$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft File: hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft (raw, json) Hash identifier: UiAgFXdRgzDWULDm28JNjIIk3l0kuZ5ZhQ3LhHHn+2g= Subject key identifier: 1D:C1:7C:84:30:91:A0:E6:58:90:63:7F:60:ED:13:0D:5A:E4:D8:4B Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd Certificate serial: 01989335BDE75CD804271B2162A5901DB26E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft Manifest number: 1247 Signing time: Sun 10 Aug 2025 09:00:29 +0000 Manifest this update: Sun 10 Aug 2025 09:00:29 +0000 Manifest next update: Mon 11 Aug 2025 09:00:29 +0000 Files and hashes: 1: 2Il6q-ZqOuI80bOhmO2ATk_4gjA.roa (hash: qZ2AvjwfuN5RofSpAulT+zvOokvk9hdo9R5gBG6wVV8=) 2: EqxVNlycylxq6ufI9ng2ltdK1KM.roa (hash: b+kpuQsONfGhMD7qgwxZkbzW/4IKkzNE5v/myC4W0qY=) 3: MceCU4XPd0t7fhZxTxvxReumv1Q.roa (hash: 5TdX80iYVUkF2JY7Z9ZEOYjAnRhS8f4vWckTIPnEXdo=) 4: QdYIwbhgXZFZDGrsD1bCfWnJfNM.roa (hash: GAa3KktDwm+TlBojUO7F6LnOQMJ0zxC/VLgeFCn23pI=) 5: V1rb0y6iu1TTOsIZQYPUPITNZdc.roa (hash: 4TLj9uQX2T55ymBodPD3FK/tTeE67Ngmw9g4awglSqU=) 6: Yjrt4HsK8wh6pJI81KOUWlnSEwg.roa (hash: XmuwPChIn1UvgMab/4oMWsQTN7bkJ51y5zUd1xVolH0=) 7: aaic0TQ08KDxqNotu0QjynGFp8k.roa (hash: y+rn4gyMmixGkyVVHgb8Zj+xOMFFm7BJm3FAMYf/M4M=) 8: cO2-NOuH2RV4sPciOdoA32su67Q.roa (hash: 9jc3V+7f0q1/c2NMI1faaA1MEEx9FCl4Vp7wxvOlyNU=) 9: euovkC8FzqkWizkBlJiIPuOidbU.roa (hash: NVQ3tcOFWDZctMMGjmKl2U9mGUa0NK9LjFLKrJC2iHM=) 10: gdNItxWNsM4KiGU05OylhksApCc.roa (hash: WiPvUqderzx9CicZMrqZIDKRBrczrFFx57GnwN1V0lI=) 11: hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl (hash: mMUEc/GhubmT4nZAvoy4vRRg1TYiiFcKydlKWP9Hd7I=) 12: oMpZucICfk-8ZesIjg26RzH9z8Q.roa (hash: avfjdtl0mm9+afn2EBtC58m5oIaLp8/rBFhWdaYQq6o=) 13: zYeF4EOXDH9wga2Hl1a9xt43c_E.roa (hash: qprf7Kh7V9oLipnyoiqapOwT3fD2c8ij+cCs23g5KeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 11 Aug 2025 08:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:93:35:bd:e7:5c:d8:04:27:1b:21:62:a5:90:1d:b2:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd Validity Not Before: Aug 10 09:00:29 2025 GMT Not After : Aug 11 09:00:29 2025 GMT Subject: CN=1dc17c843091a0e65890637f60ed130d5ae4d84b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c8:88:d9:54:33:46:a0:3a:65:9e:2f:e3:60: 65:aa:c9:0e:c0:84:ac:93:6a:a5:df:d0:d4:00:b5: cb:a1:17:eb:c9:e9:c1:c9:db:e8:7b:48:c5:7f:11: ee:6c:bf:2d:6d:c5:d6:f4:ac:1d:04:4d:2e:30:8b: 5a:41:8a:2b:6a:c8:8e:bf:fd:e2:ef:51:db:93:40: 67:69:04:58:85:d2:8b:c8:cb:03:b2:de:99:f6:8f: ba:df:aa:30:86:c4:4b:e1:3e:69:09:3a:75:11:21: 01:b3:c0:33:07:da:13:93:d6:18:8e:5e:e9:12:29: 55:24:db:1d:7a:1d:03:84:de:3d:0e:d0:9b:60:49: 4b:08:0d:cf:53:da:35:33:4b:54:41:56:86:94:1e: 29:8c:ab:c8:f7:f9:48:6d:ba:7c:01:ce:9b:5a:49: fb:02:d6:f5:9d:36:e6:aa:7f:03:12:34:4e:68:16: 4e:95:60:b5:f5:11:d6:4c:63:6c:a1:24:4e:09:6f: f0:ec:7b:fb:7a:62:ed:e8:8a:6f:9b:d3:4d:6d:74: 1f:0a:63:80:f4:18:1c:79:a9:a0:6f:a2:f1:1d:14: 6d:06:c6:7f:19:41:8b:ab:38:86:1c:f0:80:0e:ec: b4:d9:1d:3b:7b:1f:6a:59:7f:46:48:ca:ea:36:90: 2b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C1:7C:84:30:91:A0:E6:58:90:63:7F:60:ED:13:0D:5A:E4:D8:4B X509v3 Authority Key Identifier: keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:65:9a:cf:cb:99:6f:86:f9:64:d1:0c:0b:65:f5:24:7d:cb: 6a:cb:0e:5d:81:29:d5:3a:3b:ee:ef:0d:4a:b7:ab:74:a8:c4: 8d:00:69:28:b3:d7:c8:d4:b0:24:57:b5:aa:71:10:ee:c3:8f: 5e:3f:49:4d:03:75:df:94:13:f2:b8:f8:3e:74:2b:1c:5b:9a: 68:70:d5:63:df:a8:66:f0:71:7e:a0:e9:a1:c0:78:6b:2f:56: 98:77:d9:18:3b:10:2c:32:c2:38:52:4a:bb:ad:b5:a9:d7:8d: 3e:a0:08:3f:f7:ab:3a:a8:ae:cf:e9:fa:ee:7c:c7:7d:a7:b6: 84:af:0d:e0:c9:45:20:c1:c9:5e:8e:31:79:47:0f:96:7c:3a: 25:4a:5d:9a:30:6f:00:f4:a3:73:5d:8c:1c:ee:0e:f9:ba:b8: 81:aa:a9:05:eb:2a:ce:ef:cc:04:ec:96:e8:17:a5:86:9f:eb: c9:24:7b:f1:d8:c3:7c:73:4f:d7:e0:45:64:66:f6:c2:69:82: 44:4c:29:4c:11:3c:1e:b4:0a:c0:ed:44:92:5d:3f:e9:b3:4b: a0:07:3d:95:0a:0e:58:d6:7f:75:90:0e:41:e2:db:b5:58:44: 7f:3d:38:a4:50:31:15:ce:f6:9a:10:62:b7:fd:3d:57:30:4f: ef:25:79:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiTNb3nXNgEJxshYqWQHbJuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZDBlNzYzZjkzNWMxNzE2OTRmMTcyMDU2ZWI0NDIwOWRi MmUyY2QwHhcNMjUwODEwMDkwMDI5WhcNMjUwODExMDkwMDI5WjAzMTEwLwYDVQQD EygxZGMxN2M4NDMwOTFhMGU2NTg5MDYzN2Y2MGVkMTMwZDVhZTRkODRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMiI2VQzRqA6ZZ4v42BlqskOwISs k2ql39DUALXLoRfryenBydvoe0jFfxHubL8tbcXW9KwdBE0uMItaQYorasiOv/3i 71Hbk0BnaQRYhdKLyMsDst6Z9o+636owhsRL4T5pCTp1ESEBs8AzB9oTk9YYjl7p EilVJNsdeh0DhN49DtCbYElLCA3PU9o1M0tUQVaGlB4pjKvI9/lIbbp8Ac6bWkn7 Atb1nTbmqn8DEjROaBZOlWC19RHWTGNsoSROCW/w7Hv7emLt6Ipvm9NNbXQfCmOA 9Bgceamgb6LxHRRtBsZ/GUGLqziGHPCADuy02R07ex9qWX9GSMrqNpArfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3BfIQwkaDmWJBjf2DtEw1a5NhLMB8GA1UdIwQY MBaAFIXQ52P5NcFxaU8XIFbrRCCdsuLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2Qt ZjEyODM1ZjAyNDdiLzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2QtZjEyODM1ZjAyNDdi LzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGWaz8uZ b4b5ZNEMC2X1JH3LassOXYEp1To77u8NSrerdKjEjQBpKLPXyNSwJFe1qnEQ7sOP Xj9JTQN135QT8rj4PnQrHFuaaHDVY9+oZvBxfqDpocB4ay9WmHfZGDsQLDLCOFJK u621qdeNPqAIP/erOqiuz+n67nzHfae2hK8N4MlFIMHJXo4xeUcPlnw6JUpdmjBv APSjc12MHO4O+bq4gaqpBesqzu/MBOyW6Belhp/rySR78djDfHNP1+BFZGb2wmmC REwpTBE8HrQKwO1Ekl0/6bNLoAc9lQoOWNZ/dZAOQeLbtVhEfz04pFAxFc72mhBi t/09VzBP7yV5GA== -----END CERTIFICATE-----Generated at Sun Aug 10 16:03:43 2025 by rpki-client