$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft File: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft (raw, json) Hash identifier: +y+UTkjlHcbz4QjW2VXrH5ouxeo4vrQxYljC0khfMI8= Subject key identifier: 4A:82:45:3D:DC:07:CF:CF:C7:62:48:CF:88:4C:94:28:BF:8D:1B:C8 Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2 Certificate serial: 019880C25CE9AE7DD31E8C734C0EC39A14F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft Manifest number: 162B Signing time: Wed 06 Aug 2025 19:01:17 +0000 Manifest this update: Wed 06 Aug 2025 19:01:17 +0000 Manifest next update: Thu 07 Aug 2025 19:01:17 +0000 Files and hashes: 1: 0bSG1GbQSr3JP2M9BW2A6zWEmWQ.roa (hash: m8/KEzPrRo4PqG3DFfILeyvmSqlK6Zrphut5P8ccG8c=) 2: 9lwL98-HDVBrZzYLRCpSdOAFXpo.roa (hash: Za/9eX9VNb3FiSxJk6MAE/CpFGWxRO5mjghE1elRivc=) 3: B0iUIhkwv2ZZdyXRyu9yUh7Z61o.roa (hash: F6O6OkDRyyyGqFimHsLztSYsh0AUNFPNkRW3jSPwvEw=) 4: I1EoUAseUd3MHO-sI_txqICBiwc.roa (hash: khM+HdjIw9WozXCqEk/wtCOtMrpNfxWXErjSXn8BT5M=) 5: KQ7nGqqdl8DwDw35UdDbOJPZhfY.roa (hash: 8pIf1gsysAeCO62ayw5k2bU+b1g8t0mrR6+zNCtTibQ=) 6: LS_oKjOyENRZwn9y786G7x_fDEc.roa (hash: qwrjawF9Z67WE+ivjm8mPIl3xqaLReHxca9+SNnwKPE=) 7: Pvub5ztTS47f0XG6tBZE9ngX8Rw.roa (hash: euQ5dqT6xwCfoTsPu9P7kfQ9UGdbPzkkEJWSyFwCBTw=) 8: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl (hash: dvZXXdmSScUyS9DElnx4eHxzxVD28o29E3+QZNKRNCc=) 9: lqxGizsVmZbvi7xpd3yzs2I4ILw.roa (hash: aTi4SECMvkjegR9/FyzL9HTmeGkM0AsiVgyipWCsYrY=) 10: sFnlwbiQ75y8_114DKwn3kP_iWc.roa (hash: dkHr9wKemXLLSQfaJK2+kCvWwELtA6u+nMBynz2rXgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 19:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:80:c2:5c:e9:ae:7d:d3:1e:8c:73:4c:0e:c3:9a:14:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2 Validity Not Before: Aug 6 19:01:17 2025 GMT Not After : Aug 7 19:01:17 2025 GMT Subject: CN=4a82453ddc07cfcfc76248cf884c9428bf8d1bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:60:07:10:f0:aa:5d:41:f8:ce:b6:1a:a0:59: 4f:8d:98:68:bf:12:1c:6b:a5:b6:4f:19:c4:0d:ab: 27:f1:8f:d6:fc:04:f0:68:51:ae:70:9c:5d:5c:7d: 1c:07:3d:e1:61:11:d1:27:3b:d0:b4:b3:70:77:6e: ca:f4:b4:99:85:2a:b2:dd:b1:4f:c7:c4:ee:00:be: 2c:c3:66:5e:2d:75:3f:24:47:ff:f3:93:27:ff:b1: 94:af:61:90:ea:c0:93:f3:04:37:33:98:54:2c:fb: fc:cd:d5:62:d3:5e:23:21:bc:76:00:d3:6a:e3:eb: f4:7d:55:7d:36:b3:83:64:7f:9d:b6:b4:d1:22:46: aa:c1:6a:31:03:5b:cd:f8:be:0e:55:05:03:ca:86: 09:48:50:86:39:34:d2:07:76:56:19:b4:ea:6a:70: eb:e9:1c:1f:32:a1:12:65:dd:6a:c1:ca:4f:db:49: 