$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft File: _97EpGpubk-aktC6Lgs6tWWL4b0.mft (raw, json) Hash identifier: AyWbrumlzdKu6GaOVwVx6pcLFnvbai8Hmu/3twAeL7w= Subject key identifier: 61:58:97:37:C2:1E:F3:15:25:9F:98:A4:72:90:39:26:39:9E:27:1E Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Certificate serial: 0198819E3F61312ECF8F7B4BCA46285C0118 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft Manifest number: 1639 Signing time: Wed 06 Aug 2025 23:01:28 +0000 Manifest this update: Wed 06 Aug 2025 23:01:28 +0000 Manifest next update: Thu 07 Aug 2025 23:01:28 +0000 Files and hashes: 1: 9LGSNE38RZCTyouOtHVx3qVP6lw.roa (hash: ugV2YTVWDidN8y0vBVq2PfGkhQx7PuXVEwNoZCBbGX8=) 2: HToY17_1mZB4ipaCxGJw0bacpFA.roa (hash: P0pZpu59CPWpf2Vzltvzp7viaECZ4fpLz1AQRmpEgTA=) 3: OsAkT1Bjc6Bx57ink5LVscASSVM.roa (hash: Me3jYRS4jKNnlOdyWwLlCaXNsCc57NzdmZ5lT79t3Rw=) 4: RmwlFKm2A6wCOU2tiPLTSzuhAA8.roa (hash: NB+w6tJSmFPHFd2FMxkqFpCOapIk+qQqzfmt3QzOsMk=) 5: UobB1JoTOzUGFpCCZFbxasjgqAA.roa (hash: ms0cbPIRl6WuE78I/a1I+geJkM+CYYhZiVIqQ6+fwVY=) 6: VuROyrWs92eKXOizp2Q-0fnpLR0.roa (hash: fMjWZ/dM7054cYWsnjZNa6zVf7FPSoCGvOyM76Sl6Mc=) 7: VxRGHdP__z9RHajqH60awAUqQgg.roa (hash: tIdE9ZmAuCmbV7t2it8DIWQnm6yvOgpE7cprrHK2On0=) 8: _97EpGpubk-aktC6Lgs6tWWL4b0.crl (hash: 2tAqjSFIzJ6sJmF5NlQitY6vC9txoNJWxNn7GQwzsD0=) 9: pJnO9Ba6alCVKMIllyGL5_n-nHo.roa (hash: cF7/LpWh8txlnJKiWf+FQfbAzOZvclLDIIzD8uyNUD0=) 10: vWqmka3oaZQE1cXhvhKJIPN3ikY.roa (hash: wwmYNtR3Cqpxb6sHd4D0z140EddAwpyxzJ7dHxOqth4=) 11: zwTIjW4kVksFhIqqz0Hm86Td_eI.roa (hash: 4Gmw/YEt79d2ifSjcQjjCNUl4cViPsDbJFWDQ996oV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 20:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:81:9e:3f:61:31:2e:cf:8f:7b:4b:ca:46:28:5c:01:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Validity Not Before: Aug 6 23:01:28 2025 GMT Not After : Aug 7 23:01:28 2025 GMT Subject: CN=61589737c21ef315259f98a472903926399e271e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c9:09:91:69:c1:2e:9e:04:d0:50:81:4d:09: da:a3:df:8c:0f:95:48:51:c9:4b:c9:40:50:7f:9c: 31:72:a1:d6:67:75:41:46:ff:78:5d:72:7f:39:2c: bd:88:35:4b:23:ba:53:65:10:ba:75:50:dc:ff:a6: f3:22:c8:32:b7:ec:18:9c:15:09:45:e1:f2:fe:47: ba:6e:d2:ea:2e:10:2a:e4:94:cb:de:20:ae:97:3e: 4d:0e:22:8d:18:33:f6:dc:0f:97:2b:25:86:92:25: 99:7a:9e:04:a8:7c:34:fe:8b:0a:1d:3c:b9:61:ab: 8b:e7:07:cd:5e:11:ad:9e:03:9d:c0:4f:90:d2:4e: 3a:b1:a2:6c:3e:65:2b:7d:9e:c5:2e:46:99:20:24: d4:9a:b1:dc:18:81:57:99:b2:e4:15:29:53:26:e3: d6:fd:79:fe:47:fc:20:8c:c2:b2:ac:c7:7d:6a:c9: 