$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft File: I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json) Hash identifier: fRwScP+API4sqBSEjOsSGPHRrxupTTaBkxUKnsVAQKI= Subject key identifier: 41:E2:4C:94:F5:77:02:A2:ED:B9:67:4F:EA:B0:65:44:87:FC:46:37 Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 0198D4729B393F86C9BD9B1A0E4CF05A889E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft Manifest number: 0C89 Signing time: Sat 23 Aug 2025 01:02:17 +0000 Manifest this update: Sat 23 Aug 2025 01:02:17 +0000 Manifest next update: Sun 24 Aug 2025 01:02:17 +0000 Files and hashes: 1: 2tV1T5SBsSkKar1qXX5FYlQ_B9Q.roa (hash: mGLI3Jd52qgMG50087Vl0ag+Rgi85Yfd8348tK3nJlQ=) 2: 9CjEL92KVQbBIKjAH6PWgI9d9kA.roa (hash: CxlINazLO+svbCxijVW6/kRGdkNG420xQ9K3jp5I7bo=) 3: 9Q-K0yA0D9jdkGXn7ifhVh2hLe4.roa (hash: BhOE66QanPWqjjysyWqBU6hcSToV2kkgkpmWedK9Plo=) 4: BKpPZ6YhMA786wWelQvZ2FdIeg0.roa (hash: CY94cVx1ALq/cp1lEiwu3JzO7Vk53LXHozpiwU2ifHA=) 5: Gg5xBTPmG5wIfgvjDfofedqUN2I.roa (hash: 44BexOUoVzM2f1vahHLSGVHdqnL6HKMPG3ed5PmM4sw=) 6: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: A6FS0zoTEukRYBXoKgUXFEq2t6nm8U8XmQwf4FzgW/M=) 7: KfWHlYFQnzVI2dPuoiLZqsly00A.roa (hash: hXW7e+AyYxT2PE5t8wRUT3atz/+WaH8gt4XQgdBp/mU=) 8: LtctFlc4GRCf3PIlxO5Sz70Upcc.roa (hash: 9oaNZGvrfQP+yRIBwwcg5U7jui8/sOP7Dz6ZLTuPIgM=) 9: LxwAd59gPAFiSwQsp6U5bWHTUIA.roa (hash: sV/jv6UM3eB6Fepo8zmoDeIxV8A3Cp94EBt2zbiu7+M=) 10: M73NPvrSZwGhIOTA9SbUvHl1x90.roa (hash: ijksxiMRPCxOAqaVav7odzv/IiE5tQUZQM4rRqWGT00=) 11: P4Ngmm4fscIJdjrtcZXwEWC6af0.roa (hash: Dgr4uE36WEf5Xw9kH8tw5qMQ+ewLeqeUvdPupgorbKg=) 12: gspg21PC-Bi6SGHc2DwZhP3SxPE.roa (hash: za152yl/mt+IWnj6LxRFIHIPMleLO2z2bWoNpUAX6js=) 13: nppvTips8XGcmj9VgC_a0xkLzT8.roa (hash: +FXbEH/4T1tplmkgWcOzmoIVkqvQhGApNb34NJo2CWU=) 14: o99Nup4psTKMh8kJYocwkh14uKQ.roa (hash: lhz5Qy+hcNJDmky6RtlI26JguzX0YUJj3nMqDKA0YLM=) 15: y9rvtnyXZQSaHcISGufCbgd9oMg.roa (hash: YtKgQZ+a37E4WaxSPAYmpHW8Z8QKRoCD8fhZcaauCRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:72:9b:39:3f:86:c9:bd:9b:1a:0e:4c:f0:5a:88:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Aug 23 01:02:17 2025 GMT Not After : Aug 24 01:02:17 2025 GMT Subject: CN=41e24c94f57702a2edb9674feab0654487fc4637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:29:2b:fb:f1:9f:05:76:4f:49:92:00:aa:ca: 54:b0:5d:6d:45:c2:12:7b:12:3e:4c:a6:e4:09:4d: ce:fb:e0:44:90:2d:41:32:1a:10:39:83:9f:87:b3: ef:a8:d0:b3:ea:ff:ce:80:a3:50:e0:98:9c:47:b5: 3a:6a:bb:63:9f:53:6a:8c:9c:e8:ea:c4:e6:0f:51: f1:97:7a:ce:2b:07:e9:c4:3c:26:21:87:bb:10:fb: 38:b1:b0:28:b1:28:c1:f7:b4:2f:43:69:84:30:7a: 