$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft File: c_IQ8SmaHgrucdwdeeX7EgktMKk.mft (raw, json) Hash identifier: MRwbydIDzcuupa/mAW7fwgF7zSWKR+qKTXJ1YuKmbXU= Subject key identifier: FD:A6:07:9A:07:D5:6A:C8:3B:66:07:1F:2B:B4:F3:53:0E:4C:3D:70 Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Certificate serial: 0198D4E0C24A902399F12D086ECAB81E20B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft Manifest number: 1670 Signing time: Sat 23 Aug 2025 03:02:36 +0000 Manifest this update: Sat 23 Aug 2025 03:02:36 +0000 Manifest next update: Sun 24 Aug 2025 03:02:36 +0000 Files and hashes: 1: 7v-L1KuWY_QeDJxKFVyRkWnFePQ.roa (hash: bVQczQ08ozX20fYuXzWGYS1jimxc5e2Qx5nVzF/4kuk=) 2: H74wGZKnnU6XEP7nVKoqw4XaEjE.roa (hash: zhm555s3zw/KlbcjZuumbYd6+z6n6717Q/inEo++9C0=) 3: KFKPGq8CDIQff00UekrfFEmWWU4.roa (hash: pndCMKJbI0Ffrf6VYH3lHviYtYItndyotazCLP7aZyE=) 4: TLCOp8VQQYT-sDLZMkb_dNE0wJI.roa (hash: 8TF1RbnrjzrAYcRglOW5PIK7TmKRhUoFu7HvQr3ZHoA=) 5: XfGBei_fvFP0LcnT4xlGOunfSHY.roa (hash: ApG5cEMi+MNJR6ahm8kTy/uN64zS0fv0zRdzd/i6biA=) 6: ZLCgOlPZ-adZViTKhsMv3BABRVQ.roa (hash: y37YnkCGLdmrEa4m8cGkKpYMZJFVaIJVqpcOQKXrYQA=) 7: ZrwHnbp0cmRv-8Aq-3dTrUs96b8.roa (hash: laG521bBX3KOp9w13a5/N7g1SD2gsHS2KdTqelNAv1g=) 8: c_IQ8SmaHgrucdwdeeX7EgktMKk.crl (hash: UCWAhYQrtL/C5GovTSdQXpYJa3V38YxoEDk3EBD9yqo=) 9: fUiU9NND6NDkXeCCtG2FpkvLAtQ.roa (hash: BipzZjfv9NJLde/5SLk/7HBxUjct/iO+maQqs2utFTw=) 10: mJUNw4dhsVDBnFTg7x4G5Co4xf0.roa (hash: uA/rqJShT3FbqgkbYlEQFRj/7911uoTUqkA+K2PLe1c=) 11: nT9Kl7qa4avyYi6PobndNFEx2JI.roa (hash: 4NhOocRVxQsq48Sjltw5zBhFh6NiUij1mxelAtmoUp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 03:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:e0:c2:4a:90:23:99:f1:2d:08:6e:ca:b8:1e:20:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Validity Not Before: Aug 23 03:02:36 2025 GMT Not After : Aug 24 03:02:36 2025 GMT Subject: CN=fda6079a07d56ac83b66071f2bb4f3530e4c3d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:35:81:96:ac:ed:da:1a:eb:31:34:24:8f:93: 3b:0b:2e:99:a7:a5:2e:42:2f:91:e1:45:7b:d2:a6: 83:0d:6e:ab:33:ab:62:58:a8:8c:40:0c:a6:3f:f9: b2:75:31:6f:38:9f:43:ac:88:3f:7a:f2:36:ef:6b: 7d:99:e3:8f:3a:12:10:80:8f:30:27:a9:24:d3:2a: 90:f2:9e:2b:57:fd:e1:9a:b1:a8:eb:5b:a3:5c:be: 3b:8b:68:01:70:3d:74:7b:6b:a4:21:e3:4a:f4:79: b3:f3:9f:f7:2a:32:4a:80:b4:0f:46:d4:2c:69:2d: 22:05:a9:36:c4:b8:7e:51:64:33:9a:d3:54:85:4a: 8a:fd:3d:70:d1:53:67:d6:61:04:32:ce:88:f6:20: 04:2f:09:40:48:8b:9a:92:7b:e0:9f:09:64:95:93: ab:63:a6:52:97:4c:76:72:5b:c2:da:0d:e2:4d:80: 