$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft File: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft (raw, json) Hash identifier: nSCE6l7BIbDB6E/YJP8dUMtAgmog8OTQ90LrO/WVPiU= Subject key identifier: 38:1E:D3:99:53:C3:24:69:A4:B1:8B:08:25:14:66:7E:A8:4D:3B:36 Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2 Certificate serial: 0198D5BBD799313EA4C4D13EBDD74C8979B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft Manifest number: 1657 Signing time: Sat 23 Aug 2025 07:01:54 +0000 Manifest this update: Sat 23 Aug 2025 07:01:54 +0000 Manifest next update: Sun 24 Aug 2025 07:01:54 +0000 Files and hashes: 1: 0bSG1GbQSr3JP2M9BW2A6zWEmWQ.roa (hash: m8/KEzPrRo4PqG3DFfILeyvmSqlK6Zrphut5P8ccG8c=) 2: 9lwL98-HDVBrZzYLRCpSdOAFXpo.roa (hash: Za/9eX9VNb3FiSxJk6MAE/CpFGWxRO5mjghE1elRivc=) 3: B0iUIhkwv2ZZdyXRyu9yUh7Z61o.roa (hash: F6O6OkDRyyyGqFimHsLztSYsh0AUNFPNkRW3jSPwvEw=) 4: I1EoUAseUd3MHO-sI_txqICBiwc.roa (hash: khM+HdjIw9WozXCqEk/wtCOtMrpNfxWXErjSXn8BT5M=) 5: KQ7nGqqdl8DwDw35UdDbOJPZhfY.roa (hash: 8pIf1gsysAeCO62ayw5k2bU+b1g8t0mrR6+zNCtTibQ=) 6: LS_oKjOyENRZwn9y786G7x_fDEc.roa (hash: qwrjawF9Z67WE+ivjm8mPIl3xqaLReHxca9+SNnwKPE=) 7: Pvub5ztTS47f0XG6tBZE9ngX8Rw.roa (hash: euQ5dqT6xwCfoTsPu9P7kfQ9UGdbPzkkEJWSyFwCBTw=) 8: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl (hash: QH8r//BSnK0LOqweXavtloLyIiX5+r1HouvgZo/xPNI=) 9: lqxGizsVmZbvi7xpd3yzs2I4ILw.roa (hash: aTi4SECMvkjegR9/FyzL9HTmeGkM0AsiVgyipWCsYrY=) 10: sFnlwbiQ75y8_114DKwn3kP_iWc.roa (hash: dkHr9wKemXLLSQfaJK2+kCvWwELtA6u+nMBynz2rXgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:bb:d7:99:31:3e:a4:c4:d1:3e:bd:d7:4c:89:79:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2 Validity Not Before: Aug 23 07:01:54 2025 GMT Not After : Aug 24 07:01:54 2025 GMT Subject: CN=381ed39953c32469a4b18b082514667ea84d3b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a0:94:7f:3d:00:02:72:11:21:08:b7:8e:56: ce:53:87:8f:fe:8c:9c:14:01:51:a8:c9:25:74:85: b7:8a:9e:a4:81:ef:a7:01:7f:99:c3:e4:19:d8:03: 57:1b:c0:3e:e8:54:17:27:9d:3d:2a:a1:40:cf:f9: 2b:b2:75:9a:c6:d7:61:a8:d3:7a:68:f8:4a:3c:56: ce:fb:28:fc:6a:e6:20:30:05:6e:35:40:98:09:9d: 8c:72:1a:b8:9f:39:cd:78:6b:ce:28:d2:ed:14:b0: a9:6e:34:38:04:e6:f0:f2:55:b3:dc:43:5e:44:22: b7:2b:76:9e:4b:5e:30:5e:d7:f9:22:66:ac:e7:6e: be:3e:ae:64:5b:6f:a4:a7:a7:ed:8e:5e:ee:dd:ea: 20:4d:87:c5:63:04:14:86:88:3e:b8:b8:9f:a3:04: c9:73:1e:a9:ec:2a:ea:d3:20:9d:18:0c:7b:d0:0d: 11:7a:63:3d:de:40:a6:91:d3:6d:5b:f1:22:f2:6c: 