$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft File: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft (raw, json) Hash identifier: NPQViZ4kZBpTBuHBpy0WpRuaQ33q549c14H2+b4mGXU= Subject key identifier: 9B:8E:33:BF:DA:63:04:26:8D:BD:A2:B9:E9:40:26:0D:31:A0:4A:B3 Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Certificate serial: 01987E2EAE75B7C3000FEE96D2B144F20B41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft Manifest number: 0447 Signing time: Wed 06 Aug 2025 07:00:45 +0000 Manifest this update: Wed 06 Aug 2025 07:00:45 +0000 Manifest next update: Thu 07 Aug 2025 07:00:45 +0000 Files and hashes: 1: 1-WZZnjR8DlZqLUibcRUcYzm0QDU.roa (hash: /lrkBjM9dGMr6D7JGPVc5syjsFBtCzanEGLfhb4dKM0=) 2: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl (hash: K3q6wv6h1QhU9LRSnwL2AeXqpeZTjXMIhyknVSFdnls=) 3: 3jZyUpaNiuxwzYQ21tChGVq7yOY.roa (hash: rlRJ/UNIhVQKGyw4Wr/cDFs+VO81jRk6SUephZD3g4o=) 4: 5khyx2A9d0Q0e3huYGosj5KCOlo.roa (hash: m/iIxHfeWDlWWpGAIqzgFb7iOcTekZb0i9Y2aBX+dy4=) 5: 7cUCY2EysYK09Y_F1tsMsp_B8MU.roa (hash: el4sZWuoJZOOcj14KO5Yq16IPPIz+c0KckgEteIx4YM=) 6: ILbeank0F3xhLsgBl0NZfpBZFig.roa (hash: 8RlSwtQK5lhGbhOtyX4cacpgfYuG3exGirW2aa5+FLI=) 7: KBQWtgPCMeq_IbONzoF64FnlzwE.roa (hash: EZ3seNeYjAQFpAfGwhXlV+Wya2vQO7lfYcVB84EkqA4=) 8: PBiom43THD1F1SBGVmDFN9WwnMo.roa (hash: EVRLL8Mxobz8XRwc26H2JAHWkuwMiYakvll8d/79CJQ=) 9: TnqWiZSrJP5FZLgDlXk-iaFi5k8.roa (hash: 8gjKeaSL9Im1mKl/CKczQDSLzI2OEBo3YD5qQoY5RT0=) 10: VXGu7cRy3TUPyfgbIf2vopAF1Lc.roa (hash: 40vRMPsPFPCFnDUP/ikEgH9v+gi1iVOQkLoxtLSkOqE=) 11: ZaSQVTZm2f4ebc71HIkhrpqqsuk.roa (hash: X8/L0T6q0bM6s++7u2MQIu4RlHWQNdJcKAvE7bH3VP4=) 12: jldP_NkgEKrLmFaYQtB6TuhGzRs.roa (hash: Cz3xmiLxKccg4wAv608JqhvYxIHIutFBcyhT8Ond0Zs=) 13: oQk2rT9-TmTMiTawX34MBI0QTrc.roa (hash: 6J7fvMBzz5wnq8Q655iOLvmHY5jKT0LznvTL3IrQ8Xw=) 14: unsmmkYBpbXrCubGO7XS6N7I7QM.roa (hash: /TaQOoUPP+hWic0pvVLJBHflkZLzIc8T4AFkDEL7yKk=) 15: w9Z-5nLehvUlBeOI2h5dSoEBLSw.roa (hash: dyC69X2s5yoLrmCLq7pBQHExLj0vbp1A/uwW5wlqEug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 23:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7e:2e:ae:75:b7:c3:00:0f:ee:96:d2:b1:44:f2:0b:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Validity Not Before: Aug 6 07:00:45 2025 GMT Not After : Aug 7 07:00:45 2025 GMT Subject: CN=9b8e33bfda6304268dbda2b9e940260d31a04ab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:34:27:e4:43:59:a1:43:86:0d:39:b1:5e:60: 03:6e:d4:c1:b3:59:29:47:c8:4c:26:78:fe:22:97: 8b:08:0a:95:ab:b0:9e:1d:26:68:91:78:2b:d0:3d: bc:8b:5e:dd:94:73:ff:09:94:eb:3f:85:cb:90:09: 66:b9:b3:a6:d2:92:30:fa:c4:b8:98:b8:7b:20:ad: 36:7c:12:a4:fa:49:44:f7:3d:c6:1e:de:0f:76:22: ff:f9:dd:4a:d6:d7:2f:f6:67:48:f6:e0:9a:41:9b: