$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft File: RotZLzEQvGw1JJqCcaDawamssM4.mft (raw, json) Hash identifier: cQmiWQJQpWVLvO0xKm4f/rf07e25htMTLk1orcEhHZ8= Subject key identifier: F5:CA:78:22:13:A9:22:FB:88:60:D4:06:E8:35:BA:BC:A8:B9:62:7D Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Certificate serial: 01987E9CA85A55EF009E7A4E7FF150EB7CBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft Manifest number: 0628 Signing time: Wed 06 Aug 2025 09:00:52 +0000 Manifest this update: Wed 06 Aug 2025 09:00:52 +0000 Manifest next update: Thu 07 Aug 2025 09:00:52 +0000 Files and hashes: 1: 4PdFFqbPgnyAF8OAZU59EP79EQE.roa (hash: 0N0pRYIfSwp4rQqEao9ImOBW5Z4au+nqt0SGDhOprnI=) 2: 8u1Ww9yNVHCXoKy959EsUaU71zs.roa (hash: MCjwWNvinwMVi61YdY3QarB5BMMcy4gUuYfqYD2T3PI=) 3: B5kdDxNFhlA9AT3PyqFkTX6RY6M.roa (hash: Xin+IDogu4+kKllgKutdfXdJm2piOKuXIHOph9bE8Zw=) 4: RotZLzEQvGw1JJqCcaDawamssM4.crl (hash: iP5j9OHHWjWaArUxJi2hpmcKcwUMhMpBbbI7+xmS+Zs=) 5: _vYyrixRE-yXYNd95EagmmedMZs.roa (hash: Nq9E9fzlDdc1TerNy7pW2Y+cp+tsEL9ANsKsoDQ0Pwo=) 6: acuhZu0U_WkSARaVYcWUYOom_tc.roa (hash: Vz362bHKA5YHWnFAcuO7fZwKtrbxdBbzK4dNCKeHQsQ=) 7: bvgsPr3D5PPxL6J89BfI0hjp6nU.roa (hash: gQ8pHX8IE1KeaNe50ukz0WLLfO6NzXHlCO7loLPh0Ow=) 8: elD2CPARB_SCiElYBqX86L528iA.roa (hash: 4GpojDoTFDR9/As1unQ2wQcCWk8x0pykSLzc87gKTZw=) 9: i1oSM0zm6FdsD8GW2rr18ZJYU9c.roa (hash: vhtU0Gjcgqwk2dDqzgcdqq71xJAqWywoPwJaRLlLExA=) 10: moar5P9-vHm1h7dW1fwgc72NFhw.roa (hash: JbVrT9GvQCxgYaVUxgeC2lZytQA7NzFvIW4W5mDjY3A=) 11: wpO2gWHd7fIiJY2UmwBghuKU8Pk.roa (hash: eNcYuQe4vVrI0lLxGnwWNPY5OwCaWdtNSK5bPAl0Ug8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 08:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7e:9c:a8:5a:55:ef:00:9e:7a:4e:7f:f1:50:eb:7c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Validity Not Before: Aug 6 09:00:52 2025 GMT Not After : Aug 7 09:00:52 2025 GMT Subject: CN=f5ca782213a922fb8860d406e835babca8b9627d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:db:4f:0d:14:b1:b2:e2:7a:8e:de:61:88:ea: 35:64:c1:c7:be:b3:2e:0d:93:f5:db:03:7c:86:6b: 13:56:5d:f0:04:00:44:75:32:fa:f2:30:11:f1:7b: e7:cf:e7:ed:4b:3a:d3:e3:54:80:a7:7f:0b:5e:84: 06:60:1e:ef:55:fb:52:cc:fa:8c:40:15:db:28:18: e7:11:c7:51:a0:5e:73:44:93:cf:9d:38:97:b4:29: 65:af:d9:70:84:c9:5e:e1:2c:93:a3:00:fd:b3:ad: 00:8d:16:88:45:fc:10:bc:50:82:68:01:a5:f7:80: c9:68:a4:d2:7c:4d:76:55:dc:64:14:58:83:38:4d: 8f:78:1e:fe:90:ce:bf:6c:1d:a8:f9:c2:56:8f:31: 4d:0c:7b:83:98:59:2c:01:33:1a:1c:ad:de:97:7d: 58:24:75:bd:d5:fc:8d:a1:51:0a:ae:74:ef:c5:8e: bf:33:ae:eb:60:32:f4:45:b7:ac:e4:92:85:7e:e6: 