$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft File: opAORlWrNJpGMrFAcZ3JcjBDFyU.mft (raw, json) Hash identifier: WWDm19P7lSwiDKdW3BRktgylJmtVsk5ZihdyskROzi4= Subject key identifier: CF:F1:87:FD:88:44:38:0C:78:1A:7F:4F:D4:C9:A9:8C:2A:2E:22:53 Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725 Certificate serial: 01987975FCF2EEFD504339CA3B5C9A5614E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft Manifest number: 162A Signing time: Tue 05 Aug 2025 09:00:32 +0000 Manifest this update: Tue 05 Aug 2025 09:00:32 +0000 Manifest next update: Wed 06 Aug 2025 09:00:32 +0000 Files and hashes: 1: 0UXplScy_6bUua8Xwkci_CpGwkM.roa (hash: GRvkp2Rt8JLqAH5NPvZRPj7s1HlR19kYp/7XCNsxyNE=) 2: 14gXO5PLi0LoZ0DYGh9KK795laQ.roa (hash: EARGMMjNyaWuZ1stJfG6h12JcDBEupf11Ssao/d8baM=) 3: 8loW5HN3rlQsgDTApUmX4zxMYVo.roa (hash: LKWZ8SK1V+gZE1QR5SYwO3Jiw4zJ7265yXeEGQlZ8zw=) 4: Ah3KLJm-LKDPU2A-ukfbltAbHHE.roa (hash: swE4PQqkYwr3g++5aj4+DHREVDMSOVCdaIbmuqijBx8=) 5: DDAn0V8SSoUAqqE5fzd6yTf6vio.roa (hash: rVCSbprtHlhgRB9AzbTbTHTH0ZbS3aC9A5gq4r3O14U=) 6: Ptk1juvR6AU_vl6lr4RswBAQK74.roa (hash: 7usWDVylXyYylG7CWiaUKOpGSZfMt4/Ahvv6lHEknXQ=) 7: gH9l_Olu7Z11QNfATlwel8_lHng.roa (hash: Qy7a8ybAWRGH/C9L4lBi8o0qao1M7eUnSgkK9WeGPzo=) 8: kwOU6n2U0tlOOT5S3nqF-ntVFYQ.roa (hash: tJWykZcdes0s9amE0to1DThjyvp5rw7kHFWEXdqGdBw=) 9: opAORlWrNJpGMrFAcZ3JcjBDFyU.crl (hash: K8UaFE9qk17HRbl5FUitMGmjqdyOxVefDd4bYnPlCA0=) 10: u3fVEc-RK0U4DFHiTlygDyKj4rI.roa (hash: Us98OeKKFK/pD4hLHv0TSn5RO0cC7LOagG2XI+ndne0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 09:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:79:75:fc:f2:ee:fd:50:43:39:ca:3b:5c:9a:56:14:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2900e4655ab349a4632b140719dc97230431725 Validity Not Before: Aug 5 09:00:32 2025 GMT Not After : Aug 6 09:00:32 2025 GMT Subject: CN=cff187fd8844380c781a7f4fd4c9a98c2a2e2253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0e:41:7f:28:df:1b:dd:4e:3f:46:62:60:2b: 98:b7:e7:08:d1:b9:39:a5:51:28:15:e7:05:a1:9a: b3:12:e1:15:b8:43:1b:7c:b6:1c:6c:d7:35:48:69: 46:ac:aa:f7:eb:7d:0d:87:56:ee:12:64:7d:3d:e1: 4c:59:29:68:ba:f2:f0:44:a3:82:ce:f2:fd:e7:96: e4:e4:fd:a3:41:34:8a:6b:a3:28:89:df:d7:b7:30: aa:22:e2:4e:09:4e:52:72:09:a4:98:64:ab:f8:fd: 2e:de:97:8e:c3:3f:0f:bd:b1:a4:37:e2:69:c4:26: d8:88:17:35:ea:4f:6f:28:05:d1:61:4f:b0:64:64: 18:b0:e0:be:e5:e4:12:41:f0:ad:6d:1e:01:68:40: d8:b6:5d:df:54:a4:18:9d:86:32:89:62:c2:ec:63: 4d:a2:dd:5d:96:b0:13:a4:c2:0b:7d:67:44:5f:c7: 18:6d:68:8f:0e:e9:1f:46:be:f8:83:27:21:ed:06: 2e:b9:b2:f4:17:5f:a0:d5:49:a0:2a:d1:60:f7:75: 