$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft File: MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft (raw, json) Hash identifier: RRAOiUZgG2gJX4/dba/v5pD2egXP3SCaNOPYfdG+j9U= Subject key identifier: AB:0D:A0:89:22:C8:88:C0:7F:D0:34:1E:C8:15:84:4B:D5:F1:2C:F2 Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Certificate serial: 0198960061BD6CBACD98FD881C2F242DE84B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft Manifest number: 1635 Signing time: Sun 10 Aug 2025 22:01:04 +0000 Manifest this update: Sun 10 Aug 2025 22:01:04 +0000 Manifest next update: Mon 11 Aug 2025 22:01:04 +0000 Files and hashes: 1: 7sUlQFo2i2sGz_Vst269K_D-c-U.roa (hash: awgZwYT2+l2C5RaRZHXtrmJNbZfubWqB+2+301bBQBU=) 2: MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl (hash: qsogARGe7B5J9dnLXt8jPeGlamzi5zMneJdiAvz4LF4=) 3: N6977Tm3BxtAWxQMZFqlxhSXVqI.roa (hash: avNpgfUO6xrr8rilL4FRK/J7Wxu+LI2r4IfOPlXIeJI=) 4: OqobHIZLFLbZk0OR9E-PF1zk1Lw.roa (hash: Op02L+M19/z5j79qbmcRNqPT6icOYzM0VJzQXj5mmv8=) 5: TEsKuOI8Wr3xLM61BToTHvaxLG0.roa (hash: rGoXl2FfQwurIyUgTu1Dn9mUe7pNqUYv/AJnXAkg28U=) 6: i7jWP6E6hcB7Kvbk4mThF2buTs8.roa (hash: OqH0B+K5eYlDv/BpS97jLxNiwQggexBzkbjaho23mP4=) 7: nqc-9YDKd79YsE90D6bPl2BpKgE.roa (hash: VLqSIZaMWc7sFSdSIdfn5EqqZNs2ezp2l6diOyM4sNY=) 8: rgeIy49dLmNJww9sp8JRWKXD-n8.roa (hash: L8MUX4zAy84NplfwfzJB7WI9HcrmosjCL1UuxDQCssQ=) 9: xZ2vcM-Bgt-peFWCq0zItN8_N0c.roa (hash: IJSnWW805B1m7rlymmTJG2w628sB6dalr9ieL5l/bMk=) 10: zZigjvCd6NcudatYLyfpsyOboFA.roa (hash: vGtEfaZy/GpSD6Vra1IvWRrERF5jpy55majvnW9xdMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 11 Aug 2025 17:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:96:00:61:bd:6c:ba:cd:98:fd:88:1c:2f:24:2d:e8:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Validity Not Before: Aug 10 22:01:04 2025 GMT Not After : Aug 11 22:01:04 2025 GMT Subject: CN=ab0da08922c888c07fd0341ec815844bd5f12cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9d:a9:43:4f:7d:d7:0e:fb:8c:49:4f:40:3f: 97:83:39:9a:86:31:e0:4b:ec:e0:09:97:71:c9:94: 0c:77:6c:fc:b2:a9:b2:79:d7:2b:bd:99:99:54:a9: b1:6a:1c:e4:81:e6:14:32:18:b1:13:a5:99:50:c5: b4:9a:f1:46:de:99:95:a9:8d:31:e7:71:24:0c:0c: db:f4:a2:fb:85:f4:9c:62:3a:cf:7a:45:dd:c0:ed: 58:a8:3e:e8:4f:d9:61:fa:16:00:76:1e:1a:28:c3: d5:1a:80:40:e4:39:23:83:ac:f2:7b:66:91:e0:8e: 24:08:d6:c0:ae:68:14:e9:8e:12:50:e6:35:9b:f6: 50:22:3c:af:4a:3f:ec:e6:eb:87:a2:b1:e3:d1:e2: 5b:3f:dc:a9:e7:67:6b:6b:4c:69:98:cd:92:46:a6: bc:a5:9c:f8:99:ca:95:24:e9:59:4d:94:be:fa:1d: c1:e9:e1:89:a2:6a:62:d8:27:9a:00:c8:d1:93:26: 6f:eb:aa:ef:e4:4c:05:1e:81:2a:bf:a2:07:28:a8: 