$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft File: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft (raw, json) Hash identifier: RsFd0LEMH71uH7IEiCGEK4Lb5S7rrgpVfsPys2Khj4E= Subject key identifier: FC:66:0E:DB:95:B0:F8:A0:87:63:F6:3F:44:48:7B:F4:E4:3B:23:A7 Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Certificate serial: 01987374774BAA9F49CD4B7ECEB4BB200110 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft Manifest number: 1637 Signing time: Mon 04 Aug 2025 05:01:09 +0000 Manifest this update: Mon 04 Aug 2025 05:01:09 +0000 Manifest next update: Tue 05 Aug 2025 05:01:09 +0000 Files and hashes: 1: 08x65D62xajmjuWxGOGX--5GFZ4.roa (hash: ku01TCluM3ObD1DEPpsLr/8jGhA1O5espf/zteTKSkk=) 2: 1-fxNLZQMykWE3SLBLsEKwibzn3o.roa (hash: U9t8UfOKITE6D0gBLc/Dtn9zr6EfXzJkxHJL0LBQvTo=) 3: FDmDvOACHulfshItBSDCX5mBYSQ.roa (hash: aexzHKGvD/WM+wZ6/qx7vyWxEHAqx7gswtzEcmCk74k=) 4: FzyJ-A4chBzu8lQqhpLh4dfVe9s.roa (hash: kikBFtCVFZZA5yK1FlsJJ2Y15ol/mIm/K3+f2pwmt3Q=) 5: JRfXlKgZScSlnAP9_s4mWUCHMzI.roa (hash: Yofq9QzaUqxyhMLfnSLcXXtmS3vz0xWVOjl3kItQ1gM=) 6: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl (hash: KiiSfd6faKmMC75MqExZlcYzb9+mvPUChs9SZvS0oAE=) 7: UI2cnhatNs5ZeysmslxEpLBSTew.roa (hash: axZPCQgEFKrONNIyjteNC+Y0RYmX6khaCS5yj1K7lFE=) 8: XIqtTjvuJ5glY39EaIP6KmILhoo.roa (hash: oyK+JoJZ3ZJXn7BAWGpujgyfoF5xI3Ds91YiwWdI2PE=) 9: b_MAVuI29oBciIh7vGGq0NJVEzc.roa (hash: hDxp3S5bhbbLqI6OACypq5MMFaQlI+7lCsYe3tJ2F9c=) 10: dOfaSe3fIYIhGR1xcwXjfUk3OeI.roa (hash: uz8UfxMH6M1zEnn7EFrd8TVCQANQpajV/Ux4YkN59Jk=) 11: ivBw7pb2lERE4O4pT70f-IjK-H8.roa (hash: 9+du4uvg6+sqYU99LVsbimMbdhpdO5ppSVPQO3/HDIY=) 12: vaL0J_r43BzBTm5r8Bo75j0pTF8.roa (hash: 75FzmVXUE4MjGcr9LiSgeGxgqkVwVmsZ6mF1xXYO59Y=) 13: wjhfspu_G4HGizYS_OBNLClt3cU.roa (hash: bxfIFEAR3HaNo4msf1HR2PgJlfyMNGagLyOKrjbfFag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:73:74:77:4b:aa:9f:49:cd:4b:7e:ce:b4:bb:20:01:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Validity Not Before: Aug 4 05:01:09 2025 GMT Not After : Aug 5 05:01:09 2025 GMT Subject: CN=fc660edb95b0f8a08763f63f44487bf4e43b23a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6e:18:8c:b6:23:0a:cb:db:9f:34:52:06:4a: 1a:48:dc:a0:88:8e:3e:0a:10:f3:df:ff:02:3c:ef: 47:9a:58:63:06:66:80:7f:ea:5e:2a:57:a7:f5:61: b5:70:b7:29:93:82:a7:c3:7c:fb:b8:39:d2:0c:80: d3:94:29:51:30:3f:32:bc:fc:19:85:e4:fa:ea:9d: 09:be:89:73:c9:09:fb:14:43:c4:69:b9:1b:a0:b8: 80:83:35:f9:dd:90:37:e5:26:23:96:c7:fe:1a:61: b8:aa:03:16:b2:82:d2:a3:c7:bb:81:4c:ef:c4:5b: e5:f4:d9:12:b0:ed:85:46:dd:c6:d5:b4:91:85:52: 81:31:a6:f5:19:25:3c:20:ed:69:52:5e:69:8a:d9: b8:cd:9b:fe:43:9b:a8:75:2a:78:21:cb:3f:27:2e: 17:df:0f:aa:bc:c0:3d:46:e7:d9:ff:81:6c:6a:8d: 