$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft File: KX75vv0afiTAzJcpmH_AZda3Ey8.mft (raw, json) Hash identifier: pw6l44p+bQnqbuPDDtV356+2Nxbv0/i7Q+fZozFvpn4= Subject key identifier: C6:D5:C8:B4:3C:1C:24:7D:3F:4C:F8:45:1D:41:FA:3E:94:53:5E:BF Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Certificate serial: 019872987C28D364708E8B17C750BEE7F306 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft Manifest number: 05C1 Signing time: Mon 04 Aug 2025 01:00:52 +0000 Manifest this update: Mon 04 Aug 2025 01:00:52 +0000 Manifest next update: Tue 05 Aug 2025 01:00:52 +0000 Files and hashes: 1: 1-G8rweCnb_uS4SmYOIMfQmoFCqk.roa (hash: rn4NC2hKBojnoZsIWiPOwTWoFmiWY487RZQYYJO9cdA=) 2: 1-d_4NnGRWiLNxMtEHTI7liKr9UI.roa (hash: CvRaWUsgFRo0d4EaYRA4VrTo+xf/BVknD8qlBjzpT68=) 3: DC8CWnfWr0kQCJUXXP37JYlG3bs.roa (hash: hIJ82Bht26+DJ40TdTwMmY9/6cclogWpDkPQZ7x1T3M=) 4: EE_wtY_jOWFrr7fkMKsqtDjLk_M.roa (hash: bPRNvFCrauDbjeBVD0prKiUlLOERe0dc5QDfoGRuOTo=) 5: KX75vv0afiTAzJcpmH_AZda3Ey8.crl (hash: s1Gf0KiOpkPepBwzAgkEUoaE/ncq1eWyCaAo1lzAhJQ=) 6: Ow6xOfingvBCtHoNkaHGobxC5yY.roa (hash: NhFSRa+v/S1zW+iyQy+gxANBr6Bnqty2hhUOwum97Kc=) 7: Pno1SFxbk0xVeOW-JPd8JX-O0mk.roa (hash: fmuEF5lkwyellcCtxWvoihI9gke5w70i2mKnnNxM4gQ=) 8: QChegxRLNPsgM4aZ3Xr6VhdLIWc.roa (hash: bRcFRsu1/yeWRw6CVou2c0H6TdcYO6U68qWIBkemHjQ=) 9: V0aRJCOG2a9twiI1SK4HfmRChII.roa (hash: xPnpahcVRHcbxfnhq7t0F7epLdK24cqdjPN51uTlfmE=) 10: cBKQe1No6Wf-B3FmLfpXGNcc_I8.roa (hash: Xi+GnpcIV9drKvTmQHNYIPB6evWNG3aHkh9CmwgJtg0=) 11: hKRvEPMVo2ukUILwmPta9_N3Dm4.roa (hash: qTgr935WkDSGh45Ek2R2g/eV9pnfadByRLqS2Wh5HdI=) 12: nendNgfVYn3Er_Jx5FR9_K0MhAI.roa (hash: Zo4nTYqJK3HMiwWvWWXaOyWIMzLwcZzzdn6p7ZMhRf0=) 13: w-kia0Dcl-D0S1cF7F9c-RlG748.roa (hash: TI6//HLATO/7mdIMcI1NIKH9FQsgJWUg8coUzNZcuE0=) 14: ws65NnH7cc5LX3ZtkutF5lwgOTo.roa (hash: 3tggzgIge6V0BsIfvy+BLekh4WUZ+47Y39glMLBsTTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 04 Aug 2025 18:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:72:98:7c:28:d3:64:70:8e:8b:17:c7:50:be:e7:f3:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Validity Not Before: Aug 4 01:00:52 2025 GMT Not After : Aug 5 01:00:52 2025 GMT Subject: CN=c6d5c8b43c1c247d3f4cf8451d41fa3e94535ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9e:91:69:92:9e:84:d3:36:91:ef:af:96:c0: f5:aa:e3:67:72:78:f9:15:80:42:c2:af:8c:01:63: ad:28:05:e2:3b:c1:50:a7:8e:a2:e8:6b:1b:24:23: 5a:60:a2:48:a3:dc:1f:46:ad:3a:eb:48:1c:e3:37: b6:dc:ed:0f:b5:f3:fb:35:ee:f7:74:bf:fa:0f:3a: d0:a4:53:14:f4:90:42:c7:5b:52:a0:f5:fe:6f:5c: ca:72:c8:85:ba:12:ac:64:bb:1f:81:d4:4c:00:a0: 9a:d9:a7:b2:f9:70:ef:8a:22:c4:13:83:93:71:33: ed:4f:e3:2f:7c:75:03:d9:16:59:4f:ea:69:eb:2e: e0:03:5b:12:57:1c:41:b1:98:1b:15:31:cb:c7:94: 63:67:39:9b:3b:be:0b:7d:02:4d:bc:ce:47:3b:06: 66:8c:c6:ce:38:b3:0f:d4:de:54:b9:83:7b:d6:8f: d0:68:39:d8:4a:5d:aa:c6:e6:df:15:79:e2:fd:00: ba:de:86:13:f0:51:4d:9f:eb:6d:f5:e4:7c:5e:37: 45:65:0c:64:80:e1:3d:2b:26:34:e6:4b:55:e6:fc: d5:bf:fd:b6:b0:5e:94:31:4b:21:30:dc:36:f4:5e: 7a:22:97:49:85:ff:ce:a0:e1:d5:57:20:8f:7e:a3: c8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D5:C8:B4:3C:1C:24:7D:3F:4C:F8:45:1D:41:FA:3E:94:53:5E:BF X509v3 Authority Key Identifier: keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:bf:d7:b4:a9:42:8f:ac:a2:d9:07:bd:3a:7a:57:32:a1:b8: 1a:8d:46:53:9d:ae:e5:bd:56:0a:57:d3:c4:ad:e7:ae:c9:4b: b2:e3:09:49:07:85:19:a2:f6:f5:73:2c:3b:d3:25:c7:42:8a: 1b:88:53:1c:e4:51:54:c4:15:dc:20:24:ba:14:0d:4b:55:3c: b9:b4:bd:29:41:8f:fa:2f:2f:12:0c:a3:8d:7a:71:2a:1e:4c: ab:9d:a5:ca:12:95:e9:e5:e9:70:dd:c4:1a:ef:8b:00:c7:a8: d5:79:70:28:b4:2a:b6:a9:76:fc:a9:5f:89:13:61:14:b8:4a: eb:21:0f:e2:d0:d4:29:b8:0d:c0:fc:0b:2c:0e:92:1c:e3:f0: 18:67:cf:69:f1:d7:37:d0:7c:75:6d:9f:75:d9:05:33:19:6c: 89:00:9e:2c:ab:13:ff:e6:2c:4f:61:0b:3e:42:68:59:ae:43: ba:95:57:87:bd:f6:46:e5:32:4c:7f:9f:0c:b3:c5:2f:59:85: 7c:cb:3f:08:73:e0:c3:ee:0c:61:8e:30:a9:09:a2:7d:0e:ed: 64:be:a7:d0:e9:aa:2d:2b:a0:05:87:b3:7e:3c:5f:16:78:0f: 56:ef:fe:b9:77:ef:2e:63:32:13:fc:9f:61:0c:f1:d3:14:6d: c3:00:e8:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhymHwo02RwjosXx1C+5/MGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi NzEzMmYwHhcNMjUwODA0MDEwMDUyWhcNMjUwODA1MDEwMDUyWjAzMTEwLwYDVQQD EyhjNmQ1YzhiNDNjMWMyNDdkM2Y0Y2Y4NDUxZDQxZmEzZTk0NTM1ZWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ6RaZKehNM2ke+vlsD1quNncnj5 FYBCwq+MAWOtKAXiO8FQp46i6GsbJCNaYKJIo9wfRq0660gc4ze23O0PtfP7Ne73 dL/6DzrQpFMU9JBCx1tSoPX+b1zKcsiFuhKsZLsfgdRMAKCa2aey+XDviiLEE4OT cTPtT+MvfHUD2RZZT+pp6y7gA1sSVxxBsZgbFTHLx5RjZzmbO74LfQJNvM5HOwZm jMbOOLMP1N5UuYN71o/QaDnYSl2qxubfFXni/QC63oYT8FFNn+tt9eR8XjdFZQxk gOE9KyY05ktV5vzVv/22sF6UMUshMNw29F56IpdJhf/OoOHVVyCPfqPIcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbVyLQ8HCR9P0z4RR1B+j6UU16/MB8GA1UdIwQY MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt ZGVlNzY4NjAwMTNkLzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7/XtKlC j6yi2Qe9OnpXMqG4Go1GU52u5b1WClfTxK3nrslLsuMJSQeFGaL29XMsO9Mlx0KK G4hTHORRVMQV3CAkuhQNS1U8ubS9KUGP+i8vEgyjjXpxKh5Mq52lyhKV6eXpcN3E Gu+LAMeo1XlwKLQqtql2/KlfiRNhFLhK6yEP4tDUKbgNwPwLLA6SHOPwGGfPafHX N9B8dW2fddkFMxlsiQCeLKsT/+YsT2ELPkJoWa5DupVXh732RuUyTH+fDLPFL1mF fMs/CHPgw+4MYY4wqQmifQ7tZL6n0OmqLSugBYezfjxfFngPVu/+uXfvLmMyE/yf YQzx0xRtwwDo9g== -----END CERTIFICATE-----Generated at Mon Aug 4 03:24:02 2025 by rpki-client