63:d1:bc:cb:42:ec:e5:c0:27:41:84:5a:9f:60:a8: 16:46:fe:3e:92:1e:fa:cd:cb:61:6b:40:d2:52:10: 33:a3:ba:ba:ec:81:12:54:df:e5:cf:4b:e3:89:50: f6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:0D:A0:89:22:C8:88:C0:7F:D0:34:1E:C8:15:84:4B:D5:F1:2C:F2 X509v3 Authority Key Identifier: keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:bb:57:16:dc:c7:18:d0:f3:f2:27:5d:36:4e:61:7c:a4:cd: a3:35:30:fc:c2:a6:4e:0d:9a:42:cb:fd:88:7c:f3:1b:9b:75: 3f:b1:fb:7d:99:59:57:58:43:ca:37:a0:88:6f:b8:2b:85:ae: 7b:63:70:4b:8c:c3:72:e5:b2:b1:fb:13:0f:77:46:51:77:f7: ec:42:b5:1f:39:c2:5f:73:66:ce:54:9f:9f:18:ef:0a:32:f6: c3:f1:12:11:94:dc:e1:f4:8e:30:28:a0:db:7f:d5:51:c8:27: c1:9e:9c:c1:8c:b6:09:d8:73:cd:9c:18:4c:49:e4:83:bc:8b: fe:59:db:7f:f9:f6:45:88:31:2e:d2:fe:ab:cf:90:b1:57:4d: 50:82:de:91:1f:07:2b:fa:b8:5d:9d:8c:d2:71:7d:79:97:99: 20:17:c1:31:a3:fd:38:dc:59:b9:c3:17:28:8a:ed:04:27:73: 22:fd:7e:2a:06:92:65:90:07:54:93:db:7b:64:54:75:53:13: ed:b9:fc:61:2d:eb:bb:dc:01:e1:ae:07:58:fd:c4:c1:65:9d: c6:ed:9d:4c:88:cf:0e:35:fc:8e:7b:f8:c3:96:69:ef:a4:c0: d8:84:ba:5d:92:63:c1:2f:d7:c2:03:e2:8f:18:ac:9d:0b:e1: a0:45:1c:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiWAGG9bLrNmP2IHC8kLehLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTA4ZmI3ODFjYTZkYmQ4MjIxZjJjMmY5NTRhM2E3NDQ2 YjJiNDIwHhcNMjUwODEwMjIwMTA0WhcNMjUwODExMjIwMTA0WjAzMTEwLwYDVQQD EyhhYjBkYTA4OTIyYzg4OGMwN2ZkMDM0MWVjODE1ODQ0YmQ1ZjEyY2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv52pQ0991w77jElPQD+XgzmahjHg S+zgCZdxyZQMd2z8sqmyedcrvZmZVKmxahzkgeYUMhixE6WZUMW0mvFG3pmVqY0x 53EkDAzb9KL7hfScYjrPekXdwO1YqD7oT9lh+hYAdh4aKMPVGoBA5Dkjg6zye2aR 4I4kCNbArmgU6Y4SUOY1m/ZQIjyvSj/s5uuHorHj0eJbP9yp52dra0xpmM2SRqa8 pZz4mcqVJOlZTZS++h3B6eGJompi2CeaAMjRkyZv66rv5EwFHoEqv6IHKKhj0bzL QuzlwCdBhFqfYKgWRv4+kh76zctha0DSUhAzo7q67IESVN/lz0vjiVD2mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsNoIkiyIjAf9A0HsgVhEvV8SzyMB8GA1UdIwQY MBaAFDJQj7eBym29giHywvlUo6dEaytCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDkt YzEyMjE4NzY1MTU0LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDktYzEyMjE4NzY1MTU0 LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARLtXFtzH GNDz8iddNk5hfKTNozUw/MKmTg2aQsv9iHzzG5t1P7H7fZlZV1hDyjegiG+4K4Wu e2NwS4zDcuWysfsTD3dGUXf37EK1HznCX3NmzlSfnxjvCjL2w/ESEZTc4fSOMCig 23/VUcgnwZ6cwYy2CdhzzZwYTEnkg7yL/lnbf/n2RYgxLtL+q8+QsVdNUILekR8H K/q4XZ2M0nF9eZeZIBfBMaP9ONxZucMXKIrtBCdzIv1+KgaSZZAHVJPbe2RUdVMT 7bn8YS3ru9wB4a4HWP3EwWWdxu2dTIjPDjX8jnv4w5Zp76TA2IS6XZJjwS/XwgPi jxisnQvhoEUcOw== -----END CERTIFICATE-----Generated at Mon Aug 11 02:03:59 2025 by rpki-client