$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft File: b3Xk6Utct0UXt7AVaAFdqebuzbY.mft (raw, json) Hash identifier: GgELyrVoVUKz9xBch4ZMqVC5DVXBgxioRCbf/lHvE9Y= Subject key identifier: A4:CB:FD:0A:2F:69:DE:BD:22:52:F7:88:D3:4E:57:69:A7:9F:DD:60 Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Certificate serial: 01987562FD0F5682FFC9489EBB680C3D31B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft Manifest number: 0D85 Signing time: Mon 04 Aug 2025 14:01:18 +0000 Manifest this update: Mon 04 Aug 2025 14:01:18 +0000 Manifest next update: Tue 05 Aug 2025 14:01:18 +0000 Files and hashes: 1: 4gI_4-IO4A-DLjbwey2IpOI1Gac.roa (hash: mQ7omWDIQV8V9vzwSyRnlClYxhElWnlIxHJNMRFaihs=) 2: 4vux7awz3E36tFDHIazA7-jkwq4.roa (hash: wB2NxL5iO7Z/8XbFdlxXumlf3zZuQEhQW8UuOP6HgoY=) 3: Ph2VzfPmPZtEPzSLkO7pzzgo-po.roa (hash: fkmSgLLFQNKR7Q8TZwhTdwOECOCKZn3/ppvBg4D1aeM=) 4: REOoP6Y8-wsgon83LmwFQJMZALc.roa (hash: A4lQGU6MhGm6OdwWVbHE5BG8fr09wGeJM7NnUUCETR0=) 5: TsGqxUBkJwOPQAWoVKR2AEF1ans.roa (hash: uv2TTIYvJgqngCKe+XNr+deXWi65MhBACHmWx2No1ag=) 6: b3Xk6Utct0UXt7AVaAFdqebuzbY.crl (hash: 3aYldPgRuZLw/RDdQC4acc1Da8jn3WaFVuFEcT5GaWU=) 7: bZMlD1Y77PgWJ1xWmATYPpeyC0k.roa (hash: XSw5SUqzb2aaTCuEPmjgnH1OQzmaZQAkoLsb10FnfxI=) 8: dgaS6fn3OpV72cEYNy7VeVSk2tE.roa (hash: t9/MBst/MC7EkBAyzHdTuY3YBMIxG+Elxy81Bz6kYyc=) 9: ps-zGnTGe4PKACLSOfDDMQx9t_M.roa (hash: xpFFfF+DS0D5TdCkxuXovC0W/qhotMUgVNP3M/NZPEQ=) 10: rzIBmBWw3qJ2DmXGis1jynjXok4.roa (hash: ASwn1bLvv7MmInkvVqrqb1niCj3V+gQdtibxQbu0H/k=) 11: z0Qvo_o1aarIKR-qrgaRYpvfwjc.roa (hash: RiWOkvqrTFK0brETv9UpsQbvKc3QbmQ0OasKxFLAePE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:75:62:fd:0f:56:82:ff:c9:48:9e:bb:68:0c:3d:31:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Validity Not Before: Aug 4 14:01:18 2025 GMT Not After : Aug 5 14:01:18 2025 GMT Subject: CN=a4cbfd0a2f69debd2252f788d34e5769a79fdd60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9b:73:45:5c:d3:39:f8:e5:e8:8d:8f:e8:6e: 5a:e6:b6:6a:27:57:fd:b1:fd:54:18:6e:46:57:30: 6d:d6:9e:fd:c6:1a:4a:61:da:e7:29:e9:81:33:2d: 08:60:ea:99:98:b1:ba:f4:16:b7:99:4d:eb:79:56: 44:5f:2a:98:f5:6f:fb:ac:5a:e5:fa:74:78:f2:88: 91:83:15:5b:d9:a9:45:25:c2:89:ad:45:4e:64:5e: 35:20:d0:68:f0:b4:e9:6c:35:58:84:29:52:d8:8d: 04:de:d8:57:b8:41:65:4b:d6:fd:22:b8:89:3a:10: 8d:7b:a2:2a:e1:79:4a:21:94:a4:23:c2:6f:98:4f: db:16:33:70:17:4a:cd:6f:7b:13:ed:af:0a:33:8b: aa:b7:4d:97:eb:60:f0:26:0a:5d:c1:d2:d4:ed:55: ed:f1:ec:a8:ff:89:42:3a:6f:78:32:79:f3:f1:e2: d2:d6:2d:a0:e6:8e:0a:ff:03:8f:b6:a1:4c:5a:26: a7:fd:49:d8:94:95:cb:54:01:8d:5d:70:26:99:55: 1f:31:24:a8:50:56:ff:a8:75:a5:87:28:3f:0a:f1: fa:69:cd:a7:f7:21:15:6b:46:f5:0a:bd:a1:e5:2d: da:7d:8d:e2:5b:19:88:23:27:ff:97:b7:aa:0d:79: 7f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CB:FD:0A:2F:69:DE:BD:22:52:F7:88:D3:4E:57:69:A7:9F:DD:60 X509v3 Authority Key Identifier: keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:b6:2f:87:ab:e7:ba:76:b7:38:15:84:7b:21:86:94:5c:8b: b7:1e:51:19:4b:a7:1d:46:a1:09:3c:83:4a:45:99:d0:16:fa: 4e:cb:d9:d5:76:a8:6d:9b:a6:03:0f:32:27:7f:e0:e3:f4:2a: 80:bb:d1:78:35:eb:c5:86:f0:56:9d:df:73:e1:60:00:45:85: b4:06:6e:ef:09:c3:f7:f5:96:d6:71:74:9e:fc:18:77:e3:ff: e0:77:40:cf:c9:29:6b:f9:7c:3c:88:18:d2:59:cd:05:04:fb: 1b:2e:19:e6:da:5e:8d:b8:00:3a:f3:52:0f:77:c1:6a:c1:db: 56:b2:98:25:d8:bb:5a:0f:6f:50:e4:59:74:6d:8c:4f:3f:5e: 83:8e:18:05:06:45:d4:a0:fd:e1:f7:65:a5:69:03:9b:54:2e: c3:f9:4f:b2:a3:5b:67:2f:2d:fa:61:1f:a4:bf:eb:95:32:1d: 53:42:20:09:f1:93:26:fd:8f:df:18:d9:13:a7:d6:01:38:e9: 1a:40:84:2b:cf:29:11:a7:eb:9b:6c:17:a2:98:b4:73:47:ae: bc:85:8e:11:be:ca:1a:26:d2:00:88:91:e2:7d:dd:d6:91:42: 2d:49:2e:5b:e1:47:f3:62:ec:46:d0:3b:90:cb:76:e7:4b:9c: d4:93:2a:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh1Yv0PVoL/yUieu2gMPTG3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl ZWNkYjYwHhcNMjUwODA0MTQwMTE4WhcNMjUwODA1MTQwMTE4WjAzMTEwLwYDVQQD EyhhNGNiZmQwYTJmNjlkZWJkMjI1MmY3ODhkMzRlNTc2OWE3OWZkZDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5tzRVzTOfjl6I2P6G5a5rZqJ1f9 sf1UGG5GVzBt1p79xhpKYdrnKemBMy0IYOqZmLG69Ba3mU3reVZEXyqY9W/7rFrl +nR48oiRgxVb2alFJcKJrUVOZF41INBo8LTpbDVYhClS2I0E3thXuEFlS9b9IriJ OhCNe6Iq4XlKIZSkI8JvmE/bFjNwF0rNb3sT7a8KM4uqt02X62DwJgpdwdLU7VXt 8eyo/4lCOm94Mnnz8eLS1i2g5o4K/wOPtqFMWian/UnYlJXLVAGNXXAmmVUfMSSo UFb/qHWlhyg/CvH6ac2n9yEVa0b1Cr2h5S3afY3iWxmIIyf/l7eqDXl/wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTL/Qovad69IlL3iNNOV2mnn91gMB8GA1UdIwQY MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt NjY0NTc3MjRjMmQzLzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsbYvh6vn una3OBWEeyGGlFyLtx5RGUunHUahCTyDSkWZ0Bb6TsvZ1XaobZumAw8yJ3/g4/Qq gLvReDXrxYbwVp3fc+FgAEWFtAZu7wnD9/WW1nF0nvwYd+P/4HdAz8kpa/l8PIgY 0lnNBQT7Gy4Z5tpejbgAOvNSD3fBasHbVrKYJdi7Wg9vUORZdG2MTz9eg44YBQZF 1KD94fdlpWkDm1Quw/lPsqNbZy8t+mEfpL/rlTIdU0IgCfGTJv2P3xjZE6fWATjp GkCEK88pEafrm2wXopi0c0euvIWOEb7KGibSAIiR4n3d1pFCLUkuW+FH82LsRtA7 kMt250uc1JMqNg== -----END CERTIFICATE-----Generated at Mon Aug 4 19:05:34 2025 by rpki-client