$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft File: tIUv-6fVfFqK-7bqW-r33-wMFFo.mft (raw, json) Hash identifier: WOQP9cn4JrEOEgVUYeYvMfAB8c1yzNezjg/OiXBbmkY= Subject key identifier: 7F:22:5E:6D:89:37:39:E9:D0:33:FD:EF:46:69:1C:13:94:95:46:31 Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Certificate serial: 01987A1B1AB73308C084001889D2B2D0E6A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft Manifest number: 162F Signing time: Tue 05 Aug 2025 12:00:53 +0000 Manifest this update: Tue 05 Aug 2025 12:00:53 +0000 Manifest next update: Wed 06 Aug 2025 12:00:53 +0000 Files and hashes: 1: 2zBG6wv0zKBe2XlbGkfLL9rOdtY.roa (hash: lxNpEB+wfb/SASGgTTjYX3zTxUdrCP8FyxAXU//G0JE=) 2: 60ZaPiBpi8SxBTjOjQUT9FiEU2Q.roa (hash: +EenJI8/Zu0itO/r18F94M+NWWU8CW03dUIDwunEbUc=) 3: EU2O-Gd0BV713EAdFoGJuGMnLgQ.roa (hash: DIGhFlsty46rXCRlbLUopCZPIy0Ap7bO0kln0jsUUZQ=) 4: O3sXFCWDkxRLQArJVgciZYJOH2k.roa (hash: wEiLpu8rEygqvBvHCRoBqicZ9xgf2J+eV7J8nj+KxjA=) 5: ZjHl0XpQM8CCJz6Om67G0wOmvS4.roa (hash: xCetPcOL8RFsZEGexQBgMW05eQfuM1TVnSNp6oyXZtQ=) 6: d8mFLNhZassFfsIT0V6Pg-FoNgA.roa (hash: G1lxk+WJgE19vtZBUhgAhwauP4CikNyKzPmcQ0hwXlc=) 7: dEvm44MVXindQlOEmPEQUDFIhOs.roa (hash: dVgBBC/Rmim2eB3c1PNCO34aKUguzhPQDH4vqUewLA0=) 8: l1wLvb6NKoGEYg4t8n0m6fJ0nkM.roa (hash: ql0IO639qJqy1cMjdHcoEEjUejhdun3XvEvt+WT91vI=) 9: nf_J-Be6PvK26ukKjJl6IQe1MJY.roa (hash: 0NfHfYZttT9eDOJu1RyDhX+/FDw371Nzr/BlGE9d+BA=) 10: tIUv-6fVfFqK-7bqW-r33-wMFFo.crl (hash: 57xmBscx25SDwh8A4A3Tddn6iEEVVyRrU2BDszKaX+A=) 11: w7JADU6oCGh6YbUdtkn1AWlz8C8.roa (hash: BeTxZ9eibtqN9brjaSZeCdnih1w74ddiTrBxnDrR2hk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7a:1b:1a:b7:33:08:c0:84:00:18:89:d2:b2:d0:e6:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Validity Not Before: Aug 5 12:00:53 2025 GMT Not After : Aug 6 12:00:53 2025 GMT Subject: CN=7f225e6d893739e9d033fdef46691c1394954631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d7:ba:64:81:12:da:df:3a:02:70:67:65:b1: bf:9d:d7:b9:79:a6:0e:08:0c:5a:02:bd:ee:09:71: 97:52:a9:fc:c6:ce:ec:f8:ae:8d:a4:e6:3d:65:17: 8b:fd:8e:10:04:81:ad:cd:20:50:7d:42:a5:fa:b2: c3:8e:06:d7:dc:61:8b:56:2a:0a:25:ed:77:4e:f3: 54:f7:c6:c2:e4:66:d4:56:32:0b:e9:69:06:97:ec: 8f:21:60:d9:78:7d:50:44:db:9d:4c:22:3c:01:21: 1e:52:5b:41:a0:2b:d8:11:99:9e:79:f0:ec:5d:a9: 1d:1c:0b:a9:bf:fe:c8:e2:7a:86:f4:68:c6:c6:d3: b3:d8:61:65:86:01:15:df:da:70:c6:ec:19:f7:13: 9c:2a:70:08:a4:60:ef:62:ea:44:a2:d2:ca:03:5f: 80:ac:9f:c6:59:dc:b8:dd:9c:1f:45:78:c5:14:ec: 3d:bb:62:8a:e9:29:04:8f:3e:62:82:94:4e:6a:81: 58:35:b7:c1:62:d8:04:72:37:bf:3d:c0:f7:01:88: 