$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft File: tOgroXFdaurlsBAnJf_gyDRzXX0.mft (raw, json) Hash identifier: SkzRv32YXp2jPU/zB5Zvo1V/750DbGdrY0UQq9iiLy4= Subject key identifier: 92:93:E8:22:98:03:13:DA:52:88:57:05:16:8A:91:6F:0F:9B:CF:6E Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Certificate serial: 01987298D7B3E46F11A1476487BA4B34DCF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft Manifest number: 0E0B Signing time: Mon 04 Aug 2025 01:01:15 +0000 Manifest this update: Mon 04 Aug 2025 01:01:15 +0000 Manifest next update: Tue 05 Aug 2025 01:01:15 +0000 Files and hashes: 1: 69jsCPkwXK1lmTxeQTyCID9PpjA.roa (hash: h/Q47E5oO3l5JxeekNZr7l4rqZH5SyA0969VUEHNB8w=) 2: 9MVV1yAh59mTgEP_W258bMa49_o.roa (hash: iCN3glju44EdxjBrGRw+NZhFmqg56yUA7pS6/PNweyY=) 3: AjV2rlIwTElr058YXLjGHHrdXf0.roa (hash: LTFD7RWDdMyUwIhuINghYkedTIuVGScYQK467Diulf0=) 4: Dgr2wvOQnRz5hgawqSG0QB7Wpf8.roa (hash: qz1bNfdEE/9TcJfQDqdc+8FtR45UoCnUkyfUGSABkmQ=) 5: Nc7iCAoE-03LSc1GXjFAkPSA-x0.roa (hash: VtOFvrmMP9apoQYdMZ3KyjB/zTDsL+t3o+S71XhQxpY=) 6: ObtlGayrPGhbC0NJB3cANhdfN9g.roa (hash: IXODRFBoDBQAcQ/y7+mqgK85yVkykmHrcIsLk/+rl+k=) 7: RzTS_aVg4A3thhT1xHxtMXq_vOI.roa (hash: zu1mzofX6iUkewhCXeSVvIWnMGeLEK4TikiEna45T0w=) 8: VifVBKjqmDhUgid5BLElJTuQJo4.roa (hash: WI5+mxqhucetVt6cCUvKQ5QuoJnG/kLcpHeXlC1Yb5Y=) 9: hG1KSyXr5tG55jI9wBm-tSwn7ZM.roa (hash: ojUG1DHCfBEX5RoSvSto85jWrWuEE+T8wqBz5z+O87U=) 10: lKCL8VeF7spgo1KPqTl3MnMrJFU.roa (hash: G5kvKqbW+q0BKre+iGyFYRJgxgTgTCaLSiQqwrZLbuM=) 11: tOgroXFdaurlsBAnJf_gyDRzXX0.crl (hash: ihBYgKpphUeTthmvYe+YviuojrNqWkvaN9sW7pLMPUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 01:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:72:98:d7:b3:e4:6f:11:a1:47:64:87:ba:4b:34:dc:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Validity Not Before: Aug 4 01:01:15 2025 GMT Not After : Aug 5 01:01:15 2025 GMT Subject: CN=9293e822980313da52885705168a916f0f9bcf6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d3:68:b1:90:0e:78:b4:b7:92:53:61:d7:83: 59:6f:ff:b0:e8:c5:5d:78:cb:90:fd:f0:cf:d9:2e: 70:86:d1:9c:b3:be:36:55:53:38:e9:19:58:47:85: 52:46:f6:3f:54:02:d2:e7:bd:dc:66:77:05:c6:a3: 52:9f:83:4a:88:b7:c5:b0:63:98:27:68:43:40:8a: 0b:6a:a5:82:d7:af:0a:f1:f5:8a:0d:3a:a7:09:43: ba:12:4c:90:d7:c7:67:de:7e:5e:37:d4:7c:79:7d: 75:3f:19:16:e0:37:a9:c1:1a:25:f8:b0:86:2f:e3: 5a:bd:30:f2:6c:1e:25:63:4c:30:e3:79:d9:d8:11: f8:68:cc:82:ee:0a:0d:1f:fa:7e:6b:24:61:42:b6: 61:dd:c6:59:bc:05:6a:89:77:56:92:79:ed:cc:65: f0:e5:00:70:0a:29:18:ee:6e:48:83:a0:59:86:e3: 8f:d0:4e:a4:19:07:1b:e9:cd:f2:59:ac:c4:45:1c: 