$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft File: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft (raw, json) Hash identifier: P1mwIkvP7NcT0+DmHweiwMBMk9Uv7h1HcstTi+l+tqw= Subject key identifier: E9:5B:14:0D:3C:87:ED:05:36:EF:F8:6F:A3:FB:B9:C7:14:00:BD:55 Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Certificate serial: 019873E297047220F8F12991187661089C1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft Manifest number: 0A11 Signing time: Mon 04 Aug 2025 07:01:26 +0000 Manifest this update: Mon 04 Aug 2025 07:01:26 +0000 Manifest next update: Tue 05 Aug 2025 07:01:26 +0000 Files and hashes: 1: 1zxqTZu6SRyYv_Ffy0lFoBPOEm4.roa (hash: ThozvqbE39I99NwlKLMA8FultirTXMcz2Kd4yrw2ZKw=) 2: 2JQiF-KuxisBuWKzCCYjlMYezbU.roa (hash: SXSN+jTHRj/1XPCNhGNyMfhXX6aenkr84XXZn44oBus=) 3: 2wuDk6nFqqGYiaSC6iucrRXcbQk.roa (hash: 79MFBQJOifCFih1gwOm9utzcHryDlN0MlgfAlM0KB/E=) 4: Dd0lNs2hky54dQAv3vPisZjCFp4.roa (hash: NVL0LmaHqGXfi7RWJ5Z26iREn6xhTna8KN7jsCj7oR4=) 5: G79Wrqy1Lf8BeR2TvbTFt1b4zUw.roa (hash: mkWsUDpUk6REoIb9yGYNYnYwXC9syYE03KiortiRCR0=) 6: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl (hash: gh1kORe4hhoeN6BcJSxJ8UH3yo4uMHYEmdpUPR1Tvxk=) 7: MtXcqoleDqMSyVWGFxd3850uGF8.roa (hash: 5zTGwHssmIeS5Ukj/HGoA7Wxq1gUaItGj34ri17+IlA=) 8: Q6bkyyQLjY5spQCrn9goEf71pPU.roa (hash: 9lviglTOByJ8RQWmZ8UPa2cM7z/LltLd8urB8JmBNnE=) 9: U6LKInYX6jQwBV8KMEesVDrNWSk.roa (hash: g36WmG/r5q9WK7xtEoYV2z/lqj+2PVHpdEIB93a9SEM=) 10: U93bZjAVh1P1joBT40YtFgkj33U.roa (hash: zo9QHI0N0+rtiU9CTdPl68EA0JwhDa16Oocr2Zm0PWg=) 11: Uaif5mluHcrJUGbfFQOQv5aGmqo.roa (hash: 4GcANOdK85GtkfgKCJ6D/Bc//mwXx0P/TVTNMp8rznY=) 12: diYtHkbWhD5oCZMkqf9gfGkO_S0.roa (hash: mAM70Fu/V+UYJ6UW5MauFuojQwzYrrWiK8CdKSQ5gBA=) 13: jyDBS4SlMdZTmgBvwq4TdZHy1_k.roa (hash: LeAOH2iyHYZi5p/Iq7kAMVJlSvm2ZJXwY56cgcvgz+I=) 14: kWZqnAqGVCQZUMelFlFHrbydZtM.roa (hash: 9J/2cfRnnGFBEvwGJLQNSpjlPJ6nqFC3XpqXj5zCg1w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:73:e2:97:04:72:20:f8:f1:29:91:18:76:61:08:9c:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Validity Not Before: Aug 4 07:01:26 2025 GMT Not After : Aug 5 07:01:26 2025 GMT Subject: CN=e95b140d3c87ed0536eff86fa3fbb9c71400bd55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ea:1e:3b:e9:36:f9:db:b8:1a:c3:88:30:e4: 41:58:4d:01:de:a0:37:51:69:78:65:31:0b:42:0e: 28:ef:ff:ab:65:a5:a8:77:f1:fe:a2:fd:41:e1:aa: 20:6f:d1:fd:2d:e6:e7:17:bd:16:2e:d4:ea:e7:78: 4f:e3:6a:be:8f:f4:5b:dc:b5:ad:25:58:2b:f0:ca: ef:9f:aa:b7:53:63:30:b0:4b:f4:b2:04:0e:12:a7: 40:db:5c:e2:d9:b9:49:aa:2f:77:c2:a2:3e:2f:b8: 0b:08:0e:a5:4c:b9:ba:05:9b:87:8d:a6:73:3a:37: 34:1d:06:c0:4e:f8:ab:fd:8e:d2:61:02:62:c2:48: e4:a3:b1:97:ef:d1:e4:f8:9a:8e:c6:4f:d6:07:9f: 8f:e3:ef:9e:a6:48:1c:9f:c8:87:ae:e2:cb:5e:7a: 