$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft File: SIxl3DWbWMprpdPa64dPBYaE6MY.mft (raw, json) Hash identifier: 2RHMoBtG7L6Lvc1k6425qhbHxamYlmlUFHu6XCNJNj0= Subject key identifier: 70:00:3D:40:EC:05:24:48:73:7E:BF:8B:51:78:AD:DB:59:4D:90:CC Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Certificate serial: 019873746E09F00AC45B4836AA71B5EE2896 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft Manifest number: 0B74 Signing time: Mon 04 Aug 2025 05:01:06 +0000 Manifest this update: Mon 04 Aug 2025 05:01:06 +0000 Manifest next update: Tue 05 Aug 2025 05:01:06 +0000 Files and hashes: 1: 1-aj5T9Cp2VGdvqAo0BLyNQl0OP0.roa (hash: wS9UY1GzEmJu3DzghbibQIVXymTHZMRkgirREpKzVig=) 2: CUbuh0PM3yqW-CpytCXAWwYdQ7Q.roa (hash: j6MdXA11jocwq2zYd6v7F0+Oq8jAXnx5FNp5BWwzZDI=) 3: GlW6zMLj6EttAmWKHy7iwfBhWZE.roa (hash: ABJiNZOFb+afM+eJQ3jwpevUgACzN0c5eNSdwc405sQ=) 4: L80pK6ObZRSScU_AZIXdqKhbLPs.roa (hash: 18whVklVMP7ZtNSmFR8DrFdceRMOWEFp28FcU5z0yMo=) 5: OZiwI2QkuuLbAOllr-XJlZEbneE.roa (hash: mXAIyClIU1Z4vpuyMsGiBBynCYmQ4v0FodyB8WIXhxk=) 6: PIHm_2dfJM_TGdcbwqQtnYwPXVY.roa (hash: kVHy+yISe5vrX43T3bIZxXbjFq8ypYr+GWkGUxqbMqI=) 7: SIxl3DWbWMprpdPa64dPBYaE6MY.crl (hash: Aif3RT5eyhMRExCyp0x45VOZ4c88fZb9WKgRLmQ2+sE=) 8: cSVJv9Y-FnxxLG20frdAri_noBk.roa (hash: 34paWKddNtWaw0Vl7xzlk/3/M190Z6IXyvbGbAK4Tj8=) 9: ea6BO6jv5qXL6KOn3swl4W7fpN8.roa (hash: qb7RyOCex8dd5d/iXyz9TFdFXAm9eOIl5Q9VrGqRffk=) 10: f83w0UBpgcJD0dA64iAq7lmXARw.roa (hash: f9wovq1EqzUTh58ehH2r8oD0Nk4JJQcPOCa3DaAqpnI=) 11: h-PNQcjWOScse8WjyOhQeSbv950.roa (hash: /sFDGAAGqPfiAFmlm5KuC6NUsSeC3ZuPzrCQYYwFUic=) 12: mNSZJOUVeZicld4QAL_-bUUCGDI.roa (hash: nBD9zjll4ut7eXUVf0/WxLdu+1b2MWKBGI9qLKkr07w=) 13: qxsheS1XzS3dymYbKGRvC_3BiO4.roa (hash: VtweZ6shC74Bgwh1irW6gEbqeXbHeH8CL8orxJ3cqko=) 14: sejuuPdZzCrTGWMQL8q6fL6s1bI.roa (hash: Ijpq2YAMnAhyxDacqfun38Wp4QxYF9meZt2cnqXBEVs=) 15: z4bsjVbTnI81Y7pi92gQtwuMcMA.roa (hash: 6k5So3y2nhT6Ksfiwx9bk8ELUKmJlBzOynlhbHwQFMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:73:74:6e:09:f0:0a:c4:5b:48:36:aa:71:b5:ee:28:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Validity Not Before: Aug 4 05:01:06 2025 GMT Not After : Aug 5 05:01:06 2025 GMT Subject: CN=70003d40ec052448737ebf8b5178addb594d90cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b0:0d:09:fe:85:7a:ff:c5:e4:21:bb:e9:29: c1:aa:02:0e:06:63:6b:cc:a7:38:f9:38:6f:ec:24: f8:4a:6c:85:0b:16:f4:32:11:18:2d:18:fe:ff:ee: 9c:3a:8c:c8:4d:4c:68:11:35:54:4c:a9:6c:d7:9c: de:57:92:6d:28:2f:25:ed:48:e4:93:e6:05:c5:bf: cb:bd:0a:38:4d:9f:20:49:ba:b3:da:69:e6:b7:57: 52:2c:42:44:1c:8b:bc:6a:ac:42:d0:6b:15:c0:8e: 79:85:32:2e:a9:e3:1b:7e:1f:cb:fc:8d:0c:8f:23: 0c:71:6d:4d:4c:71:3d:fe:92:59:e6:29:b0:1a:a1: 