$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft File: V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft (raw, json) Hash identifier: rgYVrd/SlesaUB1pWRN//rEClLLbmuJKv756NO4VSXk= Subject key identifier: 54:2B:EF:0E:52:1D:D6:7D:BC:1F:17:B8:60:39:0A:7D:4D:32:93:2F Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47 Certificate serial: 01987418F70E197419A36A01E9B1E4FA54B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft Manifest number: 120B Signing time: Mon 04 Aug 2025 08:00:49 +0000 Manifest this update: Mon 04 Aug 2025 08:00:49 +0000 Manifest next update: Tue 05 Aug 2025 08:00:49 +0000 Files and hashes: 1: 1-2ze8RFqsfXiBAT11ime5104BjY.roa (hash: 1G/91kNwXr6Euhuawe1vb8XkKyyCivckcaN+MUB7G0c=) 2: 5lDpUUbHXzya0fMquFYbFulqqVs.roa (hash: f1hht89a/wconxQu5KNK8QHufJfhYi0HFOvBnekJIq0=) 3: FHAcQ1hSwnBkPa_1eYwrasvDBAI.roa (hash: UEqpRdrSw3UNWb3wNwi2VW+eLR/IeGW0ScqzLsmeYpU=) 4: FeD_-2NSvz_oTh1LHrP44NqzWIo.roa (hash: M0rfgf8nLa/Z7WmSdsaO8N+Wk6yxPhPTCcsAwupLmJk=) 5: G0XtWDoXmf3g4WPOe4oJBWwD53c.roa (hash: ah5ed8JgyczAK0ktQp/XfJNbJde2PQoHxbYeBWCDQq0=) 6: HlClfikOJrfktj0svDKphR0_6Ic.roa (hash: g1qw7C3eBB8cA1eir2ZaMGGhWvD9jq2Y2uAjecDMYHM=) 7: LXaOacmSywqNlfh5CO5J1YXXGmI.roa (hash: jtQHK2Bwk3+TO9AZet3mFNI8IuZDJg2fZaIIhEkYoQM=) 8: OXCR5eZAjAKFe_5_WqZvsLDsIGw.roa (hash: +dX5GIlPaHoX8hOklKsClO3JcTsDNTNWJiq3yrlcruo=) 9: SVRVY-q0OPWhiL6mBd92R9L5Zm4.roa (hash: dI19F02QJ/eVSmcDcyQsUmklhiicL/qqyQKGyXmUBoc=) 10: V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl (hash: 2IJr2cTGGmNREFFU0UZQLfOoTtC5LlGw+k0F+iW2r7M=) 11: Xdc1GXsEPiQ6GE6eHjFDA0ZgS3w.roa (hash: OE+tVEQ0oQcFP5VxqAmEpxiSoF7RE792pp1YSKmB2O0=) 12: ctU4FIR-r7525NdQcQhV07S1InU.roa (hash: AU7Mc04mkVMs25EZU4CCsCrYPVp1VtWzfOi9wTwg8to=) 13: ftQ60SsjWVubYA-VxNEHamWbBek.roa (hash: jmvMdMMJCzUDXr3r5E5qmHQUJ9DFMdQTkl3lYF+bB84=) 14: s6UOiaPwRDDgS4GdUQJjrNxDCkA.roa (hash: MfReyFTsbPeeVwKX4SeLCT5vdQejZ0/27SaFtWWlLKo=) 15: valOsPAluNa3RG5X659q6dsU_FA.roa (hash: fkBC+Rvf3Gv+oy6BC36LsnU6WeruMquhW06fi/seA5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 08:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:74:18:f7:0e:19:74:19:a3:6a:01:e9:b1:e4:fa:54:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47 Validity Not Before: Aug 4 08:00:49 2025 GMT Not After : Aug 5 08:00:49 2025 GMT Subject: CN=542bef0e521dd67dbc1f17b860390a7d4d32932f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:62:93:69:d4:58:99:d3:0a:fd:ca:2f:08:84: d8:78:40:f9:75:0d:60:d3:c1:82:1d:8d:0c:8f:bc: ac:c2:81:85:fb:38:fb:23:d1:ae:92:d4:73:44:77: 17:1e:07:3c:fa:d0:66:9c:6d:52:29:c1:df:e3:0d: d6:dc:37:a5:f8:48:83:6c:f6:79:63:65:3b:11:9b: 1f:67:69:d8:25:54:a3:cf:d2:61:89:e2:cd:4b:a4: 08:af:01:ed:c4:48:00:9e:e9:59:6e:c1:7c:d6:82: b3:84:39:5e:7a:ce:f3:dd:d2:de:b0:cd:0c:84:78: 