$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft File: 8MEEBBaR3DhPOxqM35XJZijqba8.mft (raw, json) Hash identifier: rVGxxCAttx9XScSQuvYUGBFt+mHoc66C+P+KUQewpSU= Subject key identifier: D1:EE:B8:C9:B0:41:37:ED:0B:8A:6B:C1:A1:B4:03:E5:17:4E:1E:30 Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Certificate serial: 01989110FD5EE2AE175513B3FB37C0C80435 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft Manifest number: 15DC Signing time: Sat 09 Aug 2025 23:01:06 +0000 Manifest this update: Sat 09 Aug 2025 23:01:06 +0000 Manifest next update: Sun 10 Aug 2025 23:01:06 +0000 Files and hashes: 1: 1-jVAuwl23O0NOs1-bK6yeNscKls.roa (hash: Uvxs615yu+WEWoRFMHOzorsioWG8H9U4nAbzC8roX+c=) 2: 8MEEBBaR3DhPOxqM35XJZijqba8.crl (hash: MhIjmnqKO7tPF400fMwlRG4y+oqU1H8f3M3BfHfosUE=) 3: Hl-LGslDYIhPlAkXHQHVv-RvB0w.roa (hash: O2E13yhrehXyHLH26oeDji6bWmBZEWAoPwvjmCy5UcQ=) 4: KeGOh-2gcusv29keikRHiEVKS4s.roa (hash: QrPYIqt13xYHx5UZtiEmzISVzXSCi7pxjFZqjccXxgI=) 5: PCT5Mgh2BfqwgaWaY02UF5LaLEs.roa (hash: XaBzd5GEKaiXR6sIMeiAlmk2HwlM0MvOxOjSag3QaY4=) 6: asCMHwRsfFwCKLi99bMyFo21krk.roa (hash: utShPNIu2DvLofXXWk5YOZ1a0OQi1aHbqM+BbMHKgoE=) 7: euk47PXoK5T6-tp0xVlaMzoR2zU.roa (hash: ELFMwMZ6NBCdcRDyZO9f72nzLI4WiJG57xVHtBVDcdU=) 8: fs_wxLugKiT_ydUrQOwGSh335rY.roa (hash: Q5dvvgKthsbcb9JzHMCTpI33x4XiWX2kEMaFSL83EKo=) 9: s-NcW6l6hXn5NOmuFXHN7mTAqcY.roa (hash: Ec6KZfarDMvuXKyozJ8ogUajfjL0rcRRpwLDmiHket8=) 10: xs5EMPFexMMDbg6ZozpAr6uWE70.roa (hash: qg/QvTawYThYqecFxjzESCzrgezKdtEVEc1jID0tLZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 10 Aug 2025 18:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:91:10:fd:5e:e2:ae:17:55:13:b3:fb:37:c0:c8:04:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Validity Not Before: Aug 9 23:01:06 2025 GMT Not After : Aug 10 23:01:06 2025 GMT Subject: CN=d1eeb8c9b04137ed0b8a6bc1a1b403e5174e1e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a3:f1:58:7f:0f:6d:ac:d7:71:62:dc:3b:ff: 5c:59:93:c6:bf:4d:92:e4:03:37:f4:0a:2d:ef:c0: 4d:a1:80:e5:00:25:46:71:64:e1:07:e1:f3:fd:99: bb:8f:22:f7:14:57:f2:e2:38:6b:a3:3e:3c:94:94: a8:9a:f8:c3:48:81:b8:bf:17:05:06:16:95:b9:07: c9:6e:30:db:6b:6f:f5:de:db:30:56:a3:ba:57:66: d5:ca:a6:85:b9:7c:35:d6:6e:16:69:3b:20:c9:3f: 86:37:5e:3e:76:57:c1:89:8a:35:ce:36:4a:5b:91: 4d:43:e7:6f:7b:3a:99:b5:dd:90:d8:89:81:ce:fc: 65:e0:a7:d2:d5:fd:27:9f:ad:76:69:06:a3:66:5e: b7:d9:d3:d8:f1:43:16:e3:07:4a:56:d3:ad:ac:3a: 5b:10:92:e3:e7:81:28:8f:cf:93:2c:bf:02:b8:1d: 70:a4:13:4f:1c:30:ae:04:5b:af:66:a4:33:3f:41: 