$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft File: 5llvGxY8qwxFqE7rEyYbZfGiKWI.mft (raw, json) Hash identifier: hueE9970vCXzqHa9vYncKj6ot+SS456u8Kgsz6HCEZM= Subject key identifier: 05:4C:9B:65:6C:BB:4A:F2:CF:09:AD:9E:A3:1F:4E:9D:A6:80:F0:84 Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62 Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962 Certificate serial: 019873E36D04B27F2804EB36F49DC41C8698 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft Manifest number: 162A Signing time: Mon 04 Aug 2025 07:02:21 +0000 Manifest this update: Mon 04 Aug 2025 07:02:21 +0000 Manifest next update: Tue 05 Aug 2025 07:02:21 +0000 Files and hashes: 1: 5llvGxY8qwxFqE7rEyYbZfGiKWI.crl (hash: lTO3JhGdoSoKBV8UPIf920TgzcdvygSM98WTXPVLE5Q=) 2: EPrKtO_Wui_AIcoB1IjnBBpjTA0.roa (hash: Ns7k+bsMT28IYTUvIKM9gdNIwjEuXm0xT0/L3x28CpU=) 3: GSrzoMsqdrffXvz8XfRbb06cdoU.roa (hash: qO16W1LJUB1Sf5kzJO7kSt5JrIHbHWcZRaQOTtkSO+c=) 4: UY47b1nKTBymo-_2aL9oMC7vX38.roa (hash: bK73SZPBKj3iAjuEKmNGnIADIWNE9D/9YsMH7QmUlZ0=) 5: c9pIRKumzJnPv6L0_0S99z5-7Pw.roa (hash: JszoDngQwRDEsojUMs8/qjNo60rDhfYCdak0Z9nn2Bg=) 6: ffZavXQaQNIwwKVW84vxnOTS_2k.roa (hash: oA0RmBJXJ8Iaj/uIUokVdX89kZuQ0WJjVTCDBbmztv8=) 7: g7knCJ57jgLAS24rI4X3btb-M4c.roa (hash: 3UFtXY+vf3X8W6kWA8FvJJwhkGk4KqYw38fo24s58Sk=) 8: gFreThJqNlHPvyHQ79dnfJgTPWo.roa (hash: L3hMFyzcKxYUiA62qUifu4SJz3107QolnvNpa2edIOo=) 9: iwjx0AhvwxAf6vZnR0V70CNSj3k.roa (hash: s4vyo2AL6KEF6yGbsgdcSILxp1qahFdr2Um6ni3Nsz4=) 10: qZ2rbeeUwV9WnVFloyx-2WLLaic.roa (hash: PyKdiPPGb3idbj43k0xja1+Mj7fQbqPrKGkBwHfZq1c=) 11: tCNgCc7S1ewGtgMhWiXaNGTqwZ8.roa (hash: 0ar853JOpvsnmzIOleciC89u2nN3g3yWX8hEwIiz39U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:73:e3:6d:04:b2:7f:28:04:eb:36:f4:9d:c4:1c:86:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962 Validity Not Before: Aug 4 07:02:21 2025 GMT Not After : Aug 5 07:02:21 2025 GMT Subject: CN=054c9b656cbb4af2cf09ad9ea31f4e9da680f084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:62:11:fe:7c:13:c7:76:93:a8:ad:fb:e5:ec: 27:86:6a:83:74:48:68:20:7a:c1:a9:d2:ca:1e:a0: b3:61:05:e5:91:99:f7:2a:28:1e:9a:61:c3:fa:c9: 5a:c3:82:67:f1:a9:37:92:b8:8f:81:32:b5:dc:ed: 4e:a0:76:5a:a8:9b:1e:1e:30:8e:55:7c:fc:cd:9d: 1e:13:a7:76:de:3b:7a:31:eb:ff:20:85:d9:d7:51: 75:01:f6:88:bf:18:40:af:38:12:40:bb:d7:62:e2: 66:df:d2:05:87:c9:59:17:97:e6:3c:0c:94:a3:2c: 27:14:9b:93:9c:51:62:f1:92:44:0c:9f:4a:59:bb: 2c:82:14:bd:c8:83:df:c2:eb:fd:29:fb:ea:12:ec: 09:6e:21:7b:08:91:cd:1f:b3:fd:69:2c:bd:4b:3a: 4d:b0:33:c8:a1:c0:76:05:7f:8c:2d:fa:38:47:c0: 0f:61:68:ce:c3:9e:18:a3:4b:47:3c:9a:8f:a6:84: a4:88:32:c5:06:8f:9b:ae:04:f5:72:d9:eb:49:09: 8a:6c:b2:68:83:c3:6e:eb:65:9b:ca:ed:a3:88:b1: 7a:1b:1c:cb:3a:b7:76:51:b0:51:a2:bf:d3:9d:aa: bb:a1:27:f5:46:e0:d8:e7:2b:8a:45:68:a8:9b:ae: c7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:4C:9B:65:6C:BB:4A:F2:CF:09:AD:9E:A3:1F:4E:9D:A6:80:F0:84 X509v3 Authority Key Identifier: keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:bc:b2:52:b3:9c:88:43:ab:26:eb:1a:49:f9:96:c7:32:b2: 90:5b:6c:0e:4b:9b:3f:b3:ac:fc:24:4b:09:b3:00:40:b7:fd: ba:59:f7:d5:55:14:90:8d:00:4c:97:f9:97:10:c6:44:a8:33: 8e:29:15:10:c8:67:6b:11:f2:e2:aa:0d:65:5b:dc:81:10:04: 6b:81:13:94:e3:b4:b1:2f:b4:d0:de:74:6f:6f:97:29:03:ea: bd:90:11:0f:18:b1:43:17:7a:03:82:fe:17:03:c4:f7:4f:01: 3e:4f:34:f1:08:a2:83:ea:44:eb:89:ff:75:fc:10:ff:89:91: 43:63:2f:77:a8:91:46:c3:0c:86:4c:0a:18:7f:46:35:ca:6d: 1a:9c:42:4a:f5:a5:d9:fb:7a:13:00:61:f6:f8:03:2a:cc:6d: d4:23:26:ba:61:2e:35:87:a3:a5:c5:73:41:13:c3:55:cf:48: ef:65:9b:47:64:d7:b8:6f:13:3f:70:c0:a4:0c:89:d7:6d:4a: f6:01:ef:0e:44:08:fa:b4:4f:ac:b3:cc:1d:78:8e:84:e5:ef: b5:2a:96:a2:24:82:ad:1b:21:05:e8:c7:5a:2f:eb:bb:9f:0e: 7f:2e:9c:a9:cb:e7:29:8f:1a:0b:3b:e6:57:20:d1:68:da:a1: 1d:72:e0:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhz420Esn8oBOs29J3EHIaYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NTk2ZjFiMTYzY2FiMGM0NWE4NGVlYjEzMjYxYjY1ZjFh MjI5NjIwHhcNMjUwODA0MDcwMjIxWhcNMjUwODA1MDcwMjIxWjAzMTEwLwYDVQQD EygwNTRjOWI2NTZjYmI0YWYyY2YwOWFkOWVhMzFmNGU5ZGE2ODBmMDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WIR/nwTx3aTqK375ewnhmqDdEho IHrBqdLKHqCzYQXlkZn3KigemmHD+slaw4Jn8ak3kriPgTK13O1OoHZaqJseHjCO VXz8zZ0eE6d23jt6Mev/IIXZ11F1AfaIvxhArzgSQLvXYuJm39IFh8lZF5fmPAyU oywnFJuTnFFi8ZJEDJ9KWbssghS9yIPfwuv9KfvqEuwJbiF7CJHNH7P9aSy9SzpN sDPIocB2BX+MLfo4R8APYWjOw54Yo0tHPJqPpoSkiDLFBo+brgT1ctnrSQmKbLJo g8Nu62Wbyu2jiLF6GxzLOrd2UbBRor/Tnaq7oSf1RuDY5yuKRWiom67HMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVMm2Vsu0ryzwmtnqMfTp2mgPCEMB8GA1UdIwQY MBaAFOZZbxsWPKsMRahO6xMmG2XxoiliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMt ZTA1MzRlMjM4NTliLzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMtZTA1MzRlMjM4NTli LzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLyyUrOc iEOrJusaSfmWxzKykFtsDkubP7Os/CRLCbMAQLf9uln31VUUkI0ATJf5lxDGRKgz jikVEMhnaxHy4qoNZVvcgRAEa4ETlOO0sS+00N50b2+XKQPqvZARDxixQxd6A4L+ FwPE908BPk808Qiig+pE64n/dfwQ/4mRQ2Mvd6iRRsMMhkwKGH9GNcptGpxCSvWl 2ft6EwBh9vgDKsxt1CMmumEuNYejpcVzQRPDVc9I72WbR2TXuG8TP3DApAyJ121K 9gHvDkQI+rRPrLPMHXiOhOXvtSqWoiSCrRshBejHWi/ru58Ofy6cqcvnKY8aCzvm VyDRaNqhHXLgfw== -----END CERTIFICATE-----Generated at Mon Aug 4 11:07:37 2025 by rpki-client