$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft File: 4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json) Hash identifier: 5OWbagsJEBNV2B6FFkAQseGqafqW3ejJjhBv07mr6Ns= Subject key identifier: A6:C9:81:CC:CF:76:9A:72:D9:CD:D9:A8:06:D8:2F:BC:86:2F:98:31 Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Certificate serial: 01987374A8520E3624CAB94A09DF4941D2F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft Manifest number: 1638 Signing time: Mon 04 Aug 2025 05:01:21 +0000 Manifest this update: Mon 04 Aug 2025 05:01:21 +0000 Manifest next update: Tue 05 Aug 2025 05:01:21 +0000 Files and hashes: 1: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: 6lC6UEFloUUE+qxtb+aDAiM27p2tBbPDZCjCUqO6SoM=) 2: 7hCd_HKEYkXLvNCBLfMsTezcRXs.roa (hash: U6tVugGWrDYmHCXTomFCnYlQyCN2W9AcT+utfrGkYmM=) 3: HK9YTPeAPa2mm7JsqVFDcEqWktE.roa (hash: pGFfaceKosL6QVYMO3oG4sR8CNlOKvbDd43IVlI91l4=) 4: SiUykNKTjaApyo1sqndO19rBYAs.roa (hash: jaR1D2Lqsnpc33UxJXomGKoF/S6s6EdMDhOpwvCqmiY=) 5: YxnLmhiEAoRIPwqx7D5pI2tVg0E.roa (hash: Z5VZl3NN5nIeNmBSmYIBYR811mPwFTzRI+uDPXf+8B0=) 6: dsVEniM-PjP3aF57gRKfJeGsuXA.roa (hash: rATVs9dRCK5irdzRkSY1vrtCfxCwPvZoSJA3EPbdN5Q=) 7: jNJogHc9h5lodSxhpjDRYEENUOM.roa (hash: O0aQYdB/pHChDSdymrPe8W/YPJRqMLBI8pg3+YHjgZ8=) 8: myrzpFPZKEFrMiKvWzGEDQDrl_I.roa (hash: J9rVlZg9Lutrp3UmbnqdopvJazmPd6IwXd6xHibeysc=) 9: pm4iWvL8z96fIGtjxaGjSXeRJT4.roa (hash: ZYVelcX+1GR4HDMDdE6U47zsAh6vEcuxWCIg/8E3uZE=) 10: qeW6k62Ova_Op7BhYtzucMuedHs.roa (hash: iPCOF2sKXY5KaN1yHnhdOMP4cE9n3NAPWSlvKOP6/hY=) 11: qispPpKIlPSWV1rI1EAZQtlT-p0.roa (hash: sBtkCqwyGciPSktKwAiba5P4WFIxvlZFVG+B/hvcwgI=) 12: z1XxJmXXx8uVxhk9CwQJXiPqHzU.roa (hash: EaljD/90P2BfuVNTpmwdBC+zdctwtxvncMDcXLvuk10=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:73:74:a8:52:0e:36:24:ca:b9:4a:09:df:49:41:d2:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Validity Not Before: Aug 4 05:01:21 2025 GMT Not After : Aug 5 05:01:21 2025 GMT Subject: CN=a6c981cccf769a72d9cdd9a806d82fbc862f9831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fb:9e:92:78:e6:d9:2d:0c:ed:24:c8:4f:98: 9c:1e:85:f3:bd:0a:1b:4d:d7:5c:f9:15:90:fb:1c: a1:8f:0a:07:45:11:c0:af:83:8a:d4:47:22:17:b1: 8a:0f:32:aa:a8:13:51:98:c3:0e:15:62:84:44:63: 04:46:b3:51:97:50:d9:10:c8:67:41:8a:96:e4:4f: 80:52:3a:c2:e5:01:64:87:26:7a:cf:a4:29:8a:20: 51:e2:6f:f9:15:b7:c3:4c:54:7c:1e:19:c6:79:c8: a2:e3:d6:37:43:cb:d4:69:b1:c0:ba:3d:3c:38:4d: d7:34:05:fa:26:c2:b3:a3:7d:02:c8:d1:ec:8d:1a: 60:d1:b7:8f:f8:0d:ac:64:aa:d9:75:15:49:07:9c: b2:2c:43:16:16:45:f2:0a:0f:e7:e8:2f:ef:5c:16: 12:dd:11:ef:86:16:fb:63:1a:34:2a:42:b0:ea:96: 2d:c8:3f:92:b3:63:3f:b0:15:ab:56:7a:41:14:b7: 