$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft File: sLWoCnEG4KS4VFyBULtyxpn8yaA.mft (raw, json) Hash identifier: n58VZCAigWWlDAQpEPTb6WpGA1rSdDrnHGvWRYUvITY= Subject key identifier: 48:F8:04:AF:1E:C2:7C:41:A4:61:1F:67:2A:B0:E0:15:6D:0B:86:D2 Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0 Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0 Certificate serial: 0198892045B6A22C52E3CB46E9B53852FBE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft Manifest number: 1640 Signing time: Fri 08 Aug 2025 10:00:50 +0000 Manifest this update: Fri 08 Aug 2025 10:00:50 +0000 Manifest next update: Sat 09 Aug 2025 10:00:50 +0000 Files and hashes: 1: 60jG5Ay8pKNRLAaYiabGAbMAWcU.roa (hash: mGDjXdclRD6cM00fzezmu8njPZGu0i86EMmzQCWdsaI=) 2: 8NknCKB4mqEufbZ6UbHgAa8xKGk.roa (hash: +VuXhmjH2zdhVZOeQIf+1XfhIBEvtUJA5CNUFP6jbIc=) 3: Cwb1KDzjyZP06ERQCkOqE8eDn-Q.roa (hash: qEbiLSfggbr/wcV1CfVb4G8sOcwZPVPdEo2xFZT7GWw=) 4: ULGt5CdhlE1JEjeG7VsVStOraA8.roa (hash: RKuD3ZtjSv+b+szTB+emIP6q+hmA+ntSP7hJQn+VQLA=) 5: XXx0PZbW0VSnHcKqWvct0KGeX5o.roa (hash: fg2kYbNMaJFsDmSVzEYMa+3owPgOnqiysynI+fCXGgg=) 6: XqyfpygCBb8Q3tIPPqdoPK94M0A.roa (hash: 2VTgMTAP00AWrF9/qszpE/dPLTmJ6fjO0h7TyCaHdtE=) 7: _xekjSFtSAUujx70CN_lqAzDOTI.roa (hash: RCBKZCow8/qZDtOMSChrlpX+0rMSwhsyivwOBDzZ8y0=) 8: d5wYN4sqYmgKKKUN9X-8jp9PKTs.roa (hash: /7Xb7BgMP/VziPk4Q/U+uMUdmAyttT7O93i5sL6urDU=) 9: jU-enqBlwHSK5LFQUkQMv3mnQ3c.roa (hash: XGjlZdDrp7Q05Es+vT4dQhjxGrAgZ9KHZykl/3VpHuk=) 10: rgPd-lPBT_KjoGNurNCPr8-tYLM.roa (hash: 7UFfmlghHed6gv5YUhlj2bi7/Km6EbVr9jqYqXUYH8o=) 11: sLWoCnEG4KS4VFyBULtyxpn8yaA.crl (hash: VnrAVvgtYLUBMx2WeEsj8fdngvd1CADI/DtvGkHJTIA=) 12: uYQNZGrXH6jilfHVW7M6-uKjZF8.roa (hash: K7dbhIw3GKL8CpYsfdoECZtVDjcGxNIlpZxMSzxg0fc=) 13: zad7TKoNmHhoc0CyHOzgSXKr6f4.roa (hash: LQ6zogTRTgGoz9vqyWdA5yZND4PDb2ytjo7mWtS7rF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 09 Aug 2025 10:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:89:20:45:b6:a2:2c:52:e3:cb:46:e9:b5:38:52:fb:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0 Validity Not Before: Aug 8 10:00:50 2025 GMT Not After : Aug 9 10:00:50 2025 GMT Subject: CN=48f804af1ec27c41a4611f672ab0e0156d0b86d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e0:28:33:18:67:75:85:7b:6d:55:1f:16:45: a2:43:62:75:70:7c:83:8f:6f:5f:82:b8:4d:1b:59: b2:6c:e8:fc:76:6c:37:4f:58:19:f4:36:05:0d:90: 8f:15:3f:d4:c3:89:9b:5d:b1:09:33:81:e0:cb:ff: 6c:23:38:ae:fc:62:2e:7f:e4:8f:fd:cd:93:c8:4a: f3:d5:b3:f6:0b:8c:64:42:73:4b:6f:c1:08:ec:c4: b4:39:ce:98:fc:4d:3c:49:03:27:26:7c:3d:33:56: b1:58:fc:35:54:3c:af:cb:86:7e:73:97:8d:c2:b8: 3e:8b:3f:30:2b:7e:8a:d8:c4:51:fc:4b:e7:a0:44: 74:e4:50:66:d5:1b:15:c1:ab:8c:eb:18:b6:b2:b5: 96:db:cc:74:05:53:8b:a3:98:a9:86:ce:b4:b4:3f: 