$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft File: AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft (raw, json) Hash identifier: ALiUzhvpgiTJaAGlR9yoDKx8alYLiUimVzW+D4ESYos= Subject key identifier: 89:F9:A4:3B:6F:02:0F:8A:11:C9:AE:29:81:B8:E3:1D:7C:0F:E7:AA Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Certificate serial: 019879ADFCDB00E22C6EA26D86C736092F05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft Manifest number: 1626 Signing time: Tue 05 Aug 2025 10:01:42 +0000 Manifest this update: Tue 05 Aug 2025 10:01:42 +0000 Manifest next update: Wed 06 Aug 2025 10:01:42 +0000 Files and hashes: 1: 2MTpcYnM1k7_eZxG4JM1vyDTgyk.roa (hash: ymmdwaUbb6XKWmKTfQm4pWw8ouzRa7gwqokbxv+gmWU=) 2: 3CW8ZrBicXZ-3Xo2rFwfHtSekAs.roa (hash: 7ay6ExNqGjacU7HN/bzX0dJI8r/LlyrNhedhAiFT9ik=) 3: 4MiALt5VQvZmZRNJbgiFndSZM4w.roa (hash: GJAf7lhefseebsxtLfvA2JkOrit3YnALqwfo2sORCvw=) 4: 7XLrZeKON3mi_Y8HbdkwhdOJHZM.roa (hash: uPZBCvQWdyX5oSW3u+GYq0zKOz3VqYp/42l/kQKgi6Y=) 5: AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl (hash: OWmNh1oGEcD9WNVxwdNy1Fi2Dh/DQd+x6U3Viv+Yu9w=) 6: Woo9uQ4ucTRYjMh9ah88cw5clxk.roa (hash: WrdAqZeK7ES2+LIoGcfX11G6G4YXGyd2qn4CZO/jQsA=) 7: Xih-EfVQ2lODpeM1Ya_8fjlb3e0.roa (hash: l4FttRaMYnWfbRGN1GiO7VFVJgCvU1nAC+1h/ttWafI=) 8: Z2PHW8LvacSdhO2HpcioR4D6P_g.roa (hash: kHWtIvwFttg31Y3IHOia+gnD127BKytZFvvHo2JKuAw=) 9: gbjyDe1jMzAx-GtGqvOl5rcNw2Y.roa (hash: bZY4frDqpa0VtHIgDLvz2UTVVluMMplhW24wn9Ofe38=) 10: kSocueKI3xqrxYrVlgp46XPJhoY.roa (hash: 38MoDqAostLgesLzGLlzSF6QuxV0tRHQ2WgTUcouUvI=) 11: zDn6BG65-N44C0uDlJe3RzkiUTs.roa (hash: EM6Uwy/Us+r0AtgVlMQcbmCbt0K/tS3jHqszI1mZVYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 10:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:79:ad:fc:db:00:e2:2c:6e:a2:6d:86:c7:36:09:2f:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Validity Not Before: Aug 5 10:01:42 2025 GMT Not After : Aug 6 10:01:42 2025 GMT Subject: CN=89f9a43b6f020f8a11c9ae2981b8e31d7c0fe7aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:57:2d:ef:78:d9:7f:67:b1:63:b3:92:ee:ed: 4e:f0:cb:0a:d7:f4:0c:c2:9a:41:b0:45:bf:1f:3c: 5b:70:16:9e:76:e5:fe:70:c5:82:86:62:ba:cd:51: 31:86:36:87:36:17:c9:32:59:1f:ba:cc:e6:b9:eb: f0:4e:36:f2:e4:13:3c:c1:43:19:ba:30:8a:d7:7a: 00:05:36:2a:1e:12:db:33:26:09:1e:fb:dd:c4:c0: da:a0:2d:a7:d3:27:b2:1d:7d:bd:f6:ee:b1:cc:f2: 8d:90:19:71:ab:fd:ff:92:60:f9:18:4b:8c:77:6d: 1a:0e:d0:ea:7f:6e:e9:c6:62:82:bc:e6:cf:37:a8: c6:16:68:dc:9d:42:cd:f1:6d:3e:c0:55:e1:fb:87: 1b:24:4b:ae:83:b2:06:cc:8a:02:5c:1c:ad:a3:fc: 48:7c:07:ca:ba:54:8e:37:19:9e:3c:b0:34:af:ac: 5d:b5:66:c5:98:c0:2a:b8:c2:0e:59:41:b7:26:d8: 