$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft File: Kb4C3qCghumID1ZMhocrvFl8xnI.mft (raw, json) Hash identifier: 6MB72Rt8P/8qHFkvFjlCTCvWBBK6NcHUug+NPenjS8U= Subject key identifier: B1:E2:D7:72:53:D8:11:CB:3C:7D:5F:55:F8:AE:76:3C:22:12:7F:AB Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 Certificate issuer: /CN=29be02dea0a086e9880f564c86872bbc597cc672 Certificate serial: 0198808AF7A69795B90047CB5E4F53194C7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft Manifest number: 140E Signing time: Wed 06 Aug 2025 18:00:47 +0000 Manifest this update: Wed 06 Aug 2025 18:00:47 +0000 Manifest next update: Thu 07 Aug 2025 18:00:47 +0000 Files and hashes: 1: 6KpBI63kEhQRzmhRvVQxSFsUBTI.roa (hash: Ckcyw44N8h4Yete0VsDquepnFPzly6G4UPrg1n68+p4=) 2: Bl50d2SW5pMGbeTLnaL144PRWUQ.roa (hash: bI5Yiq9+r3/RdML3fweIl1fiyaU2NaLiJvR9z1M6k50=) 3: Kb4C3qCghumID1ZMhocrvFl8xnI.crl (hash: n0AS0A3GnHrdWj56ZUq/MWCSc+P+WVJNCTfL3r3f8/4=) 4: MLMPGj8H9Pi_UwBtlTfByiigjfM.roa (hash: pC0aw2jiKroOvxcRGHKOge3OdR3RFQ8raECTuPmJMXM=) 5: OHP3S03u5tMHflzGMFoSd5vTyZk.roa (hash: nGDY1zJo3dHSTN2PJe0pXCx8heywXO+QdXtgHJbEB2A=) 6: RZnwVTO26PBx3a68dhxrN-N2_9U.roa (hash: 2uzv1j/fxffpUq8amOpURgwfPrkNCx7YPSsxO/BHSJk=) 7: XkZDM_8IFwDF5TaEYGBCOeA1rnY.roa (hash: wJ3Nd2iWllTHLJTwVq5JnkwdVdkkialVRVjZAGjLaUA=) 8: aB7sKw4yBEcglwqSevB86YJRj7Y.roa (hash: PH14Cm3gVr59rgH3FX69SJ0GUOOG1kpk0YkBDPc5P9M=) 9: j1JcZG88WoDJIAs0TuxaORvfLro.roa (hash: yIeCKxXutjytoAiiGxkiUBSn0Vk24wB2GDbKm+IJthI=) 10: nwUsD1fndRShZT-s5ssppnOFmiI.roa (hash: 5Gw61qVpay4Kz2GbqbYja1rnv6svDc1Ma6KW2KgO/Fk=) 11: zphCyxB7JvvZfrdVh3qU9-FSl5c.roa (hash: PYY+kdRiBf7TYzIHyOP800eu0rdgwqkk9pHLsntWJR8=) 12: zvPA1UGui-igyOCxkJMwtvZ5S28.roa (hash: /AfKz5TxnkzdqXaxQMADqDtWb4d/fIp2oXqMIKdkCNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:80:8a:f7:a6:97:95:b9:00:47:cb:5e:4f:53:19:4c:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672 Validity Not Before: Aug 6 18:00:47 2025 GMT Not After : Aug 7 18:00:47 2025 GMT Subject: CN=b1e2d77253d811cb3c7d5f55f8ae763c22127fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f0:17:b7:cb:1a:58:8c:00:10:57:99:63:00: 92:5c:0a:17:c5:c1:3d:dd:62:70:fa:b3:5d:2d:c7: d0:e0:f6:9f:02:2a:5a:8e:5f:74:7c:42:14:a0:30: e7:b3:6f:85:ae:cb:b0:2c:bb:f2:35:5b:3d:d0:18: b2:60:f3:43:69:b8:4f:17:c9:38:f5:71:58:18:4f: 8c:9e:cd:a3:64:e0:19:95:bf:5e:32:50:c9:8c:79: 78:ae:dd:3a:5a:65:ed:ce:a7:f4:7e:e3:79:d2:aa: 7d:70:73:32:75:a5:14:2c:a8:4f:d9:65:2f:a6:26: d9:2b:06:fe:1a:55:6b:39:4a:1a:17:9b:c4:85:e7: 60:59:09:32:b2:c3:71:69:3a:ce:a7:63:58:e6:f3: 81:1e:33:6d:4b:51:a9:01:68:68:84:96:54:bd:aa: 77:d7:a7:10:e2:f3:23:7a:28:18:46:f7:a0:b1:19: