$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json) Hash identifier: 0nbL2iJHNsxge2avvY5N1YGJi6F6BX+KRsxbvrDnlx4= Subject key identifier: E7:11:E9:21:93:AE:9F:BC:31:DA:35:21:EA:1B:34:A3:6F:96:82:A7 Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Certificate serial: 01987CE57BF0469600FC6096801DCB191F85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft Manifest number: 0A33 Signing time: Wed 06 Aug 2025 01:01:10 +0000 Manifest this update: Wed 06 Aug 2025 01:01:10 +0000 Manifest next update: Thu 07 Aug 2025 01:01:10 +0000 Files and hashes: 1: BVbo9uh3-UvDvwSZi6BfXSBGPHU.roa (hash: Z8qyhH6viB+EEzaDtRv3WrjvxrAR7rKFv4csNYovB+g=) 2: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: Wrldc0HIVur3zc1oRp4BBwatKRIpJeBKzW/jBNAREL0=) 3: DN7cb2WxNWOTpycH6YaG66edbbs.roa (hash: xHRCbbCrWIHuruRPkilEuXWa24rKkDGqIeFboryKMwQ=) 4: Fiaoyzt87itbMDPQcRW3KUFZRqE.roa (hash: msw75zbRd9jVXLoPptdxNvS4cyBll5nFN6qdq2TWWOE=) 5: HHx5PgT40c8odAvxk1P-fxWePlA.roa (hash: zPsSrq/ptkyDcwkMCUxFQsAp1K70phIRO2z3d5q6bK8=) 6: Mo-GiiM2sNe-eBz_JyMl4sLvpMo.roa (hash: S6ZzEosIiFeiJ1KKDxx2F81o6c+HfdnMbY4tAkCKBFE=) 7: OEhLMwhGsj88kZ4FqVMVTfpqz-8.roa (hash: /KQ43a3fdsH0+xJZbYiIUJZNQ9G0ar1u4ierKXmEsMM=) 8: jMIl0-AsPbFxzuSdnTOvL0GZyZY.roa (hash: vp7N55mHbj1atM+G1AaTEaDl/C1DAcMrBbixu2jF2UI=) 9: m87-CXNBm5VwmmEvQBAI-p_8l98.roa (hash: vGGq9E7IPOkRddkapcYuXImJsPgw9f+HEWKjnAHtMCI=) 10: nMhyX7boXa--DjLfLdE1CijBszU.roa (hash: s95e1FJb6EuRsUkazwo7HJhOqZW3W1mabgyeLhjUIIo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 01:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7c:e5:7b:f0:46:96:00:fc:60:96:80:1d:cb:19:1f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Validity Not Before: Aug 6 01:01:10 2025 GMT Not After : Aug 7 01:01:10 2025 GMT Subject: CN=e711e92193ae9fbc31da3521ea1b34a36f9682a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c7:b1:51:3c:b4:40:fe:08:27:dd:05:eb:39: 89:56:32:37:17:52:e7:d9:bd:01:8c:e3:8b:83:b5: 58:45:66:38:5a:94:d6:33:e5:ff:b8:b5:31:e9:85: 84:0a:e6:7e:63:98:c6:6a:c4:6a:03:25:2e:63:f6: 82:10:d5:f6:30:5a:41:5d:d9:b0:c1:14:d6:b8:a1: 66:7b:31:10:65:db:47:03:43:85:c6:54:0e:0e:07: 43:62:38:85:bc:d1:f1:75:1c:7d:3a:76:27:12:c2: 0e:99:cf:08:53:50:cf:13:b1:de:36:d4:d7:47:0f: 21:1f:34:d3:82:f6:de:06:4f:e3:bc:6a:76:c7:58: f3:f6:52:17:00:e0:39:fb:e6:87:26:ff:69:4a:c4: f0:b8:c9:51:bc:7f:e0:b1:61:d7:71:60:c9:9d:cf: a8:a0:14:61:bc:b5:d2:22:4e:01:8e:9b:29:aa:ca: 3b:ab:63:57:9f:bf:2c:26:42:56:25:4e:71:b5:60: 