8e:f5:00:e4:0e:e4:04:aa:78:c3:94:ea:9b:03:1d: c3:50:98:9f:b6:42:57:1c:d4:ab:83:40:19:73:0c: 41:19:97:f6:dd:a8:a3:e4:05:59:f6:0a:19:55:f9: f4:ea:07:22:c4:0f:35:dc:c4:f6:d5:a3:03:44:05: 8c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F9:A4:3B:6F:02:0F:8A:11:C9:AE:29:81:B8:E3:1D:7C:0F:E7:AA X509v3 Authority Key Identifier: keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:21:a3:d6:ad:7f:17:6e:c1:8f:07:fc:ee:37:72:91:dc:08: 9c:a9:6e:5a:e8:68:95:2e:d1:c2:96:e6:0b:3f:8a:a4:59:d7: 2e:f4:30:8d:c7:c2:4b:28:cf:64:cd:4e:7b:6c:6b:de:8f:0c: e1:f0:77:9e:94:0b:2b:70:59:20:1f:50:fe:09:00:e0:52:01: 35:50:8a:79:8d:cc:d3:36:18:c0:c3:44:55:25:bf:e5:0c:64: 08:96:18:f0:d5:64:c9:c9:7a:3a:2a:d3:a3:ef:7f:2e:7c:37: 97:e7:58:b0:7c:f5:9b:5e:2c:81:0f:d4:32:b1:ab:a7:64:a5: d4:c6:8a:6b:8d:5b:50:c6:9a:b1:98:47:e8:e7:00:89:b3:06: f7:49:40:d8:08:de:03:7e:a1:02:a4:c1:24:9f:76:5d:f5:fc: 30:ad:b1:5b:21:e6:bf:60:89:f3:5f:e8:b5:5c:ba:76:4e:d1: 75:0d:7e:dd:4b:f6:c8:7e:94:86:45:a9:5a:02:ff:02:5d:5b: 1b:5a:5f:e5:04:ee:5d:8a:99:2d:59:08:83:c6:44:16:ae:c2: db:05:54:cb:0c:f8:d9:00:a7:bc:a2:4f:62:91:c3:aa:9b:b8: 46:2f:cd:2c:e1:98:90:67:30:da:03:5f:e3:29:9d:f9:51:a0: b3:38:e8:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh5rfzbAOIsbqJthsc2CS8FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMzJhNGJmYjc3OTY0MDVhNTU2Yjc1OWYxZDE5M2U0YzRk MzcxMjkwHhcNMjUwODA1MTAwMTQyWhcNMjUwODA2MTAwMTQyWjAzMTEwLwYDVQQD Eyg4OWY5YTQzYjZmMDIwZjhhMTFjOWFlMjk4MWI4ZTMxZDdjMGZlN2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslct73jZf2exY7OS7u1O8MsK1/QM wppBsEW/HzxbcBaeduX+cMWChmK6zVExhjaHNhfJMlkfuszmuevwTjby5BM8wUMZ ujCK13oABTYqHhLbMyYJHvvdxMDaoC2n0yeyHX299u6xzPKNkBlxq/3/kmD5GEuM d20aDtDqf27pxmKCvObPN6jGFmjcnULN8W0+wFXh+4cbJEuug7IGzIoCXByto/xI fAfKulSONxmePLA0r6xdtWbFmMAquMIOWUG3JtiO9QDkDuQEqnjDlOqbAx3DUJif tkJXHNSrg0AZcwxBGZf23aij5AVZ9goZVfn06gcixA813MT21aMDRAWMrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIn5pDtvAg+KEcmuKYG44x18D+eqMB8GA1UdIwQY MBaAFAIypL+3eWQFpVa3WfHRk+TE03EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEt M2JiNGQ2MjAwNTE4LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEtM2JiNGQ2MjAwNTE4 LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCGj1q1/ F27Bjwf87jdykdwInKluWuholS7RwpbmCz+KpFnXLvQwjcfCSyjPZM1Oe2xr3o8M 4fB3npQLK3BZIB9Q/gkA4FIBNVCKeY3M0zYYwMNEVSW/5QxkCJYY8NVkycl6OirT o+9/Lnw3l+dYsHz1m14sgQ/UMrGrp2Sl1MaKa41bUMaasZhH6OcAibMG90lA2Aje A36hAqTBJJ92XfX8MK2xWyHmv2CJ81/otVy6dk7RdQ1+3Uv2yH6UhkWpWgL/Al1b G1pf5QTuXYqZLVkIg8ZEFq7C2wVUywz42QCnvKJPYpHDqpu4Ri/NLOGYkGcw2gNf 4ymd+VGgszjoWg== -----END CERTIFICATE-----Generated at Tue Aug 5 20:15:31 2025 by rpki-client