$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft File: JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft (raw, json) Hash identifier: NdPY0xrxfU6q0b3AIjxxch22OWsGLCCXh7E4YcouY2U= Subject key identifier: B2:3C:C3:91:83:97:CA:D9:00:EF:28:E0:C7:86:34:1E:72:10:85:64 Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43 Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343 Certificate serial: 01988957B034AFA2141F7A5F3B1470DD7AF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft Manifest number: 12D3 Signing time: Fri 08 Aug 2025 11:01:21 +0000 Manifest this update: Fri 08 Aug 2025 11:01:21 +0000 Manifest next update: Sat 09 Aug 2025 11:01:21 +0000 Files and hashes: 1: Cuo_4OmB5hqfWI_WnYCCpNWLrgY.roa (hash: 3ZR1eIgUuJPainUs4mhe9MePZiakCaM69xOhHdIrRiI=) 2: IzLkhR_yv-v1GWTNh9mHUxrH6l4.roa (hash: Gz5yahpviiaRhf/uooYdv+kvLqcJz9y4V27m2bP2qhQ=) 3: JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl (hash: uyxCxWUBZE/AcxP8jm5nCWb3DQWEGuq3tfQXhi+Ay/M=) 4: LM4Pk0L89FT4bKCAnT5Pam60X3A.roa (hash: 15JH8Jc4TtNGcpNeD66bPIeSCBDAVTNv6bCkpCrYf1k=) 5: LzqzV901FJ7L-pE2io0JnQT7BO4.roa (hash: GQqWNE02zR7Pp1sxpXbJtIEQadxv84uYnIivoQsK42g=) 6: PSAVpGqbLcX36nvl195Ht9uZru0.roa (hash: zB4ZQEbAnrwd223bn2HnWhFXbaVVIUWcshlHHT8Vv9g=) 7: ZPRKsrk_LO1Kz1FxSXf4yoBYhVE.roa (hash: MuaQpB8L7R2Qx8jUBzVEMelRet/5/uaTnFy0z9JGEOY=) 8: exSqcqToVirE26kLGdF-HPjamps.roa (hash: HQsC+Mewyu8X71olEoQS/oWx63H6y6cZFOsC8HgKsMc=) 9: juhHhfMZKtMv7VJHZvSyHbChAaI.roa (hash: TVL933SmsCckOHxjM78yEFmonP+viUg+iondjs0ZENY=) 10: wwkTxtvy8y_gre1LyntK82_wg2o.roa (hash: 06SNxlJKLopu/TY42bvthXJuhwNZOlr+SWZ0JQeMj5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 09 Aug 2025 11:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:89:57:b0:34:af:a2:14:1f:7a:5f:3b:14:70:dd:7a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343 Validity Not Before: Aug 8 11:01:21 2025 GMT Not After : Aug 9 11:01:21 2025 GMT Subject: CN=b23cc3918397cad900ef28e0c786341e72108564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ef:10:5c:f7:1c:00:62:29:15:66:59:e0:62: 32:70:e5:75:d3:cf:cb:b8:3f:1c:f5:91:61:ff:bb: 91:52:73:5e:36:c1:38:60:18:02:c6:54:0d:7b:f6: b9:49:13:f9:eb:02:e8:f7:e5:97:ea:7e:48:6d:e2: 9e:70:e7:06:d7:04:1f:cf:7f:d9:48:38:f5:bf:db: 99:68:32:68:4b:d6:ae:e6:a3:8a:e2:ac:4d:40:92: 5c:a7:e4:41:9e:2a:63:13:c0:1b:22:98:16:dc:16: b0:b1:92:03:dc:68:d3:45:19:36:cb:7b:ca:d6:fd: a5:32:f5:91:7e:3b:35:80:dc:dd:bc:dd:5b:b1:e1: e2:dc:e5:01:32:24:8c:db:78:ca:4f:41:d4:a4:bd: df:39:f8:ba:a4:c5:e3:c5:b8:cf:6f:77:ed:be:36: c1:7d:62:21:49:c3:d2:a0:56:6f:8a:1d:8e:9a:7f: 40:77:b1:8e:be:65:4d:1a:bd:ed:fd:d5:1a:8e:2f: d7:8a:f9:91:09:fd:73:c4:46:d9:f3:be:3a:75:90: 