$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft File: c_IQ8SmaHgrucdwdeeX7EgktMKk.mft (raw, json) Hash identifier: 0m0JvgkJX7Q/JJHOJP3oyHrtZ6eLqcCfSvHS0wKvu0k= Subject key identifier: 31:E2:4F:DA:51:55:B1:DC:7E:3F:86:3E:D4:59:98:6F:41:C6:80:63 Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Certificate serial: 01988A69C4B08DBE0C64ADD9250F10E28AE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft Manifest number: 1649 Signing time: Fri 08 Aug 2025 16:00:44 +0000 Manifest this update: Fri 08 Aug 2025 16:00:44 +0000 Manifest next update: Sat 09 Aug 2025 16:00:44 +0000 Files and hashes: 1: 7v-L1KuWY_QeDJxKFVyRkWnFePQ.roa (hash: bVQczQ08ozX20fYuXzWGYS1jimxc5e2Qx5nVzF/4kuk=) 2: 8cWfahg-VDjeZtRRDOSOgaZBKKo.roa (hash: 9i7se4/zOMkhHJFeNP5OTbaUpanb8DTDP8yisJke8J4=) 3: H21iUSfTQ-Als3x7YdNaSJDke-Q.roa (hash: TkJySFU5Lrr8Mz/1ct+dWDS3HxILWnBvIL8cVo73vF4=) 4: H74wGZKnnU6XEP7nVKoqw4XaEjE.roa (hash: zhm555s3zw/KlbcjZuumbYd6+z6n6717Q/inEo++9C0=) 5: KFKPGq8CDIQff00UekrfFEmWWU4.roa (hash: pndCMKJbI0Ffrf6VYH3lHviYtYItndyotazCLP7aZyE=) 6: TLCOp8VQQYT-sDLZMkb_dNE0wJI.roa (hash: 8TF1RbnrjzrAYcRglOW5PIK7TmKRhUoFu7HvQr3ZHoA=) 7: XfGBei_fvFP0LcnT4xlGOunfSHY.roa (hash: ApG5cEMi+MNJR6ahm8kTy/uN64zS0fv0zRdzd/i6biA=) 8: ZrwHnbp0cmRv-8Aq-3dTrUs96b8.roa (hash: laG521bBX3KOp9w13a5/N7g1SD2gsHS2KdTqelNAv1g=) 9: c_IQ8SmaHgrucdwdeeX7EgktMKk.crl (hash: dLeivkQVyIaotpnD0BU6u8cXf7epurjfeM6iPkouF84=) 10: nT9Kl7qa4avyYi6PobndNFEx2JI.roa (hash: 4NhOocRVxQsq48Sjltw5zBhFh6NiUij1mxelAtmoUp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 09 Aug 2025 11:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:8a:69:c4:b0:8d:be:0c:64:ad:d9:25:0f:10:e2:8a:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Validity Not Before: Aug 8 16:00:44 2025 GMT Not After : Aug 9 16:00:44 2025 GMT Subject: CN=31e24fda5155b1dc7e3f863ed459986f41c68063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:58:a7:26:36:8f:08:20:f3:6d:7c:78:c1:d0: 67:e5:6d:bd:8b:e0:83:f3:77:e4:75:ba:23:b9:81: 2a:91:09:d0:76:aa:08:84:c2:ec:f2:28:6c:df:45: c1:d8:dc:72:e4:a0:cd:8b:24:0f:d7:92:a4:d4:34: 60:b2:c9:97:1b:1a:8e:6b:53:c3:c4:59:72:7f:7e: 37:87:a5:dd:8f:8b:0f:03:46:7b:aa:e9:ef:f2:51: 70:f4:a7:13:3a:b9:e0:8b:32:07:4f:44:ee:4e:c9: fb:7e:07:a1:77:a5:db:f4:cb:82:7c:66:49:ce:36: 16:36:c4:c1:17:4b:4c:a9:83:3b:eb:56:f9:5c:cd: 85:35:e9:03:27:45:62:ba:45:31:86:72:0d:c8:c9: 0c:71:a8:5a:17:70:e6:e3:5e:92:ad:cc:87:c3:cb: 12:80:8e:85:06:d4:7d:54:cc:a3:32:44:fd:9e:21: 10:d2:38:32:cd:5e:21:8f:47:eb:ee:9b:21:0c:e8: f6:ae:b0:97:55:bd:ab:30:20:4e:db:95:d3:f8:7c: 57:58:c4:84:23:de:fe:62:2e:09:03:91:45:1e:85: 90:91:fb:dd:a9:9f:8e:8f:68:51:77:b0:80:fa:f4: fd:21:2d:93:ca:4c:8e:a6:75:8e:fa:7a:0a:0d:a0: 8f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E2:4F:DA:51:55:B1:DC:7E:3F:86:3E:D4:59:98:6F:41:C6:80:63 X509v3 Authority Key Identifier: keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:69:bf:af:88:49:af:c5:14:0b:1f:7e:e6:2c:f7:9c:a5:75: e0:52:99:2c:38:79:1c:22:64:c9:41:4a:79:3f:0f:31:a7:b7: 44:00:55:2a:ac:bd:7e:77:ef:7e:09:5b:6b:7a:b1:ba:eb:9f: 6a:a2:fa:a6:46:0b:0a:67:2d:8b:f8:25:b5:b4:72:b4:cb:96: 60:02:95:27:85:ed:f5:c1:5f:30:66:a4:0c:bd:b9:f9:f2:6d: cc:62:49:17:e5:ba:0a:1c:2d:c2:b6:a6:d0:60:d5:fe:ca:c5: 66:9c:54:a9:1c:44:96:60:67:a4:41:ef:7b:45:40:46:cf:63: 31:86:da:28:5a:5e:21:e6:70:e8:f4:da:1d:e2:6a:83:ae:08: de:22:4d:60:b8:f7:5c:1f:76:5d:1c:08:c4:cb:7a:2f:7c:46: 51:6a:7b:77:57:17:be:2f:8f:ab:af:fc:6f:00:6d:91:6d:39: cb:4e:d7:33:61:04:1e:3b:8c:7c:1e:08:83:63:78:e1:e9:36: ad:59:03:d2:79:9c:d4:61:1f:6a:a3:4a:be:fd:75:5f:76:57: bf:20:6e:2b:e6:7d:b2:bc:66:56:f9:36:86:42:02:a9:55:99: b4:7e:78:16:ff:75:f3:b2:8c:6c:b8:4e:22:32:ad:f3:a8:6f: 3e:51:53:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiKacSwjb4MZK3ZJQ8Q4orjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky ZDMwYTkwHhcNMjUwODA4MTYwMDQ0WhcNMjUwODA5MTYwMDQ0WjAzMTEwLwYDVQQD EygzMWUyNGZkYTUxNTViMWRjN2UzZjg2M2VkNDU5OTg2ZjQxYzY4MDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVinJjaPCCDzbXx4wdBn5W29i+CD 83fkdbojuYEqkQnQdqoIhMLs8ihs30XB2Nxy5KDNiyQP15Kk1DRgssmXGxqOa1PD xFlyf343h6Xdj4sPA0Z7qunv8lFw9KcTOrngizIHT0TuTsn7fgehd6Xb9MuCfGZJ zjYWNsTBF0tMqYM761b5XM2FNekDJ0ViukUxhnINyMkMcahaF3Dm416SrcyHw8sS gI6FBtR9VMyjMkT9niEQ0jgyzV4hj0fr7pshDOj2rrCXVb2rMCBO25XT+HxXWMSE I97+Yi4JA5FFHoWQkfvdqZ+Oj2hRd7CA+vT9IS2TykyOpnWO+noKDaCPoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHiT9pRVbHcfj+GPtRZmG9BxoBjMB8GA1UdIwQY MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt Yjk0NjQ3MThiYTM3LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3 LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2m/r4hJ r8UUCx9+5iz3nKV14FKZLDh5HCJkyUFKeT8PMae3RABVKqy9fnfvfglba3qxuuuf aqL6pkYLCmcti/gltbRytMuWYAKVJ4Xt9cFfMGakDL25+fJtzGJJF+W6Chwtwram 0GDV/srFZpxUqRxElmBnpEHve0VARs9jMYbaKFpeIeZw6PTaHeJqg64I3iJNYLj3 XB92XRwIxMt6L3xGUWp7d1cXvi+Pq6/8bwBtkW05y07XM2EEHjuMfB4Ig2N44ek2 rVkD0nmc1GEfaqNKvv11X3ZXvyBuK+Z9srxmVvk2hkICqVWZtH54Fv9187KMbLhO IjKt86hvPlFTDA== -----END CERTIFICATE-----Generated at Fri Aug 8 19:38:27 2025 by rpki-client