$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft File: 0d4STg-K2059lXbOrjJfZo3SJLE.mft (raw, json) Hash identifier: mivkrmz3OshxBojOYiZlw0kZafEGcrszlqJc/ER7Xwo= Subject key identifier: C4:16:A3:47:DE:17:F7:FC:03:68:9B:99:41:89:32:C5:88:39:25:54 Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Certificate serial: 0198D6CE09D194C1ECFD72DB6150C1716365 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft Manifest number: 116A Signing time: Sat 23 Aug 2025 12:01:23 +0000 Manifest this update: Sat 23 Aug 2025 12:01:23 +0000 Manifest next update: Sun 24 Aug 2025 12:01:23 +0000 Files and hashes: 1: 0d4STg-K2059lXbOrjJfZo3SJLE.crl (hash: zw5WYF8VlNsmWz6vtMcf5DZ47Y3//s/oV/WDJzIjeP8=) 2: 6caVUV-TGB9bU55p1ya71OWBwvg.roa (hash: c0tRExOUVeBF8+Pq6PhYarD4KHj6+N7f0p/w2jdUK80=) 3: GE6nRoMuniMWGyv11YMLRPKemVU.roa (hash: RaYbPvfO1sHreb2/JnG9Opl+09YsllUwocY3Ihxf+gE=) 4: NAlGVYpV8OEmdD2nIMiqn334k0M.roa (hash: XrkbVPgrR7sOnmYGzDR8m+MZN8NJUZRQwjZqOHkM5b8=) 5: TKBPQon04rYAhP4X9cU-tUEetrg.roa (hash: /AA2s0tS5WTloz8NFQB5jII0MJO7Q2yuaillrSQPLGw=) 6: dNqRqY6tmtgccI8cx_uJ4tWqiZA.roa (hash: g+K2hBhsL/swaozLRy4ek/JzzpG8kCplNhlD1lsyOeY=) 7: g8zmfO2HPSEN8YUDrAkY2r7Nlqw.roa (hash: uAg57JMTD8oD+ghOOtfACvdQoLeAHc5YjQ/CuCFoViY=) 8: hacEV-MoLT8z9KwMPWss3cGE7Ak.roa (hash: /ljDI2bMRna9vPYEiWkrDiOeR+IfW8BnSxXE9Vp7xXE=) 9: qnoXcobTtJZawYccy6q_j_ktEjQ.roa (hash: YgqRq2TALdrM9up57j8hrsz1UPh0HBnD1px4pxGN8rs=) 10: xiZp6eivWb7x_d9W-WC8kwhVWsI.roa (hash: GvxU73beqXLMBxGmaGGngexgQ65uQMfsvmeuizGIl8o=) 11: yv08EH90nRPgnJ4aLVioWHP74iI.roa (hash: wfa+cbtIfXj/VcabZ84otkiskAuSmrS6+55fqOkIL+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 12:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:ce:09:d1:94:c1:ec:fd:72:db:61:50:c1:71:63:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Validity Not Before: Aug 23 12:01:23 2025 GMT Not After : Aug 24 12:01:23 2025 GMT Subject: CN=c416a347de17f7fc03689b99418932c588392554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cc:b2:24:2d:88:03:33:c5:87:8e:1f:40:be: 4c:17:22:dd:9f:45:db:0e:95:71:b4:5a:51:d1:a8: 94:56:bb:4b:6a:51:84:b2:30:9e:02:b6:09:46:f7: 1e:3f:c1:19:b9:73:2e:a5:e1:e9:db:4d:49:01:f2: 47:58:6f:70:33:af:b3:d9:38:53:cd:dc:87:c0:33: 3b:60:b4:2e:e2:59:e3:71:f8:c5:7c:7a:77:c1:4c: 58:0f:da:db:47:54:6f:0d:fb:c2:eb:4b:cf:86:d7: 21:a5:0c:4c:33:11:0c:9e:03:8b:3f:ce:58:a7:5f: db:76:99:5a:0a:f8:6a:89:7d:bb:27:a5:0e:93:5f: 03:d7:0c:98:02:8e:ca:12:53:c6:37:25:a4:0e:9a: 8e:ab:d6:cc:56:fe:ec:ec:4b:f4:1d:ea:6d:c4:d0: 8a:1f:06:c3:25:99:a2:d6:80:45:78:8c:17:ec:fa: 80:60:f3:c8:0c:d0:4c:57:31:2e:4a:bb:68:3d:53: 