56:a4:b3:2b:3c:52:27:34:88:2f:df:84:0f:c5:bc: a6:db:bf:0f:ce:a1:8e:dd:10:bb:32:95:27:74:5a: b0:67:19:af:5a:5e:9a:02:24:67:2b:52:f2:7d:d4: 6e:27:48:70:8a:ef:a0:68:de:79:53:74:98:bf:19: b3:06:8c:9b:2d:d9:62:89:b5:16:3f:7f:61:8b:bd: 37:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:66:0E:DB:95:B0:F8:A0:87:63:F6:3F:44:48:7B:F4:E4:3B:23:A7 X509v3 Authority Key Identifier: keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:bc:7f:9f:41:1c:56:9e:54:46:cb:c3:22:80:5a:76:f6:83: 0b:ad:14:62:1c:c6:2e:56:4e:d8:55:28:dd:0a:8c:90:db:bd: 59:2b:56:e6:9a:a3:73:a4:c8:d6:79:ad:00:50:a2:ef:b0:7c: 08:44:16:bc:1a:14:24:6b:53:5d:f6:9c:63:a3:85:18:ec:7d: 97:be:9c:dc:fc:e8:c7:19:78:77:72:f8:c1:ac:cd:58:3f:15: f1:a2:01:7d:23:c3:b6:1a:0f:20:c3:c3:94:f1:c1:91:73:4c: e9:8f:79:cc:71:51:24:15:78:11:39:1f:ff:53:52:29:d3:4a: 2b:43:96:11:75:db:67:da:80:72:09:d3:bd:7a:94:7a:04:8e: 6e:39:87:5c:97:61:3a:68:c3:2f:32:05:41:3d:d2:fe:fc:8b: 68:db:de:9e:2c:ef:a0:87:94:69:ec:e5:c6:b4:41:92:98:a9: 78:f9:a9:9c:13:5a:47:88:05:d2:30:69:66:14:8f:18:f8:d7: 7b:4a:62:0a:58:74:d6:f9:4b:5e:a8:94:c3:b9:9f:83:9c:48: 40:fa:b8:4c:e9:d5:40:c9:98:87:38:65:f8:3e:07:a3:a0:cf: 73:96:bd:bd:08:75:09:7c:04:57:60:4f:a5:08:de:32:2f:68: 0e:d3:0a:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhzdHdLqp9JzUt+zrS7IAEQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNDc0YWM3Y2E4NWUwOWMyZDQ4YjMzZTdiZjY2ZjhlZDc2 NGRlMGYwHhcNMjUwODA0MDUwMTA5WhcNMjUwODA1MDUwMTA5WjAzMTEwLwYDVQQD EyhmYzY2MGVkYjk1YjBmOGEwODc2M2Y2M2Y0NDQ4N2JmNGU0M2IyM2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr24YjLYjCsvbnzRSBkoaSNygiI4+ ChDz3/8CPO9HmlhjBmaAf+peKlen9WG1cLcpk4Knw3z7uDnSDIDTlClRMD8yvPwZ heT66p0JvolzyQn7FEPEabkboLiAgzX53ZA35SYjlsf+GmG4qgMWsoLSo8e7gUzv xFvl9NkSsO2FRt3G1bSRhVKBMab1GSU8IO1pUl5pitm4zZv+Q5uodSp4Ics/Jy4X 3w+qvMA9RufZ/4Fsao1WpLMrPFInNIgv34QPxbym278PzqGO3RC7MpUndFqwZxmv Wl6aAiRnK1LyfdRuJ0hwiu+gaN55U3SYvxmzBoybLdliibUWP39hi703XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxmDtuVsPigh2P2P0RIe/TkOyOnMB8GA1UdIwQY MBaAFDJHSsfKheCcLUizPnv2b47XZN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzkt MTJlYzIyYzljNWEyLzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzktMTJlYzIyYzljNWEy LzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLx/n0Ec Vp5URsvDIoBadvaDC60UYhzGLlZO2FUo3QqMkNu9WStW5pqjc6TI1nmtAFCi77B8 CEQWvBoUJGtTXfacY6OFGOx9l76c3Pzoxxl4d3L4wazNWD8V8aIBfSPDthoPIMPD lPHBkXNM6Y95zHFRJBV4ETkf/1NSKdNKK0OWEXXbZ9qAcgnTvXqUegSObjmHXJdh OmjDLzIFQT3S/vyLaNvenizvoIeUaezlxrRBkpipePmpnBNaR4gF0jBpZhSPGPjX e0piClh01vlLXqiUw7mfg5xIQPq4TOnVQMmYhzhl+D4Ho6DPc5a9vQh1CXwEV2BP pQjeMi9oDtMKlg== -----END CERTIFICATE-----Generated at Mon Aug 4 11:19:31 2025 by rpki-client