$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft File: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft (raw, json) Hash identifier: eR+BuYKkA2AC9BH4uQ/VT17wNIFbAry/dqsL2K19RE4= Subject key identifier: 38:05:A6:74:DE:4C:DD:95:CB:1D:BC:48:AC:95:69:B8:1F:38:B8:09 Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b Certificate serial: 01987CAE4DFC640E88D4AE1591260DFF89AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft Manifest number: 1626 Signing time: Wed 06 Aug 2025 00:00:54 +0000 Manifest this update: Wed 06 Aug 2025 00:00:54 +0000 Manifest next update: Thu 07 Aug 2025 00:00:54 +0000 Files and hashes: 1: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl (hash: dcxcjO0FcwJjMfyceeyO6voAhBCtauOjKeHZHq//m7I=) 2: 2FKZPhg0yZwll-7IKKrQiY_2JZg.roa (hash: gHgBdXS8XWNL7U3Ymd+KumYNoM9Ez64AQgUONNJnO6M=) 3: Ml6MKIuGs5X6FYCoibWIrDM8sZw.roa (hash: sr8ii208yixvZe4Nt1vf4FirRpNYMo5v1lAxQmPyK4E=) 4: NeK3VE5xIVumcURQvZORGSezPug.roa (hash: Kyuhso1DU/JY4Cd8KqltzS/UkVVtl7rIX1KuhxLgmkQ=) 5: SAShV7Cx-3cRFcPWPoHPU7seh9k.roa (hash: lzRGc/kfVkESt27Rk5Rm2MTThTLX4bNiPJvrX6OzG4s=) 6: TWLMxWYadUOjpfWSoRjdz4gkQVQ.roa (hash: eJJWCwgtvt1cLj2rlNHb1YuUwHOAuKtSsp+SGbWPUGI=) 7: U2YIuXAyUCZOsR4Cw5PSPdwaU0s.roa (hash: gWdVxjtR19wt31Bo3G5JO46Z63mY8LolhR8kTQQgD5Q=) 8: WvZhz4-xli7Jg3AjUEb09s8yIcg.roa (hash: nyDmjCwaWeBGV6O57JlcDsH1rd4TtVrk7nDHN+GYZDc=) 9: kSLVwGt_NyDYhkUM69fkyKqLKhE.roa (hash: 4uQpl4b7ipDKF9oMjr4f401/xIMAMkUuha8dHxAMb/k=) 10: vDXI6zDZCtBj_jhc2X0hLjsgR8Q.roa (hash: z26aGtU0D7UYmGcPjOFI1fCBSEy79I6N0Y6rtSN2uVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 23:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7c:ae:4d:fc:64:0e:88:d4:ae:15:91:26:0d:ff:89:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b Validity Not Before: Aug 6 00:00:54 2025 GMT Not After : Aug 7 00:00:54 2025 GMT Subject: CN=3805a674de4cdd95cb1dbc48ac9569b81f38b809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c0:4e:a9:98:58:62:4e:79:20:df:f1:4a:9e: 91:26:5b:a2:e8:c0:91:51:1e:59:87:a6:84:ff:4a: bf:02:3e:f7:29:5f:45:15:27:33:dd:dd:9d:e2:85: 24:c2:86:73:7f:5d:a2:ce:a9:1b:52:41:50:fa:23: 44:84:b7:b5:f4:c8:87:d8:14:1f:a4:ba:99:ed:f5: 3e:75:9e:e6:24:f5:de:dd:ff:f9:6a:92:ae:1c:3f: a4:d2:d7:18:a7:21:f9:26:94:50:69:a1:c4:74:78: 16:ee:43:33:4a:e8:b2:ed:d6:94:74:76:95:e5:39: 89:3c:23:32:eb:1a:9c:47:d4:fc:65:46:28:65:59: db:b1:79:27:89:ae:d9:16:8f:87:c1:e7:17:8a:9e: c6:b5:4d:28:a2:01:fe:16:0c:2a:dc:88:bf:a2:14: 12:63:61:0a:e6:08:ef:04:68:1f:11:e1:33:31:b9: d6:63:1b:23:69:20:56:0f:0c:85:e8:1c:d9:ac:cb: fa:ad:f4:0c:9f:3a:82:3a:ac:0d:c3:aa:19:e9:a0: 54:64:26:9a:09:54:27:63:3e:39:5e:3f:21:57:fd: 4e:10:fc:0a:dd:7f:fb:c7:52:55:6b:03:ec:7d:99: 