bc:0a:8c:89:46:ae:c2:a0:78:bd:62:b2:c9:0b:33: a3:1f:d2:8b:05:1f:c5:c2:71:fa:14:32:28:07:f4: f1:ad:3c:f6:1a:b9:62:78:45:00:2d:54:24:70:c0: 73:17:63:50:8e:af:e0:8f:37:11:5d:f6:d1:e2:c6: be:c3:85:2f:92:0e:cd:96:47:ca:01:b3:d6:36:a1: ca:9e:d8:28:a3:9c:3f:c7:d2:cd:5c:88:3b:52:46: 84:da:a7:45:4e:bb:81:a3:19:1e:a6:a2:56:51:2f: 3c:64:b9:24:93:eb:6f:76:74:28:92:46:3e:fe:d9: aa:99:e4:db:40:68:07:d3:df:69:5c:6b:c2:46:c3: 99:30:73:eb:c9:e3:d3:00:34:37:67:45:1d:ee:e2: 75:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8E:33:BF:DA:63:04:26:8D:BD:A2:B9:E9:40:26:0D:31:A0:4A:B3 X509v3 Authority Key Identifier: keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:44:41:be:c2:15:e2:6d:4a:e3:b6:67:fc:db:2b:fc:b3:12: a6:94:1e:0d:92:1a:20:cd:d6:40:6a:39:e9:7e:f4:2b:4d:0e: c4:bf:a1:e1:27:15:f7:f6:03:0b:a8:33:b3:1e:8f:ef:48:93: e7:f6:4e:46:1e:fa:50:f6:16:c8:81:45:26:93:ad:6b:54:e9: e3:cb:2e:19:a9:97:16:fb:54:84:9e:81:72:d9:17:b0:56:c2: ed:05:da:a4:b2:ef:cb:56:06:a2:62:4b:17:b0:3c:80:53:e0: 65:c6:b8:a0:51:78:31:6d:43:25:43:2a:ca:b4:f4:d2:1a:38: 3c:bb:97:7a:ec:76:3f:bf:19:e9:2f:52:55:8a:ee:0a:4e:68: 6d:dc:b4:c2:da:9f:62:7c:42:93:e2:68:c2:b9:23:27:b7:6b: ee:e8:ba:10:4c:f7:de:ec:69:ad:2f:96:11:ff:5d:45:7c:22: 39:f6:ae:89:20:f0:8d:7f:a1:87:68:6d:aa:92:e6:20:fd:43: 04:33:01:8e:37:dd:25:e9:d2:82:17:d0:3c:e0:44:1d:1b:8e: 96:b1:7d:1d:56:bf:c5:57:cf:a1:fe:29:98:20:47:c2:16:76: 66:be:55:9d:0b:a7:08:40:b6:ba:42:fd:c8:ba:48:e2:a1:98: b3:81:93:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh+Lq51t8MAD+6W0rFE8gtBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm MDIwMjAwHhcNMjUwODA2MDcwMDQ1WhcNMjUwODA3MDcwMDQ1WjAzMTEwLwYDVQQD Eyg5YjhlMzNiZmRhNjMwNDI2OGRiZGEyYjllOTQwMjYwZDMxYTA0YWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjQn5ENZoUOGDTmxXmADbtTBs1kp R8hMJnj+IpeLCAqVq7CeHSZokXgr0D28i17dlHP/CZTrP4XLkAlmubOm0pIw+sS4 mLh7IK02fBKk+klE9z3GHt4PdiL/+d1K1tcv9mdI9uCaQZu8CoyJRq7CoHi9YrLJ CzOjH9KLBR/FwnH6FDIoB/TxrTz2GrlieEUALVQkcMBzF2NQjq/gjzcRXfbR4sa+ w4Uvkg7NlkfKAbPWNqHKntgoo5w/x9LNXIg7UkaE2qdFTruBoxkepqJWUS88ZLkk k+tvdnQokkY+/tmqmeTbQGgH099pXGvCRsOZMHPryePTADQ3Z0Ud7uJ1zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuOM7/aYwQmjb2iuelAJg0xoEqzMB8GA1UdIwQY MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt NGI2YzFjZjlmZTRmLzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN0RBvsIV 4m1K47Zn/Nsr/LMSppQeDZIaIM3WQGo56X70K00OxL+h4ScV9/YDC6gzsx6P70iT 5/ZORh76UPYWyIFFJpOta1Tp48suGamXFvtUhJ6BctkXsFbC7QXapLLvy1YGomJL F7A8gFPgZca4oFF4MW1DJUMqyrT00ho4PLuXeux2P78Z6S9SVYruCk5obdy0wtqf YnxCk+JowrkjJ7dr7ui6EEz33uxprS+WEf9dRXwiOfauiSDwjX+hh2htqpLmIP1D BDMBjjfdJenSghfQPOBEHRuOlrF9HVa/xVfPof4pmCBHwhZ2Zr5VnQunCEC2ukL9 yLpI4qGYs4GTow== -----END CERTIFICATE-----Generated at Wed Aug 6 10:05:45 2025 by rpki-client