$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft File: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft (raw, json) Hash identifier: 7xsb+ZeicQIBkJep/PDqqS14Dz+HdMDe4eTjwV0S1/M= Subject key identifier: 89:54:A8:FB:0D:55:69:CD:90:E9:19:21:2A:7B:32:0B:C6:F8:77:43 Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 0198793FB0DBE277BD2221F6A34341A6AE0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft Manifest number: 161E Signing time: Tue 05 Aug 2025 08:01:13 +0000 Manifest this update: Tue 05 Aug 2025 08:01:13 +0000 Manifest next update: Wed 06 Aug 2025 08:01:13 +0000 Files and hashes: 1: 00x2a7vYcUP_RgzqZlJDShLq9Do.roa (hash: cq08qt5t6pt7+g4zB6xtHZuctjeJqy9pw/L/lk8TYFo=) 2: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl (hash: +8h0HfTrcWqlGhMd8wWfa2t2jfPkSMP0vRm0t7TG254=) 3: KVMzJG-tiBiXKGfDbX7s-fqSUcs.roa (hash: izdiO/l04uY0Tl9GP7xbaa4HsWMYkrOgbs0SiG0a1K8=) 4: OBC2jp5FIHT7G9c2m1xsJUD2ivs.roa (hash: DrwuyysosoB70lBjSllnHo3rVU0U0NusilzO8tRi9Q0=) 5: OxF-ngX6YGUArZrbAYmh9hpGzkU.roa (hash: zhEaR7GNPbf+2lOaH8uFUPJFKzbpuLS5x4CvU7dkxPs=) 6: Q2Pg2GNHELVKyFoNgxOuT8YFvLY.roa (hash: DsyRU7FSw+3XDKbBM9HrtgkzYSVPnqWwqknbD6CWVSU=) 7: RO-InVXPYoHaB1ZpM-19yr94dQs.roa (hash: 8Y6VcUcgO4alufdIJ4djN2KAnB4AyYetp1VZzDDuyNk=) 8: TbcAJ-7kgZbLEMeBArn-aI2s0Oc.roa (hash: ebCgIhbDpPxtlRtDjitUarjC0W1nxe0ujpocy11Koxs=) 9: _gM5SG_4QQqKocZtcQPCR80SAmI.roa (hash: ee8TJS3VrEj5YXrt15hISXpN3dVXM3P5ROyjlVEMHSs=) 10: fG6If6WZh4pXAVRu1gEQ7wbPbEs.roa (hash: OIBSpF8oXZotrR8RVX6KacBPnJZCoNiFLIZ7aWyayQU=) 11: gfQeyx6Q7sjS4Xpny9IUQ8tQxLY.roa (hash: zrq/geD7ajZHxMLm7OvFbnGGXeIS14GfMNfAscurlR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 08:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:79:3f:b0:db:e2:77:bd:22:21:f6:a3:43:41:a6:ae:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Aug 5 08:01:13 2025 GMT Not After : Aug 6 08:01:13 2025 GMT Subject: CN=8954a8fb0d5569cd90e919212a7b320bc6f87743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:00:99:1a:86:60:29:c2:7f:bd:2e:2b:6b:7c: 93:01:44:bc:2c:35:74:05:47:61:e1:b9:64:e8:f1: 39:ab:ea:a8:05:24:86:80:5c:0e:3d:34:05:e4:36: 9d:f1:85:6d:33:ab:e6:4a:a0:81:2b:d8:6a:af:c2: 7a:bd:c2:f0:61:48:55:3e:0d:61:2a:4d:fa:ad:9e: c8:3c:7f:2a:d1:d0:43:e0:b3:b1:43:49:b4:df:a3: 82:bb:4b:49:88:ea:66:12:76:d7:15:59:2b:12:66: 8f:a6:89:90:52:3c:98:6d:ff:0b:ee:a7:e7:bb:73: 4d:45:26:45:c6:57:1b:9b:de:2e:ca:34:6a:e0:44: 06:7e:93:b3:1c:e7:ab:ea:52:e1:1f:8d:08:b1:44: 