$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft File: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft (raw, json) Hash identifier: cW1x33+fxtKyZrJLVvoMFTbMlNwFEu3aOXzJm2v6YR4= Subject key identifier: A2:63:49:C5:BE:1B:50:B9:EE:6D:3A:99:CE:C3:A0:E1:E9:08:5C:F4 Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b Certificate serial: 0198D58363FB7073BFAF030638A44315FF8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft Manifest number: 1654 Signing time: Sat 23 Aug 2025 06:00:14 +0000 Manifest this update: Sat 23 Aug 2025 06:00:14 +0000 Manifest next update: Sun 24 Aug 2025 06:00:14 +0000 Files and hashes: 1: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl (hash: 85ssZiFfQKlNcB6q+WyMFitvQf5HcKx7GxzsNte9SmE=) 2: 2FKZPhg0yZwll-7IKKrQiY_2JZg.roa (hash: gHgBdXS8XWNL7U3Ymd+KumYNoM9Ez64AQgUONNJnO6M=) 3: Ml6MKIuGs5X6FYCoibWIrDM8sZw.roa (hash: sr8ii208yixvZe4Nt1vf4FirRpNYMo5v1lAxQmPyK4E=) 4: NeK3VE5xIVumcURQvZORGSezPug.roa (hash: Kyuhso1DU/JY4Cd8KqltzS/UkVVtl7rIX1KuhxLgmkQ=) 5: SAShV7Cx-3cRFcPWPoHPU7seh9k.roa (hash: lzRGc/kfVkESt27Rk5Rm2MTThTLX4bNiPJvrX6OzG4s=) 6: TWLMxWYadUOjpfWSoRjdz4gkQVQ.roa (hash: eJJWCwgtvt1cLj2rlNHb1YuUwHOAuKtSsp+SGbWPUGI=) 7: U2YIuXAyUCZOsR4Cw5PSPdwaU0s.roa (hash: gWdVxjtR19wt31Bo3G5JO46Z63mY8LolhR8kTQQgD5Q=) 8: WvZhz4-xli7Jg3AjUEb09s8yIcg.roa (hash: nyDmjCwaWeBGV6O57JlcDsH1rd4TtVrk7nDHN+GYZDc=) 9: kSLVwGt_NyDYhkUM69fkyKqLKhE.roa (hash: 4uQpl4b7ipDKF9oMjr4f401/xIMAMkUuha8dHxAMb/k=) 10: vDXI6zDZCtBj_jhc2X0hLjsgR8Q.roa (hash: z26aGtU0D7UYmGcPjOFI1fCBSEy79I6N0Y6rtSN2uVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:83:63:fb:70:73:bf:af:03:06:38:a4:43:15:ff:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b Validity Not Before: Aug 23 06:00:14 2025 GMT Not After : Aug 24 06:00:14 2025 GMT Subject: CN=a26349c5be1b50b9ee6d3a99cec3a0e1e9085cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f2:33:0e:cb:2e:5b:a0:63:24:28:dd:45:64: 85:38:60:cb:6a:e0:85:a9:57:6e:46:87:ec:30:fd: ca:04:88:d4:44:f1:32:8d:1a:47:cc:b6:fa:fb:49: 1a:bb:ec:66:46:76:ca:ce:81:1e:d4:13:93:01:9e: d4:65:70:87:b2:9d:e3:c5:25:3e:ad:2f:c8:2b:83: 37:38:94:12:ed:c3:cb:f4:d7:17:9e:cf:f7:7e:61: 1a:4a:2d:67:0f:a3:21:b1:8d:52:11:3a:80:47:a9: a5:45:62:67:86:44:a2:e8:b3:7e:11:1b:58:b8:7b: 55:f1:b7:6e:04:c9:6f:8f:bd:29:c5:a3:fe:56:4f: ee:9e:cc:a0:5b:60:81:67:fa:b6:75:d3:3d:c4:37: 02:6b:d8:ad:a0:5f:2b:4a:f6:f5:a7:f0:b2:0b:d2: 04:47:92:c2:80:82:de:38:88:0b:5b:6a:d0:19:96: 7d:b5:91:e5:4c:50:f4:90:dd:7b:1a:df:15:7e:c6: ad:22:8e:0c:4f:d7:06:a2:a6:4a:e4:92:6f:bb:ac: 8c:40:f2:e7:58:f0:c2:00:ce:57:9d:ca:8f:48:2f: b8:e6:4b:19:0d:b5:d7:63:a4:7a:f2:54:fd:6f:66: 8d:6d:20:f5:df:b7:0f:50:8f:16:57:67:d6:75:df: 85:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:63:49:C5:BE:1B:50:B9:EE:6D:3A:99:CE:C3:A0:E1:E9:08:5C:F4 X509v3 Authority Key Identifier: keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:e8:f4:9f:3d:f8:68:84:95:f0:76:ac:67:39:cd:a3:eb:e2: b4:73:4f:7d:a4:28:2a:18:41:14:64:32:55:76:3d:37:59:f2: 60:f8:4b:bd:e2:6f:3f:56:c6:b5:19:d2:3a:9e:3c:c2:04:cb: 99:52:96:40:b5:28:a9:e7:f5:72:bb:0f:01:c4:bf:f9:d4:87: 01:a5:59:43:c1:39:fe:d0:24:f3:b3:c2:9f:d6:0b:00:a3:ca: fc:72:af:49:eb:ad:dd:95:c0:21:be:c1:88:80:f7:8e:11:fc: b1:e3:f2:e2:74:53:d2:ae:6c:9a:3a:5e:31:05:49:4e:cf:b5: 90:92:63:ab:4c:f2:77:7c:26:8b:1c:6c:74:b3:cd:07:07:31: 93:7e:28:ff:e2:b3:b3:fe:05:1e:91:36:c6:ec:f4:9c:a9:dd: 80:57:17:73:cb:61:a4:5f:91:dc:16:f8:ea:0a:9c:c4:09:73: 43:38:1b:43:be:66:86:28:e9:da:ae:ac:6b:a6:48:88:89:5b: 7f:91:f1:84:a8:ae:d2:45:90:1a:8f:bb:8a:a0:d7:c7:99:0d: c9:a8:e1:4c:35:95:e0:a7:cd:9d:85:7e:fa:65:d6:9a:67:ca: 6f:1f:8a:03:e2:a3:fe:ac:cb:e5:2e:84:97:56:02:3e:5f:dc: 00:8a:62:c1 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZjVg2P7cHO/rwMGOKRDFf+MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZDcxMDBlNzdlZDkxMTlkNjZlMjMyMWJiNjcxMWQ3ZTc2 MDk4MmIwHhcNMjUwODIzMDYwMDE0WhcNMjUwODI0MDYwMDE0WjAzMTEwLwYDVQQD EyhhMjYzNDljNWJlMWI1MGI5ZWU2ZDNhOTljZWMzYTBlMWU5MDg1Y2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPIzDssuW6BjJCjdRWSFOGDLauCF qVduRofsMP3KBIjURPEyjRpHzLb6+0kau+xmRnbKzoEe1BOTAZ7UZXCHsp3jxSU+ rS/IK4M3OJQS7cPL9NcXns/3fmEaSi1nD6MhsY1SETqAR6mlRWJnhkSi6LN+ERtY uHtV8bduBMlvj70pxaP+Vk/unsygW2CBZ/q2ddM9xDcCa9itoF8rSvb1p/CyC9IE R5LCgILeOIgLW2rQGZZ9tZHlTFD0kN17Gt8VfsatIo4MT9cGoqZK5JJvu6yMQPLn WPDCAM5XncqPSC+45ksZDbXXY6R68lT9b2aNbSD137cPUI8WV2fWdd+FxwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKJjScW+G1C57m06mc7DoOHpCFz0MB8GA1UdIwQY MBaAFPrXEA537ZEZ1m4jIbtnEdfnYJgrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS10Y1FEbmZ0a1JuV2JpTWh1MmNSMS1kZ21Dcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvMDFkNDExLWQ5MTUtNDI3Ny04ZmUy LTc2YjBkZGEyYmYzZS8xLzEtdGNRRG5mdGtSbldiaU1odTJjUjEtZGdtQ3MubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzNlLzAxZDQxMS1kOTE1LTQyNzctOGZlMi03NmIwZGRhMmJm M2UvMS8xLXRjUURuZnRrUm5XYmlNaHUyY1IxLWRnbUNzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuej0 nz34aISV8HasZznNo+vitHNPfaQoKhhBFGQyVXY9N1nyYPhLveJvP1bGtRnSOp48 wgTLmVKWQLUoqef1crsPAcS/+dSHAaVZQ8E5/tAk87PCn9YLAKPK/HKvSeut3ZXA Ib7BiID3jhH8sePy4nRT0q5smjpeMQVJTs+1kJJjq0zyd3wmixxsdLPNBwcxk34o /+Kzs/4FHpE2xuz0nKndgFcXc8thpF+R3Bb46gqcxAlzQzgbQ75mhijp2q6sa6ZI iIlbf5HxhKiu0kWQGo+7iqDXx5kNyajhTDWV4KfNnYV++mXWmmfKbx+KA+Kj/qzL 5S6El1YCPl/cAIpiwQ== -----END CERTIFICATE-----Generated at Sat Aug 23 09:42:52 2025 by rpki-client