$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft File: 71fC2dk6x8-bLxfKp4WbaYWzm50.mft (raw, json) Hash identifier: S2WE4YAhr1cfxqb4Elj5hV/Ng5Gn2xL9zJE2tZx+Dr8= Subject key identifier: 87:09:68:CE:27:C3:44:79:E5:26:5E:91:51:15:34:AD:4A:05:DD:CA Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Certificate serial: 01987562C0336827F38875ABBD17F2DABBF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft Manifest number: 1255 Signing time: Mon 04 Aug 2025 14:01:02 +0000 Manifest this update: Mon 04 Aug 2025 14:01:02 +0000 Manifest next update: Tue 05 Aug 2025 14:01:02 +0000 Files and hashes: 1: 0SnEDSu2fch50mXfNCrgepjBXHI.roa (hash: An4Aho4+/IQv1xSA0visBRO6r1aot3IcatgSZ0mIirs=) 2: 71fC2dk6x8-bLxfKp4WbaYWzm50.crl (hash: jHY8X/DcuLgXs0ZAOCgj5UqSqyZ91uBCioUfxu4rNO0=) 3: CFEprGG9zI2SPXEkfveiqcGkxys.roa (hash: zwoMXpp3WPmfn1e+WeBEAccAThpouC8C+SBbtldgA/c=) 4: EK6XW48thDOhbEqOrZVkF4wNviY.roa (hash: TaMn+E7YE9NMIOz64w+l5qs88ZBiuzDcpLepxVp30kM=) 5: RLjWAiBDW7OGzF_VcCkKg-SuzTE.roa (hash: DCBINTtLxKJQkC6BRMLb3TMqWlrNb5ZnwJro+/q+QhU=) 6: Xd2QaW60upMnqwQIBHXXIoPXPzs.roa (hash: +i6BQOs/QyU2pk+3pSoh+wtk4Cf+VFJXifr7WtqVoY4=) 7: ZWH5dik-57qT_VKYcibYh0fZMes.roa (hash: V4HyXcC7GD93JW+xBhzBdGWwVycZxFz98efL+J+3t6c=) 8: d3w3nqB5Kl-FSC0jSCG-gsD4dlY.roa (hash: 33QNQ+kF6mFEetO5Rno9ayPExXyzerB4sZWFH0Ulruk=) 9: dLVFM6LOXJ7fgmVbzXYVW8I5oYY.roa (hash: p6zpbFHToZdevuasfH2dIun4+77hBuovd01laS+bKxs=) 10: kaXih0ftxLoxKevElyyNGY3Am90.roa (hash: VV+Kmbg3++xVZSuR6z9QplDGDyuGw9lzxK6+uDRXc2k=) 11: mMAwso5PyMiUkBDuP91mCU2ukBI.roa (hash: 8lAOzf9Ul80EHkivmkCJNmV8WShjC87n8hXocC2Jg4o=) 12: n8t1FbmmcHRL1T025PodTqR3IcA.roa (hash: 449VA6EYanQ2mGU5FM+jEwpoRl0iEuk30UHtcfYkgJs=) 13: rL6AzulHQOLcRfhqRrPdMX43AzM.roa (hash: /p4sN3vL44k5lwQiWwAvoayVUuPAubPMAhf99ERn0+c=) 14: xE9QBs_-I-okZvOErWXLkoKDqmk.roa (hash: PCh0aczn6Bj3Hiz+iIpjZK10Xg+FpiTDJMX+WibJh2o=) 15: yedI6EpedZ28jyB60XNo0uK6oF8.roa (hash: hWsq9urJIZSeMGg4SgxXz+gEuiBCoRbdm4v/CAFQ2CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:75:62:c0:33:68:27:f3:88:75:ab:bd:17:f2:da:bb:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Validity Not Before: Aug 4 14:01:02 2025 GMT Not After : Aug 5 14:01:02 2025 GMT Subject: CN=870968ce27c34479e5265e91511534ad4a05ddca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:46:82:cb:21:5d:52:6e:4b:81:6a:b8:b9:00: 9f:6e:c6:2d:e5:8d:46:28:a7:fb:c7:b8:a2:8c:01: 97:79:69:23:04:d8:15:93:23:dd:f9:a5:9a:84:7c: f0:61:01:79:5a:28:1d:26:2c:cf:69:f4:00:86:bf: 7c:73:b6:f6:73:b9:63:f2:27:99:58:5c:d8:0b:21: 9c:92:78:5c:69:2c:ff:0f:21:4d:1e:53:67:9b:62: 23:e0:ed:45:33:d4:f4:f3:1a:d5:d5:fc:77:88:32: 60:99:5f:a9:2f:bd:3b:a8:0e:77:07:8e:78:a6:74: 35:04:36:87:45:fd:82:4f:8b:0b:b4:fb:af:12:19: df:b2:fe:c7:2b:aa:c9:8e:73:fd:d2:9f:ed:76:16: 53:96:83:41:5d:b8:28:8e:32:ce:af:77:d6:ce:d6: f4:5e:69:d7:a0:06:09:33:63:01:34:6c:81:88:c2: 36:0f:df:e5:bf:5f:fc:56:29:43:a0:61:6d:10:c2: c9:09:68:e1:4b:d5:14:03:e7:be:2a:f2:e2:87:58: 22:9f:e0:3d:40:df:ad:1b:24:26:37:1b:bb:67:7d: 48:4d:91:04:71:03:b7:bf:40:72:f9:ab:a2:8b:5c: 36:28:e8:15:49:b5:6c:5f:ac:11:ea:b6:cd:a2:51: d3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:09:68:CE:27:C3:44:79:E5:26:5E:91:51:15:34:AD:4A:05:DD:CA X509v3 Authority Key Identifier: keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:28:05:24:d8:1d:b1:6e:7f:8a:81:96:32:e1:74:dc:c2:e7: cc:e2:04:16:a1:a3:f5:16:ea:38:24:78:3e:0c:5e:8c:61:72: ca:4a:17:10:a8:17:2b:61:80:d7:54:ee:a9:00:fa:18:ee:0b: 02:af:ab:41:9a:bc:c3:98:10:a8:2c:6c:9f:93:e4:a2:5f:ce: dd:f9:21:ab:a2:ee:58:71:fc:b7:34:22:01:5a:12:d1:b8:06: 3d:d2:93:76:1e:6e:8d:e1:17:9b:a4:c0:8f:6b:c8:b6:08:44: 15:0c:9d:36:f3:c1:c4:e9:20:32:9a:2f:a8:23:bf:c6:fd:e6: a1:67:e0:f7:79:a1:b2:a8:40:96:30:cd:c0:a7:19:51:09:e5: d3:f7:84:4c:26:ce:7a:ca:ef:05:21:e9:d3:a5:96:af:c2:ba: 08:0a:2a:1d:a8:73:3f:c3:59:b0:21:db:7a:cb:48:36:33:73: 12:1c:30:27:5f:c4:26:8f:b1:9c:6d:79:0a:d9:df:24:52:eb: e4:40:58:19:df:14:bc:35:66:38:64:69:3d:b0:45:7b:e3:5c: a9:31:bf:d3:c1:b2:42:b0:06:2b:ce:16:fe:8c:67:cd:16:67: 64:e8:9d:3d:fd:e7:31:87:88:19:19:09:0f:1d:f1:10:15:35: c6:0c:ba:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh1YsAzaCfziHWrvRfy2rvzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi MzliOWQwHhcNMjUwODA0MTQwMTAyWhcNMjUwODA1MTQwMTAyWjAzMTEwLwYDVQQD Eyg4NzA5NjhjZTI3YzM0NDc5ZTUyNjVlOTE1MTE1MzRhZDRhMDVkZGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0aCyyFdUm5LgWq4uQCfbsYt5Y1G KKf7x7iijAGXeWkjBNgVkyPd+aWahHzwYQF5WigdJizPafQAhr98c7b2c7lj8ieZ WFzYCyGcknhcaSz/DyFNHlNnm2Ij4O1FM9T08xrV1fx3iDJgmV+pL707qA53B454 pnQ1BDaHRf2CT4sLtPuvEhnfsv7HK6rJjnP90p/tdhZTloNBXbgojjLOr3fWztb0 XmnXoAYJM2MBNGyBiMI2D9/lv1/8VilDoGFtEMLJCWjhS9UUA+e+KvLih1gin+A9 QN+tGyQmNxu7Z31ITZEEcQO3v0By+auii1w2KOgVSbVsX6wR6rbNolHTMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIcJaM4nw0R55SZekVEVNK1KBd3KMB8GA1UdIwQY MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct OGU2Zjg3OGRiNWY0LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0 LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArygFJNgd sW5/ioGWMuF03MLnzOIEFqGj9RbqOCR4PgxejGFyykoXEKgXK2GA11TuqQD6GO4L Aq+rQZq8w5gQqCxsn5Pkol/O3fkhq6LuWHH8tzQiAVoS0bgGPdKTdh5ujeEXm6TA j2vItghEFQydNvPBxOkgMpovqCO/xv3moWfg93mhsqhAljDNwKcZUQnl0/eETCbO esrvBSHp06WWr8K6CAoqHahzP8NZsCHbestINjNzEhwwJ1/EJo+xnG15CtnfJFLr 5EBYGd8UvDVmOGRpPbBFe+NcqTG/08GyQrAGK84W/oxnzRZnZOidPf3nMYeIGRkJ Dx3xEBU1xgy6XQ== -----END CERTIFICATE-----Generated at Mon Aug 4 19:15:19 2025 by rpki-client