$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft File: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft (raw, json) Hash identifier: s7ivg2i4JlsTlOGRwHNLBcPQZAHYCkMexCrbzI3JTNk= Subject key identifier: 28:22:0D:F0:1C:41:6E:4E:E7:42:78:71:D0:EC:8F:FA:E7:1A:2E:74 Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Certificate serial: 0198D5163ECF09E44F1D947DA930FC934F18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft Manifest number: 0474 Signing time: Sat 23 Aug 2025 04:01:01 +0000 Manifest this update: Sat 23 Aug 2025 04:01:01 +0000 Manifest next update: Sun 24 Aug 2025 04:01:01 +0000 Files and hashes: 1: 1-WZZnjR8DlZqLUibcRUcYzm0QDU.roa (hash: /lrkBjM9dGMr6D7JGPVc5syjsFBtCzanEGLfhb4dKM0=) 2: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl (hash: quMofGWzf3h4oWQoHpsi2gtj5RXNxp6p/5+2ckVH/Og=) 3: 3jZyUpaNiuxwzYQ21tChGVq7yOY.roa (hash: rlRJ/UNIhVQKGyw4Wr/cDFs+VO81jRk6SUephZD3g4o=) 4: 5khyx2A9d0Q0e3huYGosj5KCOlo.roa (hash: m/iIxHfeWDlWWpGAIqzgFb7iOcTekZb0i9Y2aBX+dy4=) 5: 7cUCY2EysYK09Y_F1tsMsp_B8MU.roa (hash: el4sZWuoJZOOcj14KO5Yq16IPPIz+c0KckgEteIx4YM=) 6: ILbeank0F3xhLsgBl0NZfpBZFig.roa (hash: 8RlSwtQK5lhGbhOtyX4cacpgfYuG3exGirW2aa5+FLI=) 7: KBQWtgPCMeq_IbONzoF64FnlzwE.roa (hash: EZ3seNeYjAQFpAfGwhXlV+Wya2vQO7lfYcVB84EkqA4=) 8: PBiom43THD1F1SBGVmDFN9WwnMo.roa (hash: EVRLL8Mxobz8XRwc26H2JAHWkuwMiYakvll8d/79CJQ=) 9: TnqWiZSrJP5FZLgDlXk-iaFi5k8.roa (hash: 8gjKeaSL9Im1mKl/CKczQDSLzI2OEBo3YD5qQoY5RT0=) 10: VXGu7cRy3TUPyfgbIf2vopAF1Lc.roa (hash: 40vRMPsPFPCFnDUP/ikEgH9v+gi1iVOQkLoxtLSkOqE=) 11: ZaSQVTZm2f4ebc71HIkhrpqqsuk.roa (hash: X8/L0T6q0bM6s++7u2MQIu4RlHWQNdJcKAvE7bH3VP4=) 12: jldP_NkgEKrLmFaYQtB6TuhGzRs.roa (hash: Cz3xmiLxKccg4wAv608JqhvYxIHIutFBcyhT8Ond0Zs=) 13: oQk2rT9-TmTMiTawX34MBI0QTrc.roa (hash: 6J7fvMBzz5wnq8Q655iOLvmHY5jKT0LznvTL3IrQ8Xw=) 14: unsmmkYBpbXrCubGO7XS6N7I7QM.roa (hash: /TaQOoUPP+hWic0pvVLJBHflkZLzIc8T4AFkDEL7yKk=) 15: w9Z-5nLehvUlBeOI2h5dSoEBLSw.roa (hash: dyC69X2s5yoLrmCLq7pBQHExLj0vbp1A/uwW5wlqEug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 04:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:16:3e:cf:09:e4:4f:1d:94:7d:a9:30:fc:93:4f:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Validity Not Before: Aug 23 04:01:01 2025 GMT Not After : Aug 24 04:01:01 2025 GMT Subject: CN=28220df01c416e4ee7427871d0ec8ffae71a2e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:43:3f:1d:9c:52:12:66:fb:f4:d6:bf:68:dd: 1d:ef:e1:8d:3c:7a:78:90:d6:ef:35:5e:d1:46:18: 59:bb:d5:79:ab:81:9c:e3:12:cf:63:02:b0:f9:27: 76:90:da:e3:da:41:0b:59:d0:16:64:66:4a:90:5b: a1:2f:d7:bb:e8:b7:87:eb:40:65:d4:d6:c7:bf:b6: 3a:6a:fb:04:0a:c9:69:9b:69:90:d9:7a:c0:97:1f: 1b:84:81:de:71:5a:77:76:96:dd:f5:3c:33:95:7d: 