$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft File: SeFL929C2k8qwAOmxp1hwjIOLNg.mft (raw, json) Hash identifier: wpRH3e4ebFqBTePRqdJ33Sw9SGgBHyXnw2E+k84qcow= Subject key identifier: 6B:5D:8C:9A:C4:BA:0D:89:DB:E6:3C:1D:11:39:C6:DD:46:2C:64:F2 Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Certificate serial: 019874BDF490BCBC44EAAEC161632E1089BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft Manifest number: 1086 Signing time: Mon 04 Aug 2025 11:01:02 +0000 Manifest this update: Mon 04 Aug 2025 11:01:02 +0000 Manifest next update: Tue 05 Aug 2025 11:01:02 +0000 Files and hashes: 1: 1JBbxjT9LW1M45TfUBltflWXjYo.roa (hash: +kWM+UT9oOWnxVo332YivS+2g4/PD34pohQWp5gFo5E=) 2: Ns_2WTykJXWBKeAZy8ZQQTGIZ4g.roa (hash: zHFP35lrOV5ykmqGRdLeDFScFpQtr+Xab1k7m30xSdw=) 3: OANXXNT4d7OJ6o497Ctf48xykTY.roa (hash: aZ2NtskCeNGxotOVm0/S/doAkEWhZqM1q8mtGb9yHS0=) 4: RI77ZK3aqTLPg2W-XBkxR7T7p4Q.roa (hash: nk2g70SgrOg1E7ZHO+z50BOPQEJsdzJ7hk5jt1A6+b0=) 5: SeFL929C2k8qwAOmxp1hwjIOLNg.crl (hash: TnpekVGMHlMnidczf8tSJ/vKihLFuCGsj/9aYYw5w1I=) 6: X6bDse8LmUftPmqQf4kw_btsOvE.roa (hash: j651kWeKBdPGwLMPF+EPghkkL3051eJwiT7QuhCps4o=) 7: _GcWVg1NloetvFlVnnsXCsqW9jA.roa (hash: 8fDT+HFMs22XfNV5rWe49DrDAkwxKtbv8tRmabSl16Q=) 8: h6nXxCojgmG6H44QUolSl46rG3Q.roa (hash: Jg0E3EWR0gqOThcjNWzxcD0juv44xUicy/wOavdwVH4=) 9: kLzXL1ZkV5i7SczjHie-nPdTakk.roa (hash: KSQB5UsbV0dtTyrjqQ8bJx4qGPsJFrVxBc1ZJaVStDg=) 10: zGWw5y3QtBedo3lJVh0hQTzv87w.roa (hash: LJqgZZZrONstDDkOQIUQr4bq2xXQX5fdOe5gdv77tuI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 11:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:74:bd:f4:90:bc:bc:44:ea:ae:c1:61:63:2e:10:89:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Validity Not Before: Aug 4 11:01:02 2025 GMT Not After : Aug 5 11:01:02 2025 GMT Subject: CN=6b5d8c9ac4ba0d89dbe63c1d1139c6dd462c64f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4b:51:53:6c:09:f3:ae:8a:f3:90:b2:fd:1c: 24:76:e8:c1:49:ff:1b:34:59:2d:8d:16:1d:67:23: 56:f4:52:a1:9d:ee:8c:60:ba:1d:df:04:84:b5:62: bc:02:51:84:20:eb:1d:1b:e5:f5:d0:08:ae:6a:75: 43:4f:a3:a2:09:f0:b6:97:f7:0c:48:89:c2:39:32: 13:0a:09:e3:9d:ce:e7:2a:1b:54:41:7f:a6:59:38: ba:7a:22:39:eb:b9:52:72:21:de:cf:e3:f7:bf:48: 93:40:06:26:de:6a:15:99:d9:cc:e7:9e:2a:6a:8f: 0a:3e:f9:de:8f:d5:d1:59:09:91:66:04:9d:db:ba: 14:c0:6e:44:05:12:27:36:46:b8:df:5d:84:9f:5e: 56:8f:d7:22:d9:29:4f:a2:36:14:43:30:7a:f2:07: bc:c7:89:8b:f0:94:b7:53:8b:5e:9f:0b:fe:d8:a0: 28:7a:57:d1:f0:94:42:bc:d3:14:e0:0c:5f:38:02: 75:64:4a:c6:f4:54:79:c3:ae:44:f6:50:2b:97:a5: 