$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft File: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft (raw, json) Hash identifier: Ds3iH6Q6FscZwjlRJtEZzAIQEPTp3uhM6Go97XTwFw4= Subject key identifier: A5:39:69:54:C8:67:0C:8B:3C:51:D5:DA:2E:B7:98:59:0C:33:34:51 Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 019872CFC330D5F8C8B8547DF2CB337286DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft Manifest number: 12F0 Signing time: Mon 04 Aug 2025 02:01:15 +0000 Manifest this update: Mon 04 Aug 2025 02:01:15 +0000 Manifest next update: Tue 05 Aug 2025 02:01:15 +0000 Files and hashes: 1: 3MQ1Zm2jB8qgOjCAc_a0v-3nM_o.roa (hash: T4pVm2mU2N5el1g2HcnlglhN57e23NLVS7ny7NzSBL0=) 2: 4SEUaFHVUAL3abRJwnhpLcw21dk.roa (hash: Nz767QGxnFH79p/BW/8MOsNM3RviNN1Kvy4GgZgMyGs=) 3: FCFfx3p7hHCFHlKPZobVJyLJ5MI.roa (hash: 6JV0xEEqdwivRbZdMI4zo4Wpa9PWQK4gKoasAD6odWU=) 4: IYmUJK1vApyWT119wps-ukf2n9E.roa (hash: w1dWdBHD/FLi3tR98pk3iJlbhc1nR22X1Pwn/kqhO/0=) 5: KcuMI0SBvL5BPuYJm6BH3vJKAQ0.roa (hash: s0e2eWUrZQW14pJCqfjgMZ+ViTFNuU9345bizVg0sKY=) 6: MSrSUIwYGP5OzMFaA9dwr3mO4jY.roa (hash: OHzV5kP6uhO1eFoIB7t+WKfJjHs90j+a/iXQqOXuv30=) 7: N7C2a3H5ML3ydyNI5IDIoJ6m-6U.roa (hash: FJm0Nzs6ME/1+LojcQZMLdUu/cBqlxKE16Bs75fFFLw=) 8: Nf1rHETWcCnhWhR_uM_9B2P3jb8.roa (hash: pBdKIUwSvvQqLJChVbTbSEDRXa+Ll262+ax9ivbZD0o=) 9: OFTgwkdKspRJ_TvSv6vgx_ckdLQ.roa (hash: b7UPAbBCKcuRworqLaxy25e9Gx9nfc4PaZocWvp2h84=) 10: RzvDJbgMFFQ3RXZZowAtkGpvaYQ.roa (hash: pXgfU5zLGpdaPENK8y9IOVL5xtiIt9Fk8RRzx12JQUw=) 11: WToItz8al9Sw1IRtEOUm1ku1TzY.roa (hash: cD3Nf3okXGtPiYuFOkPnzfMJHgIYmW52aVmaOwxOEN0=) 12: dcAEUZ_ghRVpaUYo3WWA9zUPe9U.roa (hash: AsvsdGamYH2cSArWOQT5cvLOD/2t8gp5MEnt/aWjLII=) 13: m-VIT0LjtD9EzoMprh8uOjUFAXU.roa (hash: uPdvifi2Mse38dnV2nTzHEKQ8cRZMoEcUuAqy+pbA4Y=) 14: mIeBpS2n4kCr0BZmoszWNjvAQck.roa (hash: sgSJy89RWLefTDlUw+TWGE3cezazErlzXNR2nAjs6uU=) 15: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl (hash: 1Zb2E1XUIc4H1ZAIRo98FTSAwF8la6faaD9QkGrzX+g=) 16: sVCQlL9zy4ci5k4im_qh1UgQSao.roa (hash: tXiv/i4AXQDYnVQqrjLO82vwz0zcYS5lORUFrc1ytqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 02:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:72:cf:c3:30:d5:f8:c8:b8:54:7d:f2:cb:33:72:86:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Aug 4 02:01:15 2025 GMT Not After : Aug 5 02:01:15 2025 GMT Subject: CN=a5396954c8670c8b3c51d5da2eb798590c333451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:13:06:6d:dc:87:f0:17:38:f4:9d:3b:56:b8: 4e:90:4e:b8:6a:1c:30:3a:06:10:11:02:bb:81:a1: 91:53:a6:b6:ac:83:30:ee:2f:57:ce:99:f4:ef:1b: 48:e4:64:f0:c0:d2:53:58:24:1d:51:ba:9c:4a:14: 8d:bd:cb:a4:d8:62:60:a8:9c:42:5c:77:5a:6a:4d: 