02:ef:29:c1:b3:59:de:9d:bb:6e:0f:ca:89:d1:81: 46:35:cf:a0:27:fd:4d:ef:a6:48:49:23:15:92:0e: 82:bd:5f:7d:76:b1:93:30:fd:61:6f:69:49:8f:04: 4c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:3C:C3:91:83:97:CA:D9:00:EF:28:E0:C7:86:34:1E:72:10:85:64 X509v3 Authority Key Identifier: keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:99:db:06:c6:26:88:48:8d:d6:41:4d:07:f3:da:44:f9:db: ab:fe:b2:89:e7:62:e9:21:ff:f4:45:d9:88:3d:92:e5:aa:9e: d4:ce:f3:dc:18:e3:62:c6:12:4d:cc:ae:b1:f6:a9:e7:6d:2b: 3d:54:6e:18:14:c1:60:b8:b1:87:19:70:c4:b9:34:76:e7:8f: 20:ac:ac:04:f1:0e:75:92:60:cd:7c:6b:e2:90:b5:05:da:c0: 9a:7f:9e:b2:63:be:49:6a:74:19:9c:1a:c5:ed:02:33:24:17: 7c:e5:f3:cc:80:d6:e2:a2:91:09:da:67:21:03:e2:cc:5b:ec: c5:ef:b1:01:16:68:23:ff:78:0e:52:c0:33:8a:4e:11:a6:51: 21:e6:d2:66:1f:79:3e:cf:b6:51:2f:f7:cf:40:a9:fb:ab:5e: 62:db:4c:9d:fb:b5:b1:b3:55:26:22:46:45:c4:11:96:3e:b6: 0e:9a:61:30:a1:72:e9:9f:11:92:b6:2d:6a:81:11:dc:27:b5: 52:26:75:a1:95:18:4a:58:6b:10:19:c9:0f:0f:09:c6:0d:a9: 36:ae:64:ed:c0:75:bd:bd:3e:e6:01:42:e5:33:d0:4d:72:a1: ff:68:b9:ae:fd:0b:f9:fb:03:bb:11:c5:94:9e:d6:8c:4b:d1: 3f:63:4f:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiJV7A0r6IUH3pfOxRw3Xr4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YTVhYTkxOGNiZmViM2UxMjk5N2YzMzg5MGZlYjI1ODkw N2IzNDMwHhcNMjUwODA4MTEwMTIxWhcNMjUwODA5MTEwMTIxWjAzMTEwLwYDVQQD EyhiMjNjYzM5MTgzOTdjYWQ5MDBlZjI4ZTBjNzg2MzQxZTcyMTA4NTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxe8QXPccAGIpFWZZ4GIycOV108/L uD8c9ZFh/7uRUnNeNsE4YBgCxlQNe/a5SRP56wLo9+WX6n5IbeKecOcG1wQfz3/Z SDj1v9uZaDJoS9au5qOK4qxNQJJcp+RBnipjE8AbIpgW3BawsZID3GjTRRk2y3vK 1v2lMvWRfjs1gNzdvN1bseHi3OUBMiSM23jKT0HUpL3fOfi6pMXjxbjPb3ftvjbB fWIhScPSoFZvih2Omn9Ad7GOvmVNGr3t/dUaji/XivmRCf1zxEbZ8746dZAC7ynB s1nenbtuD8qJ0YFGNc+gJ/1N76ZISSMVkg6CvV99drGTMP1hb2lJjwRMfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLI8w5GDl8rZAO8o4MeGNB5yEIVkMB8GA1UdIwQY MBaAFCalqpGMv+s+Epl/M4kP6yWJB7NDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xNDMzZWEtMTA4MC00NmU1LWI2MTIt Mjk3ZTI4MmQ2NmE4LzEvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8xNDMzZWEtMTA4MC00NmU1LWI2MTItMjk3ZTI4MmQ2NmE4 LzEvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn5nbBsYm iEiN1kFNB/PaRPnbq/6yiedi6SH/9EXZiD2S5aqe1M7z3BjjYsYSTcyusfap520r PVRuGBTBYLixhxlwxLk0duePIKysBPEOdZJgzXxr4pC1BdrAmn+esmO+SWp0GZwa xe0CMyQXfOXzzIDW4qKRCdpnIQPizFvsxe+xARZoI/94DlLAM4pOEaZRIebSZh95 Ps+2US/3z0Cp+6teYttMnfu1sbNVJiJGRcQRlj62DpphMKFy6Z8RkrYtaoER3Ce1 UiZ1oZUYSlhrEBnJDw8Jxg2pNq5k7cB1vb0+5gFC5TPQTXKh/2i5rv0L+fsDuxHF lJ7WjEvRP2NPVQ== -----END CERTIFICATE-----Generated at Fri Aug 8 20:52:25 2025 by rpki-client