$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft File: cG06u7R4t07yre-bt8QzbjQRHVE.mft (raw, json) Hash identifier: YcxNAD3dznpulDQeFay5DNXeo2N7pZS/FiQ8XCTikhM= Subject key identifier: FA:56:42:14:DB:6C:F5:BC:BC:51:81:70:D2:A9:18:24:1A:CB:4C:78 Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51 Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51 Certificate serial: 0198D6297F56231C43469D7AF5A250A9B98E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft Manifest number: 1031 Signing time: Sat 23 Aug 2025 09:01:40 +0000 Manifest this update: Sat 23 Aug 2025 09:01:40 +0000 Manifest next update: Sun 24 Aug 2025 09:01:40 +0000 Files and hashes: 1: 1-DdA-do2aUnfFDViNUxhUDqFzbE.roa (hash: BKYK/ZWsPHxxlNPF0PEHOjs0OjsXKAGuBICEBJN+sBU=) 2: PquNLopkqyd1FPkE6lVSuFZAhHk.roa (hash: cueg/ECXevtubCCHF8NReS6so4hgNR13sPfAmLWyFN8=) 3: SKahOuz63VxzF7gsfLLtP4-dwsQ.roa (hash: tgpfEWxbjIJhXJgvlYzjtjMs+efIHb2DWjDR4Pl22YM=) 4: Y87LNPXwYxzM1KbDSMEARR-tLxU.roa (hash: Hc9P0WIM13wsCCDXXb34wAtaFccE9wg34ig8vLvBeGY=) 5: cG06u7R4t07yre-bt8QzbjQRHVE.crl (hash: sW3NruqfRYSEoAdSaizgqbT/53HpVaLUm+XFDSLF+z8=) 6: dj7XdZh5KETFPQnDms3UxXnRXC4.roa (hash: EpSZ3YEAtJm35+lis2XvA9ik+aj1Kz53yBaF/oXDmdQ=) 7: nq4bzy4h6lHvAq7WfQfvLT3Lcxs.roa (hash: AUW0hCwolQea98JTwSo4ol+MpnG7tQ7XKxKB7k262zg=) 8: pnzGJ4U9axy4lLwZnaehAwpRVaQ.roa (hash: rLQUf7uZTpB79YDcuBoB9yRmzU3aEUgIa9XP7frMy3M=) 9: rIEcC1yrrtWRE_-aC4aiNaHlF0w.roa (hash: RIIBfBGrMJNxseu/gjjvLy+xu6nPcaesVv59+v9lv30=) 10: wF16Isbo0PTlUouJULLf9fQs6Jw.roa (hash: ujnMHiwDZPQLz7IHlGLCJr2Hydzywx1acJmP/oG/nU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:29:7f:56:23:1c:43:46:9d:7a:f5:a2:50:a9:b9:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51 Validity Not Before: Aug 23 09:01:40 2025 GMT Not After : Aug 24 09:01:40 2025 GMT Subject: CN=fa564214db6cf5bcbc518170d2a918241acb4c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5f:a6:e4:fc:15:c7:91:c5:79:d9:19:82:ad: 56:48:6a:77:f2:e6:f7:c0:bc:a0:f6:a5:31:43:a2: c0:d3:7d:c1:a3:87:ba:09:37:d0:da:75:4b:37:0b: 3b:4f:50:56:34:af:e7:db:69:9a:5f:a6:5d:01:6a: 86:90:2e:27:7b:22:4d:09:f4:c3:ae:7c:b9:ed:75: bb:5b:d6:39:6b:46:17:21:bf:9a:6a:e8:5d:8d:eb: f0:fb:9a:03:d4:0a:1e:c2:32:b7:76:67:24:76:4a: 94:71:a9:cc:4f:10:00:2b:58:3b:2c:f4:e7:d6:e9: 4c:ae:02:4d:7f:4d:2d:e4:87:86:05:0b:e0:fc:93: b6:03:fb:df:76:4f:ac:a1:0d:e6:62:38:5d:2e:53: ef:53:03:9f:2f:8f:b0:ca:25:23:d0:fe:6b:43:a9: a7:6a:83:8c:04:db:b4:01:f4:07:12:2a:25:db:fc: 59:5f:5d:df:ed:52:33:27:06:3f:ba:96:a6:8d:23: 79:7a:10:8d:46:e3:fc:c3:96:47:e1:13:cd:8d:1c: 