$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft File: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft (raw, json) Hash identifier: /z5otJUSErEpqGC9q9QN5AYJF6C/JaKb3WV8/s7M56c= Subject key identifier: FE:6F:8F:6F:07:A8:4D:29:4D:B8:20:7E:5B:5B:14:15:1B:0C:49:D7 Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Certificate serial: 019872CFC89877FBB48D48B640927BF9FC85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft Manifest number: 161C Signing time: Mon 04 Aug 2025 02:01:16 +0000 Manifest this update: Mon 04 Aug 2025 02:01:16 +0000 Manifest next update: Tue 05 Aug 2025 02:01:16 +0000 Files and hashes: 1: 6QFd9IdVpCQmItNCPxRFCrp9nKQ.roa (hash: bGmgyU+MRUomnlmMA4u5BiNJcGHkzxHgj+I3pHeo+G0=) 2: 7dsX1_uj3CI2OL3ZR-YysHvbwJk.roa (hash: /UJ2jaPIsh9LABzhutyiOz6tqO3pebNJplX7fsJ15q4=) 3: 9x0cjGr7YULmSfzI3dcYG9w_06I.roa (hash: nZkDj/8oM/37FYrz8May17dhFjnT3DNeVQBgn2oaZf0=) 4: EBjZlhPdImN_fmswrc4n1qFbaJc.roa (hash: tUvTqcEJd5jRcaH6HCXAi4EQUm+eSxMyHWyd2ocWiV8=) 5: GNcbaUuI19-wbs7GLcE1lajDv-k.roa (hash: JkYHzX+XVOiUvpRyMV+wrBz6xce9nKA7hPNlot5aQZ4=) 6: PX0DpkBl9yg1gQzNf2fXaFsswv8.roa (hash: fegY3SzHduBrH8eO5Wo9IcX0cjRfR9p14sX7mhpiZ8U=) 7: SHXtPV4kgZiSMLrfaQNfttE3YEg.roa (hash: vCULHOU0pm0NUpWsnrVNz86sxtEUOZpw65hpej3MIxs=) 8: TEHPMPoZisl9vOiLWV_tB3SmWaI.roa (hash: /q8DB82i9XChVszHx+lvwBEwJCoXbxAKUBSDji6t9Ek=) 9: VAwOmXBu3_hb-94kaLmxAE_i7pI.roa (hash: IZvIAsZ3NFMGzz4y4fdnumBCA9Bj3yp20yIaQmXg3Fo=) 10: YTPIeKA6vN8bBsCmmqzk6w3bpmU.roa (hash: Mo6Tf23Yod2O05O4042OzPfIL4jXB8/HVLdp8MJUwtk=) 11: YrZdH5pglRx66b5p9JGRz_SyZts.roa (hash: mhtrEJveZQw15THeEWaXosd9inWt6asg5tmlg7bP8KA=) 12: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl (hash: xJTSxaPDGMVt/IRFCx2aaOBGQC/LCVkZf4t81/Y6/ig=) 13: k34T0BOxtuolFGK7D9gfPSVqjyg.roa (hash: zRGBGpZvNTWiV1L4FpZxoKUzkhe3V2xnMgLC1QF7Yns=) 14: p9yFoBCMLxcx2kyLnzIglbUZt8Q.roa (hash: fbxtSkZt340A9KV6V1MZj2gG37RK0K88NQoLtoEEGa0=) 15: rm3UHUFplAChrToLa297UrTCIuo.roa (hash: HHiyje/4Xaq3L0LGhP0VYLYtVuy3S8HWVlC7cJ7pBgA=) 16: yKPpEfXuR3hgVnHrW-SosrWvchI.roa (hash: JRlziFyrSVh96Xmb3+ZOE6HFj6jm/zMUIwmBAAhdoq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 02:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:72:cf:c8:98:77:fb:b4:8d:48:b6:40:92:7b:f9:fc:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Validity Not Before: Aug 4 02:01:16 2025 GMT Not After : Aug 5 02:01:16 2025 GMT Subject: CN=fe6f8f6f07a84d294db8207e5b5b14151b0c49d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e3:2f:33:a7:3c:20:26:9d:b2:6a:a9:4e:c8: 98:45:5e:9a:7d:f6:a2:1e:2f:7d:16:a1:47:55:9f: 54:cb:09:0a:e8:c3:2f:29:15:5a:94:55:62:fe:fe: a4:ae:59:39:dd:9b:9d:38:f6:90:f4:6d:27:81:5d: b1:67:e7:62:4e:0c:43:9c:45:aa:0b:92:dc:80:c2: de:a8:06:7c:9b:a0:fe:48:15:cb:84:48:62:4f:d9: 4b:7b:9e:98:45:8f:5e:04:e1:d7:e7:8b:7c:7c:31: 83:1a:9f:f6:4a:7a:18:7e:12:63:70:5a:ab:99:74: 