67:d1:86:80:8f:e1:5d:63:8d:50:7f:c7:ef:b8:8e: d9:20:89:58:5a:71:49:c6:19:4b:db:9f:d2:75:73: cc:3c:e1:30:05:00:91:39:c4:64:c0:b5:83:18:ab: bc:37:97:df:05:f2:c5:d9:bb:e1:5a:bb:09:a7:da: a8:01:39:3c:97:21:f4:ee:56:15:b7:9d:e9:cc:76: 42:82:55:51:8d:0b:a6:72:27:1a:ca:73:56:e7:54: a1:db:0b:14:62:cc:8f:7f:0d:c3:70:0d:29:53:cc: 17:f2:1e:47:4f:e1:71:a9:2a:27:57:1b:21:21:96: 3a:b1:a2:1c:6b:64:0b:1b:05:41:80:cc:a9:f7:64: 7d:69:c6:ee:b2:08:6a:b3:77:a9:6a:4f:25:89:e7: a6:af:2a:57:5f:e6:f4:55:81:13:7d:39:30:dd:6d: 0b:11:e7:89:80:38:85:10:0d:c7:a2:0c:15:9d:f2: 38:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:39:69:54:C8:67:0C:8B:3C:51:D5:DA:2E:B7:98:59:0C:33:34:51 X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:75:7a:b3:5a:37:6f:99:de:cb:fc:74:a3:7d:62:7c:ad:76: 3c:72:4c:c8:7a:88:da:cb:32:f0:0d:67:0d:c4:5a:23:6a:76: cd:f1:a2:1f:8b:07:54:dc:3c:cf:5a:fe:10:a8:15:cb:f2:5c: ae:47:b6:5d:ef:9c:41:4c:b6:c0:84:06:a6:ca:c3:67:51:69: 88:ee:26:1c:39:df:b9:30:f4:bb:9f:0a:28:10:79:93:e2:ce: 7e:e5:1b:b5:60:68:f6:6b:95:9e:d4:34:f3:44:e5:38:94:fa: 44:29:12:dc:95:33:8c:f9:97:78:4e:0d:77:92:28:c4:3b:41: 3f:39:3c:d0:e2:c6:4d:1d:41:c0:25:2e:a2:b4:65:2e:77:30: 18:1f:81:3e:0d:84:df:bf:57:8f:f4:56:1a:d6:1d:8a:9b:3e: 3d:ce:c8:fe:13:05:8b:84:70:08:50:75:91:73:ba:0b:ab:d4: 0e:0b:04:0b:4e:4f:b1:eb:44:b4:55:f3:32:7e:44:2c:a2:16: 07:c0:26:bc:9f:f2:57:0a:98:7e:ba:c7:83:56:3d:d8:7f:4d: c5:98:c5:7a:1a:7e:64:c4:98:41:32:d8:db:9b:02:a8:28:33: f3:e6:7d:01:be:7d:f5:18:ae:48:eb:e3:5b:5d:2e:aa:fc:e7: 58:67:92:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhyz8Mw1fjIuFR98sszcobdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjUwODA0MDIwMTE1WhcNMjUwODA1MDIwMTE1WjAzMTEwLwYDVQQD EyhhNTM5Njk1NGM4NjcwYzhiM2M1MWQ1ZGEyZWI3OTg1OTBjMzMzNDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhMGbdyH8Bc49J07VrhOkE64ahww OgYQEQK7gaGRU6a2rIMw7i9Xzpn07xtI5GTwwNJTWCQdUbqcShSNvcuk2GJgqJxC XHdaak1n0YaAj+FdY41Qf8fvuI7ZIIlYWnFJxhlL25/SdXPMPOEwBQCROcRkwLWD GKu8N5ffBfLF2bvhWrsJp9qoATk8lyH07lYVt53pzHZCglVRjQumcicaynNW51Sh 2wsUYsyPfw3DcA0pU8wX8h5HT+FxqSonVxshIZY6saIca2QLGwVBgMyp92R9acbu sghqs3epak8lieemrypXX+b0VYETfTkw3W0LEeeJgDiFEA3HogwVnfI4AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKU5aVTIZwyLPFHV2i63mFkMMzRRMB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3V6s1o3 b5ney/x0o31ifK12PHJMyHqI2ssy8A1nDcRaI2p2zfGiH4sHVNw8z1r+EKgVy/Jc rke2Xe+cQUy2wIQGpsrDZ1FpiO4mHDnfuTD0u58KKBB5k+LOfuUbtWBo9muVntQ0 80TlOJT6RCkS3JUzjPmXeE4Nd5IoxDtBPzk80OLGTR1BwCUuorRlLncwGB+BPg2E 379Xj/RWGtYdips+Pc7I/hMFi4RwCFB1kXO6C6vUDgsEC05PsetEtFXzMn5ELKIW B8AmvJ/yVwqYfrrHg1Y92H9NxZjFehp+ZMSYQTLY25sCqCgz8+Z9Ab599RiuSOvj W10uqvznWGeSVA== -----END CERTIFICATE-----Generated at Mon Aug 4 11:00:48 2025 by rpki-client