53:08:10:c5:22:fc:a4:4c:53:b8:08:b7:91:f2:fc: df:59:01:98:e1:6f:a4:d2:58:e1:ea:bf:dc:4e:75: 01:f6:c0:34:28:4f:22:6e:b7:25:55:9e:0e:4f:10: 1f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F1:87:FD:88:44:38:0C:78:1A:7F:4F:D4:C9:A9:8C:2A:2E:22:53 X509v3 Authority Key Identifier: keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:59:5d:84:c0:5e:8b:dd:ba:cb:a3:5f:22:6f:9f:7b:1d:45: 99:cd:b0:e1:ad:60:15:bd:8d:a1:b1:a2:ce:58:19:5c:f6:73: 47:96:3f:64:94:2e:10:22:e9:9d:86:f2:7a:85:63:75:b1:50: e9:00:7d:d1:6d:fa:68:da:d5:d3:94:63:e6:90:50:f1:b0:b2: ac:0d:94:02:c4:38:d5:2c:67:1c:f8:72:4f:3d:3c:eb:71:1b: 31:e7:6d:47:d8:a8:1e:cd:14:87:46:de:df:1e:29:d0:ab:af: ff:f3:ff:2a:51:38:21:5b:b9:f4:26:cf:71:91:bb:b2:eb:ec: 27:d7:46:72:3f:89:c7:d9:47:49:28:76:31:70:86:52:0a:83: 57:b8:98:45:82:d7:a0:13:90:53:96:80:08:8a:64:02:65:63: e1:89:b1:b1:53:a8:f7:48:94:f6:84:a6:02:ac:c0:6c:24:8c: a4:20:46:57:df:4e:1c:69:9d:e2:b4:35:fa:02:6f:d0:b9:71: e5:2e:e5:6d:d2:53:57:37:1d:29:8f:b6:a3:40:6a:69:0b:96: 44:25:be:94:93:98:96:49:5b:97:69:8d:0b:44:33:e6:88:fb: 94:f9:c2:73:6a:cd:db:88:90:58:1f:92:47:b8:dc:18:55:b4: 25:71:21:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh5dfzy7v1QQznKO1yaVhTiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyOTAwZTQ2NTVhYjM0OWE0NjMyYjE0MDcxOWRjOTcyMzA0 MzE3MjUwHhcNMjUwODA1MDkwMDMyWhcNMjUwODA2MDkwMDMyWjAzMTEwLwYDVQQD EyhjZmYxODdmZDg4NDQzODBjNzgxYTdmNGZkNGM5YTk4YzJhMmUyMjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw5BfyjfG91OP0ZiYCuYt+cI0bk5 pVEoFecFoZqzEuEVuEMbfLYcbNc1SGlGrKr3630Nh1buEmR9PeFMWSlouvLwRKOC zvL955bk5P2jQTSKa6Moid/XtzCqIuJOCU5ScgmkmGSr+P0u3peOwz8PvbGkN+Jp xCbYiBc16k9vKAXRYU+wZGQYsOC+5eQSQfCtbR4BaEDYtl3fVKQYnYYyiWLC7GNN ot1dlrATpMILfWdEX8cYbWiPDukfRr74gych7QYuubL0F1+g1UmgKtFg93VTCBDF IvykTFO4CLeR8vzfWQGY4W+k0ljh6r/cTnUB9sA0KE8ibrclVZ4OTxAfNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/xh/2IRDgMeBp/T9TJqYwqLiJTMB8GA1UdIwQY MBaAFKKQDkZVqzSaRjKxQHGdyXIwQxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMt ZjRjNWZjM2NhMmM0LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMtZjRjNWZjM2NhMmM0 LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcVldhMBe i926y6NfIm+fex1Fmc2w4a1gFb2NobGizlgZXPZzR5Y/ZJQuECLpnYbyeoVjdbFQ 6QB90W36aNrV05Rj5pBQ8bCyrA2UAsQ41SxnHPhyTz0863EbMedtR9ioHs0Uh0be 3x4p0Kuv//P/KlE4IVu59CbPcZG7suvsJ9dGcj+Jx9lHSSh2MXCGUgqDV7iYRYLX oBOQU5aACIpkAmVj4YmxsVOo90iU9oSmAqzAbCSMpCBGV99OHGmd4rQ1+gJv0Llx 5S7lbdJTVzcdKY+2o0BqaQuWRCW+lJOYlklbl2mNC0Qz5oj7lPnCc2rN24iQWB+S R7jcGFW0JXEhWw== -----END CERTIFICATE-----Generated at Tue Aug 5 16:38:44 2025 by rpki-client