26:fc:a9:51:94:47:98:cc:8f:ae:9a:f5:90:3e:2d: be:9f:da:97:fb:10:69:19:51:fb:f7:77:2d:23:6e: d8:a7:b5:02:75:87:1f:a7:bd:5a:93:93:4c:23:15: ef:36:49:8b:ac:54:8b:63:71:23:3d:9b:45:8d:f3: 89:c6:a0:a6:03:be:ac:85:e7:e8:90:dc:2d:57:83: 61:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A6:07:9A:07:D5:6A:C8:3B:66:07:1F:2B:B4:F3:53:0E:4C:3D:70 X509v3 Authority Key Identifier: keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:b3:c9:cc:a9:73:81:66:13:ac:f1:3e:a9:49:4b:6e:e4:90: e1:c7:57:17:22:59:1e:ff:12:e5:c0:e6:c9:fc:51:d4:d5:69: 3e:a5:ad:ac:a0:ed:4b:e2:d6:b3:fe:fc:b5:29:88:dc:b9:e9: 71:cf:d3:0f:95:a9:99:5a:29:d3:ad:c3:b1:c3:f0:73:1b:1d: 28:4a:4a:82:81:7a:1e:fc:00:fb:9b:91:ad:37:a2:e7:02:a2: 23:2d:cb:0f:e6:2c:6d:ed:6c:84:f6:4e:64:4b:76:61:f9:4a: 50:eb:3e:2e:90:f8:4b:bc:6c:0c:c3:de:18:87:2e:28:53:18: 1d:e4:3f:96:a4:0f:f6:34:cc:8d:f2:48:25:82:02:ac:e6:7b: 3a:a7:4c:78:92:82:b2:f2:c6:1b:0c:3c:a8:a8:6b:92:0e:86: 8f:3e:30:b8:3d:94:e2:50:d5:da:09:b3:6b:38:fd:a6:fa:71: b4:f7:7e:f0:60:2a:86:8e:94:d0:fe:13:e7:ea:82:49:03:cc: cf:ae:26:a5:e6:f0:d0:bd:a5:96:01:2e:b0:a5:15:d0:86:ef: 43:6e:d5:0f:46:cf:d1:02:56:07:29:f3:ae:1a:75:66:43:9a: ac:ee:24:2a:35:ac:78:d5:b2:cb:36:07:af:46:d7:00:54:35: 67:de:5f:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjU4MJKkCOZ8S0Ibsq4HiCwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky ZDMwYTkwHhcNMjUwODIzMDMwMjM2WhcNMjUwODI0MDMwMjM2WjAzMTEwLwYDVQQD EyhmZGE2MDc5YTA3ZDU2YWM4M2I2NjA3MWYyYmI0ZjM1MzBlNGMzZDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTWBlqzt2hrrMTQkj5M7Cy6Zp6Uu Qi+R4UV70qaDDW6rM6tiWKiMQAymP/mydTFvOJ9DrIg/evI272t9meOPOhIQgI8w J6kk0yqQ8p4rV/3hmrGo61ujXL47i2gBcD10e2ukIeNK9Hmz85/3KjJKgLQPRtQs aS0iBak2xLh+UWQzmtNUhUqK/T1w0VNn1mEEMs6I9iAELwlASIuaknvgnwlklZOr Y6ZSl0x2clvC2g3iTYAm/KlRlEeYzI+umvWQPi2+n9qX+xBpGVH793ctI27Yp7UC dYcfp71ak5NMIxXvNkmLrFSLY3EjPZtFjfOJxqCmA76shefokNwtV4NhjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2mB5oH1WrIO2YHHyu081MOTD1wMB8GA1UdIwQY MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt Yjk0NjQ3MThiYTM3LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3 LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLPJzKlz gWYTrPE+qUlLbuSQ4cdXFyJZHv8S5cDmyfxR1NVpPqWtrKDtS+LWs/78tSmI3Lnp cc/TD5WpmVop063DscPwcxsdKEpKgoF6HvwA+5uRrTei5wKiIy3LD+Ysbe1shPZO ZEt2YflKUOs+LpD4S7xsDMPeGIcuKFMYHeQ/lqQP9jTMjfJIJYICrOZ7OqdMeJKC svLGGww8qKhrkg6Gjz4wuD2U4lDV2gmzazj9pvpxtPd+8GAqho6U0P4T5+qCSQPM z64mpebw0L2llgEusKUV0IbvQ27VD0bP0QJWBynzrhp1ZkOarO4kKjWseNWyyzYH r0bXAFQ1Z95fKg== -----END CERTIFICATE-----Generated at Sat Aug 23 12:32:43 2025 by rpki-client