$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft File: rtruqRF6HVzMMgIilVoJ-qB5j9k.mft (raw, json) Hash identifier: D0B+bnvx5j5thwGMkhbMD/rhPgUbDpX2YjsZoIQAfss= Subject key identifier: 74:A3:FB:91:65:02:D0:06:75:3B:C6:33:F3:75:14:F8:E7:74:00:56 Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Certificate serial: 01987298261B753A284836B76535D8B4B7DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft Manifest number: 1628 Signing time: Mon 04 Aug 2025 01:00:30 +0000 Manifest this update: Mon 04 Aug 2025 01:00:30 +0000 Manifest next update: Tue 05 Aug 2025 01:00:30 +0000 Files and hashes: 1: 3mlxlqxxKeV1HcJ7bUJquBWrLPM.roa (hash: LdsNRL7zR8y++XszDkFJs9ezvrT1lTI0NjP093U5ljg=) 2: 4SdJi3BPt8-RDec3IP7ET9slx0Q.roa (hash: QGo99RDwnHzRGoxgfvvtNisf3X6cgnQ851GWbQCaLvs=) 3: 7bwXhpAggJ_eID4STuVsUUonWWE.roa (hash: jwAsf9XJ11Ai8DUGeYC8bRJZ9GOha8mucoK1IxHdfkY=) 4: CzaaDeOWHQ6kTwaAx_O9YkLSomg.roa (hash: GUI6ZQYLsnldTDNTDgycT5JJ61OE2lf64zAhH2MlHo0=) 5: F-IifLCSbkSEOgi4sKV1jV1DQV8.roa (hash: 7kKwPi2Jx1AhBc2lAsg83y6Ji6J7QPEIqmUmsdkgOP8=) 6: M9dXL-Oza0PNDTAVGMoUMD1-IlA.roa (hash: jhP7c0ubJpNShQl4AZbo7W8l+sNrqPUvkjw+552fAtk=) 7: N8yg-rsBIkNZqhIg3aIitQuuaUk.roa (hash: Vq9e+6B3g3tkLctdReugpY+B6dczna3y7yxghSqb1lg=) 8: O_1KEMFUqgk53YPdkiJOMWFybCU.roa (hash: 4rGooap/6UNkN/imOgEGeKddbOoLvOCJN4FBsaaC0Sw=) 9: Oac09hx3rqQddn6sXzqSQ66tEsk.roa (hash: 0YnaolK2p37HCU8XIKe9HEtLFbwrR1vF1VCsBkGV6VQ=) 10: QB06ZN3QBBlBCzXQ38Wxu-W0hTY.roa (hash: YOe7BlkRM3bRTDlXC12POtxs/G4SQHLEyUujJ2j8le4=) 11: QeLZg2QtCjiT_FgF9I_8vW-GdW8.roa (hash: SAeRikMKDg+ufTk9edjpL98DiGUmXizgEulF/oacLNQ=) 12: cjQzMFxVd-iqEhVM-o1DNZllV_0.roa (hash: 85nOtiPI0UFXyc2nAprk9yS+5gMOcb9EUZheWPhZTEk=) 13: dnVM1cVOQmo9o53eHsEv3eXfeEM.roa (hash: h/M7g6bSmmEmFXClXRgmZ/cbukURXTiejXMMoqawhio=) 14: o9IncMeHSMz3mrSJeF9aMdkFAcU.roa (hash: KamLMqMs7PVReutKf0aHBQwg2azCb9n4pFhxDQwK6vA=) 15: rtruqRF6HVzMMgIilVoJ-qB5j9k.crl (hash: mEj/D7EDEV7BbcBvBI0MXJvH7aj8Yr+kS0R2XxpbAZ0=) 16: uFTtcjsPGnkaZVI5W5A8IkTF394.roa (hash: SZYFDFQluX6/of0g5ijROkb7a9Qa6zQP//c286jjxKM=) 17: w3UqKWnMOF5NaXpk2iA4PKS4_bM.roa (hash: u2j3jAMfurHPfPAg9hddmCUv1bl75zA9+z27+zKCwbI=) 18: xZ_023oKHQSUR6TwKwMkGIsy224.roa (hash: ifrv9R6haJqU4fA+SuKlYO2IqiC8qB9Zjz5Ablqp45M=) 19: y_VdrldyiOysCbP_n_SofIR2xM4.roa (hash: 3Y8+s1Vq2DoJJO2anwZwA2qsfUgRB7+A97MBZINmwUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:72:98:26:1b:75:3a:28:48:36:b7:65:35:d8:b4:b7:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Validity Not Before: Aug 4 01:00:30 2025 GMT Not After : Aug 5 01:00:30 2025 GMT Subject: CN=74a3fb916502d006753bc633f37514f8e7740056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:21:09:20:38:c3:cf:d3:c1:68:34:91:b4:aa: 9f:77:9d:f4:ba:48:5f:d2:4d:e5:83:ff:25:cb:14: 4b:f0:de:f0:95:2b:10:9a:19:fa:74:e1:1c:63:54: d8:56:fe:1a:09:c8:4b:ff:cd:ed:1c:7d:d9:63:bf: 58:a2:f4:5d:a8:34:01:91:57:de:05:e4:32:52:a6: 