$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft File: 5884hLeAB6Jdvi4s7wzHO2mSH4g.mft (raw, json) Hash identifier: jF4osz8MooaZ9ITrGLHtbuivzjL1Xx3uqAaqv4+7qDk= Subject key identifier: 19:B5:46:7B:C4:73:5A:59:3C:7B:D4:2B:A8:0A:0D:E6:43:7D:AF:1E Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Certificate serial: 0198D5157186BD6E3CD1F7C6423D755539BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft Manifest number: 1608 Signing time: Sat 23 Aug 2025 04:00:08 +0000 Manifest this update: Sat 23 Aug 2025 04:00:08 +0000 Manifest next update: Sun 24 Aug 2025 04:00:08 +0000 Files and hashes: 1: 0LDsu8q8BNCVXMdgo8IAmxRh6lg.roa (hash: G5jGPy0QrJ03EB2ETPwF643gtEqN7L0Vq2ZY/sUU8MU=) 2: 5884hLeAB6Jdvi4s7wzHO2mSH4g.crl (hash: yR1loqxyAR54pVj6dYzNw7u6y/aTn3CzqlAEYA3SaBs=) 3: B6snV1O7L6xN7jjaiNZWbxtP82Q.roa (hash: Z+4+/9OXk8fDzA3Dm2Dl/g02UpTK3tqTpOQvWThJM1E=) 4: MYlZiK8j4I-CRpNK84XFADjqS_Q.roa (hash: sHYzc9/ggp3cDmlo2cdq6sgs+CvgzddIutlRUEG3Jro=) 5: OUXqqWfQTCMLecmZJOetX8nDJq4.roa (hash: sVR/luDbfjaWQ+Na2uxCSWiX3jfCtfpibuRPwKT8RuI=) 6: SNfpSksRdeq_X6alujKtqxhgfmI.roa (hash: Ma1Hn2WiNgfoHoDq7NgShnN2PavA2o6Q6gAsmbAJ6uM=) 7: Xxx-aLbVPMFeFACAuRgkyYhKGZ4.roa (hash: Qjsr5YH+eP1GQSztBosIVdbSouCX9Gvl5XQ/f3iIe+4=) 8: bFYSJ_I4YgMVW4I9mBgSvFA_y-8.roa (hash: H2VlaHHW6c4b4Aq4JHISuCEj338oIr6DsQEFdgqSCMc=) 9: fUwIM0sp1GFSdwqWjPbX7BRcPzQ.roa (hash: Xh0ESEMvO/UeKqHJNYyYyUnRbpIWXGZSxLiX7rQbHOo=) 10: hnPMD0kJyESSkpzLaNH091YhR5k.roa (hash: reehn+NC4fwGIk+sTumI22RgUJ8t2cZVaMoj+4y8WfY=) 11: k0HzLQZ3MkcTFmEAim7zDGvlvJ0.roa (hash: MIgwLKWyMzfqXe5kvbowxxxZvthjppNFiSW7cLd35KI=) 12: z2F52wGzH9BMrpqKt2YykAg8u8Y.roa (hash: bvYJ2BHirZKw/0tfOS28eGnj6Ugji4ZaJ639S6rbz9g=) 13: zBe1zgNHDCKtxdrkxgm3eBXCBPU.roa (hash: BXmYyj4eoSdWaSTfE6Ragmw+4eV3ZTlYx1CDpgMgYSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:15:71:86:bd:6e:3c:d1:f7:c6:42:3d:75:55:39:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Validity Not Before: Aug 23 04:00:08 2025 GMT Not After : Aug 24 04:00:08 2025 GMT Subject: CN=19b5467bc4735a593c7bd42ba80a0de6437daf1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:36:dc:ea:ef:9b:a5:3c:81:fc:e6:f1:27:1a: 52:4d:6e:b5:e1:49:02:c1:34:15:ff:d8:e4:a8:67: dd:a7:16:b9:d3:f5:ca:a3:b4:a7:c5:21:e6:b2:be: 1f:f2:f2:ab:03:f3:3b:56:22:37:39:3a:14:1c:ca: 70:c4:6b:dc:11:42:de:dc:fd:71:72:b6:56:3c:a2: ed:f8:a6:56:5c:05:ca:7e:a7:6d:01:59:36:34:57: 33:4c:d4:46:53:50:8f:7f:ae:fa:20:c7:2f:d3:b1: ae:19:91:e9:f2:9f:45:f9:b3:0a:83:e5:4e:3f:ff: 82:a6:23:5f:f1:d2:d7:21:66:c5:0a:ee:7e:71:c8: 66:b0:41:7d:3c:27:a8:a0:f0:0c:37:c1:e5:4e:2d: 08:dc:f6:df:1e:7f:00:7c:85:93:b6:82:12:7d:a0: eb:3b:f2:ae:ff:00:61:ae:b9:39:d2:43:5c:5a:4e: 2a:8b:62:1e:7a:cc:e8:f6:69:d3:ef:67:37:dd:2d: 36:51:2e:94:40:81:29:02:d0:41:15:09:a8:35:97: 3c:0b:e0:9c:95:da:07:c2:99:da:a1:f6:60:7f:f2: 89:bc:e2:e4:e7:be:b6:c4:4f:b8:67:8d:7e:9e:97: d2:ee:31:b4:c9:24:06:41:8f:97:bd:77:45:97:ec: 94:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B5:46:7B:C4:73:5A:59:3C:7B:D4:2B:A8:0A:0D:E6:43:7D:AF:1E X509v3 Authority Key Identifier: keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:56:27:5a:8a:3a:c7:70:5e:9e:81:30:c7:65:bb:9d:c6:f8: 80:0b:88:0d:cf:f4:c7:d7:21:a9:72:e5:9d:de:ab:be:b5:93: 01:fd:38:77:48:c6:1f:57:30:df:bd:ee:37:49:1d:9c:88:0f: db:00:01:c2:de:32:44:f1:35:5e:2c:45:7f:99:86:db:db:8a: f1:48:18:c4:7c:69:f1:f1:24:84:08:87:c5:b4:99:39:2b:cd: e5:06:4a:76:5e:c5:3f:25:36:52:ca:cb:75:5f:bf:20:92:ca: 44:8a:2c:cd:f2:cf:29:4b:3e:69:f9:8f:f8:f2:55:9d:81:8a: 79:0b:99:4e:e0:31:7c:f5:ac:d7:a0:72:c1:71:60:fa:99:22: c9:9b:29:f6:de:4c:33:95:75:30:fa:f8:20:3d:9f:d8:bb:bd: 8a:63:1f:aa:ec:4e:55:e5:60:2b:99:e1:34:5b:27:38:5d:ed: d1:ed:4b:ad:9c:12:2a:a9:8f:c2:dc:bf:90:3d:f8:60:a9:ee: d4:16:22:3d:47:8b:e9:8e:02:29:37:c6:43:9d:8d:c0:00:59: 88:ca:d5:29:98:8a:e6:02:e1:df:9a:bf:27:75:ea:06:f6:af: b0:04:c8:f3:6b:88:8d:e3:cd:5e:7c:5a:0c:6a:fd:85:4e:67: 75:5d:20:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVFXGGvW480ffGQj11VTm9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5 MjFmODgwHhcNMjUwODIzMDQwMDA4WhcNMjUwODI0MDQwMDA4WjAzMTEwLwYDVQQD EygxOWI1NDY3YmM0NzM1YTU5M2M3YmQ0MmJhODBhMGRlNjQzN2RhZjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzbc6u+bpTyB/ObxJxpSTW614UkC wTQV/9jkqGfdpxa50/XKo7SnxSHmsr4f8vKrA/M7ViI3OToUHMpwxGvcEULe3P1x crZWPKLt+KZWXAXKfqdtAVk2NFczTNRGU1CPf676IMcv07GuGZHp8p9F+bMKg+VO P/+CpiNf8dLXIWbFCu5+cchmsEF9PCeooPAMN8HlTi0I3PbfHn8AfIWTtoISfaDr O/Ku/wBhrrk50kNcWk4qi2Ieeszo9mnT72c33S02US6UQIEpAtBBFQmoNZc8C+Cc ldoHwpnaofZgf/KJvOLk5762xE+4Z41+npfS7jG0ySQGQY+XvXdFl+yUFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBm1RnvEc1pZPHvUK6gKDeZDfa8eMB8GA1UdIwQY MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt YTE4NGYzNTU2ZTQzLzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr1YnWoo6 x3BenoEwx2W7ncb4gAuIDc/0x9chqXLlnd6rvrWTAf04d0jGH1cw373uN0kdnIgP 2wABwt4yRPE1XixFf5mG29uK8UgYxHxp8fEkhAiHxbSZOSvN5QZKdl7FPyU2UsrL dV+/IJLKRIoszfLPKUs+afmP+PJVnYGKeQuZTuAxfPWs16BywXFg+pkiyZsp9t5M M5V1MPr4ID2f2Lu9imMfquxOVeVgK5nhNFsnOF3t0e1LrZwSKqmPwty/kD34YKnu 1BYiPUeL6Y4CKTfGQ52NwABZiMrVKZiK5gLh35q/J3XqBvavsATI82uIjePNXnxa DGr9hU5ndV0gGg== -----END CERTIFICATE-----Generated at Sat Aug 23 09:47:42 2025 by rpki-client