$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft File: b8UNDUIGe3arGi6OUz_4SbZdVvU.mft (raw, json) Hash identifier: 4yk5hsXCfaoQYeoUUbzAJG7TMFRvpeA2lkCAm3vGk2Y= Subject key identifier: B8:BC:CD:8B:B4:A8:6C:8B:D4:F0:F2:3D:47:69:ED:94:B0:43:38:66 Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Certificate serial: 019873AAD437B0B5B0CE1815E815BF70FED8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft Manifest number: 163F Signing time: Mon 04 Aug 2025 06:00:31 +0000 Manifest this update: Mon 04 Aug 2025 06:00:31 +0000 Manifest next update: Tue 05 Aug 2025 06:00:31 +0000 Files and hashes: 1: 0Abj6PSR4FyJUqM6LoN6KFa-26E.roa (hash: 3N4/akmiC/u7gL1HF+D/mYuikLJRGoPmYVruDqzajtA=) 2: 1-HYjW61poyKPMhvfx7U4CngkbXQ.roa (hash: FgaQ7pllPxrtYs+K7a4T0YujtsmGhQlX0nAW+eszuLQ=) 3: 1X78ozO3_5ULJTTX4ARholYkMtY.roa (hash: 1YfjPO55+mmSYnYEpQNn/8Y7Ymp0JTDMtIPTDKYWHh8=) 4: 3yeC5jM2ksuqKR2Zh5IvhgGT7kM.roa (hash: aly6yVEpJfsikwPOCEOA8sYqzyulJ58cobvGMlp3Pfc=) 5: ESsRo9MaF3o9GqzJvXZpu73We6Y.roa (hash: UaGHPYsyEVFFkrfNGoMdaOZN1uzCFEON6PTFyG+oUvY=) 6: H6AhUHbx8OlryRkBD15AK_97AFI.roa (hash: aVuSxMtEE3jtCIFUPkZzKs9s0u5aGihLcG9skQiW4iU=) 7: IE5Ot6kXSpSm_XTJaCWCEcClZ1E.roa (hash: ecVDNUR7HlsILjWVcvUtVx/095hxRc4P38CIzJWANj8=) 8: K8brr-FPsMEnGF0kbZo88qS6lTk.roa (hash: qW/T11RMV283PJtyNsGcccWeoOYrXus8SlIyII3hPJA=) 9: OQtVR-cBTyQL6VvIXAOtawOW2cA.roa (hash: Y4JxghrLsZ564AFIbmlJP5QHypmTlarb7NM9FNTmN7A=) 10: RzzP2UDDSAPrZWNFm6aBz91iMgQ.roa (hash: 1RDkfiEzt2ZEB4LXorNIAFk4fcDKeMEBcQ7w1edzRtU=) 11: UND6ykiM5N2Whk6faH2bgr5_Tp8.roa (hash: 5dH/g9DexAH0bhxx/mr0h3rPJ5N5miOI47JiKbqWBiU=) 12: XKHgN2jT3_6QMfOgHKrS1JlPtdM.roa (hash: 0/lku7LnO6lIZwW3HNYBW2LCc3aSui+jPA3GCkogDfQ=) 13: b8UNDUIGe3arGi6OUz_4SbZdVvU.crl (hash: kEROPLkdKk+HW8YUcTIswO0psUuY2rolBPky8wj8x7Q=) 14: hz97jgo9bqt0uT-ArAt9KzOXsP4.roa (hash: bhze+d6pD3xd6tpzBiM9HUGCjaef6tJylvnHETr5GxE=) 15: iNYkqcS0PNGby4-GJu8UVMQggRY.roa (hash: nyGk+qZgZIHoVA2y4TNTNY21X6xYGa600Okb1SMJu44=) 16: wEFBReYub_TeCbtnkjQHEDS6zaQ.roa (hash: 5e2lfQsxA6BsgP6dDtPIK0Ql9foij6lPOeMn2Q1JhkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 06:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:73:aa:d4:37:b0:b5:b0:ce:18:15:e8:15:bf:70:fe:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Validity Not Before: Aug 4 06:00:31 2025 GMT Not After : Aug 5 06:00:31 2025 GMT Subject: CN=b8bccd8bb4a86c8bd4f0f23d4769ed94b0433866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6d:6a:f4:63:b5:e9:ac:c7:ac:ae:17:5c:c0: 7b:33:38:03:64:8a:c0:c2:65:f0:6f:fd:16:58:ea: 47:aa:b9:51:ae:9e:9c:59:ca:af:95:08:da:e1:03: eb:bc:e5:59:5d:c7:22:54:25:6b:6f:09:44:06:1b: a1:0a:21:a0:4a:ba:28:a8:80:6f:9e:6d:e2:c7:41: 88:8d:b6:68:5d:f2:cd:4e:75:d8:2f:b7:ec:f6:13: 4b:f9:2b:09:7d:59:64:80:0c:3b:b9:a9:b4:1b:52: 