$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft File: snJh1xU0i_1zzp27ckiGVpk7ovE.mft (raw, json) Hash identifier: dYzvl28uIPPxm8qlWqlSXQBQ5+fS2t1U8/diP3cUixw= Subject key identifier: 20:6A:43:79:34:EC:F5:D9:B0:0C:9F:69:80:0E:85:E1:BE:0A:71:05 Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Certificate serial: 019892FEE0936D4FB8A7BF6498B9118A38F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft Manifest number: 1154 Signing time: Sun 10 Aug 2025 08:00:33 +0000 Manifest this update: Sun 10 Aug 2025 08:00:33 +0000 Manifest next update: Mon 11 Aug 2025 08:00:33 +0000 Files and hashes: 1: 54iLRsUEYQSLlV8kHVTer9P4keA.roa (hash: Oib7LJlXh4bUMGiTPxF+59IQOdwF+fvCUOmQ1Sv5YqM=) 2: 83ZfI9Fyoy0-0Ed7XViCJUVWAUk.roa (hash: x5Erfp0LUGN9evcbs1ECyXblatyvnAhrnm8OrbCDB8k=) 3: DtWqKYrRCyGx6dsd9f2L7CKfIRc.roa (hash: O7NemdIlDZpd4quz6YecLMnjW1CyD/u06cKhcBOTRro=) 4: GrZCo-Pl-pKds5zmwg7ubalVFTA.roa (hash: XSM4rBpjvcsUyAb/r/u55Oo3ZCJqxZNIGwjYsJQ68bw=) 5: M80ufUXhkNHfa9K4zU6X6k_ofZQ.roa (hash: 4dQl+qST57nUFs67WwcEmlUV01oY2iEO29630JMqbwE=) 6: OcXOGlX2Gc26JEdm5iWVWnBYg58.roa (hash: /vGDKbgE4iZUS4BzIvVP16inipE2apdXrS0M45rcngw=) 7: QpucqboD9L8Uv9-I8wC2eqyytjM.roa (hash: QJ36JcAEae+tPmwoLHxsrKQ/qHkNlapv2iTQudy3nXg=) 8: VLrSYlONO7JZUvaeI6OzgjRksA0.roa (hash: LTkUIoLhvOTPKcASxWAtrGL8orynFjazuB3yg7c0ZYo=) 9: W95VCieFrYA-UWvQbNSL7N3Y2Cg.roa (hash: YvWvtJ9d+roXNfi60DzUNUYY7G9jfkQp1ZTCPAwbx+g=) 10: Yw4yz2qvg4rQujrK-dIx_KPixQM.roa (hash: rPOdhOXTd0LJkvjvgXHjpfcSX15w4WKfBaBl0s4PykM=) 11: mMdAkncXd62KSLEMH5-GZ2xifmI.roa (hash: BsiKxHj0OcEVg20ZYqrvGiqQgj+ynivI6054d313+QE=) 12: snJh1xU0i_1zzp27ckiGVpk7ovE.crl (hash: oHXAnvFZ88I0pNPoL1Cce1qNSNLWpfKJ4Wmgg5ed8nM=) 13: tXmj_lk4J_cxjq5mg9Y-DnR4g68.roa (hash: FkJnyg1Nbp4kUP6A2c71ys6CgKIoTjWwYiDec6OD1BY=) 14: x93oIxwN7f9CnY5MK-gEMFA9RCs.roa (hash: iUrM+UkqfotbOBAOD6sNrVDAFzEQJnu2I0F39zCKGjM=) 15: x_9TAtatN7OaJxTBmrfHpUlXZDA.roa (hash: 2gG4s/omQ5P0Lbi33p1Th/x4L/bao6YkNKtuc6UmamA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 11 Aug 2025 08:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:92:fe:e0:93:6d:4f:b8:a7:bf:64:98:b9:11:8a:38:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Validity Not Before: Aug 10 08:00:33 2025 GMT Not After : Aug 11 08:00:33 2025 GMT Subject: CN=206a437934ecf5d9b00c9f69800e85e1be0a7105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:36:e6:8c:c5:b8:1a:60:db:36:4b:28:14:26: 4d:f2:ee:fb:4c:34:fc:a4:ab:89:69:8f:29:a5:eb: 89:ae:d3:d3:3a:d2:00:c5:c6:2d:eb:20:ce:81:ba: 28:2c:9a:9f:cc:9f:0a:40:c9:38:b4:0c:e5:e5:68: c6:c5:71:6c:0c:bd:b0:36:6d:63:e1:a2:eb:66:65: 3a:f1:45:0b:78:d7:f4:18:e0:ab:ca:d6:6e:ed:1c: ba:53:29:04:cf:59:1b:93:7a:9e:a0:f3:cc:d7:4b: 13:a6:cb:72:8f:6e:8d:ad:5a:c3:c4:f0:b6:41:1a: 50:97:07:d9:17:76:9d:a1:5e:c6:4d:8a:f7:67:ef: 