$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft File: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft (raw, json) Hash identifier: z9aAk4fblhbF3+p1kM98Xvoy5DljIXzOZJyS76MFSB8= Subject key identifier: 11:F7:2D:38:69:DC:26:0D:46:0D:9A:32:F8:CB:8C:DF:81:2A:B5:AD Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Certificate serial: 0198D773CFE88BDD674770AE0A08A51A749C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft Manifest number: 1057 Signing time: Sat 23 Aug 2025 15:02:27 +0000 Manifest this update: Sat 23 Aug 2025 15:02:27 +0000 Manifest next update: Sun 24 Aug 2025 15:02:27 +0000 Files and hashes: 1: 1sKE36lDWeWUjMSloo6n26lQvxE.roa (hash: 0YFmLsRRla2daPn9GavHfi/iWCjcjVBR51fAM/YzUPA=) 2: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl (hash: B4QPQdygkt8D/sY4awRP1FY26qNtkTJpm7aBqMG2GD8=) 3: 7KfLp6tWihAhdW_ZCJGaxH-KxhA.roa (hash: TNNFwSmMyWVi4jN+jvMQ3wmmO3p3q2BXU7y9CZpeBFo=) 4: 8GeGNNzjzZvJIEAAhJi9tW2bbrA.roa (hash: Eto9TySCaxnkkdyIGeX6PMXh8s89OGTNecNbv02FHmY=) 5: BinZKeyg5gKkO8gwYJ0Ze8CeRxs.roa (hash: y9nENbUlBNsJYj+Cw11EQBzVD35m8OwMSWBUyRfdWao=) 6: CWwZKtjic8hgoUqW8Q2C2AbAOcg.roa (hash: kwrireSUCM8B5X7b/jFwe6owVISrGhqj47+KxFuhlXE=) 7: JS3mwrKoM_bu1YlMg44SqBJyzi4.roa (hash: FctYPf15GQv8egu27KZUZZfAkIishBp5/PDkotJF9Wg=) 8: ZH0QvaHOPvJPYEbUbSGF-chYfuI.roa (hash: GNpLUKAR49JusHGuTxHkn0FssgkY3qDBV+p8eW6v2dA=) 9: biowetcg3ehch8_ZT-Bjgdr3xVQ.roa (hash: +3UkGpMA2we3DWKym0QAg124Kd/FTF+tUn4YLgIyHpE=) 10: gmGmlBXuT4XMadwFIMM_Ru7A8rY.roa (hash: C02/amx+lTSpWSc0IFfRlXGRMUsC7V5LK9TrUNGhpXk=) 11: j0duG-Ijddau9Fj9XQZGhj9d5E0.roa (hash: jAtA5pws2q4wQ+M2hNZZyClsEg5rjHmu2VOiOpDAE88=) 12: mP8Qz54E01SquciLEGB10XN2R-M.roa (hash: TdXFl7ZveLTgT4OrOlqkJ84pFNT0T+LUDZ5933YP0mE=) 13: suXcRzS6-_4AE_w0ZJlYPW8wMRM.roa (hash: +PBYO+10etR0ZMMQ1FwMVF/GjPtirIZFSfWGb9cD2rU=) 14: yRlATHfw4VPtk07WpZ6YJCL0ujk.roa (hash: qFhl3+M+zqPL0w/p5+UX5EFi+fLod6eaZpO9ZGTbXcw=) 15: yVFu2BG-2jPO42o54RBasvcduFQ.roa (hash: 6xPh274P2CTFpVhbpm7wdZ5x4IvYPBNr1EUV4XIfsgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d7:73:cf:e8:8b:dd:67:47:70:ae:0a:08:a5:1a:74:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Validity Not Before: Aug 23 15:02:27 2025 GMT Not After : Aug 24 15:02:27 2025 GMT Subject: CN=11f72d3869dc260d460d9a32f8cb8cdf812ab5ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:f2:ee:23:96:00:46:42:64:2d:ab:26:3a:2e: 20:19:60:0d:c1:41:f1:ba:14:dc:df:83:bf:eb:e2: 29:d0:2f:44:89:86:8c:c7:85:d6:2a:64:1b:d5:09: 71:c9:1b:67:4a:aa:37:2f:06:d0:a7:8e:5f:be:05: ce:69:d8:02:2c:53:5e:e2:52:f6:0d:95:b1:93:3e: 87:b8:9b:fe:8d:2b:18:03:02:96:a4:2e:96:ae:ad: 43:07:8f:14:b5:d4:db:a3:75:a8:b3:28:cf:41:b1: 0e:6d:76:de:97:57:04:4a:b5:b8:ad:12:87:24:34: ed:6d:2e:ed:2b:1c:d5:1f:f4:15:df:ef:9a:24:dd: fb:ba:cb:04:36:28:09:8c:4c:fe:c3:79:39:24:cd: f8:7a:3a:5f:46:be:d0:09:db:e9:73:05:00:00:0e: f5:2f:03:48:0c:e1:bc:00:b8:c0:1d:92:ce:6c:d8: 9d:47:11:db:07:4b:ad:94:19:c8:d1:9b:fd:6c:63: 44:ad:fd:8d:78:17:0a:1e:75:10:78:2f:e6:6e:7f: fe:1d:d6:2d:58:48:eb:e8:13:64:c8:0e:33:ec:7c: 53:8f:24:d5:aa:cc:4b:dc:a3:47:32:b4:22:44:84: 21:8d:f0:c9:cd:fc:87:74:b8:52:a1:f8:91:ff:ad: f9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F7:2D:38:69:DC:26:0D:46:0D:9A:32:F8:CB:8C:DF:81:2A:B5:AD X509v3 Authority Key Identifier: keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:5c:db:7f:c8:01:cb:dc:4a:2e:ea:28:2a:94:ae:93:f0:af: a9:37:4b:53:3e:cf:cc:df:ef:4a:3b:d9:2c:db:c6:3e:0c:e3: 6e:59:b9:ee:8f:48:aa:71:f0:d9:7b:3b:62:af:3c:1b:52:fa: 32:a6:eb:a7:18:c0:e2:e0:8a:95:08:db:d6:66:64:70:0f:90: a6:07:6a:3d:b5:45:4f:70:14:7c:23:bb:85:2f:0f:82:6b:bc: c7:88:fc:a4:9d:47:bd:5b:65:33:a9:10:9f:8b:ef:d9:a0:c1: d7:eb:3a:9f:e4:9b:a7:f6:bc:a7:97:13:58:e4:db:c6:73:53: 92:3e:77:9e:41:72:66:5a:2b:a6:56:64:59:45:30:a7:f5:92: 85:1e:a5:12:ea:1b:4f:2d:72:8c:e8:34:19:a9:2f:c8:f1:1e: c9:0a:9b:45:db:b5:37:d4:b6:b7:79:c3:ad:b6:92:62:57:b6: 7f:ec:69:97:b6:1e:57:eb:ef:d0:28:93:e2:1e:78:59:ed:ab: f2:aa:df:48:99:bc:d1:48:d9:e7:b8:d4:aa:1c:92:08:2e:5a: 4f:e4:a9:91:8b:48:e5:3e:7a:a4:d1:7d:25:3d:af:ea:b0:9a: 32:af:aa:70:f0:4f:69:50:2c:61:02:49:2f:2c:29:18:05:0b: b6:d1:33:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjXc8/oi91nR3CuCgilGnScMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm NjljZGEwHhcNMjUwODIzMTUwMjI3WhcNMjUwODI0MTUwMjI3WjAzMTEwLwYDVQQD EygxMWY3MmQzODY5ZGMyNjBkNDYwZDlhMzJmOGNiOGNkZjgxMmFiNWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+vLuI5YARkJkLasmOi4gGWANwUHx uhTc34O/6+Ip0C9EiYaMx4XWKmQb1QlxyRtnSqo3LwbQp45fvgXOadgCLFNe4lL2 DZWxkz6HuJv+jSsYAwKWpC6Wrq1DB48UtdTbo3WosyjPQbEObXbel1cESrW4rRKH JDTtbS7tKxzVH/QV3++aJN37ussENigJjEz+w3k5JM34ejpfRr7QCdvpcwUAAA71 LwNIDOG8ALjAHZLObNidRxHbB0utlBnI0Zv9bGNErf2NeBcKHnUQeC/mbn/+HdYt WEjr6BNkyA4z7HxTjyTVqsxL3KNHMrQiRIQhjfDJzfyHdLhSofiR/635zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBH3LThp3CYNRg2aMvjLjN+BKrWtMB8GA1UdIwQY MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt ZGQyOTRjMzc4ZjZjLzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl1zbf8gB y9xKLuooKpSuk/CvqTdLUz7PzN/vSjvZLNvGPgzjblm57o9IqnHw2Xs7Yq88G1L6 MqbrpxjA4uCKlQjb1mZkcA+QpgdqPbVFT3AUfCO7hS8Pgmu8x4j8pJ1HvVtlM6kQ n4vv2aDB1+s6n+Sbp/a8p5cTWOTbxnNTkj53nkFyZlorplZkWUUwp/WShR6lEuob Ty1yjOg0GakvyPEeyQqbRdu1N9S2t3nDrbaSYle2f+xpl7YeV+vv0CiT4h54We2r 8qrfSJm80UjZ57jUqhySCC5aT+SpkYtI5T56pNF9JT2v6rCaMq+qcPBPaVAsYQJJ LywpGAULttEzrQ== -----END CERTIFICATE-----Generated at Sun Aug 24 00:22:44 2025 by rpki-client