$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft File: MH2IfALgfJ5HTR-OIQScqmzj-9M.mft (raw, json) Hash identifier: 1JTLsZjZSRlJLYP2u0H/SvDCb7kTMZ2DRjX9Rv2gf9o= Subject key identifier: B3:C8:93:F3:7D:DC:C9:1B:2E:83:28:CC:CE:25:86:F2:D3:59:90:44 Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Certificate serial: 0198D54E031981D6980CD4C6327B74B0BB79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft Manifest number: 164D Signing time: Sat 23 Aug 2025 05:01:56 +0000 Manifest this update: Sat 23 Aug 2025 05:01:56 +0000 Manifest next update: Sun 24 Aug 2025 05:01:56 +0000 Files and hashes: 1: Go3D60IftVT7kBobBk8HTq_r6wY.roa (hash: /aH1VuqUtHMC947Kt5tr1ajHSrdHN60XTYZiPes2dOU=) 2: JKKr0NwqKrBRfO9-TNMA6fKjebU.roa (hash: +prVLn/SSNSb/SQ4BmX9heAxTyq0XNrqnNVcVb/zNYQ=) 3: MH2IfALgfJ5HTR-OIQScqmzj-9M.crl (hash: 5tGXyQ53wOueLu62AFRUhertqZl4i+fncmYVLxc2dmE=) 4: OrdWNePRO-azuf-x7WJ0gNqkZc8.roa (hash: ehZsJBwER/Ak+kPEJiQOXw5pziTKWHwzzGUWq4oZM/c=) 5: Q3_mv-tF2Z1EHDZHaZk8mJMN1bk.roa (hash: oXSPeYLnMI9gMBulzyR8eDJwfmPdLhgYhc4vqS0U/tE=) 6: S2TXSI-3n25IfgGnM4uuJwml268.roa (hash: DAgFF4qJxC/k8JOz+sB1Q1cvXx4PDaouIru4SXZXgbU=) 7: UJuJe34B0guqTgOl--QOCgSYvZE.roa (hash: c2O3pbkk6z+NjOLR47vzvdpTF+ZJKIik+rzOAO3mk2Y=) 8: bR8kj_c2TPqFFFMT255K3OTqBTI.roa (hash: mIG3JTVdQTlKmcdrQlCtE5KtfNee8F1irJglkfAd6/0=) 9: e_JO57HIUgxnL2zZw_SZRKtvz2k.roa (hash: kYzJL9upOKUtQTqnQ+rXijBf3P483K+T+FEi6SAaLE0=) 10: qkn09gGw9_pYS22v_SrDemeIoJI.roa (hash: OSIoNd4NerHm/MUfEqmcXlQFZ/K6gwLw7wnqNHc3YTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:4e:03:19:81:d6:98:0c:d4:c6:32:7b:74:b0:bb:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Validity Not Before: Aug 23 05:01:56 2025 GMT Not After : Aug 24 05:01:56 2025 GMT Subject: CN=b3c893f37ddcc91b2e8328ccce2586f2d3599044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e4:82:66:da:47:6b:56:d9:34:54:8d:0b:f5: db:63:59:ff:9e:51:db:ae:33:b1:95:62:80:9e:73: 9b:16:3d:3b:da:42:2e:ed:95:82:ce:e2:8a:d0:bf: 49:f1:da:70:45:d1:2e:ca:89:12:24:de:e1:ed:41: 94:0a:64:43:28:44:ae:7a:4b:61:7f:8e:44:04:13: 56:7e:12:b0:ea:2e:a7:b6:e3:5d:67:b6:b0:96:79: db:86:ed:6e:54:d0:d0:1e:03:df:ec:6a:f6:49:c7: a5:44:f7:16:61:cb:ea:cd:f9:f9:68:3f:8c:10:b8: 01:7b:77:a4:3d:69:48:9d:2e:6e:d8:76:7d:f1:67: 9d:34:59:ef:37:07:14:c3:ed:23:22:7c:d1:b8:1a: 9c:37:67:cd:04:b8:5c:48:9e:a2:51:63:39:f5:fd: f3:56:0d:05:07:10:a9:7b:ba:17:1d:d8:02:2f:17: ea:16:e2:09:38:5d:c2:11:d4:94:ca:03:5e:1e:a0: 65:4e:05:28:b1:a8:1d:35:17:36:43:37:8e:c9:78: ce:fd:f4:d8:5d:14:e9:30:b8:90:3f:7e:03:fc:09: