$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: F9Dlur8MeUog3R/pt8g5do717VfZHDJ8npb7R8cergM= Subject key identifier: C6:73:98:24:E6:2F:6F:0F:96:FE:3B:2B:6B:41:E6:CC:A2:C8:70:A5 Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 0198737460050F118A09609DAB68F849D53E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 13AF Signing time: Mon 04 Aug 2025 05:01:03 +0000 Manifest this update: Mon 04 Aug 2025 05:01:03 +0000 Manifest next update: Tue 05 Aug 2025 05:01:03 +0000 Files and hashes: 1: 5WpWrypca4XGx0ISHtuZYRT_cno.roa (hash: R8ZoU8UZw1Z3gy7t3IJTFumdlDzgJjWSubPKAJkbvV0=) 2: 6Tq_leUsVpFgI85zp_wIyChN4WA.roa (hash: //rXy+p6IdrQ6jHZrRlFQGf563PHiLpmYBPTnbSHBxk=) 3: 8wA7Z8R93JqOIr4nUCX1S5SLIf0.roa (hash: 8DXy5Yj333BXczsMQt5oYuiRo4BwLMddhajfUUPGovk=) 4: ElpdsCAHWnrspf_BQqwQgScgsBo.roa (hash: qGJ7OM5aBe7dvyjzLtp4kDohE2tNL4nfvnY6+uLyiBw=) 5: JOBERo-vgg6dldBoWViTCfV7X-A.roa (hash: ce+d5taUPY+G9x5sjcA70ndAe38v7dhbZx0JrAG/CD4=) 6: RYSW4-JdkoBKfIznV9vyOBl6v0k.roa (hash: tfbM0g7bQsYb1raiS9o3/ZoSCJhkN7ErYxyrCWx4xjs=) 7: T1V76bxlhezLMl4Tzlvgqgk0pcg.roa (hash: Hk9kWyBSS3VZQ3ORtc2F2qsaXDclUxsqlus/HDJzLds=) 8: Z5phhVwVfpK6dkc5C1-vYmhcYUU.roa (hash: iIyIPk2NBxkdVR06TYJeH+vh01QOalQb+F2tpumtM+w=) 9: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: +XeQU3cLoI73YYTazAEzf4gPPFPHjjk1qtjBOcRkxkM=) 10: ezMLdhISIqr2PAqGoulAf-qQ6FY.roa (hash: MoVmtNQ9G0A/NJidABkGuBmF42AfIIukbBtAhp8lY68=) 11: mA4IEAHXR0LDJS0AO7AgvdyymfA.roa (hash: B62czMPy2pKQJ5FL2R2C5ZUZdywtpL+Cj+O5hZ16Rv4=) 12: qQMnV_AHkaoypfzXBStNqOIC8i4.roa (hash: 8/gHPP6AgbL3NuW+OG2JLB+jSLFsV5WrdZq7Of0LMpg=) 13: t-GC4kGf7lvSnOYAiTpgmlkKEL4.roa (hash: 9rNbslHDQxGg0Ew50MQa2Fk3HC4+vs4VNNeusuZLYr8=) 14: x9Pa4FjGFuSawk-SEv2Ok6k19yY.roa (hash: KV0RsDBtETgbugEI2r4ib263Vs08/yFDjc5KML8G+A0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:73:74:60:05:0f:11:8a:09:60:9d:ab:68:f8:49:d5:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Aug 4 05:01:03 2025 GMT Not After : Aug 5 05:01:03 2025 GMT Subject: CN=c6739824e62f6f0f96fe3b2b6b41e6cca2c870a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:50:06:a5:06:2d:73:15:f4:b8:13:e7:a8:85: 44:69:bb:01:ca:9c:20:67:08:ee:82:07:7d:bc:43: 98:69:64:15:6b:f0:88:ed:5d:1e:f2:43:3c:a0:d9: 80:56:6a:0f:55:3c:48:99:ff:dd:31:f4:8b:22:14: 76:d4:c9:dd:85:a7:81:fe:4d:e2:d3:51:37:0c:36: d5:78:4f:dc:48:17:58:18:6a:70:42:68:0d:da:42: c5:a3:78:96:e2:a1:4a:06:df:fb:7a:1c:bc:cb:ed: 67:44:a3:68:03:59:3f:fe:71:c1:a9:d0:c4:c0:38: c0:7c:ef:e6:ef:f3:0d:3e:81:b0:93:76:44:f5:46: 