$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft File: CnMngF3yD7XB1vTokHR0PK6ySvc.mft (raw, json) Hash identifier: u9/QVd3hBdB3Gh31hqigyiIeLJAQbS7sVkHBh6FTH9Y= Subject key identifier: 90:4A:84:E1:00:F3:5A:B4:9B:2D:98:C0:CD:14:6E:18:F9:58:ED:38 Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 019873AADAB682F7C2A6FB1155641395601B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft Manifest number: 162B Signing time: Mon 04 Aug 2025 06:00:33 +0000 Manifest this update: Mon 04 Aug 2025 06:00:33 +0000 Manifest next update: Tue 05 Aug 2025 06:00:33 +0000 Files and hashes: 1: AXI0xi2qyLNJTikoPIbIYoXGSqM.roa (hash: J6dTdi70cC+Xgn0MoRDsaTnvDGyEQm26GOPrxZ/rg18=) 2: CQxWaB1OicMMrqXCoQ0fopCoxdU.roa (hash: WjfHWnkqbfHKaqxUShNyRq++rhQwjg3tNVjy17YQNc4=) 3: CnMngF3yD7XB1vTokHR0PK6ySvc.crl (hash: TjGKzrHERo72dNAho7UYHBVLZlMavTXCOCnPxPOeR/k=) 4: D79_joXGPOWpWr93YY0Y2guGopg.roa (hash: 0cVbgcQor7L9mYV+oSvm/P1YAy/Mh97VSOZWkl7idYY=) 5: GopMrpyToOz7hTEn02tSlWTChNc.roa (hash: PWyNZm9NNDQb4vDrYexwTILfoeBvuqO0/ZesnD+rBMg=) 6: JRgyiOk_LfA7u6guZj8T-mLV5ek.roa (hash: n3a74BFPnSGvy48Z2olIpeDYQbz6pUrH/b/fuU5b5O4=) 7: QY3FsKWsHL7VlMduaclRNJ3pt_U.roa (hash: H5vPCo3lKDFJhLJsXdyGxkbSr+CZKxnZxfEUf2naVGc=) 8: Zla6xxqlwjD5HGAN16Pzo29Tijg.roa (hash: XT7/Z4sfo6kElFtdLFq3BhRYhs4vxj89ZfDzgHu8Ge4=) 9: hnMtsx259zWb5DPTAskFt19vieA.roa (hash: IS/K0LmABWhq/hUi5ijfbnkS8QGQcUBWRW0f7gTisD4=) 10: ydOhopDpEgxJrzwZy5o2ywKpW8w.roa (hash: cGNA9jtDwM6OD4vlqV4K4uD26uy/JQnhTPG3oY/YMmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:73:aa:da:b6:82:f7:c2:a6:fb:11:55:64:13:95:60:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Aug 4 06:00:33 2025 GMT Not After : Aug 5 06:00:33 2025 GMT Subject: CN=904a84e100f35ab49b2d98c0cd146e18f958ed38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:48:30:92:e7:01:01:75:11:2f:9d:dc:37:b8: ab:97:dc:2b:49:cb:23:fe:a7:bc:20:5d:74:0b:00: 28:1c:25:1b:05:9e:f8:20:08:ba:48:24:0d:66:77: a0:d1:37:64:01:61:de:33:31:a4:3a:fe:0f:9a:69: f7:26:45:27:02:80:5b:dc:63:a8:4a:63:8e:f2:04: 82:8f:80:f5:e9:8d:47:e7:b6:4d:32:cf:06:c6:3b: 67:00:89:1e:91:24:ff:e7:f0:be:4a:3f:80:21:d5: c0:78:94:97:9e:81:81:f9:50:53:05:19:85:c4:7b: 50:b0:38:59:60:bf:e4:c4:25:71:ff:3c:78:31:6e: e0:87:99:95:5e:54:5b:16:d8:c0:35:6a:7e:01:a4: 41:d3:c3:9b:d1:85:1e:58:69:13:5a:df:04:2d:09: 3b:67:09:75:5e:b9:47:47:53:9b:48:55:86:6a:d3: 