$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft File: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft (raw, json) Hash identifier: Uw/LEZkDIbnlh5yG6+0G1YtTWLf8QCSwMq8sDBhXcz4= Subject key identifier: 67:E0:9F:DE:84:A0:DB:07:A0:A7:31:42:FC:75:50:AF:BD:77:FE:44 Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 Certificate issuer: /CN=255876412d20fbb6cab823481782ac47703b4404 Certificate serial: 0198D583ED1A4FB9B8333DC0FEB179C92333 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft Manifest number: 031F Signing time: Sat 23 Aug 2025 06:00:49 +0000 Manifest this update: Sat 23 Aug 2025 06:00:49 +0000 Manifest next update: Sun 24 Aug 2025 06:00:49 +0000 Files and hashes: 1: 8g-49_qQ3fcAAr8ogKNyJYRIsqM.roa (hash: YUM8nQydrUaGiZYWfH9e5CkG/0ZnMAVKiwEv7wrrmyU=) 2: HL_391YyhybjwJ74kNKee4Xme30.roa (hash: SKqvmhnXy6lVHKlIjthvO2Ffcm5YC3y5BAN0frkvak8=) 3: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl (hash: LI5A/uUwCbOmxV10hk910g0Ll98LaVBDZ7eQeK81X48=) 4: UFzq6HTzLsKXQDiIwbMVwsSvCKE.roa (hash: SkcdE34ZRnlvciguMZx89azOscHKjWKi4kmUM6ce2ek=) 5: Vf3C3nEL83KU-t7pLCkbgpiASsA.roa (hash: 6SosAmZB67F6Q5qUy5fWvfEJcjGr5qv93jKtlhRr2es=) 6: b37yA0vBw9z9NXOjP3ngOC-nsdQ.roa (hash: xnMkc8ma8YV2ulWTsjtILbYV33NvcPwQMYE2M0mdniE=) 7: evsBxqfpyH3zHvt0KdEDbPjJt40.roa (hash: vsA8eWY0hm6KpE4+4Kq5HkaUgEZIYMzjLRq48DP4yG4=) 8: hp0pLX_QGiWhiOhgc-g-g3McIzI.roa (hash: iRmxgVLqjy7bOiMWp10+U3a2wekQwe0YpGsmUpp/wOw=) 9: lwlNrqm3r8NOZc8muUo80fFlOeY.roa (hash: FfJzjpvXZQfdbT9Lc8mjBM1Q8TX5WkjUXsorwJal9Zo=) 10: pu4GRTEZI-DDS8alCpZhtqjD728.roa (hash: 4gymL9RPKKRX/UazcJNoKfCcQGjN640R8KkZ8YDasZ0=) 11: r6VOlpU6VgL1WVlEQKIIOdFJ6jc.roa (hash: qZ5211k3RJOzvqXcolh5rN4QAkWpCPQgoaSC1kNOR9w=) 12: zB7jZpVQ6_QohXb9Ts1uTCDa9vc.roa (hash: G92uGtD4p7P9jynyu17jJLaD0YzUsjPpS9i4T5WM4LU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:83:ed:1a:4f:b9:b8:33:3d:c0:fe:b1:79:c9:23:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255876412d20fbb6cab823481782ac47703b4404 Validity Not Before: Aug 23 06:00:49 2025 GMT Not After : Aug 24 06:00:49 2025 GMT Subject: CN=67e09fde84a0db07a0a73142fc7550afbd77fe44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8a:52:c0:b4:10:35:a6:a8:df:28:5e:1f:59: 81:98:b2:4d:f7:e7:4d:c5:3a:40:e9:c8:47:82:12: 68:f8:b8:95:bd:f0:48:24:95:e7:c4:01:3f:d1:0f: 15:2d:62:84:f8:8c:02:fb:6a:a6:4a:ab:ae:9d:e9: 37:b9:74:ca:30:7c:31:9b:85:47:8f:ff:9a:13:10: 3a:19:4b:6b:ef:81:bc:5c:9b:d0:8c:f4:12:41:c9: 30:4a:65:48:f6:a3:50:f2:a9:eb:fe:d2:5b:a8:54: 8c:b7:81:12:b1:3e:3e:c0:9a:71:60:a5:dc:b2:b3: 27:7b:22:5b:66:24:b4:16:21:32:b3:ad:4f:fd:3c: e2:1b:65:5c:d1:cf:b5:c1:90:1f:5c:cc:5d:c5:9c: 25:61:ed:6a:91:12:c0:34:11:33:8a:2b:47:c7:9c: 