$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json) Hash identifier: bQFRbSk064TFRldc6V2+I6dBLwFOjUEu384iR22fios= Subject key identifier: 93:80:4E:3F:52:35:3A:16:F8:D9:07:B3:6A:ED:A1:FE:16:24:0B:FB Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad Certificate serial: 01987ABFB90893235B94C106EC390296654C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft Manifest number: 0E2C Signing time: Tue 05 Aug 2025 15:00:41 +0000 Manifest this update: Tue 05 Aug 2025 15:00:41 +0000 Manifest next update: Wed 06 Aug 2025 15:00:41 +0000 Files and hashes: 1: 1-cpyjHU8WHBS-JnYyweRG_JlxsQ.roa (hash: Bc2YUgBN1eHG7yUrAAjgkxLZbgg1NrbTbKbM93kzdXo=) 2: 23cjywgox101LeW5GrrQWi4IHG0.roa (hash: uYyFedbey5ChPUlaasPp5Y63DNZ1EjHPXUKggcmyWcA=) 3: 2nquZxIjKuCQeOgojOXW1X_s_QM.roa (hash: jFRO0lP11v/Hnir4mOKoo6txSwXFruzZ7RBet4hmmmk=) 4: QQQnQcpvGBf2C-BzCpjUlxD_kV0.roa (hash: 3oCmUMut8zjGqT5v8Ibyl5GG5ZNBsCX2Q1FPnCYPFwc=) 5: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: 6S6vF5EZLd9PIs1ZCEs4zSzzzjPP8QPSdZCRgRBdars=) 6: gIx-NvwmPwDjbwzrImEaevKFMi8.roa (hash: qVqkRd3AaQOFICZgsJ5zunJ8w7waJ2c1Sms4AJtjCl4=) 7: qWecP1fjBHk_xiZL6w3FMxqmMFs.roa (hash: H6nLoMO+CEX9wLJPNIjsGgGm6hrsOhinY+8mLTIndRM=) 8: rQGjF7CS3G8ySkkrwz5hQvGaUtk.roa (hash: UmfdL/yMHB7LypaEgd2ulm2mGfbyrt6kIxKgT/oReek=) 9: wvlIJaBXdAerQ4c5dRBxRunJgjQ.roa (hash: JyQWbotgOXPXDAJ2gTdNj+PiW7DZmyYe59ktU38Qs6o=) 10: zwQeVe6KjT7mK7CzDjhb-oUfUeY.roa (hash: RDrcDVJwzADiTPiX9sXWISoKDjj7Zx0CdydUNeF8j6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 14:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7a:bf:b9:08:93:23:5b:94:c1:06:ec:39:02:96:65:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad Validity Not Before: Aug 5 15:00:41 2025 GMT Not After : Aug 6 15:00:41 2025 GMT Subject: CN=93804e3f52353a16f8d907b36aeda1fe16240bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:dc:e7:36:1e:1a:b4:d5:a3:8c:e9:fe:46:b2: 7a:90:8a:fe:59:8b:ed:b2:22:15:11:82:e3:0d:3e: a6:c8:58:a1:48:88:0b:b8:b2:c9:92:f3:65:23:0e: 52:39:68:69:9b:98:70:08:91:d7:35:36:64:8e:98: 1d:69:08:2e:8c:a7:5c:df:50:f6:ba:df:61:79:a9: cc:59:2a:59:f7:ac:f0:e0:70:84:51:98:2c:86:77: ab:f6:d3:63:e7:a4:fc:07:50:45:2d:e8:24:31:3c: a2:c7:37:ac:65:a4:03:60:6c:ae:c0:81:bf:e9:5c: 23:dd:c9:85:2c:fa:e2:08:d8:ab:63:9e:4d:ca:da: 27:a4:93:c8:11:e7:1d:e3:8d:27:0d:25:32:0c:9c: 99:c3:69:7b:87:19:d6:68:29:c7:7d:3e:80:36:08: 8f:8b:fb:42:3c:b7:28:bc:bf:b8:72:92:52:e7:6c: 1c:7c:2d:b6:f8:be:ca:16:b1:f7:51:cd:69:40:9f: 