34:07:d5:b2:30:55:c2:a9:49:8a:ca:c2:33:b0:1f: ee:f0:4f:37:49:22:46:dd:89:c1:b8:b4:cd:10:9c: e8:66:03:ba:6c:14:b2:14:c6:05:22:52:01:50:17: 30:90:fb:c3:6a:ec:58:4d:c6:44:19:88:c1:63:8d: 5f:bd:2a:ad:c4:39:1c:b4:23:76:e2:4b:d9:55:41: cc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:4A:84:E1:00:F3:5A:B4:9B:2D:98:C0:CD:14:6E:18:F9:58:ED:38 X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:5e:55:af:a1:78:e9:11:5e:82:ad:2f:e7:4d:f3:7a:ed:18: 66:bf:73:21:cf:1a:40:62:1c:4a:7b:61:13:56:21:73:63:b5: 32:7d:7b:2c:4d:58:5a:20:b5:df:ac:47:9e:59:dd:27:b1:1e: 78:79:d6:3b:63:92:88:c9:f0:08:1c:80:9c:c2:bd:de:e3:ba: 12:ac:a3:2c:7b:82:29:59:07:56:2a:9e:2d:70:33:e1:01:1e: ae:32:09:1e:e9:73:fd:ed:d7:15:e6:5f:cc:fb:a7:2c:fa:ff: 04:47:ae:c8:3d:9e:e2:df:b0:e4:e4:6a:70:b1:7e:ec:f9:a0: a4:0e:ae:a1:5c:c5:d1:2d:70:27:f7:ed:30:78:78:7f:31:0c: 84:b3:cf:29:f5:39:71:ca:10:88:11:19:67:25:35:f0:aa:17: 63:c3:16:bc:03:e6:fc:d2:1e:70:70:ec:03:e0:89:27:a6:70: ad:2d:c5:d7:24:4c:8a:c9:47:37:37:7b:e7:cb:0a:11:7a:dc: 04:c2:92:fc:44:fe:97:1e:a3:6f:e9:57:ad:30:5b:fd:3b:1a: 0e:4b:ad:17:3e:5d:84:90:78:b6:eb:96:24:15:ea:61:b7:f9: 40:be:12:b6:f0:ba:f5:be:5d:15:05:5a:aa:3f:24:6d:33:6e: 69:b4:29:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhzqtq2gvfCpvsRVWQTlWAbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjUwODA0MDYwMDMzWhcNMjUwODA1MDYwMDMzWjAzMTEwLwYDVQQD Eyg5MDRhODRlMTAwZjM1YWI0OWIyZDk4YzBjZDE0NmUxOGY5NThlZDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEgwkucBAXURL53cN7irl9wrScsj /qe8IF10CwAoHCUbBZ74IAi6SCQNZneg0TdkAWHeMzGkOv4Pmmn3JkUnAoBb3GOo SmOO8gSCj4D16Y1H57ZNMs8GxjtnAIkekST/5/C+Sj+AIdXAeJSXnoGB+VBTBRmF xHtQsDhZYL/kxCVx/zx4MW7gh5mVXlRbFtjANWp+AaRB08Ob0YUeWGkTWt8ELQk7 Zwl1XrlHR1ObSFWGatM0B9WyMFXCqUmKysIzsB/u8E83SSJG3YnBuLTNEJzoZgO6 bBSyFMYFIlIBUBcwkPvDauxYTcZEGYjBY41fvSqtxDkctCN24kvZVUHM6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJBKhOEA81q0my2YwM0Ubhj5WO04MB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHV5Vr6F4 6RFegq0v503zeu0YZr9zIc8aQGIcSnthE1Yhc2O1Mn17LE1YWiC136xHnlndJ7Ee eHnWO2OSiMnwCByAnMK93uO6EqyjLHuCKVkHViqeLXAz4QEerjIJHulz/e3XFeZf zPunLPr/BEeuyD2e4t+w5ORqcLF+7PmgpA6uoVzF0S1wJ/ftMHh4fzEMhLPPKfU5 ccoQiBEZZyU18KoXY8MWvAPm/NIecHDsA+CJJ6ZwrS3F1yRMislHNzd758sKEXrc BMKS/ET+lx6jb+lXrTBb/TsaDkutFz5dhJB4tuuWJBXqYbf5QL4StvC69b5dFQVa qj8kbTNuabQp5Q== -----END CERTIFICATE-----Generated at Mon Aug 4 11:26:41 2025 by rpki-client