$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft File: I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json) Hash identifier: 6876Rk7LQrsRNdsPNXFMx3lJm5efHGyXi3eFjEqFZyU= Subject key identifier: 99:AE:0D:1D:FD:46:32:AC:E9:4B:9D:0B:A2:B2:EE:8B:E1:CA:8D:19 Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 019889201B8FC59474CC11FC8094B219823F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft Manifest number: 0C62 Signing time: Fri 08 Aug 2025 10:00:39 +0000 Manifest this update: Fri 08 Aug 2025 10:00:39 +0000 Manifest next update: Sat 09 Aug 2025 10:00:39 +0000 Files and hashes: 1: 2tV1T5SBsSkKar1qXX5FYlQ_B9Q.roa (hash: mGLI3Jd52qgMG50087Vl0ag+Rgi85Yfd8348tK3nJlQ=) 2: 9CjEL92KVQbBIKjAH6PWgI9d9kA.roa (hash: CxlINazLO+svbCxijVW6/kRGdkNG420xQ9K3jp5I7bo=) 3: 9Q-K0yA0D9jdkGXn7ifhVh2hLe4.roa (hash: BhOE66QanPWqjjysyWqBU6hcSToV2kkgkpmWedK9Plo=) 4: BKpPZ6YhMA786wWelQvZ2FdIeg0.roa (hash: CY94cVx1ALq/cp1lEiwu3JzO7Vk53LXHozpiwU2ifHA=) 5: Gg5xBTPmG5wIfgvjDfofedqUN2I.roa (hash: 44BexOUoVzM2f1vahHLSGVHdqnL6HKMPG3ed5PmM4sw=) 6: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: KIlPXls/WZ0nF5cpf8y5wyIWJIZtmkEkZUyLOCgcRM4=) 7: KfWHlYFQnzVI2dPuoiLZqsly00A.roa (hash: hXW7e+AyYxT2PE5t8wRUT3atz/+WaH8gt4XQgdBp/mU=) 8: LtctFlc4GRCf3PIlxO5Sz70Upcc.roa (hash: 9oaNZGvrfQP+yRIBwwcg5U7jui8/sOP7Dz6ZLTuPIgM=) 9: LxwAd59gPAFiSwQsp6U5bWHTUIA.roa (hash: sV/jv6UM3eB6Fepo8zmoDeIxV8A3Cp94EBt2zbiu7+M=) 10: M73NPvrSZwGhIOTA9SbUvHl1x90.roa (hash: ijksxiMRPCxOAqaVav7odzv/IiE5tQUZQM4rRqWGT00=) 11: P4Ngmm4fscIJdjrtcZXwEWC6af0.roa (hash: Dgr4uE36WEf5Xw9kH8tw5qMQ+ewLeqeUvdPupgorbKg=) 12: gspg21PC-Bi6SGHc2DwZhP3SxPE.roa (hash: za152yl/mt+IWnj6LxRFIHIPMleLO2z2bWoNpUAX6js=) 13: nppvTips8XGcmj9VgC_a0xkLzT8.roa (hash: +FXbEH/4T1tplmkgWcOzmoIVkqvQhGApNb34NJo2CWU=) 14: o99Nup4psTKMh8kJYocwkh14uKQ.roa (hash: lhz5Qy+hcNJDmky6RtlI26JguzX0YUJj3nMqDKA0YLM=) 15: y9rvtnyXZQSaHcISGufCbgd9oMg.roa (hash: YtKgQZ+a37E4WaxSPAYmpHW8Z8QKRoCD8fhZcaauCRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 09 Aug 2025 10:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:89:20:1b:8f:c5:94:74:cc:11:fc:80:94:b2:19:82:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Aug 8 10:00:39 2025 GMT Not After : Aug 9 10:00:39 2025 GMT Subject: CN=99ae0d1dfd4632ace94b9d0ba2b2ee8be1ca8d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5f:84:da:d1:cd:86:19:64:49:76:56:a2:34: 64:cd:9f:95:84:01:3a:9e:f1:49:47:f9:80:1e:32: a4:03:72:2a:93:0a:b0:dc:c5:95:4f:fb:4f:ff:fe: 3f:59:15:a5:0a:f1:81:d0:e1:6d:97:13:3a:1f:86: e9:d2:1f:6a:f8:22:1b:92:35:7a:f5:70:a8:aa:13: b6:1a:06:7d:d7:f4:33:cd:e1:1c:c1:c4:b7:d7:da: 35:96:8f:18:4e:0c:5f:81:f1:01:2d:9b:01:b2:4e: 