26:e4:67:ff:f8:33:40:02:84:1f:a3:29:d4:5e:d0: 47:02:25:a2:c6:b6:ee:b1:fb:f1:64:99:53:ab:34: 48:d4:36:d4:64:49:93:ef:c7:fb:5d:ba:13:19:af: 43:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5D:8C:9A:C4:BA:0D:89:DB:E6:3C:1D:11:39:C6:DD:46:2C:64:F2 X509v3 Authority Key Identifier: keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:94:36:82:e5:ee:f0:81:a3:87:e1:c4:fe:09:83:fa:9b:b7: 0b:81:22:8b:71:ab:be:5d:62:66:0d:68:3e:9e:c6:62:bd:26: 6b:40:17:60:cc:64:af:ad:b8:f1:a2:db:fd:d8:c5:04:b3:45: 1d:6c:6d:f2:59:97:33:fd:d2:97:cd:a3:ed:40:88:3d:6a:a7: 1b:20:22:4d:35:e9:e1:d9:b2:7b:33:31:85:f9:08:3a:4d:73: c1:b0:61:8c:69:63:2e:64:5a:2d:d2:bb:76:bf:af:b1:31:7a: cb:e2:2e:d8:99:ab:95:56:97:bd:18:a3:dc:e2:c6:40:a5:ad: ed:33:12:f6:28:81:4f:36:e9:4f:f8:a8:6c:3e:be:a1:6d:d2: 1d:bd:06:0e:e5:33:e6:e5:e2:f2:8b:12:26:8a:93:bc:b8:0b: 45:c8:a2:42:e4:12:bb:8d:d4:fb:13:7e:10:ce:08:0e:f5:72: 95:db:10:7a:c4:20:06:28:f8:46:2b:35:2b:47:42:af:15:5c: 98:c7:fd:02:34:a9:bb:6e:17:13:a8:75:ff:8f:b6:81:07:f3: 53:11:80:3a:fe:8c:4e:57:b0:8c:90:04:c9:5a:dc:30:7d:2d: d3:67:d6:9e:6d:ca:d7:59:53:e7:d2:43:64:4e:e9:3a:fd:f1: 67:32:09:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh0vfSQvLxE6q7BYWMuEIm7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTE0YmY3NmY0MmRhNGYyYWMwMDNhNmM2OWQ2MWMyMzIw ZTJjZDgwHhcNMjUwODA0MTEwMTAyWhcNMjUwODA1MTEwMTAyWjAzMTEwLwYDVQQD Eyg2YjVkOGM5YWM0YmEwZDg5ZGJlNjNjMWQxMTM5YzZkZDQ2MmM2NGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70tRU2wJ866K85Cy/RwkdujBSf8b NFktjRYdZyNW9FKhne6MYLod3wSEtWK8AlGEIOsdG+X10AiuanVDT6OiCfC2l/cM SInCOTITCgnjnc7nKhtUQX+mWTi6eiI567lSciHez+P3v0iTQAYm3moVmdnM554q ao8KPvnej9XRWQmRZgSd27oUwG5EBRInNka4312En15Wj9ci2SlPojYUQzB68ge8 x4mL8JS3U4tenwv+2KAoelfR8JRCvNMU4AxfOAJ1ZErG9FR5w65E9lArl6Um5Gf/ +DNAAoQfoynUXtBHAiWixrbusfvxZJlTqzRI1DbUZEmT78f7XboTGa9D1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtdjJrEug2J2+Y8HRE5xt1GLGTyMB8GA1UdIwQY MBaAFEnhS/dvQtpPKsADpsadYcIyDizYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEt M2JlY2NhYWUzMzZkLzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEtM2JlY2NhYWUzMzZk LzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALZQ2guXu 8IGjh+HE/gmD+pu3C4Eii3Grvl1iZg1oPp7GYr0ma0AXYMxkr6248aLb/djFBLNF HWxt8lmXM/3Sl82j7UCIPWqnGyAiTTXp4dmyezMxhfkIOk1zwbBhjGljLmRaLdK7 dr+vsTF6y+Iu2JmrlVaXvRij3OLGQKWt7TMS9iiBTzbpT/iobD6+oW3SHb0GDuUz 5uXi8osSJoqTvLgLRciiQuQSu43U+xN+EM4IDvVyldsQesQgBij4Ris1K0dCrxVc mMf9AjSpu24XE6h1/4+2gQfzUxGAOv6MTlewjJAEyVrcMH0t02fWnm3K11lT59JD ZE7pOv3xZzIJTA== -----END CERTIFICATE-----Generated at Mon Aug 4 16:13:59 2025 by rpki-client