4c:52:f2:16:ab:ee:f0:1c:91:b5:20:d6:93:b9:c7: 26:e0:a9:95:03:a5:e4:55:30:ca:9b:d9:5c:35:ed: 31:d9:05:d6:0d:b0:dd:9b:8d:e6:fc:05:c5:b4:79: 9d:7a:47:c2:72:37:0f:2e:cc:d8:96:a0:4a:22:dd: 5f:f9:bd:68:91:5f:86:3b:e9:02:ec:5f:61:e8:a9: 00:88:ba:93:1d:89:fa:c1:1c:4d:26:07:c9:aa:58: b1:7d:3e:4b:b4:21:3b:8b:81:24:28:b5:fe:63:db: 7b:aa:a6:41:a6:99:7b:7f:cb:f1:1b:9e:b5:5e:45: 17:7d:89:77:4c:f3:3a:9c:59:ad:27:8d:d4:f1:23: e2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:2B:EF:0E:52:1D:D6:7D:BC:1F:17:B8:60:39:0A:7D:4D:32:93:2F X509v3 Authority Key Identifier: keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:1c:bc:1b:19:e8:57:38:cc:bf:d8:bc:56:67:50:f3:1b:8e: 76:88:c4:06:08:70:04:0c:48:f8:e7:a7:8d:45:79:e3:70:e3: 50:08:d2:c2:ec:1f:45:4e:f3:a5:bc:c8:e5:db:62:07:dd:c3: 9b:63:65:81:8e:cd:3f:f5:74:fe:8d:69:51:bd:1f:c4:b0:20: 8b:94:40:8a:df:e7:f0:2c:41:a6:ca:81:79:da:58:50:b9:4b: 21:f0:7a:14:de:82:32:66:cc:84:8b:d6:34:31:f4:0f:65:a2: 8a:ec:9f:b2:ec:8a:61:be:45:3a:23:48:46:67:24:f2:fb:f5: ad:91:c9:bf:eb:59:80:0f:42:85:63:fc:16:42:9d:97:03:27: 69:c5:9a:65:06:1b:35:48:c1:f5:52:fb:ad:13:e6:a4:df:30: da:1f:eb:3f:1f:7f:45:27:2c:ce:00:dc:b4:4d:5c:67:36:7c: ef:a5:eb:27:63:f8:09:db:83:d7:43:e3:cd:68:08:68:0d:ea: ef:fa:8f:5b:d6:ac:dc:de:34:82:c8:d8:f7:09:d4:2f:d8:5a: a0:a1:3a:a5:f2:92:1f:5c:af:a8:b0:cb:c1:22:2e:ba:cd:c4: b3:c7:6f:34:c1:9c:e6:c7:c2:ad:6f:15:6d:ed:ed:45:00:e4: 00:f5:ae:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh0GPcOGXQZo2oB6bHk+lS0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1 MzhkNDcwHhcNMjUwODA0MDgwMDQ5WhcNMjUwODA1MDgwMDQ5WjAzMTEwLwYDVQQD Eyg1NDJiZWYwZTUyMWRkNjdkYmMxZjE3Yjg2MDM5MGE3ZDRkMzI5MzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymKTadRYmdMK/covCITYeED5dQ1g 08GCHY0Mj7yswoGF+zj7I9GuktRzRHcXHgc8+tBmnG1SKcHf4w3W3Del+EiDbPZ5 Y2U7EZsfZ2nYJVSjz9JhieLNS6QIrwHtxEgAnulZbsF81oKzhDlees7z3dLesM0M hHhMUvIWq+7wHJG1INaTuccm4KmVA6XkVTDKm9lcNe0x2QXWDbDdm43m/AXFtHmd ekfCcjcPLszYlqBKIt1f+b1okV+GO+kC7F9h6KkAiLqTHYn6wRxNJgfJqlixfT5L tCE7i4EkKLX+Y9t7qqZBppl7f8vxG561XkUXfYl3TPM6nFmtJ43U8SPiBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQr7w5SHdZ9vB8XuGA5Cn1NMpMvMB8GA1UdIwQY MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It MWVkMTA5NTRiZDk2LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2 LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRy8Gxno VzjMv9i8VmdQ8xuOdojEBghwBAxI+OenjUV543DjUAjSwuwfRU7zpbzI5dtiB93D m2NlgY7NP/V0/o1pUb0fxLAgi5RAit/n8CxBpsqBedpYULlLIfB6FN6CMmbMhIvW NDH0D2WiiuyfsuyKYb5FOiNIRmck8vv1rZHJv+tZgA9ChWP8FkKdlwMnacWaZQYb NUjB9VL7rRPmpN8w2h/rPx9/RScszgDctE1cZzZ876XrJ2P4CduD10PjzWgIaA3q 7/qPW9as3N40gsjY9wnUL9haoKE6pfKSH1yvqLDLwSIuus3Es8dvNMGc5sfCrW8V be3tRQDkAPWuSw== -----END CERTIFICATE-----Generated at Mon Aug 4 19:11:43 2025 by rpki-client