63:dd:4e:7a:d9:fa:38:95:9a:92:f3:63:ee:e8:91: cb:2c:b8:fd:06:29:3f:52:9a:92:48:5a:f8:b0:71: 42:c7:53:bd:90:a2:09:f6:03:b2:a3:5a:d5:c8:a6: ef:f6:36:cf:3b:a8:92:be:02:fb:3f:9c:eb:85:89: f9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:11:E9:21:93:AE:9F:BC:31:DA:35:21:EA:1B:34:A3:6F:96:82:A7 X509v3 Authority Key Identifier: keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:a3:0a:35:00:d1:ab:c3:a6:10:81:fb:5e:00:e5:57:bb:0e: a1:38:88:c0:1e:36:ab:30:80:cf:3f:77:91:f3:06:89:fb:be: bc:db:22:4a:c3:f3:3e:b7:42:0b:35:fb:78:ce:4c:58:b7:75: 72:5c:42:d0:a2:b0:af:dd:3e:0b:4a:33:64:4d:28:50:8f:71: c3:bf:c5:98:ab:bf:70:c3:4d:2a:25:de:a5:2a:53:ac:65:19: 0c:0f:23:be:c3:57:8c:91:7c:a6:ef:ee:b2:8f:32:0e:8a:23: c7:73:89:dd:18:2d:de:1c:52:5b:48:40:ed:a6:b1:72:89:f1: e3:d2:02:e5:af:fc:d4:f3:eb:c2:4a:1e:8d:56:94:28:09:bb: 13:0a:56:33:b1:0f:e0:f8:66:b6:11:17:ae:0b:82:76:51:4a: 82:6a:77:ce:db:f4:06:bc:1e:d1:74:2b:31:b4:a6:02:27:9b: bc:2c:98:f1:8f:99:f5:43:b0:55:26:62:a5:29:06:0d:69:09: 04:33:31:3d:35:b7:05:ac:25:7c:a3:46:04:79:b1:66:27:2d: 8d:68:aa:14:6d:57:27:a0:c2:18:3d:c4:c8:d4:f0:4b:f7:60: 56:a5:8d:96:56:6e:6f:5b:ca:70:86:da:bc:b7:96:f6:5f:ee: cf:6d:49:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh85XvwRpYA/GCWgB3LGR+FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1 NmRiZmQwHhcNMjUwODA2MDEwMTEwWhcNMjUwODA3MDEwMTEwWjAzMTEwLwYDVQQD EyhlNzExZTkyMTkzYWU5ZmJjMzFkYTM1MjFlYTFiMzRhMzZmOTY4MmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusexUTy0QP4IJ90F6zmJVjI3F1Ln 2b0BjOOLg7VYRWY4WpTWM+X/uLUx6YWECuZ+Y5jGasRqAyUuY/aCENX2MFpBXdmw wRTWuKFmezEQZdtHA0OFxlQODgdDYjiFvNHxdRx9OnYnEsIOmc8IU1DPE7HeNtTX Rw8hHzTTgvbeBk/jvGp2x1jz9lIXAOA5++aHJv9pSsTwuMlRvH/gsWHXcWDJnc+o oBRhvLXSIk4Bjpspqso7q2NXn78sJkJWJU5xtWBj3U562fo4lZqS82Pu6JHLLLj9 Bik/UpqSSFr4sHFCx1O9kKIJ9gOyo1rVyKbv9jbPO6iSvgL7P5zrhYn5cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOcR6SGTrp+8Mdo1IeobNKNvloKnMB8GA1UdIwQY MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt ZTIxNjZhZDc0ZTNmLzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqMKNQDR q8OmEIH7XgDlV7sOoTiIwB42qzCAzz93kfMGifu+vNsiSsPzPrdCCzX7eM5MWLd1 clxC0KKwr90+C0ozZE0oUI9xw7/FmKu/cMNNKiXepSpTrGUZDA8jvsNXjJF8pu/u so8yDoojx3OJ3Rgt3hxSW0hA7aaxconx49IC5a/81PPrwkoejVaUKAm7EwpWM7EP 4PhmthEXrguCdlFKgmp3ztv0Brwe0XQrMbSmAiebvCyY8Y+Z9UOwVSZipSkGDWkJ BDMxPTW3BawlfKNGBHmxZictjWiqFG1XJ6DCGD3EyNTwS/dgVqWNllZub1vKcIba vLeW9l/uz21JFw== -----END CERTIFICATE-----Generated at Wed Aug 6 11:13:32 2025 by rpki-client