGkMih2LV7 b6bJrmKAU+WqgoKGI8zRz57zwcWXcArRFBeIdyx8ChR+Aw3Q4f2+4SzcQKMxVSD1 4hN6MJDktOcIXWHmnDCn3x8nKtZAkvjmdijBaytWcBgUMFggBfZWTz8EF8S8Kqbx Orui8m9vndKEpfFciKiP1OMaKFV/oR8xP1tGv7UPCYqmPg3W8h0JtHUrkXcTvIn4 pFH37i0rr/+aoUhj8SE1yrMcSDCuiRkQX9CmrnaIbh8tqDddUN+BHcd5GGuZACzQ 4OLlPwmSHbTlAmnTVp42o25csj+QKcTjso8Bw/9NiokS9tdP6o8P3M1KFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/pw3XBV/hkRJO/HwRZjIPCAK8sMB8GA1UdIwQY MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct NjZlZGEyMjhmZWM3LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3 LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALz/MMO96 GozbhnhtwavsNRXThSa4UFKZ9SQahtvXAw1ldC37H0297gbVKmcZinTQCOcfnBoV JwhSPVdlNQNFHCyfnFRfzcK5d8jF5q5OFIznKWm2X+ZIOWnLoj13P6xfAX+cibMV LsS1w8fHTQsgNosKAy1+Cv2r3bGqBQxeqqtPw6lFLGaZScnLwEGRCDXIE4ra7IN7 HnoTvn1DlaBXAAnEavkcDEyL3zcwmeKuOT6H6ujMOrhwZUpb3wja6xnyngeyPIZQ o7PzQ4LeeZy2upUyE4KWwo8hakBYFUPBBmLVv8tZ9JnzSmrQZRf5z2ZeFaLumweY LSxhSieHKe/WKQ== -----END CERTIFICATE-----Generated at Mon Aug 4 16:08:49 2025 by rpki-client