$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft File: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json) Hash identifier: +TBlEtuwbvZEAbqe3EXWN4zDDlPUEDGzD4u1+fJVROA= Subject key identifier: BF:EF:77:CB:33:A0:FE:97:07:B7:A5:99:3D:5D:D5:43:E3:94:BA:BE Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 019874F4C184BBD186157C23B4E4440A1A8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft Manifest number: 04C9 Signing time: Mon 04 Aug 2025 12:00:53 +0000 Manifest this update: Mon 04 Aug 2025 12:00:53 +0000 Manifest next update: Tue 05 Aug 2025 12:00:53 +0000 Files and hashes: 1: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: BApLOVU9Eb+tCRDT3HcDeyZtTPQ63stK5wHczA1USIk=) 2: 3NKK36OzbyCVvAW6QnBXCk0vC-E.roa (hash: gHjjORGkqgV1v9V5gvG+Gu8C2uJp9VohURGk9hhqXCY=) 3: DWnysDNu_v7yNNJ1aIjDqps-5LM.roa (hash: JPD53SzaSyMUMEmsWnAbUrfvGclz72WlfPM6q3RIsCk=) 4: RaE5smqHwTpdBVtd89_5CUvQKsE.roa (hash: UtehD4VO0l8o+LKAy2Z/geys1UM7QHPafm/iIQaT0/U=) 5: SOWcqaYhZ7YX4OOHhJe96In9itw.roa (hash: UaSEArJ4Ty/99oB9k6ZnmXrGKJLGr0L+yE1xo+K6dEg=) 6: f7lR2qdNzNhMHZctwhySnx52rh8.roa (hash: uc/3dtcmzwA7XSJMfP+6pPiS8XT6tGwBC3iJr2Zlmhg=) 7: kcbMP36K9zR3OAqVvtstfD6Qc1E.roa (hash: kKzo7D93m1wQVJ52FPItkIqrFxN6fMh/dyqt/5KaXWw=) 8: ksCUkPPXGRQEiQCKOl3Wp67HpYk.roa (hash: Fa0gD5gnN233i5uopk4/0YW9tKdVwYrJaJzPk4e1vT4=) 9: p8WEIwXo7Clnw_lkUVuyGNIeOvM.roa (hash: Ur1mz6OTaNWSYai5Ah9bPYej/Ck8pv/XZW+9ZEpR3q8=) 10: qJyacpBlbWQwXSv5l4Lxk3gU7sA.roa (hash: A2lDMN5zFwbdpcFJxDl5a8uW8CFGyTpmaP19LpWfeHE=) 11: r9xTyNget5zcXlE9TLs7M3SNT04.roa (hash: AESrTW2Rp0Ova6EIN8mRWsiWri5RUSzYkj7e2h2UwnM=) 12: wBcaC1_PamN7lirmMN3fzCp6jH4.roa (hash: G/3j6WArnTAj7/DCB5dCgU40hqdUmgoP9O96RyuFd1M=) 13: wWRwvyrn-LAOgtkAhCo3MlchYWQ.roa (hash: Uba3h/vRuJ26W0MxcGsxkEurmXFyfeD+ONZVIUG7QEM=) 14: xQ1rwm6oO8jHA9kZhQvVDEfMToU.roa (hash: rR/azYUh2GUL8HTdYkb3GDWX8S5vRgxNHhornEovZ9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:74:f4:c1:84:bb:d1:86:15:7c:23:b4:e4:44:0a:1a:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Aug 4 12:00:53 2025 GMT Not After : Aug 5 12:00:53 2025 GMT Subject: CN=bfef77cb33a0fe9707b7a5993d5dd543e394babe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:05:fa:5e:7b:e0:6d:e9:92:0b:23:c8:18:21: c1:d2:9f:f1:39:97:76:2f:01:8e:e4:40:f0:e2:1d: f5:35:89:6d:d3:0d:d1:18:31:d6:f6:78:d7:6c:e5: d1:5f:42:84:96:d4:c5:b3:c3:bd:76:96:1f:c6:65: c7:00:dc:30:c6:96:61:a2:4c:84:ca:4c:cf:20:64: fb:74:46:86:45:02:d6:3e:53:f0:ef:4e:5c:8d:6b: 23:23:d6:b8:46:c5:3f:6b:e4:12:13:75:99:0a:6e: 45:9a:17:f3:5b:c6:1c:ad:8e:21:44:31:5b:77:16: 