$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft File: pnhXc98xO5FxG_a8WxSezCRrnok.mft (raw, json) Hash identifier: OdlvtSdHolPk24jOxNOJypD5u4+jt5c3UtO2XzQX65E= Subject key identifier: 2D:5A:22:25:D5:B0:00:0E:D7:DC:66:54:C4:3D:98:88:DC:03:3B:AF Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Certificate serial: 01987B9BDF5B32B059F2BD320086011CD838 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft Manifest number: 13E4 Signing time: Tue 05 Aug 2025 19:01:09 +0000 Manifest this update: Tue 05 Aug 2025 19:01:09 +0000 Manifest next update: Wed 06 Aug 2025 19:01:09 +0000 Files and hashes: 1: 4_O_iIpyAI9RehObq-pOpadb0Oc.roa (hash: yk0faU3G873g+gLSQoGVoe7NYYyCWEaHzHI6ZIk9UdY=) 2: 7loUqY3SMQ476AvW8cBj_oE5D0w.roa (hash: 9ZWiK7Ya0oQoJXKuXssFNZZZ1jcO9WaxjH/2eSSyYlw=) 3: 9qXJnie35SdfH2J2EgodKBngTzA.roa (hash: jwDaD5ZgcucjZdcdoISWLpA3Zdrcncz7G1jWAlDHN4k=) 4: _K6pKy4r_yxn6KKjdedN6hKQIRc.roa (hash: Fa8PiwPRQ/Nbg/tMa4sLtAZckTKFYG8hQ2oLAm3z+YE=) 5: eeGo9wragRSvkLaXijzUVv6g1UQ.roa (hash: f0fCuBwmYqh4E9JpX2SXK0IGaTdlCqkrpCwPLzLM7U8=) 6: f_BAmJDU6YD_W-jGGFTEv2Fs7Ak.roa (hash: PaLYZLAv0TrU+Bsc9bxTmK6PnOfA5lCBIqcJSl9Ay7o=) 7: h0Rq-64YdH2Rhgx8VqQPxecaOJk.roa (hash: +OMPPDfPiGbQBs5xm10WtKzO2XvkhzUC6VL8TFg0R8M=) 8: p7CrYRPqjfqg5-SpOOWgZYcH7pg.roa (hash: VxeYJO6+oO8JTtkcjhdpm2dOlDG12rU/cm/baKhjYqs=) 9: pnhXc98xO5FxG_a8WxSezCRrnok.crl (hash: Ckx3aj/peIxh3lgMG/UGKxcqNUXwPCefNo/7opbwQ5s=) 10: vm5i6AVzmYzAz9qPwbnD4VrLfVA.roa (hash: VDQ8oeDiLzJU7KaKEM2DHEI37PMjg/GP0JQI1knZDEc=) 11: yj9vr2VnE10QnxtDsz-n2QVr0i4.roa (hash: oY4OEejijqth0Kn/mWSI257F9MR4bW3yyLCjseFCr/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 14:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7b:9b:df:5b:32:b0:59:f2:bd:32:00:86:01:1c:d8:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Validity Not Before: Aug 5 19:01:09 2025 GMT Not After : Aug 6 19:01:09 2025 GMT Subject: CN=2d5a2225d5b0000ed7dc6654c43d9888dc033baf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a3:45:89:7d:a7:49:99:05:c7:4e:38:4b:59: 20:88:4c:d8:f9:0e:7c:01:9a:cf:41:7b:d3:b4:d9: 77:0b:d0:03:9e:99:21:e1:e8:7d:08:eb:b8:5d:21: f3:e9:9c:68:ef:b3:b4:66:37:63:fc:2f:88:d2:ad: 9d:7c:d3:aa:a5:28:59:7a:dd:b1:15:1c:fc:a6:e4: be:36:da:fe:2f:46:9a:9a:31:e2:3c:cd:31:ca:33: 22:f0:c1:36:f9:87:5b:2a:96:1b:60:67:c3:c6:5a: 91:93:d4:2e:4a:d4:68:b0:73:e7:fa:27:c4:41:fb: 4d:a7:1a:c2:e9:61:65:a6:4d:ca:b5:64:a8:3b:5f: 2d:70:98:c3:83:b6:93:b8:f8:74:5e:66:d1:ff:bf: de:44:7a:7c:dd:a5:a1:5e:a6:16:32:9e:d7:76:5c: 8f:c2:ec:ce:0f:ce:6d:5b:a0:5f:3e:96:24:aa:5b: a3:2a:73:11:10:af:1a:84:10:6e:a6:f5:d2:a6:17: fb:6c:9c:fe:bd:ca:cb:fe:98:e1:c8:67:bd:12:6f: c7:31:fa:13:ef:c7:c2:67:a4:e4:af:6b:ef:74:84: 2a:21:ba:24:f2:1a:95:e8:16:bf:06:61:e3:06:e6: 17:86:0f:e8:4b:1c:2d:09:40:4e:24:fc:58:d3:6e: 15:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:5A:22:25:D5:B0:00:0E:D7:DC:66:54:C4:3D:98:88:DC:03:3B:AF X509v3 Authority Key Identifier: keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:26:9b:27:a0:55:83:ab:8d:b8:de:2b:e5:28:ff:e5:98:a7: 3a:d1:94:05:a4:2b:34:7d:16:24:cc:e7:de:e8:a5:c6:8a:2f: 13:8c:b5:88:9f:46:49:4d:62:61:22:36:fc:c9:14:5b:80:ec: dc:b8:f4:40:ac:6e:ae:1c:62:3c:a1:ab:1a:6f:4c:0b:a9:25: ee:67:7f:fc:32:ce:42:2d:26:b7:36:af:cc:76:e0:4a:0e:02: 7d:7c:b6:d1:18:cc:bd:3d:12:66:ad:1f:ef:17:61:c5:9c:67: f8:b0:d5:29:6c:3f:ad:dc:64:44:21:51:a6:a1:b7:fc:c0:6f: 51:f6:ad:ac:20:52:1a:f2:87:cf:25:ce:ce:c3:7c:8e:e8:16: fa:80:1c:93:bd:e7:23:d4:e9:cf:9d:bf:54:1e:a5:be:4a:ad: 0f:16:60:c9:58:78:c0:7d:22:e8:fb:d1:dd:b2:79:e8:75:50: 75:7f:06:d2:3e:a2:42:86:17:d2:27:e0:b2:e5:fb:6f:89:4b: dd:fb:11:e3:36:86:fd:66:ba:35:ae:03:48:e4:b7:c0:fd:45: 8c:6e:00:6b:bd:40:ad:c8:b7:f0:91:8a:bf:08:b2:32:53:0e: 55:a7:5f:17:e9:02:9c:19:2d:af:dd:04:77:c5:c1:83:83:7e: eb:0e:9a:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh7m99bMrBZ8r0yAIYBHNg4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Nzg1NzczZGYzMTNiOTE3MTFiZjZiYzViMTQ5ZWNjMjQ2 YjllODkwHhcNMjUwODA1MTkwMTA5WhcNMjUwODA2MTkwMTA5WjAzMTEwLwYDVQQD EygyZDVhMjIyNWQ1YjAwMDBlZDdkYzY2NTRjNDNkOTg4OGRjMDMzYmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qNFiX2nSZkFx044S1kgiEzY+Q58 AZrPQXvTtNl3C9ADnpkh4eh9COu4XSHz6Zxo77O0Zjdj/C+I0q2dfNOqpShZet2x FRz8puS+Ntr+L0aamjHiPM0xyjMi8ME2+YdbKpYbYGfDxlqRk9QuStRosHPn+ifE QftNpxrC6WFlpk3KtWSoO18tcJjDg7aTuPh0XmbR/7/eRHp83aWhXqYWMp7XdlyP wuzOD85tW6BfPpYkqlujKnMREK8ahBBupvXSphf7bJz+vcrL/pjhyGe9Em/HMfoT 78fCZ6Tkr2vvdIQqIbok8hqV6Ba/BmHjBuYXhg/oSxwtCUBOJPxY024VzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1aIiXVsAAO19xmVMQ9mIjcAzuvMB8GA1UdIwQY MBaAFKZ4V3PfMTuRcRv2vFsUnswka56JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEt ZDc1ODY5YzBjNzFlLzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEtZDc1ODY5YzBjNzFl LzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHyabJ6BV g6uNuN4r5Sj/5ZinOtGUBaQrNH0WJMzn3uilxoovE4y1iJ9GSU1iYSI2/MkUW4Ds 3Lj0QKxurhxiPKGrGm9MC6kl7md//DLOQi0mtzavzHbgSg4CfXy20RjMvT0SZq0f 7xdhxZxn+LDVKWw/rdxkRCFRpqG3/MBvUfatrCBSGvKHzyXOzsN8jugW+oAck73n I9Tpz52/VB6lvkqtDxZgyVh4wH0i6PvR3bJ56HVQdX8G0j6iQoYX0ifgsuX7b4lL 3fsR4zaG/Wa6Na4DSOS3wP1FjG4Aa71Arci38JGKvwiyMlMOVadfF+kCnBktr90E d8XBg4N+6w6aNw== -----END CERTIFICATE-----Generated at Tue Aug 5 23:04:41 2025 by rpki-client