1a:81:82:88:cb:2e:c1:99:3f:9e:77:ed:1c:26:0c: 58:9c:38:32:d7:c1:22:64:39:31:83:e1:2f:87:45: b6:24:a6:5e:f8:67:3a:c2:22:e0:87:20:d5:3e:0a: bf:4a:a1:e8:33:e0:a8:da:21:80:36:d2:7d:06:47: 59:b6:8e:e5:00:be:a5:74:50:b4:ed:cd:aa:de:84: db:b7:77:74:56:cc:d5:e1:7b:a2:a9:23:13:56:f8: a3:24:a7:b1:6b:cb:08:30:cb:50:f0:75:2e:c9:83: 0c:63:95:eb:2b:62:40:0f:de:b1:8a:67:22:7f:5a: fe:70:d0:19:f5:ea:f3:c6:51:ea:4c:2c:cc:87:6d: c2:81:65:ff:08:95:cb:18:ae:24:b1:a7:0e:e4:82: 3f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:22:0D:F0:1C:41:6E:4E:E7:42:78:71:D0:EC:8F:FA:E7:1A:2E:74 X509v3 Authority Key Identifier: keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:07:b7:f2:c5:7c:c1:6b:c0:f1:a3:2c:77:6c:7a:fd:47:c5: fc:b5:b1:0e:1f:60:65:f4:0a:07:c3:86:24:4d:a7:54:0e:81: 62:a0:03:6e:bd:23:cd:c5:26:9c:f2:5b:b9:41:8b:af:d2:57: 2f:60:aa:e6:ac:78:0e:85:75:29:92:b6:39:e5:46:84:6e:f2: ab:9a:ce:46:28:7a:a5:11:6f:6f:6d:02:57:e9:54:29:34:7a: 46:09:87:eb:72:98:03:1c:cc:4e:42:a4:92:87:86:c6:59:d3: 35:68:a4:e3:cd:59:bc:96:8f:5e:3e:4b:34:89:ff:ad:16:47: d9:8e:5f:9b:99:11:76:17:55:c9:cc:bf:b3:84:bc:52:f6:c0: 3f:8e:d1:e9:06:e8:72:0b:12:5c:1f:ac:ef:7f:f4:51:e3:8e: c4:a4:e9:f2:12:a4:7e:7f:41:38:33:aa:f7:e6:ca:06:83:81: bc:12:1b:69:22:ad:ff:a4:b6:a2:e4:93:65:3e:c0:85:1f:fd: 28:fd:ed:d7:57:10:82:90:be:5d:7d:a0:c7:56:0f:b6:5b:83: 46:6a:54:6b:d3:94:ac:4f:bb:ed:a8:f3:37:1b:98:78:2f:9f: ab:5c:72:48:62:44:59:14:df:89:2b:59:ed:53:28:a6:2d:16: f2:27:87:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVFj7PCeRPHZR9qTD8k08YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm MDIwMjAwHhcNMjUwODIzMDQwMTAxWhcNMjUwODI0MDQwMTAxWjAzMTEwLwYDVQQD EygyODIyMGRmMDFjNDE2ZTRlZTc0Mjc4NzFkMGVjOGZmYWU3MWEyZTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukM/HZxSEmb79Na/aN0d7+GNPHp4 kNbvNV7RRhhZu9V5q4Gc4xLPYwKw+Sd2kNrj2kELWdAWZGZKkFuhL9e76LeH60Bl 1NbHv7Y6avsECslpm2mQ2XrAlx8bhIHecVp3dpbd9TwzlX0agYKIyy7BmT+ed+0c JgxYnDgy18EiZDkxg+Evh0W2JKZe+Gc6wiLghyDVPgq/SqHoM+Co2iGANtJ9BkdZ to7lAL6ldFC07c2q3oTbt3d0VszV4XuiqSMTVvijJKexa8sIMMtQ8HUuyYMMY5Xr K2JAD96ximcif1r+cNAZ9erzxlHqTCzMh23CgWX/CJXLGK4ksacO5II/TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgiDfAcQW5O50J4cdDsj/rnGi50MB8GA1UdIwQY MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt NGI2YzFjZjlmZTRmLzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAege38sV8 wWvA8aMsd2x6/UfF/LWxDh9gZfQKB8OGJE2nVA6BYqADbr0jzcUmnPJbuUGLr9JX L2Cq5qx4DoV1KZK2OeVGhG7yq5rORih6pRFvb20CV+lUKTR6RgmH63KYAxzMTkKk koeGxlnTNWik481ZvJaPXj5LNIn/rRZH2Y5fm5kRdhdVycy/s4S8UvbAP47R6Qbo cgsSXB+s73/0UeOOxKTp8hKkfn9BODOq9+bKBoOBvBIbaSKt/6S2ouSTZT7AhR/9 KP3t11cQgpC+XX2gx1YPtluDRmpUa9OUrE+77ajzNxuYeC+fq1xySGJEWRTfiStZ 7VMopi0W8ieHiA== -----END CERTIFICATE-----Generated at Sat Aug 23 14:06:16 2025 by rpki-client