$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft File: h0v4BwzuQwXRo4npEPtRArvMGUE.mft (raw, json) Hash identifier: cdP0TsL6HDRxLOChofyv2Vz3eHodx1PYNQ+nhKW92wg= Subject key identifier: 85:34:7D:CD:72:8D:94:95:B4:79:19:10:9F:10:DC:94:41:96:49:51 Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Certificate serial: 01987F0ABFDF477271C9E742F317DA87BB14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft Manifest number: 0FAC Signing time: Wed 06 Aug 2025 11:01:07 +0000 Manifest this update: Wed 06 Aug 2025 11:01:07 +0000 Manifest next update: Thu 07 Aug 2025 11:01:07 +0000 Files and hashes: 1: 0OKEEKGhx09vrOl7RYzWo3_wxgQ.roa (hash: bVmqeltj/mUgRyI/UDd3qXuGmM6ZNTUv7NHdJ5Ecm14=) 2: 0na0952KGc1H37d43sfmQKJLL00.roa (hash: corUkZBv/wXf0UWamqTqW2vCXAO7jctIMZRyOPGvfMc=) 3: 0nyuKNwkHdjNx58vqjYZWHgdk04.roa (hash: IJwrVyR1/3bxuDIXcjl0pqsWJYg81ab8+TgzpFzMgak=) 4: 50gtoTdhN9nO756-F4DP2ztZ9co.roa (hash: PoNPNVOdbr6ZQt1a8yzQyLs5SXzvoUcV/tLE/CbCBRA=) 5: 5WW9l5SbU7Xc5dzcJPOjnh-Ti1k.roa (hash: 2mR14FDC49JE9sKTdrARapGEl+mL/ykOGzFFu5F/fQM=) 6: GPQpLDssO6fTD1dGaJR05RFssa4.roa (hash: fp71tS0Tf+vhKpm3TY4BWXK7QdJ3Wg7DCBdUoQ7F5lg=) 7: J9C16lcx8PgyurfKUP9kuPkC8qk.roa (hash: FgZNOU0gXFenPcB6tHkqCpKLWPVhc0a8myZew2TEgCo=) 8: LumIDmC9KaTmO5EmvKNIDB_MJ6I.roa (hash: T1v6ldOgSnHm0ILMw4lezNqfO7yaUlFFJv2DMeUijuQ=) 9: VvF4Vi4FweHBoF6fwzvWsqkmd1g.roa (hash: 0iNsEJDKXYV/LCkoqqh7O11YVgjXO/OY9nxGaKpwAV8=) 10: h0v4BwzuQwXRo4npEPtRArvMGUE.crl (hash: F2sGehymiydi/8ktB4kluKLny2BuVM6CzT/asVEdbTw=) 11: vevN_FQh1oLDczAFJHEKh5hEOxE.roa (hash: T6+n5imfk+pQSeT5Osi01ihP8snYGAynnv1xpTuEaoU=) 12: xER0K9I9xK8DBLC6KDcI75JR9LY.roa (hash: OqOr60qixfUKi1rv4+JZ/v9458y498eM0Dbfd2dxyz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 08:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7f:0a:bf:df:47:72:71:c9:e7:42:f3:17:da:87:bb:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Validity Not Before: Aug 6 11:01:07 2025 GMT Not After : Aug 7 11:01:07 2025 GMT Subject: CN=85347dcd728d9495b47919109f10dc9441964951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d9:67:e4:c1:12:c3:bf:93:fa:ee:99:aa:c8: 7f:d1:af:c9:60:1b:57:63:00:95:ea:c4:aa:a3:c7: 96:69:0a:8d:c0:9d:fc:99:c1:80:8e:15:33:e5:fc: 82:b5:26:a2:e5:9c:aa:90:b8:f3:c7:0a:bf:63:5b: 4c:9c:c2:8e:5f:01:a4:77:ac:85:3b:8f:8c:48:7d: a9:ec:b6:91:03:05:10:56:0d:b2:0a:ee:65:29:e7: e0:b8:b2:7c:d3:24:e5:c0:53:0a:e0:b1:1b:9a:01: 9c:cb:2d:67:1a:b0:1e:a2:10:32:49:bb:16:fc:5e: 00:ad:95:fd:5e:2f:39:85:e1:2f:35:77:f8:24:c1: 59:9e:5e:f6:34:a3:0c:19:46:e7:bc:17:b3:07:58: ab:d9:57:6c:4c:b7:e4:c9:a1:61:cc:97:f4:2f:39: 