72:bc:c5:49:4f:3f:be:7e:a0:35:b2:49:90:46:e8: 91:00:cf:ee:4b:be:ab:93:f1:13:94:2b:a3:67:52: 5f:1e:3b:ff:9b:bc:30:66:4e:e1:3e:ba:fe:5f:98: 88:31:1f:ea:0d:9a:8c:84:54:ce:9c:99:ff:2a:6c: bd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:93:E8:22:98:03:13:DA:52:88:57:05:16:8A:91:6F:0F:9B:CF:6E X509v3 Authority Key Identifier: keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:0e:cf:6b:57:53:b5:81:8c:42:8a:de:c8:87:72:01:52:18: 60:29:dc:f9:96:92:f1:8e:78:b4:75:a5:a3:50:91:a3:73:56: dc:6e:2c:41:b1:d7:f8:57:48:51:62:7e:cb:65:6b:b7:c5:d6: f5:6c:82:a2:3a:17:53:e9:bf:55:34:f8:d9:1e:13:13:bd:fa: ee:58:f2:b2:46:d3:82:24:4f:e1:20:b7:45:b7:cc:81:9a:5a: f1:ea:6c:ba:0f:cd:7b:e7:aa:3c:14:00:f8:6f:27:d9:04:2e: d3:aa:1a:9a:3f:cc:b0:c7:ec:bf:60:47:4f:d6:07:ab:11:53: 57:72:4b:87:c5:17:3d:e3:0c:78:d5:36:dd:06:b6:20:55:7f: 47:ac:f4:bc:28:01:b2:8d:cc:80:76:d4:1d:f6:29:09:41:a4: a0:7c:cc:aa:fb:ae:01:3d:da:64:98:cb:6d:8c:4e:97:ef:32: 6d:95:35:b7:77:d2:4d:07:82:6c:bc:eb:84:03:84:86:03:83: 21:bb:ca:8c:86:5a:13:e0:8f:d1:0d:a9:f6:f6:89:de:44:94: 28:ff:dc:08:1b:9c:6f:d5:01:97:d8:f9:d0:7e:68:1c:9e:b0: db:65:15:79:9c:39:18:a7:4f:6c:ed:21:cf:8b:53:87:68:0e: 8c:8e:6f:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhymNez5G8RoUdkh7pLNNz4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZTgyYmExNzE1ZDZhZWFlNWIwMTAyNzI1ZmZlMGM4MzQ3 MzVkN2QwHhcNMjUwODA0MDEwMTE1WhcNMjUwODA1MDEwMTE1WjAzMTEwLwYDVQQD Eyg5MjkzZTgyMjk4MDMxM2RhNTI4ODU3MDUxNjhhOTE2ZjBmOWJjZjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9NosZAOeLS3klNh14NZb/+w6MVd eMuQ/fDP2S5whtGcs742VVM46RlYR4VSRvY/VALS573cZncFxqNSn4NKiLfFsGOY J2hDQIoLaqWC168K8fWKDTqnCUO6EkyQ18dn3n5eN9R8eX11PxkW4DepwRol+LCG L+NavTDybB4lY0ww43nZ2BH4aMyC7goNH/p+ayRhQrZh3cZZvAVqiXdWknntzGXw 5QBwCikY7m5Ig6BZhuOP0E6kGQcb6c3yWazERRxyvMVJTz++fqA1skmQRuiRAM/u S76rk/ETlCujZ1JfHjv/m7wwZk7hPrr+X5iIMR/qDZqMhFTOnJn/Kmy9ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKT6CKYAxPaUohXBRaKkW8Pm89uMB8GA1UdIwQY MBaAFLToK6FxXWrq5bAQJyX/4Mg0c119MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMt YzdkMTk5MzBkNjZkLzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMtYzdkMTk5MzBkNjZk LzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADg7Pa1dT tYGMQoreyIdyAVIYYCnc+ZaS8Y54tHWlo1CRo3NW3G4sQbHX+FdIUWJ+y2Vrt8XW 9WyCojoXU+m/VTT42R4TE7367ljyskbTgiRP4SC3RbfMgZpa8epsug/Ne+eqPBQA +G8n2QQu06oamj/MsMfsv2BHT9YHqxFTV3JLh8UXPeMMeNU23Qa2IFV/R6z0vCgB so3MgHbUHfYpCUGkoHzMqvuuAT3aZJjLbYxOl+8ybZU1t3fSTQeCbLzrhAOEhgOD IbvKjIZaE+CP0Q2p9vaJ3kSUKP/cCBucb9UBl9j50H5oHJ6w22UVeZw5GKdPbO0h z4tTh2gOjI5vQg== -----END CERTIFICATE-----Generated at Mon Aug 4 11:17:29 2025 by rpki-client