$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft File: a8XefXJVt9WCYMZaEgsWTvEO-QM.mft (raw, json) Hash identifier: Ip3DBqCs6Ohs8KPhmJFQJEg4xu5dwGdd+/TlOKYJYaM= Subject key identifier: 42:8D:28:AC:79:DB:C0:25:17:0D:6E:73:E2:FF:0D:D8:0A:6F:34:09 Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Certificate serial: 01987A1BD34A8FE91094C889796A0D733655 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft Manifest number: 15F1 Signing time: Tue 05 Aug 2025 12:01:40 +0000 Manifest this update: Tue 05 Aug 2025 12:01:40 +0000 Manifest next update: Wed 06 Aug 2025 12:01:40 +0000 Files and hashes: 1: 12ToQcSPt7mcdwlwu8cks0_4omc.roa (hash: Iyr2cE2tf2K+xaBK2dhfD2MWZhPJHAOvhdyF3JqR+/g=) 2: 5ZYhCNxqOm04hmY0BhngKxN9rig.roa (hash: 83J35QD4/t+gUfggZnoS3qCNRY62Cfjrx/Jm442KIdY=) 3: BEDotW58dYr2IkiSMhZSaCy78tU.roa (hash: XyNzheZYLo9o54ao6bWUNrKJS5W5TlIfmYW8SbTPE9U=) 4: DNFKKqPzY2tTxyq4ZF-e6ESwWBk.roa (hash: ONyXaG/qy9WX6Bit7PbMeuasymNM8i3asJe1STaYw+o=) 5: HQby7lGCxVhcsYrFBxtLvu1Nq1s.roa (hash: OEoyOXMuUI9gzJHQlRaFw5QR3hyZ9zizJ0Zhg109soQ=) 6: KEB7URRNcLIkdHFl8_NaQFzoCUc.roa (hash: 8o0J9qbfKon/Y8q8sQm0uMymQ1kVnwb8u5ia9INGr/U=) 7: RVuh9Ovnia6HGIxuY5C4mqQkVzw.roa (hash: 7MdQXOdkGadK2Vo4n1LYddNyvg9R887clmJN5QnKDO0=) 8: _4iJCnTkrZTLi3Znw6No51nUp0U.roa (hash: q5ypixYuURsWaauidvKopOxQLyMvMh9Ff8agaEGE8Z8=) 9: a8XefXJVt9WCYMZaEgsWTvEO-QM.crl (hash: DDxktsipJxjmRF608qXWrCqMbQKcvKP36FeR+jlp94s=) 10: egyYxAR3bwmsGgeknwOtvs63Vmw.roa (hash: XurIkmwZSfSrHBi1j2SOabRmxdimDBrxAVpSXYwSmK8=) 11: gCwZCj5y4eEHhiE3OdNG143EtPw.roa (hash: bJxdVgp0WUK1yUG+3MFHdMNTBJUCc3SJjDGJmr3bN5s=) 12: kWxL8-0FaQ5asnDLfivzWKH4-z8.roa (hash: aTbkIB4IPS1IGAIXN2uxEpuYorOcI3bZmMM6X6TsyjM=) 13: wM1Yw5nFuvuJTOAzQjCj5rN5Pm0.roa (hash: ent4AXHk/p6bQe6GuoAZTq2KLI9u7gMCUsO1EmVjq8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 12:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7a:1b:d3:4a:8f:e9:10:94:c8:89:79:6a:0d:73:36:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Validity Not Before: Aug 5 12:01:40 2025 GMT Not After : Aug 6 12:01:40 2025 GMT Subject: CN=428d28ac79dbc025170d6e73e2ff0dd80a6f3409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:72:e2:9e:8e:b0:ff:e4:79:c4:42:c8:fd:9e: 1d:fe:a2:f7:37:9b:ab:61:02:7b:69:ac:61:31:f4: 2e:e1:93:47:64:5b:a8:b3:aa:c1:3c:f8:81:d3:fb: 31:12:1c:20:d9:02:ab:57:9c:17:b9:78:ce:de:c0: 6b:c7:ff:d0:98:42:6c:78:7d:ac:bd:ed:73:42:74: 9f:ab:c9:04:a7:c1:8b:9c:4f:87:e1:6c:f8:de:4a: ab:45:b9:5d:4f:69:36:d4:8f:f3:67:e3:3e:31:5f: 89:6b:5f:eb:ca:9c:60:d4:a0:c1:ab:ea:fd:42:af: 35:dd:bf:1f:33:d6:b7:31:ec:6b:38:f0:24:57:d7: 3f:87:5f:29:3c:7d:a2:89:bf:ea:7b:4d:cb:a1:2b: 