$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft File: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft (raw, json) Hash identifier: f6/6zf/pPcerhkczpIcqmqD7Lc13rZody0UVRQCNAbI= Subject key identifier: 00:C7:A5:DF:38:8D:8C:80:C2:04:E7:E5:15:7F:7F:D7:44:A8:E0:9C Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d Certificate serial: 0198752C26CDECE2D807A0948AEB0D946358 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft Manifest number: 11EE Signing time: Mon 04 Aug 2025 13:01:24 +0000 Manifest this update: Mon 04 Aug 2025 13:01:24 +0000 Manifest next update: Tue 05 Aug 2025 13:01:24 +0000 Files and hashes: 1: DBze0gTqh5SDOw7x6hoGuoE8yr4.roa (hash: ZLoARLtI2IGjjdgEEhL+2Ku7l0nsKThYXfmPapH0dJU=) 2: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl (hash: 4UnPP5wz/vVFZ/n97ehCpPIlQ5IhxaOZkU6Fku7FAzY=) 3: GRyGMSWpU5HpjCTFAMJk4pFWA6g.roa (hash: mdhlz2LJpLEwf5bmqCY1gcealxxDmZBuLv0u4IVvNRw=) 4: JEDgkveNrJ65vuQX11mg8UnyJUY.roa (hash: q6FNEl8CDSP0PRckpcDIVuz5w5t1HfMs8z/qUPyjC5I=) 5: KjkD8Cm8Nvn5kLoxMWRB37y0yGg.roa (hash: HwYwsaGRIKEpmjSBA+wSKugW77viLOfzOy52g+ZRvys=) 6: NcbkyJf0XrQlWSuaG_6rLIv8CEA.roa (hash: t1bpX5VtlqYKcE80al52Eab7HsC+sX2g/k7XldXhhvc=) 7: SAifF78qmhwobbNifv-ncSGKlCQ.roa (hash: /saAmnnB/hN9KICwUzdIN9J64c5nmcrdQQhBsyGdv1o=) 8: TpQ5Z-UdKferYkvwPdK8R7DUnj0.roa (hash: QghfP6CKI1HCADXXFPrgTYVwEH/4oteFqhbAKuXsWlY=) 9: il06Z06HBr4UubVDG3con6FSTJE.roa (hash: 6jxCobZPgi+fb0sp+gKSIVfeSMM4jnCmJ/PQ50Rwxgc=) 10: n3eGk4GZdLWL8rCKUegiOGKLLGE.roa (hash: T8Y25mtZcw8oW9dkDTGN7ilbRkb3BxSHEAwHzK4aavQ=) 11: xfa86z-_cd1JUN4qijUc-8zKEIc.roa (hash: V2BeXBWhsFE6+Rnj92uoYp038Gza7m9G0eWAbg/3QGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:75:2c:26:cd:ec:e2:d8:07:a0:94:8a:eb:0d:94:63:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d Validity Not Before: Aug 4 13:01:24 2025 GMT Not After : Aug 5 13:01:24 2025 GMT Subject: CN=00c7a5df388d8c80c204e7e5157f7fd744a8e09c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b6:8e:70:8b:da:8d:61:54:69:dd:6d:c8:ca: a5:9b:4d:dd:df:00:d3:ac:ca:25:78:65:26:69:66: 84:c6:73:b3:40:2f:d5:47:3a:b6:49:28:e5:86:b9: 5f:a7:46:09:79:81:bd:d5:8a:7f:05:41:0d:a6:bb: 37:61:11:72:e4:11:e9:0b:76:54:22:33:84:29:a0: a1:20:c6:27:44:34:6b:5e:f9:54:d9:8a:d5:84:96: 3e:bf:1e:a9:7a:af:b4:32:e1:27:8f:3c:88:c2:49: d8:1e:59:de:64:30:07:ad:0f:5f:00:05:94:3f:bf: be:7a:c9:ae:f7:c8:c5:ce:9a:28:0c:6d:6c:38:5d: 09:c1:fb:c7:80:48:21:b9:ef:f5:a4:fe:ba:dc:6b: 77:6b:41:c2:77:61:e4:67:4a:87:84:df:ee:d4:60: c3:18:e5:15:5f:8c:3b:3c:ec:85:b6:4c:63:ef:e7: 83:a3:38:22:a8:b0:ca:57:11:94:1a:5c:c2:ef:55: 31:7f:cf:87:24:45:1e:b2:54:c4:52:61:98:68:23: 