26:ee:b2:03:03:c4:b9:80:42:32:48:80:a7:e7:42: 7e:41:50:c1:8b:80:02:22:cb:16:29:0e:bf:05:99: a2:46:14:af:74:47:3d:86:38:21:13:0d:01:9a:80: c0:df:f1:34:fc:4c:32:ce:6a:e9:60:a5:03:18:8c: 17:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:80:4E:3F:52:35:3A:16:F8:D9:07:B3:6A:ED:A1:FE:16:24:0B:FB X509v3 Authority Key Identifier: keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:02:de:67:64:b1:01:6f:5e:d7:a7:ae:01:98:ff:51:e4:8d: 05:8d:d3:77:e3:92:2d:41:17:97:95:b3:e3:6f:9b:f0:6d:7f: 75:f7:07:e4:5d:b4:47:c3:fa:a9:e5:46:ff:61:53:08:c1:3e: 84:78:8e:cf:d3:ee:33:ac:f3:cb:cd:c9:1d:f4:ea:c4:90:db: 7e:b2:6f:da:d0:5c:dd:1e:eb:09:99:69:b8:2e:fa:44:50:7f: 64:72:a4:8a:62:55:37:9e:57:1f:bb:f5:58:05:25:ec:de:5f: e5:b8:d0:0c:8f:9f:8a:1b:54:6b:b1:1c:d3:b8:9b:32:c2:73: ed:de:05:e7:7c:79:cf:f7:a3:5e:01:33:b5:09:2b:46:b8:6f: 85:66:aa:6e:a7:bd:95:5c:bb:6e:1e:7c:64:76:75:7f:12:81: b2:64:50:0f:0b:a0:e1:7d:f2:39:5c:cf:cf:8f:23:00:bb:11: 96:d0:4a:40:34:11:a3:cf:8b:9e:49:ae:f7:a2:8c:0a:ce:d4: f6:dd:8b:48:54:8e:c6:67:95:dc:e0:12:a6:54:b2:58:46:28: 90:62:65:46:aa:57:f5:f6:66:d5:81:f5:f6:7a:56:ab:c5:ba: 07:70:65:44:1c:d4:5d:67:c8:0f:8a:a6:75:3c:54:89:19:07: 4c:c2:e0:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh6v7kIkyNblMEG7DkClmVMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0 NjExYWQwHhcNMjUwODA1MTUwMDQxWhcNMjUwODA2MTUwMDQxWjAzMTEwLwYDVQQD Eyg5MzgwNGUzZjUyMzUzYTE2ZjhkOTA3YjM2YWVkYTFmZTE2MjQwYmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NznNh4atNWjjOn+RrJ6kIr+WYvt siIVEYLjDT6myFihSIgLuLLJkvNlIw5SOWhpm5hwCJHXNTZkjpgdaQgujKdc31D2 ut9heanMWSpZ96zw4HCEUZgshner9tNj56T8B1BFLegkMTyixzesZaQDYGyuwIG/ 6Vwj3cmFLPriCNirY55NytonpJPIEecd440nDSUyDJyZw2l7hxnWaCnHfT6ANgiP i/tCPLcovL+4cpJS52wcfC22+L7KFrH3Uc1pQJ8m7rIDA8S5gEIySICn50J+QVDB i4ACIssWKQ6/BZmiRhSvdEc9hjghEw0BmoDA3/E0/EwyzmrpYKUDGIwXAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOATj9SNToW+NkHs2rtof4WJAv7MB8GA1UdIwQY MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct YzVkODk1MDgxOGVjLzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEQLeZ2Sx AW9e16euAZj/UeSNBY3Td+OSLUEXl5Wz42+b8G1/dfcH5F20R8P6qeVG/2FTCME+ hHiOz9PuM6zzy83JHfTqxJDbfrJv2tBc3R7rCZlpuC76RFB/ZHKkimJVN55XH7v1 WAUl7N5f5bjQDI+fihtUa7Ec07ibMsJz7d4F53x5z/ejXgEztQkrRrhvhWaqbqe9 lVy7bh58ZHZ1fxKBsmRQDwug4X3yOVzPz48jALsRltBKQDQRo8+Lnkmu96KMCs7U 9t2LSFSOxmeV3OASplSyWEYokGJlRqpX9fZm1YH19npWq8W6B3BlRBzUXWfID4qm dTxUiRkHTMLgVw== -----END CERTIFICATE-----Generated at Tue Aug 5 17:14:20 2025 by rpki-client