$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft File: C1Vqy187lhtcwkoplfNO6R953BY.mft (raw, json) Hash identifier: LZdIZ4zSxL7B3OFhYxffNS10Vi4WCYoMFJeprj/6uqM= Subject key identifier: B9:17:BA:BD:E2:B2:6C:D2:D1:04:AE:97:F4:44:65:86:8D:F2:D5:3E Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Certificate serial: 01988EEBF9E80A75534C5F25B5B233BE65C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft Manifest number: 1644 Signing time: Sat 09 Aug 2025 13:01:26 +0000 Manifest this update: Sat 09 Aug 2025 13:01:26 +0000 Manifest next update: Sun 10 Aug 2025 13:01:26 +0000 Files and hashes: 1: 7AEnLXSB1YaAfgMGKA-kT_KobA0.roa (hash: 5AKbmZJGLK7UnAttUygeGitl8Ob/t23TtR2u6flJg/c=) 2: C1Vqy187lhtcwkoplfNO6R953BY.crl (hash: FTMRraTtmLPdbt6lIfV4q9HfK0EOE6fzwEJTmsfxoLw=) 3: QmJcakWH1CARNak1a46tlM2ytyE.roa (hash: v8cGIzbtBdgrBgCJGkJKF+awirm33gkAmHePtYlNHWc=) 4: Ufuhf0_wn9lleED4LQKhcdXKZLY.roa (hash: f4Ng8ktmuEshcdJiOHZjPJAwq7/nitwlptaYvO0/DHU=) 5: XFCPjaaIP04nEp4Rlitk1zUJ8nA.roa (hash: 9Hrw22EfwJiPVEvx9iOeq1/U32N9ujjXKgQDN7kPNnY=) 6: bzDr7kn2LfhqjYsoZQLZ-uHwvQI.roa (hash: ETCcL6Lmgpdi6iyG4gf+W9Umfg+Mzqif1q2dVBD62g4=) 7: e38Kg8iCKqOVcGx8ZyJTu1IrTwc.roa (hash: yWG15kNG/dsh9zB22D/eO5GMJKGaRyWMaUm0mhvs7uI=) 8: irmafOolxajIUAAu4T-WCDDYGuE.roa (hash: B2dN9t4bHqneaqFXcxWnKXREXDW4ZcJ7+Z7DVVfobpU=) 9: n7XNxY-sa2O-8oAFuyK34I07FxU.roa (hash: 7HgkBdxidw6ZJ5Ks5cBFOnu0xmnIR/zyHKV2JfMTPLM=) 10: nikI6XTmNMIUEKKUIOhaKpaRfTY.roa (hash: 3OTWr1t7MNgVLjxLDAQClENVYG0IMxrFr2dhuyh8iLU=) 11: pkcx_-V9HNVC8HzviAJSCvzoxJg.roa (hash: V4tEVQoUWw/5eT8C/Z8qztjVCTQ8kgfSRy2bETB0V2w=) 12: wq6Oybyru5PjGYeKDTrdRRIxOok.roa (hash: +NxS5vTeW/Lv7n0fJHcbikUT3d8Gb7EPQOKgAIeQnGs=) 13: xYF8GskQRTruWnq0Q7-vo_GqfiQ.roa (hash: cnwhIOGst+6jb701ygWNYFM0wdy5cssALvw1jcPBdd8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 10 Aug 2025 13:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:8e:eb:f9:e8:0a:75:53:4c:5f:25:b5:b2:33:be:65:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Validity Not Before: Aug 9 13:01:26 2025 GMT Not After : Aug 10 13:01:26 2025 GMT Subject: CN=b917babde2b26cd2d104ae97f44465868df2d53e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:81:ee:86:9f:3a:0c:ba:b9:91:3b:a8:14:5e: 23:aa:66:f2:b7:27:cd:6d:6b:3b:4f:46:b2:9a:e2: e3:7e:ef:f3:a6:e9:ae:68:3c:19:14:81:6d:88:a5: 44:77:77:5c:7a:0b:ed:b9:d0:43:46:2e:55:68:ff: 6d:4b:4f:01:95:81:1a:74:eb:22:5d:cf:35:94:63: e6:1a:c1:2d:5a:3b:05:8d:a3:a0:52:02:45:1d:b6: e1:12:af:17:80:0e:ab:ff:e7:fd:0b:b4:4c:bd:66: 36:ce:33:92:5f:fe:a1:a2:26:7c:9f:df:a5:00:53: 0a:af:1d:27:e8:b1:eb:51:f5:1e:f1:9b:e5:d1:7b: 0c:a1:68:ab:32:20:1f:8c:00:47:ff:6f:2a:32:22: 0a:b5:0e:5d:0e:a9:4e:0f:7d:98:3b:17:fb:57:45: 