$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft File: 09VvB74YTLpS9v3ASegRTSYWwyo.mft (raw, json) Hash identifier: 59IUd813BP0nt4ku+QwkKvInA9WmPNEQ60Vd8ClbyfI= Subject key identifier: A4:9F:C5:59:DC:4C:FE:5C:AD:FE:0E:84:3F:F7:DC:FF:0D:E8:5F:CD Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Certificate serial: 019876AC6F855F3CA3E76D5503E747F1117C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft Manifest number: 1620 Signing time: Mon 04 Aug 2025 20:01:08 +0000 Manifest this update: Mon 04 Aug 2025 20:01:08 +0000 Manifest next update: Tue 05 Aug 2025 20:01:08 +0000 Files and hashes: 1: 09VvB74YTLpS9v3ASegRTSYWwyo.crl (hash: tfpb7i1Wy96n1Xn0zXrZKbgGp3GDc6xj2U6vG6CVk5g=) 2: 4c68WXa89S9GaEZ3betWtfOynEI.roa (hash: fVAp1PUxEqPq1PXw46ujCE/Pw+4uzGlNeTIsndTtQ4g=) 3: 7kfcYNNoB5VB3-_80xlsWN3weyk.roa (hash: 1wJop1mQ6qBQDepGqT5ANO4tx0iRC5GqiIyWQqeZxiY=) 4: Bs0O01jXAqadcOrA_652_6vgquk.roa (hash: hEdFCfeLg1JToe8V2oyy+hkNpnht00+5NYTQRgNDOq8=) 5: KidN7PJCXFwqwby4fVpHaeAhpFY.roa (hash: rFMoYmqrD8lR5TajeeUqUicyuRT28K2jKIN4IFZHnsU=) 6: NYzishm2ogJfRyzy8nT6kXYmzuI.roa (hash: LaEEfSMmtUB1mBqYxGiYK3KhOkpxYURIQoeWj6Zjkz4=) 7: RIPl0ZcnNzCRnoJoRMQdo7FatJo.roa (hash: V51bdAbDUbCCdG4ap1IngeKOzNBFdbTp51TPAvBkqrE=) 8: eKmkaw2M8tueZ_tzxfDI9F6CNcc.roa (hash: fg34CUb41rhu+065E2VZ9qaIx2X2iqQ2jxGQO4GwQe4=) 9: pq2QS5SBDS3pAxrbz1jylBKYb1c.roa (hash: kdt9b8eHxviCcBXo3alD6ToqY7JvOLmYwFiRPu6twu8=) 10: tpxzfABwHA4uTKjODgtKlvT10t8.roa (hash: /uiIY+OMfjw8MyTKZlNYbS4i9kHVxO0uNCEe4Op3YPE=) 11: xz6DVtU3-Ra9kwVQS1hT5B1NgIk.roa (hash: L6obqobAUv8Kf3w8kISkegiNvXZC3M7YbdVJnQVDNRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:76:ac:6f:85:5f:3c:a3:e7:6d:55:03:e7:47:f1:11:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Validity Not Before: Aug 4 20:01:08 2025 GMT Not After : Aug 5 20:01:08 2025 GMT Subject: CN=a49fc559dc4cfe5cadfe0e843ff7dcff0de85fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:63:65:93:cf:d4:80:20:89:24:00:38:93:ab: 36:00:63:0c:6f:27:da:09:6a:cb:3e:d7:62:64:ed: 95:d9:0f:5e:7d:0c:50:1b:0c:26:54:49:f4:c5:87: b3:4f:3a:d8:7b:72:c9:1d:94:43:d5:4a:c6:b1:c0: fe:c4:da:63:9a:7f:bc:e1:b4:40:b9:83:c7:55:62: fe:72:ed:42:1e:05:12:b7:28:99:f3:df:78:cb:52: 43:65:d3:53:ed:df:c0:2d:ec:df:84:48:db:c9:fe: 60:e7:f0:13:26:fd:53:63:69:d6:0d:f2:48:eb:9a: e7:de:07:22:7a:49:2f:33:a2:fb:f4:5d:30:09:86: e8:43:e3:07:4c:14:e4:0a:11:f3:8b:5d:2d:f5:fc: ed:e4:3a:fb:c4:62:cd:d0:a7:ff:da:bb:a7:7e:05: ef:60:9c:59:c3:d8:67:d5:03:0e:29:d8:f2:18:b3: de:79:89:2c:5d:8f:a8:6e:bb:4e:03:48:fe:af:04: 01:cb:98:09:21:89:ba:a8:b7:89:bd:4c:93:89:06: 