$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft File: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft (raw, json) Hash identifier: AP2vDUQ1fGkpkjSCp3dqB+WCnKNiQyL15oLo+4y5RUQ= Subject key identifier: 59:A5:63:70:AD:48:68:21:34:55:CF:42:26:4A:78:79:E4:B4:27:38 Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7 Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7 Certificate serial: 0198D47422AEFB650F88C3DE94E0A30B6898 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft Manifest number: 10E8 Signing time: Sat 23 Aug 2025 01:03:57 +0000 Manifest this update: Sat 23 Aug 2025 01:03:57 +0000 Manifest next update: Sun 24 Aug 2025 01:03:57 +0000 Files and hashes: 1: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl (hash: z+DFu2VymqAM+YhzxRnxeLkWjkBsJk/tXQjX1PsOw3k=) 2: FmBFQOhNzhtYDdGU28d2mOWYxkg.roa (hash: AVAVJ+z2q5E9uU0vpHh6beNWBbBTBuDWNk3vwtJ8KHM=) 3: a8dfbuD_49og8AJXwHhNJcwaxsI.roa (hash: W1ipPbq868Ly393rgOf3eds1bM0F3aTAdVR1mM1YvM4=) 4: ebI6lo6FFyrxH7BnniqczSoCpEU.roa (hash: VWIQku3g+eu08iWePk/+zF+lAvowuzYaw8AhxuX9/iY=) 5: iEjwphsnsCkTvYcagBPKufnt2-g.roa (hash: exQmAtQ6POft9PaSsq76nVkrM+e0e7z6aqVk5GRVWO8=) 6: mYlPJBjSVo-nMdiARP-4qGUEks0.roa (hash: jq8esI3cAJrQeZlA/zKhC8wm74GcNEo/R1+l+csXuU4=) 7: n11ZJorlH1hZHcOrMkN5woOVejs.roa (hash: qO1znHdZkcnjjGqE4Hx9Dgh/NFBxbtAoTeajvo0zDfk=) 8: rhaUzcqQYW4tC3EdQCdaNLWOPbA.roa (hash: PvCUNKVTR3gGQiqq6yWqtNwJ314FXo4VLynnYKTFbJo=) 9: uEehilTaJNTK6wTZHHdxxqFauYo.roa (hash: tRIraXpN8mX3nJ3uL7fIgHQ/edV3rhiXldnw6ddpk0I=) 10: x6Fr-1VeTypvMg38CuYZL6Aoelo.roa (hash: ajAlNUJcOgM2msZH/aiPOA3cqagu5/2Oq4Xgzqwcm3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 01:03:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:74:22:ae:fb:65:0f:88:c3:de:94:e0:a3:0b:68:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7 Validity Not Before: Aug 23 01:03:57 2025 GMT Not After : Aug 24 01:03:57 2025 GMT Subject: CN=59a56370ad4868213455cf42264a7879e4b42738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:33:e1:63:95:1c:32:9b:36:94:5c:d4:1f:96: d1:09:f0:2a:ef:39:76:70:05:a6:23:72:be:5f:aa: 99:40:f1:95:eb:1a:a7:5f:ad:50:ab:62:db:4f:1b: cf:c1:f1:56:75:e1:56:b9:fa:e1:b7:7b:f4:91:2f: d6:c0:86:2a:d3:31:9f:bf:41:c1:14:18:e6:40:90: 74:e8:a3:21:5d:f8:e7:c5:b8:d6:be:a8:14:ae:ed: af:ac:34:7b:35:39:48:23:20:29:8a:19:a9:e0:1e: 70:cf:1c:32:64:73:2b:71:94:63:0b:ef:43:cc:60: 5a:54:cb:5e:e5:87:29:52:42:0a:e1:05:f8:03:c4: 39:5b:06:f8:cb:83:af:b1:7a:42:04:35:09:8e:42: 1b:83:03:ca:09:a2:83:a2:40:52:d5:de:86:13:8e: 55:33:66:06:8a:4f:bb:16:42:95:91:2b:6c:b5:f5: 19:7b:cf:7d:86:84:39:9c:0e:0c:98:c3:03:bb:59: e5:d9:51:de:62:1d:fd:98:bd:32:15:ea:19:b8:ab: d1:ab:07:90:6b:43:4c:16:29:08:81:c5:a6:c6:85: 3d:50:20:41:f4:cc:10:ae:b9:65:95:25:0b:ef:76: a1:75:97:a4:98:ac:39:e0:57:5f:35:1a:f9:fe:f1: ac:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A5:63:70:AD:48:68:21:34:55:CF:42:26:4A:78:79:E4:B4:27:38 X509v3 Authority Key Identifier: keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:ff:ad:1f:b9:23:de:94:52:9b:bc:76:73:e5:8a:a6:21:49: 15:8d:ea:31:7a:9b:b6:f5:9a:ff:95:45:da:90:17:1d:90:06: ed:9c:a4:75:05:5c:18:0b:07:cd:37:b5:94:a4:f7:f6:42:55: 61:d1:7a:20:19:ee:cf:05:7c:7c:41:60:49:0b:f7:92:07:d4: 0e:f7:6c:37:68:e4:f3:47:4a:34:dd:ad:03:93:a9:f9:73:5a: 20:66:90:c3:f7:17:bc:a0:58:0c:f2:78:ba:b8:2d:4e:ec:51: d8:c3:1a:3a:82:69:04:6b:89:d0:19:32:ae:17:5a:dc:59:dc: b2:f2:27:29:97:d0:58:19:07:cf:c5:13:07:49:66:a3:27:42: 1c:49:4d:14:44:2d:0d:c1:3c:cd:d3:b1:48:7d:b6:75:59:9a: 3b:67:c0:93:c1:d4:cf:31:45:b6:6b:22:3a:34:96:d7:bd:14: 79:f1:67:87:ec:59:83:c4:f5:d5:5d:26:88:1a:83:44:55:d2: 46:fb:ee:66:ae:f4:cf:aa:4f:2b:f1:53:02:6d:03:a4:8b:45: c0:eb:a9:09:04:db:9d:53:4d:9d:c5:46:8d:2f:de:99:03:0a: 26:31:fc:19:25:76:24:11:bc:f4:2c:eb:56:16:af:2d:6d:96: ca:ed:16:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUdCKu+2UPiMPelOCjC2iYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkYmU2ZTBhZGFlOGJiNDc4MzkzYWFiMTc1YjYzODY0NGM3 NGNjYjcwHhcNMjUwODIzMDEwMzU3WhcNMjUwODI0MDEwMzU3WjAzMTEwLwYDVQQD Eyg1OWE1NjM3MGFkNDg2ODIxMzQ1NWNmNDIyNjRhNzg3OWU0YjQyNzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDPhY5UcMps2lFzUH5bRCfAq7zl2 cAWmI3K+X6qZQPGV6xqnX61Qq2LbTxvPwfFWdeFWufrht3v0kS/WwIYq0zGfv0HB FBjmQJB06KMhXfjnxbjWvqgUru2vrDR7NTlIIyApihmp4B5wzxwyZHMrcZRjC+9D zGBaVMte5YcpUkIK4QX4A8Q5Wwb4y4OvsXpCBDUJjkIbgwPKCaKDokBS1d6GE45V M2YGik+7FkKVkStstfUZe899hoQ5nA4MmMMDu1nl2VHeYh39mL0yFeoZuKvRqweQ a0NMFikIgcWmxoU9UCBB9MwQrrlllSUL73ahdZekmKw54FdfNRr5/vGslQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmlY3CtSGghNFXPQiZKeHnktCc4MB8GA1UdIwQY MBaAFN2+bgra6LtHg5OqsXW2OGRMdMy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjkt NmJhYTNiNTQ4ZDIzLzEvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjktNmJhYTNiNTQ4ZDIz LzEvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArf+tH7kj 3pRSm7x2c+WKpiFJFY3qMXqbtvWa/5VF2pAXHZAG7ZykdQVcGAsHzTe1lKT39kJV YdF6IBnuzwV8fEFgSQv3kgfUDvdsN2jk80dKNN2tA5Op+XNaIGaQw/cXvKBYDPJ4 urgtTuxR2MMaOoJpBGuJ0Bkyrhda3FncsvInKZfQWBkHz8UTB0lmoydCHElNFEQt DcE8zdOxSH22dVmaO2fAk8HUzzFFtmsiOjSW170UefFnh+xZg8T11V0miBqDRFXS RvvuZq70z6pPK/FTAm0DpItFwOupCQTbnVNNncVGjS/emQMKJjH8GSV2JBG89Czr VhavLW2Wyu0WLg== -----END CERTIFICATE-----Generated at Sat Aug 23 10:50:44 2025 by rpki-client