$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft File: i4JDP_6UvzU2_sMnVD05YVggIHI.mft (raw, json) Hash identifier: HAvtB4+YJ3ETB6jmYYx85OW9Q7AUa/h7atTsiTrmkhw= Subject key identifier: DA:3D:99:67:87:AB:00:F6:10:38:17:18:70:A1:58:3F:A9:4D:AF:AA Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72 Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072 Certificate serial: 01987B9D2E09E56EE8C31ECE934B71DC142A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft Manifest number: 0C33 Signing time: Tue 05 Aug 2025 19:02:35 +0000 Manifest this update: Tue 05 Aug 2025 19:02:35 +0000 Manifest next update: Wed 06 Aug 2025 19:02:35 +0000 Files and hashes: 1: D0yJcu0JvPJ2IZ6qvrN_68RL81A.roa (hash: NXJKvgJ+KpYYxv4h48ZyQkogSfsaqjnCJ9F84sJ/8IA=) 2: Q341m_O_Fvk-c-cSLTgSjBR-6PQ.roa (hash: TYpc2N2InZtCXRqs05InmFBPQ4/4e2/n22E3EazYkM4=) 3: W9TFdD94lkINNpe0yudKptP_VLs.roa (hash: cP06PmfxXfnVdgeDD5yGsXjPUheUvD8ffIUpVLl0OGI=) 4: fAdRVcLtp1Hdo62qAxJzNRyFLms.roa (hash: /9qm18tTMk3ZVKpb3SBqcWWsV0TFo0WtQqugq7BXDfU=) 5: fk9piBmxadoxJuP7Wx4UPTdBTGM.roa (hash: P0efcRRoA7jHUP2kLMx2ZKnIu/J2T6OthYnnV4Yj06A=) 6: gYA_rHJcDyZ1I8qy1R4L0zDW9qI.roa (hash: u5z8BQnf6PynI8NBRk8KSGbQCrjifEnXJWVptV9ywSs=) 7: i18UwsW836pXDqDI-_udK1tEZ-Y.roa (hash: 7PmqUHR5yopsMl3jKYP4Y7Ciu3sTdxWLAQhutkIC9xo=) 8: i4JDP_6UvzU2_sMnVD05YVggIHI.crl (hash: 1iak8XkQnqv+97Y+KSVAWc/ukC4TW7Ql+0zAL9QGzCg=) 9: k_0zEMHxmfACdt3JyIQe32n-3UE.roa (hash: 1zpkXrC9Bl+aFyn5Yr4Xer+2HoYHjHajiHX7XweXMcg=) 10: xNtGHv1YLmz0baQ6fFAsVkQIQLw.roa (hash: glTrDTx+iBPrwn7/BNyzFNiZr9vyz3H84OvS4u/lrN4=) 11: yx9i8LZCbjvaDebLsn4vp_1QQsw.roa (hash: koRh5dNP2sZyFodyKIh0Iqwubeq7l02U0bZSoimi8yU=) 12: yyP9fmeZAYp1K1vaVu0uJv4Agws.roa (hash: egmTg6Tzum2/xFgjHv1aVGDhof0qC374Rh2lR+uVm0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 19:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7b:9d:2e:09:e5:6e:e8:c3:1e:ce:93:4b:71:dc:14:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b82433ffe94bf3536fec327543d396158202072 Validity Not Before: Aug 5 19:02:35 2025 GMT Not After : Aug 6 19:02:35 2025 GMT Subject: CN=da3d996787ab00f61038171870a1583fa94dafaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d0:c8:9e:85:f3:97:73:d9:74:44:02:b6:2d: ea:3e:ea:aa:45:d1:9c:58:fd:69:47:96:6f:4f:85: 21:d4:c6:f3:8d:af:43:f6:3a:46:8c:b2:bf:dd:73: cb:f6:e1:27:05:b1:03:58:da:8e:ff:10:ec:1d:c8: 1e:48:31:92:2e:a7:4e:64:47:63:9b:5d:a0:92:01: 52:63:f0:d5:62:2f:a8:07:5f:3e:aa:16:f3:a3:19: 90:84:e7:c0:01:e9:39:bd:1c:52:8f:c1:87:31:76: bc:ab:bc:8f:15:50:c7:17:e9:88:37:14:e5:1f:8c: bd:fb:3e:a3:1c:9d:b6:53:0e:c6:51:ae:7a:59:eb: 89:4b:45:03:aa:b2:53:dc:8a:b1:63:91:01:bc:bd: d2:01:2e:1c:ef:ca:9c:a6:13:b6:42:24:c7:97:3b: 