30:42:22:b9:88:5f:52:9b:ca:50:a6:c8:e0:5b:df: c9:af:cc:1b:a7:e0:81:9e:00:0d:98:39:a4:a1:10: b1:83:36:f1:bd:c3:0b:d8:9c:91:5f:0d:09:34:fa: cd:a4:5e:92:eb:8b:9a:b6:42:66:f7:ee:20:71:7a: 5c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:1E:D3:99:53:C3:24:69:A4:B1:8B:08:25:14:66:7E:A8:4D:3B:36 X509v3 Authority Key Identifier: keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:8b:5a:54:89:3c:1d:ef:c5:05:38:4f:ac:c6:34:53:b1:32: 8b:36:45:da:9f:7c:61:8f:fe:35:2f:ec:5a:69:0e:ca:46:47: 2a:35:5e:6d:2e:67:cf:9e:6e:76:c5:f8:b6:a9:b0:00:06:89: 9a:43:af:35:05:1e:b9:8f:84:8c:a5:90:1c:85:27:91:5d:81: e7:7a:5f:21:89:6d:1a:87:80:31:e4:24:5b:91:56:9a:8f:8a: bf:c7:85:3d:9d:e2:79:4b:d6:89:d2:17:18:50:b3:9a:90:67: 14:9a:d6:63:78:23:85:b1:d6:8a:85:65:f2:c9:4d:1b:6d:9a: b4:10:3c:da:6e:63:2f:a4:60:bf:df:31:53:8b:e7:c9:95:06: ae:a5:9d:1b:9d:b2:78:51:b8:9e:bc:0b:7b:e1:08:f6:5e:af: 1c:22:bc:03:09:04:e3:df:99:fb:e6:b6:12:e8:9e:01:18:c6: 50:42:e4:5e:1d:85:58:80:b0:9b:fa:80:7f:b8:a5:60:0d:48: a6:f3:c5:14:4f:24:b9:8d:e3:2e:5c:8d:de:bd:80:23:32:3f: e1:db:f4:d8:6d:21:a9:fb:78:ae:ec:99:7c:a4:41:01:c3:96: da:d7:f8:b4:f1:2c:0d:7f:e6:c7:ae:51:2e:24:ca:08:da:08: 8a:da:27:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVu9eZMT6kxNE+vddMiXm4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy MWZjZjIwHhcNMjUwODIzMDcwMTU0WhcNMjUwODI0MDcwMTU0WjAzMTEwLwYDVQQD EygzODFlZDM5OTUzYzMyNDY5YTRiMThiMDgyNTE0NjY3ZWE4NGQzYjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKCUfz0AAnIRIQi3jlbOU4eP/oyc FAFRqMkldIW3ip6kge+nAX+Zw+QZ2ANXG8A+6FQXJ509KqFAz/krsnWaxtdhqNN6 aPhKPFbO+yj8auYgMAVuNUCYCZ2Mchq4nznNeGvOKNLtFLCpbjQ4BObw8lWz3ENe RCK3K3aeS14wXtf5Imas526+Pq5kW2+kp6ftjl7u3eogTYfFYwQUhog+uLifowTJ cx6p7Crq0yCdGAx70A0RemM93kCmkdNtW/Ei8mwwQiK5iF9Sm8pQpsjgW9/Jr8wb p+CBngANmDmkoRCxgzbxvcML2JyRXw0JNPrNpF6S64uatkJm9+4gcXpcWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDge05lTwyRppLGLCCUUZn6oTTs2MB8GA1UdIwQY MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt Mzk1NTk1OWVhZjgxLzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALotaVIk8 He/FBThPrMY0U7EyizZF2p98YY/+NS/sWmkOykZHKjVebS5nz55udsX4tqmwAAaJ mkOvNQUeuY+EjKWQHIUnkV2B53pfIYltGoeAMeQkW5FWmo+Kv8eFPZ3ieUvWidIX GFCzmpBnFJrWY3gjhbHWioVl8slNG22atBA82m5jL6Rgv98xU4vnyZUGrqWdG52y eFG4nrwLe+EI9l6vHCK8AwkE49+Z++a2EuieARjGUELkXh2FWICwm/qAf7ilYA1I pvPFFE8kuY3jLlyN3r2AIzI/4dv02G0hqft4ruyZfKRBAcOW2tf4tPEsDX/mx65R LiTKCNoIiton3g== -----END CERTIFICATE-----Generated at Sat Aug 23 13:50:24 2025 by rpki-client