$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft File: O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json) Hash identifier: x+YNs68UftJpyhemZlNGJ5aqLZ59YzWmuCwdtzGBcFM= Subject key identifier: 49:8B:DA:AA:4A:05:09:F0:E4:49:42:0B:DA:54:B8:A7:0F:70:62:C5 Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 01987A1B25D10DE46F84C3CCB9AB9FFEC27B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft Manifest number: 1805 Signing time: Tue 05 Aug 2025 12:00:56 +0000 Manifest this update: Tue 05 Aug 2025 12:00:56 +0000 Manifest next update: Wed 06 Aug 2025 12:00:56 +0000 Files and hashes: 1: 4vgCB29E8qksUTRT80hibqkfyyc.roa (hash: jmfyWEEY9JnvGnTw4OogSC5Brt6r5w8K86EHD/wwf9A=) 2: 526untxz-mzv2dHnFDXL_1ptt60.roa (hash: eTZ7gYAJgAUW5KmvOus9/SXIOPMjtfVvCRByFZ9gVg0=) 3: 5U7IE4mItmEJQybajMLicoJaq0s.roa (hash: 2OhWR8eCC/upHQ7TL7CEYQrfGqJzxh4sdcmiGXyehnQ=) 4: 7AXFe4yxIHvF0jtzsP_F-wLpTyo.roa (hash: fz447Zdcr7iuvJ9YqYhhlssvYnd7PF5Z4bBFuoyFksI=) 5: C-8-iMMsxJ6tnwl9OBqOWIwbNsU.roa (hash: pdyDDn72ivSi04YeLJDn/Rf+owjmwql5RY6I2jPWQjI=) 6: Cz5IOaLfZShikRrc5qEp3L0_dDE.roa (hash: yJQIMc4u5I3PxM3zxWJYXZyrXzNKlBnDlO54oa7k+I4=) 7: D0L0LFndzzXtixPyXy6YiMbyR7Q.roa (hash: le65wEoYAgLiuW7LHDLfiJaMqsJkMNtdkgbBI9+aSho=) 8: DxgEUmzhCfbLGW1VYUfMpFa37nw.roa (hash: aTiJxBWDUefv6IrHKfkDtn+24ct4bHV07inB3EBckiI=) 9: GXy-YScDdlVSOjaigEKgJ51XCY8.roa (hash: Y3LR/iT+9EdXx7rq4pgAup8VPeSq/ZLbP9lE7Caoknc=) 10: KfRroo9-BNURF9yUWR1WlHgU1ig.roa (hash: d0EUN/5YCOmmW4SmyztOjubnx+pkCFBWNsBncoAozSc=) 11: KtPtCnsNO7KrNH_mi8irxAh2a64.roa (hash: 0X6VJNdKzEQIN2KQI1h+LTGHgQgh9YXQ8FCAd7HKCL4=) 12: NBdPQa-wvhCcNUR62UijOKmqLb4.roa (hash: FBuWOoWqS3kDovQ4RTLJifcKo3Lt+KtJgveTvXA1/PY=) 13: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: bxaVzGfAw8mN0QTu6cYoC+aoSa639Hk9+GW1161Tedk=) 14: OHtdamk3K8NdLEh-keiR2rSuuSg.roa (hash: qIQbXlJhQUZZHP5a7YOGBONxaoVnF9gndUOU4O5iAEE=) 15: ONvCFUby9FQsaJnAxo4Axtdte3w.roa (hash: Ifw+sRLVQyRVbH8IoOOspPffjTFu/L5Tp5Iujz6vsEg=) 16: PqyNHcmLJdPWxXV1ritb4BmJxi4.roa (hash: 3vlH477/W9mn8TAvOvuTdFa84/v39cjh6RY9RiJ8GGQ=) 17: RPtIr4SyxST2FhDUlfIaVDvDv30.roa (hash: GtTmqq9ciOzu0ubmXjSZndWCRadfRgXNWiYJpFrJC5s=) 18: