$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft File: X32laK0Ce54knBPiI9MidpiBop8.mft (raw, json) Hash identifier: g4L+SIj7+4bMDFd17x+xoy8Vw87ntJkq4f7c7KT7w2U= Subject key identifier: 83:2F:AF:7A:BB:A4:E2:F4:B7:D8:65:55:C4:72:83:3E:43:DD:14:04 Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f Certificate serial: 01988FFE5F68CF1C0D335DB0425658F0C1A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft Manifest number: 0B9D Signing time: Sat 09 Aug 2025 18:01:09 +0000 Manifest this update: Sat 09 Aug 2025 18:01:09 +0000 Manifest next update: Sun 10 Aug 2025 18:01:09 +0000 Files and hashes: 1: Dhg938LLNxihNYriqStR3oqs6Jg.roa (hash: Aj+6lvIDsodEZ6I55Us8ZFj5GtVjSmfFFjL8I/MfYqo=) 2: FuntCXoBht24QvgtEtbVZEuCdp0.roa (hash: JUPlc/PvxJjzfETFQC1BU7Iej8ynSg/XdYSUf902Tpo=) 3: OSozPCauqZRrj5FYZCZShQYan60.roa (hash: gJTuyuPcePva2Pf/4Z3V1y7VTQjYV+P6FusXSLPZfSw=) 4: X32laK0Ce54knBPiI9MidpiBop8.crl (hash: uNzNhGXMeRbaFdkKnPL69Wz+YS0SABxAipPyroJvJQY=) 5: XjVu2IyXljFzhSvYma_h3-clfVU.roa (hash: nT21YokFB5zQvbm3JPkkRJDjEHGU38C24xQDpQHQGAI=) 6: ZkkDzXmdTsLG1oQnHCXCpjMrN0c.roa (hash: vhxQZdTakyknsbSaFbQwA3rjVR03VcM9s8jNMsMZ03E=) 7: jUQ_fZXFaYGd4zaZnSgAlOdWse0.roa (hash: TxGng+dp5AKM1yJ/Crw7UDMDcGHP31uzC9AJJeqBDMA=) 8: oSGRjgd5g7uxmIyMg55GeDp1lcQ.roa (hash: yVVI9w+n8DQ5LZ0pU0EZPfP/S8D3Imwu6pg6ds8XII0=) 9: s84uwW_-i_SHLp2X5wNbbXCbos0.roa (hash: XmZwP1Dphpy/OpROhUP0RXS2PeMw5xbgxdsjXIheFhc=) 10: ztzJ9WkVuGW2KUZ-NYOffXMn-mU.roa (hash: 0aNwIJcWE8BWdRRapb0b1h0he6NRcvrOvXa3hI/Nxv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:8f:fe:5f:68:cf:1c:0d:33:5d:b0:42:56:58:f0:c1:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f Validity Not Before: Aug 9 18:01:09 2025 GMT Not After : Aug 10 18:01:09 2025 GMT Subject: CN=832faf7abba4e2f4b7d86555c472833e43dd1404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f5:47:59:98:5b:ff:96:92:e0:78:d1:6a:2b: 55:a2:8c:2c:01:72:b3:a3:4c:6e:1d:1e:ec:20:fe: 9c:ce:d5:4f:a9:dd:22:74:5a:cc:a1:e8:82:d3:ae: 52:e8:38:32:d4:12:00:e1:64:c1:04:02:2f:a6:15: 30:b5:af:3a:9b:62:51:57:e8:e5:72:db:ba:aa:c9: c6:71:cb:31:28:1f:d2:91:28:83:5d:27:77:75:4c: c4:63:74:d1:54:c8:b7:1e:4e:a3:25:c2:3b:59:72: 2c:03:ca:3d:70:20:06:9d:6c:80:01:10:0c:ca:b2: e6:df:4d:4e:4b:ad:b2:1f:14:fa:72:50:fe:39:6c: 09:15:7a:0f:b5:85:59:10:3c:19:07:a0:2e:42:98: 57:73:44:2d:dd:a9:62:4e:1f:59:43:c5:c8:e0:52: 94:0a:fd:0d:2b:20:f7:f4:20:63:a7:95:ac:77:9f: 38:09:29:4f:b9:58:2f:be:60:33:00:32:74:d5:16: 21:f6:38:a7:b8:3d:3a:78:68:d1:31:94:8b:1a:34: 3e:e0:c4:44:52:eb:a4:b2:08:2c:3e:f1:17:92:6c: 