$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft File: r_oT8a4FORYoDsaO4bCXb569Pqg.mft (raw, json) Hash identifier: U2Svu9Ro841qxqMvhmKCvwrozTqjKstAh2QCedrBLvU= Subject key identifier: 81:D6:12:A7:4A:A7:EF:EA:8B:FC:C3:18:18:E9:43:A1:A4:94:1B:94 Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8 Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8 Certificate serial: 01987450EC03FD41E2DFE80D3248E7A7A7AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft Manifest number: 14ED Signing time: Mon 04 Aug 2025 09:01:57 +0000 Manifest this update: Mon 04 Aug 2025 09:01:57 +0000 Manifest next update: Tue 05 Aug 2025 09:01:57 +0000 Files and hashes: 1: 7BUAS9lNIJKrmgyqitmt4vjUchs.roa (hash: ZW63wkZvkBfaNmwpw8bvuYCpTs0W+QW7Uv70+dpsljM=) 2: 7DO8E30RGY4vAe7tIWHKTeq95P8.roa (hash: wO6AvUEPcj/+yaf4lye0oLqn75BJbLzeCB1mL+qhuus=) 3: Dc_MqXVzSSK77uzNogE5HgnhLwg.roa (hash: O7xD6oauj5YnrNkfW6IbaFJNVQOfp627wKoUhUJUb+c=) 4: F_q5_Z07qZI9DXW4KcpMFI_8MOY.roa (hash: UA+1oifvamJJirFIBnTAGXQVq0QT81TJRyTJ7BTxetg=) 5: HLeQFxpSAwO5N1pZKMX56Q-hB1w.roa (hash: +EuA9d7+91Ny4e4gzqH16NmmQUk9ZPnn92MghDjKpE8=) 6: QHGx9rBcGUaJTuZl4OFvkzmjZVA.roa (hash: ZZjwJdlY+j59oAR5+dW/8zpKf4al08hvm5qlRq5DDsA=) 7: iL0fpiq0g7Tpl8O9Cr71bc0UOYU.roa (hash: +0HQwj7rpV4acr+qdH/U1EOSgBMGpBNUkpCPoAIrOlE=) 8: r_oT8a4FORYoDsaO4bCXb569Pqg.crl (hash: 8ruSBbZbVpaJZeuU9VqFhxyJmmBHDBMs5CxVzf7ecRA=) 9: xJMh3j3GpShYCJoYtsAE4dqx3WU.roa (hash: k38ffw08ruTV3gYvZegSeTLOSKho9qw6Tw7LEO7WSjk=) 10: xmfrzoBs6Rhbg64vPzeCbbD4I6U.roa (hash: X1lH5bbTPug3DKbEg/bKjT6QG10Inw9lELIZLmoF2Qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:74:50:ec:03:fd:41:e2:df:e8:0d:32:48:e7:a7:a7:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8 Validity Not Before: Aug 4 09:01:57 2025 GMT Not After : Aug 5 09:01:57 2025 GMT Subject: CN=81d612a74aa7efea8bfcc31818e943a1a4941b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:de:ba:7d:d9:4d:12:76:9e:87:bd:e8:1f:70: 6d:f2:ee:af:b9:e7:bd:86:ce:25:c9:a3:51:9f:ce: af:e6:56:3f:e5:f3:f7:e8:be:bd:b0:5b:4f:31:ac: 3d:e2:5d:a9:30:58:18:6f:51:1d:d5:c4:df:77:29: b8:4b:e5:aa:73:9c:e9:39:ed:c1:64:ee:83:dd:9a: e4:5f:1a:bd:9d:5e:2c:a5:1b:11:00:f4:24:57:97: 49:37:24:de:f6:b9:a5:4b:54:9c:3b:c0:6f:1d:60: 40:6b:f5:e8:b0:77:0f:c5:d8:6b:16:ec:86:67:6c: 12:85:62:0c:c9:50:e4:6b:7c:04:e7:67:69:5c:47: f6:92:62:19:ed:42:ea:f3:07:06:9d:02:db:82:26: da:09:fc:92:9f:25:62:e6:74:c0:a2:ca:59:5c:c3: 71:b7:ef:07:4f:0e:a2:ee:cf:de:67:0b:f8:d4:f6: a4:a9:b2:b9:98:48:ad:63:06:63:48:c1:b7:12:87: 4a:be:57:fe:c2:ad:3b:46:48:2d:e4:6f:be:85:d0: c6:e7:93:88:7f:67:a0:6f:b6:f9:d0:9c:e4:a0:3e: de:e9:6d:93:4e:22:51:67:f7:19:3d:08:5e:0f:e2: 78:74:c3:f8:d6:9b:23:7e:2a:33:ae:d7:f8:e9:dd: d4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D6:12:A7:4A:A7:EF:EA:8B:FC:C3:18:18:E9:43:A1:A4:94:1B:94 X509v3 Authority Key Identifier: keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:7e:46:74:f1:0c:1a:aa:13:d9:fc:14:88:d4:de:60:9e:32: 68:21:eb:82:17:40:af:f0:e8:97:53:c2:32:a8:ab:c5:f4:1b: da:7f:bc:cd:c0:66:22:ee:88:a4:c8:d9:c5:ac:86:5d:8d:6e: 40:e5:d2:66:df:57:30:05:d1:99:6e:b9:26:48:bf:5e:3b:2e: 9f:db:03:4b:ac:ff:d0:04:2f:58:37:c4:ea:37:cc:8f:c7:c4: 45:83:4d:b8:27:ae:78:51:a9:4b:13:6c:f8:92:f0:45:97:08: 17:c1:29:3b:dd:4c:05:5f:b9:3d:2f:44:19:25:d1:3f:f5:db: f6:94:4b:37:0c:8f:4f:3d:75:11:96:ba:d1:17:68:ff:5a:39: e4:fe:5f:db:ce:d9:ab:4a:f4:f4:e2:ed:2b:2a:f8:ea:cc:47: da:0f:c6:19:b9:ca:16:61:be:b6:c7:c2:e8:a5:04:e6:4b:48: 07:69:e8:46:a8:e9:8f:75:f4:09:be:16:63:d6:fd:ca:de:ba: 35:21:f2:06:d0:4b:19:4c:41:86:7c:d9:1c:84:07:fb:31:f4: 55:e5:af:ec:bd:ed:04:4b:d1:7f:0f:2f:f5:19:1c:63:58:3e: 40:40:28:a7:3a:60:60:5e:38:51:18:76:66:48:4f:7d:5b:49: 8d:17:50:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh0UOwD/UHi3+gNMkjnp6eqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZmExM2YxYWUwNTM5MTYyODBlYzY4ZWUxYjA5NzZmOWVi ZDNlYTgwHhcNMjUwODA0MDkwMTU3WhcNMjUwODA1MDkwMTU3WjAzMTEwLwYDVQQD Eyg4MWQ2MTJhNzRhYTdlZmVhOGJmY2MzMTgxOGU5NDNhMWE0OTQxYjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd66fdlNEnaeh73oH3Bt8u6vuee9 hs4lyaNRn86v5lY/5fP36L69sFtPMaw94l2pMFgYb1Ed1cTfdym4S+Wqc5zpOe3B ZO6D3ZrkXxq9nV4spRsRAPQkV5dJNyTe9rmlS1ScO8BvHWBAa/XosHcPxdhrFuyG Z2wShWIMyVDka3wE52dpXEf2kmIZ7ULq8wcGnQLbgibaCfySnyVi5nTAospZXMNx t+8HTw6i7s/eZwv41PakqbK5mEitYwZjSMG3EodKvlf+wq07Rkgt5G++hdDG55OI f2egb7b50JzkoD7e6W2TTiJRZ/cZPQheD+J4dMP41psjfiozrtf46d3UZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHWEqdKp+/qi/zDGBjpQ6GklBuUMB8GA1UdIwQY MBaAFK/6E/GuBTkWKA7GjuGwl2+evT6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAt NDc4YzJjOGNiMmEwLzEvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAtNDc4YzJjOGNiMmEw LzEvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGX5GdPEM GqoT2fwUiNTeYJ4yaCHrghdAr/Dol1PCMqirxfQb2n+8zcBmIu6IpMjZxayGXY1u QOXSZt9XMAXRmW65Jki/Xjsun9sDS6z/0AQvWDfE6jfMj8fERYNNuCeueFGpSxNs +JLwRZcIF8EpO91MBV+5PS9EGSXRP/Xb9pRLNwyPTz11EZa60Rdo/1o55P5f287Z q0r09OLtKyr46sxH2g/GGbnKFmG+tsfC6KUE5ktIB2noRqjpj3X0Cb4WY9b9yt66 NSHyBtBLGUxBhnzZHIQH+zH0VeWv7L3tBEvRfw8v9RkcY1g+QEAopzpgYF44URh2 ZkhPfVtJjRdQ8A== -----END CERTIFICATE-----Generated at Mon Aug 4 11:05:39 2025 by rpki-client