$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft File: q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft (raw, json) Hash identifier: j46HmzuOsWNznEsxE268EKm7fDVG7QnmWuGPYk5yLck= Subject key identifier: DB:5F:7D:5D:91:33:25:0F:7A:25:5F:81:D6:CE:F0:3E:D2:D4:AD:8F Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Certificate serial: 01988BEA7744D6867602333D202B3BC73722 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft Manifest number: 1677 Signing time: Fri 08 Aug 2025 23:00:55 +0000 Manifest this update: Fri 08 Aug 2025 23:00:55 +0000 Manifest next update: Sat 09 Aug 2025 23:00:55 +0000 Files and hashes: 1: 3rSRd0RZU7FekSH23KpB4AjQvCA.roa (hash: dHJ5VK5jy4AG5zWMS9JzXCYfEPP9KtWlYIJ17BPZ8p4=) 2: 79SKiAPGItgSBiSdHsbiPNmxzdA.roa (hash: bp4Hzk1UysrE74qZJaWtC8IolTv/126MWUfJ4dgAP+w=) 3: 8CD_BDNohDu7BFPue0FAVtqeSKE.roa (hash: MBbBcYx0OZxz+xXv93fCUqPEHeogAGDOWRTI0SELjnU=) 4: DLGzg4PXXfMLLz9uU9Jb8GzjTYQ.roa (hash: UyDgyJqrwARZHVBt5A9PQUxwD+TJu3qnXyFQy1aEp9I=) 5: FmNEfzs-SRSfbomfiiNIeqQS1sk.roa (hash: DZqchwYxSvfrNSJm9BmQA3cTvM8eHMT7t5woC6TuhyE=) 6: Qdu0d9QLtNBsD5iH6QjOkHOjfR0.roa (hash: WIh4dCuUbUKwr5ezCX9dxWL5StxMpA6ugd95qMzqKA4=) 7: U3lA_e0y8319DjoZ7X8Ks2r2M7w.roa (hash: fqverKbNHsV3jVuR9y0WWha056JePZs0l3+H4zjSxfA=) 8: W4bkJ6IHGpMDnc-eERRMgLecaRY.roa (hash: f8DGWIOVKEtO1y7kX/yc0GrbmCyQ2M3bGkc6cPKnJfo=) 9: XWgY9IE5WPWEYKpZb_DdJSKgmNk.roa (hash: RjaBA1nT0ZNCp2uF/Bf1faWMk5+nUdGucIKvPd+4FJg=) 10: afCUdciEL8e1tl5gYWrtb0HNTsk.roa (hash: 5NoCDBuBZUGC39cg06n8OGy1uzMRcXZWmjT1H17s8qs=) 11: eeDfIlNHz-MS84Jn8ZaBvfv9TTY.roa (hash: Nuu5BDy0CuOnKoHwa87Nw4BNQ/P69UXEmPo5SaswqxY=) 12: ic4TzeBOLx46VAxZ0kBOyLnL-aA.roa (hash: o/eumNvuz+9CmmVOqXWqv98TZutXQn/8mhjgfl+DMUM=) 13: jEkIkDjyHf0Y5CHlkh_SAYrLMi8.roa (hash: nK+7va5r0DKn11vhjaj1KeeLmtO5MjFetghK5DI3nyo=) 14: k1o7H-5eEgCdvmr2Au7FXonmUIc.roa (hash: cPZnlWd1NF/fLPFMgOLyjHXmXf8GfrHrU0SBnmHDHvY=) 15: lSOxZN--Nv76VTwU3O8Fys07u2M.roa (hash: KF0YUVuZrHgrWuxvGjcknBz1cOoRQsrm28h1CM9VPOI=) 16: oRojqrF2upd4qpGF9qwuvKkB85M.roa (hash: rI1ZvEDD5nBz4EJV2sl7C1HlZDCYTwKf5IAxKcbibxk=) 17: q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl (hash: XDZnazWvmqX9tQA7ekdrYIkSz/J8qJSsHY/yFBhq7WY=) 18: rbJzreDbHp60Zc3UJ6AODADth8g.roa (hash: BpjTDuP8RPY+luxryeSysWVMte9pS4i/E17bDx01jBk=) 19: rq4z53nTY235oXOYEJGf8J9hSBk.roa (hash: ALoDf8xPedv7a4y1Cobi6nNzEhORdIhw3weFRomPawE=) 20: wWbDK40S4dgNgIeoUbg-t_w6Qx0.roa (hash: SQUX4nOmlr/84KlBRvNtQfHH9k/9TOfWpMlz56zCIZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 09 Aug 2025 20:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:8b:ea:77:44:d6:86:76:02:33:3d:20:2b:3b:c7:37:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Validity Not Before: Aug 8 23:00:55 2025 GMT Not After : Aug 9 23:00:55 2025 GMT Subject: CN=db5f7d5d9133250f7a255f81d6cef03ed2d4ad8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9e:5f:de:9a:1b:e0:0d:82:b9:d9:33:94:95: cc:8f:db:f4:1c:86:97:0a:83:70:3d:2d:a9:1f:25: ec:69:85:00:48:0a:e2:0b:74:12:04:3c:4f:37:33: ed:4f:df:74:19:a2:b5:4b:7f:61:24:22:dc:55:88: 