$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft File: dGNlNVtmVWSiEMNYxooBF7f765o.mft (raw, json) Hash identifier: dL5eL4c0l56W6toEZg0SFX7K6I4vFjlGyB4SLtY3JJc= Subject key identifier: E7:0F:6F:27:CA:0B:77:60:D0:BB:1E:35:0B:29:A7:5D:ED:0F:BD:82 Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a Certificate serial: 01987D8BED36B8CBBBA0B50690110F885959 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft Manifest number: 1687 Signing time: Wed 06 Aug 2025 04:02:58 +0000 Manifest this update: Wed 06 Aug 2025 04:02:58 +0000 Manifest next update: Thu 07 Aug 2025 04:02:58 +0000 Files and hashes: 1: 0Z8yTYlKjkqvKh6kY-kM6OXYfz8.roa (hash: fwm0Gtt1RFKV50/Ms+CgVe/rwlPJ9Q3VLzTFIW1v2aw=) 2: 1i1h10HKuKMLFRXN4cBGZ2mRyJM.roa (hash: 7JEI6UNI/BK6+fsUZu0VQIRD6uiIejb022WVzNTlPqI=) 3: 4AhKQoLmAk1YQIBQspZfyfaiu0s.roa (hash: 1kEaOXNNkPEAuTvrZqrQmCGg/Uu08f1ofkHwiva1rBk=) 4: 4VJyAeGVgAs2ysdZRw_rlOWdRTY.roa (hash: Xd7f6Is8VkQ7huxtuAE7hUXnUe/NIXlF2TbPODpbZHk=) 5: 8xmePB-pGcDcrQ-prX4UP_SBy78.roa (hash: OO9rzem914ccJuV3c6Pdstzz47bnogLMsoJtrFTJhQo=) 6: 9nwJkf06ywYV97ycnHX8xephiLw.roa (hash: E/N+tJSxegWf0b+66cYXz6Gw0s8y/7JfEZqjs9iWYvA=) 7: G1nDGEYcV0zuKzKuOXzDx75r3GI.roa (hash: 41u/KL+MWJdDf84HJGznj8QmpQB0mJMrGBzkwlxjtIc=) 8: HtGtnD1WG-uR4lNZ5h-A8-pjUrU.roa (hash: JiGHlI4PQlUWbSzc2TBFb2wXm1bs25OSgaV13SVkmqE=) 9: MUTPs3M7kaTmAS7qsouxN108EXQ.roa (hash: LWIWjbRjF3lfsI2Fa/eAa9w0tqQhs8nzAYoC6pOtUH8=) 10: PVKwdeX3NyiQmgk2A2820t7cOqs.roa (hash: 26tO2fkoICp4JASDnIMTpkdHS90b8zIixKpW6hSIQzc=) 11: TQNP6hoAf66GZWfHy5k78DAiiCU.roa (hash: uABddS+djXpmQc7iz2KFGbyJ5oeYnTC/ey9Ec918mow=) 12: UMHCyN1PhpnvoYUbs1CT_48YLGk.roa (hash: i765qk64qL4Uog5FTQxpy5y2jivRwNCYq0ub5NcQaLk=) 13: V51fQsmdOucWQLFJANFvs_Ma2i0.roa (hash: mhzDbXcVW4r5ZjsZqcqDKjjyLnY5MIVjnfy6m1yWpyc=) 14: V5HLYQX7OEpLFK_MH5_sUYR0JBQ.roa (hash: 6cm5gNEppEG5XD2KabFv9dmbCHQEnB7rCQFwcW30ZWM=) 15: WWDr2Um8NXXwWukbK6cj1BF3t7Q.roa (hash: KB4bFVPkGqmvCaRGbBdpA1si7s9CexKnU66M/mHt/0s=) 16: XZET7dFa5OoJqf73WGd1UHo9Trs.roa (hash: FbxqvpbDfsQRYaW0n//PgGX2T+UQY1wiBpKlSWUYJQg=) 17: dGNlNVtmVWSiEMNYxooBF7f765o.crl (hash: 87jP2etymoXglHcVvmwAhNdMYUrEf2dSpeax3AZ6Yc0=) 18: dc2g-kIH50S7LA2o26AVsv4LItA.roa (hash: anV8AfiZnJM+uW7z2xYGvooxLoCl6L/cGFCY34WgBTU=) 19: g3gXDyn1r3CKRtOkIamh9XiFNXQ.roa (hash: bsh/frVfpWjiiUA/IVdx5lj5UBB7HEuHeERH5RVXbJU=) 20: hbkDGu-27NQwuA34KKvsthuBpoc.roa (hash: gs4QclFDIW6OH3AQHoXwFFecYQ+OpwQ25vhb21IUnck=) 21: iHslhtFiuKaugZuIjgDSTM4F6Sk.roa (hash: 43DehRvyD4BSrfqUpPUdy+zsjmfPk1hQcSdYylB1zpo=) 22: jJYsZg4wnTyX9mV0JNA_riAb8aI.roa (hash: 2YSmon6Fik8vSjQAeDBGETPmH22iZ7Gu1aYziQraG2Q=) 23: jmqPtt5Ns_W-iBFLphm9TOPqcBk.roa (hash: Q0XLFkj7/QEzPnBRybOs7B/q1S4uk4+SdVBsy+OCL8U=) 24: kMJn1HheqQ9Rsacjsd3PZ6CXhTk.roa (hash: QHx3y/n5TxjTD6iBbFsTYJr5O+YrfK0OyTuVkyzqTiI=) 25: lkYJ-_nXwt_j8sYXcXEPI8XjVSs.roa (hash: H5A3LLoCNjemShwdfzZoOLg2oRcQfw/qyX1Up4Fug7w=) 26: m095Z-7KR0K5gXucbWhKiz12Uqg.roa (hash: pKKUCvxcyqiDYUVY3jhLgvu4uMJ7RTYnDW2HPLpWkkY=) 27: nMVuUhhQLd_p2MmIFg0uk6oN0DA.roa (hash: VPC3QfM3Xk9o/TFr02RnouDa7yDlwB8VvuZ6tJbURMA=) 28: nyslHXPfyz0FM3udFOE-7tndyMk.roa (hash: gPoCAQJEwCTv4wbyGKoKpT/fwNV2im1/jc8HR0EwRAo=) 29: oEbBV7xx5_jwLtoklKva4-Dg2v8.roa (hash: i+aaCmiUXCVg0OPcM0SwO92pJsKLDZGoxx/fXdMrMgQ=) 30: oQY8Ggs-WHGozgLdlzn62PGvTmo.roa (hash: Rm3b27WZnppZmsClSvXbSesr4c+ogRwCEVrSLNbiwvA=) 31: ohR12qV3YhwWzvyvvRFfjsTfW3I.roa (hash: /Itg9xPIRRo/oOwoFitB3haSxIqbmv1Hy1qpYEx48YA=) 32: r-97pPvj-RimUl1469wxiEjOXHw.roa (hash: BJihjsrYYxzSHh3xQ0PZJNW0AKvTbj8ZG/b/oUaGZaU=) 33: sTAcEeIlslVpuXMYkyeJBskGwEo.roa (hash: sDqLs0eEA0fKuxXHljiO7Zt9np/B1YWaKWKNaP6grbA=) 34: si-h3EMZPum7ZeFVKrM-JgEvS5s.roa (hash: e6RNF3nCZ80GPAqffnrYJBWzKtbs1gbwLTkQ6jY31gw=) 35: t2bPxtc37O7_UaSx43VqFjBQeQ8.roa (hash: TQAVmYhnwd2Kv49WbSb4VDqVmwGOcSo0dPabg2IvysA=) 36: yTFqO5xiaIDSCJNJ_ZUqbKSypdQ.roa (hash: zRFFAOZDcEueQQ2liuDNq8EtejJKoUyry9Flbp6zROU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 04:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7d:8b:ed:36:b8:cb:bb:a0:b5:06:90:11:0f:88:59:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a Validity Not Before: Aug 6 04:02:58 2025 GMT Not After : Aug 7 04:02:58 2025 GMT Subject: CN=e70f6f27ca0b7760d0bb1e350b29a75ded0fbd82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4c:6c:a9:44:40:f0:59:dd:ed:9e:e7:95:61: 5c:f2:11:cf:0b:6f:83:46:5b:74:21:cf:df:9a:9f: 8c:e2:3b:f9:75:ec:c6:40:03:f7:ab:39:f9:cf:33: a2:22:75:c5:a5:51:ab:2f:71:07:87:af:e4:c6:83: 57:e8:33:5c:15:37:ce:c4:f9:6b:d7:2c:36:e8:90: 63:42:75:a6:55:67:a0:f2:af:59:b5:c1:dc:04:99: a3:47:e2:f5:7c:81:56:43:95:15:d2:5b:12:3d:e6: 58:2f:90:e5:8c:01:a5:3c:95:67:40:32:b2:b3:3e: 47:f7:4f:97:bd:47:3c:e8:21:f9:d0:01:e5:48:ad: b9:6d:08:82:0f:b0:87:73:e4:30:cf:96:bd:3e:ec: d8:ab:0f:c2:cc:fd:1f:af:85:6e:ab:8a:99:b4:35: de:7b:86:ac:40:b0:e4:4e:39:ba:98:4d:1f:86:71: 28:17:42:bc:fe:57:0e:0b:7c:fe:d6:73:5f:9d:c0: 96:48:2d:eb:79:e9:16:b7:8d:d6:de:8e:2a:96:3d: 