$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft File: S0BcqrNLv95rjuZsYAhgxs6W8ys.mft (raw, json) Hash identifier: pU28lCf7j9ia5N7188PXhvkGz2YTuvAgjXYDZ6oPAcg= Subject key identifier: C3:00:EC:46:11:30:57:D8:A9:CF:E1:D0:FB:4B:18:04:33:75:0F:6A Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b Certificate serial: 0198974A3DFEED6A3596DA2B98AD6FA91BC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft Manifest number: 1630 Signing time: Mon 11 Aug 2025 04:01:21 +0000 Manifest this update: Mon 11 Aug 2025 04:01:21 +0000 Manifest next update: Tue 12 Aug 2025 04:01:21 +0000 Files and hashes: 1: 11HD7yYKcpDp91MDnZ2qx4f7DA4.roa (hash: I82O47jamEqwRmGn3/G2hhZ8d3EhBnYIg9JLsYyDdcE=) 2: EVFSBas9Aq_MdNVwUd8bGuaA3Ws.roa (hash: BhtgRPsHAejHOiiDvH3HRPbC4SYTxdKvHTv4FGSpdUs=) 3: EwIzZdJ1IhMaFw8VKQftgylzjgE.roa (hash: TssNiQ/Zpv1pzvYDHFFLNu5wfEVQ4u0fKOIDHY91aqk=) 4: LVgdGGp1BXM3wqsV9OwWixTAngw.roa (hash: yASeozzYpGQSF5fg0wPLHaGxwKLjvcatKKCkqykA4I8=) 5: MJIbLhSmNC8a874fA2nbq57HEtg.roa (hash: WaRYM9CvEVYhUP+ZoiflR5McAGOB5Og+0p9cf3/LEak=) 6: P1A1BXCqCADzQosrk4MwUKPYxTk.roa (hash: LXH4t2ODNhUtfiB03lL7Y51z/AGbNaW0Y11NO+KNqsc=) 7: QHWMs-MZjDSwChSISEL6Gl0q8mw.roa (hash: MTwg/6CPgLRHHoER9F5LK/UDna9Vp7Lok94EKexAIUI=) 8: S0BcqrNLv95rjuZsYAhgxs6W8ys.crl (hash: J8yO3xfQc7FhNBOYbvMcMyJ9U7knDbSOs74ze/ptgzU=) 9: Xdvj43KnSMHPF5yK-nfEWq4KZoY.roa (hash: 0KUoHz1/LcxNxADlsv04gqLb680zAS0Z8MaiKDomgYY=) 10: foffFzsX_C0XZVackxzc9TT3Ql0.roa (hash: v5tw1DCZvp0dZORs+mozhjde3hmTpwW0Pvc0v2NmjrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 12 Aug 2025 02:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:97:4a:3d:fe:ed:6a:35:96:da:2b:98:ad:6f:a9:1b:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b Validity Not Before: Aug 11 04:01:21 2025 GMT Not After : Aug 12 04:01:21 2025 GMT Subject: CN=c300ec46113057d8a9cfe1d0fb4b180433750f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5e:59:c4:66:df:bd:ff:64:93:e7:f0:43:9a: e2:f2:dc:65:fe:1a:19:b5:da:2a:52:36:88:13:dd: 9e:52:79:15:59:c0:e9:d5:ad:81:0b:6e:94:1d:8c: 93:f6:46:c3:54:57:68:00:f3:bf:1f:5c:1a:05:59: e0:99:cf:41:c6:3e:dc:6b:b8:f5:e7:49:7b:e5:ac: 8d:ef:7c:6d:2d:b8:00:ef:c7:a6:8c:0c:99:9f:9f: 7d:de:59:8d:68:ef:ed:67:61:39:f7:25:89:5a:b1: 6a:54:1e:f8:dc:39:a2:4e:62:05:6a:51:d2:ce:a8: 70:66:01:7d:38:c2:3a:71:7b:39:c7:5d:6c:67:6d: 5f:8a:5d:fb:e4:f3:d3:92:c6:c4:d4:3d:d8:8e:2a: 9e:6d:eb:20:57:5d:6c:4b:9c:7b:5a:97:42:3b:24: bf:ca:6d:1f:79:3e:29:62:5a:45:49:21:00:d3:f9: aa:30:cd:df:a5:d3:74:10:90:98:3e:58:94:d8:77: 0a:1e:46:9d:b7:98:47:b8:60:0f:7b:ab:80:41:bb: d9:e7:3a:8e:c1:9c:28:f6:98:72:a3:a3:77:ad:02: 