$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft File: 8FIRKM9jSqavp-9S1THz_NVWKPk.mft (raw, json) Hash identifier: N/IqvvdzrQoDNxc2hbImy1X9eaTeaQX/EpL2t8852rQ= Subject key identifier: E4:E5:B8:5A:AC:E8:EF:64:7A:E3:25:44:16:41:51:8B:BA:AB:18:A2 Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 019873E2F11912508EBF76890D2B649F6E0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft Manifest number: 1620 Signing time: Mon 04 Aug 2025 07:01:49 +0000 Manifest this update: Mon 04 Aug 2025 07:01:49 +0000 Manifest next update: Tue 05 Aug 2025 07:01:49 +0000 Files and hashes: 1: 0vpioq7e7IBvU0f7txi-wExHAPw.roa (hash: lCvUWIuH8RdERCkztaN1NhfYOchJDmj9ywnhD1WG0qs=) 2: 1-t-clxlx4vHi76xBwGIh0Y5orug.roa (hash: WGphFqEzeHYQfivrVaHRtOvOzzhN/PDKxrZlm3FuIDA=) 3: 4CCEdgNV-fGWUC_aGHxQwbUsOKQ.roa (hash: zTRmkFZkHzwf+QYURy5/v5Sjyovq0HLSmOwtNQ48L/c=) 4: 8FIRKM9jSqavp-9S1THz_NVWKPk.crl (hash: DOpLhhutvLaAqqCvw6KID6jChjXXsn5NO3MbMljYx7M=) 5: 9oOMh0CjqydkdSKEbK66nXXsu4E.roa (hash: qQJNJWud5A2R6q9LElC5WdsYynVdzga12kQWDH61mWo=) 6: AoQYABlbiRY1s0Gu3McHV58zrpk.roa (hash: 9zDAXKdytFg/3YwoUton7cniFW2Ja9ArE5tJ2skkn+c=) 7: OdGF_e17lYBOCmXmsk6hkXdf7b4.roa (hash: mFKHbPekFFY75D3Eu+1fU9mzEnOZ9+rJaeHup24zW3Q=) 8: PFyByii-LGzRSy90jiJ5mw1207A.roa (hash: gIS/3e5ejAqBGpUPti4f7RxoNdrem0KAE6vwjMubh3s=) 9: Qkq_75MjyviWe2NqgT_-Mwn9gnM.roa (hash: wJb9fi2vDIIR6voDYxFFRDUWuFkEQa98zP1PFmkzpXs=) 10: ScwFXX2rYjT7naQciVMaotJ-UfM.roa (hash: X8Vp96ZEvVObF+OkcOx9P04g9HBNU6my6Pc/b9LR72Y=) 11: rh7_88ku0NVEacOTg4kYRNyhUIs.roa (hash: Uz863y1lKUf+O+OGV8gNQDxIpi4RBI83I9R9FXt5Xp4=) 12: u37q8oxj6d2YnoBLY1VE3CqS2g0.roa (hash: QV9HVDjMgl4TBfOFPjFKF+CTfrUEm6XmvkI/fobJGaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:73:e2:f1:19:12:50:8e:bf:76:89:0d:2b:64:9f:6e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: Aug 4 07:01:49 2025 GMT Not After : Aug 5 07:01:49 2025 GMT Subject: CN=e4e5b85aace8ef647ae325441641518bbaab18a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c1:dc:7f:04:fe:d5:45:44:4a:7c:53:3d:c6: 99:68:b8:fc:76:b5:00:80:9b:cf:1c:3f:70:74:13: 54:cb:53:f8:b7:f7:29:74:ed:fe:55:57:83:bc:a4: 40:91:04:4b:3f:3f:b8:45:97:5d:57:23:31:21:5c: 8f:77:ce:e7:51:ca:f1:a3:f0:76:cb:2c:cc:15:2a: 8a:fb:15:94:2f:b6:a1:63:84:a6:09:bc:ac:00:f8: 9f:1d:1c:db:92:c3:2b:43:60:6c:2b:66:97:b0:ef: 1d:93:74:18:25:b5:d7:79:f9:92:bb:54:53:f1:29: c4:0b:e6:fe:15:cd:b9:f8:29:14:f8:1e:3a:66:b1: ac:93:58:60:93:76:20:b9:53:9e:03:96:38:8d:a4: 