56:ad:1a:46:af:44:66:3a:cb:6b:75:6f:57:52:0d: 67:12:dc:6c:22:42:24:93:8f:ea:48:3a:96:58:ff: 3a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:2F:AF:7A:BB:A4:E2:F4:B7:D8:65:55:C4:72:83:3E:43:DD:14:04 X509v3 Authority Key Identifier: keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ff:8d:e7:7c:d5:f5:80:1c:10:38:3d:91:1b:24:0e:42:66: 0d:b1:51:95:73:13:c7:65:8d:6a:ac:de:2f:fb:01:71:df:1e: 39:1c:4a:cd:28:ef:f3:de:dc:c8:7a:fb:9c:f9:5b:71:a8:f3: 06:38:4d:a0:3c:5c:63:02:c3:8d:77:e2:f8:4c:10:e6:96:2a: ba:3d:4c:2d:e9:4f:b0:46:c9:bd:37:6c:fb:ee:57:c3:73:b9: 84:ef:dc:ef:ed:0f:ea:ab:18:8a:65:48:de:80:4c:8b:06:30: 00:99:a9:a9:25:c1:fb:77:29:05:c2:07:18:51:8d:6d:be:56: 76:2d:7d:d5:c9:aa:b1:cc:e5:c8:40:bf:5b:86:4f:a3:8f:c8: 4b:72:96:05:d7:78:b6:bb:57:87:25:dc:b8:53:3f:8b:70:3b: 9f:ed:dc:44:3f:ea:d3:01:af:79:d6:9b:70:cf:82:ca:b3:ee: b2:1e:54:f3:75:f3:98:06:31:70:b1:7d:88:4a:1c:e4:65:b5: c6:15:6f:f3:b9:3c:d2:90:c1:fd:3d:2c:b7:3a:4b:e1:5b:03: 33:67:95:44:4f:e7:aa:fb:bd:6a:d8:37:84:d5:e3:bd:c8:36: c4:29:9b:41:b0:04:a4:e0:80:cd:73:22:db:d4:ec:2a:42:96: df:08:d3:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiP/l9ozxwNM12wQlZY8MGhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmN2RhNTY4YWQwMjdiOWUyNDljMTNlMjIzZDMyMjc2OTg4 MWEyOWYwHhcNMjUwODA5MTgwMTA5WhcNMjUwODEwMTgwMTA5WjAzMTEwLwYDVQQD Eyg4MzJmYWY3YWJiYTRlMmY0YjdkODY1NTVjNDcyODMzZTQzZGQxNDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvVHWZhb/5aS4HjRaitVoowsAXKz o0xuHR7sIP6cztVPqd0idFrMoeiC065S6Dgy1BIA4WTBBAIvphUwta86m2JRV+jl ctu6qsnGccsxKB/SkSiDXSd3dUzEY3TRVMi3Hk6jJcI7WXIsA8o9cCAGnWyAARAM yrLm301OS62yHxT6clD+OWwJFXoPtYVZEDwZB6AuQphXc0Qt3aliTh9ZQ8XI4FKU Cv0NKyD39CBjp5Wsd584CSlPuVgvvmAzADJ01RYh9jinuD06eGjRMZSLGjQ+4MRE UuuksggsPvEXkmxWrRpGr0RmOstrdW9XUg1nEtxsIkIkk4/qSDqWWP86MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMvr3q7pOL0t9hlVcRygz5D3RQEMB8GA1UdIwQY MBaAFF99pWitAnueJJwT4iPTInaYgaKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUt Mzc1NzUzOWMyYWM5LzEvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUtMzc1NzUzOWMyYWM5 LzEvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/+N53zV 9YAcEDg9kRskDkJmDbFRlXMTx2WNaqzeL/sBcd8eORxKzSjv897cyHr7nPlbcajz BjhNoDxcYwLDjXfi+EwQ5pYquj1MLelPsEbJvTds++5Xw3O5hO/c7+0P6qsYimVI 3oBMiwYwAJmpqSXB+3cpBcIHGFGNbb5Wdi191cmqsczlyEC/W4ZPo4/IS3KWBdd4 trtXhyXcuFM/i3A7n+3cRD/q0wGvedabcM+CyrPush5U83XzmAYxcLF9iEoc5GW1 xhVv87k80pDB/T0stzpL4VsDM2eVRE/nqvu9atg3hNXjvcg2xCmbQbAEpOCAzXMi 29TsKkKW3wjTuA== -----END CERTIFICATE-----Generated at Sat Aug 9 22:37:49 2025 by rpki-client