4d:20:54:09:4d:24:51:b6:3b:8c:86:15:a2:aa:eb: c6:53:ff:e7:ea:91:87:71:e2:b2:a4:f2:30:86:bd: 94:f7:05:f5:fc:57:4c:4e:27:76:3a:17:bf:07:2a: be:42:1a:66:0c:ff:5f:00:57:26:de:30:b1:a3:b2: 65:83:ff:43:33:6e:a6:54:bf:af:62:56:e8:a6:ed: 7e:45:79:6e:0f:d4:d9:3b:fc:12:50:10:38:80:f8: 0a:1d:41:55:e6:85:80:36:f3:8d:f1:40:80:7d:e4: 02:d5:6a:75:cd:8e:2e:da:75:6c:23:fe:c1:9a:da: d5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6A:43:79:34:EC:F5:D9:B0:0C:9F:69:80:0E:85:E1:BE:0A:71:05 X509v3 Authority Key Identifier: keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:45:da:2f:74:33:ed:6a:20:ac:fc:85:ff:c7:40:ce:77:5b: 4a:53:41:2a:fb:ed:13:99:8a:53:e2:68:c3:67:13:56:74:e5: ee:2e:d1:60:2a:cc:68:57:be:c9:de:fe:e2:75:6f:c3:96:a9: 17:a1:24:6c:7b:90:ed:d6:7e:85:e3:b7:b6:a5:66:ee:5d:6e: 6a:f0:41:80:02:05:d3:b3:64:73:26:cd:f4:bd:28:cc:3c:76: cf:e0:33:11:ef:d4:51:93:25:20:8e:cc:70:b3:35:29:30:fa: 28:5f:b5:6c:a8:1f:2f:48:9f:d8:88:d6:88:49:60:91:ba:9a: 5a:41:83:25:22:d7:b2:33:c5:b2:4c:e6:c7:2f:66:7a:4f:38: e3:f7:96:70:52:36:85:b7:e9:cf:5f:6e:c8:f3:9d:fd:b7:58: 95:61:99:d7:6c:37:0e:0f:5f:a2:36:2f:27:cd:54:38:96:28: 2c:e5:4b:de:c0:5e:c6:40:86:a5:7d:03:46:8c:2d:ad:63:1e: 51:ff:3e:27:68:3d:6b:9a:6f:b0:aa:a4:4b:21:a1:c3:4c:57: 45:ea:27:c5:ff:98:12:64:41:05:34:03:9e:de:26:ac:fb:4a: 32:8b:0e:f6:61:d5:2f:80:6f:55:34:6c:66:44:79:51:08:bd: 53:10:f6:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiS/uCTbU+4p79kmLkRijj5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNzI2MWQ3MTUzNDhiZmQ3M2NlOWRiYjcyNDg4NjU2OTkz YmEyZjEwHhcNMjUwODEwMDgwMDMzWhcNMjUwODExMDgwMDMzWjAzMTEwLwYDVQQD EygyMDZhNDM3OTM0ZWNmNWQ5YjAwYzlmNjk4MDBlODVlMWJlMGE3MTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TbmjMW4GmDbNksoFCZN8u77TDT8 pKuJaY8ppeuJrtPTOtIAxcYt6yDOgbooLJqfzJ8KQMk4tAzl5WjGxXFsDL2wNm1j 4aLrZmU68UULeNf0GOCrytZu7Ry6UykEz1kbk3qeoPPM10sTpstyj26NrVrDxPC2 QRpQlwfZF3adoV7GTYr3Z+9NIFQJTSRRtjuMhhWiquvGU//n6pGHceKypPIwhr2U 9wX1/FdMTid2Ohe/Byq+QhpmDP9fAFcm3jCxo7Jlg/9DM26mVL+vYlbopu1+RXlu D9TZO/wSUBA4gPgKHUFV5oWANvON8UCAfeQC1Wp1zY4u2nVsI/7BmtrV0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBqQ3k07PXZsAyfaYAOheG+CnEFMB8GA1UdIwQY MBaAFLJyYdcVNIv9c86du3JIhlaZO6LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2Yt NTA0ZjI3NjY3NjBmLzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2YtNTA0ZjI3NjY3NjBm LzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoUXaL3Qz 7WogrPyF/8dAzndbSlNBKvvtE5mKU+Jow2cTVnTl7i7RYCrMaFe+yd7+4nVvw5ap F6EkbHuQ7dZ+heO3tqVm7l1uavBBgAIF07NkcybN9L0ozDx2z+AzEe/UUZMlII7M cLM1KTD6KF+1bKgfL0if2IjWiElgkbqaWkGDJSLXsjPFskzmxy9mek844/eWcFI2 hbfpz19uyPOd/bdYlWGZ12w3Dg9fojYvJ81UOJYoLOVL3sBexkCGpX0DRowtrWMe Uf8+J2g9a5pvsKqkSyGhw0xXReonxf+YEmRBBTQDnt4mrPtKMosO9mHVL4BvVTRs ZkR5UQi9UxD20g== -----END CERTIFICATE-----Generated at Sun Aug 10 14:00:19 2025 by rpki-client