fb:81:b3:23:e9:44:1d:a7:5f:5f:4e:1c:6e:53:60: 6e:8f:34:5d:8e:d3:7d:f1:41:54:ac:66:29:bb:2d: d9:b3:58:ea:f5:cb:fe:b2:16:a9:19:d1:0f:84:18: fd:f8:63:94:e6:66:6e:db:52:75:42:86:46:b4:f4: 69:a9:b3:5e:7b:e9:bc:de:55:81:95:f7:89:9b:ca: 31:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E2:D7:72:53:D8:11:CB:3C:7D:5F:55:F8:AE:76:3C:22:12:7F:AB X509v3 Authority Key Identifier: keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:3d:ca:65:d8:6c:d3:ca:60:1f:14:9f:0d:4a:90:5b:01:00: ca:fc:d7:84:35:88:c2:13:03:c4:8e:df:31:c7:4d:ea:e5:2f: df:45:db:fe:f2:f0:9a:f1:cc:31:b5:3b:69:23:59:73:b6:e7: 58:6d:11:e9:f5:3f:24:f2:d2:e3:ba:7c:58:32:ef:ab:a9:dd: 67:ea:1b:2b:29:cd:0c:50:91:75:bd:c5:39:54:df:e3:f0:2c: 3a:be:eb:93:1c:34:61:02:92:36:61:47:e8:93:a5:b0:27:46: 6a:74:29:ba:49:02:5e:c4:00:87:e2:c0:bf:c1:3a:13:72:cc: 23:67:d7:f5:6e:fc:e0:fa:bd:37:54:3d:e9:36:cf:59:f3:11: 7f:00:9e:b4:1d:46:84:85:c2:cd:70:52:e4:25:22:10:a5:49: 93:f5:fd:de:ab:c8:f4:c6:2d:00:62:1f:29:c4:bd:df:aa:15: 9a:52:a5:9e:7f:78:a1:54:5d:35:55:79:19:a6:88:e8:18:37: 2c:a5:24:4e:a8:ba:f5:a1:44:08:d8:36:2a:ee:64:ee:a2:e5: 58:01:04:e6:08:dd:1d:43:a4:c4:17:aa:9f:d3:7d:a6:75:f4: 5c:83:40:ed:8a:7d:54:c1:57:80:49:6e:a7:69:89:8c:1e:43: 21:89:2b:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiAiveml5W5AEfLXk9TGUx7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YmUwMmRlYTBhMDg2ZTk4ODBmNTY0Yzg2ODcyYmJjNTk3 Y2M2NzIwHhcNMjUwODA2MTgwMDQ3WhcNMjUwODA3MTgwMDQ3WjAzMTEwLwYDVQQD EyhiMWUyZDc3MjUzZDgxMWNiM2M3ZDVmNTVmOGFlNzYzYzIyMTI3ZmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfAXt8saWIwAEFeZYwCSXAoXxcE9 3WJw+rNdLcfQ4PafAipajl90fEIUoDDns2+FrsuwLLvyNVs90BiyYPNDabhPF8k4 9XFYGE+Mns2jZOAZlb9eMlDJjHl4rt06WmXtzqf0fuN50qp9cHMydaUULKhP2WUv pibZKwb+GlVrOUoaF5vEhedgWQkyssNxaTrOp2NY5vOBHjNtS1GpAWhohJZUvap3 16cQ4vMjeigYRvegsRn7gbMj6UQdp19fThxuU2BujzRdjtN98UFUrGYpuy3Zs1jq 9cv+shapGdEPhBj9+GOU5mZu21J1QoZGtPRpqbNee+m83lWBlfeJm8ox7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHi13JT2BHLPH1fVfiudjwiEn+rMB8GA1UdIwQY MBaAFCm+At6goIbpiA9WTIaHK7xZfMZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMt MDAzYTE1NjhiZjNmLzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMtMDAzYTE1NjhiZjNm LzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHz3KZdhs 08pgHxSfDUqQWwEAyvzXhDWIwhMDxI7fMcdN6uUv30Xb/vLwmvHMMbU7aSNZc7bn WG0R6fU/JPLS47p8WDLvq6ndZ+obKynNDFCRdb3FOVTf4/AsOr7rkxw0YQKSNmFH 6JOlsCdGanQpukkCXsQAh+LAv8E6E3LMI2fX9W784Pq9N1Q96TbPWfMRfwCetB1G hIXCzXBS5CUiEKVJk/X93qvI9MYtAGIfKcS936oVmlKlnn94oVRdNVV5GaaI6Bg3 LKUkTqi69aFECNg2Ku5k7qLlWAEE5gjdHUOkxBeqn9N9pnX0XINA7Yp9VMFXgElu p2mJjB5DIYkr/w== -----END CERTIFICATE-----Generated at Thu Aug 7 03:51:57 2025 by rpki-client