$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.mft File: orEujfOr1VWfnPloCvZd0WWJ3oY.mft (raw, json) Hash identifier: neGmyVfvyh7idiOEeKhzJNmGG9fTnG+E9n2Rj32Wgdk= Subject key identifier: 57:58:DD:8D:B2:C5:3A:42:1B:DF:EC:CE:CA:1E:DA:9D:33:B7:03:02 Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86 Certificate issuer: /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86 Certificate serial: 0198746678FAB6B75C5021DD244ED6D80287 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.mft Manifest number: 1635 Signing time: Mon 04 Aug 2025 09:25:29 +0000 Manifest this update: Mon 04 Aug 2025 09:25:29 +0000 Manifest next update: Tue 05 Aug 2025 09:25:29 +0000 Files and hashes: 1: 6LT2Fmx2AvdvAyPEavcIF6YNISU.roa (hash: xQkludjOvnIvi3sBuHQZGgH+sEIqNW8a2/OpVWjIvBU=) 2: AoOUpojCmpvkqxXoBxLTxPJVbII.roa (hash: nfN6f2JBBy6Ilff6SdDJp07xscaBVneoCMixBzek8+Q=) 3: AqKvWWTw_o64vG6wltS0YN5kGbo.roa (hash: wL3oeGyNzvfXI7ZS8KLi9p3lvV7vG26Q40zHsSA75CY=) 4: Eg2Wkq8DXFb0BZXy9FUsIMRvg0E.roa (hash: mk4cMuO6kmXayUvhQtWdcbVLZPOO5EQ4SMdROMAza2M=) 5: Kaq_OwRC6lABDRXL85mMXGJr-1s.roa (hash: qGHqa3NGLUotIrEUdm3o4RkalYVgHgqGETGE0ORGV2Q=) 6: NmvHQJaQ4JUQC6anntlzMvrL-Z8.roa (hash: YU+lvt/vIazw7vVVUGccAAia8UJtfpTF+Fji8oBXsm0=) 7: OcAvtCfGeHAKogvTrE4zVIYXhXs.roa (hash: ytTb8Vp57MsWC+qg8DRVK13nEW8nfvpJJgza5MGPgYA=) 8: XACqnewxbRgjHxKsLaFopimZHeY.roa (hash: MIusKXphk72DRohBPHiq5YJIV9C9zTT6OGYs8zxk85A=) 9: ZgFUKtoAGiNjKUo9XcPEn1qeAFc.roa (hash: TDQBb/Bd8P97rUcBMKsWbYhMoJ4eNE0/rZeeqnamWwY=) 10: aEWr6-EqtkKVBn1aiC7rHdjKt8Y.roa (hash: crXyg1I0M6v1iZUeG0Vpk1mS5J8AlR2ziEDMO6PLwNs=) 11: bF_8NJgqhGDd71S2vgy3IqkGvl0.roa (hash: XI0FLazwz22XwXLOsRlYorwiIFueCN8y2cD+ycMq4eA=) 12: cZ35CSPr-e6s9ZzZ1cCpKSrcsxQ.roa (hash: Q+tgir+fUPA3KtG37Q+v+2DT+F3gXFs+ldjurtDdJms=) 13: dzR6au3FLXSUL6wnu3sGMtx5vuE.roa (hash: TycFADlFb4vyHMprwY7RZeMmn+iT/ePeH0EO+pcdo8k=) 14: hT48KCBTZZmgjWNR0omilLv1234.roa (hash: RA3O16mDot75n7YV1dkz8IBPV2SpMqJkQ3E7/vV2VHo=) 15: hnuqfuqQFfls7WsQI7eQEfSUik0.roa (hash: 4glBckXjWMe5XR/kJnErYQjsYivbggBDZAVbZrhZteQ=) 16: l0OkrdC46OXcFrAyK1efk-4Xsw0.roa (hash: e6GLkxVIdJGeVoL8lxi6pYki19y1uXIM73RCaOWJKXc=) 17: m30AM2TdwhKzdf1N10cQP_Viy_c.roa (hash: CM1Hu68gDxVweB/504GwCoDAaC8vSBSM1qlN7Xy5w+M=) 18: orEujfOr1VWfnPloCvZd0WWJ3oY.crl (hash: Noo9CPgHPI6Iwb8Xva1n8TL+pzebgrVYBzSkA+gtdOA=) 19: qKhGSn-anlVBbLwa8kuLCuYeIg4.roa (hash: GMbSoeO7Bt68N/Bj/6mj7uVPJ/WZKmJE6Cg5RyuDqEs=) 20: xY8O1HQcthonbf03hVZUJttA-3k.roa (hash: VnV3WEcdTaUx8HFdXjrg5qMNEOniv+q8hPyCeb+p72M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.mft rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:74:66:78:fa:b6:b7:5c:50:21:dd:24:4e:d6:d8:02:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86 Validity Not Before: Aug 4 09:25:29 2025 GMT Not After : Aug 5 09:25:29 2025 GMT Subject: CN=5758dd8db2c53a421bdfecceca1eda9d33b70302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a3:0b:80:8e:30:23:59:97:3e:5e:93:ef:f2: 5c:b1:e0:30:89:dd:4b:28:70:79:0d:b0:87:2f:c2: 79:e5:f3:ca:27:e8:fd:91:e2:de:e1:db:78:ca:03: 02:c1:15:ea:25:de:b0:f1:8e:7b:0e:5f:0f:ac:fc: 9d:41:4a:fd:2a:04:5c:97:85:f6:d7:aa:b4:5c:39: 50:e3:57:c9:97:83:5d:cd:f6:63:41:d9:b8:ae:02: 