$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft File: kiIItHtqhk2dH_M-BqqB0TgZp04.mft (raw, json) Hash identifier: hCxqxfLZj+6b1/tlumYNEhawRb56HRgNwGaZw+7Wgp4= Subject key identifier: 7D:34:78:A0:5B:7E:48:85:DC:8A:B6:F9:C1:EC:58:B9:83:4C:79:DE Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Certificate serial: 01987DF89A8868EE8B7C707911A8C775AC1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft Manifest number: 1663 Signing time: Wed 06 Aug 2025 06:01:41 +0000 Manifest this update: Wed 06 Aug 2025 06:01:41 +0000 Manifest next update: Thu 07 Aug 2025 06:01:41 +0000 Files and hashes: 1: 1-rtI9dIBDPGpB7XLgp5LO6PPhNw.roa (hash: ZOyoK37XAa4AMrftPMDpS57217i8QyMPPSqOrLIuDh0=) 2: 1MqnWOr2XX863k_xrrBNGhpSTM8.roa (hash: ZAHJz2QsnnKlOkhGF4MOgyBVqnyxAgqsRswDwRAbn1Q=) 3: 58DWe-1QkmdAAqPP4rIPqHcvLEQ.roa (hash: DoGggoOx/JhNet5jvaMZxZ4j9WBmZq4GGjQzfQbuj24=) 4: ETJiLj_FPEXG5No5WrAoxGg_y_w.roa (hash: 662t7NLUufLVnPvlW5VowqyxEXMWNP4WIugo2zvrIGE=) 5: QX1PzB0slLNh42gV_9Uq9W7-NNU.roa (hash: 42Me4JYy4dGGMwi/uXUY8iDNdYDcztDyEjfKcP1cPGo=) 6: XPCmvArgHR13v_k02Z1LW1lWJx8.roa (hash: 9yrs8EgUGCgumASichQb2a43gXVQMGz8ZJNkpOkb3cg=) 7: XWYIJ6UuSY9_AQiT-hJINBObDQE.roa (hash: PdxLhxNEU7vSAkCuLaQWVId/t5OMWmj8bekrOqUDrSs=) 8: a6rjHt4fK-E2iGBSfcg8Kx7GnxM.roa (hash: ti4+wug7xVisXzF33JBcZepJMCA38Lm5pRKa65iVPyU=) 9: cOLPd5Lu_3ww7o-cdhWB7-TfdNY.roa (hash: S/36KJdTMQ8aIP0tPHIBx2zWJTQd/RRNG/oJA1iTyvo=) 10: iCgmGpyhGXjIvVkyeLmT7N8_y-4.roa (hash: jOahkOswhpSU7ry2oaBtzcTaxYOf5EimbWn3HXDfD9I=) 11: j-60Smkd34pUp65Reim9QN1pXBY.roa (hash: M2tsmNC79ATfwuHh7j2unUzS2isZxvxmhlA+F7YtpNY=) 12: kiIItHtqhk2dH_M-BqqB0TgZp04.crl (hash: 9rVLaSpELNzfAGThtZ8h0iduybJCHS28cYivY2Tb7Lg=) 13: knSytMRDBBEnCJmSSPDhHWtHg0c.roa (hash: xgKSyUyWK6rR5NEa7nVIywiPdyu/cPSGzuk49MX8f0A=) 14: vBAure0FxWxWdTfj2W3O6_7De24.roa (hash: yikPG1Koq3q/WuhD/GCuT4mpPwhtQgx1jshmNW1jKHY=) 15: yyPUAj_dCWAktPW0jmBjCiRvIJg.roa (hash: H8oCA9x6vnmIvl4HatB3uvnypYSjgIN9/CrfMgatutI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 06:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7d:f8:9a:88:68:ee:8b:7c:70:79:11:a8:c7:75:ac:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Validity Not Before: Aug 6 06:01:41 2025 GMT Not After : Aug 7 06:01:41 2025 GMT Subject: CN=7d3478a05b7e4885dc8ab6f9c1ec58b9834c79de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:69:d5:51:db:e5:69:cf:05:e4:6b:3e:0c:70: 79:e2:91:3c:f2:31:6c:bf:66:22:77:63:7d:f4:fd: 37:dd:b9:fa:fb:34:f4:ec:67:ff:57:2e:b4:e2:69: f9:68:7a:47:03:08:2f:4a:4d:70:49:0a:d2:95:94: 97:b0:30:96:22:9a:b7:97:3c:4e:1e:8b:19:98:96: a3:f0:cd:e7:95:f9:4f:04:1f:ae:6c:55:90:e2:8e: 57:57:ff:06:b9:46:0b:c3:6c:65:c4:b6:37:6a:89: ae:11:4d:55:d6:de:52:f1:b1:4a:93:92:7c:53:00: 