$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft File: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json) Hash identifier: inwTWk4uEeLOupuZwoeVDzsnykTBFt5fJ42qkv1e74A= Subject key identifier: 6C:14:BE:16:65:23:6A:38:64:CB:91:E1:57:6F:51:4B:E7:F9:14:7A Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Certificate serial: 0198D65F2E4AF6209DA845F5A62CAACF5CB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft Manifest number: 02E1 Signing time: Sat 23 Aug 2025 10:00:18 +0000 Manifest this update: Sat 23 Aug 2025 10:00:18 +0000 Manifest next update: Sun 24 Aug 2025 10:00:18 +0000 Files and hashes: 1: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: kxpnFjq9g5zrrLPdNbcoKOFPjWWvFFxSZIxZ/eAWnRU=) 2: B0NZnOPP2h8oD-RNqJ-Ta2yq_Fc.roa (hash: hPfH3C1Uf5sAxbquvsid9TZ9qowMzn90bG/96XgZCYg=) 3: SO2aAnB4S5yHRruYM18XroAhS7s.roa (hash: Pz0dkuO54GBo11/DomEvI/BTZKCMV4IWlZC7klvn2ps=) 4: S_UvXYrcwi02mD9XS72xM5GP0XM.roa (hash: tDWixxPYWWKm64Sflrs16Hs5q2OnmoXj3QlJNoGIgAE=) 5: UF3Vre6C-2uWPd901r4ODYt5AHA.roa (hash: eNmvyxetTd0QVI6G0VkpJaSR8G25jRhf1MP+bDcaMic=) 6: _ZvG0PlF42L37wxQnyxCZfeMoAM.roa (hash: Z8GPW7jOAC9/r+ylozkesuGuO/RAGB5R1mOtBovFWng=) 7: jXLpkBBRrrRHjLoA0K-cw--pBrA.roa (hash: RDhF74MSc3oQL4ctthS0IBCNFsLyipPZpShGGlt9FTc=) 8: oZWWF5zyx5ocTW76AkaqmRcZRbc.roa (hash: Md76ioroY7UyB9QPN3x3zrcMAb6sqenqdiEF83Lxjww=) 9: wG4o-qI2-SFDukKFY7nO5neU430.roa (hash: yujHQG+kbMes0VhHuaufvfh3r/oBAVTjRJJ1+dXsMPA=) 10: zNBrt8b_ORyqQSO4aCrRbgzOM0k.roa (hash: JPrR5Q/6R3hbokDk+J7WmGsUILsQwl4oN4sTvCmroWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:5f:2e:4a:f6:20:9d:a8:45:f5:a6:2c:aa:cf:5c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Validity Not Before: Aug 23 10:00:18 2025 GMT Not After : Aug 24 10:00:18 2025 GMT Subject: CN=6c14be1665236a3864cb91e1576f514be7f9147a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:df:b3:ab:aa:9b:d2:b2:53:97:e5:07:49:b5: 26:e2:c9:43:2e:37:e9:56:c0:a7:e2:24:25:7a:72: 50:ae:3f:be:42:6d:b3:60:11:52:49:26:5b:e4:35: 70:b3:6f:0d:45:f4:01:b1:7e:26:bd:25:21:ff:f2: 15:42:f0:dd:cd:c6:47:31:28:43:d6:7a:82:6e:9e: be:39:a2:33:14:70:80:d2:9e:0b:d8:c1:9a:93:b1: d4:01:e2:7e:60:d9:ad:64:fb:74:ba:18:e2:80:d9: 86:04:b6:5d:cb:42:72:60:1b:87:f8:a8:6a:b0:05: bb:53:5f:e6:c2:09:6b:bd:37:0a:cb:6a:98:ad:20: a8:37:50:48:41:28:16:e3:a8:1a:c7:08:1c:12:dc: 3f:2e:dc:23:ed:ef:4e:4b:00:16:e7:7a:a0:b1:7a: 62:3d:e5:09:10:ef:aa:8d:86:b5:bf:49:c9:db:90: 92:42:7e:55:87:55:a3:67:f0:dd:65:9f:42:e5:08: 