$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft File: P-3YXB7Mtf9LqTARenMpCZwP8us.mft (raw, json) Hash identifier: K7LDqc46KQFXtAjEQ9XKSEQHK/mwgNHwqnwiMFhoB94= Subject key identifier: CE:0C:3C:C7:2D:46:28:B1:8D:5F:4F:09:08:5C:00:C6:3D:93:0E:BC Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Certificate serial: 0198868D6258A1A080DB020EBF992F2D6E4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft Manifest number: 1646 Signing time: Thu 07 Aug 2025 22:01:09 +0000 Manifest this update: Thu 07 Aug 2025 22:01:09 +0000 Manifest next update: Fri 08 Aug 2025 22:01:09 +0000 Files and hashes: 1: 4SyAKG9FRt1gAFJy5VgH5PwxTRA.roa (hash: jTSIiH7dSb5EybAsEY+n22bAiKvGllq/AuPJ12+ncpM=) 2: BPvvMmPw0v2RXdpWWHfCuRUXY28.roa (hash: xZBsJjBvf0lTF+79AIT0zRbookilcef0qHIZ5VPCKjo=) 3: BZv8sGCcNALUX5pRivC_EjiidAY.roa (hash: h2vpw3fwMWMbbCOrxK6C72hr7+aeGxdeLm1OT0QOTJY=) 4: DGiTictajwWlIqV1Y3gB4SABHrM.roa (hash: Id5c1uksWgHuNXSqMulTJtxTXfw1/TAJk3AEd7b9YRQ=) 5: Mk65rzu_RkrceH34hYZR24Obsg0.roa (hash: rTzdbjg2prHl5GqIGFCWtd1Ib91ETCuwTrOfSPbAKbI=) 6: P-3YXB7Mtf9LqTARenMpCZwP8us.crl (hash: jJlhW6uz8eMEOwV9p6RTlIwjY830f1mpG2dHMnbuwMM=) 7: Q7Kremg5Fgj0SfkKKXdi8FJc68I.roa (hash: wwhqLnVWip/tEomt2waPsqqsK0Xf41SfYznp1QkJ0BM=) 8: VB2zjyzRbVcAI7qwybUzZhlXV-U.roa (hash: cbrJc/4RT0HiKhNiv2HtCVB5MjAEHV6aPZtCJF7/HaM=) 9: fScTC-RTAL4AeGIUFDXeFWgxNOU.roa (hash: LpQDvJVc9hMoS+6x9uoQSz8d+i8pdM/6GrU1p5QPkoU=) 10: gjV1b6nl-2sIdV0OViEWc13VOgw.roa (hash: YJxg+E5odCH0e5CDjaGL8I+42oC/IlpXfOKgoo/xCo4=) 11: i_vdOGwxPt-bikrKCsCq4vU6o1Y.roa (hash: Oi88txSdII7ssSiwm/zvR3/xE/bpdarLSDiFGBrNlqs=) 12: jLM5t3eg01fijHX5BZDxTUjpEGU.roa (hash: zlqEOh5qlKElj+/BR3gY6unzfRt8ygL6XM3lywwcPBU=) 13: jt3cdzogC_GhOHVIdQu1LfkbDrM.roa (hash: 4TbqHgl6LIIhOvKU0Ma8NpMAoh5pYOvW9g1cZnc89eY=) 14: mv1h37MzImfXhXtotGH2l6nUD-c.roa (hash: jma1UU++sReZAO/OYU5m4FrNNXuoRuTByWXR/ZHh5qk=) 15: pPSUgW-kch1wzV-mL74GjoJRYas.roa (hash: 14IsY2Pcu5B3SjJ5ycOJDXddH4w35As15arfEbi1nXc=) 16: sVq7ykDogd7cCsDF--hBK9DnjT4.roa (hash: yntzoQcvzBrX+tVilVNDQYJnh1oAW90RlNAXUQi35Kc=) 17: yUsdU2ULQpT4CaBLrnJG--v6B4k.roa (hash: nFPDGUe2wiSsXpmHy1xpSDCHB5E3thvkbalz4PA2+qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 08 Aug 2025 16:13:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:86:8d:62:58:a1:a0:80:db:02:0e:bf:99:2f:2d:6e:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Validity Not Before: Aug 7 22:01:09 2025 GMT Not After : Aug 8 22:01:09 2025 GMT Subject: CN=ce0c3cc72d4628b18d5f4f09085c00c63d930ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:75:08:90:66:57:4d:b8:d3:2f:08:57:cb:4b: 30:c8:02:ed:91:05:e0:b7:49:62:3b:99:e0:45:93: f7:cb:6e:01:32:5a:55:7e:b4:8b:0d:e7:7d:fd:9e: 35:1c:56:2e:99:da:1a:17:8e:0a:0f:e1:a8:cb:22: 8e:15:e9:9f:41:f9:1b:c9:6b:13:5c:58:0c:1a:f8: fa:de:85:6d:9f:c3:1d:79:59:bd:37:d0:10:39:0e: b9:a7:4c:80:9e:63:8e:56:86:47:69:ff:93:03:f0: a8:78:ba:d5:0c:4a:15:e3:34:0d:14:b3:7a:cf:f1: a5:cb:70:34:30:49:b3:9a:a1:9d:0a:21:52:c8:68: cc:6f:c4:cc:0e:91:7f:98:ab:73:95:86:0e:4c:c7: 49:77:03:55:94:5a:f1:c7:63:34:be:97:b8:8b:53: b6:3d:f4:7f:08:0a:36:9b:c2:c3:b2:26:5c:59:fb: 86:bc:e6:be:e6:07:35:c8:c6:96:80:c0:2d:23:cd: 2d:6b:5b:72:d8:c1:25:9e:74:c7:46:7f:41:80:b8: b3:1b:6e:79:be:f1:97:a7:18:57:b6:9e:79:03:38: 24:76:92:3b:db:ec:bd:e9:69:a7:15:03:ab:ec:41: 48:0c:8d:fa:16:e6:6b:75:77:b4:b8:f2:2e:23:14: 96:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:0C:3C:C7:2D:46:28:B1:8D:5F:4F:09:08:5C:00:C6:3D:93:0E:BC X509v3 Authority Key Identifier: keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:42:b7:9f:1d:3c:d5:eb:d0:a2:23:2e:8f:19:9a:20:a2:7a: cf:f8:44:2f:1a:7f:f2:d4:a4:d4:e6:51:aa:de:f5:5c:19:f4: 7b:40:4e:56:20:a9:46:45:74:2a:d2:9b:54:c8:47:f3:a6:96: 0c:20:b9:05:10:30:fa:03:a9:96:5e:23:c1:99:bd:db:e1:24: da:11:d1:ca:80:9a:4a:70:48:6c:7c:6a:1c:f8:42:1f:6e:20: 0b:67:97:78:ce:6f:37:df:d7:53:7d:e9:b5:0d:46:1c:b3:c9: 32:08:81:4a:a3:a6:20:6f:c3:d5:0b:42:03:d4:5e:25:b2:dd: 41:77:33:bf:81:9a:5e:99:7b:e7:70:ca:f3:bd:85:f2:e5:65: 0a:74:12:da:af:40:17:3b:a2:c5:03:c7:f3:e9:d0:bf:97:52: 4a:23:61:fc:c9:29:bc:06:e5:ff:d0:6b:0e:c4:50:a6:16:17: bb:27:73:27:0d:11:7f:47:e3:dd:da:94:3a:03:14:92:fc:de: 7f:4f:1d:dd:08:47:58:df:49:5d:75:05:97:9f:c1:e3:d3:91: 4c:53:ac:b1:fc:38:2d:27:3b:6d:e8:2e:bc:91:71:b6:6d:6b: 9d:81:16:fa:a5:23:0b:0f:dc:7c:c2:6c:95:6f:da:5e:f8:ea: fa:19:50:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiGjWJYoaCA2wIOv5kvLW5LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw ZmYyZWIwHhcNMjUwODA3MjIwMTA5WhcNMjUwODA4MjIwMTA5WjAzMTEwLwYDVQQD EyhjZTBjM2NjNzJkNDYyOGIxOGQ1ZjRmMDkwODVjMDBjNjNkOTMwZWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nUIkGZXTbjTLwhXy0swyALtkQXg t0liO5ngRZP3y24BMlpVfrSLDed9/Z41HFYumdoaF44KD+GoyyKOFemfQfkbyWsT XFgMGvj63oVtn8MdeVm9N9AQOQ65p0yAnmOOVoZHaf+TA/CoeLrVDEoV4zQNFLN6 z/Gly3A0MEmzmqGdCiFSyGjMb8TMDpF/mKtzlYYOTMdJdwNVlFrxx2M0vpe4i1O2 PfR/CAo2m8LDsiZcWfuGvOa+5gc1yMaWgMAtI80ta1ty2MElnnTHRn9BgLizG255 vvGXpxhXtp55AzgkdpI72+y96WmnFQOr7EFIDI36FuZrdXe0uPIuIxSWxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM4MPMctRiixjV9PCQhcAMY9kw68MB8GA1UdIwQY MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt ZTJiNTI3NzI4ZTk2LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2 LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0K3nx08 1evQoiMujxmaIKJ6z/hELxp/8tSk1OZRqt71XBn0e0BOViCpRkV0KtKbVMhH86aW DCC5BRAw+gOpll4jwZm92+Ek2hHRyoCaSnBIbHxqHPhCH24gC2eXeM5vN9/XU33p tQ1GHLPJMgiBSqOmIG/D1QtCA9ReJbLdQXczv4GaXpl753DK872F8uVlCnQS2q9A FzuixQPH8+nQv5dSSiNh/MkpvAbl/9BrDsRQphYXuydzJw0Rf0fj3dqUOgMUkvze f08d3QhHWN9JXXUFl5/B49ORTFOssfw4LSc7beguvJFxtm1rnYEW+qUjCw/cfMJs lW/aXvjq+hlQaA== -----END CERTIFICATE-----Generated at Fri Aug 8 00:13:40 2025 by rpki-client