$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft File: h3e1s29m4TxDiMmTTaUHhWUV0HM.mft (raw, json) Hash identifier: 7sJfKOnMBqq4T02oE+TFIyzILVtUWoSZ7Cl1FXjCug4= Subject key identifier: 06:48:48:E0:53:7F:AA:51:96:B7:C7:9B:83:76:88:A4:EA:CB:D0:E9 Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073 Certificate serial: 01988167D06D2D4950A106CD0938F7F6DED9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft Manifest number: 162B Signing time: Wed 06 Aug 2025 22:02:01 +0000 Manifest this update: Wed 06 Aug 2025 22:02:01 +0000 Manifest next update: Thu 07 Aug 2025 22:02:01 +0000 Files and hashes: 1: A6JGXr1SyvHwPS6KzQQ8jkJldSU.roa (hash: VUYWyhNS6ep9E7uE71FApUlIqX9LiZIrh4n1ahAsDso=) 2: TWqw0MHPHKoktRTg5xIAtx78yEM.roa (hash: PUFyi4vEY3nAKmSSQP1jmjE/95RjFLcOq0y69mlpJOM=) 3: V8TNai625jKsZmcQ_WZGrCSKrE4.roa (hash: vysxGoIRN63RAVmh7o1GuXI9idOSf2H3bNvDZcwjEdY=) 4: e6_LhXTjf-f7BeHN6H1yNQzFGts.roa (hash: li+C+e/TyH8gT/zIILB28hzFIhULplGnnZiYiHV9ZRc=) 5: gSW8bbfsJ2jQqNlN9dZhEGJFXP8.roa (hash: vU4Z2mH5UQmCsli4v0J2JenJSa7jKRcKq2cUWRszffQ=) 6: h3e1s29m4TxDiMmTTaUHhWUV0HM.crl (hash: MI8JiwiGWL+SDjrs1G4vJP8KsnrqolG9teo4W3DKabk=) 7: i0jLZUHWlEbTjItngq0hMz6l6J0.roa (hash: +fs8xaq1rUOg67Y/1DC1FdTxOQepuB3UaDQqJ+epLzo=) 8: mYsvImsoUU3Ub9pNivjve1CZzdk.roa (hash: 6hty2hcbqDF/bBkU2gmepu7xCrLxFUdqyzgzAZcFQt8=) 9: mcMvNLDOLrmNQ78kKv9_JRA7DZE.roa (hash: VPPZszck1h4O1z0bSD4PbxyUsa9F/mGv1ZkFIvAMZag=) 10: rIHZb_5Mc64A87xwROb5WoKPTaQ.roa (hash: h28IpYVJGdPeChoNExuao8goV9hXIxbKmOle/GHbji8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 22:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:81:67:d0:6d:2d:49:50:a1:06:cd:09:38:f7:f6:de:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073 Validity Not Before: Aug 6 22:02:01 2025 GMT Not After : Aug 7 22:02:01 2025 GMT Subject: CN=064848e0537faa5196b7c79b837688a4eacbd0e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:29:db:8a:6c:7e:6a:0c:d2:74:7d:80:fe:f5: 72:b6:ff:00:30:b5:a0:3f:21:10:d6:f2:bf:e6:82: 29:7e:95:9e:d7:c7:df:e6:35:95:1f:c1:99:34:3c: b9:d5:4e:e6:ea:ee:26:1d:51:33:bc:5b:4e:87:ba: 9a:6f:85:37:24:5d:d6:f4:c4:c0:79:21:d2:33:2d: 95:bb:9d:c4:ff:5c:c3:1d:d6:1d:71:9d:60:7b:19: 70:c1:11:2a:0e:7a:f9:80:72:db:30:90:ae:98:bc: 7c:ee:15:ce:27:83:e9:29:72:4f:a2:88:a6:d1:a9: 0c:dd:c9:27:d5:79:0f:3b:ed:83:d4:40:a4:4e:ea: 4d:6d:5e:d7:5a:50:05:1a:ca:3d:a2:27:54:cc:09: cd:fc:9a:e6:18:cb:4f:06:84:42:24:15:2f:95:91: 5a:c5:0f:a4:4c:ed:d6:3b:38:45:c7:97:84:7c:fc: 5f:93:96:4b:8a:dd:c5:62:e9:cc:8f:5b:a9:b7:7f: 