29:7d:57:b8:ed:cc:3c:69:1a:78:39:44:f2:0d:09: 9f:ef:9a:81:9b:c5:05:bc:bb:19:22:46:ec:b2:aa: be:08:e8:ba:42:1a:15:69:1e:59:4a:6d:01:f8:0d: 98:77:cf:43:6c:a1:15:06:d7:19:59:12:7c:ee:e8: 41:d8:0a:8d:17:e1:1e:52:9b:ff:88:13:dd:d8:ab: fc:85:ef:a5:1b:55:bd:6a:d2:2c:78:93:f0:0d:b2: 05:a1:17:f4:c5:2a:b6:54:48:5a:f9:85:59:8e:df: de:7d:b3:1c:16:91:f1:b3:91:f3:c1:49:7c:48:f6: 04:93:a1:dc:7e:68:46:dd:a4:2b:67:3b:05:8a:34: 6c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:34:78:A0:5B:7E:48:85:DC:8A:B6:F9:C1:EC:58:B9:83:4C:79:DE X509v3 Authority Key Identifier: keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:41:cc:20:6c:52:e8:0c:97:4f:7b:61:b1:5b:4e:c3:3a:9d: 76:d3:c7:35:e4:d9:20:89:b7:78:c9:51:87:e6:c1:c5:83:56: fd:31:fd:2f:a1:28:d0:da:24:4c:15:21:ff:83:9e:7f:6a:78: d1:9d:2e:08:e2:9b:19:1a:05:44:bf:da:3d:16:66:61:1a:a7: 33:87:86:ea:ea:13:64:68:60:10:0a:8c:cf:e2:be:8c:fb:f5: 67:07:02:04:18:ff:8e:77:c7:0c:d3:a6:95:4c:a1:af:ea:60: 84:ef:4d:3e:f6:8f:71:d6:c6:2a:34:76:6c:96:ec:10:45:72: 6f:42:eb:24:4d:63:65:c7:1b:28:ff:b7:d2:f4:93:65:c5:9f: ff:54:82:b3:cc:1e:08:04:a7:58:f1:90:57:0f:52:0e:a9:70: 81:d0:cb:90:4c:33:14:cf:d5:cb:49:42:f4:01:93:dc:fd:1d: 63:83:f0:c6:f4:9d:f8:e9:11:b6:e0:60:55:6f:3c:85:f6:00: af:84:cb:b0:07:f3:ed:72:68:55:3c:17:30:e6:77:7c:bd:bc: e3:a1:0b:df:6c:82:c9:d7:20:2b:a9:b6:6d:c1:4e:54:0c:de: dd:12:73:a5:da:ff:cc:56:b1:62:d8:91:5f:77:1e:c3:3b:57: 9d:03:83:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh9+JqIaO6LfHB5EajHdawbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx OWE3NGUwHhcNMjUwODA2MDYwMTQxWhcNMjUwODA3MDYwMTQxWjAzMTEwLwYDVQQD Eyg3ZDM0NzhhMDViN2U0ODg1ZGM4YWI2ZjljMWVjNThiOTgzNGM3OWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2nVUdvlac8F5Gs+DHB54pE88jFs v2Yid2N99P033bn6+zT07Gf/Vy604mn5aHpHAwgvSk1wSQrSlZSXsDCWIpq3lzxO HosZmJaj8M3nlflPBB+ubFWQ4o5XV/8GuUYLw2xlxLY3aomuEU1V1t5S8bFKk5J8 UwApfVe47cw8aRp4OUTyDQmf75qBm8UFvLsZIkbssqq+COi6QhoVaR5ZSm0B+A2Y d89DbKEVBtcZWRJ87uhB2AqNF+EeUpv/iBPd2Kv8he+lG1W9atIseJPwDbIFoRf0 xSq2VEha+YVZjt/efbMcFpHxs5HzwUl8SPYEk6HcfmhG3aQrZzsFijRsUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH00eKBbfkiF3Iq2+cHsWLmDTHneMB8GA1UdIwQY MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct OTViMDhlMzY2MGNmLzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPEHMIGxS 6AyXT3thsVtOwzqddtPHNeTZIIm3eMlRh+bBxYNW/TH9L6Eo0NokTBUh/4Oef2p4 0Z0uCOKbGRoFRL/aPRZmYRqnM4eG6uoTZGhgEAqMz+K+jPv1ZwcCBBj/jnfHDNOm lUyhr+pghO9NPvaPcdbGKjR2bJbsEEVyb0LrJE1jZccbKP+30vSTZcWf/1SCs8we CASnWPGQVw9SDqlwgdDLkEwzFM/Vy0lC9AGT3P0dY4PwxvSd+OkRtuBgVW88hfYA r4TLsAfz7XJoVTwXMOZ3fL2846EL32yCydcgK6m2bcFOVAze3RJzpdr/zFaxYtiR X3cewztXnQOD5g== -----END CERTIFICATE-----Generated at Wed Aug 6 14:21:33 2025 by rpki-client