$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft File: p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft (raw, json) Hash identifier: FULGLKAU9gaEYiCqCQKBAh0MzsfvxkguccB9kOfBNRE= Subject key identifier: 93:EE:58:E9:43:DB:FA:00:04:40:32:CA:88:BB:47:89:D6:D4:E6:5E Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Certificate serial: 01987A525319BE26E0F3DE578F42C7A9071F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft Manifest number: 1631 Signing time: Tue 05 Aug 2025 13:01:12 +0000 Manifest this update: Tue 05 Aug 2025 13:01:12 +0000 Manifest next update: Wed 06 Aug 2025 13:01:12 +0000 Files and hashes: 1: QT7D6zXAVoUxNK5Dz_Sr3Ysp0jY.roa (hash: NxSCkfWg+RxkMBPwT+VShHgw3RROnFUgM7kWEk11WTI=) 2: XbTeM1PqMKcQqGHBF2Epuf32B9A.roa (hash: hOnMCvxmcOEtS0aimUSMyI+EYwi7WWRIO2fcpaLnTMo=) 3: hRG76VocwZXhxkxCAJrESxkkjbY.roa (hash: R6reBqJWi+zQpuGx/72cFGp8W0OEKy5DLaWeb2k91DA=) 4: iWHLz7pb0VOnknWH2cLTUErxOZo.roa (hash: jWeDGrOMaI4VEcetBFaHjDSN9dYVfQeBBIRCHkcbqGg=) 5: l-wNxi1bPZkNern9TbmWMfg4MJ4.roa (hash: WyFvbV1rJyTWSGqAchaQ6NeEA4bf29r+mAAX5z8uy7I=) 6: nWpFu-ia2X0bjJCOwDt5OD3QhUU.roa (hash: j+w1oRLaR1UCeH6IJgbFlYRh4McsjrNOg64gWYp7KyE=) 7: p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl (hash: 7WS34fzg43EYZeGmhfSODdSwS8qEUt0CbmFK8QcRFLM=) 8: qK4AAnwuTwRwNOb2CLLZs8W9VuI.roa (hash: cqQ7l3QbvSMEr2phGWC5VDW+4MerE13RpRcZdGJsAvw=) 9: vIlI_dchwexZNflF7gIM73uLcOg.roa (hash: pny1c3FWYabHzSSLkClEvdiIBKMwq09M8u+AIiKsPlk=) 10: ydZkgwYcvYbM7mbYd53RAsEkq3U.roa (hash: qwmH6QR7NKSIBlvN+e3NJdnmXczvm/lNUAul9UFFgLI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 13:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7a:52:53:19:be:26:e0:f3:de:57:8f:42:c7:a9:07:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Validity Not Before: Aug 5 13:01:12 2025 GMT Not After : Aug 6 13:01:12 2025 GMT Subject: CN=93ee58e943dbfa00044032ca88bb4789d6d4e65e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4a:fc:66:8b:5a:44:2b:99:39:6a:c8:d5:9b: 40:05:e1:fa:04:7c:19:b0:0f:93:12:57:af:be:de: 34:84:c9:4d:da:3c:23:cd:ed:ef:d4:e8:f2:81:c1: 58:05:fb:c9:d2:3f:ae:72:6f:e3:66:26:77:48:a8: 2a:77:41:ab:a8:d1:4a:36:fe:f4:69:82:59:af:5e: ae:37:c9:88:4e:48:ba:b5:84:57:c6:61:6a:4f:24: 09:7c:0f:b2:98:90:f3:de:07:a0:6b:37:2e:2f:3b: ad:47:e2:62:3f:14:37:5f:9c:6f:8f:61:04:c3:3b: 9a:9b:ea:a4:95:bf:ad:20:82:6f:60:db:32:a6:7e: f3:4d:7a:30:bb:27:ce:98:cb:f3:05:cf:51:6f:8c: 69:20:5e:26:a5:7c:56:93:4f:e7:df:0b:f1:9c:2e: 11:0a:be:2e:e2:78:a9:fa:92:bb:65:56:91:b1:c4: ac:18:f1:9c:e6:21:f2:5d:44:a1:21:a8:c3:e5:ed: 86:6e:b6:95:b8:33:8d:0d:b7:8b:12:ad:8d:fc:43: c6:a2:a2:de:1c:ed:09:cc:24:30:96:52:b7:57:38: 46:39:2c:41:3f:08:ad:a7:fa:af:73:c2:b0:4a:72: 5d:78:cf:77:51:d6:3c:d8:17:70:1e:fe:9e:f3:ef: 06:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:EE:58:E9:43:DB:FA:00:04:40:32:CA:88:BB:47:89:D6:D4:E6:5E X509v3 Authority Key Identifier: keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:ea:44:d5:f6:89:81:e2:93:7d:ed:85:8e:0e:f0:07:ee:1e: 9e:03:e4:bd:c7:af:df:6d:f1:5b:99:f9:0e:09:35:04:dd:f8: 56:50:0e:74:85:71:6b:35:81:dc:90:d1:44:f0:3a:9f:40:13: 9b:82:29:dd:49:67:92:17:11:b6:e3:48:40:a0:98:c1:67:0b: 9d:c4:85:f8:1c:1d:da:a9:ce:f3:cb:aa:19:19:11:10:76:ff: 17:b2:7f:2e:89:dd:5c:45:11:60:ea:29:52:18:ba:9f:d1:e8: 40:fe:4a:e1:42:94:e2:71:ed:0b:11:32:04:a2:9e:41:16:bd: 28:07:79:33:1d:4f:d0:49:6f:3e:ec:68:6a:14:df:40:f9:6a: 9b:c0:43:b5:01:3a:4a:6f:1f:41:81:c4:30:7a:7e:f5:04:68: 82:db:1f:01:ef:af:e7:48:d7:ff:c0:3e:36:9e:16:4e:c8:63: 21:6e:75:92:3b:7a:f3:04:49:6f:3d:98:29:5e:24:da:54:64: dc:5b:9f:f9:e7:23:d3:b1:72:c6:82:b2:fe:7c:3a:5a:88:63: 7a:6c:e5:ae:d8:9c:41:da:36:77:cf:53:54:f3:99:d1:4c:aa: 76:35:9a:b7:37:1e:25:f3:53:61:19:4e:97:0b:1f:95:87:42: 41:11:12:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh6UlMZvibg895Xj0LHqQcfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NmRkOWRhZDc1ODc3ZjdkMjhkMTRlMDhkYzU1YjEzMzBi ZDEzYjcwHhcNMjUwODA1MTMwMTEyWhcNMjUwODA2MTMwMTEyWjAzMTEwLwYDVQQD Eyg5M2VlNThlOTQzZGJmYTAwMDQ0MDMyY2E4OGJiNDc4OWQ2ZDRlNjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUr8ZotaRCuZOWrI1ZtABeH6BHwZ sA+TElevvt40hMlN2jwjze3v1OjygcFYBfvJ0j+ucm/jZiZ3SKgqd0GrqNFKNv70 aYJZr16uN8mITki6tYRXxmFqTyQJfA+ymJDz3gegazcuLzutR+JiPxQ3X5xvj2EE wzuam+qklb+tIIJvYNsypn7zTXowuyfOmMvzBc9Rb4xpIF4mpXxWk0/n3wvxnC4R Cr4u4nip+pK7ZVaRscSsGPGc5iHyXUShIajD5e2GbraVuDONDbeLEq2N/EPGoqLe HO0JzCQwllK3VzhGOSxBPwitp/qvc8KwSnJdeM93UdY82BdwHv6e8+8GdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPuWOlD2/oABEAyyoi7R4nW1OZeMB8GA1UdIwQY MBaAFKdt2drXWHf30o0U4I3FWxMwvRO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQt MmFjNmZmNzViZWIwLzEvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQtMmFjNmZmNzViZWIw LzEvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoupE1faJ geKTfe2Fjg7wB+4engPkvcev323xW5n5Dgk1BN34VlAOdIVxazWB3JDRRPA6n0AT m4Ip3UlnkhcRtuNIQKCYwWcLncSF+Bwd2qnO88uqGRkREHb/F7J/LondXEURYOop Uhi6n9HoQP5K4UKU4nHtCxEyBKKeQRa9KAd5Mx1P0ElvPuxoahTfQPlqm8BDtQE6 Sm8fQYHEMHp+9QRogtsfAe+v50jX/8A+Np4WTshjIW51kjt68wRJbz2YKV4k2lRk 3Fuf+ecj07FyxoKy/nw6WohjemzlrticQdo2d89TVPOZ0UyqdjWatzceJfNTYRlO lwsflYdCQRES7w== -----END CERTIFICATE-----Generated at Tue Aug 5 17:21:28 2025 by rpki-client