$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft File: jzgYVUpRgI7vuCnsdGWjIi8nASM.mft (raw, json) Hash identifier: yK7iP/WCe52GRYSb+xPT/XlJslIIqaKmtaRybsWhpyY= Subject key identifier: 31:5B:09:A7:8C:D5:91:C0:24:7C:CD:99:4B:4F:5F:00:E1:5E:49:82 Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123 Certificate serial: 0198733DB284CF9C5DC9E071F9ACE18B40C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft Manifest number: 1651 Signing time: Mon 04 Aug 2025 04:01:19 +0000 Manifest this update: Mon 04 Aug 2025 04:01:19 +0000 Manifest next update: Tue 05 Aug 2025 04:01:19 +0000 Files and hashes: 1: 1-d5l7iEM0a18LhX1EyGB8md8n8M.roa (hash: 501zHAdTFZeEcvr80KDCfqteaSP9iBPoj2GeSoFGK4o=) 2: 1pbl9lLrLHSegTR5aMKg_vc70Uo.roa (hash: JuIlY/C1ag+dEHYXDzz9ICIcinIRd2dm1piPpM/bPQE=) 3: 3zrOYfPwdwhMIYtIoDWyzk7SucA.roa (hash: ruw9KhAohiZRqx+LW+C5lr9bjBdHC4VDTTsxeERmgZg=) 4: D9naFu6VO2lwpjmohULxFpHf9o0.roa (hash: /QUuvgGaHE+yk+5fnp+5qSsx9OmsxECFhKZjRSqaWdE=) 5: Dhmm9E4z9IDgJopzgLGmxrHdNQ4.roa (hash: B8DLE1dNxG4G5fXZ02aNrPdB4JUf1oXnLm020cY0Ang=) 6: Fex3ntehhk9YD9UIIrzJwNM9wrw.roa (hash: sq3dolfBoZQI4X41dAgCq7RgYZJhMoyQLMqp5TWhC2I=) 7: VjpJTcOg3A5jj9MR_Jf-2rC27FI.roa (hash: j+JKcPjYq1zl0l4R0plKeTXWGQoSZJuEOufZw9GSsFY=) 8: YW1hjZcECO_e-0edVIPSxYfb76o.roa (hash: Z7Jb+7gEawQrZdP5rGn/EP9zISP8MR7q05pqJZYy5UQ=) 9: Yf4EPkmLCRMBoZZIyHDnCPRPVEI.roa (hash: ttyqpkkqQzqqS+yO4BIrD80NvM4sA9JzqnD08LyFADk=) 10: bilb14WArW1Ov7SsrYk0Wsxs1vU.roa (hash: vP2MTh6QB6vRojmbG2tYWTOri2gn+m2SiJ7LuQrhK/Y=) 11: dXcSjT8XLHwaAMrJxhlYycEZesc.roa (hash: vJl3MVsCu53wiiS+S6cF6AaFBwg//wkLirqkCxUkMcU=) 12: djNEYQKUqckFK1iM46DyL8t42d0.roa (hash: NQBuvCxVnkGQRlXPk53EZOQo+ABbplgx2/ODuq1jN3M=) 13: f7g9WoNm-2HicP4eAC6c6FDXbfw.roa (hash: zw4AKABwEHT1G3SslViMu4vYgw9q/wbL5miIJACFbLo=) 14: gvygCJRNiZjAzFCHzFEh-Jvn8p4.roa (hash: GokX4+GYxsZuRoER2H3W827pg8jM7a0dfuDGYTpJcug=) 15: jzgYVUpRgI7vuCnsdGWjIi8nASM.crl (hash: 2GZFTsnlJQBVaNmubtCpjDEppbizOAF/j7TGTcNMZp4=) 16: l4eCCyQbqnmNaWzCsO-CTHaJLBQ.roa (hash: +can2V5bGbRV5XkaQEn6m/2qdSAnNySkBwlFd9kA+2w=) 17: mfw9rN7s0JH2LVr_IrLTwFMFT7k.roa (hash: Fl3Qq4SjgxhY/P+3EJokj3AAPC+i2wSth+OMzYo5JiY=) 18: sHn49Wbb5PrrjUwnaQqlFkCVe1w.roa (hash: Js/zXcmF6Rja4dKWo6EIhgWUvKjRGSk5unEUfI1hOIs=) 19: xQd5W4e4PnDjglCYlz04ippgCtY.roa (hash: Tau6wHDOULjCaWttAcL4vrdDPhetrZL68pVWIATRLJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:73:3d:b2:84:cf:9c:5d:c9:e0:71:f9:ac:e1:8b:40:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123 Validity Not Before: Aug 4 04:01:19 2025 GMT Not After : Aug 5 04:01:19 2025 GMT Subject: CN=315b09a78cd591c0247ccd994b4f5f00e15e4982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:09:24:0b:48:47:a7:d2:0d:c8:24:5e:33:b2: 7d:36:99:29:6a:a3:9d:c8:5b:47:62:15:88:57:94: 0d:b1:e4:ac:2f:a3:a2:e2:29:85:a4:ba:a1:e1:54: 14:aa:e9:d3:fc:28:7f:83:42:81:0d:01:24:4c:0d: 0a:84:38:16:85:5c:20:b1:e4:3f:bd:c3:f5:c6:71: ec:25:ec:72:b0:8a:1c:0a:1b:c5:d3:d5:82:13:0c: 58:db:15:fe:7c:43:71:d6:22:81:52:07:f7:70:95: e3:c7:9a:0c:dc:70:99:e5:7c:22:8c:db:78:ff:40: af:56:a0:51:9c:6c:06:91:82:53:a7:98:dc:b3:bd: 96:41:13:ac:6f:7a:6f:05:e3:a9:38:8f:86:44:07: 85:7a:59:23:9b:49:4d:f7:4e:1b:83:e5:f9:78:e1: e5:39:8d:f8:ab:71:4e:0f:cf:21:cc:f0:61:4a:8d: b2:22:70:ca:2c:3c:77:b0:a4:68:67:fc:db:c8:47: a1:40:ab:7a:3b:1c:53:11:4c:7b:88:93:00:e9:b8: ce:56:4e:1b:4f:92:2d:00:2a:e8:c2:45:b3:6d:6f: 86:a1:73:42:23:5a:73:8e:bd:b5:b4:76:84:81:3a: ad:80:c3:05:06:03:71:9e:24:ed:15:a2:08:e9:34: 2b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5B:09:A7:8C:D5:91:C0:24:7C:CD:99:4B:4F:5F:00:E1:5E:49:82 X509v3 Authority Key Identifier: keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:42:76:8c:46:04:4e:0e:0c:64:7e:0d:c5:08:03:0b:bb:96: b1:7a:f4:85:11:71:bf:e5:91:1d:ff:bf:51:db:6a:68:75:60: 77:0e:e6:3e:95:5d:05:07:a3:f7:57:a7:84:38:d2:c2:d0:8b: 67:49:0a:66:d5:20:16:59:7f:7c:b6:be:c7:01:3d:bc:1b:d6: 97:4d:f5:ba:de:6c:96:77:59:b5:50:ec:44:a3:9e:c9:12:e7: b4:5f:1d:ba:cf:bc:a4:ae:5e:47:0f:f0:f7:96:90:f8:7b:a7: 09:6a:dd:75:f8:13:02:1b:ae:35:07:52:2b:20:7e:71:e3:5e: 94:42:bb:23:49:97:2a:6e:14:7a:70:e2:cd:20:da:30:27:9f: 83:22:ec:cc:87:4e:cc:46:2f:b8:61:2a:95:27:40:26:97:f9: 49:4b:80:88:a2:00:7a:98:d1:9d:4a:a6:45:68:86:8d:12:89: e2:5b:15:a6:6e:5f:9a:e0:e9:1c:75:96:c6:5d:a6:8c:07:be: 0e:fa:7c:c1:df:f4:e9:a7:1a:1b:b4:6a:47:70:56:d4:fe:e0: ab:fc:cc:43:13:04:aa:bf:49:bf:b8:d2:14:0a:7f:0b:15:b9: 76:17:2a:81:d5:40:54:18:fc:5d:6f:66:32:6a:57:f7:fc:f4: ce:d5:d1:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhzPbKEz5xdyeBx+azhi0DFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy NzAxMjMwHhcNMjUwODA0MDQwMTE5WhcNMjUwODA1MDQwMTE5WjAzMTEwLwYDVQQD EygzMTViMDlhNzhjZDU5MWMwMjQ3Y2NkOTk0YjRmNWYwMGUxNWU0OTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gkkC0hHp9INyCReM7J9NpkpaqOd yFtHYhWIV5QNseSsL6Oi4imFpLqh4VQUqunT/Ch/g0KBDQEkTA0KhDgWhVwgseQ/ vcP1xnHsJexysIocChvF09WCEwxY2xX+fENx1iKBUgf3cJXjx5oM3HCZ5XwijNt4 /0CvVqBRnGwGkYJTp5jcs72WQROsb3pvBeOpOI+GRAeFelkjm0lN904bg+X5eOHl OY34q3FOD88hzPBhSo2yInDKLDx3sKRoZ/zbyEehQKt6OxxTEUx7iJMA6bjOVk4b T5ItACrowkWzbW+GoXNCI1pzjr21tHaEgTqtgMMFBgNxniTtFaII6TQrYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDFbCaeM1ZHAJHzNmUtPXwDhXkmCMB8GA1UdIwQY MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt YmZiNGJhMzBlNDVhLzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0J2jEYE Tg4MZH4NxQgDC7uWsXr0hRFxv+WRHf+/UdtqaHVgdw7mPpVdBQej91enhDjSwtCL Z0kKZtUgFll/fLa+xwE9vBvWl031ut5slndZtVDsRKOeyRLntF8dus+8pK5eRw/w 95aQ+HunCWrddfgTAhuuNQdSKyB+ceNelEK7I0mXKm4UenDizSDaMCefgyLszIdO zEYvuGEqlSdAJpf5SUuAiKIAepjRnUqmRWiGjRKJ4lsVpm5fmuDpHHWWxl2mjAe+ Dvp8wd/06acaG7RqR3BW1P7gq/zMQxMEqr9Jv7jSFAp/CxW5dhcqgdVAVBj8XW9m MmpX9/z0ztXR2w== -----END CERTIFICATE-----Generated at Mon Aug 4 11:07:19 2025 by rpki-client