$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft File: RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json) Hash identifier: EXOw2KTcYnd7o5UTtHh91sUhHCX9MOIivjui3WT8GKA= Subject key identifier: BC:2F:5C:61:A9:BC:96:89:B3:B2:7C:43:8B:4C:CD:96:5F:CF:2B:5F Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 01988E0FC6435E6DAE8EF822C418469897FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft Manifest number: 09CE Signing time: Sat 09 Aug 2025 09:00:55 +0000 Manifest this update: Sat 09 Aug 2025 09:00:55 +0000 Manifest next update: Sun 10 Aug 2025 09:00:55 +0000 Files and hashes: 1: 7HWHA8UqwHtsqDMBW-DwrAaDDjM.roa (hash: e8s5o0udkcNi/3gr4/Pby8a6BORkIl6Tk5BcUgdqf98=) 2: 8ZU3bGrm9xWhwMuNBNg_sVSf78w.roa (hash: q1BAPF4hVnnZILV3v3GzNcOP1nX7SZBYfnbCOVjjzwo=) 3: 9-Cs-wlSKolkQOZlHuZ6o38xnW8.roa (hash: /LvilRmKOS6giT5Dw0+bvBLFwH/Vk7jUGiOc4qBQkvY=) 4: CH-MNJ62x7kM2_t2iuWi-Pl441k.roa (hash: HaFXnQzr7MPgH+K0peJzoRzHcSdMpsIno7S1dDVTYls=) 5: F93HK3zZbjyanEiJSO9cArJniew.roa (hash: wrh+x7Klvcmq0ZMqoDo7aM3datdsQCypsCC/kWY8BG4=) 6: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: JcQlOh8/4aX0VFhnWObbhPazVATaEYpgBBW5/PTXGtA=) 7: RocZhE1Sgw4wWmm8LnKO4d7f68w.roa (hash: +rys+d7y9dD2VIYL252iXtWKGL/n4lME4L1WtriVBxI=) 8: U47Wz_LD2xLJywbdswHmPzRJpDo.roa (hash: qCq8pw/dLAXcMlcPqPaGHxhAYIuN8gInNQEcnd7HSIs=) 9: cSOzcJuJznyp0-yCo16vcwC-SO4.roa (hash: /BcpV3CpFg+yHnaLyG3CeUoFmA/RLptEV35Vt1SRJwQ=) 10: g8u27N4QItUirByGNIpicNOy82Y.roa (hash: 86XD7A3oPGKMoD9IAzlfVhw0nOpZrI3Tfibq7N31K6c=) 11: iH3j8qY1-071YfTwOblznlAQw6s.roa (hash: yME8emyVjusbrBjqemdlgI+CwPOa3VlHZpR5ZeMxUWc=) 12: mGSm6WnPN8htR3E3SqRmvrkDAW0.roa (hash: ma8SoOibhRfVHVvLv4aSGOKoznJfyTFPs8hixxk0hN8=) 13: o8lbHUF5p8P0LSI1V6iY7jMTuTg.roa (hash: ZQCfB91uZ1JZ71d13fCWoNRsNQvDiuAzDxXdM3rVpoo=) 14: ryDPDikJ1i_zY_ss9G41qhvN3jc.roa (hash: h94vj7TMlIg5ainHE5mYHmcUUj3Q1WNeWVzGbaI/3Fg=) 15: s34gFp_Dg8YCv8xU55YOYuR_tp0.roa (hash: 6OSop7WtLWi7lLLdg7yDCXvjXq4AkQqEA6GX04GSf58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 10 Aug 2025 05:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:8e:0f:c6:43:5e:6d:ae:8e:f8:22:c4:18:46:98:97:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Aug 9 09:00:55 2025 GMT Not After : Aug 10 09:00:55 2025 GMT Subject: CN=bc2f5c61a9bc9689b3b27c438b4ccd965fcf2b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:16:b9:8c:a6:1d:1c:81:f5:e7:77:ef:b7:53: 81:69:f7:bf:9f:71:c2:29:60:a4:87:11:40:e8:7f: 50:b7:26:79:ad:bb:28:21:2e:92:7e:b2:1d:0d:b5: 0a:ec:c2:27:b1:ac:36:cd:69:c2:c7:a8:8f:93:3a: 58:be:66:ad:f5:8f:8b:8e:d0:dd:57:b2:e3:7d:d5: 9c:7c:e1:7f:3d:71:96:ac:eb:1d:f2:d8:48:e5:72: ec:6a:96:54:e7:77:d2:1f:ba:dc:dd:80:79:c2:f8: b9:1f:d0:84:51:67:64:61:08:92:c1:f7:0e:90:dd: 4a:1c:fa:ed:15:9c:0f:4d:a3:b1:46:6e:e4:7d:db: 04:ea:f1:76:75:6c:cf:c8:5c:36:f9:32:b3:8b:c1: 6d:95:42:9d:6e:af:ea:b2:d7:ae:99:af:24:c0:9a: 59:60:a8:a0:47:d2:5d:26:f5:85:37:e1:56:cf:da: 1b:3b:ea:31:e8:ca:83:ca:2e:0b:0f:f9:ad:4a:dc: d1:89:59:91:ca:a9:85:63:f6:ea:4a:c3:d2:55:6b: 71:04:4a:7b:c4:ed:6a:06:6a:17:65:1a:36:c3:23: d9:3e:39:b3:aa:94:c8:f4:f5:6f:74:cd:cc:b2:42: 4e:de:6a:54:c2:56:3d:89:fe:e8:08:39:d1:b8:81: b6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:2F:5C:61:A9:BC:96:89:B3:B2:7C:43:8B:4C:CD:96:5F:CF:2B:5F X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:b2:4f:c0:34:b5:d8:5e:a9:36:12:59:d9:67:6f:38:b6:54: fb:36:39:09:0f:69:a3:41:bb:c0:d4:7e:48:8e:e1:a9:34:c2: 53:c5:ea:db:6e:46:f8:f8:fc:9e:61:27:a4:c6:b9:75:ed:45: bc:e4:e7:3e:b5:f0:73:12:56:b3:74:72:d2:8c:08:d2:48:61: e9:8c:78:11:e1:bf:52:61:14:61:80:74:db:3d:5b:b5:d2:da: 1c:bd:2c:f9:fa:bc:ef:54:fe:0a:ce:60:4a:00:a5:47:9b:b0: bb:ac:8b:22:39:3d:92:88:a2:28:23:fb:8a:4f:74:a7:5a:49: cd:f1:86:39:7a:c5:5c:f3:cb:a7:19:f5:4d:5e:73:4d:40:eb: db:33:57:89:75:61:fb:7b:c7:b8:f2:ba:e3:76:0e:bf:01:6c: 21:9f:ff:d5:5a:f5:47:b8:01:b5:30:fd:9d:4a:15:94:5a:43: 4c:f0:ba:c7:a1:42:1e:b8:f0:77:4e:35:48:ab:d9:9d:7b:89: 2f:29:e3:69:48:de:dd:a8:7e:97:3f:37:e4:1b:65:48:e3:8b: 6c:b2:8b:25:d2:b7:98:4b:14:92:a1:01:3b:81:12:c4:22:21: 18:e6:02:5a:dd:88:f5:af:e4:57:8b:34:3b:8d:9c:42:87:c9: a7:c2:c5:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiOD8ZDXm2ujvgixBhGmJf6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjUwODA5MDkwMDU1WhcNMjUwODEwMDkwMDU1WjAzMTEwLwYDVQQD EyhiYzJmNWM2MWE5YmM5Njg5YjNiMjdjNDM4YjRjY2Q5NjVmY2YyYjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRa5jKYdHIH153fvt1OBafe/n3HC KWCkhxFA6H9QtyZ5rbsoIS6SfrIdDbUK7MInsaw2zWnCx6iPkzpYvmat9Y+LjtDd V7LjfdWcfOF/PXGWrOsd8thI5XLsapZU53fSH7rc3YB5wvi5H9CEUWdkYQiSwfcO kN1KHPrtFZwPTaOxRm7kfdsE6vF2dWzPyFw2+TKzi8FtlUKdbq/qsteuma8kwJpZ YKigR9JdJvWFN+FWz9obO+ox6MqDyi4LD/mtStzRiVmRyqmFY/bqSsPSVWtxBEp7 xO1qBmoXZRo2wyPZPjmzqpTI9PVvdM3MskJO3mpUwlY9if7oCDnRuIG2VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLwvXGGpvJaJs7J8Q4tMzZZfzytfMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqLJPwDS1 2F6pNhJZ2WdvOLZU+zY5CQ9po0G7wNR+SI7hqTTCU8Xq225G+Pj8nmEnpMa5de1F vOTnPrXwcxJWs3Ry0owI0khh6Yx4EeG/UmEUYYB02z1btdLaHL0s+fq871T+Cs5g SgClR5uwu6yLIjk9koiiKCP7ik90p1pJzfGGOXrFXPPLpxn1TV5zTUDr2zNXiXVh +3vHuPK643YOvwFsIZ//1Vr1R7gBtTD9nUoVlFpDTPC6x6FCHrjwd041SKvZnXuJ LynjaUje3ah+lz835BtlSOOLbLKLJdK3mEsUkqEBO4ESxCIhGOYCWt2I9a/kV4s0 O42cQofJp8LF6w== -----END CERTIFICATE-----Generated at Sat Aug 9 15:12:26 2025 by rpki-client