$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft File: sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json) Hash identifier: LBd6WtxI8oZ5OxZ6U9dtOjVn5SMbcPqcZonVb/rMsyQ= Subject key identifier: B8:C6:D7:82:15:A4:A6:CE:C6:46:0A:0A:E3:A7:0A:EF:5D:22:F4:82 Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 01988EEC21BB77993FB5D8364DDC4249EF82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft Manifest number: 1227 Signing time: Sat 09 Aug 2025 13:01:36 +0000 Manifest this update: Sat 09 Aug 2025 13:01:36 +0000 Manifest next update: Sun 10 Aug 2025 13:01:36 +0000 Files and hashes: 1: 0Masll6bbXJowlWVdStYbs2tx6E.roa (hash: Rro7robf4OQi2SafD/+wvUIv6rGO8rIKSIcGQQxuDhQ=) 2: GbtphNgjK0vdnL4zh4ndNFpMq98.roa (hash: u7HLBqxJEFs0R6rzUwZQDioPq2mneZLMKiZ7WWFYBQg=) 3: HIdYT19grrvIrsLvbv9c-RyNoYM.roa (hash: gMWRLPsAhHALB5C0CyTnC2YpfuJ8OqfVcPAvIC+/69E=) 4: OUt5ZB5ErN_qim9RPT1gdy6_fsA.roa (hash: jUTt0o3pm+pyLvb6Ukj+eNNJ2nE69gsAdM4+2ox59R8=) 5: R_OlpiLM8AchN0LvgG-brNSPeok.roa (hash: Ha2jaeCRdAo3cD1S+TwOcwXV50R2/YikiY9fj+5QfSk=) 6: T-i1HnnAiZlugAgaa37LNPgeYyA.roa (hash: JZrI/oiF2iHcbj3PFgspIgoRlLncbc7mtmuIlUx+R6U=) 7: _SIVUqOCoAD9QAv9j_FoehRwqCQ.roa (hash: sSOjeJjB03HHhjQxuEaox3x4XiuehbGVKeOJQiC5f04=) 8: euxOi9Xp3n7AyiSfCEP-xOv9hDo.roa (hash: hqClLQ+yTS1bqIE58Fj5bi8zXosgwwjJT2D8au7VfQ0=) 9: oTdRqWCGB_YZL-zzysNmCsUI8OU.roa (hash: Z3CxIW13t+FC0u78Ynw/b8NpKjP4IiiiZzM5isLuBQ4=) 10: opjBwsfQwaZJKVugJJ6MF-vgLQw.roa (hash: MNlxdTCVbR2yhgEH9HVAaomJahjdfDcmr5j99PJZjnc=) 11: orAKfjl1fXW4_m23ZUuKco1b-BY.roa (hash: SPzJt2ubmkoDTY2BGadUCK43CwJNkqbV55KtpGnjnsE=) 12: piqnuODF7lhN690__V-7lYt7O9g.roa (hash: bJ0by5gF5+d/INxTw0HKrWzPPNlfAOi7lGQ6bR/NpSU=) 13: qjtTNxOEgSr0b6Weeb9JJHyFnhM.roa (hash: Eb0gxKs3qeMLVvYaIgIGm1oY4DsjaHktiucw1gfNHns=) 14: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: x5JcFE1smILVcU88lEPMQniPtP9SPdH/mdvEI0ktW48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 10 Aug 2025 05:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:8e:ec:21:bb:77:99:3f:b5:d8:36:4d:dc:42:49:ef:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Aug 9 13:01:36 2025 GMT Not After : Aug 10 13:01:36 2025 GMT Subject: CN=b8c6d78215a4a6cec6460a0ae3a70aef5d22f482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:93:65:9c:58:1f:bb:1e:8c:c5:3c:f2:aa:13: 2c:53:10:07:88:72:e2:16:12:5f:42:2d:7b:0c:45: 90:9c:16:6f:c3:26:d4:1e:21:85:45:b4:a7:07:c5: 3f:16:bf:e9:3a:42:be:b5:52:95:0d:8a:f5:88:6d: 68:cb:53:86:9f:54:d1:9c:df:f6:4e:fe:80:09:12: df:49:7f:d5:db:ce:b4:a2:54:fc:b8:18:3f:69:a4: b5:05:d7:ec:0e:6a:0b:9d:d4:71:63:f8:ff:31:d2: 