46:78:ce:0c:6e:26:30:84:df:31:fb:91:b9:6e:e1: 30:5d:af:a7:86:14:6d:82:12:17:ed:dc:4f:7a:a9: 16:bd:fe:8f:5f:c8:f0:1f:1a:b8:b8:74:39:e7:af: 05:fc:1d:03:57:85:6a:a6:fe:65:6f:cb:bd:11:e2: 3f:7c:bb:e9:62:38:9f:0f:9c:80:0c:d2:d6:4f:74: 31:c0:c7:93:80:d8:21:ac:a9:e6:11:5a:57:29:fe: 9d:50:ec:2a:c5:6f:8d:f4:77:4f:f6:1c:a4:b4:d2: 9c:6d:2b:5b:78:24:e8:23:40:ca:10:f3:6a:e6:5b: dd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:00:3D:40:EC:05:24:48:73:7E:BF:8B:51:78:AD:DB:59:4D:90:CC X509v3 Authority Key Identifier: keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:da:18:d0:db:36:a7:64:a7:90:c0:c0:10:6e:ed:9b:c8:26: e6:f3:24:13:b0:43:d8:d0:2a:46:48:cf:1f:9b:e3:17:67:56: 43:55:94:b4:27:62:35:3a:86:ca:60:e2:e9:54:20:be:b8:62: 88:f4:f4:12:67:53:c3:1a:ef:11:98:4a:16:18:0e:67:26:58: 02:b5:5e:0e:8a:f0:e6:de:7f:5b:47:24:25:b4:e6:f1:1f:40: a1:0c:a3:fc:1a:79:bc:93:bf:d9:72:0d:3f:89:f9:66:c1:f5: 96:d2:70:6b:82:a9:12:67:33:64:72:70:39:df:ed:74:de:d5: 1d:6c:4c:9a:54:b2:a6:b4:42:dc:fa:fb:f1:66:b0:5f:ff:d8: fc:e4:1f:e6:91:e3:fb:33:86:4e:b9:55:41:d3:c2:b4:8b:d0: 1a:48:59:fa:44:43:f2:1e:58:a6:a2:b5:4f:01:29:03:47:00: 8f:81:fa:0e:a2:6d:89:eb:d4:60:e7:97:fe:db:d6:8d:f3:bf: 76:42:6d:b2:00:d7:e0:64:c6:1d:a1:93:70:e5:93:f0:c1:9d: c5:85:ba:cb:fd:11:5d:7a:b8:25:7e:81:53:ef:39:42:1c:39: 89:67:25:b4:32:0e:fa:f9:31:86:f4:0d:34:44:61:dd:dc:1a: 7e:b2:f2:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhzdG4J8ArEW0g2qnG17iiWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4 NGU4YzYwHhcNMjUwODA0MDUwMTA2WhcNMjUwODA1MDUwMTA2WjAzMTEwLwYDVQQD Eyg3MDAwM2Q0MGVjMDUyNDQ4NzM3ZWJmOGI1MTc4YWRkYjU5NGQ5MGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7ANCf6Fev/F5CG76SnBqgIOBmNr zKc4+Thv7CT4SmyFCxb0MhEYLRj+/+6cOozITUxoETVUTKls15zeV5JtKC8l7Ujk k+YFxb/LvQo4TZ8gSbqz2mnmt1dSLEJEHIu8aqxC0GsVwI55hTIuqeMbfh/L/I0M jyMMcW1NTHE9/pJZ5imwGqFGeM4MbiYwhN8x+5G5buEwXa+nhhRtghIX7dxPeqkW vf6PX8jwHxq4uHQ5568F/B0DV4Vqpv5lb8u9EeI/fLvpYjifD5yADNLWT3QxwMeT gNghrKnmEVpXKf6dUOwqxW+N9HdP9hyktNKcbStbeCToI0DKEPNq5lvdTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHAAPUDsBSRIc36/i1F4rdtZTZDMMB8GA1UdIwQY MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt YjBkNzJlOTEwZWZlLzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHdoY0Ns2 p2SnkMDAEG7tm8gm5vMkE7BD2NAqRkjPH5vjF2dWQ1WUtCdiNTqGymDi6VQgvrhi iPT0EmdTwxrvEZhKFhgOZyZYArVeDorw5t5/W0ckJbTm8R9AoQyj/Bp5vJO/2XIN P4n5ZsH1ltJwa4KpEmczZHJwOd/tdN7VHWxMmlSyprRC3Pr78WawX//Y/OQf5pHj +zOGTrlVQdPCtIvQGkhZ+kRD8h5YpqK1TwEpA0cAj4H6DqJtievUYOeX/tvWjfO/ dkJtsgDX4GTGHaGTcOWT8MGdxYW6y/0RXXq4JX6BU+85Qhw5iWcltDIO+vkxhvQN NERh3dwafrLydQ== -----END CERTIFICATE-----Generated at Mon Aug 4 11:10:35 2025 by rpki-client