43:c0:4c:6c:9a:cd:b0:cd:19:fc:d6:a1:f7:c7:28: f0:b3:9c:a8:c9:34:4f:f1:ab:72:11:0d:c2:bf:c6: 49:b1:82:6c:50:68:bb:c1:2a:77:98:d8:3a:61:65: ba:b2:fc:5c:14:18:51:3f:cf:0c:af:5e:69:31:60: f4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:EE:B8:C9:B0:41:37:ED:0B:8A:6B:C1:A1:B4:03:E5:17:4E:1E:30 X509v3 Authority Key Identifier: keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e0:23:57:69:2c:f2:31:20:71:93:76:1c:c5:16:1e:a4:43: cc:f6:68:a0:ab:77:f5:73:de:3c:3a:1e:72:94:35:5d:a4:3f: e6:90:13:48:e8:0d:14:29:70:19:23:4f:21:65:91:3c:8e:89: f4:1f:be:a4:0f:70:d7:f2:5c:79:c7:f0:05:ae:85:0b:86:b4: 9d:71:4e:7a:73:47:09:a9:c1:32:ce:e3:00:b1:2b:02:c4:52: bb:22:7c:67:0c:37:d3:7c:88:47:5a:8e:12:87:bf:e7:a8:a7: 0f:81:65:24:0e:ef:9c:3f:56:8b:3f:c9:47:da:08:27:a6:56: ce:66:98:5f:31:fb:96:57:06:6a:bf:8f:2f:2c:d7:0a:c1:bc: 6d:c6:23:4b:0a:8a:46:21:41:d0:61:70:5b:04:c6:a1:07:fc: ab:52:b4:10:15:af:7a:41:8e:47:0b:f9:0e:0d:b6:f3:db:38: e6:9f:93:dd:e3:80:82:71:4d:25:09:46:35:a4:36:21:1a:98: fe:55:3d:b1:a6:51:7f:a2:dd:b5:45:d1:9c:4a:f1:e3:26:ab: 12:ab:ff:d6:8b:01:5e:70:0f:e9:9a:39:3f:de:27:07:43:0a: a5:23:23:8f:b4:75:41:c7:06:78:06:55:25:21:5c:98:25:80: a1:a1:91:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiREP1e4q4XVROz+zfAyAQ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl YTZkYWYwHhcNMjUwODA5MjMwMTA2WhcNMjUwODEwMjMwMTA2WjAzMTEwLwYDVQQD EyhkMWVlYjhjOWIwNDEzN2VkMGI4YTZiYzFhMWI0MDNlNTE3NGUxZTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaPxWH8PbazXcWLcO/9cWZPGv02S 5AM39Aot78BNoYDlACVGcWThB+Hz/Zm7jyL3FFfy4jhroz48lJSomvjDSIG4vxcF BhaVuQfJbjDba2/13tswVqO6V2bVyqaFuXw11m4WaTsgyT+GN14+dlfBiYo1zjZK W5FNQ+dvezqZtd2Q2ImBzvxl4KfS1f0nn612aQajZl632dPY8UMW4wdKVtOtrDpb EJLj54Eoj8+TLL8CuB1wpBNPHDCuBFuvZqQzP0FDwExsms2wzRn81qH3xyjws5yo yTRP8atyEQ3Cv8ZJsYJsUGi7wSp3mNg6YWW6svxcFBhRP88Mr15pMWD08wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHuuMmwQTftC4prwaG0A+UXTh4wMB8GA1UdIwQY MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt NjkxNDIyMzExNzI5LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5 LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATOAjV2ks 8jEgcZN2HMUWHqRDzPZooKt39XPePDoecpQ1XaQ/5pATSOgNFClwGSNPIWWRPI6J 9B++pA9w1/JcecfwBa6FC4a0nXFOenNHCanBMs7jALErAsRSuyJ8Zww303yIR1qO Eoe/56inD4FlJA7vnD9Wiz/JR9oIJ6ZWzmaYXzH7llcGar+PLyzXCsG8bcYjSwqK RiFB0GFwWwTGoQf8q1K0EBWvekGORwv5Dg2289s45p+T3eOAgnFNJQlGNaQ2IRqY /lU9saZRf6LdtUXRnErx4yarEqv/1osBXnAP6Zo5P94nB0MKpSMjj7R1QccGeAZV JSFcmCWAoaGRFw== -----END CERTIFICATE-----Generated at Sun Aug 10 04:48:11 2025 by rpki-client