$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft File: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft (raw, json) Hash identifier: 00z1LA1HutPY6TQO7nH6Yd39bREvXrgl3nsoSH2mI9c= Subject key identifier: 35:98:9D:9B:8C:E7:37:E4:8B:C8:76:30:D5:CE:07:CC:5C:E3:20:8E Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Certificate serial: 0198D73B7F07D04DA4037BECB1CBD2B2DEA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft Manifest number: 135A Signing time: Sat 23 Aug 2025 14:00:57 +0000 Manifest this update: Sat 23 Aug 2025 14:00:57 +0000 Manifest next update: Sun 24 Aug 2025 14:00:57 +0000 Files and hashes: 1: 8Fk9kDKNu_wHTuVpwQ1FTDYEEUM.roa (hash: R9lk1OKBJor+p6Fk8Cm9760Y52YkNlkiK4HwLBjauEw=) 2: LCMzGb8KK1XAn7ueElCREh4ehR0.roa (hash: 9Gw2b+IOeGIlGw5y7XNoxgCnQ7hXETrnIXJowIYGjqA=) 3: LShVVLJCwZTpOQVpRu4BHXCMY5o.roa (hash: qOW5Q7zU6W8XRrp7RUj6wZmvzkpmHb4NVAohhcOeaxY=) 4: bmuOfACYZiZOnCTz9ES9s06c_ac.roa (hash: kxF+XBYjW7ExfLjJidwuYPma+i/t1erJy7+ooTz+eSY=) 5: dqSVfYV4r9M8RMZopTNsSTKHeIY.roa (hash: XrN+1wwdRwyX8n7r+VHCtW4D45jLjIPlWVhNaBZnVwQ=) 6: h9mNIwplN3HJblv2au9Os6COmfk.roa (hash: MUN1yxszebSMcti0G9u7TeXrwfcHsFyRaIzpQnCM9XQ=) 7: mUZj0w-uWUstpfqo5cH06vK19uA.roa (hash: MzyNzzDoUFyK/QZw2a/+HQPhRLTClRfb/mdHjVRhByQ=) 8: r0mTEa6qt-IyELm4t03iQrSQvaU.roa (hash: 5O0ZRSkH9lwLC8LUcZsdLUDFOU7u/lNlnWwcFjFATOs=) 9: rHoYFPQ0T9Hef-z6s-pJ7i0yyQo.roa (hash: xQJ9yww4YSKaaEyQBdYXA5up0iEVqjr/At6e2xJMUB8=) 10: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl (hash: 7gOCd4y+9eWtPqIbHF/gSQ7U3+hKBSVrauc3SjTG58w=) 11: vfYaTtc4brt0Ov1kx9oCUOHIJXI.roa (hash: eB+hXGbiqW76z1VHwcXpM+YfyI+lZHNYCy9KL7CJ5lM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 12:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d7:3b:7f:07:d0:4d:a4:03:7b:ec:b1:cb:d2:b2:de:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Validity Not Before: Aug 23 14:00:57 2025 GMT Not After : Aug 24 14:00:57 2025 GMT Subject: CN=35989d9b8ce737e48bc87630d5ce07cc5ce3208e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:56:1b:2a:98:e3:63:ef:3c:06:9a:a4:09:9d: 4f:82:cf:65:48:92:b4:94:64:24:e8:ee:15:5e:13: 88:79:02:04:8a:55:0e:a8:e9:fc:d9:ec:dc:42:ca: 40:de:e7:09:2b:86:46:08:bd:f5:75:25:95:b7:ec: ad:3a:f7:62:7a:ec:09:16:50:90:c8:f9:11:d8:50: 6c:73:5c:99:24:8f:47:db:db:97:cb:1b:9b:e3:35: 0a:f7:f2:c6:9d:15:93:f5:a3:77:45:80:33:55:3f: f5:b3:40:5a:3f:36:07:35:d7:c3:c9:81:2d:39:67: 1a:90:df:67:dd:2d:76:32:9d:17:8d:6a:49:c9:91: 13:96:b2:7c:84:c7:a3:59:88:74:3c:2d:f3:17:ab: 39:66:e9:16:7c:e5:43:c5:92:9a:ec:25:4c:54:a3: 0f:09:05:af:d4:81:be:5f:54:48:e4:a6:99:9f:33: 