35:20:26:96:de:c6:f1:b8:b8:09:2c:8b:3e:8b:75: 30:d3:5e:6f:ed:b3:24:56:22:76:58:6f:ca:9e:2d: f8:c5:99:3e:02:98:eb:b6:13:d5:c1:1f:d7:1b:2d: 06:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:56:42:14:DB:6C:F5:BC:BC:51:81:70:D2:A9:18:24:1A:CB:4C:78 X509v3 Authority Key Identifier: keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:98:95:6a:e0:86:ee:42:e0:d6:7d:3c:a0:8a:e0:e6:03:90: ad:09:da:e6:2a:36:ea:2f:34:89:8f:ae:37:7b:8f:fe:31:f8: 67:aa:3b:3e:c2:84:1d:9a:9b:21:43:53:41:c6:ad:79:9f:55: 9c:7a:e0:96:16:e9:e5:8a:b7:2d:e3:9d:bf:3e:98:74:3f:37: b7:92:2b:21:d2:df:48:17:02:5c:11:4d:87:bc:3b:5d:b2:65: 15:b8:c7:5e:3c:d1:7b:8d:f3:0c:c7:fb:3b:f3:05:04:a2:c2: 82:9c:06:25:1d:0c:b7:62:a5:2d:e2:9f:9f:02:a5:a9:d0:70: 02:25:ac:25:e9:3f:09:de:44:a3:5c:50:1b:f1:5d:91:68:e5: df:74:c4:c5:f6:4d:b1:32:f2:e5:7a:b6:6a:6d:08:8a:70:49: 99:43:9a:bd:43:45:e5:91:fd:28:e4:99:dd:d8:47:0f:c3:ee: 70:d9:d4:15:0d:ea:e5:fa:16:08:24:5f:40:83:06:ba:45:b4: 18:3d:a6:1a:dc:d7:b9:75:da:aa:76:e1:a4:e2:47:c3:b3:17: d6:d6:2a:2b:12:3c:ca:bb:c2:90:20:3e:25:d5:44:f6:ba:1e: 55:07:63:27:5d:9f:31:86:3a:7e:1c:c7:57:5a:b7:e1:64:74: b4:1f:65:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWKX9WIxxDRp169aJQqbmOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNmQzYWJiYjQ3OGI3NGVmMmFkZWY5YmI3YzQzMzZlMzQx MTFkNTEwHhcNMjUwODIzMDkwMTQwWhcNMjUwODI0MDkwMTQwWjAzMTEwLwYDVQQD EyhmYTU2NDIxNGRiNmNmNWJjYmM1MTgxNzBkMmE5MTgyNDFhY2I0Yzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl+m5PwVx5HFedkZgq1WSGp38ub3 wLyg9qUxQ6LA033Bo4e6CTfQ2nVLNws7T1BWNK/n22maX6ZdAWqGkC4neyJNCfTD rny57XW7W9Y5a0YXIb+aauhdjevw+5oD1AoewjK3dmckdkqUcanMTxAAK1g7LPTn 1ulMrgJNf00t5IeGBQvg/JO2A/vfdk+soQ3mYjhdLlPvUwOfL4+wyiUj0P5rQ6mn aoOMBNu0AfQHEiol2/xZX13f7VIzJwY/upamjSN5ehCNRuP8w5ZH4RPNjRw1ICaW 3sbxuLgJLIs+i3Uw015v7bMkViJ2WG/Kni34xZk+ApjrthPVwR/XGy0GwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpWQhTbbPW8vFGBcNKpGCQay0x4MB8GA1UdIwQY MBaAFHBtOru0eLdO8q3vm7fEM240ER1RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYt YTQyMTNjOTNmMWY3LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYtYTQyMTNjOTNmMWY3 LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnpiVauCG 7kLg1n08oIrg5gOQrQna5io26i80iY+uN3uP/jH4Z6o7PsKEHZqbIUNTQcateZ9V nHrglhbp5Yq3LeOdvz6YdD83t5IrIdLfSBcCXBFNh7w7XbJlFbjHXjzRe43zDMf7 O/MFBKLCgpwGJR0Mt2KlLeKfnwKlqdBwAiWsJek/Cd5Eo1xQG/FdkWjl33TExfZN sTLy5Xq2am0IinBJmUOavUNF5ZH9KOSZ3dhHD8PucNnUFQ3q5foWCCRfQIMGukW0 GD2mGtzXuXXaqnbhpOJHw7MX1tYqKxI8yrvCkCA+JdVE9roeVQdjJ12fMYY6fhzH V1q34WR0tB9lxw== -----END CERTIFICATE-----Generated at Sat Aug 23 12:12:54 2025 by rpki-client