57:66:8f:ef:2b:ac:14:2b:62:28:61:df:45:97:f6: d4:0e:88:eb:98:78:e2:ce:0d:c7:5b:2b:37:8d:a3: fe:e0:d6:2e:c9:48:1e:41:a4:1f:28:54:55:5f:32: 9a:de:c2:19:cc:ff:bb:90:23:0b:58:41:4b:48:fb: aa:3c:03:59:dd:ec:cb:fb:1c:58:12:02:fe:91:75: c2:b3:d1:02:f7:00:22:4f:8d:75:3d:5c:ff:26:7a: 81:06:70:a1:79:cd:73:7e:e5:af:39:78:49:d7:fc: eb:60:8e:09:2d:83:24:93:b6:6e:de:b6:4a:ce:af: 7a:d4:e4:3b:dc:f0:38:7d:9b:f8:96:db:4c:ba:13: c8:c1:12:ec:4f:30:a5:8c:5a:85:c5:0d:0c:ea:95: 29:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AE:0D:1D:FD:46:32:AC:E9:4B:9D:0B:A2:B2:EE:8B:E1:CA:8D:19 X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:93:7e:f6:ba:b1:0d:01:b7:6b:ee:5a:c5:62:b2:83:c2:0a: bb:3d:54:b7:29:70:d5:cb:70:0a:ee:c4:7a:1a:26:70:67:42: 14:11:21:6b:a6:26:45:f5:38:69:d5:d0:fe:e4:9f:9f:9f:f7: bb:5b:db:20:0b:98:15:b5:fa:20:ca:f1:f8:9a:a7:fd:9c:1a: fa:80:88:9c:20:35:a0:6a:e5:77:2e:13:95:03:b8:a8:77:9a: c9:c2:60:ed:a0:52:a9:16:51:8c:17:cb:5e:e6:14:67:67:47: de:73:5a:dd:05:3a:40:c3:58:d2:9f:73:b2:18:7c:a3:50:54: ee:77:8f:99:c2:71:12:9e:c0:87:a3:57:0a:0c:bc:90:6e:e2: a4:28:af:c3:7c:80:41:aa:5c:56:8c:f9:90:4c:10:6c:d8:2d: 6d:12:44:06:1e:29:bf:aa:50:25:dc:f3:dd:59:27:e4:b5:e5: 11:c9:e0:35:3c:12:6e:a2:57:5e:40:ad:48:1b:fa:aa:a7:3d: 61:2b:72:da:b4:9a:ee:e5:e8:2a:2d:62:c0:62:44:67:f0:b5: fe:67:8a:52:f2:1f:18:72:92:b4:4a:2b:bc:ea:8f:82:a9:65: b8:00:84:95:12:c0:fd:e3:bd:b4:ed:21:cd:dd:0a:48:d5:f6: 82:a3:30:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiJIBuPxZR0zBH8gJSyGYI/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjUwODA4MTAwMDM5WhcNMjUwODA5MTAwMDM5WjAzMTEwLwYDVQQD Eyg5OWFlMGQxZGZkNDYzMmFjZTk0YjlkMGJhMmIyZWU4YmUxY2E4ZDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzV+E2tHNhhlkSXZWojRkzZ+VhAE6 nvFJR/mAHjKkA3Iqkwqw3MWVT/tP//4/WRWlCvGB0OFtlxM6H4bp0h9q+CIbkjV6 9XCoqhO2GgZ91/QzzeEcwcS319o1lo8YTgxfgfEBLZsBsk5XZo/vK6wUK2IoYd9F l/bUDojrmHjizg3HWys3jaP+4NYuyUgeQaQfKFRVXzKa3sIZzP+7kCMLWEFLSPuq PANZ3ezL+xxYEgL+kXXCs9EC9wAiT411PVz/JnqBBnChec1zfuWvOXhJ1/zrYI4J LYMkk7Zu3rZKzq961OQ73PA4fZv4lttMuhPIwRLsTzCljFqFxQ0M6pUpbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmuDR39RjKs6UudC6Ky7ovhyo0ZMB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKpN+9rqx DQG3a+5axWKyg8IKuz1Utylw1ctwCu7EehomcGdCFBEha6YmRfU4adXQ/uSfn5/3 u1vbIAuYFbX6IMrx+Jqn/Zwa+oCInCA1oGrldy4TlQO4qHeaycJg7aBSqRZRjBfL XuYUZ2dH3nNa3QU6QMNY0p9zshh8o1BU7nePmcJxEp7Ah6NXCgy8kG7ipCivw3yA QapcVoz5kEwQbNgtbRJEBh4pv6pQJdzz3Vkn5LXlEcngNTwSbqJXXkCtSBv6qqc9 YSty2rSa7uXoKi1iwGJEZ/C1/meKUvIfGHKStEorvOqPgqlluACElRLA/eO9tO0h zd0KSNX2gqMwsw== -----END CERTIFICATE-----Generated at Fri Aug 8 13:01:40 2025 by rpki-client