32:8d:49:fa:73:26:b5:4d:0e:f6:80:3c:70:24:81: 26:7d:e6:3a:9a:17:7a:e2:8b:fb:90:74:da:a9:72: 5b:9c:0e:41:28:32:3b:67:82:e1:ea:5b:fd:da:48: a2:75:33:a2:80:0a:b3:49:e8:fc:3e:aa:f6:d2:9d: 45:f9:00:db:1d:63:e5:bc:b0:d5:0d:fc:b4:6f:c9: 28:e1:27:e4:8f:d6:73:e5:c2:d7:1f:74:e9:a7:db: 24:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:17:BA:BD:E2:B2:6C:D2:D1:04:AE:97:F4:44:65:86:8D:F2:D5:3E X509v3 Authority Key Identifier: keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:bc:a9:8e:80:7d:6f:a3:47:ca:87:2c:b6:93:ec:f1:9c:a4: 28:ed:49:46:34:04:f4:7a:43:1f:b0:8a:77:61:22:d2:82:5d: e8:6a:6e:b4:fb:2c:a2:4a:9f:17:74:68:95:f5:80:fd:b3:34: f4:51:77:95:5a:bc:a1:61:6d:14:5d:e4:42:ce:c5:3e:70:75: 2a:1b:7a:ef:99:1e:68:c3:b9:1d:1e:55:07:ef:f7:3e:f5:b1: 59:50:3e:70:6e:3b:18:8f:7c:57:5b:7f:6b:ac:37:af:d3:ab: 5f:6f:90:69:e3:dc:5b:6b:3f:3f:98:1b:09:d6:91:92:8a:8f: 61:6a:1a:79:1c:4e:a7:a6:2d:bb:e4:ac:99:a5:d4:2a:12:f4: 0b:ab:b4:03:3a:fe:cb:32:aa:cc:5f:09:7e:05:61:2a:94:77: 90:f6:65:70:2d:4c:50:24:69:12:ee:62:c8:2e:43:85:06:86: d6:11:66:10:d6:36:7c:4a:39:a9:a4:7d:25:fc:99:17:12:23: c6:15:e0:11:22:5c:d3:b9:a5:ab:6f:90:6c:96:68:ad:e3:cc: f0:45:c2:dd:10:8e:be:3d:f9:4c:19:cf:2a:7f:74:bf:cb:ee: e8:98:38:ae:45:15:4d:bd:05:b0:63:73:e0:63:e6:ae:73:dc: 6f:8a:64:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiO6/noCnVTTF8ltbIzvmXIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNTU2YWNiNWYzYjk2MWI1Y2MyNGEyOTk1ZjM0ZWU5MWY3 OWRjMTYwHhcNMjUwODA5MTMwMTI2WhcNMjUwODEwMTMwMTI2WjAzMTEwLwYDVQQD EyhiOTE3YmFiZGUyYjI2Y2QyZDEwNGFlOTdmNDQ0NjU4NjhkZjJkNTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYHuhp86DLq5kTuoFF4jqmbytyfN bWs7T0aymuLjfu/zpumuaDwZFIFtiKVEd3dcegvtudBDRi5VaP9tS08BlYEadOsi Xc81lGPmGsEtWjsFjaOgUgJFHbbhEq8XgA6r/+f9C7RMvWY2zjOSX/6hoiZ8n9+l AFMKrx0n6LHrUfUe8Zvl0XsMoWirMiAfjABH/28qMiIKtQ5dDqlOD32YOxf7V0Uy jUn6cya1TQ72gDxwJIEmfeY6mhd64ov7kHTaqXJbnA5BKDI7Z4Lh6lv92kiidTOi gAqzSej8Pqr20p1F+QDbHWPlvLDVDfy0b8ko4Sfkj9Zz5cLXH3Tpp9skswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkXur3ismzS0QSul/REZYaN8tU+MB8GA1UdIwQY MBaAFAtVastfO5YbXMJKKZXzTukfedwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEt ZDJiYmYzN2RhYmI0LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEtZDJiYmYzN2RhYmI0 LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrypjoB9 b6NHyocstpPs8ZykKO1JRjQE9HpDH7CKd2Ei0oJd6GputPssokqfF3RolfWA/bM0 9FF3lVq8oWFtFF3kQs7FPnB1Kht675keaMO5HR5VB+/3PvWxWVA+cG47GI98V1t/ a6w3r9OrX2+QaePcW2s/P5gbCdaRkoqPYWoaeRxOp6Ytu+SsmaXUKhL0C6u0Azr+ yzKqzF8JfgVhKpR3kPZlcC1MUCRpEu5iyC5DhQaG1hFmENY2fEo5qaR9JfyZFxIj xhXgESJc07mlq2+QbJZorePM8EXC3RCOvj35TBnPKn90v8vu6Jg4rkUVTb0FsGNz 4GPmrnPcb4pkzw== -----END CERTIFICATE-----Generated at Sat Aug 9 23:15:34 2025 by rpki-client