$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft File: o20K5eL7_8zgh3Drwgwha5-_lIU.mft (raw, json) Hash identifier: sCdW1oG2aFFc10xz9LZh3fsKvmkWt+Jm6DsE1dIY50I= Subject key identifier: 75:6E:A0:FE:0F:3F:22:FA:CB:44:09:55:49:7D:AC:59:87:1B:6A:E5 Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Certificate serial: 0198801DBD3B13C140C6CA9B85DC123582A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft Manifest number: 1654 Signing time: Wed 06 Aug 2025 16:01:29 +0000 Manifest this update: Wed 06 Aug 2025 16:01:29 +0000 Manifest next update: Thu 07 Aug 2025 16:01:29 +0000 Files and hashes: 1: 1XbIXlsc12j6nm66ObHlANu1FxM.roa (hash: lxZWGjYaWrGULnJUqbEWkt5IyYC/5a04fccF0g2Mp+o=) 2: 2tgBVmzXGxk2dORJHycmoqheNvg.roa (hash: kLmIpYFnCrJEJseq7gvSUWiTbkY+zk+XKRVcxk6gNqA=) 3: 3RFddkozoZGvDJWQRcnS3tQnN6k.roa (hash: KSM4qOmDj4X6PN9gZp6oxzJSTfcXsGzAsnDPsOPcYvo=) 4: BUbLcDK2mlbMmQrWrXK_KkB_Z8I.roa (hash: 5p58mg305UQz5j2iOVYn7ENJmD3sfGRtf406Z23M5Fg=) 5: DlEN3D6ABTKOQAUtaBMUB9rDXTg.roa (hash: 7Z/Q1II+IY41ZQNrl/gNVuPJHIVrAlLxhLrLlp3uHJ8=) 6: H01ebKmYCQknZn1s369T3LRjuP0.roa (hash: a5mkV0eefLFDCchKs3kB8B5GuAxUCPEdCplVuWjuvg0=) 7: fz5OQX3YNuZKli23fQPsHJMHAjg.roa (hash: 2W1jdhiJm6VJW0yfAkLiyNtl6yjC+Bfx3j0Hv8QWt58=) 8: o20K5eL7_8zgh3Drwgwha5-_lIU.crl (hash: X8/4wIfakowC5TJ0HOFWFrxRJq4RO8JC9UU/3c9uqpE=) 9: tn7ZdWo9WQgYlB0Z6sOK2If7PKQ.roa (hash: 8aBGWuWam9C6QXOPco15OTid7ItEiEbxf2K863xiGIk=) 10: uxPuBCLIiL0vvpcp5iG57n6Nxl8.roa (hash: 9FJQPnJf1+iHQwAWGEeso0fULqarFlyxqNgrRoa6pYY=) 11: v8yHhVnQZ24d3Hqq-_MmljsyF-o.roa (hash: ldyVLPmDRLippOD+hn4EjHJmd9dcu8cUfl/mwJelT5M=) 12: vOg7pIai3eYlqI8nGfkYR-448qE.roa (hash: k2twTqEvKHP86X8yabE26RQnv5iqhvXZjH+b4EIuDog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 16:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:80:1d:bd:3b:13:c1:40:c6:ca:9b:85:dc:12:35:82:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Validity Not Before: Aug 6 16:01:29 2025 GMT Not After : Aug 7 16:01:29 2025 GMT Subject: CN=756ea0fe0f3f22facb440955497dac59871b6ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:be:04:8c:fd:cf:08:4c:ec:02:23:79:ed:54: b1:b4:3e:c2:00:e2:f2:54:c1:28:2e:dc:e0:7c:60: ee:b7:26:f0:a0:2c:b7:83:b7:f1:4c:0d:74:5c:ba: 91:de:9c:ac:b9:af:f3:ab:44:0f:20:ef:99:9e:95: 4d:29:90:1d:e8:dc:b6:fd:c7:3e:eb:b7:30:66:5f: e0:81:da:b6:a7:33:ec:85:b2:a3:46:fd:5c:9e:a0: 4a:fb:7f:b0:8a:9b:91:b7:e8:45:f5:44:5c:70:7a: fa:eb:9c:c8:ab:85:00:7f:fd:27:a2:4d:c5:99:03: 23:60:52:d8:c2:40:dd:ac:20:b0:97:63:19:b8:d3: 45:67:67:74:72:fa:38:38:eb:15:7c:58:6f:b0:18: ff:f6:60:03:05:7f:52:4c:74:e5:84:1b:7f:f5:f3: ed:c8:c4:5d:0e:0b:de:c5:b7:f0:34:0a:26:ba:2b: ec:f2:ba:32:4d:21:e6:07:de:a8:af:bd:f5:f3:31: 05:2c:a7:35:ae:dc:b9:90:3d:ba:93:76:0b:e4:6d: 1c:bb:9e:48:9d:e5:07:1c:13:9a:34:bc:75:99:9b: b5:1a:b4:9f:08:8d:c4:20:73:1f:3d:08:6f:20:e7: 30:9a:43:b8:05:27:93:f3:64:83:2a:f4:d8:32:70: 0e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6E:A0:FE:0F:3F:22:FA:CB:44:09:55:49:7D:AC:59:87:1B:6A:E5 X509v3 Authority Key Identifier: keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ef:66:cc:af:ba:09:65:e5:26:8c:c2:f8:c0:dc:59:03:0d: 0a:1a:8c:54:e0:4f:9d:5d:21:84:ee:f6:50:8b:a4:be:a3:03: 68:50:0f:01:61:cb:53:de:21:62:f9:08:65:98:12:97:e0:95: c9:7f:35:e2:7b:ba:37:66:ea:64:ae:66:31:89:1f:8b:a6:5c: 71:22:6d:05:a0:f2:1d:7b:d1:f8:8e:16:e0:63:d9:6d:d2:7a: 4b:34:85:9f:bc:a9:73:92:56:41:4f:08:44:4c:83:78:12:52: 84:26:f7:06:12:5f:e9:05:44:93:e5:8c:8b:fe:93:93:fc:f6: 3d:42:47:df:35:ad:00:7b:15:40:f3:19:7b:a2:23:c6:dd:2d: 20:d8:b3:65:24:4c:7a:eb:17:e9:a7:f1:d6:10:75:4d:39:50: b1:f7:7d:95:7a:c3:86:1f:d0:43:d4:66:b8:b9:5a:e1:65:38: e5:05:23:5e:4b:b6:39:14:67:dc:07:fe:ee:11:6b:83:6f:40: 5e:31:6e:b1:29:d9:62:b8:b2:28:70:be:10:77:ea:1c:22:ac: 33:5a:39:0a:d3:7d:dd:33:45:f3:0a:8d:4f:39:e9:15:fd:38: eb:9d:7b:aa:15:67:a5:da:bb:75:27:ae:89:51:13:14:f0:da: 6a:2a:0a:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiAHb07E8FAxsqbhdwSNYKjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNmQwYWU1ZTJmYmZmY2NlMDg3NzBlYmMyMGMyMTZiOWZi Zjk0ODUwHhcNMjUwODA2MTYwMTI5WhcNMjUwODA3MTYwMTI5WjAzMTEwLwYDVQQD Eyg3NTZlYTBmZTBmM2YyMmZhY2I0NDA5NTU0OTdkYWM1OTg3MWI2YWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr4EjP3PCEzsAiN57VSxtD7CAOLy VMEoLtzgfGDutybwoCy3g7fxTA10XLqR3pysua/zq0QPIO+ZnpVNKZAd6Ny2/cc+ 67cwZl/ggdq2pzPshbKjRv1cnqBK+3+wipuRt+hF9URccHr665zIq4UAf/0nok3F mQMjYFLYwkDdrCCwl2MZuNNFZ2d0cvo4OOsVfFhvsBj/9mADBX9STHTlhBt/9fPt yMRdDgvexbfwNAomuivs8royTSHmB96or7318zEFLKc1rty5kD26k3YL5G0cu55I neUHHBOaNLx1mZu1GrSfCI3EIHMfPQhvIOcwmkO4BSeT82SDKvTYMnAOEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVuoP4PPyL6y0QJVUl9rFmHG2rlMB8GA1UdIwQY MBaAFKNtCuXi+//M4Idw68IMIWufv5SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt Y2JiOTUxODNiMjdhLzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh LzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACu9mzK+6 CWXlJozC+MDcWQMNChqMVOBPnV0hhO72UIukvqMDaFAPAWHLU94hYvkIZZgSl+CV yX814nu6N2bqZK5mMYkfi6ZccSJtBaDyHXvR+I4W4GPZbdJ6SzSFn7ypc5JWQU8I REyDeBJShCb3BhJf6QVEk+WMi/6Tk/z2PUJH3zWtAHsVQPMZe6Ijxt0tINizZSRM eusX6afx1hB1TTlQsfd9lXrDhh/QQ9RmuLla4WU45QUjXku2ORRn3Af+7hFrg29A XjFusSnZYriyKHC+EHfqHCKsM1o5CtN93TNF8wqNTznpFf046517qhVnpdq7dSeu iVETFPDaaioK2g== -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:30 2025 by rpki-client