$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft File: 02AMuv0m_uUGT8ifMB38jjwdPKU.mft (raw, json) Hash identifier: YZCPBL7LOR93GbOBPGpQ4KGaQQ+6tGT/R1nqBKuixMI= Subject key identifier: 3F:49:06:41:C0:4C:A8:97:5A:6B:7E:2A:0B:7F:11:76:43:E3:41:DC Authority key identifier: D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5 Certificate issuer: /CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5 Certificate serial: 019873AACB488DA0A42CA18421E0C6D77629 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft Manifest number: 1626 Signing time: Mon 04 Aug 2025 06:00:29 +0000 Manifest this update: Mon 04 Aug 2025 06:00:29 +0000 Manifest next update: Tue 05 Aug 2025 06:00:29 +0000 Files and hashes: 1: 02AMuv0m_uUGT8ifMB38jjwdPKU.crl (hash: SADU84HvAvF7e+a8ueMVPBY398fTnAo6CreouQqAdD4=) 2: 2WkxZ6d8ewxrLWO8WH12o0AY6xw.roa (hash: nbEjkYORzyFd58OrYmjVC1fHN4kRwapxAIIPY/slelc=) 3: 8elKK2rgNwwXkrg0pHAsC0Str_Y.roa (hash: gbjL4NS8CEtaB75aGSiE2TUcZMbd9WI+VArcCJKxNo4=) 4: AG97hJvhy0UeDTt3HIas70L9MWQ.roa (hash: CpGaF4KcigctK1KLFQXtXWhD0jjodHuaq3LolhI5NC8=) 5: EEkMm6nCb9R4YLtB4IXzgCR8OOM.roa (hash: 7A7HQmXagHkrgjRynPlWf1aNJTOS5cJM4PvFKY2czsg=) 6: JdavXfgS1C88UGPje2KGgh-CbRs.roa (hash: fsvo1+m2SxrjapW7ugn4l/vkPt8HqDS/T913gxJRh4I=) 7: M-yd6Ugm4j37VvR5jMt-KNJrmEI.roa (hash: vqjDdTSN4DxJrQed7BY7JJ0opDc9Ee98YYBmwBxXED4=) 8: Nedx1_M66uIc0vDKNZQnQXlLIdM.roa (hash: zJ8+VfMNsVLvkhPB7kvPUzmVC3uoyAUluiAWRCM46n4=) 9: Qi9XVq-dT2o75N7dfhs2g5GBACU.roa (hash: ZA6fIgi4q3HA9rAbCvC+Xiwj/72PmBX2B2EUlsP/w2Q=) 10: Z3835702684lqYvr6YcO1CBN9v8.roa (hash: ix7qVq4wKUu1ecDe/rFafECXz6RKxGTKJ4zfcl+Dsfw=) 11: jLnip0BdB36NRqrdIhQucDZy8-A.roa (hash: PgGmCULcevmCru0Kv0QVroNMx8/gH95JrLZ6JaAFDWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:73:aa:cb:48:8d:a0:a4:2c:a1:84:21:e0:c6:d7:76:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5 Validity Not Before: Aug 4 06:00:29 2025 GMT Not After : Aug 5 06:00:29 2025 GMT Subject: CN=3f490641c04ca8975a6b7e2a0b7f117643e341dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:19:02:8d:20:45:0a:b0:a0:4e:43:8c:66:50: 04:55:06:2a:bd:8f:b8:0d:68:51:b4:f3:fb:49:86: de:94:f3:97:4f:a2:fb:8d:51:85:76:eb:61:72:25: 48:61:39:1d:75:b7:ba:3a:dc:27:7c:ef:53:5d:e8: 59:26:2b:3e:cb:67:16:ba:fc:ff:dc:25:a3:27:2f: 74:71:f5:60:92:bc:42:9e:65:50:89:77:e6:41:c3: 20:54:a3:f6:fb:e8:35:8b:b7:40:bb:69:d5:de:eb: f5:d2:fb:5c:9e:30:07:97:b4:03:5a:1b:08:a1:48: ad:bf:64:5d:74:65:d8:1a:5d:74:4e:47:81:ec:87: f7:c0:af:b4:52:04:e8:50:27:49:93:2a:ac:80:e4: 92:d1:48:61:29:97:24:af:ea:16:43:39:2d:e4:d2: fd:a1:50:13:3f:f4:6c:28:4e:81:1a:fd:bf:f3:5f: 17:73:d3:68:42:06:3c:d6:bb:02:4b:e5:08:9e:82: cc:e7:32:2f:69:c3:7a:71:4b:c5:7f:e0:d4:ab:97: aa:d1:10:34:88:e9:ea:14:8a:90:b1:8d:9c:e4:2b: 92:67:29:a0:b1:de:a7:9e:d8:83:00:ae:96:ae:24: ab:f4:b9:a0:f5:39:19:bc:a2:a4:d2:40:c1:60:e4: 64:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:49:06:41:C0:4C:A8:97:5A:6B:7E:2A:0B:7F:11:76:43:E3:41:DC X509v3 Authority Key Identifier: keyid:D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:c1:d4:a2:02:7e:3f:e9:58:1b:a3:c3:f9:4e:38:09:2f:77: 40:5a:66:b0:a6:e1:4a:ba:59:59:78:53:a4:60:96:69:25:1e: ff:05:03:4e:3e:fb:8f:3e:c4:93:39:c1:49:05:14:e2:40:08: 96:36:95:c9:ef:c4:21:ee:79:11:1f:fe:00:16:6a:aa:c6:b1: 3c:57:49:6d:b5:ae:27:62:c3:b7:9d:00:88:12:5c:c7:24:e2: 85:07:ec:ae:57:71:dc:72:e4:09:d5:42:61:f6:fd:4a:25:eb: 56:25:11:9c:8b:b9:b0:22:bd:d5:23:d9:d1:67:cd:e3:d4:79: f5:4d:83:ba:ef:f3:bc:f7:0a:25:82:ed:2d:c7:99:b7:43:e8: 4c:36:f3:d4:65:3e:41:17:d9:6a:54:57:26:a6:27:7b:64:e6: fc:88:2e:66:cc:c5:51:e3:33:7b:51:8c:93:e7:3e:59:cf:5c: 9e:04:f1:1a:ba:c8:49:2c:dc:e2:f3:4b:5e:0f:0d:ca:c6:9c: 7a:93:3f:ba:9b:10:ba:91:f1:b7:90:8e:b0:10:45:7c:27:e8: 2c:45:c1:2c:e7:0f:ae:c3:d3:39:e5:8f:d7:0b:d5:2a:9e:04: 5f:7f:38:ba:8f:05:fe:15:b4:89:e0:dd:c0:f2:1f:64:26:76: f1:7a:ad:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhzqstIjaCkLKGEIeDG13YpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNjAwY2JhZmQyNmZlZTUwNjRmYzg5ZjMwMWRmYzhlM2Mx ZDNjYTUwHhcNMjUwODA0MDYwMDI5WhcNMjUwODA1MDYwMDI5WjAzMTEwLwYDVQQD EygzZjQ5MDY0MWMwNGNhODk3NWE2YjdlMmEwYjdmMTE3NjQzZTM0MWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BkCjSBFCrCgTkOMZlAEVQYqvY+4 DWhRtPP7SYbelPOXT6L7jVGFduthciVIYTkddbe6OtwnfO9TXehZJis+y2cWuvz/ 3CWjJy90cfVgkrxCnmVQiXfmQcMgVKP2++g1i7dAu2nV3uv10vtcnjAHl7QDWhsI oUitv2RddGXYGl10TkeB7If3wK+0UgToUCdJkyqsgOSS0UhhKZckr+oWQzkt5NL9 oVATP/RsKE6BGv2/818Xc9NoQgY81rsCS+UInoLM5zIvacN6cUvFf+DUq5eq0RA0 iOnqFIqQsY2c5CuSZymgsd6nntiDAK6WriSr9Lmg9TkZvKKk0kDBYORkTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9JBkHATKiXWmt+Kgt/EXZD40HcMB8GA1UdIwQY MBaAFNNgDLr9Jv7lBk/InzAd/I48HTylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9iNzA2NTgtZTFkYy00OTQ0LWEwNmIt MWM2ODBhZGY3YTI2LzEvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9iNzA2NTgtZTFkYy00OTQ0LWEwNmItMWM2ODBhZGY3YTI2 LzEvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScHUogJ+ P+lYG6PD+U44CS93QFpmsKbhSrpZWXhTpGCWaSUe/wUDTj77jz7EkznBSQUU4kAI ljaVye/EIe55ER/+ABZqqsaxPFdJbbWuJ2LDt50AiBJcxyTihQfsrldx3HLkCdVC Yfb9SiXrViURnIu5sCK91SPZ0WfN49R59U2Duu/zvPcKJYLtLceZt0PoTDbz1GU+ QRfZalRXJqYne2Tm/IguZszFUeMze1GMk+c+Wc9cngTxGrrISSzc4vNLXg8Nysac epM/upsQupHxt5COsBBFfCfoLEXBLOcPrsPTOeWP1wvVKp4EX384uo8F/hW0ieDd wPIfZCZ28Xqt6g== -----END CERTIFICATE-----Generated at Mon Aug 4 14:03:36 2025 by rpki-client