$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft File: h3itgWjgnPktTgSYJX-OnOq_BpI.mft (raw, json) Hash identifier: m6TFjH3KjnHDKws470j+jfc4JpypDkbn94MVrsTCRMk= Subject key identifier: 2D:85:8A:08:C6:A0:6A:1C:12:8B:46:5D:08:FB:19:72:63:D8:C5:09 Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Certificate serial: 019875D116B91A721A589946237EFDD75C04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft Manifest number: 1635 Signing time: Mon 04 Aug 2025 16:01:33 +0000 Manifest this update: Mon 04 Aug 2025 16:01:33 +0000 Manifest next update: Tue 05 Aug 2025 16:01:33 +0000 Files and hashes: 1: 3VQFHIG_0NRiYGSMTzNDYelPmMs.roa (hash: T8N7lYcGBn0m7uBQBcevnqsWbvysQD6cxVHO1RDwUvg=) 2: 41kwTSa8H9b9pjrkUzwf85FQ470.roa (hash: 6DgsyUX2uyntOPFl8yDMIgTXXXs0mzyQ219673BzCzU=) 3: CdQNI5gcW0_1cf24cLvP-tL_omw.roa (hash: fyArCRfx7SbzhmzmpSevkzJflw0c7SkqK2TimwbjqzM=) 4: RXJMzhMtehSuCCi6uqljNw1_L-s.roa (hash: Xot9S/JUju+/cZl9baS7ZUR4Rh18U5S5qk4hiX6txpg=) 5: TpqMtUwJukfz53BZIUdbM-kP9dU.roa (hash: sJ+1FquCHUKBx1oFow8K9ca95AgoJ61IjnusPLlcDN8=) 6: WEKuOaRTTX2rTln9asflqP9Y2Os.roa (hash: EcqtEEKcbvmbmPvboEcXGauHM+e7HHmS4JSP0Le2t4o=) 7: XmOvv05xULfAWuDqrX7juNO-0qI.roa (hash: eJeMTOSpJLyqSZNQmSL2OZUvlINOSkmPnV9aTneLjHg=) 8: Xzib8AfEYqY2cHmuuM-ww_w5sW0.roa (hash: 6XHRFIs5VNl1aw2+x8Rz4IQniQIfYw9CyiplPPtk5bE=) 9: aMv6gEqWxpGKwwWm6t5nV_iaM3Q.roa (hash: +a48j1hsLG2vzEIY2MRVBswlr1+jm51V+Dk+4EhL/9Y=) 10: h3itgWjgnPktTgSYJX-OnOq_BpI.crl (hash: EqIr66mdBGRgOCWBLxkuHlldSKhobJjoQqIQ1PatlG8=) 11: jF6aKXBNyHTawjaz9GVexS6_Vps.roa (hash: FiDTfOMoZak8gOhtJT/8yhL0tIdZjUn13AvzOxfMN0E=) 12: s6XbpS6zvG-OGcqP78qsGOOoOlQ.roa (hash: vai/46FuXyssCtnAk+MIcYY2mUqRBxwISqAf2lFmzsg=) 13: vsuobB7Q7M7H0d2b7icsBX46rF8.roa (hash: 7WzZ613I/LXa4Zefx9tEqY2ZhSRre3hj1QC98fA5RuY=) 14: xP11eIeQX9x-FJdxDPaYbALauGA.roa (hash: X/B/3lK+XxCa5BQgDlvPLTFtIiO9rYw/6L5OCGSXKQE=) 15: xT7aM3kUy4b46Qb4CAkkSam9t5g.roa (hash: Rfd0mKt9HyiAqh5+s2geHZ1SUFHa0fSNkwoTUgmAYpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:75:d1:16:b9:1a:72:1a:58:99:46:23:7e:fd:d7:5c:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Validity Not Before: Aug 4 16:01:33 2025 GMT Not After : Aug 5 16:01:33 2025 GMT Subject: CN=2d858a08c6a06a1c128b465d08fb197263d8c509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d9:fa:fe:14:63:bc:93:83:3c:5d:89:32:03: e8:e8:25:6f:16:67:be:76:c1:59:3a:30:75:75:d6: b0:b3:0a:ea:fc:00:da:c0:c7:d0:66:a6:6a:61:5f: 70:22:32:78:11:35:a9:91:50:28:f2:1f:70:f3:27: 8a:1e:6b:b6:b9:1c:e4:b2:50:9a:f0:22:47:51:07: 8f:62:9b:b7:35:24:d9:a8:93:f4:77:9b:64:1d:af: 70:1e:58:f0:b9:84:5f:1f:db:a0:26:25:23:fb:ad: c7:76:fb:b6:5c:46:2d:b9:68:d7:17:b1:15:2c:9d: db:bd:9f:3b:08:1c:3c:b7:41:7f:6c:3e:57:3a:8d: d7:c9:14:32:5a:5b:3a:38:24:95:a7:1e:96:b8:48: 