6b:18:6a:23:09:d3:6a:f1:c0:f9:bf:51:eb:35:5d: f7:12:8f:2f:51:c9:5c:a8:ce:94:bc:91:12:37:ce: a2:a9:a3:75:84:f7:4b:3a:ef:ce:4a:96:83:b5:0a: 42:f0:73:3f:ad:c2:81:b6:e0:66:1f:78:2c:70:3e: df:d7:d5:d0:14:96:42:1d:ee:9a:a5:d7:ed:c5:29: 8f:6e:0d:b3:bc:3c:24:f5:88:1d:11:8b:de:94:e9: 18:9d:a1:78:4e:6e:d3:ed:b9:b7:61:0f:7a:99:71: 69:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:54:A8:FB:0D:55:69:CD:90:E9:19:21:2A:7B:32:0B:C6:F8:77:43 X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:44:6b:a7:a5:ca:3e:47:cb:60:30:41:70:8f:a4:af:e0:fa: 3e:32:46:b6:a5:b2:cd:82:de:3c:eb:3f:b1:0a:5b:ba:aa:6b: 46:64:8d:5a:c8:29:50:86:a7:a0:d0:44:48:2d:fb:bb:f4:20: 6c:cc:9f:d3:89:0c:e8:9d:21:d4:1a:f6:cc:f5:5f:34:aa:73: 8e:9f:e2:72:54:40:a1:12:80:b8:bd:29:d5:32:49:60:74:d7: 56:50:77:ef:74:f5:55:f0:51:f8:d4:9c:c1:8e:ec:cb:80:53: 5e:0f:58:12:16:b2:9f:78:7e:36:f0:12:76:43:20:1a:f9:20: 7d:f1:ce:c0:fd:1e:1d:39:a3:6e:ab:d0:26:76:ab:59:01:ee: c5:50:7f:11:cb:e0:b5:71:d1:af:1e:64:2d:d7:00:fa:bb:43: a6:e6:2a:fc:c0:ec:71:e7:81:3f:c8:e5:5c:9f:97:70:6d:d2: a4:6b:40:45:2d:8b:34:86:e3:91:8c:53:c1:c0:d3:cf:4b:29: c3:58:c3:d2:15:46:e2:f3:1e:79:6e:b3:da:41:29:30:7e:de: b6:c9:67:a2:6c:e3:a6:db:86:32:29:d1:b1:09:d8:4e:b0:f3: fe:15:65:4d:71:af:30:87:bc:0a:4e:a7:e4:7f:6f:a9:27:d3: 5f:f3:35:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh5P7Db4ne9IiH2o0NBpq4PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjUwODA1MDgwMTEzWhcNMjUwODA2MDgwMTEzWjAzMTEwLwYDVQQD Eyg4OTU0YThmYjBkNTU2OWNkOTBlOTE5MjEyYTdiMzIwYmM2Zjg3NzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwCZGoZgKcJ/vS4ra3yTAUS8LDV0 BUdh4blk6PE5q+qoBSSGgFwOPTQF5Dad8YVtM6vmSqCBK9hqr8J6vcLwYUhVPg1h Kk36rZ7IPH8q0dBD4LOxQ0m036OCu0tJiOpmEnbXFVkrEmaPpomQUjyYbf8L7qfn u3NNRSZFxlcbm94uyjRq4EQGfpOzHOer6lLhH40IsURrGGojCdNq8cD5v1HrNV33 Eo8vUclcqM6UvJESN86iqaN1hPdLOu/OSpaDtQpC8HM/rcKBtuBmH3gscD7f19XQ FJZCHe6apdftxSmPbg2zvDwk9YgdEYvelOkYnaF4Tm7T7bm3YQ96mXFppQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIlUqPsNVWnNkOkZISp7MgvG+HdDMB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeURrp6XK PkfLYDBBcI+kr+D6PjJGtqWyzYLePOs/sQpbuqprRmSNWsgpUIanoNBESC37u/Qg bMyf04kM6J0h1Br2zPVfNKpzjp/iclRAoRKAuL0p1TJJYHTXVlB373T1VfBR+NSc wY7sy4BTXg9YEhayn3h+NvASdkMgGvkgffHOwP0eHTmjbqvQJnarWQHuxVB/Ecvg tXHRrx5kLdcA+rtDpuYq/MDsceeBP8jlXJ+XcG3SpGtARS2LNIbjkYxTwcDTz0sp w1jD0hVG4vMeeW6z2kEpMH7etslnomzjptuGMinRsQnYTrDz/hVlTXGvMIe8Ck6n 5H9vqSfTX/M1PQ== -----END CERTIFICATE-----Generated at Tue Aug 5 16:51:07 2025 by rpki-client