0c:26:8d:d6:30:65:5e:1b:75:dd:f6:55:ef:31:46: 41:65:89:91:f9:5c:64:9d:92:18:56:8d:ca:22:f2: 3c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:00:EC:46:11:30:57:D8:A9:CF:E1:D0:FB:4B:18:04:33:75:0F:6A X509v3 Authority Key Identifier: keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:b4:6b:31:2a:b2:28:7b:38:c7:b7:99:b8:47:e8:d3:ed:0d: bc:31:1b:4c:42:4b:c1:25:8b:a6:8f:33:89:1b:1f:80:ab:c3: e5:2b:3c:62:c7:a5:7c:54:f1:cb:7c:04:b4:69:03:76:ac:62: 6c:f6:6f:9d:6c:f8:c9:8d:b1:27:48:7d:c7:2c:58:a2:52:86: 4d:7a:78:0c:e0:23:7c:01:1f:bd:5d:cd:df:54:7f:5d:0e:45: 6f:12:14:b2:d5:1b:fc:49:a6:d2:d0:5e:d4:a9:18:63:e8:5e: 1f:8b:c0:7f:fe:f7:35:cd:fd:41:83:0f:08:21:09:d0:b2:3c: c9:53:9a:1f:56:a0:09:30:de:1d:22:2b:94:34:e3:29:69:06: ad:1c:05:c9:b2:b0:e6:5a:a9:07:41:a5:86:49:85:01:97:c9: d5:cc:82:15:b9:88:75:16:9c:ae:fb:c8:85:ee:0e:c5:be:4a: 67:e2:09:b5:d0:0f:36:08:c3:2c:ec:70:e7:6a:fa:95:25:2c: bd:ef:88:c6:5c:50:c2:c3:82:14:31:b9:f7:d6:4f:08:02:a9: fb:05:f4:77:88:43:f2:23:dc:61:f1:f7:b0:bb:9c:20:5b:91: 5b:be:aa:fa:96:c9:8a:09:e8:85:84:ab:cb:a6:46:2b:8c:fc: e2:9f:0f:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiXSj3+7Wo1ltormK1vqRvGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNDA1Y2FhYjM0YmJmZGU2YjhlZTY2YzYwMDg2MGM2Y2U5 NmYzMmIwHhcNMjUwODExMDQwMTIxWhcNMjUwODEyMDQwMTIxWjAzMTEwLwYDVQQD EyhjMzAwZWM0NjExMzA1N2Q4YTljZmUxZDBmYjRiMTgwNDMzNzUwZjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzl5ZxGbfvf9kk+fwQ5ri8txl/hoZ tdoqUjaIE92eUnkVWcDp1a2BC26UHYyT9kbDVFdoAPO/H1waBVngmc9Bxj7ca7j1 50l75ayN73xtLbgA78emjAyZn5993lmNaO/tZ2E59yWJWrFqVB743DmiTmIFalHS zqhwZgF9OMI6cXs5x11sZ21fil375PPTksbE1D3YjiqebesgV11sS5x7WpdCOyS/ ym0feT4pYlpFSSEA0/mqMM3fpdN0EJCYPliU2HcKHkadt5hHuGAPe6uAQbvZ5zqO wZwo9phyo6N3rQIMJo3WMGVeG3Xd9lXvMUZBZYmR+VxknZIYVo3KIvI8bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMA7EYRMFfYqc/h0PtLGAQzdQ9qMB8GA1UdIwQY MBaAFEtAXKqzS7/ea47mbGAIYMbOlvMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85MTRkMzktMzAyMC00Yjc5LWFkMjYt ZDg3YWZmYjhiYzYxLzEvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS85MTRkMzktMzAyMC00Yjc5LWFkMjYtZDg3YWZmYjhiYzYx LzEvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASLRrMSqy KHs4x7eZuEfo0+0NvDEbTEJLwSWLpo8ziRsfgKvD5Ss8YselfFTxy3wEtGkDdqxi bPZvnWz4yY2xJ0h9xyxYolKGTXp4DOAjfAEfvV3N31R/XQ5FbxIUstUb/Emm0tBe 1KkYY+heH4vAf/73Nc39QYMPCCEJ0LI8yVOaH1agCTDeHSIrlDTjKWkGrRwFybKw 5lqpB0GlhkmFAZfJ1cyCFbmIdRacrvvIhe4Oxb5KZ+IJtdAPNgjDLOxw52r6lSUs ve+IxlxQwsOCFDG599ZPCAKp+wX0d4hD8iPcYfH3sLucIFuRW76q+pbJignohYSr y6ZGK4z84p8PVQ== -----END CERTIFICATE-----Generated at Mon Aug 11 07:25:49 2025 by rpki-client