4b:46:a4:8f:35:12:50:fb:78:58:22:16:d0:99:8c: a1:02:11:dc:88:b6:f4:e2:07:3e:35:75:b5:98:3b: 0b:a0:87:0d:8a:7b:c5:7b:91:55:ad:1b:8f:42:87: 65:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9F:C5:59:DC:4C:FE:5C:AD:FE:0E:84:3F:F7:DC:FF:0D:E8:5F:CD X509v3 Authority Key Identifier: keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:18:23:77:c2:f2:f5:55:20:1b:82:02:4b:d2:03:ba:77:e0: a7:af:c8:ba:db:29:d2:df:98:d2:65:ca:89:22:86:69:d9:4b: e1:a3:65:ca:b4:88:5f:51:10:fe:e3:80:8d:9d:74:84:dc:18: db:f5:6f:a4:b2:d2:68:7f:71:fa:d7:b7:92:74:68:65:22:96: 5e:29:f9:ad:ef:02:c5:87:b5:25:eb:5b:63:ca:6b:d6:97:32: 5a:bb:cb:8a:8d:58:18:f3:23:cf:d6:a2:69:b9:63:b5:6c:f7: fd:6a:d4:0f:d6:0d:a3:5b:03:ca:c8:98:1a:46:db:0d:1d:3a: 8a:3f:f2:00:8c:30:01:3c:8b:e9:95:ff:d7:93:bb:68:69:ef: 22:00:f2:62:c3:ff:70:79:9a:0f:31:51:85:e9:3b:84:6a:2a: 16:06:54:5f:49:2a:5d:e1:12:5c:67:7a:17:27:af:d1:58:e5: 4f:6b:44:12:38:0a:8b:b6:5f:a4:19:92:30:69:b2:5d:ed:7d: 1e:cb:fa:85:3c:5a:de:7e:c1:9c:12:84:10:8e:76:89:80:2f: 6b:65:99:29:3c:22:42:02:b0:30:41:98:d7:66:37:a8:32:bc: 14:af:12:56:6c:e9:97:09:01:66:60:a3:9d:f6:ea:8a:dc:18: 84:d8:40:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh2rG+FXzyj521VA+dH8RF8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZDU2ZjA3YmUxODRjYmE1MmY2ZmRjMDQ5ZTgxMTRkMjYx NmMzMmEwHhcNMjUwODA0MjAwMTA4WhcNMjUwODA1MjAwMTA4WjAzMTEwLwYDVQQD EyhhNDlmYzU1OWRjNGNmZTVjYWRmZTBlODQzZmY3ZGNmZjBkZTg1ZmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02Nlk8/UgCCJJAA4k6s2AGMMbyfa CWrLPtdiZO2V2Q9efQxQGwwmVEn0xYezTzrYe3LJHZRD1UrGscD+xNpjmn+84bRA uYPHVWL+cu1CHgUStyiZ8994y1JDZdNT7d/ALezfhEjbyf5g5/ATJv1TY2nWDfJI 65rn3gciekkvM6L79F0wCYboQ+MHTBTkChHzi10t9fzt5Dr7xGLN0Kf/2runfgXv YJxZw9hn1QMOKdjyGLPeeYksXY+obrtOA0j+rwQBy5gJIYm6qLeJvUyTiQZLRqSP NRJQ+3hYIhbQmYyhAhHciLb04gc+NXW1mDsLoIcNinvFe5FVrRuPQodl2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSfxVncTP5crf4OhD/33P8N6F/NMB8GA1UdIwQY MBaAFNPVbwe+GEy6Uvb9wEnoEU0mFsMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt MWIwNmQxYzcwNGMxLzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx LzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxgjd8Ly 9VUgG4ICS9IDunfgp6/Iutsp0t+Y0mXKiSKGadlL4aNlyrSIX1EQ/uOAjZ10hNwY 2/VvpLLSaH9x+te3knRoZSKWXin5re8CxYe1JetbY8pr1pcyWrvLio1YGPMjz9ai abljtWz3/WrUD9YNo1sDysiYGkbbDR06ij/yAIwwATyL6ZX/15O7aGnvIgDyYsP/ cHmaDzFRhek7hGoqFgZUX0kqXeESXGd6Fyev0VjlT2tEEjgKi7ZfpBmSMGmyXe19 Hsv6hTxa3n7BnBKEEI52iYAva2WZKTwiQgKwMEGY12Y3qDK8FK8SVmzplwkBZmCj nfbqitwYhNhAJQ== -----END CERTIFICATE-----Generated at Mon Aug 4 22:17:22 2025 by rpki-client