80:dc:6d:d9:37:2a:9b:f1:4e:12:18:fe:64:b8:d9: 61:b2:bb:ea:cb:bd:8a:a1:4d:96:ed:61:79:ef:29: 1e:7d:51:f1:2b:15:95:30:d2:93:61:80:bd:00:92: ca:f9:a7:98:37:8e:50:c3:f2:99:8a:96:a7:0e:c1: 57:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C9:81:CC:CF:76:9A:72:D9:CD:D9:A8:06:D8:2F:BC:86:2F:98:31 X509v3 Authority Key Identifier: keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:1d:e7:9d:26:d4:17:d4:fb:fc:a3:df:3e:74:d1:92:f6:33: 1c:2d:e7:41:4a:65:ef:6c:2b:e6:34:8d:c1:35:bc:fc:02:84: d4:d7:c7:54:8c:2c:b4:99:77:3a:db:1d:42:90:18:d8:15:24: 25:c5:de:83:bf:b4:c0:86:15:0f:b2:42:de:9e:d4:53:00:70: fa:f6:cb:dc:54:5b:91:3c:ae:70:49:6c:f9:cd:b6:3e:25:57: 1d:97:93:c7:e5:64:18:12:ad:c5:b8:fa:3a:a4:2f:94:19:73: 9a:25:bb:74:44:8a:df:33:d1:ca:c0:c8:e5:b3:c5:1d:65:4b: 01:bc:19:9c:3d:49:97:4b:09:3e:ff:0b:8d:20:93:19:95:88: 28:20:c1:01:9c:65:be:84:de:81:6e:87:be:bb:2e:f0:ab:2a: 73:78:be:3a:02:e8:93:29:ea:68:f4:c6:0d:70:1b:68:e1:af: c7:a4:7c:a7:c2:3b:5b:19:52:0e:81:a3:6b:6c:49:b5:f8:cc: f3:5d:2a:e9:fb:80:d3:b3:43:53:21:54:bc:41:46:92:f1:8f: 78:cd:28:c5:d4:7f:72:9a:39:a1:b4:45:4c:54:c0:ab:a3:f1: 4c:18:c8:47:71:b9:31:be:3a:62:bc:e7:da:d7:04:57:73:6c: e9:55:2d:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhzdKhSDjYkyrlKCd9JQdLwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTgwOGYzZjkyMWJjOGMzZWVhODdjNzU4NGM1ODRjMTAw MGIwNTEwHhcNMjUwODA0MDUwMTIxWhcNMjUwODA1MDUwMTIxWjAzMTEwLwYDVQQD EyhhNmM5ODFjY2NmNzY5YTcyZDljZGQ5YTgwNmQ4MmZiYzg2MmY5ODMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/ueknjm2S0M7STIT5icHoXzvQob Tddc+RWQ+xyhjwoHRRHAr4OK1EciF7GKDzKqqBNRmMMOFWKERGMERrNRl1DZEMhn QYqW5E+AUjrC5QFkhyZ6z6QpiiBR4m/5FbfDTFR8HhnGecii49Y3Q8vUabHAuj08 OE3XNAX6JsKzo30CyNHsjRpg0beP+A2sZKrZdRVJB5yyLEMWFkXyCg/n6C/vXBYS 3RHvhhb7Yxo0KkKw6pYtyD+Ss2M/sBWrVnpBFLeA3G3ZNyqb8U4SGP5kuNlhsrvq y72KoU2W7WF57ykefVHxKxWVMNKTYYC9AJLK+aeYN45Qw/KZipanDsFXZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbJgczPdppy2c3ZqAbYL7yGL5gxMB8GA1UdIwQY MBaAFOFYCPP5IbyMPuqHx1hMWEwQALBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAt YWIxOWZjYjBjZTY0LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAtYWIxOWZjYjBjZTY0 LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARB3nnSbU F9T7/KPfPnTRkvYzHC3nQUpl72wr5jSNwTW8/AKE1NfHVIwstJl3OtsdQpAY2BUk JcXeg7+0wIYVD7JC3p7UUwBw+vbL3FRbkTyucEls+c22PiVXHZeTx+VkGBKtxbj6 OqQvlBlzmiW7dESK3zPRysDI5bPFHWVLAbwZnD1Jl0sJPv8LjSCTGZWIKCDBAZxl voTegW6Hvrsu8Ksqc3i+OgLokynqaPTGDXAbaOGvx6R8p8I7WxlSDoGja2xJtfjM 810q6fuA07NDUyFUvEFGkvGPeM0oxdR/cpo5obRFTFTAq6PxTBjIR3G5Mb46Yrzn 2tcEV3Ns6VUtcQ== -----END CERTIFICATE-----Generated at Mon Aug 4 11:14:41 2025 by rpki-client