$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft File: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json) Hash identifier: UWcqoGKf7HO24gOQet3VqZb/k6JEcSHDAX7WCw5ZEqE= Subject key identifier: 1F:49:8E:97:B0:EB:4C:3F:54:42:54:25:BE:4C:13:BC:7D:AC:D3:89 Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a Certificate serial: 0198D54DCA2C74DF5DED7E728E93FA9945B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft Manifest number: 164E Signing time: Sat 23 Aug 2025 05:01:41 +0000 Manifest this update: Sat 23 Aug 2025 05:01:41 +0000 Manifest next update: Sun 24 Aug 2025 05:01:41 +0000 Files and hashes: 1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: uIAbTxoaHS/qAkc9EK8zE54HUD7+eViuOcB7i4D63rY=) 2: 8yyknMa8Qa7eji2_-25NgjHMwAs.roa (hash: 6EA1L4yNjiFkAAM6t2iZAA7ze8SV3lMCUhKNPg3vBUQ=) 3: 9QjCjG8fGXKK3KT9GGHW6MAVJzE.roa (hash: fSpz8n2jWyy0I2DDmxohRpaljlrP9nL5ZtLGzLKYuXU=) 4: H7En3yY1mH2yRYS167HpwA6AL5Q.roa (hash: FPJfC/52NavOyoGt4vZ9gio4MoEgpYKiZrTtURDieXE=) 5: K4UoliAJDnPT2oq72AyXanTYwdo.roa (hash: +5dNWwnlyTnn33FOhd8BsjDiWGBw/K7XK9sbIa7ROKQ=) 6: WjTYhnjd8JZNKcEGGyvScBW7ujg.roa (hash: xm9/rrII6hlVm8eUope1QTZ7F33LVLrGkQUEXzf0iIk=) 7: aWWA3-Hs7ng_GCTHIDmwQ5Rjbdg.roa (hash: isC8RltnKP3pjrz7ZvAls/aB0WZTll6Skvt9xKP3UkI=) 8: fPjaiW_RQVaw1K0jco_QmLpGo5s.roa (hash: agQGyFSnSoUI1Vx0MTRN/i+hHcE0hyBre8ShGUX7keA=) 9: sERIvqHcZj2yU32m6o5QSyQReME.roa (hash: cfxbkVfwNX0hfImDTJjGC48Jbi/ZuYY11AKoePEqH8k=) 10: zTLxL4slk5kZQfWpH_PY-TD7nNM.roa (hash: tzDHOIgeKhCjAOTBNpSwMn6WduYNfsmvzrDJbeHe5/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:4d:ca:2c:74:df:5d:ed:7e:72:8e:93:fa:99:45:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a Validity Not Before: Aug 23 05:01:41 2025 GMT Not After : Aug 24 05:01:41 2025 GMT Subject: CN=1f498e97b0eb4c3f54425425be4c13bc7dacd389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a3:fe:51:e1:d4:ed:63:60:8a:b5:79:be:a0: 73:bf:37:6b:15:bf:bd:26:ad:2b:69:7a:07:c9:f7: 9f:f8:e1:f5:be:12:0b:24:c1:8b:19:dd:f1:30:2b: 18:34:a8:28:4a:5a:cf:a7:e7:14:94:87:9e:94:62: b9:29:66:f8:44:e8:79:59:6b:9a:b3:d1:b6:7e:41: 52:bd:71:6e:cc:2d:7a:2d:f2:72:e5:7d:56:7a:ab: a9:13:81:01:85:6c:8b:e9:9a:5f:bd:0d:a9:41:b0: 9a:c2:77:31:8f:cc:f3:b2:3c:75:26:51:53:d9:63: 4f:c4:25:d5:8e:e7:f2:ab:5b:7f:7a:b6:44:e0:39: 2e:aa:6d:0c:7a:02:2c:b6:47:da:6c:c7:ca:dd:1f: 42:77:34:2d:dc:ed:7d:92:c0:92:dc:ef:e5:5c:ca: 95:7a:a0:2f:36:8b:eb:77:22:03:1e:36:c6:ff:0b: 82:84:48:98:78:92:0e:36:7a:c9:a0:c5:c9:19:33: 54:42:04:83:ca:f1:29:8c:9f:7e:91:ce:4d:f9:5e: e6:e9:1b:55:92:b9:3a:70:f0:b7:10:33:fd:08:94: 82:40:79:88:c2:74:99:3c:97:13:a8:11:ec:35:48: 54:74:c1:28:19:1e:84:71:e2:9a:2b:09:df:fb:33: 