$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft File: sMIK4drMoxgVsnRwKSfBpanbx7M.mft (raw, json) Hash identifier: 0B9vYXUdRq8QvOlGC1ZuujUmqftIDkKKgfHBbfg4zfM= Subject key identifier: 6F:73:AC:D6:3F:82:ED:12:3C:17:44:09:BF:15:A1:67:CC:BC:CC:8C Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Certificate serial: 01987C09B932C28E8D48C9509D2C74F8A2AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft Manifest number: 162E Signing time: Tue 05 Aug 2025 21:01:08 +0000 Manifest this update: Tue 05 Aug 2025 21:01:08 +0000 Manifest next update: Wed 06 Aug 2025 21:01:08 +0000 Files and hashes: 1: BO-bzW2V5HfZnpDWCOZRREj0_aA.roa (hash: bBvM5GD33JW26g6UBHC38zwmrN/wxvFNIrA/ZVP1z3g=) 2: D2VP3boIbKOt_7fZmoGwBMd0j_E.roa (hash: 5B9i3Ekd388l3dq3yF+uoTeTOTbzf9g6nU3q4mHoYKI=) 3: KDntMwv7lfN57GwH3c-ooOZ7MV8.roa (hash: N8ZIBiU8gH7tSdeMv2oT8+5VHr8ZvOaPGXUGzn1qd6o=) 4: MKXE3l_kRrUK-SEa0SjlnZgrzOY.roa (hash: qB75ATBjq0bvGr3VuX9ZJkiNF1i/cky+GUiK1V7um9s=) 5: OMLGm3M8AukdVmECZgGAm5oBI6w.roa (hash: NhtCtzcMBYjPL2amj6HhHMrktNr+dPVzL27OzOSW9VY=) 6: QhEieVCa4VzXwRS2R-uT3VD69zA.roa (hash: g7EksG6Y5xUVpGTxJtSk1SiYEQY9x4uAiGIMcbCmQ/k=) 7: T_vGm-YR8rSAG_LKyG-LL0j3jZY.roa (hash: ctLCD3mPPm9ORV/MIVYXQC7GReMvIOdcov6IyRw8Un0=) 8: VT5Wd_pqOJ9dH5ke9coXfMElArk.roa (hash: fLcCO/2FWRaPE55k8VUjCjI94f4/oSwtLUtlY9+MVT8=) 9: ZwvgwSFitJnn0NI2TLMjAG1OYEI.roa (hash: 3EAQTTBdwC0en0ttbPcWmRtInqoUrBVPVbUH2J6E2Tg=) 10: i2Cr6PSWUcoNruWdbdR97Em0Dh4.roa (hash: kTy26coV3ftFQPHtpIaAlqr+Ns/2fmpdvjWPntGul4A=) 11: sMIK4drMoxgVsnRwKSfBpanbx7M.crl (hash: GccVNqG+ZNuYkUsPcJTzJ3ny39sCULVAnmM2OOTj9kU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 21:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7c:09:b9:32:c2:8e:8d:48:c9:50:9d:2c:74:f8:a2:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Validity Not Before: Aug 5 21:01:08 2025 GMT Not After : Aug 6 21:01:08 2025 GMT Subject: CN=6f73acd63f82ed123c174409bf15a167ccbccc8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:db:be:4c:58:9c:3f:8a:37:7e:42:23:91:2e: b5:a1:3a:07:a9:fd:11:01:6d:47:41:06:63:db:12: d8:fa:32:db:f7:82:fa:47:a8:5a:6b:c2:63:c0:4e: 0f:c2:30:4a:dd:a7:34:29:e0:cb:d3:e0:8d:13:b5: c3:5c:05:82:73:7b:71:96:b0:7c:ea:8b:d5:ae:95: 07:7f:f7:ee:6d:30:e5:4e:41:8f:7d:c5:47:fd:bc: 51:22:4a:bf:22:a4:a1:5a:05:b9:3f:d4:de:d9:7a: 8d:5e:b7:7b:2e:87:0f:15:ed:3c:27:cc:74:05:f0: b8:d1:47:44:51:a3:de:75:4c:87:63:df:77:b4:08: 22:9b:ec:ad:57:56:5b:65:87:88:95:76:af:64:b3: 72:2c:05:19:4a:9b:2c:f0:8e:7c:d6:90:13:ff:c7: 09:be:a6:72:b5:50:2b:0c:55:df:5c:aa:74:ad:2e: 12:35:51:fb:3b:ac:d5:55:7e:31:b2:a3:da:49:f6: dd:16:d5:5c:71:99:8e:8a:d8:8a:3e:b1:03:b4:29: dd:e5:d1:fe:e7:78:5a:f8:27:c1:5a:6f:70:2e:bf: f7:a7:eb:c3:4a:b6:ef:22:1f:1e:f5:dc:fa:81:3b: a0:11:05:fb:92:50:9a:7e:de:45:f6:04:13:7d:ab: 70:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:73:AC:D6:3F:82:ED:12:3C:17:44:09:BF:15:A1:67:CC:BC:CC:8C X509v3 Authority Key Identifier: keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:9b:42:01:94:88:8c:30:ac:e3:36:d8:16:e9:35:45:94:75: 84:4d:23:ab:c0:e6:c7:d7:bc:ca:32:de:25:23:21:7f:ad:17: f6:60:b2:da:f8:4d:38:fb:36:c6:b7:c5:a0:f9:db:14:bf:ea: fe:42:2d:e9:a1:a1:1e:ba:c2:e4:d1:16:50:52:ed:78:8b:97: a7:57:fc:70:b9:f3:ac:65:a1:65:12:28:af:50:64:09:4b:80: c9:c3:ab:54:a2:96:a0:63:92:1b:52:61:e6:9e:46:95:37:8b: 63:92:33:be:ef:fc:93:af:5f:f3:74:3a:12:0f:1d:16:87:ad: a9:62:0d:a3:ed:75:1c:9d:83:60:d1:bf:d5:12:a3:ef:b9:a6: b8:d4:d6:9c:b0:6f:a6:11:89:e1:3c:ba:a2:0c:45:bb:8f:86: 94:c7:4d:38:d0:a9:a9:a1:44:06:48:3b:b1:6f:b1:33:03:86: f7:ec:b5:15:18:9a:a3:0a:a7:0b:9a:cf:9e:02:6f:15:40:94: d3:80:f8:9d:5c:4d:87:43:d0:a0:51:cf:18:39:b4:8c:f1:89: b2:04:66:59:a3:fb:61:ca:5e:33:9a:93:07:70:97:ca:cd:f0: 52:ff:20:f8:65:ac:0c:0b:e6:f6:3b:16:ea:fd:21:69:44:97: a0:62:9d:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh8Cbkywo6NSMlQnSx0+KKvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYzIwYWUxZGFjY2EzMTgxNWIyNzQ3MDI5MjdjMWE1YTlk YmM3YjMwHhcNMjUwODA1MjEwMTA4WhcNMjUwODA2MjEwMTA4WjAzMTEwLwYDVQQD Eyg2ZjczYWNkNjNmODJlZDEyM2MxNzQ0MDliZjE1YTE2N2NjYmNjYzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptu+TFicP4o3fkIjkS61oToHqf0R AW1HQQZj2xLY+jLb94L6R6haa8JjwE4PwjBK3ac0KeDL0+CNE7XDXAWCc3txlrB8 6ovVrpUHf/fubTDlTkGPfcVH/bxRIkq/IqShWgW5P9Te2XqNXrd7LocPFe08J8x0 BfC40UdEUaPedUyHY993tAgim+ytV1ZbZYeIlXavZLNyLAUZSpss8I581pAT/8cJ vqZytVArDFXfXKp0rS4SNVH7O6zVVX4xsqPaSfbdFtVccZmOitiKPrEDtCnd5dH+ 53ha+CfBWm9wLr/3p+vDSrbvIh8e9dz6gTugEQX7klCaft5F9gQTfatwdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9zrNY/gu0SPBdECb8VoWfMvMyMMB8GA1UdIwQY MBaAFLDCCuHazKMYFbJ0cCknwaWp28ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYt NTQ4NDQwMmNlYjdhLzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYtNTQ4NDQwMmNlYjdh LzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJtCAZSI jDCs4zbYFuk1RZR1hE0jq8Dmx9e8yjLeJSMhf60X9mCy2vhNOPs2xrfFoPnbFL/q /kIt6aGhHrrC5NEWUFLteIuXp1f8cLnzrGWhZRIor1BkCUuAycOrVKKWoGOSG1Jh 5p5GlTeLY5Izvu/8k69f83Q6Eg8dFoetqWINo+11HJ2DYNG/1RKj77mmuNTWnLBv phGJ4Ty6ogxFu4+GlMdNONCpqaFEBkg7sW+xMwOG9+y1FRiaowqnC5rPngJvFUCU 04D4nVxNh0PQoFHPGDm0jPGJsgRmWaP7YcpeM5qTB3CXys3wUv8g+GWsDAvm9jsW 6v0haUSXoGKdlQ== -----END CERTIFICATE-----Generated at Wed Aug 6 05:23:36 2025 by rpki-client