12:a2:9a:26:a6:af:da:80:13:49:09:5e:86:96:bc: 0c:db:3b:bd:a8:31:82:2f:51:d4:d0:cc:a0:0e:bd: 85:ec:0d:60:c9:e2:e4:a2:0d:88:67:11:77:ec:11: a5:57:0d:ac:49:75:23:ad:21:f1:02:dc:a2:86:56: 9e:83:c6:87:23:51:64:1c:80:5d:f8:bb:c5:8e:33: cf:9c:62:e8:c3:a0:76:41:58:62:4f:11:77:f1:15: 53:b9:66:19:ea:2d:b5:18:97:ab:c7:22:f2:46:5c: 0f:f9:32:bd:5e:0e:b6:11:78:78:59:4a:b9:8c:e5: 38:35:3b:7d:e5:a8:93:22:98:ea:6f:5e:65:84:25: 8e:74:0b:c5:6c:26:e9:7f:27:20:fd:2c:7c:b2:5f: 70:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C6:D7:82:15:A4:A6:CE:C6:46:0A:0A:E3:A7:0A:EF:5D:22:F4:82 X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:c2:0f:7f:31:c9:51:85:f1:8b:3c:33:a7:95:74:ca:0a:2f: 74:ba:61:5d:33:38:47:de:15:68:63:ed:8a:4d:e9:45:65:3c: c2:7e:f3:95:a6:be:c1:82:02:60:12:bc:a4:78:73:70:fe:ba: 41:8e:58:5b:ad:4d:30:29:cb:08:38:d7:01:1e:5e:a1:eb:82: b4:0c:9d:d6:b0:a0:10:d3:c6:5f:de:c2:6e:22:02:17:eb:fe: 78:42:76:89:95:09:1f:a4:5c:bd:e1:27:3b:a7:f1:db:88:98: b9:c0:89:b6:aa:b0:e5:31:5d:ff:b4:62:21:39:97:f9:47:0b: 0a:c8:d2:79:3d:b3:51:95:d5:01:ce:d0:25:19:55:cd:e3:c8: 15:4b:40:f1:f5:36:80:1f:d0:f1:85:3e:3d:45:87:73:12:ca: 46:b8:2a:e7:25:db:4f:99:a2:fb:6a:c4:45:13:65:c9:94:61: 0f:38:c8:55:50:ca:03:d5:20:a0:2d:f4:32:f4:8b:60:11:6a: 5f:2f:c4:60:ff:1c:68:76:59:e4:f7:4b:bd:b2:8c:27:ec:21: 52:e4:41:7a:11:00:c3:09:e9:1d:bc:ac:0a:99:68:4f:51:65: 80:10:34:94:3a:77:5a:9a:bc:5e:fe:3b:f0:1c:dc:29:46:01: d0:04:04:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiO7CG7d5k/tdg2TdxCSe+CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjUwODA5MTMwMTM2WhcNMjUwODEwMTMwMTM2WjAzMTEwLwYDVQQD EyhiOGM2ZDc4MjE1YTRhNmNlYzY0NjBhMGFlM2E3MGFlZjVkMjJmNDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZNlnFgfux6MxTzyqhMsUxAHiHLi FhJfQi17DEWQnBZvwybUHiGFRbSnB8U/Fr/pOkK+tVKVDYr1iG1oy1OGn1TRnN/2 Tv6ACRLfSX/V2860olT8uBg/aaS1BdfsDmoLndRxY/j/MdISopompq/agBNJCV6G lrwM2zu9qDGCL1HU0MygDr2F7A1gyeLkog2IZxF37BGlVw2sSXUjrSHxAtyihlae g8aHI1FkHIBd+LvFjjPPnGLow6B2QVhiTxF38RVTuWYZ6i21GJerxyLyRlwP+TK9 Xg62EXh4WUq5jOU4NTt95aiTIpjqb15lhCWOdAvFbCbpfycg/Sx8sl9wEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjG14IVpKbOxkYKCuOnCu9dIvSCMB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHcIPfzHJ UYXxizwzp5V0ygovdLphXTM4R94VaGPtik3pRWU8wn7zlaa+wYICYBK8pHhzcP66 QY5YW61NMCnLCDjXAR5eoeuCtAyd1rCgENPGX97CbiICF+v+eEJ2iZUJH6RcveEn O6fx24iYucCJtqqw5TFd/7RiITmX+UcLCsjSeT2zUZXVAc7QJRlVzePIFUtA8fU2 gB/Q8YU+PUWHcxLKRrgq5yXbT5mi+2rERRNlyZRhDzjIVVDKA9UgoC30MvSLYBFq Xy/EYP8caHZZ5PdLvbKMJ+whUuRBehEAwwnpHbysCploT1FlgBA0lDp3Wpq8Xv47 8BzcKUYB0AQEJg== -----END CERTIFICATE-----Generated at Sat Aug 9 15:13:53 2025 by rpki-client