8f:8b:46:c7:14:8a:ea:c9:85:2d:c8:42:f7:fb:59: 64:2e:87:80:d9:ec:09:1b:75:ea:d9:17:a9:2c:85: 80:16:b0:9c:57:eb:3d:e7:c8:5b:a3:26:d0:9d:fd: f1:8b:e6:e9:7e:53:a8:de:30:ae:34:36:3d:fa:09: b8:04:28:a6:ea:ce:45:c1:09:34:81:72:75:68:02: 0c:b5:5f:69:94:c4:af:da:b8:15:14:6d:de:29:96: 4a:85:10:c2:1a:c0:0f:93:bf:b9:fb:c6:ad:11:1b: 88:71:36:8d:69:87:7b:2f:de:da:be:fb:43:d4:ba: 8f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:73:98:24:E6:2F:6F:0F:96:FE:3B:2B:6B:41:E6:CC:A2:C8:70:A5 X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:94:68:ef:fb:5b:22:3b:2c:ad:b0:44:64:33:fb:1b:0f:20: b9:01:c3:8e:7c:eb:5c:51:50:10:ab:90:a9:f0:26:f1:ca:88: 51:22:6d:e1:22:66:35:02:7e:89:68:f1:4b:d4:46:19:cd:1b: 7f:38:b5:15:04:af:8c:d0:11:bf:d9:6d:27:71:0b:9d:51:63: a8:60:d2:fe:67:09:a7:8f:8c:4a:f6:fc:88:c3:8f:bf:8f:ba: e5:e1:fc:d3:8c:58:df:cf:52:7d:c0:f0:61:a9:79:3c:6e:96: bd:98:58:13:da:da:da:28:52:b4:51:fc:96:60:9d:d3:d5:e3: 75:f0:48:47:b1:28:80:6c:df:f2:2a:d9:66:42:25:01:c2:d1: 56:2e:d7:67:57:0e:30:4e:6f:17:85:56:a9:a3:24:dd:0b:f0: f9:c6:5c:3b:47:2f:2c:e3:e1:c4:6f:e3:a4:c4:36:2a:e0:e3: b0:b7:2b:73:83:ac:15:78:37:30:f6:69:73:29:6e:2f:86:df: db:2e:73:59:be:79:c4:58:e9:35:90:22:f3:fc:fe:df:4d:30: dc:1e:fe:25:09:94:33:ba:34:1d:e8:f4:49:49:98:f9:34:b7: be:bb:d1:42:b8:1f:65:2d:15:b8:11:f6:c4:d7:8e:a7:d5:10: 4a:ac:89:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhzdGAFDxGKCWCdq2j4SdU+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjUwODA0MDUwMTAzWhcNMjUwODA1MDUwMTAzWjAzMTEwLwYDVQQD EyhjNjczOTgyNGU2MmY2ZjBmOTZmZTNiMmI2YjQxZTZjY2EyYzg3MGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVAGpQYtcxX0uBPnqIVEabsBypwg Zwjuggd9vEOYaWQVa/CI7V0e8kM8oNmAVmoPVTxImf/dMfSLIhR21MndhaeB/k3i 01E3DDbVeE/cSBdYGGpwQmgN2kLFo3iW4qFKBt/7ehy8y+1nRKNoA1k//nHBqdDE wDjAfO/m7/MNPoGwk3ZE9UaPi0bHFIrqyYUtyEL3+1lkLoeA2ewJG3Xq2RepLIWA FrCcV+s958hboybQnf3xi+bpflOo3jCuNDY9+gm4BCim6s5FwQk0gXJ1aAIMtV9p lMSv2rgVFG3eKZZKhRDCGsAPk7+5+8atERuIcTaNaYd7L97avvtD1LqPzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZzmCTmL28Plv47K2tB5syiyHClMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ5Ro7/tb IjssrbBEZDP7Gw8guQHDjnzrXFFQEKuQqfAm8cqIUSJt4SJmNQJ+iWjxS9RGGc0b fzi1FQSvjNARv9ltJ3ELnVFjqGDS/mcJp4+MSvb8iMOPv4+65eH804xY389SfcDw Yal5PG6WvZhYE9ra2ihStFH8lmCd09XjdfBIR7EogGzf8irZZkIlAcLRVi7XZ1cO ME5vF4VWqaMk3Qvw+cZcO0cvLOPhxG/jpMQ2KuDjsLcrc4OsFXg3MPZpcyluL4bf 2y5zWb55xFjpNZAi8/z+300w3B7+JQmUM7o0Hej0SUmY+TS3vrvRQrgfZS0VuBH2 xNeOp9UQSqyJaw== -----END CERTIFICATE-----Generated at Mon Aug 4 11:00:36 2025 by rpki-client