$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft File: dOPDNpcglLGowT1BgWhX0Zejquk.mft (raw, json) Hash identifier: +TiGhXQxPEkQPbMt+byXY6MRtp5lHWLdkb/VLlsw3UY= Subject key identifier: 52:03:9C:4F:F8:C0:C3:96:3E:4B:4C:F5:69:44:28:2D:BB:B4:D0:EF Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9 Certificate serial: 0198D515C3B3167130E79CD6CA3CD4E0DA85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft Manifest number: 136E Signing time: Sat 23 Aug 2025 04:00:29 +0000 Manifest this update: Sat 23 Aug 2025 04:00:29 +0000 Manifest next update: Sun 24 Aug 2025 04:00:29 +0000 Files and hashes: 1: 1jpCyAps9bajWpTTNjuuJqkvGNw.roa (hash: QdNF4dszmqN93C6OMT7lYcdmskEQt8kQtHTCFEeRLK4=) 2: 5TFH_eW2qIWRYXLPVqdNkYBm8RY.roa (hash: NHd1FZ0Cj9dSpCZXcpxcSuivwawk/XLiDV5hFVcK8gs=) 3: B-IzhwSKXhHkz88nSETOGD9yRG4.roa (hash: YnLpp9fGmyMsduAjb3ebFR0Lsy/94n7A+dxRiyz9BXo=) 4: LfVA7yFSUE0qhq_HYTK38H6PAlY.roa (hash: Kppg3VjpkBzGqtZq9DRkl+9W1VehTNUgM7T4eg/Jh/E=) 5: OI1U9tyTexI3zFMxN2_p-wXJb6Q.roa (hash: jEa8AhX1E/rcgU1N48+cRpXUd91VJFk6ahzuPB4XKow=) 6: UWwzSZwnxpR_r3Y4D6vttKdBBVs.roa (hash: 7svZa4xV7+uz3XJCftME26l72YGSUBkSe+OkDk5Vluk=) 7: VJ6MDr9v2VTJjopln-NK2ojxFwc.roa (hash: aCjSF+Bt+cDnTvcdibhV9s05hQuvY9LCYp3eMrgD2Ks=) 8: YOcpXFVJRTJW2caFAPTppkNQBuk.roa (hash: bsMm8G8+2Vegzn+c1SqEObi1wuYbeOXaQ994ZEYf674=) 9: a1U9llCdwrEqU4GkcwBsuwGny80.roa (hash: x9+7kA4QQzpZS4+gdNTWeXV2Ehq7i5FwV0w3Ws0zS7A=) 10: bilxvgHa_ortWdZiJoCPu9q2EO4.roa (hash: l/1X47j3OP5z+Rp05LuTXjyl7yZpgOm/aXT90ziTHDc=) 11: btX-zAe_zEJQ3ltM7sZKTKWNtzU.roa (hash: FXQNguGpvehosedHQRjCf06rJkvh5KY35ySN2Wig1dE=) 12: dOPDNpcglLGowT1BgWhX0Zejquk.crl (hash: a0rbIcmS4LeKlv0gTB2WLFJqlFm4I4QC7I51Sgoa30k=) 13: leLN7dUwqNQXTkicjPodaPNaHrA.roa (hash: /TZBYmyqPdbIBcWc+Ubi8mL2e3Sg1zgKUo/8XZMZsK8=) 14: ltEUPJ59iMmxTdNEYLGbM1Yq6jY.roa (hash: 4OyHOUV/gpG2mHKMCDQGjjKuCFHSFtOInlqympBF1Os=) 15: pzyfVcqGqM8oIh9yspKnplAOyo4.roa (hash: hsiUYyCYakxAYsQctvaT1faoOH457ARGeeeeMVZVUZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:15:c3:b3:16:71:30:e7:9c:d6:ca:3c:d4:e0:da:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9 Validity Not Before: Aug 23 04:00:29 2025 GMT Not After : Aug 24 04:00:29 2025 GMT Subject: CN=52039c4ff8c0c3963e4b4cf56944282dbbb4d0ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5a:59:42:50:52:00:44:ca:43:b4:cc:0b:91: 7c:49:31:c3:e3:28:db:8d:e7:7f:73:0a:8d:55:79: b7:d4:1e:24:07:d1:5b:7e:ef:0d:ae:97:17:8b:dc: 15:16:63:9c:18:e5:52:47:b1:b6:1a:14:2c:76:81: 3f:44:ca:37:65:1d:f0:d0:e7:c8:1b:1d:0b:98:27: ba:95:a1:af:9a:71:db:68:18:cb:b1:6a:d2:f5:aa: 31:d3:17:b7:27:5b:4d:ef:cb:8f:26:a5:95:9d:04: 85:e1:15:96:6e:e5:56:05:a4:ee:c3:b8:9b:d8:82: ad:5e:33:8c:a5:36:e8:5b:a3:e9:b5:f8:40:f3:8f: cb:81:25:11:34:17:60:00:ac:47:f3:e5:69:93:3f: b3:d5:fc:a2:26:3d:12:ab:e6:6c:f8:9c:5b:6e:e8: e4:01:1f:96:48:e4:4a:bc:c8:4b:70:3c:0c:03:72: c3:ea:b8:60:bb:cc:5e:ef:e6:68:1d:a4:a0:bc:65: be:dd:09:8d:51:2e:18:eb:cd:c9:8e:6b:c9:5f:f2: 35:64:6a:a4:8b:01:78:0a:63:eb:13:63:7b:d4:8d: c9:95:bd:78:98:84:db:a7:70:81:d9:f2:4b:2c:95: ad:88:9b:63:0c:cc:b7:9c:71:80:29:c8:30:6f:e1: 9a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:03:9C:4F:F8:C0:C3:96:3E:4B:4C:F5:69:44:28:2D:BB:B4:D0:EF X509v3 Authority Key Identifier: keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:5f:3d:96:fd:48:b3:33:30:87:5b:df:3d:90:6f:e3:c4:f0: 4d:38:50:30:4d:ad:1c:4a:fe:63:74:c0:47:e1:3b:87:32:f4: 50:f0:44:36:3b:c8:c6:46:28:b3:6e:23:e1:2e:1b:41:b8:e0: c2:43:fa:ee:49:22:4a:bc:ff:77:2c:87:f6:09:ac:71:a1:a4: f5:5a:8e:1e:ba:76:c4:3e:c8:84:22:69:3c:c4:0a:a4:ba:f3: c1:f7:60:81:e2:9d:95:2d:4b:0f:60:b0:00:00:c8:18:df:06: 54:b3:42:b9:a1:66:fc:89:f2:44:b7:49:5f:9e:81:ac:df:72: 16:4f:42:0a:15:f2:52:b0:79:16:4d:36:21:75:c2:ed:e4:f5: db:dd:f0:4b:73:20:8e:d4:72:ab:26:3a:99:c2:5a:dc:2e:60: c9:99:23:c9:90:17:08:67:05:eb:f5:e5:7f:55:ca:4b:fb:89: ce:7a:16:b5:ba:48:f4:48:aa:68:7a:74:82:91:3c:f2:6a:24: 4f:a1:d8:c9:ab:74:d3:4d:55:f6:f6:61:57:42:61:fb:87:65: a3:5e:0d:61:ae:5a:56:db:96:6d:20:42:0d:e0:2b:f5:6a:66: 7d:cd:22:18:f8:96:df:75:d5:dc:d7:9d:93:6f:ce:6e:04:1b: 4b:9a:5b:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVFcOzFnEw55zWyjzU4NqFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh M2FhZTkwHhcNMjUwODIzMDQwMDI5WhcNMjUwODI0MDQwMDI5WjAzMTEwLwYDVQQD Eyg1MjAzOWM0ZmY4YzBjMzk2M2U0YjRjZjU2OTQ0MjgyZGJiYjRkMGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1pZQlBSAETKQ7TMC5F8STHD4yjb jed/cwqNVXm31B4kB9Fbfu8NrpcXi9wVFmOcGOVSR7G2GhQsdoE/RMo3ZR3w0OfI Gx0LmCe6laGvmnHbaBjLsWrS9aox0xe3J1tN78uPJqWVnQSF4RWWbuVWBaTuw7ib 2IKtXjOMpTboW6PptfhA84/LgSURNBdgAKxH8+Vpkz+z1fyiJj0Sq+Zs+Jxbbujk AR+WSORKvMhLcDwMA3LD6rhgu8xe7+ZoHaSgvGW+3QmNUS4Y683JjmvJX/I1ZGqk iwF4CmPrE2N71I3Jlb14mITbp3CB2fJLLJWtiJtjDMy3nHGAKcgwb+GaQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFIDnE/4wMOWPktM9WlEKC27tNDvMB8GA1UdIwQY MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt YTZjNDllYjI4Mjg3LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3 LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC189lv1I szMwh1vfPZBv48TwTThQME2tHEr+Y3TAR+E7hzL0UPBENjvIxkYos24j4S4bQbjg wkP67kkiSrz/dyyH9gmscaGk9VqOHrp2xD7IhCJpPMQKpLrzwfdggeKdlS1LD2Cw AADIGN8GVLNCuaFm/InyRLdJX56BrN9yFk9CChXyUrB5Fk02IXXC7eT1293wS3Mg jtRyqyY6mcJa3C5gyZkjyZAXCGcF6/Xlf1XKS/uJznoWtbpI9EiqaHp0gpE88mok T6HYyat0001V9vZhV0Jh+4dlo14NYa5aVtuWbSBCDeAr9Wpmfc0iGPiW33XV3Ned k2/ObgQbS5pb7w== -----END CERTIFICATE-----Generated at Sat Aug 23 10:51:59 2025 by rpki-client