$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft File: dOPDNpcglLGowT1BgWhX0Zejquk.mft (raw, json) Hash identifier: nnVVSG/ALved9pITZzEIzrFaI2KDEkdWbEkA1gAxk4I= Subject key identifier: 4D:05:65:05:5E:AE:C8:DF:AE:7D:48:84:A0:D0:DF:80:B1:A9:86:E1 Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9 Certificate serial: 019874F51B05096D544DF422F5DBEBC0E00C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft Manifest number: 1337 Signing time: Mon 04 Aug 2025 12:01:16 +0000 Manifest this update: Mon 04 Aug 2025 12:01:16 +0000 Manifest next update: Tue 05 Aug 2025 12:01:16 +0000 Files and hashes: 1: 1jpCyAps9bajWpTTNjuuJqkvGNw.roa (hash: QdNF4dszmqN93C6OMT7lYcdmskEQt8kQtHTCFEeRLK4=) 2: B-IzhwSKXhHkz88nSETOGD9yRG4.roa (hash: YnLpp9fGmyMsduAjb3ebFR0Lsy/94n7A+dxRiyz9BXo=) 3: LfVA7yFSUE0qhq_HYTK38H6PAlY.roa (hash: Kppg3VjpkBzGqtZq9DRkl+9W1VehTNUgM7T4eg/Jh/E=) 4: UEcNqvrJ5SQl5H_s0LFUfwkR_hE.roa (hash: bIJXuRboJUOwUf77dVkGAbQtOlD1q8qNpaYp5FkD4+Y=) 5: UWwzSZwnxpR_r3Y4D6vttKdBBVs.roa (hash: 7svZa4xV7+uz3XJCftME26l72YGSUBkSe+OkDk5Vluk=) 6: VJ6MDr9v2VTJjopln-NK2ojxFwc.roa (hash: aCjSF+Bt+cDnTvcdibhV9s05hQuvY9LCYp3eMrgD2Ks=) 7: YOcpXFVJRTJW2caFAPTppkNQBuk.roa (hash: bsMm8G8+2Vegzn+c1SqEObi1wuYbeOXaQ994ZEYf674=) 8: a1U9llCdwrEqU4GkcwBsuwGny80.roa (hash: x9+7kA4QQzpZS4+gdNTWeXV2Ehq7i5FwV0w3Ws0zS7A=) 9: bilxvgHa_ortWdZiJoCPu9q2EO4.roa (hash: l/1X47j3OP5z+Rp05LuTXjyl7yZpgOm/aXT90ziTHDc=) 10: btX-zAe_zEJQ3ltM7sZKTKWNtzU.roa (hash: FXQNguGpvehosedHQRjCf06rJkvh5KY35ySN2Wig1dE=) 11: dOPDNpcglLGowT1BgWhX0Zejquk.crl (hash: 8J7tYXX1dCnzi6A9v3wKgRQZxlXPJ5qYSpQ9ONghqTc=) 12: leLN7dUwqNQXTkicjPodaPNaHrA.roa (hash: /TZBYmyqPdbIBcWc+Ubi8mL2e3Sg1zgKUo/8XZMZsK8=) 13: ltEUPJ59iMmxTdNEYLGbM1Yq6jY.roa (hash: 4OyHOUV/gpG2mHKMCDQGjjKuCFHSFtOInlqympBF1Os=) 14: pzyfVcqGqM8oIh9yspKnplAOyo4.roa (hash: hsiUYyCYakxAYsQctvaT1faoOH457ARGeeeeMVZVUZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:74:f5:1b:05:09:6d:54:4d:f4:22:f5:db:eb:c0:e0:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9 Validity Not Before: Aug 4 12:01:16 2025 GMT Not After : Aug 5 12:01:16 2025 GMT Subject: CN=4d0565055eaec8dfae7d4884a0d0df80b1a986e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:24:f3:16:4a:19:19:78:81:b9:d2:35:33:5f: 97:15:06:2e:d6:64:f2:99:f0:28:07:6d:e3:4b:f3: d6:0a:7c:e7:15:e9:9f:37:3d:b5:6e:75:97:42:78: 70:a1:e3:02:c7:a5:6a:7e:4a:9c:cb:ba:94:1f:46: 6f:e5:9e:d3:32:13:c0:7f:0e:4c:5b:ec:61:d5:45: a6:32:0f:32:54:a8:21:8b:bf:d5:71:1c:c4:8d:89: 46:d7:a6:d7:ca:cf:2f:9e:82:d0:cf:b9:b1:90:63: 85:5d:be:07:69:75:79:c1:74:08:2f:75:30:6f:37: 79:24:20:9a:00:4f:3b:bf:37:cb:fd:82:07:bf:f1: 70:7e:da:9d:3d:f9:c5:e5:3f:1e:de:30:a1:1c:6a: 