56:75:da:fd:58:61:62:63:ad:1c:45:fd:90:42:9f: eb:d2:70:6d:28:8e:70:dd:14:2b:cc:ba:64:94:32: b2:6f:25:50:df:00:b3:11:f2:50:79:fc:c1:70:fe: 2e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C7:A5:DF:38:8D:8C:80:C2:04:E7:E5:15:7F:7F:D7:44:A8:E0:9C X509v3 Authority Key Identifier: keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:62:6d:d8:b6:bf:e3:23:4d:79:5d:9a:5a:1e:49:e4:a0:f3: 9f:ca:d5:17:88:4c:c2:77:d4:72:ca:d9:66:5b:f5:6a:20:d2: e9:1e:a3:9c:35:e8:a2:f5:89:2c:54:2b:22:86:ec:ab:1c:72: e7:57:0f:61:3a:4c:0d:cb:9b:ae:95:ea:6e:23:1f:5f:b6:07: 6d:f7:53:26:ca:41:b4:31:8a:1d:8f:da:c7:5a:82:8b:e9:80: 75:71:eb:50:73:71:f6:11:82:e4:43:4d:fa:24:2a:e7:44:2e: a5:a6:6b:dc:33:02:54:11:34:48:4f:22:b9:9b:35:bb:5f:d8: bf:c8:e1:ba:fe:af:53:e7:0e:ce:ff:7a:05:df:12:f2:0f:44: ca:01:2a:82:ab:79:0c:2a:cc:82:ad:02:4e:a4:90:9f:12:19: e0:23:08:2a:8d:04:6a:07:bd:79:d4:c8:53:ec:80:da:8e:3b: be:89:b8:99:d8:03:b1:69:45:77:c2:27:22:ee:90:7b:6c:23: 43:4e:50:0f:51:da:ad:ee:52:7f:cf:c0:e6:77:c4:83:fc:1c: 7a:da:d9:01:c6:b8:cc:d7:5e:af:d0:32:4e:c5:88:20:ff:07: 99:5f:08:90:c0:6b:a9:83:3f:0f:59:07:9d:32:9a:28:b0:1d: f8:98:be:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh1LCbN7OLYB6CUiusNlGNYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYTUxYTBiYzBmMGFmZWJiZjZkNWQ5MjdmZTFmOTgxNmY1 MjM1MmQwHhcNMjUwODA0MTMwMTI0WhcNMjUwODA1MTMwMTI0WjAzMTEwLwYDVQQD EygwMGM3YTVkZjM4OGQ4YzgwYzIwNGU3ZTUxNTdmN2ZkNzQ0YThlMDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbaOcIvajWFUad1tyMqlm03d3wDT rMoleGUmaWaExnOzQC/VRzq2SSjlhrlfp0YJeYG91Yp/BUENprs3YRFy5BHpC3ZU IjOEKaChIMYnRDRrXvlU2YrVhJY+vx6peq+0MuEnjzyIwknYHlneZDAHrQ9fAAWU P7++esmu98jFzpooDG1sOF0JwfvHgEghue/1pP663Gt3a0HCd2HkZ0qHhN/u1GDD GOUVX4w7POyFtkxj7+eDozgiqLDKVxGUGlzC71Uxf8+HJEUeslTEUmGYaCNWddr9 WGFiY60cRf2QQp/r0nBtKI5w3RQrzLpklDKybyVQ3wCzEfJQefzBcP4uvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADHpd84jYyAwgTn5RV/f9dEqOCcMB8GA1UdIwQY MBaAFBulGgvA8K/rv21dkn/h+YFvUjUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQt ODcxZjllZDcwOGUwLzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80ZjIxMWUtNzlkNy00NTA0LTllYWQtODcxZjllZDcwOGUw LzEvRzZVYUM4RHdyLXVfYlYyU2YtSDVnVzlTTlMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeGJt2La/ 4yNNeV2aWh5J5KDzn8rVF4hMwnfUcsrZZlv1aiDS6R6jnDXoovWJLFQrIobsqxxy 51cPYTpMDcubrpXqbiMfX7YHbfdTJspBtDGKHY/ax1qCi+mAdXHrUHNx9hGC5ENN +iQq50QupaZr3DMCVBE0SE8iuZs1u1/Yv8jhuv6vU+cOzv96Bd8S8g9EygEqgqt5 DCrMgq0CTqSQnxIZ4CMIKo0Eage9edTIU+yA2o47vom4mdgDsWlFd8InIu6Qe2wj Q05QD1Hare5Sf8/A5nfEg/wcetrZAca4zNder9AyTsWIIP8HmV8IkMBrqYM/D1kH nTKaKLAd+Ji+cg== -----END CERTIFICATE-----Generated at Mon Aug 4 15:05:21 2025 by rpki-client