$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft File: CoH-kFn2ggvBitWALy8fynfSVLc.mft (raw, json) Hash identifier: RgNk9mHQMWSBMvcPTmI6NyotyOmkYTvwJ3dWlYPtjvw= Subject key identifier: 15:FD:CD:3F:9F:C9:64:8A:F3:F2:C4:35:2B:42:3B:8C:91:36:C9:84 Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Certificate serial: 01987418C5AE8EF1026398846272B01B38B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft Manifest number: 0978 Signing time: Mon 04 Aug 2025 08:00:37 +0000 Manifest this update: Mon 04 Aug 2025 08:00:37 +0000 Manifest next update: Tue 05 Aug 2025 08:00:37 +0000 Files and hashes: 1: 31z7eSu8--35kebgOlCIABBeVf8.roa (hash: Bo6lIvIlV0RX6xhodzhO7tuvgscKOLMBcfTJSKlUYZw=) 2: 7pPLJaN3OTQBK8i-P4GOQNKJPho.roa (hash: HpLQLLrJKx/bS+zdiKUm5TCX+jRSuh5jVP1YSt/MOZY=) 3: CoH-kFn2ggvBitWALy8fynfSVLc.crl (hash: tNq5ZM3usixLiZvVN8Hbz1mYFDOaTKY4CCJqSfprvY0=) 4: EacbpO8P-LkG-h50-C35fVYJXyI.roa (hash: btUaf5jDz02025fLzDlihBUOmr88cX2MxuDiHPb5dc4=) 5: FstRBv2kO53NDHW81Q9Mg07SWg4.roa (hash: +uStvYqgj5hn3d6BL0rwAnmTzIsGb1x7W+G4jAHTkdA=) 6: Gf8Y2t4y9XW51teYl9-IOJM-QkE.roa (hash: JzLxoz0gWXWBbhQLZinkEP2bb0OKmAdUFJyyBJ71KUI=) 7: N0ylFt5LVYNjTI-_TsSgO84trzU.roa (hash: FGN5RCpPLee+DVEx92LqF5VUyDDoLbxxrafkYHnOVZg=) 8: PEEbtcraLxJZAPZLAW5H_KDLDwQ.roa (hash: wU0HPJ884+fnbW1G1BaCynti9gWD3Sn+0YrIsJUp3ns=) 9: hLdZE5q1FOXSO44ZofCjRXN9z7I.roa (hash: CmOCZv7BugezIWG5ZPHeIaee5S3CP9UP9zRJfwRzazg=) 10: i1bI7bZVKfcJ9vCnWPYEzcCSqOc.roa (hash: I9SME80ARJLDqvqmW5BBXCvNlxHc4Su4PKuf6AZPdG4=) 11: n_d7GjbZ9YbYK045nkHL_lX76pM.roa (hash: L6McSAJwh8T7ZY3ArgurepjkJRDGFkS06sAchDylLyc=) 12: pW-Kl5UPWqu6KG3_J4t1h52HuR0.roa (hash: 0HOBimxzzdToQy38vYlAJbGZVaBtPNrg0qioOLxF/+Q=) 13: tlqKEYYvFMWYK-JPntFn1nyKI1U.roa (hash: /wIoPxgkbhHCyNQ8NB2J0bNqG5fb1wxitY8EONuXMt0=) 14: yFPiywRMEHaITt3TRPzJux8bzAU.roa (hash: WnTskmfJ1KLR7sA0SYoAyMqXx6u45IJAhh3f7ztydOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:74:18:c5:ae:8e:f1:02:63:98:84:62:72:b0:1b:38:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Validity Not Before: Aug 4 08:00:37 2025 GMT Not After : Aug 5 08:00:37 2025 GMT Subject: CN=15fdcd3f9fc9648af3f2c4352b423b8c9136c984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7a:35:41:4c:88:d4:b0:b3:89:5c:50:01:2d: f2:bf:93:13:16:0d:84:73:43:6c:03:ff:80:34:46: 07:b1:7e:93:fe:27:c3:79:52:36:3f:53:1e:a1:71: 4a:ee:5f:a5:41:85:cf:71:32:e6:66:12:60:eb:dd: 2b:11:92:0e:ec:2e:15:30:26:98:d8:90:c1:57:22: bf:8e:58:aa:24:20:bf:2f:14:b9:de:cb:df:07:62: 40:11:2b:37:ee:e2:94:c3:2e:00:06:a8:94:06:a8: 42:28:a9:e4:b8:5d:65:ef:47:ab:5b:8d:f5:d8:e7: 17:84:6f:fe:90:99:50:b9:47:d8:f3:aa:cf:b9:80: ec:40:90:1c:0e:55:7d:13:10:7a:e1:58:2f:fc:e7: da:a4:90:39:b1:88:e6:a5:4b:50:90:de:30:18:f7: 7b:8d:f5:4a:94:ef:85:02:57:32:73:6d:b7:d9:8b: 1a:a5:66:6b:89:35:fb:60:9e:f1:6c:b5:49:33:7b: 5f:c3:54:31:c8:5e:ae:d4:44:36:41:94:bd:69:07: 82:61:03:c2:38:64:eb:53:94:97:84:79:18:08:e4: ce:4f:e2:04:b1:13:73:a6:67:c9:fd:9b:0f:cf:c5: 00:c0:86:f0:cc:3c:29:99:e6:07:51:8f:92:c1:5b: 00:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:FD:CD:3F:9F:C9:64:8A:F3:F2:C4:35:2B:42:3B:8C:91:36:C9:84 X509v3 Authority Key Identifier: keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:29:dc:fc:56:e1:ca:4d:96:3c:ef:7b:0c:a8:7f:eb:16:33: 17:3c:fd:11:65:76:3a:22:67:0a:27:05:a9:be:c9:ba:e0:dd: b9:69:34:d4:77:7b:34:c9:72:c1:1c:ac:4f:9c:7f:dc:91:c2: 39:2c:52:b8:e2:fd:22:1c:4b:34:00:30:cd:8f:aa:89:98:2a: ad:1b:d8:f4:fd:44:4b:86:29:82:5f:3b:1a:c4:27:4e:99:d7: 99:84:62:9c:2e:66:df:1f:fa:35:2e:e7:d9:08:fb:48:d7:ff: 19:71:c9:9f:f2:81:e3:ee:93:bb:30:7f:b8:c6:3f:46:86:f1: 31:ca:e4:27:93:28:d6:f6:b9:2a:30:91:2c:7b:a2:aa:04:b9: 72:f8:12:eb:26:7a:5e:ed:81:74:d5:5e:bf:1e:88:33:49:71: 18:bc:b0:b3:d9:1d:b2:e2:ee:3f:82:c6:df:08:b7:21:6c:f1: a2:85:dc:7b:3b:e1:a6:e2:1a:75:1e:90:11:6f:47:ca:24:4e: bd:71:75:f7:9e:90:a6:23:b5:b4:c8:cc:5a:a4:04:a1:ee:11: 5a:6e:a5:f4:0a:7d:01:6e:3b:31:49:80:29:ab:c3:3b:a6:9e: 6c:ba:ef:97:bd:9f:54:fe:73:ce:0e:31:9a:24:33:1e:dd:2b: 9a:0c:8b:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh0GMWujvECY5iEYnKwGzi4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk MjU0YjcwHhcNMjUwODA0MDgwMDM3WhcNMjUwODA1MDgwMDM3WjAzMTEwLwYDVQQD EygxNWZkY2QzZjlmYzk2NDhhZjNmMmM0MzUyYjQyM2I4YzkxMzZjOTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXo1QUyI1LCziVxQAS3yv5MTFg2E c0NsA/+ANEYHsX6T/ifDeVI2P1MeoXFK7l+lQYXPcTLmZhJg690rEZIO7C4VMCaY 2JDBVyK/jliqJCC/LxS53svfB2JAESs37uKUwy4ABqiUBqhCKKnkuF1l70erW431 2OcXhG/+kJlQuUfY86rPuYDsQJAcDlV9ExB64Vgv/OfapJA5sYjmpUtQkN4wGPd7 jfVKlO+FAlcyc2232YsapWZriTX7YJ7xbLVJM3tfw1QxyF6u1EQ2QZS9aQeCYQPC OGTrU5SXhHkYCOTOT+IEsRNzpmfJ/ZsPz8UAwIbwzDwpmeYHUY+SwVsArQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBX9zT+fyWSK8/LENStCO4yRNsmEMB8GA1UdIwQY MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt YmYwNWFjYzgyYmQxLzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCnc/Fbh yk2WPO97DKh/6xYzFzz9EWV2OiJnCicFqb7JuuDduWk01Hd7NMlywRysT5x/3JHC OSxSuOL9IhxLNAAwzY+qiZgqrRvY9P1ES4Ypgl87GsQnTpnXmYRinC5m3x/6NS7n 2Qj7SNf/GXHJn/KB4+6TuzB/uMY/RobxMcrkJ5Mo1va5KjCRLHuiqgS5cvgS6yZ6 Xu2BdNVevx6IM0lxGLyws9kdsuLuP4LG3wi3IWzxooXcezvhpuIadR6QEW9HyiRO vXF1956QpiO1tMjMWqQEoe4RWm6l9Ap9AW47MUmAKavDO6aebLrvl72fVP5zzg4x miQzHt0rmgyLLA== -----END CERTIFICATE-----Generated at Mon Aug 4 11:03:53 2025 by rpki-client