2c:e0:c4:34:2b:ef:f1:0d:72:85:b0:49:eb:f1:d8: 14:4e:ae:e1:a3:f2:1d:ca:d6:dd:2c:d3:ec:e4:cb: ea:d9:74:87:45:ff:ac:e1:59:44:73:f2:28:e3:d7: 38:6f:a2:c5:c5:d2:05:56:ec:62:b3:0f:f4:39:1c: 3a:ad:ff:35:4c:da:b1:f4:df:66:51:e7:99:17:66: 86:54:26:72:65:12:9e:c7:9a:d0:a7:40:bc:c5:fb: c1:54:12:72:69:ca:16:ec:ea:55:be:95:70:74:06: 07:85:03:a1:8b:7d:fc:8c:30:d4:16:29:3b:47:c5: ba:bd:f4:df:32:a7:57:95:50:e3:ac:76:0c:c3:b7: 0d:5e:7b:6b:90:b2:2c:29:92:0d:0a:5d:bc:d9:03: 4d:0b:8c:2f:62:35:bd:33:a6:c5:8b:b9:54:83:57: 09:6c:76:56:35:aa:48:dc:bb:a7:0e:b8:f6:b2:96: dc:84:db:4b:2a:44:2a:c8:45:13:1c:3c:7e:51:f0: 74:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:5F:7D:5D:91:33:25:0F:7A:25:5F:81:D6:CE:F0:3E:D2:D4:AD:8F X509v3 Authority Key Identifier: keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c8:a9:de:e7:cc:d3:d0:0c:28:17:f7:ad:c3:71:01:4a:11: d1:4c:93:64:a1:c8:97:bc:b6:f1:4b:21:fa:c1:a8:e8:a0:d3: f2:31:cc:65:ca:60:2b:37:1d:ea:db:9f:5f:41:fa:16:d8:d4: ea:df:8c:69:3e:90:91:93:5f:c7:78:10:ad:95:bc:8f:99:e0: 9b:44:d6:37:4e:57:73:af:5c:ad:ec:e3:68:3b:79:cc:a1:ff: 77:c5:4f:c1:b4:ef:2f:f2:26:55:5a:20:95:24:0b:a8:6c:f3: 3e:2a:14:f9:7d:d5:9d:06:8a:77:dd:2e:9c:ac:64:77:e8:5d: 3d:18:a3:6c:87:b2:d6:5a:08:a0:1b:dd:33:2e:9c:4d:3e:14: d7:c7:03:dd:cd:56:45:9f:ea:75:fc:44:fe:f0:fd:1a:6f:7d: 5f:42:ef:0a:7e:31:60:ee:6b:07:cb:e6:7a:2f:5d:ae:27:77: 73:2f:85:b5:8c:98:ef:56:fb:0f:9f:ee:41:77:b2:19:8e:74: 4d:46:fe:e0:7f:1c:58:ed:44:96:31:cf:e2:2f:93:6f:ba:37: 81:4d:c4:7a:bd:7d:5b:75:e3:1e:48:91:cc:8d:88:5f:03:e3: 8f:ec:26:01:c0:bc:b7:b8:ab:93:53:05:9c:01:94:8d:2d:c4: e8:fc:3b:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiL6ndE1oZ2AjM9ICs7xzciMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzhkYmU1MjA4M2FkMzM1YzlmMWZkZTYwMTZlYzhiNDky OTMxNDAwHhcNMjUwODA4MjMwMDU1WhcNMjUwODA5MjMwMDU1WjAzMTEwLwYDVQQD EyhkYjVmN2Q1ZDkxMzMyNTBmN2EyNTVmODFkNmNlZjAzZWQyZDRhZDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqp5f3pob4A2CudkzlJXMj9v0HIaX CoNwPS2pHyXsaYUASAriC3QSBDxPNzPtT990GaK1S39hJCLcVYgs4MQ0K+/xDXKF sEnr8dgUTq7ho/IdytbdLNPs5Mvq2XSHRf+s4VlEc/Io49c4b6LFxdIFVuxisw/0 ORw6rf81TNqx9N9mUeeZF2aGVCZyZRKex5rQp0C8xfvBVBJyacoW7OpVvpVwdAYH hQOhi338jDDUFik7R8W6vfTfMqdXlVDjrHYMw7cNXntrkLIsKZINCl282QNNC4wv YjW9M6bFi7lUg1cJbHZWNapI3LunDrj2spbchNtLKkQqyEUTHDx+UfB0aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtffV2RMyUPeiVfgdbO8D7S1K2PMB8GA1UdIwQY MBaAFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2Qt MzA1NmFmOWEzMzVlLzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2QtMzA1NmFmOWEzMzVl LzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATcip3ufM 09AMKBf3rcNxAUoR0UyTZKHIl7y28Ush+sGo6KDT8jHMZcpgKzcd6tufX0H6FtjU 6t+MaT6QkZNfx3gQrZW8j5ngm0TWN05Xc69crezjaDt5zKH/d8VPwbTvL/ImVVog lSQLqGzzPioU+X3VnQaKd90unKxkd+hdPRijbIey1loIoBvdMy6cTT4U18cD3c1W RZ/qdfxE/vD9Gm99X0LvCn4xYO5rB8vmei9drid3cy+FtYyY71b7D5/uQXeyGY50 TUb+4H8cWO1EljHP4i+Tb7o3gU3Eer19W3XjHkiRzI2IXwPjj+wmAcC8t7irk1MF nAGUjS3E6Pw7tA== -----END CERTIFICATE-----Generated at Sat Aug 9 02:59:00 2025 by rpki-client