03:6c:13:1f:b5:a2:de:4e:dd:76:18:04:f8:c0:a4: ff:3b:85:8d:57:75:94:79:a4:65:19:3b:ee:17:ed: 8a:3c:cb:81:b2:8b:16:5c:11:44:6c:38:3c:2c:f8: 67:23:a3:3d:8f:58:b5:ec:5d:7e:43:8c:9b:2b:32: b7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:16:A3:47:DE:17:F7:FC:03:68:9B:99:41:89:32:C5:88:39:25:54 X509v3 Authority Key Identifier: keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:35:4b:8d:bc:8c:37:18:bd:12:d7:e3:33:50:26:b6:7f:56: c2:19:48:06:00:7a:7d:eb:90:26:e5:7e:81:df:a1:c5:10:5d: aa:40:e5:74:c3:34:d4:3a:34:2e:83:51:fe:fd:6b:d5:69:8e: ac:ad:2c:80:38:94:1e:a1:c5:ef:bd:c0:86:8f:f5:cd:f1:2b: 3c:82:ad:18:e6:22:3d:41:c7:6c:92:02:1b:ba:cf:1d:59:f6: b8:6d:d2:5b:fa:43:98:0c:de:eb:d3:4d:23:74:f6:86:6f:67: 13:c7:c5:c4:03:77:86:87:2b:38:bc:79:67:3d:f5:f8:65:95: d2:fa:4d:59:1c:1f:e0:e0:68:ad:88:94:d9:8d:20:3f:eb:ad: 3b:9f:d5:88:63:75:6a:3c:04:b2:3f:2a:e6:9d:5a:e1:7a:eb: c6:03:69:47:41:69:d4:24:29:73:d6:24:b8:80:05:9e:45:9e: ab:11:7f:48:87:aa:62:33:ba:ce:04:4b:49:39:84:a8:09:03: db:c5:cf:63:a9:8e:3c:f1:ae:9f:1b:9d:7b:08:c4:78:64:75: 40:8a:30:9e:a5:98:75:75:d9:87:a4:6c:c4:17:94:5b:41:c1: 51:42:08:0f:02:15:3f:9f:26:4d:06:8a:52:51:d7:9b:c6:17: 9e:5c:2a:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWzgnRlMHs/XLbYVDBcWNlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZGUxMjRlMGY4YWRiNGU3ZDk1NzZjZWFlMzI1ZjY2OGRk MjI0YjEwHhcNMjUwODIzMTIwMTIzWhcNMjUwODI0MTIwMTIzWjAzMTEwLwYDVQQD EyhjNDE2YTM0N2RlMTdmN2ZjMDM2ODliOTk0MTg5MzJjNTg4MzkyNTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysyyJC2IAzPFh44fQL5MFyLdn0Xb DpVxtFpR0aiUVrtLalGEsjCeArYJRvceP8EZuXMupeHp201JAfJHWG9wM6+z2ThT zdyHwDM7YLQu4lnjcfjFfHp3wUxYD9rbR1RvDfvC60vPhtchpQxMMxEMngOLP85Y p1/bdplaCvhqiX27J6UOk18D1wyYAo7KElPGNyWkDpqOq9bMVv7s7Ev0HeptxNCK HwbDJZmi1oBFeIwX7PqAYPPIDNBMVzEuSrtoPVMDbBMftaLeTt12GAT4wKT/O4WN V3WUeaRlGTvuF+2KPMuBsosWXBFEbDg8LPhnI6M9j1i17F1+Q4ybKzK3AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQWo0feF/f8A2ibmUGJMsWIOSVUMB8GA1UdIwQY MBaAFNHeEk4PittOfZV2zq4yX2aN0iSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTct NGY0YzliMzQzZTkwLzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTctNGY0YzliMzQzZTkw LzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGTVLjbyM Nxi9EtfjM1Amtn9WwhlIBgB6feuQJuV+gd+hxRBdqkDldMM01Do0LoNR/v1r1WmO rK0sgDiUHqHF773Aho/1zfErPIKtGOYiPUHHbJICG7rPHVn2uG3SW/pDmAze69NN I3T2hm9nE8fFxAN3hocrOLx5Zz31+GWV0vpNWRwf4OBorYiU2Y0gP+utO5/ViGN1 ajwEsj8q5p1a4XrrxgNpR0Fp1CQpc9YkuIAFnkWeqxF/SIeqYjO6zgRLSTmEqAkD 28XPY6mOPPGunxudewjEeGR1QIownqWYdXXZh6RsxBeUW0HBUUIIDwIVP58mTQaK UlHXm8YXnlwqIA== -----END CERTIFICATE-----Generated at Sat Aug 23 17:18:30 2025 by rpki-client