$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft File: X32laK0Ce54knBPiI9MidpiBop8.mft (raw, json) Hash identifier: VT1KLcUnxABugpmE9NG64LoDNQQgLjvlq3YADhf3R2E= Subject key identifier: CB:3F:70:ED:12:DA:2E:99:A4:8D:64:92:A7:16:B2:73:32:02:FD:5D Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f Certificate serial: 0198D583C440BB129935F350F5E3ABCBA374 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft Manifest number: 0BC1 Signing time: Sat 23 Aug 2025 06:00:39 +0000 Manifest this update: Sat 23 Aug 2025 06:00:39 +0000 Manifest next update: Sun 24 Aug 2025 06:00:39 +0000 Files and hashes: 1: Dhg938LLNxihNYriqStR3oqs6Jg.roa (hash: Aj+6lvIDsodEZ6I55Us8ZFj5GtVjSmfFFjL8I/MfYqo=) 2: FuntCXoBht24QvgtEtbVZEuCdp0.roa (hash: JUPlc/PvxJjzfETFQC1BU7Iej8ynSg/XdYSUf902Tpo=) 3: OSozPCauqZRrj5FYZCZShQYan60.roa (hash: gJTuyuPcePva2Pf/4Z3V1y7VTQjYV+P6FusXSLPZfSw=) 4: X32laK0Ce54knBPiI9MidpiBop8.crl (hash: JZ83/QbxNt6XD1oIjn6OCl5MEdDCXOQKMjOdbXKPExM=) 5: XjVu2IyXljFzhSvYma_h3-clfVU.roa (hash: nT21YokFB5zQvbm3JPkkRJDjEHGU38C24xQDpQHQGAI=) 6: ZkkDzXmdTsLG1oQnHCXCpjMrN0c.roa (hash: vhxQZdTakyknsbSaFbQwA3rjVR03VcM9s8jNMsMZ03E=) 7: jUQ_fZXFaYGd4zaZnSgAlOdWse0.roa (hash: TxGng+dp5AKM1yJ/Crw7UDMDcGHP31uzC9AJJeqBDMA=) 8: oSGRjgd5g7uxmIyMg55GeDp1lcQ.roa (hash: yVVI9w+n8DQ5LZ0pU0EZPfP/S8D3Imwu6pg6ds8XII0=) 9: s84uwW_-i_SHLp2X5wNbbXCbos0.roa (hash: XmZwP1Dphpy/OpROhUP0RXS2PeMw5xbgxdsjXIheFhc=) 10: ztzJ9WkVuGW2KUZ-NYOffXMn-mU.roa (hash: 0aNwIJcWE8BWdRRapb0b1h0he6NRcvrOvXa3hI/Nxv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:83:c4:40:bb:12:99:35:f3:50:f5:e3:ab:cb:a3:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f Validity Not Before: Aug 23 06:00:39 2025 GMT Not After : Aug 24 06:00:39 2025 GMT Subject: CN=cb3f70ed12da2e99a48d6492a716b2733202fd5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:28:bb:e4:45:78:e6:b5:b1:73:1c:0a:59:48: 06:85:9d:3c:72:ef:c3:34:8e:a9:e9:ec:cd:0b:d5: 4b:2e:9c:5a:30:14:c5:89:cd:2e:29:6c:77:ac:0e: 2d:69:cb:7f:e2:4c:0c:3a:0a:2c:0f:5b:ec:0e:9a: ae:4e:43:05:c7:9a:50:64:bd:5c:64:48:17:16:63: e9:c8:d5:b2:12:56:c6:fd:a3:d1:ec:b7:28:ad:f6: 46:54:b4:b5:32:27:99:52:95:cf:56:85:ef:ad:e1: 8a:81:bf:be:13:21:14:7a:e2:b8:ad:fc:1b:ac:05: bb:8a:ca:f2:9b:af:a8:96:9c:2c:a6:02:fb:8a:83: b1:46:ee:c3:09:8f:6c:8c:f3:b9:17:12:30:58:f0: 53:2f:b7:b9:4b:bf:41:b4:22:ee:81:2c:bd:90:16: 88:d3:93:1e:a4:8a:17:07:fa:41:a9:21:f6:47:e4: ad:8b:3c:9f:e5:6f:41:76:87:49:bb:71:58:09:e4: 8f:6d:7e:46:1b:04:67:9d:3c:ab:cc:0e:a4:f1:f3: 9e:40:f3:24:56:f6:eb:43:f3:df:57:3a:71:2e:98: 