96:65:f3:b3:3f:dd:c2:7c:10:e4:9f:ec:0b:7c:f7: 6c:1c:d3:dd:0a:09:6e:d3:d3:6e:99:94:c9:4e:26: 37:54:fb:78:e7:28:df:0f:95:6e:8f:48:6f:30:90: 16:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:22:5E:6D:89:37:39:E9:D0:33:FD:EF:46:69:1C:13:94:95:46:31 X509v3 Authority Key Identifier: keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:01:2d:d7:2e:e3:dc:dc:af:f7:16:94:ec:24:f9:01:7d:63: 31:e8:0b:d9:19:fe:a7:3c:f9:e9:9a:13:21:9d:be:7a:1a:af: e8:ce:f3:16:2e:0a:7b:02:d6:09:0d:e2:cd:b5:4e:cf:1c:be: 8c:44:40:14:4c:79:e2:4e:5e:83:94:a7:99:85:1b:34:0b:ad: 2d:42:1d:b7:53:09:a5:6d:8c:dc:a0:70:56:f0:0a:40:30:36: ca:08:7b:43:a2:4f:92:5d:f8:58:b5:60:7c:34:59:ba:7a:4f: d8:2a:93:90:f5:c6:d8:c1:9e:df:c8:34:ae:4d:14:17:44:31: 7a:b2:70:5e:36:04:cc:65:2a:7e:5f:24:48:76:3a:5f:d9:8e: 86:a2:7f:0a:5a:23:0f:5a:a9:5b:05:08:70:89:07:07:1b:c2: 11:f8:1a:15:f6:7c:f4:44:ba:8b:0c:37:8c:57:e5:f3:0f:c7: f6:25:9b:3c:eb:fe:fd:3f:39:01:10:31:b8:2f:72:37:cc:31: fc:3c:b8:c6:22:44:ea:35:f3:bd:33:a1:1a:75:c8:7f:ae:60: 5a:66:05:da:f4:0c:86:dd:d2:9d:d5:8f:2b:75:74:97:eb:34: 7d:4f:47:66:38:9e:92:06:a5:63:bd:a5:46:8f:34:1e:ad:e3: d0:8d:3a:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh6Gxq3MwjAhAAYidKy0OaoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODUyZmZiYTdkNTdjNWE4YWZiYjZlYTViZWFmN2RmZWMw YzE0NWEwHhcNMjUwODA1MTIwMDUzWhcNMjUwODA2MTIwMDUzWjAzMTEwLwYDVQQD Eyg3ZjIyNWU2ZDg5MzczOWU5ZDAzM2ZkZWY0NjY5MWMxMzk0OTU0NjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNe6ZIES2t86AnBnZbG/nde5eaYO CAxaAr3uCXGXUqn8xs7s+K6NpOY9ZReL/Y4QBIGtzSBQfUKl+rLDjgbX3GGLVioK Je13TvNU98bC5GbUVjIL6WkGl+yPIWDZeH1QRNudTCI8ASEeUltBoCvYEZmeefDs XakdHAupv/7I4nqG9GjGxtOz2GFlhgEV39pwxuwZ9xOcKnAIpGDvYupEotLKA1+A rJ/GWdy43ZwfRXjFFOw9u2KK6SkEjz5igpROaoFYNbfBYtgEcje/PcD3AYiWZfOz P93CfBDkn+wLfPdsHNPdCglu09NumZTJTiY3VPt45yjfD5Vuj0hvMJAWhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH8iXm2JNznp0DP970ZpHBOUlUYxMB8GA1UdIwQY MBaAFLSFL/un1Xxaivu26lvq99/sDBRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQt ZjcxMDM4ZTk2N2E0LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQtZjcxMDM4ZTk2N2E0 LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQEt1y7j 3Nyv9xaU7CT5AX1jMegL2Rn+pzz56ZoTIZ2+ehqv6M7zFi4KewLWCQ3izbVOzxy+ jERAFEx54k5eg5SnmYUbNAutLUIdt1MJpW2M3KBwVvAKQDA2ygh7Q6JPkl34WLVg fDRZunpP2CqTkPXG2MGe38g0rk0UF0QxerJwXjYEzGUqfl8kSHY6X9mOhqJ/Cloj D1qpWwUIcIkHBxvCEfgaFfZ89ES6iww3jFfl8w/H9iWbPOv+/T85ARAxuC9yN8wx /Dy4xiJE6jXzvTOhGnXIf65gWmYF2vQMht3SndWPK3V0l+s0fU9HZjiekgalY72l Ro80Hq3j0I06/A== -----END CERTIFICATE-----Generated at Tue Aug 5 20:08:40 2025 by rpki-client