1d:96:f6:84:4b:2a:5f:ba:0a:8a:6a:65:a4:46:ef: 89:f6:a3:b3:20:7e:1d:e5:15:92:bb:f2:60:44:a8: ab:23:8e:1c:3a:99:4b:13:2c:e4:e9:69:4e:ff:54: d2:25:fd:bb:5a:90:89:cc:57:68:0d:f7:1d:d0:32: bc:de:1f:48:d9:97:14:13:59:60:47:b7:29:0f:c8: 4c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:98:9D:9B:8C:E7:37:E4:8B:C8:76:30:D5:CE:07:CC:5C:E3:20:8E X509v3 Authority Key Identifier: keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:f6:16:39:5b:78:9e:82:dd:6c:43:9d:bb:2f:97:2b:aa:6c: 6b:f7:77:ca:d5:a7:25:13:d4:4c:9d:0f:67:09:b4:83:85:47: 58:cf:54:4d:49:61:49:11:05:45:a0:a5:70:c1:48:9a:b0:22: e5:92:c1:bd:80:d7:ce:da:d1:c8:7e:3f:85:e8:52:e9:86:35: b7:60:da:28:ed:2d:2a:80:75:f7:8a:76:6d:e3:fb:72:23:0d: a0:34:1b:00:06:c1:28:d3:03:37:43:5c:82:d0:ca:5e:86:0b: 0e:ba:76:42:2f:2b:2c:7e:cc:6b:3a:0b:40:d8:ec:38:94:9d: 8f:cb:f5:c0:f4:b5:15:28:62:71:f3:9f:6a:24:62:c7:e4:0e: 9c:31:b1:27:1e:92:0e:dc:a8:36:7c:c2:98:3b:b8:14:f2:24: 60:ac:d8:09:d4:a3:ec:8e:d0:f5:a7:12:c1:68:73:e4:d3:16: 8f:f1:17:f3:c8:86:ed:af:66:41:d6:cc:5f:bd:21:66:a3:d5: c5:5a:5c:c8:6e:1e:9f:de:16:fa:45:74:74:96:55:e8:82:c1: 3f:f4:79:75:26:7a:99:51:e7:69:80:a7:81:26:7a:72:f4:40: 1a:15:6d:b3:9b:29:f7:8e:61:10:c5:ac:a8:c2:8d:8e:27:2d: 9c:4d:d1:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjXO38H0E2kA3vsscvSst6jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj ZGM2NWMwHhcNMjUwODIzMTQwMDU3WhcNMjUwODI0MTQwMDU3WjAzMTEwLwYDVQQD EygzNTk4OWQ5YjhjZTczN2U0OGJjODc2MzBkNWNlMDdjYzVjZTMyMDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlYbKpjjY+88BpqkCZ1Pgs9lSJK0 lGQk6O4VXhOIeQIEilUOqOn82ezcQspA3ucJK4ZGCL31dSWVt+ytOvdieuwJFlCQ yPkR2FBsc1yZJI9H29uXyxub4zUK9/LGnRWT9aN3RYAzVT/1s0BaPzYHNdfDyYEt OWcakN9n3S12Mp0XjWpJyZETlrJ8hMejWYh0PC3zF6s5ZukWfOVDxZKa7CVMVKMP CQWv1IG+X1RI5KaZnzMdlvaESypfugqKamWkRu+J9qOzIH4d5RWSu/JgRKirI44c OplLEyzk6WlO/1TSJf27WpCJzFdoDfcd0DK83h9I2ZcUE1lgR7cpD8hMSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWYnZuM5zfki8h2MNXOB8xc4yCOMB8GA1UdIwQY MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct NjZlZGEyMjhmZWM3LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3 LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbPYWOVt4 noLdbEOduy+XK6psa/d3ytWnJRPUTJ0PZwm0g4VHWM9UTUlhSREFRaClcMFImrAi 5ZLBvYDXztrRyH4/hehS6YY1t2DaKO0tKoB194p2beP7ciMNoDQbAAbBKNMDN0Nc gtDKXoYLDrp2Qi8rLH7MazoLQNjsOJSdj8v1wPS1FShicfOfaiRix+QOnDGxJx6S DtyoNnzCmDu4FPIkYKzYCdSj7I7Q9acSwWhz5NMWj/EX88iG7a9mQdbMX70hZqPV xVpcyG4en94W+kV0dJZV6ILBP/R5dSZ6mVHnaYCngSZ6cvRAGhVts5sp945hEMWs qMKNjictnE3RxQ== -----END CERTIFICATE-----Generated at Sat Aug 23 18:02:09 2025 by rpki-client