8c:c1:bf:60:63:db:9d:23:8b:02:fb:81:67:b4:76: dc:ca:55:af:78:63:29:b6:4e:73:46:e2:e1:69:85: 05:21:ff:da:7e:87:6f:65:cb:cb:69:c4:9c:9f:c0: f3:60:d3:5e:2c:b9:10:0c:44:46:46:3a:f1:cf:0b: 3d:05:cd:d4:5c:6f:41:d1:9a:5f:3e:72:39:23:91: 2c:b2:7a:71:be:02:ba:26:74:a9:a0:94:3d:e0:34: 5d:a9:e6:2e:d1:96:a6:86:af:72:9e:3e:20:5e:c4: 75:e3:b8:7a:56:84:7c:f1:50:ba:5a:b9:f6:b7:3a: e9:26:ec:b4:ca:c2:b8:75:24:9c:96:26:b7:79:5b: a4:ac:25:81:11:b6:02:e2:bd:f7:2f:c1:b0:ec:de: 54:39:60:dc:39:1c:b6:e8:87:a4:ec:1b:4c:db:96: 1a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:58:DD:8D:B2:C5:3A:42:1B:DF:EC:CE:CA:1E:DA:9D:33:B7:03:02 X509v3 Authority Key Identifier: keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d0:ed:d2:a0:55:84:1b:b8:95:9e:47:5f:b6:fd:ef:80:ec: eb:d1:47:be:03:b7:63:8d:aa:2f:ce:f2:01:eb:31:08:05:13: 2a:c6:cd:b6:44:31:e4:3e:47:da:26:4d:c1:42:4c:68:76:73: d6:4a:9b:b4:64:52:31:8b:79:b6:b1:c3:e9:96:24:fe:85:af: cf:9b:34:af:d5:cd:22:e4:8c:55:a2:a1:7e:07:dc:ab:87:63: 0e:14:37:f1:40:9f:ad:66:28:17:78:77:8f:38:c7:30:2c:b3: cc:f6:49:e7:2f:6d:93:b9:48:09:dd:ee:ce:fa:8d:8f:d7:f9: f5:30:61:9f:76:8a:e7:03:b1:2e:89:00:0f:80:07:e5:51:af: c4:89:5e:73:63:b6:fe:23:f0:42:b5:6d:a1:0c:36:c5:9c:80: 23:7d:99:8f:bd:aa:66:12:e9:fc:a0:8e:4c:b5:90:b5:11:76: d6:27:a9:2f:b1:a7:63:e3:57:bf:46:6b:52:96:df:42:e9:62: 06:fd:8e:b0:d0:97:33:f2:b6:c6:bc:4a:b5:1a:72:af:35:87: fe:b3:53:26:52:8b:aa:f6:36:8d:f5:68:1a:6b:f6:90:c6:05: e5:9a:7a:44:a5:93:3e:5a:f5:dd:f1:c5:31:05:26:5b:e6:84: d7:3d:64:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh0Znj6trdcUCHdJE7W2AKHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyYjEyZThkZjNhYmQ1NTU5ZjljZjk2ODBhZjY1ZGQxNjU4 OWRlODYwHhcNMjUwODA0MDkyNTI5WhcNMjUwODA1MDkyNTI5WjAzMTEwLwYDVQQD Eyg1NzU4ZGQ4ZGIyYzUzYTQyMWJkZmVjY2VjYTFlZGE5ZDMzYjcwMzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6MLgI4wI1mXPl6T7/JcseAwid1L KHB5DbCHL8J55fPKJ+j9keLe4dt4ygMCwRXqJd6w8Y57Dl8PrPydQUr9KgRcl4X2 16q0XDlQ41fJl4NdzfZjQdm4rgKMwb9gY9udI4sC+4FntHbcylWveGMptk5zRuLh aYUFIf/afodvZcvLacScn8DzYNNeLLkQDERGRjrxzws9Bc3UXG9B0ZpfPnI5I5Es snpxvgK6JnSpoJQ94DRdqeYu0Zamhq9ynj4gXsR147h6VoR88VC6Wrn2tzrpJuy0 ysK4dSSclia3eVukrCWBEbYC4r33L8Gw7N5UOWDcORy26Iek7BtM25Ya1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdY3Y2yxTpCG9/szsoe2p0ztwMCMB8GA1UdIwQY MBaAFKKxLo3zq9VVn5z5aAr2XdFlid6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3JFdWpmT3IxVldmblBsb0N2WmQwV1dKM29ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lYzQ0ZWEtZWY0My00YjNhLWE2OWEt YjRjYjYzN2RhOGMzLzEvb3JFdWpmT3IxVldmblBsb0N2WmQwV1dKM29ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9lYzQ0ZWEtZWY0My00YjNhLWE2OWEtYjRjYjYzN2RhOGMz LzEvb3JFdWpmT3IxVldmblBsb0N2WmQwV1dKM29ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAetDt0qBV hBu4lZ5HX7b974Ds69FHvgO3Y42qL87yAesxCAUTKsbNtkQx5D5H2iZNwUJMaHZz 1kqbtGRSMYt5trHD6ZYk/oWvz5s0r9XNIuSMVaKhfgfcq4djDhQ38UCfrWYoF3h3 jzjHMCyzzPZJ5y9tk7lICd3uzvqNj9f59TBhn3aK5wOxLokAD4AH5VGvxIlec2O2 /iPwQrVtoQw2xZyAI32Zj72qZhLp/KCOTLWQtRF21iepL7GnY+NXv0ZrUpbfQuli Bv2OsNCXM/K2xrxKtRpyrzWH/rNTJlKLqvY2jfVoGmv2kMYF5Zp6RKWTPlr13fHF MQUmW+aE1z1koQ== -----END CERTIFICATE-----Generated at Mon Aug 4 11:17:13 2025 by rpki-client