$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft File: _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json) Hash identifier: xdMulEcxTuuG3mNmX/XLYzTgMEbmrqcge7iyitsYcgI= Subject key identifier: C2:9E:55:1F:78:4F:F3:DF:77:8A:DA:F3:14:63:BE:3A:55:84:BD:CC Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Certificate serial: 01987D1BF4EFEFEDF2980FD7B0BCB6B0E37B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft Manifest number: 15E3 Signing time: Wed 06 Aug 2025 02:00:40 +0000 Manifest this update: Wed 06 Aug 2025 02:00:40 +0000 Manifest next update: Thu 07 Aug 2025 02:00:40 +0000 Files and hashes: 1: F_cRK7_FuJ1SOPF-eStGPWamodQ.roa (hash: bwgPCaYQdCUVOLDgCvOHRKGxaq7IRtIbjKPrwDwOiGI=) 2: Itnfb5cOidqPHmrm9ItGmwZzqpE.roa (hash: iss4kvemyRAUGLNEu7CN/erlN+DUp3hzgmc3aCXZAfU=) 3: JaFKfYKslg0WUVhBG8hHu6LqTvw.roa (hash: 4GgDdTVxQxqewTP0EOz1RIPWIQ2EEWazgc1qxopxzyA=) 4: NiD2SDjoMC5kCqhJ0LqUs7rzMnw.roa (hash: 9+KHXzf6QQ6hX/XBCMhmaRntprEYELpBh7Oa+Qw01T4=) 5: ShXwELNENSFmGBdjnWGg5NqouYI.roa (hash: CvtdGpDGnIEThk2qtR3nRVqJ7XKDlnHvbjdMw3b5GEg=) 6: U6O4fPn6akIpWmgc4yJT0O6kLpo.roa (hash: yofA2VyhfSO3CESlgcLfFamVAKarRdUA7fzOcVSh6T0=) 7: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: 0afeYfTHqZ544e7jOKBrHrj+1sTFf1efAs+4qRAjdr0=) 8: ccs7nyLFaW5A18K4O1qhpOVnDF0.roa (hash: kVq8Rt+cDTCddUdzX9poi4CfmBkJSUYFh1PJxqkXE8A=) 9: u3VJR1_M7JzYx842qLGTM0en5V0.roa (hash: qbP/xDwKS1NUr1YSZhW1L+ZrVrT39XIk/W4+EAm8kOI=) 10: y4Nw6VYuIuUZOv6I685fKqZhbWQ.roa (hash: JM0RAslsFdrhEKUBmY+ywDM/Jo6q24Igd7pWLFOkC9Q=) 11: zIstcjB0l5dXMsxLJF-PmySyWoY.roa (hash: sZKTonBPo728p5sx2a7KurcsOwIi7QOOMBd8o6TZnS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 02:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7d:1b:f4:ef:ef:ed:f2:98:0f:d7:b0:bc:b6:b0:e3:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Validity Not Before: Aug 6 02:00:40 2025 GMT Not After : Aug 7 02:00:40 2025 GMT Subject: CN=c29e551f784ff3df778adaf31463be3a5584bdcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:10:76:00:7c:56:15:84:e5:83:d6:fa:c5:0e: 5b:7d:db:a1:37:78:dd:48:92:64:b9:74:37:bd:51: 74:3d:1f:e2:3d:0f:1a:e7:c4:9f:57:38:ed:9a:e8: 34:f9:c6:0c:19:89:1c:0f:2a:15:cc:b6:6c:a7:3f: 08:10:e8:21:db:3e:1c:45:21:07:d9:c8:ca:89:99: f8:3f:da:3c:79:79:d6:b7:fd:93:56:72:24:db:67: 9a:20:f4:ee:ef:a9:0a:ca:8e:59:14:d4:c1:c1:bf: 5a:cb:b3:38:d8:ec:b6:cb:cc:f5:32:a8:97:a6:5b: 84:c5:7a:4f:f5:b5:03:b5:15:b5:5c:bb:b3:84:c8: e2:60:89:ed:71:59:5f:ad:8c:a4:1f:74:30:83:aa: 74:36:3c:4a:11:84:ba:4e:1d:51:61:b6:d3:e2:71: 8d:1b:14:8f:88:b0:12:3c:0e:1f:1a:5f:0f:2c:4a: e9:ee:6c:f5:83:d7:d9:70:42:5d:55:a3:45:e3:0d: 71:aa:94:ce:4c:4e:88:11:b4:19:f5:35:7f:bb:1a: b2:c1:bc:03:6e:22:80:db:f1:6d:53:33:70:03:64: 21:ad:6a:9a:c7:cf:64:5b:29:d3:cf:4d:d5:5d:6c: 23:b2:fc:fc:05:f2:4e:6c:35:65:9d:08:5e:0d:ed: 79:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9E:55:1F:78:4F:F3:DF:77:8A:DA:F3:14:63:BE:3A:55:84:BD:CC X509v3 Authority Key Identifier: keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:2c:54:51:12:54:e7:f7:10:81:ce:69:1c:06:05:3d:c0:90: 47:f7:f0:30:d3:e5:ea:3d:35:44:86:2f:27:1a:59:48:30:a7: d4:f0:8c:db:99:35:4a:9f:97:19:7c:77:7b:69:10:ec:12:7f: d3:79:de:ed:c8:ca:5e:cd:e1:83:53:6e:c6:c0:02:a5:6d:fe: cb:ad:97:02:14:54:44:19:15:bd:0f:dc:9c:72:a7:35:75:be: 38:31:b4:3e:4e:47:86:bb:21:c5:ee:1f:5b:f6:b3:9b:ea:b8: f9:6a:b9:45:54:07:da:43:73:1b:17:2b:85:3d:ca:b7:00:51: df:d6:f6:58:e2:ea:b7:06:67:10:24:79:31:52:19:68:09:2a: 2f:11:41:c2:6d:14:b1:21:13:ef:e2:14:be:74:2c:83:e2:9d: 86:bc:4e:d3:42:91:e3:79:9b:60:0a:d1:4f:82:40:aa:6b:6d: 70:46:0a:b7:ba:f2:69:bf:43:0f:d5:fa:1e:39:20:dc:2f:10: 6a:9b:1f:ec:9a:4c:15:bf:cb:76:ce:af:43:43:41:62:81:44: 29:17:51:b5:b5:1f:1e:20:bf:29:eb:0c:ec:e8:b0:b8:62:cf: ee:e4:66:e5:36:15:07:5b:43:63:c4:0b:ca:ae:68:2e:2c:92: 51:df:bf:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh9G/Tv7+3ymA/XsLy2sON7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw YTJiN2UwHhcNMjUwODA2MDIwMDQwWhcNMjUwODA3MDIwMDQwWjAzMTEwLwYDVQQD EyhjMjllNTUxZjc4NGZmM2RmNzc4YWRhZjMxNDYzYmUzYTU1ODRiZGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohB2AHxWFYTlg9b6xQ5bfduhN3jd SJJkuXQ3vVF0PR/iPQ8a58SfVzjtmug0+cYMGYkcDyoVzLZspz8IEOgh2z4cRSEH 2cjKiZn4P9o8eXnWt/2TVnIk22eaIPTu76kKyo5ZFNTBwb9ay7M42Oy2y8z1MqiX pluExXpP9bUDtRW1XLuzhMjiYIntcVlfrYykH3Qwg6p0NjxKEYS6Th1RYbbT4nGN GxSPiLASPA4fGl8PLErp7mz1g9fZcEJdVaNF4w1xqpTOTE6IEbQZ9TV/uxqywbwD biKA2/FtUzNwA2QhrWqax89kWynTz03VXWwjsvz8BfJObDVlnQheDe15SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKeVR94T/Pfd4ra8xRjvjpVhL3MMB8GA1UdIwQY MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct NzNmZDNiYzE5YWE3LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3 LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiyxUURJU 5/cQgc5pHAYFPcCQR/fwMNPl6j01RIYvJxpZSDCn1PCM25k1Sp+XGXx3e2kQ7BJ/ 03ne7cjKXs3hg1NuxsACpW3+y62XAhRURBkVvQ/cnHKnNXW+ODG0Pk5Hhrshxe4f W/azm+q4+Wq5RVQH2kNzGxcrhT3KtwBR39b2WOLqtwZnECR5MVIZaAkqLxFBwm0U sSET7+IUvnQsg+KdhrxO00KR43mbYArRT4JAqmttcEYKt7ryab9DD9X6Hjkg3C8Q apsf7JpMFb/Lds6vQ0NBYoFEKRdRtbUfHiC/KesM7OiwuGLP7uRm5TYVB1tDY8QL yq5oLiySUd+/vw== -----END CERTIFICATE-----Generated at Wed Aug 6 11:07:27 2025 by rpki-client