1d:80:19:80:b5:f7:8e:e0:b7:65:67:3b:6b:ce:d1: 6c:69:8d:0f:7c:4b:f8:76:0a:1a:15:7d:f1:b0:8f: 2e:98:d3:7a:9b:ea:7a:93:ba:91:60:6e:61:8c:b3: 67:16:4a:52:26:b9:15:9a:a6:fb:c7:d9:fd:95:9d: b3:53:7c:2d:3d:27:b8:47:d4:0e:74:73:1a:ec:44: 99:5a:1f:5c:70:52:e6:c7:29:ae:97:e4:5c:41:59: 92:e7:b4:a5:c1:6c:7d:04:bd:a5:25:f6:86:60:64: 24:e7:76:1e:d3:16:a6:bf:14:11:ec:84:bc:c2:35: c0:e4:e1:4c:5a:33:52:db:3e:75:fa:32:0b:9b:22: 58:a1:84:b2:9b:fc:d3:a7:5c:e1:e7:bc:ee:3c:85: 45:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:BC:CD:8B:B4:A8:6C:8B:D4:F0:F2:3D:47:69:ED:94:B0:43:38:66 X509v3 Authority Key Identifier: keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:58:2a:d2:b2:a3:a2:93:07:f5:02:0c:17:f9:e4:6b:4a:c1: 02:d2:56:59:52:61:f8:9f:60:6f:f7:45:f8:21:a4:4a:78:f2: 2e:79:2f:21:4d:6f:38:3d:b7:b3:12:ba:c6:a3:9b:a0:81:f1: b5:b9:e0:ee:5c:d2:d3:6d:2f:b3:0e:a5:5d:5e:f2:d6:70:53: 21:9c:6f:d1:33:a6:4d:fc:2b:05:0d:79:07:2e:b8:1d:fd:ed: 1f:d1:58:cc:2e:f2:ca:bb:0e:60:72:af:f0:0b:39:07:9b:8c: 3c:71:d9:0d:c8:cb:4d:80:75:a0:d8:c3:df:6c:59:88:d0:2f: 54:29:5b:2d:7d:d5:17:cc:ef:60:e4:d1:f7:42:0e:ef:1c:54: 28:f6:54:dc:96:e7:71:4d:c7:22:1a:d4:2d:88:21:05:06:eb: b9:1f:22:f5:0f:c4:ad:21:39:04:2f:fc:07:10:00:35:d8:b0: d4:52:40:ea:45:7a:b2:ec:f0:b0:98:9a:e0:6f:e9:2d:bc:2c: cf:73:35:98:24:20:82:9e:f6:90:df:c3:0d:38:53:37:e2:7a: 9b:05:63:88:80:9f:21:ea:0c:5d:5e:03:76:d3:a2:93:d4:c7: 26:0f:21:60:f8:27:b6:e4:56:e5:eb:42:b3:32:2b:75:42:93: 8a:a5:85:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhzqtQ3sLWwzhgV6BW/cP7YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1 ZDU2ZjUwHhcNMjUwODA0MDYwMDMxWhcNMjUwODA1MDYwMDMxWjAzMTEwLwYDVQQD EyhiOGJjY2Q4YmI0YTg2YzhiZDRmMGYyM2Q0NzY5ZWQ5NGIwNDMzODY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW1q9GO16azHrK4XXMB7MzgDZIrA wmXwb/0WWOpHqrlRrp6cWcqvlQja4QPrvOVZXcciVCVrbwlEBhuhCiGgSrooqIBv nm3ix0GIjbZoXfLNTnXYL7fs9hNL+SsJfVlkgAw7uam0G1IdgBmAtfeO4LdlZztr ztFsaY0PfEv4dgoaFX3xsI8umNN6m+p6k7qRYG5hjLNnFkpSJrkVmqb7x9n9lZ2z U3wtPSe4R9QOdHMa7ESZWh9ccFLmxymul+RcQVmS57SlwWx9BL2lJfaGYGQk53Ye 0xamvxQR7IS8wjXA5OFMWjNS2z51+jILmyJYoYSym/zTp1zh57zuPIVFuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLi8zYu0qGyL1PDyPUdp7ZSwQzhmMB8GA1UdIwQY MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt M2MxNmZmODQxYWIyLzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1gq0rKj opMH9QIMF/nka0rBAtJWWVJh+J9gb/dF+CGkSnjyLnkvIU1vOD23sxK6xqOboIHx tbng7lzS020vsw6lXV7y1nBTIZxv0TOmTfwrBQ15By64Hf3tH9FYzC7yyrsOYHKv 8As5B5uMPHHZDcjLTYB1oNjD32xZiNAvVClbLX3VF8zvYOTR90IO7xxUKPZU3Jbn cU3HIhrULYghBQbruR8i9Q/ErSE5BC/8BxAANdiw1FJA6kV6suzwsJia4G/pLbws z3M1mCQggp72kN/DDThTN+J6mwVjiICfIeoMXV4DdtOik9THJg8hYPgntuRW5etC szIrdUKTiqWFVw== -----END CERTIFICATE-----Generated at Mon Aug 4 15:36:12 2025 by rpki-client