4e:3d:7f:7a:7a:c5:4b:e0:45:6e:84:87:07:95:f8: 9d:fe:7e:12:d0:1b:16:4a:0e:10:45:6b:23:f3:fd: ad:47:eb:3d:a0:b6:de:ab:a5:ac:b6:ba:93:2a:af: 8b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:0F:6F:27:CA:0B:77:60:D0:BB:1E:35:0B:29:A7:5D:ED:0F:BD:82 X509v3 Authority Key Identifier: keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:ff:3a:e0:3a:80:8e:09:11:ff:40:e3:4c:96:45:6a:ee:b2: da:77:d8:20:7d:8d:c3:0d:dc:64:12:e3:b5:66:f0:4e:c1:e1: 88:c5:02:da:3d:9d:3c:b6:43:83:5e:cd:29:01:96:e4:d5:37: 05:f0:c7:32:fc:a7:8d:5c:92:f9:ca:30:96:ef:35:d9:5e:43: ea:c4:20:c8:3d:61:c0:6c:77:42:bd:33:6b:e4:55:26:e7:bd: 1a:dd:76:60:55:a5:dd:9a:31:88:4f:d3:6a:04:cf:86:eb:b5: e9:88:7f:7a:54:65:95:2a:8d:09:99:3e:37:79:eb:be:33:ee: 22:9c:ea:a7:35:98:0e:3b:3e:0b:98:4c:1d:ca:44:30:01:4e: ba:75:f1:cf:f4:85:af:ad:63:35:13:c2:44:7e:a6:04:8e:37: 4a:a3:a0:6c:24:bf:e2:00:9a:64:f8:92:e1:02:e3:3b:e5:1d: b7:e8:30:4a:c7:92:c7:f8:f2:a3:58:80:7e:d3:6c:0f:08:27: 5f:da:67:3e:64:1f:e4:89:fd:75:dc:de:0f:67:c5:c3:8b:a8: 32:5f:04:4b:99:68:1a:38:ed:fa:79:4b:93:d7:69:ff:4c:14: 25:58:93:ce:b5:16:fd:89:3f:cd:f2:3d:d2:40:40:0e:14:f1: 73:4c:8b:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh9i+02uMu7oLUGkBEPiFlZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm YmViOWEwHhcNMjUwODA2MDQwMjU4WhcNMjUwODA3MDQwMjU4WjAzMTEwLwYDVQQD EyhlNzBmNmYyN2NhMGI3NzYwZDBiYjFlMzUwYjI5YTc1ZGVkMGZiZDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0xsqURA8Fnd7Z7nlWFc8hHPC2+D Rlt0Ic/fmp+M4jv5dezGQAP3qzn5zzOiInXFpVGrL3EHh6/kxoNX6DNcFTfOxPlr 1yw26JBjQnWmVWeg8q9ZtcHcBJmjR+L1fIFWQ5UV0lsSPeZYL5DljAGlPJVnQDKy sz5H90+XvUc86CH50AHlSK25bQiCD7CHc+Qwz5a9PuzYqw/CzP0fr4Vuq4qZtDXe e4asQLDkTjm6mE0fhnEoF0K8/lcOC3z+1nNfncCWSC3reekWt43W3o4qlj1OPX96 esVL4EVuhIcHlfid/n4S0BsWSg4QRWsj8/2tR+s9oLbeq6WstrqTKq+LlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOcPbyfKC3dg0LseNQspp13tD72CMB8GA1UdIwQY MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt NmE0ZWNhZjhiM2IxLzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/864DqA jgkR/0DjTJZFau6y2nfYIH2Nww3cZBLjtWbwTsHhiMUC2j2dPLZDg17NKQGW5NU3 BfDHMvynjVyS+cowlu812V5D6sQgyD1hwGx3Qr0za+RVJue9Gt12YFWl3ZoxiE/T agTPhuu16Yh/elRllSqNCZk+N3nrvjPuIpzqpzWYDjs+C5hMHcpEMAFOunXxz/SF r61jNRPCRH6mBI43SqOgbCS/4gCaZPiS4QLjO+Udt+gwSseSx/jyo1iAftNsDwgn X9pnPmQf5In9ddzeD2fFw4uoMl8ES5loGjjt+nlLk9dp/0wUJViTzrUW/Yk/zfI9 0kBADhTxc0yLmA== -----END CERTIFICATE-----Generated at Wed Aug 6 10:09:02 2025 by rpki-client