$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft File: jRrIPuOj-WjWatL99GFue7Hk0dc.mft (raw, json) Hash identifier: KYJHM/ceA/iy62WI+I3ADKIiG6FM9TU3TVusy1LplnA= Subject key identifier: 66:2F:47:44:35:95:A3:E2:41:F1:93:95:59:05:B4:3D:EB:41:38:B5 Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Certificate serial: 019873E29854A857A92F46152E08B551892A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft Manifest number: 0B9E Signing time: Mon 04 Aug 2025 07:01:26 +0000 Manifest this update: Mon 04 Aug 2025 07:01:26 +0000 Manifest next update: Tue 05 Aug 2025 07:01:26 +0000 Files and hashes: 1: 0hcYkFvLnPnX3tJPZIl-Uhot1i0.roa (hash: 6/eHz/J+k5SuDY5b5eslxHZpd3P/l7+bfENiu84Xo/Y=) 2: 2MTjWcnAZaBZxr6B57_xkNelCyo.roa (hash: LwS+Lia49xksIy+sqAnEnU2btZ36QZE/qsN4N2FlYK8=) 3: A3vCnLdcCAHsjG0TKS7PepEiSRQ.roa (hash: 8/8TxF0wXw7stYTcBeXGRpf0HZpKR5xHMrhdKNPhjb4=) 4: Eb3nQCsubyrRRwgtef25b2tcJbQ.roa (hash: sgX7PEOSSTdMVUw2kIAqvpDSoV+TN56cGW37Ykizvek=) 5: FQFiaH-Uhznyo9tuv-39hg1SgIc.roa (hash: AaAgvoQWwsBdEDlzs9JJLKseENMJxUCvDZ1+feCaadI=) 6: JtkTsuHPsoBKn0hRChOrC4JXTN4.roa (hash: M9uGhnRBSZAnmB8BCT/jdRx465I3Ctf37Vtgm+Jt4nc=) 7: LNIAH1MylX8WQQ-W8xfPHTlOsW0.roa (hash: GFXXpakvt3mJ4yGbBFawI3+WVF7sKNF14A1lgtziIek=) 8: Lxv8RdYN9P2vj1nZyAjFF9lNkU8.roa (hash: xMtpILHpW8icGyga3EnNkKUNmrRxGITTuJWIIZqDxDI=) 9: MudRzNeUk2R859eEP09GJeDExf0.roa (hash: 2o3NbfW7AkgEJtAc91HUgnIB/5KesUMTjVvuVU09fp4=) 10: RTZYU-7DG4fUoipBd0qSh8BirjI.roa (hash: 3eo6AFVTXAYcIIpYV9OFjF0R4DRTO3nfrXKCxpb3Q8c=) 11: XO5629FFpWYFF8ZRrD5XKcMM2vo.roa (hash: wKy5dCiE9pBzbJNPaAeHBHoxO/6aKqqjDAe2f2qYl60=) 12: gwSC7EAy3C72kqaOxsQmMkrjxyA.roa (hash: oVgyYlrKyPjekvA+50Kp0/QR+pQendS8nmEKcr8YBXw=) 13: jRrIPuOj-WjWatL99GFue7Hk0dc.crl (hash: mSxFqi9v97r7L8PEyrM28kc+33VXxi/UrkJB5ZktlmY=) 14: koWcD6_YJsplq6MpdAuoeyxurzM.roa (hash: 2bTDDvlz5M3JHeYmPpa6SlfroaAlw505uc1zw7/pXCU=) 15: lO8z4PUnAAW_FQZ30LG2G_SaC34.roa (hash: TP4CK9avYURoeZBLUriM0sZhHgj7m8xB680P8/Q/778=) 16: ptIzMM5pGR32qdt6NWym3eUNiak.roa (hash: bSsM8QyZGEjlRqx/UPAoekl3qkyD03EUapHU3WIbdX4=) 17: tesrxSIX8wDOD0usavdzlelTyC8.roa (hash: 2mw6qDJEVPvk2SB5Frfa2IZ+DHf6Rgtla+C91qwtmwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:73:e2:98:54:a8:57:a9:2f:46:15:2e:08:b5:51:89:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Validity Not Before: Aug 4 07:01:26 2025 GMT Not After : Aug 5 07:01:26 2025 GMT Subject: CN=662f47443595a3e241f193955905b43deb4138b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4a:c9:b1:33:be:57:d2:25:a2:44:d8:0f:6f: c1:e0:cf:76:e8:83:84:59:c5:d7:56:d9:20:cf:3b: 4b:9e:97:35:35:00:e6:5e:4e:60:f5:7f:88:b8:7a: 0d:d0:64:e9:bb:4f:6a:a8:7b:b4:ae:8d:8b:bd:75: 78:f2:33:de:3f:e4:84:48:8b:f9:0f:6b:f8:41:58: b7:98:ca:1a:83:f9:78:82:e0:ea:fb:e3:ee:fd:08: f9:df:fa:0d:f9:fc:41:af:92:41:52:f7:c6:ea:90: da:29:01:df:e2:e8:ad:65:59:f0:c3:ec:61:1c:f5: 18:b5:42:1e:ad:45:93:9a:70:4e:f2:84:d3:7c:2c: 26:e8:34:41:c3:89:87:bb:b2:bf:80:a9:e5:f1:35: cc:d6:13:d1:8c:0a:e0:46:76:7d:24:19:39:d0:4a: d3:c2:0b:83:02:ed:e5:50:03:65:09:43:c3:c7:74: c0:a5:4c:11:4e:fd:15:4a:14:e5:14:27:ed:95:2a: d1:28:93:90:95:26:fb:9e:b7:f7:1c:94:39:61:56: e3:4c:85:31:67:02:0a:bc:2b:71:60:35:77:91:ba: a1:45:9b:05:c7:61:8a:59:bf:0f:ba:76:7b:b2:52: e7:45:6c:85:b6:24:4d:be:b8:4f:fc:76:70:b2:0d: e5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2F:47:44:35:95:A3:E2:41:F1:93:95:59:05:B4:3D:EB:41:38:B5 X509v3 Authority Key Identifier: keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:90:0e:2a:38:44:60:d6:47:59:77:55:cc:bf:e5:78:d1:59: ef:7c:37:8f:49:c6:bd:76:98:57:00:41:db:82:0d:dd:72:a1: bf:4c:8b:b8:8f:3b:b8:b7:de:90:c0:85:be:59:8b:6e:2d:e7: b9:b8:42:4c:20:94:ea:18:d2:2a:63:44:0f:4c:b5:82:2d:d4: 92:56:95:3c:5b:60:48:0a:7f:f8:02:04:db:61:37:dd:2f:ee: 78:9c:32:bd:6b:62:2f:89:cd:e3:d4:d3:83:21:06:79:20:00: 96:cd:64:8d:b8:5a:69:9a:b0:a5:ad:b0:46:0a:f0:d3:94:21: 8f:fd:b4:12:e4:35:c8:73:25:3e:89:13:17:56:af:b5:45:96: 22:2d:d0:94:3d:37:09:4e:b5:69:82:b8:60:17:c5:dc:1f:c9: 5a:0b:62:9c:91:1d:29:9d:97:7b:e1:5e:ad:dd:eb:1b:df:20: 41:44:fb:0b:90:b2:35:be:db:f2:cb:e4:1d:9b:ac:3b:13:61: 3f:2a:5e:08:5c:8c:35:29:af:89:66:48:b9:ec:be:dd:db:a4: 6d:58:a3:4b:9a:eb:1e:aa:ac:60:18:a9:9f:96:7b:e2:a9:95: 7e:71:a8:4f:35:03:a8:13:57:a2:cb:de:65:35:e3:7f:4f:11: cc:59:bd:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhz4phUqFepL0YVLgi1UYkqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl NGQxZDcwHhcNMjUwODA0MDcwMTI2WhcNMjUwODA1MDcwMTI2WjAzMTEwLwYDVQQD Eyg2NjJmNDc0NDM1OTVhM2UyNDFmMTkzOTU1OTA1YjQzZGViNDEzOGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0rJsTO+V9IlokTYD2/B4M926IOE WcXXVtkgzztLnpc1NQDmXk5g9X+IuHoN0GTpu09qqHu0ro2LvXV48jPeP+SESIv5 D2v4QVi3mMoag/l4guDq++Pu/Qj53/oN+fxBr5JBUvfG6pDaKQHf4uitZVnww+xh HPUYtUIerUWTmnBO8oTTfCwm6DRBw4mHu7K/gKnl8TXM1hPRjArgRnZ9JBk50ErT wguDAu3lUANlCUPDx3TApUwRTv0VShTlFCftlSrRKJOQlSb7nrf3HJQ5YVbjTIUx ZwIKvCtxYDV3kbqhRZsFx2GKWb8PunZ7slLnRWyFtiRNvrhP/HZwsg3lRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYvR0Q1laPiQfGTlVkFtD3rQTi1MB8GA1UdIwQY MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt ZGRmNTY3ZWRlZDAzLzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADpAOKjhE YNZHWXdVzL/leNFZ73w3j0nGvXaYVwBB24IN3XKhv0yLuI87uLfekMCFvlmLbi3n ubhCTCCU6hjSKmNED0y1gi3UklaVPFtgSAp/+AIE22E33S/ueJwyvWtiL4nN49TT gyEGeSAAls1kjbhaaZqwpa2wRgrw05Qhj/20EuQ1yHMlPokTF1avtUWWIi3QlD03 CU61aYK4YBfF3B/JWgtinJEdKZ2Xe+Ferd3rG98gQUT7C5CyNb7b8svkHZusOxNh PypeCFyMNSmviWZIuey+3dukbVijS5rrHqqsYBipn5Z74qmVfnGoTzUDqBNXosve ZTXjf08RzFm9eg== -----END CERTIFICATE-----Generated at Mon Aug 4 11:09:06 2025 by rpki-client