15:02:ce:d4:55:cd:05:21:28:a3:15:40:da:1d:e5: f0:f6:44:3f:b3:a2:7e:1f:73:cc:04:7c:70:a6:e7: 8f:ad:a5:99:e2:36:87:25:78:31:9e:2b:dc:89:8f: d9:a8:c9:90:5b:b2:fe:b5:a2:19:31:9c:cd:a6:2d: 37:35:d5:83:45:45:24:96:99:6d:f1:bf:95:57:d4: cb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:58:97:37:C2:1E:F3:15:25:9F:98:A4:72:90:39:26:39:9E:27:1E X509v3 Authority Key Identifier: keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:42:eb:eb:bf:d1:7d:55:c3:6e:3c:17:80:8c:1c:a8:cd:b9: 4f:7b:e9:77:af:ec:64:88:30:e1:f6:b1:e4:3a:45:4c:c0:fd: 23:38:79:cf:48:56:8e:b7:7b:2b:b4:3a:96:66:d2:e0:6f:50: 1c:97:d6:4a:15:3e:eb:0b:d8:2d:a5:6c:19:61:9e:fb:ea:a1: 59:ec:c4:46:b6:2a:00:59:58:3c:c2:a5:e4:25:5f:39:68:83: 14:d0:7b:3f:bf:ea:f0:51:a9:b5:51:8a:0a:6f:43:67:f8:4d: 41:f5:8a:82:4a:87:10:2e:88:b1:dd:bf:46:73:28:a7:a1:3f: 66:97:f6:4a:d2:7d:ca:c7:ca:72:1b:63:b8:81:e4:a3:b9:21: 26:37:79:f3:90:aa:ba:0b:8c:1d:a7:a7:09:fb:6a:69:08:f8: ca:24:4d:63:78:aa:fd:9b:6e:b5:21:63:db:79:3b:a0:06:a8: 0a:f3:cc:ac:46:16:07:37:42:89:19:a2:37:b2:ca:20:66:ad: eb:10:e2:d5:66:90:de:62:05:1e:65:44:5c:68:9a:5c:a5:1e: a3:d2:0d:10:d5:d6:e7:1e:90:1f:53:a1:95:39:cb:35:c9:2e: 7d:fc:d2:ff:85:b9:81:57:59:1a:6f:53:ad:71:37:22:b1:a4: 0b:35:b9:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiBnj9hMS7Pj3tLykYoXAEYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4 YmUxYmQwHhcNMjUwODA2MjMwMTI4WhcNMjUwODA3MjMwMTI4WjAzMTEwLwYDVQQD Eyg2MTU4OTczN2MyMWVmMzE1MjU5Zjk4YTQ3MjkwMzkyNjM5OWUyNzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArckJkWnBLp4E0FCBTQnao9+MD5VI UclLyUBQf5wxcqHWZ3VBRv94XXJ/OSy9iDVLI7pTZRC6dVDc/6bzIsgyt+wYnBUJ ReHy/ke6btLqLhAq5JTL3iCulz5NDiKNGDP23A+XKyWGkiWZep4EqHw0/osKHTy5 YauL5wfNXhGtngOdwE+Q0k46saJsPmUrfZ7FLkaZICTUmrHcGIFXmbLkFSlTJuPW /Xn+R/wgjMKyrMd9askVAs7UVc0FISijFUDaHeXw9kQ/s6J+H3PMBHxwpuePraWZ 4jaHJXgxnivciY/ZqMmQW7L+taIZMZzNpi03NdWDRUUklplt8b+VV9TLzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGFYlzfCHvMVJZ+YpHKQOSY5niceMB8GA1UdIwQY MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt N2U4YzZkNGQ5YmVmLzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANELr67/R fVXDbjwXgIwcqM25T3vpd6/sZIgw4fax5DpFTMD9Izh5z0hWjrd7K7Q6lmbS4G9Q HJfWShU+6wvYLaVsGWGe++qhWezERrYqAFlYPMKl5CVfOWiDFNB7P7/q8FGptVGK Cm9DZ/hNQfWKgkqHEC6Isd2/RnMop6E/Zpf2StJ9ysfKchtjuIHko7khJjd585Cq uguMHaenCftqaQj4yiRNY3iq/ZtutSFj23k7oAaoCvPMrEYWBzdCiRmiN7LKIGat 6xDi1WaQ3mIFHmVEXGiaXKUeo9INENXW5x6QH1OhlTnLNckuffzS/4W5gVdZGm9T rXE3IrGkCzW53Q== -----END CERTIFICATE-----Generated at Thu Aug 7 00:40:12 2025 by rpki-client