27:72:c0:d2:e6:61:6e:b0:eb:3b:65:dd:4f:28:5a: a9:b7:8b:1e:2c:b0:73:33:06:48:54:cc:46:6d:07: 60:3c:ff:07:02:1b:bd:af:b2:de:fc:fd:b3:0f:68: a3:7b:82:e0:b4:f9:a8:44:2c:92:51:f3:71:36:13: c8:88:51:c1:f8:86:74:96:a3:b3:3e:e0:e3:c9:16: 46:1c:f6:d5:68:b9:1d:e0:f6:1a:4b:b3:24:8d:c8: 81:2a:0e:a7:1b:5d:5f:14:a2:b4:30:e8:b2:de:f3: 88:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:85:8A:08:C6:A0:6A:1C:12:8B:46:5D:08:FB:19:72:63:D8:C5:09 X509v3 Authority Key Identifier: keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:b5:27:9d:34:df:f8:98:57:0f:77:2d:e3:a5:fd:4e:d9:a4: f4:4e:b9:8a:8e:02:4c:5f:b3:89:f5:45:3a:8a:24:e9:25:49: 94:9d:e1:24:57:f5:67:03:59:03:d9:93:95:d6:c0:31:c6:dd: fd:f6:a2:e5:8a:d6:59:ff:89:b9:64:9c:c9:32:f9:9b:72:b6: 56:79:3f:9e:c3:22:d8:e1:31:43:32:f0:d8:7e:71:cf:d9:31: b9:38:45:89:50:74:a3:55:b3:b9:bf:0e:87:38:df:66:ba:cb: 13:44:c1:7e:f1:12:45:f0:ab:01:aa:03:b0:8a:b0:ff:58:e8: 6f:e9:24:af:30:cc:df:a8:c0:29:9c:27:2c:5e:61:f2:cf:8e: c6:69:16:13:0b:c0:8e:f6:62:3a:cc:ac:6a:24:65:7d:53:c7: 7c:ec:f3:90:63:df:66:80:22:c0:60:26:f2:97:6b:61:9e:c5: 24:c9:01:14:fd:f7:d7:8d:eb:6e:76:93:3d:f5:39:82:95:90: 76:1f:98:63:ad:4a:93:8b:de:9f:4a:cf:58:39:51:5e:65:42: bf:c7:ed:f6:e7:5c:30:f9:5e:ac:ec:7f:f4:6c:8f:07:4b:2a: 51:c1:6c:83:c9:58:fd:01:0a:ef:d9:25:b3:5f:26:8e:b2:fb: ed:5d:49:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh10Ra5GnIaWJlGI37911wEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzhhZDgxNjhlMDljZjkyZDRlMDQ5ODI1N2Y4ZTljZWFi ZjA2OTIwHhcNMjUwODA0MTYwMTMzWhcNMjUwODA1MTYwMTMzWjAzMTEwLwYDVQQD EygyZDg1OGEwOGM2YTA2YTFjMTI4YjQ2NWQwOGZiMTk3MjYzZDhjNTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytn6/hRjvJODPF2JMgPo6CVvFme+ dsFZOjB1ddawswrq/ADawMfQZqZqYV9wIjJ4ETWpkVAo8h9w8yeKHmu2uRzkslCa 8CJHUQePYpu3NSTZqJP0d5tkHa9wHljwuYRfH9ugJiUj+63Hdvu2XEYtuWjXF7EV LJ3bvZ87CBw8t0F/bD5XOo3XyRQyWls6OCSVpx6WuEgncsDS5mFusOs7Zd1PKFqp t4seLLBzMwZIVMxGbQdgPP8HAhu9r7Le/P2zD2ije4LgtPmoRCySUfNxNhPIiFHB +IZ0lqOzPuDjyRZGHPbVaLkd4PYaS7MkjciBKg6nG11fFKK0MOiy3vOIdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2FigjGoGocEotGXQj7GXJj2MUJMB8GA1UdIwQY MBaAFId4rYFo4Jz5LU4EmCV/jpzqvwaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAt YWE5ZDY5MTgxMWU3LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAtYWE5ZDY5MTgxMWU3 LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFbUnnTTf +JhXD3ct46X9Ttmk9E65io4CTF+zifVFOook6SVJlJ3hJFf1ZwNZA9mTldbAMcbd /fai5YrWWf+JuWScyTL5m3K2Vnk/nsMi2OExQzLw2H5xz9kxuThFiVB0o1Wzub8O hzjfZrrLE0TBfvESRfCrAaoDsIqw/1job+kkrzDM36jAKZwnLF5h8s+OxmkWEwvA jvZiOsysaiRlfVPHfOzzkGPfZoAiwGAm8pdrYZ7FJMkBFP33143rbnaTPfU5gpWQ dh+YY61Kk4ven0rPWDlRXmVCv8ft9udcMPlerOx/9GyPB0sqUcFsg8lY/QEK79kl s18mjrL77V1JUg== -----END CERTIFICATE-----Generated at Mon Aug 4 19:05:33 2025 by rpki-client