b5:fb:bd:36:fa:88:20:bb:20:c9:02:2f:20:f6:1c: a7:02:80:a3:e9:e1:06:55:13:8b:0b:1c:36:20:c5: 74:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C8:93:F3:7D:DC:C9:1B:2E:83:28:CC:CE:25:86:F2:D3:59:90:44 X509v3 Authority Key Identifier: keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:12:7a:c5:57:89:01:af:58:5f:c6:ff:7d:0d:f1:46:d9:4a: 2c:fa:8e:26:13:e7:cd:b5:fc:9c:c9:41:fb:5b:ee:85:9f:5d: a0:42:1b:31:c8:05:81:18:a7:19:b9:d5:8a:ca:ee:a1:c8:30: 38:cf:cc:99:ca:fa:7e:76:5c:2f:2f:4c:1b:4f:5a:f3:77:78: 84:66:8c:0d:45:d7:59:69:4e:04:a3:1d:8e:e3:d4:85:4d:2a: 5c:61:ef:99:c8:57:f1:82:8e:3f:16:af:60:82:c5:4d:bb:d4: 66:31:cd:70:86:61:a2:7b:44:53:5c:93:63:2d:8d:4d:48:98: 05:05:4b:a8:08:55:5f:38:0b:a4:57:bc:a5:b4:17:cc:da:f3: ff:20:ce:5e:8e:2a:9b:77:05:b2:53:20:d1:bd:8d:89:8c:6f: 9b:c0:60:e0:cb:cf:8e:b4:e1:52:3b:b9:e6:37:67:65:1e:ce: 9f:31:1f:eb:4a:4c:6e:51:9f:4d:98:cd:e1:af:82:48:78:26: 98:2c:56:ea:ed:f3:89:51:99:85:a5:b0:d7:38:03:80:35:23: 1a:8d:8f:bc:dc:39:41:dc:df:88:50:34:a8:e3:65:48:d8:df: 18:f7:45:5e:f8:08:e4:6a:ae:24:51:1b:03:ca:30:33:bb:7a: f0:53:52:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVTgMZgdaYDNTGMnt0sLt5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Q4ODdjMDJlMDdjOWU0NzRkMWY4ZTIxMDQ5Y2FhNmNl M2ZiZDMwHhcNMjUwODIzMDUwMTU2WhcNMjUwODI0MDUwMTU2WjAzMTEwLwYDVQQD EyhiM2M4OTNmMzdkZGNjOTFiMmU4MzI4Y2NjZTI1ODZmMmQzNTk5MDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneSCZtpHa1bZNFSNC/XbY1n/nlHb rjOxlWKAnnObFj072kIu7ZWCzuKK0L9J8dpwRdEuyokSJN7h7UGUCmRDKESuekth f45EBBNWfhKw6i6ntuNdZ7awlnnbhu1uVNDQHgPf7Gr2ScelRPcWYcvqzfn5aD+M ELgBe3ekPWlInS5u2HZ98WedNFnvNwcUw+0jInzRuBqcN2fNBLhcSJ6iUWM59f3z Vg0FBxCpe7oXHdgCLxfqFuIJOF3CEdSUygNeHqBlTgUosagdNRc2QzeOyXjO/fTY XRTpMLiQP34D/Am1+702+ogguyDJAi8g9hynAoCj6eEGVROLCxw2IMV0FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPIk/N93MkbLoMozM4lhvLTWZBEMB8GA1UdIwQY MBaAFDB9iHwC4HyeR00fjiEEnKps4/vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMt MWE1ZTVmMTkxYmZhLzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMtMWE1ZTVmMTkxYmZh LzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlBJ6xVeJ Aa9YX8b/fQ3xRtlKLPqOJhPnzbX8nMlB+1vuhZ9doEIbMcgFgRinGbnVisruocgw OM/Mmcr6fnZcLy9MG09a83d4hGaMDUXXWWlOBKMdjuPUhU0qXGHvmchX8YKOPxav YILFTbvUZjHNcIZhontEU1yTYy2NTUiYBQVLqAhVXzgLpFe8pbQXzNrz/yDOXo4q m3cFslMg0b2NiYxvm8Bg4MvPjrThUju55jdnZR7OnzEf60pMblGfTZjN4a+CSHgm mCxW6u3ziVGZhaWw1zgDgDUjGo2PvNw5QdzfiFA0qONlSNjfGPdFXvgI5GquJFEb A8owM7t68FNSJw== -----END CERTIFICATE-----Generated at Sat Aug 23 14:24:33 2025 by rpki-client