2e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:49:8E:97:B0:EB:4C:3F:54:42:54:25:BE:4C:13:BC:7D:AC:D3:89 X509v3 Authority Key Identifier: keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:f6:67:3a:3e:d6:75:78:aa:ed:20:5f:e5:97:2c:b5:ed:12: 9f:7f:e7:57:cf:ab:73:1f:ce:43:99:7e:9f:e5:e0:c7:b4:0d: e1:9e:48:81:27:1a:8a:8c:eb:0e:83:f4:2f:06:a5:d7:4a:73: 06:f0:a3:9a:bd:5b:a9:fa:0c:e5:e9:94:a1:f6:65:07:a5:72: b1:96:87:a6:18:ce:4f:90:5c:db:83:49:3b:cb:34:f1:c5:cb: eb:9c:8d:23:83:2b:6a:ba:5f:b2:23:d2:e9:11:07:8c:f2:ab: d0:c9:e6:75:22:f0:09:c6:a2:a4:2c:fb:0a:cb:e7:0b:d3:74: 69:16:2d:8c:ff:cc:1d:75:65:bd:2e:b8:14:9d:f7:7e:05:3f: b2:3e:2f:58:bb:50:cf:44:fd:df:19:04:01:bc:2a:0b:dc:d7: 2b:41:69:b3:ba:9e:f1:be:16:d6:b0:b1:67:de:56:42:ad:43: bf:64:20:86:f7:8b:78:ae:87:38:4b:e1:36:1c:c4:09:90:d5: b0:d5:b0:6b:4f:36:24:64:be:1c:e1:4b:6b:9e:ae:25:10:ca: 22:7d:a3:af:ce:45:5a:13:0b:f0:d5:9f:31:91:16:95:94:73: be:7f:e6:dc:a3:d9:31:a8:a4:5c:ae:2f:9d:b9:b8:61:01:54: f9:db:8c:64 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZjVTcosdN9d7X5yjpP6mUWyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjU1NGE4NTZhNDIyYjA2MWFlNjRjNTc3NjMwZjkxZDQw OGNkNGEwHhcNMjUwODIzMDUwMTQxWhcNMjUwODI0MDUwMTQxWjAzMTEwLwYDVQQD EygxZjQ5OGU5N2IwZWI0YzNmNTQ0MjU0MjViZTRjMTNiYzdkYWNkMzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKP+UeHU7WNgirV5vqBzvzdrFb+9 Jq0raXoHyfef+OH1vhILJMGLGd3xMCsYNKgoSlrPp+cUlIeelGK5KWb4ROh5WWua s9G2fkFSvXFuzC16LfJy5X1WequpE4EBhWyL6ZpfvQ2pQbCawncxj8zzsjx1JlFT 2WNPxCXVjufyq1t/erZE4Dkuqm0MegIstkfabMfK3R9CdzQt3O19ksCS3O/lXMqV eqAvNovrdyIDHjbG/wuChEiYeJIONnrJoMXJGTNUQgSDyvEpjJ9+kc5N+V7m6RtV krk6cPC3EDP9CJSCQHmIwnSZPJcTqBHsNUhUdMEoGR6EceKaKwnf+zMuSwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFB9Jjpew60w/VEJUJb5ME7x9rNOJMB8GA1UdIwQY MBaAFPglVKhWpCKwYa5kxXdjD5HUCM1KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DVlVxRmFrSXJCaHJtVEZkMk1Qa2RRSXpVby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNm LTk2NWQ2ZDYwM2JmYS8xLzEtQ1ZVcUZha0lyQmhybVRGZDJNUGtkUUl6VW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRmLzk0MzdhMi0wN2U2LTRlNmEtYWEzZi05NjVkNmQ2MDNi ZmEvMS8xLUNWVXFGYWtJckJocm1URmQyTVBrZFFJelVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfZn Oj7WdXiq7SBf5Zcste0Sn3/nV8+rcx/OQ5l+n+Xgx7QN4Z5IgScaiozrDoP0Lwal 10pzBvCjmr1bqfoM5emUofZlB6VysZaHphjOT5Bc24NJO8s08cXL65yNI4Mrarpf siPS6REHjPKr0MnmdSLwCcaipCz7CsvnC9N0aRYtjP/MHXVlvS64FJ33fgU/sj4v WLtQz0T93xkEAbwqC9zXK0Fps7qe8b4W1rCxZ95WQq1Dv2QghveLeK6HOEvhNhzE CZDVsNWwa082JGS+HOFLa56uJRDKIn2jr85FWhML8NWfMZEWlZRzvn/m3KPZMaik XK4vnbm4YQFU+duMZA== -----END CERTIFICATE-----Generated at Sat Aug 23 11:28:43 2025 by rpki-client