33:6e:d2:84:f9:51:a9:f6:39:52:70:12:4b:51:3f: 95:98:5a:53:98:52:aa:39:b2:b9:9e:f5:e2:39:8f: 23:13:b0:d3:a7:1b:bb:ac:e6:14:52:2a:70:31:59: 24:fc:12:00:34:f2:ec:0c:cc:47:dd:79:7b:af:38: cc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CA:78:22:13:A9:22:FB:88:60:D4:06:E8:35:BA:BC:A8:B9:62:7D X509v3 Authority Key Identifier: keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:59:50:2f:04:e3:51:f9:ec:e0:7c:74:b8:1a:71:aa:97:3c: db:88:c8:25:7d:bd:eb:5d:b7:f8:dc:31:f9:c1:6e:f0:b5:58: 91:f0:d3:64:b1:72:9d:ef:23:24:c2:5f:aa:19:db:64:95:a5: 90:ab:3e:4b:1d:51:4e:dd:cb:1a:e4:cf:d8:c4:75:b2:dd:1f: a3:77:06:78:ff:34:ff:d2:34:85:75:73:56:98:14:02:40:69: 66:92:3e:c6:82:29:6e:91:90:ff:a4:fd:c3:12:93:06:e2:a6: 7e:44:d9:77:84:db:d2:5e:1b:a1:79:d1:33:47:71:20:59:33: 61:19:2c:8e:1e:cc:ca:2f:79:71:a1:4a:6c:1a:1e:ac:17:e8: 70:c3:53:21:3a:80:11:a9:a1:c2:50:d7:57:9d:d4:af:58:fe: 64:12:72:f5:7b:a4:a1:65:74:f5:1d:e5:30:98:1c:ac:06:7e: bd:e7:17:10:eb:3d:aa:53:88:c8:f7:ef:52:b4:fd:c2:d1:7f: 3c:09:82:4f:75:ee:cf:3d:c4:db:42:9a:02:b7:76:01:26:e7: e7:96:bc:97:44:9d:b4:22:22:90:cd:0a:cf:d8:99:54:d5:d8: 35:94:6b:fc:0b:93:b6:4d:94:81:a2:19:18:50:74:ef:44:2b: 60:7f:b7:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh+nKhaVe8AnnpOf/FQ63y8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGI1OTJmMzExMGJjNmMzNTI0OWE4MjcxYTBkYWMxYTlh Y2IwY2UwHhcNMjUwODA2MDkwMDUyWhcNMjUwODA3MDkwMDUyWjAzMTEwLwYDVQQD EyhmNWNhNzgyMjEzYTkyMmZiODg2MGQ0MDZlODM1YmFiY2E4Yjk2MjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArttPDRSxsuJ6jt5hiOo1ZMHHvrMu DZP12wN8hmsTVl3wBABEdTL68jAR8Xvnz+ftSzrT41SAp38LXoQGYB7vVftSzPqM QBXbKBjnEcdRoF5zRJPPnTiXtCllr9lwhMle4SyTowD9s60AjRaIRfwQvFCCaAGl 94DJaKTSfE12VdxkFFiDOE2PeB7+kM6/bB2o+cJWjzFNDHuDmFksATMaHK3el31Y JHW91fyNoVEKrnTvxY6/M67rYDL0Rbes5JKFfuYzbtKE+VGp9jlScBJLUT+VmFpT mFKqObK5nvXiOY8jE7DTpxu7rOYUUipwMVkk/BIANPLsDMxH3Xl7rzjM6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXKeCITqSL7iGDUBug1uryouWJ9MB8GA1UdIwQY MBaAFEaLWS8xELxsNSSagnGg2sGprLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTct MDUwMzc0OWFkZWEwLzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTctMDUwMzc0OWFkZWEw LzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGFlQLwTj Ufns4Hx0uBpxqpc824jIJX296123+Nwx+cFu8LVYkfDTZLFyne8jJMJfqhnbZJWl kKs+Sx1RTt3LGuTP2MR1st0fo3cGeP80/9I0hXVzVpgUAkBpZpI+xoIpbpGQ/6T9 wxKTBuKmfkTZd4Tb0l4boXnRM0dxIFkzYRksjh7Myi95caFKbBoerBfocMNTITqA EamhwlDXV53Ur1j+ZBJy9XukoWV09R3lMJgcrAZ+vecXEOs9qlOIyPfvUrT9wtF/ PAmCT3Xuzz3E20KaArd2ASbn55a8l0SdtCIikM0Kz9iZVNXYNZRr/AuTtk2UgaIZ GFB070QrYH+33Q== -----END CERTIFICATE-----Generated at Wed Aug 6 16:10:31 2025 by rpki-client