57:97:2b:6e:b9:6e:94:7c:b5:ad:a7:09:fd:de:4c: 79:3a:4a:cf:a0:be:ba:6d:fe:a3:d7:23:43:44:98: ba:5a:12:13:0c:53:9c:c2:83:35:57:bf:1b:4b:3b: 96:e6:36:41:6d:dd:63:a8:43:17:af:19:b2:74:f0: f5:45:b0:48:ee:3c:66:8b:89:de:f1:76:8b:34:54: 9e:c4:b0:b8:2a:d4:ab:26:71:c6:8f:22:31:6e:12: ac:9d:c7:e0:19:de:ed:04:4b:2d:19:a1:1e:97:c4: ef:86:0a:ef:cb:a8:f7:18:db:e5:ea:3f:09:0b:b0: 15:94:30:1c:b1:18:54:37:5d:17:84:08:9f:fe:c9: ee:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:EF:77:CB:33:A0:FE:97:07:B7:A5:99:3D:5D:D5:43:E3:94:BA:BE X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:d6:6b:1c:27:f5:de:9b:8a:4b:2b:d4:ad:30:0c:f6:06:a9: d3:15:ab:af:28:23:11:d9:a4:f7:0a:24:35:74:61:62:ed:5a: 0a:eb:3c:74:29:ad:31:ca:92:50:f2:d7:2a:b1:44:6e:7d:b5: 36:98:7f:1b:60:d0:a6:e2:08:2d:ef:f6:55:df:43:e7:e3:65: 93:fa:fc:58:5a:b9:03:d8:b1:49:9a:8f:8d:68:b7:95:48:6c: 59:db:d4:c6:94:ae:20:54:e4:9d:f7:c7:9b:aa:fe:c0:97:fa: 12:65:0c:c5:5b:8b:64:58:95:8c:4b:5e:17:2a:bc:40:c0:5c: 61:5e:cd:f9:11:89:9e:51:16:29:aa:6a:d8:03:b1:7d:fd:40: 66:5e:83:dd:d7:e5:d9:f0:4e:67:99:11:77:3f:33:7c:2a:80: 45:d1:ab:4a:a9:2e:3c:be:89:e4:18:e0:0a:cb:4e:f6:2b:6c: 52:e5:06:41:88:87:17:26:3e:0a:0b:fd:9d:c6:1b:e0:1c:86: 54:24:4b:30:b1:c7:b6:12:1b:82:d9:38:ce:7a:41:8a:7b:2f: 79:17:24:60:31:b4:dd:33:f8:7a:c8:6b:25:50:20:74:cd:ff: 1f:f8:26:60:01:97:44:4f:5c:50:8f:f8:8d:35:f6:d5:77:ef: 8b:12:1b:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh09MGEu9GGFXwjtOREChqMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjUwODA0MTIwMDUzWhcNMjUwODA1MTIwMDUzWjAzMTEwLwYDVQQD EyhiZmVmNzdjYjMzYTBmZTk3MDdiN2E1OTkzZDVkZDU0M2UzOTRiYWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgX6XnvgbemSCyPIGCHB0p/xOZd2 LwGO5EDw4h31NYlt0w3RGDHW9njXbOXRX0KEltTFs8O9dpYfxmXHANwwxpZhokyE ykzPIGT7dEaGRQLWPlPw705cjWsjI9a4RsU/a+QSE3WZCm5FmhfzW8YcrY4hRDFb dxZXlytuuW6UfLWtpwn93kx5OkrPoL66bf6j1yNDRJi6WhITDFOcwoM1V78bSzuW 5jZBbd1jqEMXrxmydPD1RbBI7jxmi4ne8XaLNFSexLC4KtSrJnHGjyIxbhKsncfg Gd7tBEstGaEel8Tvhgrvy6j3GNvl6j8JC7AVlDAcsRhUN10XhAif/snuywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/vd8szoP6XB7elmT1d1UPjlLq+MB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATdZrHCf1 3puKSyvUrTAM9gap0xWrrygjEdmk9wokNXRhYu1aCus8dCmtMcqSUPLXKrFEbn21 Nph/G2DQpuIILe/2Vd9D5+Nlk/r8WFq5A9ixSZqPjWi3lUhsWdvUxpSuIFTknffH m6r+wJf6EmUMxVuLZFiVjEteFyq8QMBcYV7N+RGJnlEWKapq2AOxff1AZl6D3dfl 2fBOZ5kRdz8zfCqARdGrSqkuPL6J5BjgCstO9itsUuUGQYiHFyY+Cgv9ncYb4ByG VCRLMLHHthIbgtk4znpBinsveRckYDG03TP4eshrJVAgdM3/H/gmYAGXRE9cUI/4 jTX21XfvixIbzQ== -----END CERTIFICATE-----Generated at Mon Aug 4 18:26:16 2025 by rpki-client