30:4a:bf:df:de:ad:33:fe:7a:35:07:1a:f7:ed:30: d9:23:c9:98:b8:68:8d:8f:d2:ad:bc:25:a4:23:77: 41:34:5e:b9:f1:b1:3a:0e:c2:5c:88:b7:78:10:0c: ed:81:38:9c:47:93:15:95:8d:cb:e1:8e:02:77:72: ca:35:95:11:e7:52:70:2a:a3:72:bc:34:1d:f0:f6: 00:db:31:9d:6b:05:e2:d3:19:cb:4f:c3:d8:d7:e7: 53:c1:0c:d6:ce:99:b9:ea:f8:b0:c3:2b:89:2f:fb: c7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8D:28:AC:79:DB:C0:25:17:0D:6E:73:E2:FF:0D:D8:0A:6F:34:09 X509v3 Authority Key Identifier: keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:f1:a3:83:4b:63:f6:17:f8:5e:d8:f2:95:67:3f:5d:72:dd: ad:fc:01:aa:8a:38:2d:ea:54:ff:de:4e:fe:ba:33:23:1a:83: e2:f1:82:ba:d4:86:7a:f8:0b:07:86:f4:74:f0:f2:cf:8d:7f: fc:db:6c:64:f2:88:f1:a4:99:76:ec:a8:34:5a:15:7c:09:65: b5:f9:a6:d0:a7:1d:f8:5d:c0:6f:ff:b7:c3:f8:9c:78:19:f2: 60:be:90:fc:1e:2e:7e:b6:1c:d4:01:00:55:57:86:b4:aa:31: aa:13:13:ed:78:7e:16:90:fd:b2:f9:10:9a:17:bb:14:68:68: 74:4b:e6:33:35:76:54:12:fb:7f:cb:ef:30:2f:bf:76:cf:61: a8:2a:11:78:cb:3a:53:14:ab:37:68:1e:df:35:dd:c6:9c:f8: e0:5d:52:22:8a:b2:79:9d:0f:3a:f1:f3:33:64:da:19:5c:a1: 1a:39:0b:91:63:b4:d4:06:b5:1b:30:f9:94:77:63:a5:17:bc: d7:c5:b9:1a:41:83:1a:0f:83:d0:80:04:62:a4:27:dc:a2:11: e4:f5:92:2c:00:67:2c:cf:d8:11:8c:13:6b:36:5c:11:23:30: 9c:5f:21:b7:39:50:2b:63:32:8c:e2:46:22:c3:44:82:f1:8f: 37:41:47:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh6G9NKj+kQlMiJeWoNczZVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw ZWY5MDMwHhcNMjUwODA1MTIwMTQwWhcNMjUwODA2MTIwMTQwWjAzMTEwLwYDVQQD Eyg0MjhkMjhhYzc5ZGJjMDI1MTcwZDZlNzNlMmZmMGRkODBhNmYzNDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3Lino6w/+R5xELI/Z4d/qL3N5ur YQJ7aaxhMfQu4ZNHZFuos6rBPPiB0/sxEhwg2QKrV5wXuXjO3sBrx//QmEJseH2s ve1zQnSfq8kEp8GLnE+H4Wz43kqrRbldT2k21I/zZ+M+MV+Ja1/rypxg1KDBq+r9 Qq813b8fM9a3MexrOPAkV9c/h18pPH2iib/qe03LoSswSr/f3q0z/no1Bxr37TDZ I8mYuGiNj9KtvCWkI3dBNF658bE6DsJciLd4EAztgTicR5MVlY3L4Y4Cd3LKNZUR 51JwKqNyvDQd8PYA2zGdawXi0xnLT8PY1+dTwQzWzpm56viwwyuJL/vH7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKNKKx528AlFw1uc+L/DdgKbzQJMB8GA1UdIwQY MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt ZmRmNjYzOGQyYzA0LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0 LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdfGjg0tj 9hf4XtjylWc/XXLdrfwBqoo4LepU/95O/rozIxqD4vGCutSGevgLB4b0dPDyz41/ /NtsZPKI8aSZduyoNFoVfAlltfmm0Kcd+F3Ab/+3w/iceBnyYL6Q/B4ufrYc1AEA VVeGtKoxqhMT7Xh+FpD9svkQmhe7FGhodEvmMzV2VBL7f8vvMC+/ds9hqCoReMs6 UxSrN2ge3zXdxpz44F1SIoqyeZ0POvHzM2TaGVyhGjkLkWO01Aa1GzD5lHdjpRe8 18W5GkGDGg+D0IAEYqQn3KIR5PWSLABnLM/YEYwTazZcESMwnF8htzlQK2MyjOJG IsNEgvGPN0FH6g== -----END CERTIFICATE-----Generated at Tue Aug 5 17:17:04 2025 by rpki-client