1c:8b:5a:e1:04:3d:04:e5:72:8e:79:ff:ad:0a:b8: 23:b9:89:7f:5f:88:2f:45:fc:2d:1e:49:d2:50:8b: 9e:2c:71:69:10:a1:2e:4b:cc:ca:25:53:46:7e:53: 44:4f:8a:a4:a1:62:8b:10:6a:68:49:51:6f:03:00: a5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:48:48:E0:53:7F:AA:51:96:B7:C7:9B:83:76:88:A4:EA:CB:D0:E9 X509v3 Authority Key Identifier: keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:af:e9:7f:73:b5:fc:30:6f:6b:cb:37:b7:a4:e7:5b:ff:3d: 05:fa:bd:62:91:c7:61:76:37:c8:f3:c4:8e:93:08:49:fd:77: f4:6b:f2:49:ff:77:18:6d:8a:5c:ab:e0:44:67:3a:a3:34:d6: f0:1d:96:fe:49:6a:7a:76:78:19:cf:0e:4e:62:86:b9:96:a6: 6a:d7:f5:de:b0:65:4b:83:d0:40:62:36:fe:e8:c1:b8:c1:bf: 7f:98:29:63:70:4a:86:80:21:25:28:2a:5c:60:0f:8c:41:b9: ed:bc:fa:b1:b6:74:40:b9:15:dc:98:7c:07:79:80:eb:fc:70: 4c:4c:da:b5:9e:7e:66:93:ae:3a:e0:83:ba:60:37:56:24:a6: fc:00:d4:9e:66:25:4b:cd:c2:33:a0:de:4b:58:06:1f:e9:79: 4e:b3:f0:13:d6:d2:0a:2b:99:4b:06:4e:4d:4c:d2:eb:39:18: ca:18:86:d6:75:29:28:67:5c:35:0d:7a:5d:6e:41:9d:9e:7b: 1d:37:04:70:51:ee:09:b6:ad:85:15:f8:31:30:67:04:60:23: 31:28:47:83:aa:22:1a:9f:2f:3d:a0:be:d7:7d:12:4e:8c:bc: fc:31:27:96:d0:04:1b:8a:fb:0a:0b:49:0a:d5:7e:88:cb:27: b6:f5:fd:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiBZ9BtLUlQoQbNCTj39t7ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx NWQwNzMwHhcNMjUwODA2MjIwMjAxWhcNMjUwODA3MjIwMjAxWjAzMTEwLwYDVQQD EygwNjQ4NDhlMDUzN2ZhYTUxOTZiN2M3OWI4Mzc2ODhhNGVhY2JkMGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Snbimx+agzSdH2A/vVytv8AMLWg PyEQ1vK/5oIpfpWe18ff5jWVH8GZNDy51U7m6u4mHVEzvFtOh7qab4U3JF3W9MTA eSHSMy2Vu53E/1zDHdYdcZ1gexlwwREqDnr5gHLbMJCumLx87hXOJ4PpKXJPooim 0akM3ckn1XkPO+2D1ECkTupNbV7XWlAFGso9oidUzAnN/JrmGMtPBoRCJBUvlZFa xQ+kTO3WOzhFx5eEfPxfk5ZLit3FYunMj1upt38ci1rhBD0E5XKOef+tCrgjuYl/ X4gvRfwtHknSUIueLHFpEKEuS8zKJVNGflNET4qkoWKLEGpoSVFvAwCllwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZISOBTf6pRlrfHm4N2iKTqy9DpMB8GA1UdIwQY MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt ZWQxZjMwY2MxYzU3LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3 LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAq/pf3O1 /DBva8s3t6TnW/89Bfq9YpHHYXY3yPPEjpMISf139GvySf93GG2KXKvgRGc6ozTW 8B2W/klqenZ4Gc8OTmKGuZamatf13rBlS4PQQGI2/ujBuMG/f5gpY3BKhoAhJSgq XGAPjEG57bz6sbZ0QLkV3Jh8B3mA6/xwTEzatZ5+ZpOuOuCDumA3ViSm/ADUnmYl S83CM6DeS1gGH+l5TrPwE9bSCiuZSwZOTUzS6zkYyhiG1nUpKGdcNQ16XW5BnZ57 HTcEcFHuCbathRX4MTBnBGAjMShHg6oiGp8vPaC+130SToy8/DEnltAEG4r7CgtJ CtV+iMsntvX9DQ== -----END CERTIFICATE-----Generated at Thu Aug 7 07:22:02 2025 by rpki-client