05:32:74:cf:cb:56:02:c8:31:25:19:c3:fc:0a:63: e1:d1:58:af:55:c3:0b:1d:3e:aa:cd:74:e5:e6:7a: eb:b6:51:5d:4d:59:3b:23:70:8d:cd:13:24:f8:74: ac:c7:27:23:5e:1d:91:38:fa:63:ff:45:72:c1:4e: 11:bf:f5:5d:7a:b4:cc:fb:21:f3:b4:c6:36:09:00: 01:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:82:45:3D:DC:07:CF:CF:C7:62:48:CF:88:4C:94:28:BF:8D:1B:C8 X509v3 Authority Key Identifier: keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:e5:e8:2f:c9:58:16:8f:01:8b:21:e9:09:e9:8d:0c:6c:08: 33:90:b0:3a:4b:11:ed:f8:a3:62:b8:8d:91:05:17:9a:08:3a: 93:92:49:73:58:bd:de:cd:25:51:57:e6:4e:c2:3e:27:72:7a: ca:41:67:a6:d3:72:02:06:d2:03:7f:f9:2b:e6:c5:a3:32:a6: ff:b6:03:81:44:a4:ad:8b:73:79:4d:ad:d5:b0:ac:90:f2:95: f7:1b:a7:6f:af:59:75:ac:b3:3d:a5:cb:a8:4e:18:0b:98:31: 5d:6d:38:f4:16:d6:b7:27:37:4d:bd:02:5e:54:19:13:e1:02: 4f:26:c5:55:81:50:ac:fb:df:bd:08:0d:2f:12:d5:70:5d:8b: f4:9a:a7:70:7d:5a:31:b9:99:c7:20:78:2e:c5:88:83:41:04: a4:b4:a2:e1:91:72:6e:57:a4:c6:af:a8:cb:71:c9:8d:ce:ce: a8:83:d6:8a:d1:b3:c9:3e:b5:34:dc:f0:3e:50:f2:7e:db:82: 81:32:5b:31:ac:c2:b0:88:08:5d:32:6a:2a:15:0e:f2:ff:ac: df:f4:11:99:7e:02:04:a0:42:9c:1f:e3:d4:f0:75:d3:a4:44: 7c:10:a3:02:ab:f0:38:7c:32:df:69:1b:06:da:fd:74:82:6b: d8:ac:9d:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiAwlzprn3THoxzTA7DmhT5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy MWZjZjIwHhcNMjUwODA2MTkwMTE3WhcNMjUwODA3MTkwMTE3WjAzMTEwLwYDVQQD Eyg0YTgyNDUzZGRjMDdjZmNmYzc2MjQ4Y2Y4ODRjOTQyOGJmOGQxYmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGAHEPCqXUH4zrYaoFlPjZhovxIc a6W2TxnEDasn8Y/W/ATwaFGucJxdXH0cBz3hYRHRJzvQtLNwd27K9LSZhSqy3bFP x8TuAL4sw2ZeLXU/JEf/85Mn/7GUr2GQ6sCT8wQ3M5hULPv8zdVi014jIbx2ANNq 4+v0fVV9NrODZH+dtrTRIkaqwWoxA1vN+L4OVQUDyoYJSFCGOTTSB3ZWGbTqanDr 6RwfMqESZd1qwcpP20kFMnTPy1YCyDElGcP8CmPh0VivVcMLHT6qzXTl5nrrtlFd TVk7I3CNzRMk+HSsxycjXh2ROPpj/0VywU4Rv/VderTM+yHztMY2CQABEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqCRT3cB8/Px2JIz4hMlCi/jRvIMB8GA1UdIwQY MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt Mzk1NTk1OWVhZjgxLzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeeXoL8lY Fo8BiyHpCemNDGwIM5CwOksR7fijYriNkQUXmgg6k5JJc1i93s0lUVfmTsI+J3J6 ykFnptNyAgbSA3/5K+bFozKm/7YDgUSkrYtzeU2t1bCskPKV9xunb69ZdayzPaXL qE4YC5gxXW049BbWtyc3Tb0CXlQZE+ECTybFVYFQrPvfvQgNLxLVcF2L9JqncH1a MbmZxyB4LsWIg0EEpLSi4ZFyblekxq+oy3HJjc7OqIPWitGzyT61NNzwPlDyftuC gTJbMazCsIgIXTJqKhUO8v+s3/QRmX4CBKBCnB/j1PB106REfBCjAqvwOHwy32kb Btr9dIJr2KydVQ== -----END CERTIFICATE-----Generated at Thu Aug 7 02:09:39 2025 by rpki-client