40:ed:1b:48:3f:a8:dd:08:0e:8d:76:7c:e2:0c:7e: 9c:1b:c5:db:21:23:17:d1:2a:94:d1:30:8c:dc:29: 94:93:b2:10:45:b0:5f:77:9d:95:ac:31:e9:07:03: fc:ce:ec:8a:2e:c8:9d:3d:c1:21:fb:0e:ad:79:8f: 0c:81:45:0d:45:46:24:d0:ed:4b:f8:7c:41:57:98: a2:56:fd:10:74:ec:ca:a2:43:10:81:df:c7:bb:c4: e6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:34:7D:CD:72:8D:94:95:B4:79:19:10:9F:10:DC:94:41:96:49:51 X509v3 Authority Key Identifier: keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:cb:43:d1:0b:fa:d4:2b:c5:0a:52:c6:64:c2:35:6d:e7:30: 4d:d3:a3:81:36:1f:8b:96:bd:2c:fa:98:0f:d8:fb:da:5e:05: 50:89:fa:07:26:46:58:93:0e:e6:41:7c:2f:47:33:40:7a:11: 82:e8:40:48:e8:e0:de:aa:e0:d9:00:ee:66:5c:76:ec:15:8b: 99:a0:c6:52:16:e6:0b:59:25:c3:48:9f:ed:fb:ba:fa:83:e4: 73:d4:ad:11:c7:3c:76:3f:55:86:bd:cf:34:c9:51:9a:2e:49: 7f:98:4d:51:d9:d3:17:2a:69:a6:bd:38:da:a3:6d:17:51:0a: 25:e2:79:9c:06:5f:44:5c:24:32:ec:9f:e4:3b:48:99:3e:23: 98:e0:56:2a:a9:08:c1:86:9f:70:8a:b8:f0:1b:ad:8b:14:1d: 74:63:b9:89:86:db:03:4b:18:e2:c3:65:ae:06:8f:bc:c9:d6: 26:77:46:05:f7:80:21:34:71:cf:ba:9a:32:f3:28:8e:c3:e2: 49:49:b5:ba:41:c6:e7:ab:46:e6:32:6a:7b:16:77:f8:25:6e: 66:b5:59:6e:24:c8:95:86:b4:25:d0:df:ed:f9:c2:6e:4b:0a: 1f:95:9d:8d:bf:2b:62:fc:02:02:4d:a7:23:b3:5e:db:84:4f: 98:07:cd:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh/Cr/fR3JxyedC8xfah7sUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj YzE5NDEwHhcNMjUwODA2MTEwMTA3WhcNMjUwODA3MTEwMTA3WjAzMTEwLwYDVQQD Eyg4NTM0N2RjZDcyOGQ5NDk1YjQ3OTE5MTA5ZjEwZGM5NDQxOTY0OTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptln5MESw7+T+u6Zqsh/0a/JYBtX YwCV6sSqo8eWaQqNwJ38mcGAjhUz5fyCtSai5ZyqkLjzxwq/Y1tMnMKOXwGkd6yF O4+MSH2p7LaRAwUQVg2yCu5lKefguLJ80yTlwFMK4LEbmgGcyy1nGrAeohAySbsW /F4ArZX9Xi85heEvNXf4JMFZnl72NKMMGUbnvBezB1ir2VdsTLfkyaFhzJf0LzlA 7RtIP6jdCA6NdnziDH6cG8XbISMX0SqU0TCM3CmUk7IQRbBfd52VrDHpBwP8zuyK LsidPcEh+w6teY8MgUUNRUYk0O1L+HxBV5iiVv0QdOzKokMQgd/Hu8Tm5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIU0fc1yjZSVtHkZEJ8Q3JRBlklRMB8GA1UdIwQY MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt NmZlNGQ4ZmVkMTYwLzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkMtD0Qv6 1CvFClLGZMI1becwTdOjgTYfi5a9LPqYD9j72l4FUIn6ByZGWJMO5kF8L0czQHoR guhASOjg3qrg2QDuZlx27BWLmaDGUhbmC1klw0if7fu6+oPkc9StEcc8dj9Vhr3P NMlRmi5Jf5hNUdnTFypppr042qNtF1EKJeJ5nAZfRFwkMuyf5DtImT4jmOBWKqkI wYafcIq48ButixQddGO5iYbbA0sY4sNlrgaPvMnWJndGBfeAITRxz7qaMvMojsPi SUm1ukHG56tG5jJqexZ3+CVuZrVZbiTIlYa0JdDf7fnCbksKH5Wdjb8rYvwCAk2n I7Ne24RPmAfNKg== -----END CERTIFICATE-----Generated at Wed Aug 6 14:08:09 2025 by rpki-client