45:43:01:9d:ec:39:03:a0:53:74:f8:e1:03:9f:d2: ad:d2:30:52:eb:09:e1:01:14:91:58:67:7c:79:65: 44:46:4d:57:f4:c8:6b:c2:e2:11:15:80:56:8a:06: 83:1d:37:1f:28:51:9e:10:02:5d:aa:4a:fa:e9:76: 6c:7f:ec:ee:2c:fd:25:ad:e6:d0:6d:50:f0:11:34: 8c:ba:84:74:c0:f0:06:63:79:db:8d:28:ba:50:d6: 18:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F8:04:AF:1E:C2:7C:41:A4:61:1F:67:2A:B0:E0:15:6D:0B:86:D2 X509v3 Authority Key Identifier: keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:c9:be:8c:28:ce:9f:d1:4c:0a:09:13:51:1e:16:b8:38:48: 90:c2:1e:e1:16:46:18:9f:15:7b:3d:65:ec:74:57:1f:88:4e: 14:7f:98:62:d4:06:b9:6d:4b:f4:7e:9f:32:84:1e:ea:5e:f2: 97:60:61:71:8b:3c:b1:f7:72:45:8f:76:a5:6f:95:1b:15:1a: 1d:65:12:92:21:bc:c0:93:8c:80:2f:d9:b0:83:c8:15:98:50: f0:d2:df:ff:ea:d3:b3:9f:f0:53:2b:03:83:a5:e2:6e:d4:a5: 91:22:bf:cb:5e:4b:10:ea:d6:fd:c9:fe:3e:25:a2:80:d8:8d: d2:22:4d:8c:90:24:30:da:d1:14:4a:8a:b9:cd:7b:64:15:c7: 39:97:9c:7a:05:18:9a:be:37:9b:01:05:ea:a5:34:f2:85:7a: 16:61:68:93:87:30:05:a0:20:5f:8a:a8:e4:aa:77:9f:a5:94: fe:3a:87:7f:6e:84:b3:bd:77:ad:eb:59:1a:5e:06:3a:8f:11: a9:ee:55:94:e8:2c:18:ef:71:ca:77:8e:b6:d1:1f:f1:eb:73: 4e:91:14:18:d4:6e:76:c9:1e:b4:80:37:2e:3f:75:3e:85:4c: 9a:0c:39:cb:28:98:70:04:5a:f8:06:47:b3:67:84:d2:f5:ea: bd:29:76:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiJIEW2oixS48tG6bU4UvvjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYjVhODBhNzEwNmUwYTRiODU0NWM4MTUwYmI3MmM2OTlm Y2M5YTAwHhcNMjUwODA4MTAwMDUwWhcNMjUwODA5MTAwMDUwWjAzMTEwLwYDVQQD Eyg0OGY4MDRhZjFlYzI3YzQxYTQ2MTFmNjcyYWIwZTAxNTZkMGI4NmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OAoMxhndYV7bVUfFkWiQ2J1cHyD j29fgrhNG1mybOj8dmw3T1gZ9DYFDZCPFT/Uw4mbXbEJM4Hgy/9sIziu/GIuf+SP /c2TyErz1bP2C4xkQnNLb8EI7MS0Oc6Y/E08SQMnJnw9M1axWPw1VDyvy4Z+c5eN wrg+iz8wK36K2MRR/EvnoER05FBm1RsVwauM6xi2srWW28x0BVOLo5iphs60tD9F QwGd7DkDoFN0+OEDn9Kt0jBS6wnhARSRWGd8eWVERk1X9MhrwuIRFYBWigaDHTcf KFGeEAJdqkr66XZsf+zuLP0lrebQbVDwETSMuoR0wPAGY3nbjSi6UNYYBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEj4BK8ewnxBpGEfZyqw4BVtC4bSMB8GA1UdIwQY MBaAFLC1qApxBuCkuFRcgVC7csaZ/MmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDIt NzQ1ZTA4ZmU1OGM2LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDItNzQ1ZTA4ZmU1OGM2 LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR8m+jCjO n9FMCgkTUR4WuDhIkMIe4RZGGJ8Vez1l7HRXH4hOFH+YYtQGuW1L9H6fMoQe6l7y l2BhcYs8sfdyRY92pW+VGxUaHWUSkiG8wJOMgC/ZsIPIFZhQ8NLf/+rTs5/wUysD g6XibtSlkSK/y15LEOrW/cn+PiWigNiN0iJNjJAkMNrRFEqKuc17ZBXHOZecegUY mr43mwEF6qU08oV6FmFok4cwBaAgX4qo5Kp3n6WU/jqHf26Es713retZGl4GOo8R qe5VlOgsGO9xyneOttEf8etzTpEUGNRudsketIA3Lj91PoVMmgw5yyiYcARa+AZH s2eE0vXqvSl2Qg== -----END CERTIFICATE-----Generated at Fri Aug 8 19:24:51 2025 by rpki-client