$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft File: CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft (raw, json) Hash identifier: p54Ia+hDfD1ZqBZaWkGpzo/umKELEP9e3HQT7WlpO7A= Subject key identifier: 35:4D:ED:A9:C9:96:40:37:18:B1:41:4B:3B:09:07:12:5E:90:95:43 Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 01987DC0ECA6F009368F6E9BBC81346D8D0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft Manifest number: 164F Signing time: Wed 06 Aug 2025 05:00:52 +0000 Manifest this update: Wed 06 Aug 2025 05:00:52 +0000 Manifest next update: Thu 07 Aug 2025 05:00:52 +0000 Files and hashes: 1: 0EWIFMkHOwPxXxJO-cVVnlFMV9M.roa (hash: H3HRfMwSGiaOC4hjRP3JPpolbe1iEtk1HgVt+tXcFJg=) 2: 1Q8S-F04ndhiDn0SGwOoAJvpcJE.roa (hash: C3Etga/0CnN14pA6mDGityRvYUsO547YlA3aweNBuiE=) 3: 4eUzX53KjKiFABS1AxLPvZ5r-bY.roa (hash: 7YG9ahRtvq/YQgGSsJQAoRx/DWLAGEIhFL7ghXNU9R4=) 4: 5HzzPzyXFWUltUFIxz7A1OHGi7o.roa (hash: KdXF+S8JaHRcZ3Ivt3Pqt/DXcq9oRCgLGhDICrSfT58=) 5: 8-WV0KFzAJRQQFuP9I6yLavMsag.roa (hash: I9thkkCJIm1PtEdyWstVE+kMoQxLauXSjcbMKnMywsw=) 6: 9NRiEzWNWvOsqkkmj1H_nO4JtIA.roa (hash: M1EfpG0UAk+KXmH4YDb8gbqx8X4cMoL0D3M3L/57Gmk=) 7: CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl (hash: Q4dhdJr0pTyW/uLp0WGV6CQiGScaImby94ecW0yoWuw=) 8: CdZHXMtiuXIYHPmoJY2aErxG8Z8.roa (hash: zau8aloWL7mHqdY4KBJaLbm12+SMJIeq7unHMUAtkpg=) 9: GnVxDQNRy4lZ_6dGRtjVD3G4cHQ.roa (hash: uewNPszrVAmQ8TC2z53P69rsch1KQGC60dIp6JPFrsU=) 10: M4I4vx1xHRyGLzdFv0m3WqQ7kbc.roa (hash: 2EMSvLZ8cjOngMWy3qqLP47J5l90EJ/AMLuHP59YgVk=) 11: QDnTB1-gKLLvkYk5f0mHuXK293g.roa (hash: ITp7yMZbWE36QWni9uBDxLpY4F+C9+SnVAj3E7l62Ts=) 12: XDAdp99VnBF7cnnsQ12OybJrT8Y.roa (hash: RlZg9LpMx3Sn+N/ygBjqDdQQDqiZuazZKwQVgxx0FBg=) 13: rfdo-9tZjARHX4NveRw0hMtJZi0.roa (hash: 5ECReeTc1Tc4KP4YsINLVoWJBI6UqeiVxcrFrB9M65o=) 14: tjV22hyfL6sKASeEJo6Ke2cIRMg.roa (hash: j+NWMjI7+Df8SVOaL0Iyl9IZZ4H1LL2E359iqV63je4=) 15: zCJNwAHBT-OuD8JSwLlWmHeq2i0.roa (hash: xxcu2GFnZrIoRaIL254U2SP3O3E+qALgdaalLMmqYoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 05:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7d:c0:ec:a6:f0:09:36:8f:6e:9b:bc:81:34:6d:8d:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: Aug 6 05:00:52 2025 GMT Not After : Aug 7 05:00:52 2025 GMT Subject: CN=354deda9c996403718b1414b3b0907125e909543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:97:e4:2b:f1:ea:da:b0:40:62:e7:3e:fd:b7: d9:40:12:ba:2b:8e:99:e3:09:ec:16:3c:47:4a:a8: d9:ee:2d:e9:71:69:f7:47:67:3b:26:6f:d2:c3:b2: 57:9a:e2:c2:b3:12:90:66:c5:ef:ad:24:95:3c:f0: 56:6b:50:f6:8a:00:00:ba:b4:f2:9b:7b:45:27:64: 8f:bf:84:8f:f7:72:71:04:2e:61:9e:34:00:be:11: cc:c7:64:7d:f9:4c:d8:b0:f0:fe:fb:19:bd:6a:e6: d5:c1:49:c7:69:cb:ee:d3:0c:b7:8e:fc:2d:dd:de: b7:9d:4b:ba:a6:dc:33:8d:37:62:4f:bd:a7:ce:b7: f6:fe:2f:f5:68:fb:e1:8c:a6:98:62:e0:70:77:7f: 93:e1:f0:bf:ba:15:89:f3:8f:5f:5a:34:3e:d1:3c: cc:da:05:78:bf:c3:74:d6:65:5b:5d:d2:c9:78:b3: 7f:01:01:5b:8c:8b:cd:00:78:07:c2:5e:7d:f9:0e: a8:53:8e:1f:be:9e:eb:84:b8:39:b4:05:c0:c6:7f: 54:ff:c0:3d:d6:8b:14:c7:69:d7:36:9a:99:58:00: 59:48:da:64:80:31:ed:d0:40:b2:e7:e1:d5:63:ae: 5a:2e:d4:27:df:01:ac:02:47:76:f9:7f:84:fd:a3: dc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:4D:ED:A9:C9:96:40:37:18:B1:41:4B:3B:09:07:12:5E:90:95:43 X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ef:e0:d8:7c:80:6a:30:b3:54:87:26:bb:37:b5:47:2f:fa: 3a:61:ba:52:cc:23:92:2d:1e:b8:32:0b:39:5b:2e:ef:26:67: 9d:6e:e5:cf:e2:d0:45:23:6f:8f:68:82:19:59:2f:98:56:c5: 8c:96:88:85:6e:ca:4b:45:d2:fc:a5:6c:ef:7f:e4:55:cb:f9: 56:a4:3b:08:1e:a4:35:66:03:5a:49:ea:e1:57:41:33:8e:0e: 04:c3:bf:ea:55:44:ea:8c:50:ce:ff:66:cf:ed:e6:bd:30:b5: 94:67:d6:20:8b:63:09:98:16:c9:41:a6:ba:eb:91:f9:f4:be: 2f:0e:e4:73:14:16:40:57:60:38:37:06:79:fc:77:9a:a6:50: c9:da:a0:9e:5a:07:ea:e3:c7:37:0a:ae:1c:1c:5b:ea:38:15: ef:94:39:59:28:54:1b:67:39:6c:35:f0:19:3c:09:27:33:9e: 98:20:45:30:f5:c3:45:57:e4:52:02:70:f4:52:20:71:73:c9: 44:a5:9d:5c:ad:25:15:d1:8b:8d:82:52:f7:89:f1:44:66:b4: 57:bd:20:ae:36:43:cb:84:d9:d5:bf:06:09:a8:e7:e2:c9:e1: ca:2f:e0:e7:1f:59:6e:d6:de:5b:5c:a1:51:2c:8d:33:11:f9: 4c:7f:76:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh9wOym8Ak2j26bvIE0bY0NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjUwODA2MDUwMDUyWhcNMjUwODA3MDUwMDUyWjAzMTEwLwYDVQQD EygzNTRkZWRhOWM5OTY0MDM3MThiMTQxNGIzYjA5MDcxMjVlOTA5NTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspfkK/Hq2rBAYuc+/bfZQBK6K46Z 4wnsFjxHSqjZ7i3pcWn3R2c7Jm/Sw7JXmuLCsxKQZsXvrSSVPPBWa1D2igAAurTy m3tFJ2SPv4SP93JxBC5hnjQAvhHMx2R9+UzYsPD++xm9aubVwUnHacvu0wy3jvwt 3d63nUu6ptwzjTdiT72nzrf2/i/1aPvhjKaYYuBwd3+T4fC/uhWJ849fWjQ+0TzM 2gV4v8N01mVbXdLJeLN/AQFbjIvNAHgHwl59+Q6oU44fvp7rhLg5tAXAxn9U/8A9 1osUx2nXNpqZWABZSNpkgDHt0ECy5+HVY65aLtQn3wGsAkd2+X+E/aPc0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVN7anJlkA3GLFBSzsJBxJekJVDMB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa+/g2HyA ajCzVIcmuze1Ry/6OmG6Uswjki0euDILOVsu7yZnnW7lz+LQRSNvj2iCGVkvmFbF jJaIhW7KS0XS/KVs73/kVcv5VqQ7CB6kNWYDWknq4VdBM44OBMO/6lVE6oxQzv9m z+3mvTC1lGfWIItjCZgWyUGmuuuR+fS+Lw7kcxQWQFdgODcGefx3mqZQydqgnloH 6uPHNwquHBxb6jgV75Q5WShUG2c5bDXwGTwJJzOemCBFMPXDRVfkUgJw9FIgcXPJ RKWdXK0lFdGLjYJS94nxRGa0V70grjZDy4TZ1b8GCajn4snhyi/g5x9ZbtbeW1yh USyNMxH5TH92yA== -----END CERTIFICATE-----Generated at Wed Aug 6 13:17:20 2025 by rpki-client