71:01:53:a8:b9:d8:66:0d:60:e8:2f:b3:4c:5a:30: 34:cd:8e:49:8c:05:21:2d:66:e6:48:d4:3f:de:38: 39:9c:dd:af:ca:7e:60:12:d5:d4:a1:73:2d:86:a7: 36:57:86:c3:0a:d3:63:d5:bb:53:f3:61:01:99:bb: a8:53:be:76:4b:c2:72:f9:6c:d2:40:34:ac:c0:b9: 01:f3:d3:f2:a2:ed:c4:86:31:55:3d:73:3f:1f:ec: 70:f6:6c:08:0e:65:12:42:1c:ee:d5:71:79:e5:46: ce:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E5:B8:5A:AC:E8:EF:64:7A:E3:25:44:16:41:51:8B:BA:AB:18:A2 X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a8:5f:d5:77:c9:d4:6e:ce:78:45:d8:20:bc:d8:c2:b0:5c: ff:b2:55:d7:09:5f:08:bc:f4:43:5a:aa:cd:83:bb:a0:2f:0c: c3:94:fe:05:cf:24:41:90:a8:82:80:e4:31:1d:f4:af:61:bd: 3e:9d:8d:46:35:a9:28:49:8d:d1:b3:e6:ed:2d:1c:2e:7d:ba: fc:9c:a3:25:bd:71:8e:43:66:ce:17:f2:2f:9f:ec:fb:da:13: a8:7e:78:f0:fa:15:c5:34:e2:ff:56:64:a4:2b:60:61:ef:7f: 12:da:72:e0:f6:c4:13:7e:b6:b8:ca:5e:ed:a8:3f:fd:5c:06: 8f:7a:a6:7a:87:fa:d1:2b:ac:87:24:b5:a6:a2:7d:e9:55:6b: c4:c1:ce:f8:f4:e9:e1:fe:54:41:1c:62:44:c0:8d:47:53:ef: a0:58:c3:86:16:e2:2c:87:73:00:17:e7:6a:60:fb:bb:a0:93: b6:1b:06:3d:41:a6:27:fc:10:63:e9:1b:99:a1:21:43:53:5e: a2:87:19:17:3f:f0:7a:d4:be:e5:b2:fc:53:f9:ff:96:fa:65: 7c:ec:7b:65:b1:ca:e8:1a:42:bf:7e:ff:bb:a0:86:a5:80:ed: d3:24:fe:27:f2:a4:92:09:64:e1:17:aa:e6:34:6f:08:89:12: 5d:87:eb:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhz4vEZElCOv3aJDStkn24OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjUwODA0MDcwMTQ5WhcNMjUwODA1MDcwMTQ5WjAzMTEwLwYDVQQD EyhlNGU1Yjg1YWFjZThlZjY0N2FlMzI1NDQxNjQxNTE4YmJhYWIxOGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sHcfwT+1UVESnxTPcaZaLj8drUA gJvPHD9wdBNUy1P4t/cpdO3+VVeDvKRAkQRLPz+4RZddVyMxIVyPd87nUcrxo/B2 yyzMFSqK+xWUL7ahY4SmCbysAPifHRzbksMrQ2BsK2aXsO8dk3QYJbXXefmSu1RT 8SnEC+b+Fc25+CkU+B46ZrGsk1hgk3YguVOeA5Y4jaRxAVOoudhmDWDoL7NMWjA0 zY5JjAUhLWbmSNQ/3jg5nN2vyn5gEtXUoXMthqc2V4bDCtNj1btT82EBmbuoU752 S8Jy+WzSQDSswLkB89Pyou3EhjFVPXM/H+xw9mwIDmUSQhzu1XF55UbOVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTluFqs6O9keuMlRBZBUYu6qxiiMB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKhf1XfJ 1G7OeEXYILzYwrBc/7JV1wlfCLz0Q1qqzYO7oC8Mw5T+Bc8kQZCogoDkMR30r2G9 Pp2NRjWpKEmN0bPm7S0cLn26/JyjJb1xjkNmzhfyL5/s+9oTqH548PoVxTTi/1Zk pCtgYe9/Etpy4PbEE362uMpe7ag//VwGj3qmeof60SushyS1pqJ96VVrxMHO+PTp 4f5UQRxiRMCNR1PvoFjDhhbiLIdzABfnamD7u6CTthsGPUGmJ/wQY+kbmaEhQ1Ne oocZFz/wetS+5bL8U/n/lvplfOx7ZbHK6BpCv37/u6CGpYDt0yT+J/Kkkglk4Req 5jRvCIkSXYfrBw== -----END CERTIFICATE-----Generated at Mon Aug 4 11:20:04 2025 by rpki-client