22:50:79:18:0d:b4:c6:62:1c:45:c2:e9:d3:c7:a2: 26:a3:22:0d:77:f2:67:2d:cb:85:ed:dd:f1:77:0b: 3c:e2:4e:b5:2f:de:a6:ed:70:70:9f:67:9a:d5:e1: d8:17:9a:73:0b:32:f9:5b:33:0e:9e:c2:50:60:54: ef:8d:51:8e:b9:55:00:09:e5:75:69:8b:3b:8b:b1: 59:07:dc:26:c6:1f:66:c1:af:23:dd:fb:94:2c:65: fb:61:3d:4a:e9:4e:f7:fb:aa:cf:69:2e:ec:d0:11: b9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:05:65:05:5E:AE:C8:DF:AE:7D:48:84:A0:D0:DF:80:B1:A9:86:E1 X509v3 Authority Key Identifier: keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:1b:61:da:07:11:7f:f5:3d:43:a7:50:ca:2e:72:1d:a2:63: d8:ee:65:ab:68:ea:47:0e:97:fe:27:41:5f:5e:92:c6:dd:1d: 1c:29:25:a0:8f:6e:ae:fd:57:58:38:08:e6:4a:d8:83:a6:68: 83:eb:93:41:48:cc:11:48:59:2e:4a:ef:a4:08:a7:0b:b3:92: 78:74:7b:ae:03:27:22:56:8a:78:55:50:68:a7:71:82:0e:04: 8c:7b:3d:8b:5c:c3:92:e3:30:db:38:a8:39:35:5a:b8:31:54: af:b9:c6:74:74:28:f0:2b:c0:45:86:df:72:7d:01:cb:41:8c: 68:72:45:fc:3d:df:c6:55:fa:76:3a:ba:b7:f8:fa:37:85:b0: e6:f2:d3:3c:64:84:ac:44:64:40:27:cb:10:b0:4c:c0:15:66: 1e:92:18:72:75:de:99:fc:cc:48:c2:31:83:c7:d5:4a:1f:59: 48:19:c7:fd:74:e2:d9:57:62:29:5b:59:9c:a2:e4:46:a1:a9: a3:d8:45:1e:e1:29:fd:d8:40:38:2e:b4:41:dc:f6:cb:c1:f2: 8c:2b:44:f2:f9:d5:56:99:3a:01:ad:b9:f8:03:34:12:6c:10: 38:69:ce:a9:82:ea:f6:13:46:d0:51:de:49:ae:18:d8:29:d5: 72:08:3b:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh09RsFCW1UTfQi9dvrwOAMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh M2FhZTkwHhcNMjUwODA0MTIwMTE2WhcNMjUwODA1MTIwMTE2WjAzMTEwLwYDVQQD Eyg0ZDA1NjUwNTVlYWVjOGRmYWU3ZDQ4ODRhMGQwZGY4MGIxYTk4NmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyTzFkoZGXiBudI1M1+XFQYu1mTy mfAoB23jS/PWCnznFemfNz21bnWXQnhwoeMCx6Vqfkqcy7qUH0Zv5Z7TMhPAfw5M W+xh1UWmMg8yVKghi7/VcRzEjYlG16bXys8vnoLQz7mxkGOFXb4HaXV5wXQIL3Uw bzd5JCCaAE87vzfL/YIHv/FwftqdPfnF5T8e3jChHGoiUHkYDbTGYhxFwunTx6Im oyINd/JnLcuF7d3xdws84k61L96m7XBwn2ea1eHYF5pzCzL5WzMOnsJQYFTvjVGO uVUACeV1aYs7i7FZB9wmxh9mwa8j3fuULGX7YT1K6U73+6rPaS7s0BG5IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0FZQVersjfrn1IhKDQ34CxqYbhMB8GA1UdIwQY MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt YTZjNDllYjI4Mjg3LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3 LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchth2gcR f/U9Q6dQyi5yHaJj2O5lq2jqRw6X/idBX16Sxt0dHCkloI9urv1XWDgI5krYg6Zo g+uTQUjMEUhZLkrvpAinC7OSeHR7rgMnIlaKeFVQaKdxgg4EjHs9i1zDkuMw2zio OTVauDFUr7nGdHQo8CvARYbfcn0By0GMaHJF/D3fxlX6djq6t/j6N4Ww5vLTPGSE rERkQCfLELBMwBVmHpIYcnXemfzMSMIxg8fVSh9ZSBnH/XTi2VdiKVtZnKLkRqGp o9hFHuEp/dhAOC60Qdz2y8HyjCtE8vnVVpk6Aa25+AM0EmwQOGnOqYLq9hNG0FHe Sa4Y2CnVcgg7LA== -----END CERTIFICATE-----Generated at Mon Aug 4 19:00:30 2025 by rpki-client