$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft File: jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json) Hash identifier: OQcdIrqkDJX1JevHM+kxWEOMhJWiw2QBj/9lKtUqSeM= Subject key identifier: 39:F8:11:64:A6:73:8F:68:C8:CA:12:29:F7:FE:10:EA:7A:1A:C9:27 Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Certificate serial: 01987CE57D6074E9703B24F0B825C8821CE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft Manifest number: 15BB Signing time: Wed 06 Aug 2025 01:01:11 +0000 Manifest this update: Wed 06 Aug 2025 01:01:11 +0000 Manifest next update: Thu 07 Aug 2025 01:01:11 +0000 Files and hashes: 1: A3slZgyg9eemzONzeM4ZjQZOkQA.roa (hash: X0hOJW7H3OQv8gNe/Scffw0tX7rp3lfITg3c2bDp62I=) 2: Dyi32KlOskocQHPe6FUF7ELQs5U.roa (hash: D3EF+UreJY6p0ckzuksgWXVvYetF6sITxKDGv/w2L0k=) 3: FJEFcX2c3QiytgwJXtBXdfXF7AQ.roa (hash: wDOQFjMrdpmJOwUI55qSC810FFGrsaY4QPcOoJKWykM=) 4: G_noKzntiWHLaHSdta1FputJESM.roa (hash: 76HBYH18Q5+wfRzE5ydGp21BC62rcsuS2tSvCzBrWp8=) 5: K9IKE8UzWzIlRqgdm5DBscj4DXI.roa (hash: TmNOvsKyJxclTHoJrrP+Wz2lJl3QKp06vZRtwf2Wkwo=) 6: Orf0-crrS-m0d2xw75OekVLRhcU.roa (hash: NyC6YqKt0FNmC1unp3jevt47/gr2Ss5dzqvXJGD2AjU=) 7: THZGRo10wjMlm6DbRUy7KjrwfkM.roa (hash: 9FjGohVB5WEFkwBSNZEgEcooaudVJnnxxDK2Jy9/LgI=) 8: VmEKVuU_uT-v34QUxuvTEoMoaug.roa (hash: lCfgs7Wts05rdP9N+OaYxsLVxOabAGR5SUtGArrm95M=) 9: Vxz_brs8mMP8pyfBjMG6SqLCoLA.roa (hash: InPdcQtGkZTGLva52kv6ADnfkbCulTXgK4jOcLs8G7M=) 10: Xmin5XG-kRl49Vt7ZEcTgSLDhDM.roa (hash: DHMC7YXYfDSAA2x6JnOvMwJT1zdpAymlypp6F1bKmgY=) 11: Yfzph1m23vmbClyvIoORpS1CW-E.roa (hash: SuwU2G9eYZ/n+GS6xB/GEsh3UziEYPdyi1WD5kRpjAo=) 12: _vcj5hH5PQmqE-mf4-B7kcWGpfg.roa (hash: ReLlnYnzQbiQ5Pk/0fIjBSPY1fpdoMBMJpSnkiSreWk=) 13: d-sWN4azI8sU7mlb0U-920Rsmtc.roa (hash: eiusVr40X1jFuIAj+CFi96eXy2bKXAQXnB20dKkv/70=) 14: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: Xn6OtRZGk6/A5Xuw6jWmgbpmbSlN2p0G7HG1R8cLsUQ=) 15: mwm5rC4rfoUfkUGj1keywZQhhGw.roa (hash: dDwtNYt9WubuetSqef0LQakniH0rgBVhQK32OI1f1fU=) 16: nyxtNnWsxM3-5IIVvMZ44cQVEYU.roa (hash: ub8VtVKtgWVEPS0rlKsjT0ZjeuiFnfLTw/tC6ZpW/Vo=) 17: v5kzcztD_Zc4DwbwnN4YfKR9YoA.roa (hash: 33e8kQ++AVlCN79vtcp+1+C+oGUNBxplYHYOGaRMl58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 01:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7c:e5:7d:60:74:e9:70:3b:24:f0:b8:25:c8:82:1c:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Validity Not Before: Aug 6 01:01:11 2025 GMT Not After : Aug 7 01:01:11 2025 GMT Subject: CN=39f81164a6738f68c8ca1229f7fe10ea7a1ac927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:54:10:db:bf:21:55:c9:78:ca:b7:f9:fd:e6: a1:14:76:6e:f6:69:fd:2d:12:31:fc:5f:0f:c4:c2: b4:3c:e0:10:e1:ac:37:52:20:30:64:f0:ed:f7:fa: 55:e8:0b:e0:81:95:37:57:32:2e:ed:7b:e6:ae:f9: 58:32:c3:d4:56:cf:e0:8e:59:1a:72:e2:a3:a0:47: 13:6a:ff:3f:9b:75:89:d8:3f:f8:20:2a:60:23:b8: 