4c:13:97:1a:c8:c1:b5:89:5c:a3:bb:4f:25:94:4b: 89:42:03:8f:8d:a7:d5:41:b1:d4:7c:ca:84:ff:6c: 83:f8:a3:c2:61:e3:6b:1c:bf:90:52:14:91:0a:04: d1:1d:3d:01:4b:34:a1:0e:ab:c6:98:a7:c8:c0:87: d5:fa:38:47:7a:66:d2:cf:d5:d1:88:d6:a3:90:b1: 2a:e3:c5:4c:d5:f5:9e:fe:a2:f5:e3:aa:ca:35:d6: fe:07:66:26:fa:36:0d:43:7f:1f:a6:e2:dc:77:2c: d0:02:a8:cb:9a:a1:7f:4d:19:e7:49:a9:cc:87:f6: 46:46:31:6e:fa:76:cd:e3:11:a7:35:38:00:9d:ee: 7e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:6F:8F:6F:07:A8:4D:29:4D:B8:20:7E:5B:5B:14:15:1B:0C:49:D7 X509v3 Authority Key Identifier: keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:7e:a9:1d:2a:32:20:67:51:6f:71:9e:9c:2b:e7:33:04:a5: 08:c0:c2:fb:e9:03:80:ce:c7:4c:eb:c3:af:f4:53:c5:c9:ff: 15:67:1f:df:a3:e7:93:46:dc:23:27:50:f8:10:72:32:b8:c2: 99:27:94:b9:85:f6:38:70:77:94:fa:69:47:6e:4f:56:c4:5a: 40:b5:fc:d9:49:ac:26:37:19:bd:52:5f:5f:ba:47:36:0b:77: 5d:79:bf:3d:99:74:63:2e:8a:09:4f:40:1e:d4:2d:96:9d:58: 5b:d9:10:a2:4e:ac:99:e8:25:47:02:8f:68:7d:ee:8c:17:ed: db:d7:9d:15:43:a3:a8:47:44:e1:31:68:78:8b:b4:3b:e1:4d: bf:d0:a8:e0:b7:98:75:6f:02:53:d8:04:37:7f:f3:3d:f7:05: 2d:71:4d:c2:35:74:09:40:3b:da:78:1c:3f:3d:87:d7:79:1d: f8:ae:3a:fe:3a:86:29:dc:25:8e:d5:e5:8c:7e:72:e8:fe:5a: 51:da:3c:1f:62:d7:5b:4a:fa:04:80:fb:18:6c:de:ce:b1:6d: 1a:90:ad:5e:09:d7:f4:5d:fc:80:ac:2c:17:d6:af:5e:c1:80: 3d:10:3d:a2:c9:cd:02:fa:03:23:58:91:56:06:e8:11:9d:62: c3:7a:c6:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhyz8iYd/u0jUi2QJJ7+fyFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZWQyZmJiNzIxM2ZiZjMyYWQ0YzA4N2Y4YjBiMjJjZWNl ZjRmZWEwHhcNMjUwODA0MDIwMTE2WhcNMjUwODA1MDIwMTE2WjAzMTEwLwYDVQQD EyhmZTZmOGY2ZjA3YTg0ZDI5NGRiODIwN2U1YjViMTQxNTFiMGM0OWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eMvM6c8ICadsmqpTsiYRV6affai Hi99FqFHVZ9UywkK6MMvKRValFVi/v6krlk53ZudOPaQ9G0ngV2xZ+diTgxDnEWq C5LcgMLeqAZ8m6D+SBXLhEhiT9lLe56YRY9eBOHX54t8fDGDGp/2SnoYfhJjcFqr mXRME5cayMG1iVyju08llEuJQgOPjafVQbHUfMqE/2yD+KPCYeNrHL+QUhSRCgTR HT0BSzShDqvGmKfIwIfV+jhHembSz9XRiNajkLEq48VM1fWe/qL146rKNdb+B2Ym +jYNQ38fpuLcdyzQAqjLmqF/TRnnSanMh/ZGRjFu+nbN4xGnNTgAne5+0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5vj28HqE0pTbggfltbFBUbDEnXMB8GA1UdIwQY MBaAFHLtL7tyE/vzKtTAh/iwsizs70/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTkt YTY1MjMzYjNlOTc1LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTktYTY1MjMzYjNlOTc1 LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT36pHSoy IGdRb3GenCvnMwSlCMDC++kDgM7HTOvDr/RTxcn/FWcf36Pnk0bcIydQ+BByMrjC mSeUuYX2OHB3lPppR25PVsRaQLX82UmsJjcZvVJfX7pHNgt3XXm/PZl0Yy6KCU9A HtQtlp1YW9kQok6smeglRwKPaH3ujBft29edFUOjqEdE4TFoeIu0O+FNv9Co4LeY dW8CU9gEN3/zPfcFLXFNwjV0CUA72ngcPz2H13kd+K46/jqGKdwljtXljH5y6P5a Udo8H2LXW0r6BID7GGzezrFtGpCtXgnX9F38gKwsF9avXsGAPRA9osnNAvoDI1iR VgboEZ1iw3rGQQ== -----END CERTIFICATE-----Generated at Mon Aug 4 11:00:04 2025 by rpki-client