21:cc:5c:a5:31:56:f2:8b:cf:93:fe:77:17:00:f9: 62:09:17:fa:e0:7a:70:c5:14:f2:54:b3:4d:d0:e9: 48:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3F:70:ED:12:DA:2E:99:A4:8D:64:92:A7:16:B2:73:32:02:FD:5D X509v3 Authority Key Identifier: keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:6e:33:74:67:7a:12:b3:9e:d3:5c:58:29:ae:0a:df:57:f2: bc:c3:94:d4:9a:16:95:17:2a:53:c7:e0:78:c4:e1:cb:11:75: 41:cc:9f:a4:07:92:24:f6:0e:8a:c3:fb:c2:db:6e:bf:6e:b7: 0b:1a:4c:9c:49:ef:df:6a:ab:61:92:86:43:57:8b:35:c3:3d: 49:00:32:d7:b4:55:6d:b4:98:f6:80:a3:e7:e5:95:d1:d9:0a: bd:fa:7d:1c:79:51:bb:eb:06:f3:22:a4:24:24:6c:f4:51:c6: 19:4d:fb:5b:5c:d7:54:7c:40:c7:4b:a2:fe:fc:e3:f5:9f:9a: 8e:da:41:fc:38:e3:0c:af:a6:67:7d:f8:99:36:65:c8:aa:de: 02:3d:83:9c:9a:d7:ad:9e:dd:d2:d5:3e:22:42:79:40:d4:e0: d1:58:da:61:3e:44:40:3e:a4:e4:e8:7a:ba:aa:65:d6:0b:ef: 62:cd:9f:e5:d3:3c:77:9c:73:bb:71:6d:a7:79:d8:d4:b0:98: 1f:08:1e:4c:ff:04:d6:a8:58:00:c4:12:bd:a1:fb:c3:57:ca: a6:17:f6:a3:75:bf:ea:67:38:6d:a9:07:95:60:2e:e8:2a:81: f6:f4:ca:1c:b0:08:31:af:26:4c:93:88:cf:0d:10:9e:c3:ae: 45:75:75:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVg8RAuxKZNfNQ9eOry6N0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmN2RhNTY4YWQwMjdiOWUyNDljMTNlMjIzZDMyMjc2OTg4 MWEyOWYwHhcNMjUwODIzMDYwMDM5WhcNMjUwODI0MDYwMDM5WjAzMTEwLwYDVQQD EyhjYjNmNzBlZDEyZGEyZTk5YTQ4ZDY0OTJhNzE2YjI3MzMyMDJmZDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSi75EV45rWxcxwKWUgGhZ08cu/D NI6p6ezNC9VLLpxaMBTFic0uKWx3rA4tact/4kwMOgosD1vsDpquTkMFx5pQZL1c ZEgXFmPpyNWyElbG/aPR7LcorfZGVLS1MieZUpXPVoXvreGKgb++EyEUeuK4rfwb rAW7isrym6+olpwspgL7ioOxRu7DCY9sjPO5FxIwWPBTL7e5S79BtCLugSy9kBaI 05MepIoXB/pBqSH2R+Stizyf5W9BdodJu3FYCeSPbX5GGwRnnTyrzA6k8fOeQPMk VvbrQ/PfVzpxLpghzFylMVbyi8+T/ncXAPliCRf64HpwxRTyVLNN0OlIeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMs/cO0S2i6ZpI1kkqcWsnMyAv1dMB8GA1UdIwQY MBaAFF99pWitAnueJJwT4iPTInaYgaKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUt Mzc1NzUzOWMyYWM5LzEvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUtMzc1NzUzOWMyYWM5 LzEvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ24zdGd6 ErOe01xYKa4K31fyvMOU1JoWlRcqU8fgeMThyxF1QcyfpAeSJPYOisP7wttuv263 CxpMnEnv32qrYZKGQ1eLNcM9SQAy17RVbbSY9oCj5+WV0dkKvfp9HHlRu+sG8yKk JCRs9FHGGU37W1zXVHxAx0ui/vzj9Z+ajtpB/DjjDK+mZ334mTZlyKreAj2DnJrX rZ7d0tU+IkJ5QNTg0VjaYT5EQD6k5Oh6uqpl1gvvYs2f5dM8d5xzu3Ftp3nY1LCY HwgeTP8E1qhYAMQSvaH7w1fKphf2o3W/6mc4bakHlWAu6CqB9vTKHLAIMa8mTJOI zw0QnsOuRXV1dg== -----END CERTIFICATE-----Generated at Sat Aug 23 12:23:40 2025 by rpki-client