$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft File: jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json) Hash identifier: Z2Ismy4aq5FrH/LNhGGt7rBXdyShdACaYaWjrtqBFmU= Subject key identifier: 06:5C:67:AE:DF:C4:65:2C:5D:39:B7:C3:AD:C8:76:AA:FA:E8:4C:46 Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Certificate serial: 0198D5BBB28A5CA2156301EF407AC0F5B9E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft Manifest number: 15E9 Signing time: Sat 23 Aug 2025 07:01:44 +0000 Manifest this update: Sat 23 Aug 2025 07:01:44 +0000 Manifest next update: Sun 24 Aug 2025 07:01:44 +0000 Files and hashes: 1: A3slZgyg9eemzONzeM4ZjQZOkQA.roa (hash: X0hOJW7H3OQv8gNe/Scffw0tX7rp3lfITg3c2bDp62I=) 2: Dyi32KlOskocQHPe6FUF7ELQs5U.roa (hash: D3EF+UreJY6p0ckzuksgWXVvYetF6sITxKDGv/w2L0k=) 3: FJEFcX2c3QiytgwJXtBXdfXF7AQ.roa (hash: wDOQFjMrdpmJOwUI55qSC810FFGrsaY4QPcOoJKWykM=) 4: G_noKzntiWHLaHSdta1FputJESM.roa (hash: 76HBYH18Q5+wfRzE5ydGp21BC62rcsuS2tSvCzBrWp8=) 5: K9IKE8UzWzIlRqgdm5DBscj4DXI.roa (hash: TmNOvsKyJxclTHoJrrP+Wz2lJl3QKp06vZRtwf2Wkwo=) 6: Orf0-crrS-m0d2xw75OekVLRhcU.roa (hash: NyC6YqKt0FNmC1unp3jevt47/gr2Ss5dzqvXJGD2AjU=) 7: THZGRo10wjMlm6DbRUy7KjrwfkM.roa (hash: 9FjGohVB5WEFkwBSNZEgEcooaudVJnnxxDK2Jy9/LgI=) 8: VmEKVuU_uT-v34QUxuvTEoMoaug.roa (hash: lCfgs7Wts05rdP9N+OaYxsLVxOabAGR5SUtGArrm95M=) 9: Vxz_brs8mMP8pyfBjMG6SqLCoLA.roa (hash: InPdcQtGkZTGLva52kv6ADnfkbCulTXgK4jOcLs8G7M=) 10: Xmin5XG-kRl49Vt7ZEcTgSLDhDM.roa (hash: DHMC7YXYfDSAA2x6JnOvMwJT1zdpAymlypp6F1bKmgY=) 11: Yfzph1m23vmbClyvIoORpS1CW-E.roa (hash: SuwU2G9eYZ/n+GS6xB/GEsh3UziEYPdyi1WD5kRpjAo=) 12: _vcj5hH5PQmqE-mf4-B7kcWGpfg.roa (hash: ReLlnYnzQbiQ5Pk/0fIjBSPY1fpdoMBMJpSnkiSreWk=) 13: d-sWN4azI8sU7mlb0U-920Rsmtc.roa (hash: eiusVr40X1jFuIAj+CFi96eXy2bKXAQXnB20dKkv/70=) 14: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: +ejsJqY8zkDfHxB7n2ZPGgbRrusFINBmOFtAhA27CAM=) 15: mwm5rC4rfoUfkUGj1keywZQhhGw.roa (hash: dDwtNYt9WubuetSqef0LQakniH0rgBVhQK32OI1f1fU=) 16: nyxtNnWsxM3-5IIVvMZ44cQVEYU.roa (hash: ub8VtVKtgWVEPS0rlKsjT0ZjeuiFnfLTw/tC6ZpW/Vo=) 17: v5kzcztD_Zc4DwbwnN4YfKR9YoA.roa (hash: 33e8kQ++AVlCN79vtcp+1+C+oGUNBxplYHYOGaRMl58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:bb:b2:8a:5c:a2:15:63:01:ef:40:7a:c0:f5:b9:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Validity Not Before: Aug 23 07:01:44 2025 GMT Not After : Aug 24 07:01:44 2025 GMT Subject: CN=065c67aedfc4652c5d39b7c3adc876aafae84c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ae:f7:f6:c3:a7:41:eb:c4:8f:f5:ef:6c:d0: 79:35:9b:01:29:49:5b:bc:b2:a1:c8:a7:48:09:77: cb:3a:57:72:74:9a:7a:cd:43:09:53:1f:c6:67:fe: c5:b2:4e:d9:c3:e1:b8:19:b4:e0:38:1f:e2:c1:d1: a9:c5:1d:4a:24:62:77:e3:fc:8c:52:29:b6:99:93: 04:bc:ac:70:d6:2f:91:3a:73:45:bf:64:e8:2a:40: d5:67:ea:0b:5f:d2:42:2f:f5:34:9c:8c:cd:77:a1: ea:15:4b:e3:36:88:39:c1:3f:f1:eb:81:51:2a:3e: 43:73:f3:d4:1b:9e:fe:76:f8:a3:51:ed:ec:40:8e: 73:a1:74:ca:79:61:eb:3d:69:d3:b4:d6:fb:84:14: d2:2e:07:cc:61:f2:88:ab:5a:a7:a3:9c:39:34:01: 85:c0:c6:25:09:e1:73:f3:89:a6:16:8b:2d:8d:b4: 62:bc:c6:a8:98:e8:b2:7f:8c:dc:2e:67:7a:37:d6: 8c:77:8a:40:c7:6c:f7:00:5a:7b:52:07:91:6c:c7: 88:67:08:a9:fa:b1:96:d0:46:85:8f:c7:87:38:6d: a9:3a:3d:d2:b3:f5:94:f5:7d:d1:d2:1d:4b:3f:19: df:b9:94:16:81:cc:59:0f:eb:85:cf:23:f6:68:30: cd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5C:67:AE:DF:C4:65:2C:5D:39:B7:C3:AD:C8:76:AA:FA:E8:4C:46 X509v3 Authority Key Identifier: keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:9a:f7:6e:a3:66:54:61:d7:05:de:7b:fc:5f:2b:c3:a1:09: f2:dc:07:0d:96:45:5b:24:47:eb:4b:c6:b9:91:3c:e5:99:d6: 6a:59:30:11:8a:41:64:3b:1c:61:98:77:07:02:3a:cc:ff:f1: 17:97:d9:66:5d:93:3d:b0:d0:15:13:50:13:26:a0:d0:99:57: ee:ae:dc:5d:fb:32:74:64:e2:ac:6d:a9:ce:ce:5b:b5:80:c3: e5:aa:3f:a5:37:8b:94:1a:ad:d8:98:bd:64:aa:68:c3:99:e5: a7:d9:1d:c6:65:91:9b:c1:aa:05:3a:e6:c1:5f:8b:e1:12:1b: f7:97:70:3b:c5:4a:ec:ca:c3:99:94:e3:00:a5:85:f8:79:97: 07:0b:cc:86:97:da:94:a4:02:ff:62:68:87:00:c9:e0:19:a0: 20:c8:db:55:20:a1:86:39:be:f0:20:80:34:25:c2:68:7c:db: 45:49:2a:d7:c7:3d:78:f2:cb:9c:df:0d:18:2b:3b:53:21:9c: fd:40:1c:89:5c:9d:40:ba:66:a7:33:15:66:7a:ce:d2:d5:48: cc:e7:2b:52:2a:74:5d:86:66:59:a9:85:46:fb:e3:73:99:38: 08:10:98:fe:23:bc:ce:ab:54:a5:69:f2:6b:51:01:ba:04:33: 67:2e:da:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVu7KKXKIVYwHvQHrA9bnmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl NjNjMTMwHhcNMjUwODIzMDcwMTQ0WhcNMjUwODI0MDcwMTQ0WjAzMTEwLwYDVQQD EygwNjVjNjdhZWRmYzQ2NTJjNWQzOWI3YzNhZGM4NzZhYWZhZTg0YzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra739sOnQevEj/XvbNB5NZsBKUlb vLKhyKdICXfLOldydJp6zUMJUx/GZ/7Fsk7Zw+G4GbTgOB/iwdGpxR1KJGJ34/yM Uim2mZMEvKxw1i+ROnNFv2ToKkDVZ+oLX9JCL/U0nIzNd6HqFUvjNog5wT/x64FR Kj5Dc/PUG57+dvijUe3sQI5zoXTKeWHrPWnTtNb7hBTSLgfMYfKIq1qno5w5NAGF wMYlCeFz84mmFostjbRivMaomOiyf4zcLmd6N9aMd4pAx2z3AFp7UgeRbMeIZwip +rGW0EaFj8eHOG2pOj3Ss/WU9X3R0h1LPxnfuZQWgcxZD+uFzyP2aDDNiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZcZ67fxGUsXTm3w63Idqr66ExGMB8GA1UdIwQY MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt YmE3NzFmZmQyNjljLzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5r3bqNm VGHXBd57/F8rw6EJ8twHDZZFWyRH60vGuZE85ZnWalkwEYpBZDscYZh3BwI6zP/x F5fZZl2TPbDQFRNQEyag0JlX7q7cXfsydGTirG2pzs5btYDD5ao/pTeLlBqt2Ji9 ZKpow5nlp9kdxmWRm8GqBTrmwV+L4RIb95dwO8VK7MrDmZTjAKWF+HmXBwvMhpfa lKQC/2JohwDJ4BmgIMjbVSChhjm+8CCANCXCaHzbRUkq18c9ePLLnN8NGCs7UyGc /UAciVydQLpmpzMVZnrO0tVIzOcrUip0XYZmWamFRvvjc5k4CBCY/iO8zqtUpWny a1EBugQzZy7ajQ== -----END CERTIFICATE-----Generated at Sat Aug 23 14:07:54 2025 by rpki-client