7e:77:dc:af:84:cd:13:37:5e:b8:b3:73:9c:66:3f: b9:38:45:21:6f:70:10:1b:bb:7b:cd:a2:e7:50:a6: 63:6b:74:8b:63:fb:c1:ba:a6:86:d7:9d:c3:3b:9b: 17:d0:7d:ae:83:ee:f1:9e:58:b4:74:07:5f:26:d6: 5f:c7:43:02:38:c1:df:8f:5e:0f:35:ac:d9:c5:8b: d6:0c:3a:7f:66:1a:0a:5d:64:d3:10:70:a7:f2:7d: dd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3D:99:67:87:AB:00:F6:10:38:17:18:70:A1:58:3F:A9:4D:AF:AA X509v3 Authority Key Identifier: keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:52:48:5a:59:91:56:a8:91:c5:33:60:53:fe:d4:da:b8:e9: 11:db:16:e8:2a:f9:f4:52:19:80:bf:1d:3a:28:6c:de:dd:4e: 98:b3:07:95:22:3a:1c:32:fa:cc:a0:c0:be:e5:bc:87:0d:e8: 26:17:5a:b2:a7:0b:d5:72:04:74:34:f7:d9:f5:e0:02:b4:94: 63:6d:1e:de:ca:14:fe:20:dc:e9:e6:eb:94:ba:b8:30:a4:fb: e2:20:70:bd:19:87:4c:6d:e7:55:74:e0:94:b9:e6:7d:40:eb: 42:77:c5:bd:0c:10:9b:dc:48:94:e3:b4:2f:28:5a:55:bd:1d: 9a:05:89:c2:19:f1:58:d4:3a:f4:8c:75:dc:68:8d:03:3d:9d: 76:54:98:6f:7d:cf:d7:28:d8:c2:fa:41:9c:44:b0:0b:11:6b: 1a:88:d5:df:59:6c:19:2b:74:a0:42:2d:7b:08:2e:55:2b:fd: ec:d9:be:7c:99:04:b5:37:ec:34:4e:03:f3:41:4e:e8:fa:b4: 5d:ee:d3:0a:59:27:89:55:58:55:e2:69:35:6e:56:42:d4:82: 8f:3d:25:ac:69:4a:80:2c:32:24:0c:c1:2e:3c:ec:32:fc:ce: 5b:f0:75:d7:91:c9:13:1d:f5:fb:ff:1d:09:c8:de:64:70:50: 5c:40:c4:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh7nS4J5W7owx7Ok0tx3BQqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiODI0MzNmZmU5NGJmMzUzNmZlYzMyNzU0M2QzOTYxNTgy MDIwNzIwHhcNMjUwODA1MTkwMjM1WhcNMjUwODA2MTkwMjM1WjAzMTEwLwYDVQQD EyhkYTNkOTk2Nzg3YWIwMGY2MTAzODE3MTg3MGExNTgzZmE5NGRhZmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tDInoXzl3PZdEQCti3qPuqqRdGc WP1pR5ZvT4Uh1Mbzja9D9jpGjLK/3XPL9uEnBbEDWNqO/xDsHcgeSDGSLqdOZEdj m12gkgFSY/DVYi+oB18+qhbzoxmQhOfAAek5vRxSj8GHMXa8q7yPFVDHF+mINxTl H4y9+z6jHJ22Uw7GUa56WeuJS0UDqrJT3IqxY5EBvL3SAS4c78qcphO2QiTHlzt+ d9yvhM0TN164s3OcZj+5OEUhb3AQG7t7zaLnUKZja3SLY/vBuqaG153DO5sX0H2u g+7xnli0dAdfJtZfx0MCOMHfj14PNazZxYvWDDp/ZhoKXWTTEHCn8n3dvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNo9mWeHqwD2EDgXGHChWD+pTa+qMB8GA1UdIwQY MBaAFIuCQz/+lL81Nv7DJ1Q9OWFYICByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYt MmRkNzg5MGRjNjg5LzEvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYtMmRkNzg5MGRjNjg5 LzEvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX1JIWlmR VqiRxTNgU/7U2rjpEdsW6Cr59FIZgL8dOihs3t1OmLMHlSI6HDL6zKDAvuW8hw3o JhdasqcL1XIEdDT32fXgArSUY20e3soU/iDc6ebrlLq4MKT74iBwvRmHTG3nVXTg lLnmfUDrQnfFvQwQm9xIlOO0LyhaVb0dmgWJwhnxWNQ69Ix13GiNAz2ddlSYb33P 1yjYwvpBnESwCxFrGojV31lsGSt0oEItewguVSv97Nm+fJkEtTfsNE4D80FO6Pq0 Xe7TClkniVVYVeJpNW5WQtSCjz0lrGlKgCwyJAzBLjzsMvzOW/B115HJEx31+/8d CcjeZHBQXEDEUw== -----END CERTIFICATE-----Generated at Wed Aug 6 04:04:51 2025 by rpki-client