$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft File: SAXxfC1xM9La06jffjUxXjfvXa8.mft (raw, json) Hash identifier: QeoXwpWEK/KGG6dN8Uy+5WeYQX0HEXBM8KJPpgd4Q2E= Subject key identifier: 68:C0:28:15:03:98:F6:68:AE:4F:E5:3A:9D:26:6A:A1:76:6A:0A:D2 Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Certificate serial: 01987C77FA399ACE5CBF10BE9D56863BD57F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft Manifest number: 16C4 Signing time: Tue 05 Aug 2025 23:01:34 +0000 Manifest this update: Tue 05 Aug 2025 23:01:34 +0000 Manifest next update: Wed 06 Aug 2025 23:01:34 +0000 Files and hashes: 1: 0Ku6hM-uBGPbIB_elC1-63mAMPQ.roa (hash: COta24brNXG7Hg0yqxT50IIeRD/EU1T0z8f77M/W0Yo=) 2: 0r24pIQSTUD5N5L07GOWGFKPpV8.roa (hash: trXkO9svjCxRC078/qaWkwZVcRw/r/RbNzaK05elAEs=) 3: 1-W34Y2-6ZjemXz3iWQp8JT5r4fo.roa (hash: jNjeNOA7d8RyKrYy4kXSP0ufCj18S8yCDg4Nofw0dAY=) 4: EkFoJFaGBhEamXzDueIrcP26LBc.roa (hash: PQO2ZDlIaJ7jCYwx8vtlK6hg74IbDpuCQQjGUuzjVhU=) 5: KQ1oNR09mKgd5ku7SR1U_e9V9fQ.roa (hash: cs83TD53Tvlf/W2SbQnH3f+S/haNzyXJayHuIXfao20=) 6: R3xayF97XK3f6WN53ZX5sxR54jo.roa (hash: 3PZ+HViUokDQMZxJmaE1uzBy+pQRq/4nLFWrCe3sMjU=) 7: R4JA4ZrzZRT6P7L7s0XA8tBlvow.roa (hash: UZWxFLVEGSwKY6r7vPrE+HW6Om5TTOD3+yQvi0X4C9A=) 8: SAXxfC1xM9La06jffjUxXjfvXa8.crl (hash: KInfASR9yovr3EVzjMVwsb8TqTuecptmnh8A7+rZWQg=) 9: U9JKjRKHCxdIsPDNQPOR88OqmCg.roa (hash: lajLKbejzI40eVa7BHAS4fdbPpPskr27n+GpeXAUSBk=) 10: V5zbutGfbh5lgD5tOB55BSZL6mM.roa (hash: 8dfbuUOKEzC/ptg0//A1zNKfTmzKWKS3nTLCemG3GRo=) 11: VgwcNuoBbQF8vGnu87-98unWzYI.roa (hash: xzpL3I9r8p4R1FCkPrlQ5XYcS0wswEmNqu/eM1IOMwU=) 12: WclbZXzoRolOPnP1txTGa2N2wfw.roa (hash: bkUop8nfZL+I8FoNjqYPn2viT45YyNvKLtfeDigIXyI=) 13: Zj4JwFMN6H5YeHt4cvNXltyCdE4.roa (hash: CWOsIZG4hIEMhn5XzXUXZbhFt0Yejg6in7qKXYgJegA=) 14: _yzn5oDusX2X0X7GKZBcg6brbLE.roa (hash: 3Zb9XtEnFpg2ZnedyDM6Fmzs7qviCkwqPZ3m1FKhSy0=) 15: b81Y2U7ou3gE7qnhOIrH6wzIwHE.roa (hash: evIbesfBnQDx6fK9X24u14Wb1m4RUjoEvZ0+mfP0N8E=) 16: bZniM2QlgkpTXR-OwANLXtwZtPE.roa (hash: 1uGphNb2cimTL54FLmsjWSi2OJxcMRM81uY8UPnrcpo=) 17: iPxdZuzxvDtlhje1pBxfz_ffoSI.roa (hash: 5nZeFKjMPEJbsRI/uBt0UR440fY87EaeHxRz6CkKzyc=) 18: igfswpczVEfMjm7rXy2pimjD7X4.roa (hash: hNuYzqad4FMypVvrep7dgecmR/mSIvVwXcEovIMpz3I=) 19: uE7Yr0mrdBcUX1IW6FuzHWklFWE.roa (hash: Txuv8knFAVKbDTm6XQpLWHHm/zIqEkh3sPLdu38MgYQ=) 20: ulYg4AG1ul90cUDOSHCVqM9kgX0.roa (hash: YyEEkcY+cM/W31h/eE29O/fYkGie+5JT9vHD80X8ftc=) 21: yF60MXomOPXicQ4dVy_gu3Jce0c.roa (hash: 5FKE6qFccFKdKUpBcGBwVGHo07CqDvWyXp8ktMwwG+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 23:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7c:77:fa:39:9a:ce:5c:bf:10:be:9d:56:86:3b:d5:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Validity Not Before: Aug 5 23:01:34 2025 GMT Not After : Aug 6 23:01:34 2025 GMT Subject: CN=68c028150398f668ae4fe53a9d266aa1766a0ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f1:82:9c:01:67:63:51:ef:45:66:6c:83:28: de:7c:f1:8b:7f:cb:3e:16:37:aa:7a:4a:df:bc:df: 