07:82:a9:63:a2:99:59:e4:a8:b6:d3:c2:59:90:09: c9:ef:ed:89:d3:ee:2c:41:27:ce:a5:38:30:65:ed: 2d:91:a7:26:88:de:39:3c:53:10:0f:c6:ce:a6:35: 2e:0a:24:b1:ed:a6:5e:7a:0f:95:89:6c:75:2c:ba: 2d:d8:3f:73:b2:2a:72:a0:65:93:e2:30:ae:81:84: 3f:0e:8a:1d:5c:26:dc:98:42:df:93:81:8d:59:76: 4f:83:14:d3:92:db:2f:c9:7f:d1:aa:8e:ba:de:b2: c2:75:72:16:51:b3:b7:d2:45:c3:74:2b:d2:48:02: 0c:ab:5d:e1:8a:58:7b:4f:bd:ca:7e:eb:e4:59:cf: 3d:e7:df:8c:92:30:8b:5e:0f:73:e2:bd:83:77:0b: 14:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E2:4C:94:F5:77:02:A2:ED:B9:67:4F:EA:B0:65:44:87:FC:46:37 X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:f8:90:7d:a3:bb:be:81:55:47:61:dd:61:ec:c3:47:54:6d: 5e:b9:1c:51:ad:f5:40:ba:30:d5:5a:ad:54:63:c0:98:43:c1: cf:14:17:8a:e2:53:07:43:ec:f3:6c:00:96:19:8e:43:19:b9: 84:93:31:14:b0:b8:17:23:08:0c:58:d8:ad:05:95:44:71:32: 4a:be:de:90:d6:bc:42:99:df:07:ea:59:a9:c7:59:38:ea:53: 74:f6:16:27:92:b6:b6:32:91:da:a6:0b:47:fa:84:f5:ef:f0: 10:5c:f1:96:91:9a:93:53:55:fb:f3:52:c6:5f:6b:69:d1:10: 97:8c:e7:28:91:ea:63:2e:b7:c8:7a:b4:fe:dc:16:23:78:7b: 67:9b:e8:4e:fe:23:a1:1e:31:84:e4:96:cb:d0:a4:7c:f1:a4: ab:a0:92:78:bd:89:6e:9d:9c:08:82:01:ad:b3:9c:21:fb:6f: 4d:b4:dc:e0:10:54:16:bf:53:b9:af:fd:27:cb:aa:ab:b0:ea: 86:8f:d8:6c:e7:dd:77:66:95:8c:e9:10:a2:86:03:77:fb:b0: 7e:57:fd:68:23:24:c3:1a:ca:75:99:73:bb:32:7f:2d:82:26: c2:9e:21:19:18:92:1f:ff:db:a5:ac:7f:24:18:ed:18:79:44: f1:bc:18:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUcps5P4bJvZsaDkzwWoieMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjUwODIzMDEwMjE3WhcNMjUwODI0MDEwMjE3WjAzMTEwLwYDVQQD Eyg0MWUyNGM5NGY1NzcwMmEyZWRiOTY3NGZlYWIwNjU0NDg3ZmM0NjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ykr+/GfBXZPSZIAqspUsF1tRcIS exI+TKbkCU3O++BEkC1BMhoQOYOfh7PvqNCz6v/OgKNQ4JicR7U6artjn1NqjJzo 6sTmD1Hxl3rOKwfpxDwmIYe7EPs4sbAosSjB97QvQ2mEMHoHgqljoplZ5Ki208JZ kAnJ7+2J0+4sQSfOpTgwZe0tkacmiN45PFMQD8bOpjUuCiSx7aZeeg+ViWx1LLot 2D9zsipyoGWT4jCugYQ/DoodXCbcmELfk4GNWXZPgxTTktsvyX/Rqo663rLCdXIW UbO30kXDdCvSSAIMq13hilh7T73KfuvkWc8959+MkjCLXg9z4r2DdwsUkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHiTJT1dwKi7blnT+qwZUSH/EY3MB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtviQfaO7 voFVR2HdYezDR1RtXrkcUa31QLow1VqtVGPAmEPBzxQXiuJTB0Ps82wAlhmOQxm5 hJMxFLC4FyMIDFjYrQWVRHEySr7ekNa8QpnfB+pZqcdZOOpTdPYWJ5K2tjKR2qYL R/qE9e/wEFzxlpGak1NV+/NSxl9radEQl4znKJHqYy63yHq0/twWI3h7Z5voTv4j oR4xhOSWy9CkfPGkq6CSeL2Jbp2cCIIBrbOcIftvTbTc4BBUFr9Tua/9J8uqq7Dq ho/YbOfdd2aVjOkQooYDd/uwflf9aCMkwxrKdZlzuzJ/LYImwp4hGRiSH//bpax/ JBjtGHlE8bwYnA== -----END CERTIFICATE-----Generated at Sat Aug 23 10:28:26 2025 by rpki-client