5a:b5:a8:07:7c:e3:48:8e:31:39:b2:a2:ce:4a:a7: 33:14:6d:e6:61:0b:dd:75:82:f6:29:86:16:5c:4f: c1:bf:67:db:b5:c1:c4:23:7b:07:1e:6c:d7:0a:d4: a7:e8:3f:ea:d0:24:8c:01:b6:a0:3f:b6:b4:88:a5: 01:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:14:BE:16:65:23:6A:38:64:CB:91:E1:57:6F:51:4B:E7:F9:14:7A X509v3 Authority Key Identifier: keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:77:f9:a3:12:77:e9:7c:08:3b:46:13:40:10:e5:90:90:93: 73:35:6f:2a:4c:01:a6:49:b2:40:9c:dc:34:13:63:a0:b3:ff: 79:7f:30:ca:a4:aa:85:a7:4a:53:59:84:c8:39:c3:ef:c1:57: 67:66:fc:5b:46:73:e8:7d:7c:b0:4e:db:e2:cc:86:57:37:40: 3f:bb:c5:87:63:50:97:5e:ec:25:b3:4d:5e:91:e7:84:92:4f: 45:b5:9d:1b:94:f5:56:7c:f6:f3:a2:b3:43:e2:b2:84:6b:99: 5c:53:c4:e2:c5:c2:6d:c8:f3:8c:b4:d1:b0:26:61:c9:5a:e8: 82:c3:a4:4d:74:02:f1:ea:10:37:42:48:3c:14:00:3e:d0:3c: b1:f3:83:29:70:2b:d0:8e:ef:c6:b3:c3:44:cf:7c:4d:db:9b: 5a:bc:d3:e2:1c:94:48:94:83:ce:9e:da:1b:98:8b:31:c8:ac: 57:65:5f:12:78:3c:07:64:8a:32:d7:23:90:a9:3e:ab:9e:0a: ea:c2:3d:4f:dc:df:bb:18:76:17:dd:cb:f6:cb:16:ae:45:41: 44:f8:a9:14:9a:d0:c8:a5:e8:59:d2:12:be:6f:69:56:28:71: 1b:b0:3c:10:b0:b1:2c:d3:c5:ad:a1:47:8d:10:98:c0:29:64: 48:4a:9a:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWXy5K9iCdqEX1piyqz1ywMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw YjVjN2MwHhcNMjUwODIzMTAwMDE4WhcNMjUwODI0MTAwMDE4WjAzMTEwLwYDVQQD Eyg2YzE0YmUxNjY1MjM2YTM4NjRjYjkxZTE1NzZmNTE0YmU3ZjkxNDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9+zq6qb0rJTl+UHSbUm4slDLjfp VsCn4iQlenJQrj++Qm2zYBFSSSZb5DVws28NRfQBsX4mvSUh//IVQvDdzcZHMShD 1nqCbp6+OaIzFHCA0p4L2MGak7HUAeJ+YNmtZPt0uhjigNmGBLZdy0JyYBuH+Khq sAW7U1/mwglrvTcKy2qYrSCoN1BIQSgW46gaxwgcEtw/Ltwj7e9OSwAW53qgsXpi PeUJEO+qjYa1v0nJ25CSQn5Vh1WjZ/DdZZ9C5QhatagHfONIjjE5sqLOSqczFG3m YQvddYL2KYYWXE/Bv2fbtcHEI3sHHmzXCtSn6D/q0CSMAbagP7a0iKUBYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGwUvhZlI2o4ZMuR4VdvUUvn+RR6MB8GA1UdIwQY MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt MWY1NDMxZTJhNWFmLzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmXf5oxJ3 6XwIO0YTQBDlkJCTczVvKkwBpkmyQJzcNBNjoLP/eX8wyqSqhadKU1mEyDnD78FX Z2b8W0Zz6H18sE7b4syGVzdAP7vFh2NQl17sJbNNXpHnhJJPRbWdG5T1Vnz286Kz Q+KyhGuZXFPE4sXCbcjzjLTRsCZhyVrogsOkTXQC8eoQN0JIPBQAPtA8sfODKXAr 0I7vxrPDRM98TdubWrzT4hyUSJSDzp7aG5iLMcisV2VfEng8B2SKMtcjkKk+q54K 6sI9T9zfuxh2F93L9ssWrkVBRPipFJrQyKXoWdISvm9pVihxG7A8ELCxLNPFraFH jRCYwClkSEqagQ== -----END CERTIFICATE-----Generated at Sat Aug 23 14:06:07 2025 by rpki-client