1a:b9:8b:7f:5d:4e:f5:b1:95:aa:3e:c2:d7:d1:bb: 05:ae:e7:59:c3:73:4d:83:2c:98:b0:19:ff:4e:84: 08:dd:79:f7:82:fa:7e:21:53:1d:52:ec:fc:b5:91: 92:1c:ed:d0:04:0e:0a:ec:79:0a:88:eb:03:b1:cb: 44:a2:f5:d7:e7:88:1d:12:30:90:dc:80:1e:f9:a7: ba:2e:96:38:83:83:d6:2e:61:0a:30:ed:39:87:a1: d0:b9:3e:b9:6e:a2:e2:1d:3b:0d:54:48:f3:3d:96: f6:77:72:35:43:5b:db:e3:d3:e3:54:17:d8:6d:8d: 49:96:86:cf:b8:38:ae:e3:1a:65:d7:a2:99:57:97: 96:15:c4:9e:92:6d:47:0d:00:47:e0:c4:35:fa:ad: 89:12:8f:5a:ed:19:27:73:33:71:ca:ac:92:8d:8f: 3b:a4:1f:b3:76:cc:3c:54:5a:ca:5d:2b:8b:47:6a: 11:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A3:FB:91:65:02:D0:06:75:3B:C6:33:F3:75:14:F8:E7:74:00:56 X509v3 Authority Key Identifier: keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:23:d5:44:44:41:98:12:5e:54:d5:02:12:df:a3:4f:7f:7f: 87:ac:98:b6:f1:8e:c1:03:a4:97:75:01:13:44:2c:c7:e4:89: 06:d4:5b:5a:f3:34:32:a1:45:45:ee:92:26:82:76:ce:73:45: e7:d4:f7:71:42:5e:41:73:59:ce:cb:1d:09:4f:fc:58:83:63: 28:36:d4:ac:c9:e0:9c:4b:09:d0:91:52:dd:92:a7:c5:1a:cd: e1:98:08:f3:85:d9:74:71:d4:65:71:98:43:bb:ef:3f:14:7c: a6:1d:11:27:23:4b:9b:24:9e:30:ca:45:33:93:88:d9:86:1b: e5:63:a2:99:ee:b8:26:2f:6e:78:3e:7d:0b:51:a7:48:15:1d: 5f:61:58:4d:10:68:44:a0:18:7d:04:b8:b6:4d:fc:17:a9:c6: 7a:27:a7:ad:90:f8:d5:17:2c:4a:fb:25:31:12:86:e3:5b:3b: 44:28:ce:c7:f1:df:1a:c5:80:8e:ff:eb:e6:92:73:a1:96:0d: d4:8a:70:1a:8f:11:36:86:48:e4:7d:2e:4e:96:16:23:15:6c: f5:53:45:37:31:7f:77:2e:d4:cd:0b:38:e5:2e:d6:fc:9b:a5: e5:09:aa:aa:9d:67:ee:9b:9c:e2:89:f2:9d:c2:c8:aa:5c:d7: f8:d5:f7:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhymCYbdTooSDa3ZTXYtLfaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3 OThmZDkwHhcNMjUwODA0MDEwMDMwWhcNMjUwODA1MDEwMDMwWjAzMTEwLwYDVQQD Eyg3NGEzZmI5MTY1MDJkMDA2NzUzYmM2MzNmMzc1MTRmOGU3NzQwMDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyEJIDjDz9PBaDSRtKqfd530ukhf 0k3lg/8lyxRL8N7wlSsQmhn6dOEcY1TYVv4aCchL/83tHH3ZY79YovRdqDQBkVfe BeQyUqYauYt/XU71sZWqPsLX0bsFrudZw3NNgyyYsBn/ToQI3Xn3gvp+IVMdUuz8 tZGSHO3QBA4K7HkKiOsDsctEovXX54gdEjCQ3IAe+ae6LpY4g4PWLmEKMO05h6HQ uT65bqLiHTsNVEjzPZb2d3I1Q1vb49PjVBfYbY1JlobPuDiu4xpl16KZV5eWFcSe km1HDQBH4MQ1+q2JEo9a7RknczNxyqySjY87pB+zdsw8VFrKXSuLR2oRmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSj+5FlAtAGdTvGM/N1FPjndABWMB8GA1UdIwQY MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt OTk4NjhjNTEzMjlhLzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANSPVRERB mBJeVNUCEt+jT39/h6yYtvGOwQOkl3UBE0Qsx+SJBtRbWvM0MqFFRe6SJoJ2znNF 59T3cUJeQXNZzssdCU/8WINjKDbUrMngnEsJ0JFS3ZKnxRrN4ZgI84XZdHHUZXGY Q7vvPxR8ph0RJyNLmySeMMpFM5OI2YYb5WOime64Ji9ueD59C1GnSBUdX2FYTRBo RKAYfQS4tk38F6nGeienrZD41RcsSvslMRKG41s7RCjOx/HfGsWAjv/r5pJzoZYN 1IpwGo8RNoZI5H0uTpYWIxVs9VNFNzF/dy7UzQs45S7W/Jul5Qmqqp1n7puc4ony ncLIqlzX+NX3Dg== -----END CERTIFICATE-----Generated at Mon Aug 4 11:05:03 2025 by rpki-client