6d:2c:61:d1:c4:25:7f:a2:c2:d4:7b:68:37:d2:34: 2f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:05:A6:74:DE:4C:DD:95:CB:1D:BC:48:AC:95:69:B8:1F:38:B8:09 X509v3 Authority Key Identifier: keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:aa:ae:bb:8e:40:7d:4e:6d:87:75:63:24:1d:fb:7e:de:24: 48:40:49:53:3b:e6:71:4c:ba:5b:06:46:e0:93:82:20:ae:c9: 47:71:1c:be:d7:7e:c6:2f:63:6f:e1:11:da:77:9e:07:4f:7c: 23:7e:8e:db:f1:d1:39:f7:57:0e:ed:5f:1b:87:28:c5:e2:c4: 03:ee:e9:a3:c5:e0:b7:26:62:74:4f:f9:a7:a1:36:af:22:1c: 74:40:d6:24:2f:ec:8a:14:c2:66:88:59:f5:19:bc:9a:1c:93: 35:ba:bf:38:97:04:fd:f0:ba:ed:d8:17:33:0d:82:7d:93:5e: 54:ef:1c:9e:76:b6:db:33:58:b5:bf:47:42:81:8b:aa:54:9e: 93:dc:1c:5e:99:05:0a:ee:48:49:ab:ae:59:8e:72:3e:e5:6b: a8:39:56:1f:ad:bf:07:c8:92:2e:12:0e:fd:a2:70:8d:15:57: bd:51:5e:86:2f:1c:4b:ca:b5:a4:1d:78:b7:6d:ed:45:20:89: 7e:22:bc:ad:b4:ef:24:9d:e0:f6:cc:6f:f6:fc:9b:cf:10:e0: e6:51:70:b0:23:c6:83:b3:e6:23:f0:1f:9f:c2:d0:56:15:ad: b7:01:b4:5e:ca:ed:72:b0:83:d6:73:52:3f:22:06:f5:0f:5f: 9a:90:a7:e2 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZh8rk38ZA6I1K4VkSYN/4msMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZDcxMDBlNzdlZDkxMTlkNjZlMjMyMWJiNjcxMWQ3ZTc2 MDk4MmIwHhcNMjUwODA2MDAwMDU0WhcNMjUwODA3MDAwMDU0WjAzMTEwLwYDVQQD EygzODA1YTY3NGRlNGNkZDk1Y2IxZGJjNDhhYzk1NjliODFmMzhiODA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcBOqZhYYk55IN/xSp6RJlui6MCR UR5Zh6aE/0q/Aj73KV9FFScz3d2d4oUkwoZzf12izqkbUkFQ+iNEhLe19MiH2BQf pLqZ7fU+dZ7mJPXe3f/5apKuHD+k0tcYpyH5JpRQaaHEdHgW7kMzSuiy7daUdHaV 5TmJPCMy6xqcR9T8ZUYoZVnbsXknia7ZFo+HwecXip7GtU0oogH+Fgwq3Ii/ohQS Y2EK5gjvBGgfEeEzMbnWYxsjaSBWDwyF6BzZrMv6rfQMnzqCOqwNw6oZ6aBUZCaa CVQnYz45Xj8hV/1OEPwK3X/7x1JVawPsfZltLGHRxCV/osLUe2g30jQvmQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDgFpnTeTN2Vyx28SKyVabgfOLgJMB8GA1UdIwQY MBaAFPrXEA537ZEZ1m4jIbtnEdfnYJgrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS10Y1FEbmZ0a1JuV2JpTWh1MmNSMS1kZ21Dcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvMDFkNDExLWQ5MTUtNDI3Ny04ZmUy LTc2YjBkZGEyYmYzZS8xLzEtdGNRRG5mdGtSbldiaU1odTJjUjEtZGdtQ3MubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzNlLzAxZDQxMS1kOTE1LTQyNzctOGZlMi03NmIwZGRhMmJm M2UvMS8xLXRjUURuZnRrUm5XYmlNaHUyY1IxLWRnbUNzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgKqu u45AfU5th3VjJB37ft4kSEBJUzvmcUy6WwZG4JOCIK7JR3Ecvtd+xi9jb+ER2nee B098I36O2/HROfdXDu1fG4coxeLEA+7po8XgtyZidE/5p6E2ryIcdEDWJC/sihTC ZohZ9Rm8mhyTNbq/OJcE/fC67dgXMw2CfZNeVO8cnna22zNYtb9HQoGLqlSek9wc XpkFCu5ISauuWY5yPuVrqDlWH62/B8iSLhIO/aJwjRVXvVFehi8cS8q1pB14t23t RSCJfiK8rbTvJJ3g9sxv9vybzxDg5lFwsCPGg7PmI/Afn8LQVhWttwG0XsrtcrCD 1nNSPyIG9Q9fmpCn4g== -----END CERTIFICATE-----Generated at Wed Aug 6 09:35:21 2025 by rpki-client