$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft File: 2-arjgxG6EG0TSucawO7ZfViHbE.mft (raw, json) Hash identifier: z9CExkNT5dr1bulABTin4eNZm113vkP4dFp300tMnv8= Subject key identifier: 79:62:72:CD:8A:04:B1:70:A4:4F:1E:12:2A:D6:8B:67:06:81:13:AA Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Certificate serial: 01987306DCF9AA0E2E5211A7A01AF12DA1B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft Manifest number: 1635 Signing time: Mon 04 Aug 2025 03:01:26 +0000 Manifest this update: Mon 04 Aug 2025 03:01:26 +0000 Manifest next update: Tue 05 Aug 2025 03:01:26 +0000 Files and hashes: 1: 1F-PLkJeZsd5BhbWomZg7cLPFrk.roa (hash: yrygGJcoXqVH2Jg8Juj5GnPuSpfNJREHSoSijlooIac=) 2: 2-arjgxG6EG0TSucawO7ZfViHbE.crl (hash: ghF1UGydJU+xUoyeJkwZNl5TGGbdFB+di46kXtFnz+U=) 3: 28-uwfDVLpaahAp5_g4gOqonJRE.roa (hash: ZiFvqyNcFNQjj1MRiXrgYLhWSDf2EOuub9eyPgFwZ5w=) 4: 3PFyhkeygxSnr9lo2JsKv8zzptA.roa (hash: q1R0erCPFvF5C0+eg74kijSUxdckHy4082+SsXMgLoI=) 5: 5gCvrLecynoNlZqqecgbQQFoRrQ.roa (hash: 9K+m38Q0PxPs98dlo8mOUJqX2gTHhK0yh4taoKPklF4=) 6: Hgi1HuyOIm-pDNTXBi7SDeMMv54.roa (hash: 4I6w4WrI+TeCpJfBFE/CPemODRHx6exn+BxP4Gc/fZ4=) 7: VTFmKW5oJe_aki7x1urblkP0Fyc.roa (hash: 2MZuFdP6pQLocFIUqAzsdUT8olNA1CbFEwyUxslWUHU=) 8: WuMjl-VoG-q9mOfKlozyoU3i5Zc.roa (hash: gMQYLpr2E7Od3N3zIX37zoUdKHUCId0XHkWxbn/9Hs4=) 9: Y-ggvECpJ-TUj9BMaNxFVHCG_mk.roa (hash: yHJbvycQTABXHTmwKw5e8PRSEFVUISxjCDtnqSPXNps=) 10: czt3GQhHtSmOo6RJuvFMFQAKSGo.roa (hash: XJWzfiETobcimR26X1Pa8klzjoq9ZGkjfUnqI+42fs0=) 11: eL6yX2gKmuR54LoAuIUZEONKX3g.roa (hash: Wq/KgDr2vwlpid8VQStYJgjmPQjXNNh76BSl9DIrTcE=) 12: hBf-hoIhETw06OBRpv7F1WdTrE8.roa (hash: LSEM+beBKj2xu4gyMsUhzku59BFOyI6BOdyKq1jM8vA=) 13: ps-3dIi4E3kjzYMhNLY6gSZjzEI.roa (hash: AimvrgTPnFzv1TtjV/eH/9wijMpIF0IeujrL4F6J9qw=) 14: vWlItCBxAXeKE8gJX96SzwOKVyc.roa (hash: Y2Q+VHBMvY4aKyxjSWnm9nXu79hw6C2astvb5J8gRi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:73:06:dc:f9:aa:0e:2e:52:11:a7:a0:1a:f1:2d:a1:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Validity Not Before: Aug 4 03:01:26 2025 GMT Not After : Aug 5 03:01:26 2025 GMT Subject: CN=796272cd8a04b170a44f1e122ad68b67068113aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2b:de:bc:ac:71:f9:5b:94:22:a4:b4:e7:fb: e7:09:6c:30:f8:c5:c2:86:9b:c3:93:80:74:0f:e1: 07:f1:d8:70:94:d1:1b:a2:a2:e3:c2:36:5c:83:05: 6c:99:35:a6:90:44:f7:af:23:f8:80:e4:df:6c:60: 2f:28:f0:ef:83:18:b2:80:c2:81:9c:9c:e6:62:5e: 6e:02:3f:ba:30:a5:73:6b:0c:06:1a:e8:8f:44:14: 46:d5:94:ba:23:74:2c:41:3f:cd:43:55:98:23:c3: e6:f6:ef:23:de:9c:ac:e4:aa:82:bc:03:45:5b:77: 43:93:cd:e1:59:92:16:92:8e:9e:e6:f1:96:d3:64: d7:f5:2a:19:15:0d:4b:9f:9a:cc:31:c0:11:be:e6: 40:72:8a:d6:e2:33:e7:06:87:d8:7b:78:44:f6:60: f9:ac:09:14:61:66:4a:0d:fc:fd:81:91:03:a0:19: 8d:12:03:e2:45:37:76:0e:4f:f5:ff:8a:ed:24:6d: 10:e0:76:11:30:82:2c:c5:d9:f4:5b:28:31:31:3a: bc:97:c4:5f:46:59:82:3e:e2:07:2a:60:13:43:38: 9d:19:56:11:a7:72:7b:78:8a:97:d5:06:e9:64:e6: e5:c3:84:47:66:92:c2:61:df:b2:e5:8f:56:35:88: ac:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:62:72:CD:8A:04:B1:70:A4:4F:1E:12:2A:D6:8B:67:06:81:13:AA X509v3 Authority Key Identifier: keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:96:9e:5b:73:74:82:a3:f2:06:c5:4a:a5:cb:68:e0:97:ba: cf:eb:80:ef:76:b9:b4:20:19:55:ff:74:58:23:18:55:8b:1a: b5:5e:54:17:9f:da:51:48:de:52:06:e7:a2:1b:f4:30:e4:1a: 8b:b8:ca:a8:e7:de:79:9e:96:1d:5c:d3:7b:7c:fc:c6:f5:36: c3:ce:3f:64:70:14:76:ab:bf:af:37:dc:03:d2:29:76:9e:43: 2a:a9:64:ec:e2:44:54:3d:d8:a5:e7:a8:a7:91:bf:94:64:55: 44:1e:45:f4:20:fa:da:51:7e:38:cb:f0:e2:6b:64:74:66:0c: ac:27:99:f1:d7:3d:a5:33:fa:2a:8d:9f:c7:af:f7:7e:b0:5e: 75:4f:bd:33:68:d0:c2:be:b7:5f:eb:bf:0f:66:28:e1:19:a4: 44:3f:c3:85:63:76:b0:a0:4c:93:62:07:26:2c:13:d3:1b:bd: d3:44:29:6f:55:0a:b3:c4:11:19:2b:dd:d4:65:7d:4b:7d:7c: 9c:20:31:e2:13:80:84:aa:70:cf:3d:da:18:8e:e5:b1:59:2d: a3:83:8a:50:e3:57:f2:5a:da:20:39:ab:e4:34:1c:45:93:71: 15:55:39:30:5f:15:ba:f7:9e:a6:8e:2b:98:cc:d1:22:c6:6c: b7:df:d7:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhzBtz5qg4uUhGnoBrxLaG0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTZhYjhlMGM0NmU4NDFiNDRkMmI5YzZiMDNiYjY1ZjU2 MjFkYjEwHhcNMjUwODA0MDMwMTI2WhcNMjUwODA1MDMwMTI2WjAzMTEwLwYDVQQD Eyg3OTYyNzJjZDhhMDRiMTcwYTQ0ZjFlMTIyYWQ2OGI2NzA2ODExM2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yvevKxx+VuUIqS05/vnCWww+MXC hpvDk4B0D+EH8dhwlNEboqLjwjZcgwVsmTWmkET3ryP4gOTfbGAvKPDvgxiygMKB nJzmYl5uAj+6MKVzawwGGuiPRBRG1ZS6I3QsQT/NQ1WYI8Pm9u8j3pys5KqCvANF W3dDk83hWZIWko6e5vGW02TX9SoZFQ1Ln5rMMcARvuZAcorW4jPnBofYe3hE9mD5 rAkUYWZKDfz9gZEDoBmNEgPiRTd2Dk/1/4rtJG0Q4HYRMIIsxdn0WygxMTq8l8Rf RlmCPuIHKmATQzidGVYRp3J7eIqX1QbpZOblw4RHZpLCYd+y5Y9WNYisZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlics2KBLFwpE8eEirWi2cGgROqMB8GA1UdIwQY MBaAFNvmq44MRuhBtE0rnGsDu2X1Yh2xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2Mt ZmIxMDMwNjUxMDY3LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2MtZmIxMDMwNjUxMDY3 LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq5aeW3N0 gqPyBsVKpcto4Je6z+uA73a5tCAZVf90WCMYVYsatV5UF5/aUUjeUgbnohv0MOQa i7jKqOfeeZ6WHVzTe3z8xvU2w84/ZHAUdqu/rzfcA9Ipdp5DKqlk7OJEVD3Ypeeo p5G/lGRVRB5F9CD62lF+OMvw4mtkdGYMrCeZ8dc9pTP6Ko2fx6/3frBedU+9M2jQ wr63X+u/D2Yo4RmkRD/DhWN2sKBMk2IHJiwT0xu900Qpb1UKs8QRGSvd1GV9S318 nCAx4hOAhKpwzz3aGI7lsVkto4OKUONX8lraIDmr5DQcRZNxFVU5MF8Vuveepo4r mMzRIsZst9/Xww== -----END CERTIFICATE-----Generated at Mon Aug 4 11:27:37 2025 by rpki-client