89:e2:29:28:bc:91:e3:8f:e4:5c:60:5f:d1:a6:51: 94:8d:5d:56:be:ee:94:59:ef:1f:f6:4c:51:1e:ab: e3:e3:14:d5:3f:58:e1:a5:65:e2:39:69:50:6d:76: a3:37:d5:dd:85:d8:2f:21:64:26:d3:ff:5a:b2:91: 2b:89:24:5d:23:37:26:57:81:b3:48:9b:ca:4e:89: d3:b7:ed:1c:4b:4d:55:55:70:83:96:8f:61:7a:fc: e9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E0:9F:DE:84:A0:DB:07:A0:A7:31:42:FC:75:50:AF:BD:77:FE:44 X509v3 Authority Key Identifier: keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:f3:3c:d3:a3:de:6a:d1:f9:70:30:68:76:9c:f5:74:04:a8: 37:8e:12:1f:4e:76:78:d0:c5:80:92:ea:b4:86:c7:76:e5:bf: c6:a1:c9:92:73:c0:e5:51:86:cc:ec:dd:15:93:b0:3a:e1:c3: 30:96:77:12:f6:38:fc:25:ba:7a:1a:1a:97:57:30:28:e0:eb: 41:2d:09:2c:15:32:bf:8a:0c:0e:46:1e:a6:9e:a7:97:de:ee: 3c:c7:81:0c:e9:8c:31:03:07:d5:aa:26:35:4e:b2:62:e0:39: 57:f7:26:d1:98:21:6b:e7:75:8e:14:a3:12:21:67:55:91:c7: 0b:f5:02:e1:d8:6a:bc:40:09:2b:13:e3:15:29:09:d7:a6:40: 04:62:0f:72:b5:2e:7d:1e:1a:d5:35:de:36:6b:23:68:05:35: e0:f9:9a:13:8b:7b:bf:66:c5:d4:96:e8:f6:71:d0:45:79:f4: b7:83:3d:95:7d:55:96:8e:b6:15:d6:e5:ab:19:b1:ab:eb:4f: ef:93:2b:58:74:94:49:eb:ee:f7:02:41:11:0c:7a:86:b0:3d: 77:d5:16:f7:61:64:5a:24:83:36:4f:6b:6a:56:01:7c:d0:cb: bf:14:e0:19:88:2d:66:72:35:c2:82:aa:40:aa:dd:7f:a9:de: 4d:4a:b6:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVg+0aT7m4Mz3A/rF5ySMzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NTg3NjQxMmQyMGZiYjZjYWI4MjM0ODE3ODJhYzQ3NzAz YjQ0MDQwHhcNMjUwODIzMDYwMDQ5WhcNMjUwODI0MDYwMDQ5WjAzMTEwLwYDVQQD Eyg2N2UwOWZkZTg0YTBkYjA3YTBhNzMxNDJmYzc1NTBhZmJkNzdmZTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYpSwLQQNaao3yheH1mBmLJN9+dN xTpA6chHghJo+LiVvfBIJJXnxAE/0Q8VLWKE+IwC+2qmSquunek3uXTKMHwxm4VH j/+aExA6GUtr74G8XJvQjPQSQckwSmVI9qNQ8qnr/tJbqFSMt4ESsT4+wJpxYKXc srMneyJbZiS0FiEys61P/TziG2Vc0c+1wZAfXMxdxZwlYe1qkRLANBEziitHx5yJ 4ikovJHjj+RcYF/RplGUjV1Wvu6UWe8f9kxRHqvj4xTVP1jhpWXiOWlQbXajN9Xd hdgvIWQm0/9aspEriSRdIzcmV4GzSJvKTonTt+0cS01VVXCDlo9hevzpjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGfgn96EoNsHoKcxQvx1UK+9d/5EMB8GA1UdIwQY MBaAFCVYdkEtIPu2yrgjSBeCrEdwO0QEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEt ODc2YzdmY2E0YjM0LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEtODc2YzdmY2E0YjM0 LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/M806Pe atH5cDBodpz1dASoN44SH052eNDFgJLqtIbHduW/xqHJknPA5VGGzOzdFZOwOuHD MJZ3EvY4/CW6ehoal1cwKODrQS0JLBUyv4oMDkYepp6nl97uPMeBDOmMMQMH1aom NU6yYuA5V/cm0Zgha+d1jhSjEiFnVZHHC/UC4dhqvEAJKxPjFSkJ16ZABGIPcrUu fR4a1TXeNmsjaAU14PmaE4t7v2bF1Jbo9nHQRXn0t4M9lX1Vlo62Fdblqxmxq+tP 75MrWHSUSevu9wJBEQx6hrA9d9UW92FkWiSDNk9ralYBfNDLvxTgGYgtZnI1woKq QKrdf6neTUq2aw== -----END CERTIFICATE-----Generated at Sat Aug 23 11:39:14 2025 by rpki-client