96:07:70:9f:30:8c:55:63:80:74:33:aa:aa:35:9e: 2f:d2:67:37:58:cc:2d:b7:e7:53:46:38:f6:29:db: 1b:a9:12:fb:e8:a1:b5:93:84:cc:13:f9:09:36:bf: 61:b7:06:d3:65:f7:eb:b3:c0:ab:7b:38:dc:b4:94: 31:f3:fe:17:a8:87:67:e7:61:68:a9:da:de:0f:82: 08:65:8b:13:4d:f1:1f:ef:01:b7:e8:0b:6f:06:e4: 8d:c6:cc:16:ba:a8:8d:c9:8d:99:62:83:d8:88:96: cf:6b:54:67:26:01:3e:1a:20:c3:62:dd:1d:ff:be: 06:71:15:5c:86:10:5a:d5:8c:cd:20:c7:55:dd:39: 89:1a:b9:89:0f:13:f7:16:27:94:05:8d:2a:10:89: d6:e0:bb:ca:09:71:e7:c7:5d:a2:7e:ea:89:99:96: a7:40:f0:2a:fe:c9:61:3c:0f:e8:ac:28:19:fc:29: 5d:06:fa:c7:f8:08:3e:45:be:70:04:55:81:9e:43: 60:cd:3f:f2:ad:d1:44:08:4e:9d:8b:2e:81:ec:40: f9:24:de:98:6e:6a:7d:ba:3e:53:7f:b8:40:ff:21: 6d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C0:28:15:03:98:F6:68:AE:4F:E5:3A:9D:26:6A:A1:76:6A:0A:D2 X509v3 Authority Key Identifier: keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:bf:e5:1b:e7:ed:47:95:e1:6d:20:e4:d5:10:2a:6f:6b:eb: 70:c8:0b:4c:7b:46:18:17:18:62:e1:04:df:cf:51:a4:fe:d3: 23:d0:a5:ac:68:a9:ff:24:b3:95:49:e3:79:2c:2f:06:70:f6: c7:e1:3f:8d:4f:97:d0:ef:08:79:4c:40:72:54:52:35:d1:62: ad:13:65:79:f9:d2:30:a5:81:f5:58:33:02:5f:0d:25:09:d6: 54:36:60:33:eb:97:90:97:e9:75:90:b7:90:e9:6f:2e:8e:29: 97:58:30:71:67:d8:39:34:b2:c5:81:6b:95:68:b0:32:5a:a4: 71:04:9e:23:1d:14:70:74:ab:a2:ba:7c:6d:2b:3c:25:e7:31: 96:54:cb:a0:bf:c3:cc:af:51:b3:8f:b1:26:ba:d6:1a:76:99: db:fe:c9:97:6c:d1:67:87:76:9e:21:6d:ea:04:5d:14:3b:81: 16:84:9e:cb:4c:86:0c:cc:5e:82:eb:1c:fd:0a:5e:71:8b:fa: 38:53:24:81:59:34:f5:de:d7:c1:5c:a1:b1:25:df:40:dc:2a: 0f:62:2f:f4:d9:f9:35:a7:30:3f:7f:80:b3:a4:ef:67:b3:8f: c8:66:16:96:94:4e:c9:27:dc:8d:e0:1d:81:74:fc:3a:ea:ed: 75:27:53:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh8d/o5ms5cvxC+nVaGO9V/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl ZjVkYWYwHhcNMjUwODA1MjMwMTM0WhcNMjUwODA2MjMwMTM0WjAzMTEwLwYDVQQD Eyg2OGMwMjgxNTAzOThmNjY4YWU0ZmU1M2E5ZDI2NmFhMTc2NmEwYWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/GCnAFnY1HvRWZsgyjefPGLf8s+ FjeqekrfvN+WB3CfMIxVY4B0M6qqNZ4v0mc3WMwtt+dTRjj2KdsbqRL76KG1k4TM E/kJNr9htwbTZffrs8CrezjctJQx8/4XqIdn52FoqdreD4IIZYsTTfEf7wG36Atv BuSNxswWuqiNyY2ZYoPYiJbPa1RnJgE+GiDDYt0d/74GcRVchhBa1YzNIMdV3TmJ GrmJDxP3FieUBY0qEInW4LvKCXHnx12ifuqJmZanQPAq/slhPA/orCgZ/CldBvrH +Ag+Rb5wBFWBnkNgzT/yrdFECE6diy6B7ED5JN6Ybmp9uj5Tf7hA/yFtCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjAKBUDmPZork/lOp0maqF2agrSMB8GA1UdIwQY MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt NWRkNmUyMmViYWIwLzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7/lG+ft R5XhbSDk1RAqb2vrcMgLTHtGGBcYYuEE389RpP7TI9ClrGip/ySzlUnjeSwvBnD2 x+E/jU+X0O8IeUxAclRSNdFirRNlefnSMKWB9VgzAl8NJQnWVDZgM+uXkJfpdZC3 kOlvLo4pl1gwcWfYOTSyxYFrlWiwMlqkcQSeIx0UcHSrorp8bSs8JecxllTLoL/D zK9Rs4+xJrrWGnaZ2/7Jl2zRZ4d2niFt6gRdFDuBFoSey0yGDMxegusc/QpecYv6 OFMkgVk09d7XwVyhsSXfQNwqD2Iv9Nn5NacwP3+As6TvZ7OPyGYWlpROySfcjeAd gXT8OurtdSdTBQ== -----END CERTIFICATE-----Generated at Wed Aug 6 09:30:35 2025 by rpki-client