W4gGQid-BJ2ydE-GfarPQD0BXHk.roa (hash: AIulnkFQm6EME0MTgDdsXVMYUQiBqZHjvvdiEh/TZmw=) 19: Xf3YKxRqkeL7M00W8PeVBpyDwo4.roa (hash: l1kq88C+6MsbDoI9xmNG80iyS2+gmcx5dOr77F5QPn4=) 20: Y2m9dQZRR5IryF_5Zz3iwenilus.roa (hash: Jz9GiZ+cQjwgpfumcixZsPRulTmHrskYTNVB0A9hwMs=) 21: aRKgFuNEew699NwvZOmMVRESxJw.roa (hash: BbnnNcBf5b80ecOVIfxt6czSFR5JGmFsnVDqmj8IYKc=) 22: bIscYSktyuSdXA8uuitNFV9EUno.roa (hash: w2B+jU39CkMFN16wFNwH+8WwrfFPrjamkhdn7et9g8s=) 23: d0QPUb9bw255FbDfGbVwKoJI6bE.roa (hash: jrR/WoS1SZ3m1OaPCDPsHF9pj1zBDeNV31JSvSAQwFQ=) 24: ejUJhdQv_gD6oiLYrzclBYzyLOY.roa (hash: GfeTAbqceyfp5+2gyCSPrzyUUUuMpH7hOe6M0SAay2Y=) 25: lLJ9T7FvPak9W6G9PVhEvaIhBiw.roa (hash: vtj7GHqsPc7Ntb+cAgSQd14sWMQgJykEAhKGf/PR0/s=) 26: lRiWjK4xEGSZ7hhdPgk-iqq1mwI.roa (hash: JgHkOVWJLhXz09JsY8CuxiPcEyyxQ/VY17v428GySkE=) 27: nei3AaGClDiyy_EfGYw9mDGViqc.roa (hash: qXKOsUvJTZ9r5zNLO+LyECtFcWGid4ruKizdlfVXjdw=) 28: oMVUugxzWQV8CTV8CsCSyXRaVrM.roa (hash: pMKFMHKU1JhFpXnjr6tLo7AocNPXia8Qa3GSVsF74/E=) 29: yEUQ_aJkjJZT7FqCL5XucJyCbH4.roa (hash: UhItDph40P0qmr9fzzHpHPa0fBJT60AEwUYsGPaQGNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7a:1b:25:d1:0d:e4:6f:84:c3:cc:b9:ab:9f:fe:c2:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Aug 5 12:00:56 2025 GMT Not After : Aug 6 12:00:56 2025 GMT Subject: CN=498bdaaa4a0509f0e449420bda54b8a70f7062c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:01:c3:74:2a:5c:63:f9:27:41:70:4e:ac:85: 84:1d:32:9b:ea:5b:52:53:f8:ba:a2:be:eb:31:c4: 4f:47:6d:04:aa:76:f1:3a:79:4d:6f:3d:b6:4f:4b: dd:9c:b7:e2:cf:fe:94:8d:08:f8:29:4e:00:d1:c0: 43:fb:20:1d:c8:e6:a1:15:fa:dd:82:7f:12:61:67: 32:39:09:78:03:a6:8e:45:ed:0a:49:f3:d8:56:40: 6f:f0:40:88:17:0d:d2:42:72:db:43:e8:26:86:55: f5:a1:dd:89:59:30:68:1d:b4:25:27:a0:26:bb:a9: 57:cc:45:f0:de:f0:30:67:d1:cf:bd:95:73:d2:fa: 51:63:a1:d8:92:fa:61:3a:01:6c:a8:a6:cc:c9:21: bd:d3:6b:98:72:56:08:a3:43:7d:ee:73:bb:76:05: 0e:77:4e:fc:ac:fe:3d:74:e0:19:59:f6:ad:46:78: c0:cc:df:cc:e6:bb:f1:83:c3:f0:aa:9c:4e:6a:92: 58:e8:9a:71:f4:9d:18:59:e2:35:fa:d6:a1:ad:a6: 84:23:24:b4:36:ba:66:89:05:82:7c:5e:52:89:a5: b9:a6:2b:f1:20:79:a9:92:21:fa:3d:83:56:22:ba: f9:17:73:cf:b0:4b:a4:c4:ca:ac:ca:b1:4a:3d:0a: 43:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:8B:DA:AA:4A:05:09:F0:E4:49:42:0B:DA:54:B8:A7:0F:70:62:C5 X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:ba:17:2d:a5:ff:a3:a9:22:82:06:57:db:63:89:38:1e:12: 54:90:5f:07:97:ce:06:82:ab:82:18:e1:23:a1:7f:23:5a:34: 1d:37:1e:0c:9c:b5:a5:55:70:63:1e:8f:99:4a:b2:7d:52:a1: e8:c7:d0:79:c4:cd:ba:27:f3:ce:a3:87:57:cc:dc:f2:87:0d: fa:7f:96:40:c8:b2:ff:a4:ed:30:3e:38:70:10:70:81:3f:70: 7a:83:46:99:0d:4e:f8:a7:f7:55:b6:df:bf:fa:1c:07:65:42: 09:4b:c4:32:83:54:f8:46:21:72:d8:a4:50:af:02:a2:8a:d8: cb:71:7c:9f:e1:63:92:8d:40:0b:f4:a4:d7:0a:53:56:b1:67: 04:02:d0:22:4d:02:79:4d:a6:49:e8:86:75:2b:0a:d3:5a:77: 32:f2:f1:84:db:64:1d:ad:aa:74:4d:22:54:44:55:39:82:b9: 35:11:27:59:ba:11:57:ac:8b:6d:37:ab:02:1b:aa:c3:fa:98: 76:f9:e3:d7:48:92:14:b2:d7:45:8c:f1:0d:1c:41:55:cc:8c: 73:dd:44:5e:18:36:ca:7b:88:52:d0:f1:69:99:f2:16:06:b7: ca:70:d1:f5:21:ef:0a:77:f3:4d:10:74:6e:c5:90:0b:11:cb: 61:04:83:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh6GyXRDeRvhMPMuauf/sJ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjUwODA1MTIwMDU2WhcNMjUwODA2MTIwMDU2WjAzMTEwLwYDVQQD Eyg0OThiZGFhYTRhMDUwOWYwZTQ0OTQyMGJkYTU0YjhhNzBmNzA2MmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgHDdCpcY/knQXBOrIWEHTKb6ltS U/i6or7rMcRPR20EqnbxOnlNbz22T0vdnLfiz/6UjQj4KU4A0cBD+yAdyOahFfrd gn8SYWcyOQl4A6aORe0KSfPYVkBv8ECIFw3SQnLbQ+gmhlX1od2JWTBoHbQlJ6Am u6lXzEXw3vAwZ9HPvZVz0vpRY6HYkvphOgFsqKbMySG902uYclYIo0N97nO7dgUO d078rP49dOAZWfatRnjAzN/M5rvxg8PwqpxOapJY6Jpx9J0YWeI1+tahraaEIyS0 NrpmiQWCfF5SiaW5pivxIHmpkiH6PYNWIrr5F3PPsEukxMqsyrFKPQpDZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmL2qpKBQnw5ElCC9pUuKcPcGLFMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7oXLaX/ o6kiggZX22OJOB4SVJBfB5fOBoKrghjhI6F/I1o0HTceDJy1pVVwYx6PmUqyfVKh 6MfQecTNuifzzqOHV8zc8ocN+n+WQMiy/6TtMD44cBBwgT9weoNGmQ1O+Kf3Vbbf v/ocB2VCCUvEMoNU+EYhctikUK8CoorYy3F8n+Fjko1AC/Sk1wpTVrFnBALQIk0C eU2mSeiGdSsK01p3MvLxhNtkHa2qdE0iVERVOYK5NREnWboRV6yLbTerAhuqw/qY dvnj10iSFLLXRYzxDRxBVcyMc91EXhg2ynuIUtDxaZnyFga3ynDR9SHvCnfzTRB0 bsWQCxHLYQSDxg== -----END CERTIFICATE-----Generated at Tue Aug 5 17:19:57 2025 by rpki-client