1b:09:ce:80:28:f2:5d:1f:1a:70:85:35:7d:23:bd: aa:51:37:24:54:b2:c9:ef:2c:56:2a:7f:0f:9f:c4: cf:53:01:1d:77:0e:4a:16:f9:dd:17:b6:d9:3c:39: a0:2b:e8:c9:ee:13:25:8f:83:69:a2:7b:47:fb:63: f7:96:ec:37:03:16:df:9a:4b:5e:d4:73:e3:60:7a: 84:a3:0b:cd:9c:cb:10:81:51:f5:5e:fe:5e:bc:80: cc:79:6d:60:50:96:76:4f:00:e7:b8:5c:09:28:22: 0d:55:e9:51:bd:97:65:ee:68:47:81:12:c6:35:ba: 5e:6f:b0:3f:e4:48:6b:e6:2e:e2:31:d8:03:eb:92: 9c:92:c3:de:2b:bb:8b:c9:68:ce:41:9b:a1:55:72: 2d:8e:76:92:38:87:76:9c:b8:c9:eb:d2:ae:90:56: 4b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F8:11:64:A6:73:8F:68:C8:CA:12:29:F7:FE:10:EA:7A:1A:C9:27 X509v3 Authority Key Identifier: keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:e1:a2:89:b3:1d:eb:d9:97:31:4e:b7:1d:0d:7c:8d:3e:df: ec:ad:9a:89:e3:6a:86:5f:da:35:81:ed:34:61:e8:ce:41:b6: 35:d1:81:17:c7:62:f3:14:56:f1:50:81:68:b5:e5:ae:39:7c: f6:96:3e:09:be:1a:7e:df:d1:40:26:f1:03:03:e9:73:50:25: 6f:b7:59:36:c3:c9:65:96:94:99:92:35:17:fe:57:c6:d0:7f: 3f:64:23:e4:97:ae:b5:cd:91:f0:23:53:b9:44:25:f2:ca:b7: 36:71:af:79:e7:67:71:7c:4d:0f:7d:08:6e:af:ad:6f:0e:a0: 06:cf:d5:b6:70:b0:8b:6f:4a:99:aa:66:7b:95:ec:a6:49:14: 35:60:07:1e:90:0d:03:61:8d:92:36:44:86:c0:1c:0e:16:0d: f2:64:36:c4:5f:84:c2:3d:c4:b4:a6:b1:fd:aa:82:18:44:c8: 98:ae:e8:1a:8e:d5:31:d6:f2:cf:d7:ca:83:82:87:be:29:24: c4:de:e5:97:de:ef:d6:f1:ae:cd:a4:03:61:3f:d4:ef:6c:56: 57:5c:62:b8:ea:9c:d8:cd:f0:c1:8f:5b:de:b4:d8:7d:1d:31: 81:ed:1d:49:c0:30:ff:1c:76:c0:38:06:4c:23:54:46:bd:09: 45:35:ec:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh85X1gdOlwOyTwuCXIghzlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl NjNjMTMwHhcNMjUwODA2MDEwMTExWhcNMjUwODA3MDEwMTExWjAzMTEwLwYDVQQD EygzOWY4MTE2NGE2NzM4ZjY4YzhjYTEyMjlmN2ZlMTBlYTdhMWFjOTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1QQ278hVcl4yrf5/eahFHZu9mn9 LRIx/F8PxMK0POAQ4aw3UiAwZPDt9/pV6AvggZU3VzIu7XvmrvlYMsPUVs/gjlka cuKjoEcTav8/m3WJ2D/4ICpgI7gbCc6AKPJdHxpwhTV9I72qUTckVLLJ7yxWKn8P n8TPUwEddw5KFvndF7bZPDmgK+jJ7hMlj4NpontH+2P3luw3Axbfmkte1HPjYHqE owvNnMsQgVH1Xv5evIDMeW1gUJZ2TwDnuFwJKCINVelRvZdl7mhHgRLGNbpeb7A/ 5Ehr5i7iMdgD65KcksPeK7uLyWjOQZuhVXItjnaSOId2nLjJ69KukFZLXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDn4EWSmc49oyMoSKff+EOp6GsknMB8GA1UdIwQY MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt YmE3NzFmZmQyNjljLzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGOGiibMd 69mXMU63HQ18jT7f7K2aieNqhl/aNYHtNGHozkG2NdGBF8di8xRW8VCBaLXlrjl8 9pY+Cb4aft/RQCbxAwPpc1Alb7dZNsPJZZaUmZI1F/5XxtB/P2Qj5Jeutc2R8CNT uUQl8sq3NnGveedncXxND30Ibq+tbw6gBs/VtnCwi29Kmapme5XspkkUNWAHHpAN A2GNkjZEhsAcDhYN8mQ2xF+Ewj3EtKax/aqCGETImK7oGo7VMdbyz9fKg4KHvikk xN7ll97v1vGuzaQDYT/U72xWV1xiuOqc2M3wwY9b3rTYfR0xge0dScAw/xx2wDgG TCNURr0JRTXskA== -----END CERTIFICATE-----Generated at Wed Aug 6 11:06:11 2025 by rpki-client