$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft File: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft (raw, json) Hash identifier: MvnTpew9F305Q3xUbP8cUZM3KNU0AY+3Z+RbTZr8ErM= Subject key identifier: 64:4E:DE:D4:AC:BE:FA:20:A5:19:CD:7C:CE:AB:6A:6A:85:8E:51:10 Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea Certificate serial: 01988FC791606DA9B01FF1E0CC6A9F253BAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft Manifest number: 1632 Signing time: Sat 09 Aug 2025 17:01:17 +0000 Manifest this update: Sat 09 Aug 2025 17:01:17 +0000 Manifest next update: Sun 10 Aug 2025 17:01:17 +0000 Files and hashes: 1: 0GQGYjFgeoe90j-QzubD6mrcJkk.roa (hash: cASoDwOCqQQo3HckgWr9Fm6RrFpE5g5vgsJJsPTF9PI=) 2: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl (hash: dUMI06FbuXE9Sd9DNrnEZhvZ/4MDD02g7loEDTcthCs=) 3: 5YsWNoJ_eVXnLQUmvRfRv35-ITo.roa (hash: +Wt4CaG2KBebUdy7DTYqNM4+qA+qSGjkIL8Uj7jYbKY=) 4: LkZMbp2aUa0yXxOxLWaqN5AS52o.roa (hash: o8vH7FtM5V/qTZoiT6aAxSseM4Yg902eHtLadTVcAzY=) 5: N5NvCVL9qwjYZWiGAgoiE3kpDsM.roa (hash: /XNE593x81Nv5d88KdthJ5cf11PusTGT9f+nPTiwsmQ=) 6: O2VeVpIY0NqqJs4saKQoTuFoA6I.roa (hash: eCU07QC/oP0X/AS+uAyqKGOShTlcgaS/MZcj5EXt1FQ=) 7: PmeI5MIhQ4wxSrPUPOIOQ9Ubvnk.roa (hash: W6jZRl9BSEjjkm486LLqed9ed+xxHLYMlqc3sRgCALQ=) 8: QJVbOLfuQimwnt2csTkB91gXkec.roa (hash: GkGvp1WsMKLXrnxKgO0ikQrOP7Rki9hxYkm+S7LbAS8=) 9: RTN7ctApkTYd2Og2JaBeJOrSDKw.roa (hash: PECp9vVhGIOoiVTK3bRnzPU+NWZIUXb57SnIExeKGko=) 10: ZFUmkI5Si20CHGaDBK-ZoNXIfEk.roa (hash: 4y56G8cf16t1jWavTqKOCy9B29Mw+jTHj1dGwOZOhA0=) 11: _28X1lMsvBxqScVY5HiVqqNdE4o.roa (hash: 1zLcZ1CwGAvvzQsYCPPfZSZE3xWE9xsMdQ0aDUZbc8g=) 12: cdmQ2_ODlCp8h7SlTaorYnidAuk.roa (hash: +IC730dtvUCM5X3ceJwMJA3N6qWFyePDz8c3aKLMcqE=) 13: gWN0YMhA97UPOTqYvOMM9zaPWRs.roa (hash: Hm5lPWw7bUXDdTOs1pfp1fHbk/bNa8PnxIySi1lfXPs=) 14: iY_9p9rfYCrq76s6mH8iLmqZ8G4.roa (hash: WZh8CFIJ4XBLsbT8NvOnixg7Xgopb12vdZ21KTVanqQ=) 15: jTMPeohgGOxcMFZVU8z0ehshce0.roa (hash: SyL8iMLhykQz8ANtvdKfK1EugykUZcu24olhfWQesXo=) 16: n7V7OXaDS-XvJc4UQc5MPqTFYmY.roa (hash: 0QBDYhcEfGTqjEJgSs+TOY3XMDZsBCVa117v4v2Y4iI=) 17: uEsfVd8NIzUxBoG774jECjWdTsY.roa (hash: lAehouSKcnB2amZVq4TUPtcrTxH5jfwC6dVK0vZrRgI=) 18: vlDfC43FHcefunPJngYR1WAZ7rA.roa (hash: az+OZ3tRKu13gj7aBFAWboRwowS41+dYdps7euT4uWg=) 19: w_D8ebnb3eRC6CWTSI4QXg7yIcA.roa (hash: cKSU2IKqf8A5+vV8g8UVVjc9ie4gyRlLREV+QT0zjV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:8f:c7:91:60:6d:a9:b0:1f:f1:e0:cc:6a:9f:25:3b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea Validity Not Before: Aug 9 17:01:17 2025 GMT Not After : Aug 10 17:01:17 2025 GMT Subject: CN=644eded4acbefa20a519cd7cceab6a6a858e5110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:64:f9:40:02:7f:3d:ea:67:dd:86:79:d7:7e: 12:8f:ee:36:bd:8f:8e:fb:cf:8d:f0:75:fb:2d:a1: d1:33:b0:6c:54:92:f7:0f:f6:fc:6f:d7:f8:f0:8a: ec:84:68:7a:93:12:24:47:cf:11:7a:2e:e2:1a:ee: db:17:e5:20:a8:c9:64:ce:b8:8d:40:e9:ab:b9:8e: b7:3c:e4:4f:60:54:db:3d:19:25:78:0e:8f:07:3c: c8:5f:a6:66:d2:6a:60:36:84:1b:f3:31:a1:9e:5f: 44:c1:3d:20:fa:51:29:1e:ac:26:87:35:52:3b:23: be:3f:54:9d:17:8b:b9:7e:1f:2e:95:f4:89:4f:f1: a7:4a:d1:93:ad:0a:dc:58:c3:4d:56:76:2b:6a:8c: a1:51:a5:18:3c:6c:11:f1:6a:a6:16:15:fc:0d:c9: 5d:c3:df:6f:e4:d3:20:97:f2:de:f8:b4:36:69:30: d4:e2:82:d2:7e:86:67:14:42:68:94:e2:fd:a9:c7: 76:2b:20:92:82:9b:92:7c:55:43:a7:a5:fe:c3:70: 31:2b:85:6e:4a:9f:8f:c3:a8:77:95:87:59:98:14: 19:0d:30:75:1e:0d:71:78:e7:27:60:c6:d2:cc:cd: dc:fc:3c:03:60:80:7f:dd:9d:18:aa:ff:c1:2e:d1: 10:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4E:DE:D4:AC:BE:FA:20:A5:19:CD:7C:CE:AB:6A:6A:85:8E:51:10 X509v3 Authority Key Identifier: keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:5e:d6:b3:7a:a8:57:f1:d1:87:2d:ae:d8:6c:74:cf:cb:7a: 36:8a:5d:4b:bb:a6:eb:32:9f:95:d4:2d:97:43:db:aa:43:0a: b2:28:02:c4:fd:b7:3a:31:f0:0d:65:8b:4e:ca:af:b9:b8:19: f2:d5:3d:bd:e2:ae:79:48:0b:db:67:49:67:c9:5c:dc:07:5d: 59:80:07:89:f7:a7:51:aa:9f:c1:6b:6c:ce:e4:ac:5e:b2:f4: eb:35:f9:8e:f8:54:92:fc:7b:23:d9:b5:4e:cc:9d:ea:b0:1e: 25:84:db:f3:66:18:b4:3b:cb:16:06:52:04:63:db:a9:4a:5d: 8a:8d:87:d8:2d:a7:a7:d6:65:2f:13:04:12:0d:f6:cf:f6:e5: 63:de:fb:ae:9f:09:78:59:5a:fe:b1:7d:25:4b:18:ce:41:91: f9:e6:26:e1:41:8e:fe:bd:36:21:46:dd:8e:c8:87:06:96:71: 42:d8:09:3f:89:60:74:9a:fb:f4:1b:4c:42:44:a6:e1:ef:f7: e0:dc:31:6c:f9:b1:47:69:8a:50:d9:6c:15:f0:1b:cd:3a:ea: 39:a2:24:5f:72:c3:0c:d9:69:2a:b8:98:67:6f:30:9d:b0:cc: 11:e1:1f:b6:29:e8:27:2a:1f:22:ca:60:f9:00:68:24:bd:bb: fd:d9:65:a4 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZiPx5FgbamwH/HgzGqfJTuuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiOTg3MjQ0NjExYjUyMzA1MzY3NDRiNmE4OWYwNDRmMzJm NDYyZWEwHhcNMjUwODA5MTcwMTE3WhcNMjUwODEwMTcwMTE3WjAzMTEwLwYDVQQD Eyg2NDRlZGVkNGFjYmVmYTIwYTUxOWNkN2NjZWFiNmE2YTg1OGU1MTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmT5QAJ/Pepn3YZ5134Sj+42vY+O +8+N8HX7LaHRM7BsVJL3D/b8b9f48IrshGh6kxIkR88Rei7iGu7bF+UgqMlkzriN QOmruY63PORPYFTbPRkleA6PBzzIX6Zm0mpgNoQb8zGhnl9EwT0g+lEpHqwmhzVS OyO+P1SdF4u5fh8ulfSJT/GnStGTrQrcWMNNVnYraoyhUaUYPGwR8WqmFhX8Dcld w99v5NMgl/Le+LQ2aTDU4oLSfoZnFEJolOL9qcd2KyCSgpuSfFVDp6X+w3AxK4Vu Sp+Pw6h3lYdZmBQZDTB1Hg1xeOcnYMbSzM3c/DwDYIB/3Z0Yqv/BLtEQ1wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGRO3tSsvvogpRnNfM6ramqFjlEQMB8GA1UdIwQY MBaAFPuYckRhG1IwU2dEtqifBE8y9GLqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS01aHlSR0ViVWpCVFowUzJxSjhFVHpMMFl1by5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAw LWJlNTgzMmQ1ZjdhYS8xLzEtNWh5UkdFYlVqQlRaMFMycUo4RVR6TDBZdW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ0LzMxOWQ3Yy03ZTc2LTQzMDgtYmMwMC1iZTU4MzJkNWY3 YWEvMS8xLTVoeVJHRWJVakJUWjBTMnFKOEVUekwwWXVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgl7W s3qoV/HRhy2u2Gx0z8t6NopdS7um6zKfldQtl0PbqkMKsigCxP23OjHwDWWLTsqv ubgZ8tU9veKueUgL22dJZ8lc3AddWYAHifenUaqfwWtszuSsXrL06zX5jvhUkvx7 I9m1Tsyd6rAeJYTb82YYtDvLFgZSBGPbqUpdio2H2C2np9ZlLxMEEg32z/blY977 rp8JeFla/rF9JUsYzkGR+eYm4UGO/r02IUbdjsiHBpZxQtgJP4lgdJr79BtMQkSm 4e/34NwxbPmxR2mKUNlsFfAbzTrqOaIkX3LDDNlpKriYZ28wnbDMEeEftinoJyof Ispg+QBoJL27/dllpA== -----END CERTIFICATE-----Generated at Sat Aug 9 20:43:49 2025 by rpki-client