2e:17:9e:3c:f2:b3:00:7a:f2:f8:97:e1:39:c8:99: 93:f8:b7:be:f6:ec:7c:77:eb:2e:5e:b1:f4:c8:16: fb:dc:b6:e5:9c:4d:ee:6a:d5:b5:f7:d5:c8:fb:b1: ff:15:b1:08:c6:09:93:61:e2:71:77:9b:c5:db:4a: ce:96:92:c7:1c:93:36:61:31:ad:5d:dc:fe:4d:fd: 5d:7d:8d:60:31:e3:80:af:68:fe:46:c6:e9:67:50: ff:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5B:14:0D:3C:87:ED:05:36:EF:F8:6F:A3:FB:B9:C7:14:00:BD:55 X509v3 Authority Key Identifier: keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:26:8b:87:b0:5a:3c:d4:d7:a5:5a:65:e0:ff:bc:6c:a1:6a: 29:08:86:42:e5:ce:ea:a3:2b:a1:2b:64:e0:3b:2c:9c:a4:87: c0:f2:b5:0d:80:16:8a:d8:f9:84:56:30:82:b0:40:5f:a8:6b: ce:e3:af:e0:63:ad:f4:9f:5a:4f:f7:62:8a:07:6b:96:1c:f7: f7:af:cb:74:24:0f:de:77:27:b6:16:9e:0e:dd:9b:53:3b:6f: d7:d1:57:9e:97:74:da:52:98:05:c6:08:17:5b:8b:1a:51:27: 10:b2:e1:eb:79:4b:29:de:30:3f:f0:2d:c9:81:ad:5c:f7:8c: 4c:3b:b1:99:68:53:07:42:ac:de:86:82:66:a0:f6:84:e5:56: 97:e1:1f:4c:c8:8c:4b:4b:95:d2:6d:4b:a3:7d:bd:95:c6:3d: 29:f8:76:c5:a5:67:4f:f2:d0:80:23:2a:6e:57:49:ad:a2:6f: a9:52:4b:28:dc:c7:53:4c:04:dc:8f:14:fa:92:3b:bf:60:bc: 0e:2d:6a:37:02:b8:38:14:ef:9f:71:b0:53:4e:71:e5:55:01: 2a:92:15:8a:e2:af:fb:77:60:a5:bf:42:d0:5c:dd:56:1a:12: 3f:cf:ec:81:e8:22:24:09:bb:88:43:bc:66:6d:a5:af:73:59: 29:c6:d1:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhz4pcEciD48SmRGHZhCJwfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZWU1ZjE2ZmMxNDRhY2I5ODk3NzQ0OWZhYTBhYjc3ZGUx YmRjYzkwHhcNMjUwODA0MDcwMTI2WhcNMjUwODA1MDcwMTI2WjAzMTEwLwYDVQQD EyhlOTViMTQwZDNjODdlZDA1MzZlZmY4NmZhM2ZiYjljNzE0MDBiZDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuoeO+k2+du4GsOIMORBWE0B3qA3 UWl4ZTELQg4o7/+rZaWod/H+ov1B4aogb9H9LebnF70WLtTq53hP42q+j/Rb3LWt JVgr8Mrvn6q3U2MwsEv0sgQOEqdA21zi2blJqi93wqI+L7gLCA6lTLm6BZuHjaZz Ojc0HQbATvir/Y7SYQJiwkjko7GX79Hk+JqOxk/WB5+P4++epkgcn8iHruLLXnou F5488rMAevL4l+E5yJmT+Le+9ux8d+suXrH0yBb73LblnE3uatW199XI+7H/FbEI xgmTYeJxd5vF20rOlpLHHJM2YTGtXdz+Tf1dfY1gMeOAr2j+RsbpZ1D/aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOlbFA08h+0FNu/4b6P7uccUAL1VMB8GA1UdIwQY MBaAFBnuXxb8FErLmJd0Sfqgq3feG9zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMt NjFhZmI2NmQxZThjLzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMtNjFhZmI2NmQxZThj LzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATiaLh7Ba PNTXpVpl4P+8bKFqKQiGQuXO6qMroStk4DssnKSHwPK1DYAWitj5hFYwgrBAX6hr zuOv4GOt9J9aT/diigdrlhz396/LdCQP3ncnthaeDt2bUztv19FXnpd02lKYBcYI F1uLGlEnELLh63lLKd4wP/AtyYGtXPeMTDuxmWhTB0Ks3oaCZqD2hOVWl+EfTMiM S0uV0m1Lo329lcY9Kfh2xaVnT/LQgCMqbldJraJvqVJLKNzHU0wE3I8U+pI7v2C8 Di1qNwK4OBTvn3GwU05x5VUBKpIViuKv+3dgpb9C0FzdVhoSP8/sgegiJAm7iEO8 Zm2lr3NZKcbRcw== -----END CERTIFICATE-----Generated at Mon Aug 4 11:27:44 2025 by rpki-client