$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft File: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft (raw, json) Hash identifier: ABoFyzVsuQbZ9Kjz70HZqnlrE4WXBJpFIPhAlA0hMEI= Subject key identifier: 42:4A:A4:B1:43:A6:D9:63:40:D8:DF:24:84:F7:F5:7A:79:F8:89:56 Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Certificate serial: 01987CAE36FFB353982FFC7B7BD34D5DAA18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft Manifest number: 0B1C Signing time: Wed 06 Aug 2025 00:00:48 +0000 Manifest this update: Wed 06 Aug 2025 00:00:48 +0000 Manifest next update: Thu 07 Aug 2025 00:00:48 +0000 Files and hashes: 1: 2m_CYVmLsPzF7bcN6vIid84YZD8.roa (hash: LBmz6BkcC+hYAgg9NpyTpTiVYvW2FI/a+Z33OiNH3bM=) 2: 4nVbm_9mW8-MAn0I_kGjdBfxhVw.roa (hash: pTL9FLQm2ArdSOx4IvTJl5dYC4wcCTYCswuw3GEGHMQ=) 3: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl (hash: nodHFTKhpzBKgw7UUCFbCy19ttsO+9JcrnpOe1gMijQ=) 4: ASUGNfdEr-zmHuBMKbmczWEEyX0.roa (hash: XbBf6Nfds25faGeda9A9EZrA0jUpRsOTRIO73TfrGdU=) 5: D_RGKNjU3HO1804H_N4lL39f8xU.roa (hash: lQxsMyLpAGFJHo/y+xtaq8v1/ZEVry9ym0LdrZC/Bgk=) 6: Di4BCmfwCebJmpiiwQVl8kD1SGY.roa (hash: YROnCwrXQNQ5Na/T+Qstm6PeSLYo1KpF7+7yHOQYHZY=) 7: GPFpap7M0DbSFtJBpaKp67RfOgs.roa (hash: 6C0EKVC4/wJ0awCJ51hmh22riQaO8QV9e+LjKWFhq3o=) 8: IrnZpWugwiVaDWE0Y8y2HTk6myM.roa (hash: hz4dzGEJlp9nAI/PksWqX4be/cNB9cFXoUk0RTppUW4=) 9: UPL7qImi1Ys3kJpNeUneyjua3iE.roa (hash: yEbc7GI9w/HHKG7S49YH0IbZWjyzBWFPN0Ij4so55ao=) 10: Wqi1dLZsHvoMXUpSlZaZNHPgS_4.roa (hash: uMbe0TM0fIuYtnHf63Llp9sJ+CZVXJ/tOzlQU2AOjts=) 11: gqYJ1QlxZp2sfbvxF5yVPiDZ3Dk.roa (hash: +mkHl1F4HLXN9PfWQktZtYiROfsgXfptEmlNuP4F0GM=) 12: hrJ9G8LdPfpuv4HEnlrj0UM1FZI.roa (hash: Ap/wGOk300z33ESWLkwykljx6YcmZDQ+kuaPYGOBuOE=) 13: ip51KpcMdfOcRWLVf2HbT1-y1Tk.roa (hash: w96a29aqdZpAZsW1TalxljppYBFpY8XCQQF21I+O+bg=) 14: qOKY-IzakK8b3r-fGGAM7SuFUFM.roa (hash: 0xmS3lTVgR47MEU89O0ODLmZ+nEhlRcq1hkGVTaLD7U=) 15: u_PvNoZGGKwKo1fIPAvA4pNGOWE.roa (hash: 7nleymXLPmClcPELIrjirAmjx3u5krkfwTmE5v3abBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 23:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7c:ae:36:ff:b3:53:98:2f:fc:7b:7b:d3:4d:5d:aa:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Validity Not Before: Aug 6 00:00:48 2025 GMT Not After : Aug 7 00:00:48 2025 GMT Subject: CN=424aa4b143a6d96340d8df2484f7f57a79f88956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:40:a0:93:04:c1:77:a7:e5:ae:c8:65:e3:57: ec:bd:37:31:eb:b1:3d:55:6e:3a:57:9b:eb:ec:bf: 65:ff:5a:a7:13:67:aa:75:f8:b1:e8:34:32:05:45: 65:f8:12:2c:99:ff:98:35:5a:68:2a:44:d6:a8:53: 9d:68:9d:95:bb:05:78:9f:e0:27:34:0a:55:a0:81: ff:78:f7:f9:7b:2e:9b:00:d6:6b:7d:01:45:57:e4: 83:37:aa:3a:0a:c8:74:ae:7a:fa:4c:a5:5a:56:7a: c5:4b:96:91:4d:0b:09:cf:6b:56:26:5a:1b:d6:81: e6:07:06:06:4f:c9:7e:cf:58:c0:c2:2c:0f:0b:bc: 04:9c:58:82:f5:5b:c3:02:0d:3b:59:19:5c:e9:b4: c3:a2:84:30:6d:c5:8e:08:14:6c:d1:f9:01:bf:60: 4e:1c:12:07:b1:59:c2:7d:d1:71:6a:8c:1f:37:d9: b4:f9:0a:e3:10:ac:0b:6d:1b:10:48:87:e5:9e:a4: b4:1a:43:4a:ba:e8:0c:96:1d:d4:2f:17:80:2d:11: f7:57:69:22:88:f3:b9:13:d2:22:17:ef:85:d7:27: 95:23:be:73:75:15:ec:be:b7:a5:71:e9:96:de:bd: 15:f1:91:57:52:22:9e:f8:00:c2:56:10:df:3d:45: 00:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4A:A4:B1:43:A6:D9:63:40:D8:DF:24:84:F7:F5:7A:79:F8:89:56 X509v3 Authority Key Identifier: keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:23:2d:08:ea:59:e8:79:4d:3d:c1:21:7a:07:ad:ac:16:25: ed:59:e0:87:93:04:ab:16:e2:d7:e6:0d:0c:7e:72:7d:cc:be: dd:42:f0:6f:e7:66:90:c7:16:17:59:da:48:7f:04:ba:57:e5: e4:47:e4:f9:e9:fd:d8:32:d3:ce:36:62:59:d8:32:45:d4:19: e9:31:b5:15:0b:16:b7:c7:12:3b:ad:d9:e5:e0:07:22:d3:42: 51:7e:06:f4:00:8b:a5:ab:80:fc:ef:01:cf:b7:e5:25:98:10: eb:0d:b2:42:45:07:76:e3:75:df:0f:32:35:bc:97:11:4c:2c: 04:11:95:90:b5:61:4f:92:f8:1c:93:c0:8b:93:80:fa:f0:52: dd:4f:7a:c0:4c:87:8e:cd:fd:8a:db:e9:8a:f7:73:02:69:ed: 70:e5:3e:9c:78:a9:bb:56:0e:2e:97:e3:1d:a7:a3:a2:ea:f6: be:2c:e6:13:8a:dd:54:6f:34:75:07:20:37:ee:d1:1c:0a:5a: fe:d4:d0:32:5d:eb:c1:33:d5:3c:fe:a4:65:12:51:16:16:ab: 7a:24:59:8b:c3:85:62:ab:9d:f1:ee:28:7e:14:ba:74:3f:65: 12:1a:a1:0f:0b:19:4e:61:72:b0:c2:fd:6f:56:e8:79:14:3d: 34:0a:12:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh8rjb/s1OYL/x7e9NNXaoYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh N2IwYmEwHhcNMjUwODA2MDAwMDQ4WhcNMjUwODA3MDAwMDQ4WjAzMTEwLwYDVQQD Eyg0MjRhYTRiMTQzYTZkOTYzNDBkOGRmMjQ4NGY3ZjU3YTc5Zjg4OTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUCgkwTBd6flrshl41fsvTcx67E9 VW46V5vr7L9l/1qnE2eqdfix6DQyBUVl+BIsmf+YNVpoKkTWqFOdaJ2VuwV4n+An NApVoIH/ePf5ey6bANZrfQFFV+SDN6o6Csh0rnr6TKVaVnrFS5aRTQsJz2tWJlob 1oHmBwYGT8l+z1jAwiwPC7wEnFiC9VvDAg07WRlc6bTDooQwbcWOCBRs0fkBv2BO HBIHsVnCfdFxaowfN9m0+QrjEKwLbRsQSIflnqS0GkNKuugMlh3ULxeALRH3V2ki iPO5E9IiF++F1yeVI75zdRXsvrelcemW3r0V8ZFXUiKe+ADCVhDfPUUACQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJKpLFDptljQNjfJIT39Xp5+IlWMB8GA1UdIwQY MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt ZGZiZmEzZmNmMDIxLzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAciMtCOpZ 6HlNPcEhegetrBYl7Vngh5MEqxbi1+YNDH5yfcy+3ULwb+dmkMcWF1naSH8Eulfl 5Efk+en92DLTzjZiWdgyRdQZ6TG1FQsWt8cSO63Z5eAHItNCUX4G9ACLpauA/O8B z7flJZgQ6w2yQkUHduN13w8yNbyXEUwsBBGVkLVhT5L4HJPAi5OA+vBS3U96wEyH js39itvpivdzAmntcOU+nHipu1YOLpfjHaejour2vizmE4rdVG80dQcgN+7RHApa /tTQMl3rwTPVPP6kZRJRFhareiRZi8OFYqud8e4ofhS6dD9lEhqhDwsZTmFysML9 b1boeRQ9NAoSig== -----END CERTIFICATE-----Generated at Wed Aug 6 10:05:52 2025 by rpki-client